last executing test programs: 5.072190102s ago: executing program 0 (id=9420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000800)={0x3, {{0xa, 0x4e23, 0x4, @mcast1, 0xc18}}, {{0xa, 0x4e20, 0x4, @mcast2, 0x1}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70000000000036000000080001007063690011000200303030303a30303a31302e3b26e5d0793000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004011}, 0x200428c0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x13, r3, 0xdd9fe000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000000)="8b402ee21fe56c2b6423389213b45296ba0a11c495f0410fbd21993060274b473e8f9bda63dbeb2202d3866ed2d3963c859f32d0715e18b0307efcd440d4fd55c46ffec17fe57a69238b830ecadd8a0555103ec3c3ebde6be504bc79aa4675cd2ada5ddfcf4a61de976bb3f8ca", &(0x7f0000000080), &(0x7f00000000c0)="d46cc6eaf18dc3ae3e6df60902c3918c58", &(0x7f0000000100)="dff71ce646736fdbbe5581810fbcff5cde157e4fc4c8739577a63cebd20ca6ef86da643c66431cae30a0f028b4b295b40583e4f587ef8de113587c9ae258a4e3c99d9413bce97d", 0x5, r2, 0x4}, 0x38) r5 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) socket$inet_udp(0x2, 0x2, 0x0) 4.747762147s ago: executing program 0 (id=9423): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x100, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x22}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x5}}}}, @NHA_GROUP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.74273662s ago: executing program 0 (id=9433): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0xffffffffffffff60, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x4e, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x54, 0x1a, 0x800, 0x70bd26, 0x25dfdbfd, {0x1c, 0x14, 0x28, 0x1, 0x0, 0x0, 0xc8, 0xb, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0xb, 0xff, r2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2c}, @RTA_VIA={0x14, 0x12, {0x34fdb544288983fe, "daa0e832195e898867c954ad4a22"}}]}, 0x54}}, 0x0) 3.517338038s ago: executing program 0 (id=9436): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@private=0xa010102, 0x3507, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r3 = socket(0x2b, 0x80801, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='ip6gretap\x00', 0xa0102, &(0x7f0000000080)={@_ha_fsid={[0xb5e, 0xc]}, {0x6, 0x5, 0x240000, 0xffff}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x8}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x0, 0x328, 0xffffffff, 0x148, 0x0, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, &(0x7f0000000180), {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], 'virt_wifi0\x00', 'macvtap0\x00', {0xff}, {}, 0x1, 0x9c, 0x6, 0x1ee004b4ae711d46}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x7, 0x6, 0x0, 0xd, 0x400, 0x3142}}, @common=@mh={{0x28}, {"67b6", 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x19, @ipv4=@multicast1, @ipv4=@multicast2, @gre_key=0x4, @port=0x4e23}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffff00, 0xff], [0xffff00, 0xff000000, 0xff000000, 0xff], 'netdevsim0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x3, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1a, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@private2, @icmp_id=0x64, @icmp_id=0x68}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [0x0, 0xff, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], 'veth1_to_bridge\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x0, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa, @ipv6=@loopback, @ipv6=@mcast1, @port=0x4e22, @port=0x4e20}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "7dbc", 0x1}}, @common=@icmp6={{0x28}, {0x0, '9S', 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@multicast1, @ipv6=@loopback, @port=0x4e24, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) shutdown(r3, 0x7ffffffe) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000001000)={0xb, 0x3, 0x10, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000000000000000000d500000000000000", @ANYRES32=0x0, @ANYBLOB="8243000000000000380012800e0001006970366772657461700000002400028008001500b74d0c00060003000d00000008000d00fdffffff0800040001800000"], 0x58}}, 0x0) 3.365681436s ago: executing program 0 (id=9440): unshare(0x6a040000) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async, rerun: 64) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async, rerun: 32) close(0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) 2.662547261s ago: executing program 3 (id=9449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c810}, 0x4000014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001f80400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010200000000000088c594680c7d204a7e5148715525bbcfe7088e4b2c6c"], 0x50}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r4, 0x2, 0x6, @local}, 0x6b) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000000000000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = socket$kcm(0xa, 0x7, 0x11) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0400000000000000010000000000000000000000000000000000be00"], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f00000004c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r10, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYBLOB="4d1031794214b8632bfd88dfcc82dcc3bb0cae26db1bb1a5676d68a991e9f52bc3383113e904308c68ccb9adcd51d70c35fddab90a253edf6aefb6e95acffdeee79446b258c8539b08b31235f316d18f9b77c3f84331b45471cfec408ca880048b85f5f41b08ba1d4a4abda2b816456e0ec03250499bbc453e2bfc952669d00e48687356fe3b25d2b0f76b2bf5145c4138e821fd32f1cec9edf13c6d109ec5c824780f3cced2fd79b24309c422b680a14dcbe9adfb1ca1432b0b4239fe889482673f9a2f57465a7f3272d99a2c0d5cc8d601999d4dfe35617b10d1d975bd8375993a824f", @ANYRESDEC=0x0, @ANYBLOB="23d77d31983b7113237a3813ca71a064a9548dd87a", @ANYRESDEC=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x11, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) connect$unix(r8, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r11, 0x80867000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703fbffff3f0000850000000c000000b7f8000000000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0x55, &(0x7f0000000340)=""/85, 0x40f00, 0x3, '\x00', r4, 0x0, r7, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0), &(0x7f0000000580)=[{0x0, 0x3, 0x10, 0x7}, {0x5, 0x4, 0x6, 0x8}, {0x0, 0x4, 0x10, 0x1}, {0x0, 0x2, 0xd, 0x6}, {0x3, 0x2, 0xb, 0x6}, {0x5, 0x1, 0x6, 0x4}], 0x10, 0x5}, 0x94) 2.205422542s ago: executing program 2 (id=9456): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) close(0x3) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8692fb4b67e902ce6ccb7f83dd604dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001d96a7d7697abf065e91c977d40f919d5278d323fcbfb8a5ce77e53305a7780871b75caac4e09c2b7674176cd1999ab19c794fb7f3f22e7d8f2d8f541c3785afadf70493ceaa894d2eb85afb55fd49f347963a636fc8dd84ede968ac1175ec67b79f26209438809827839ace8c28752afde153c6354", @ANYRESHEX, @ANYRES32, @ANYBLOB="937db006356356535190c3530cf9f267167c8243287303ec57a9997abacb7cc9ec0eb2b73d41544834a9f97f2528844efcca0e90d29ceba2f893bfecf4"], 0x0) 1.985907973s ago: executing program 2 (id=9457): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) r0 = socket(0x200000000000011, 0x2, 0xd) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a000100000000000000"], 0x1c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x86, "93bdc84fb0902745709cb8a6882e9b27028b0f123446953dceec0b3484acf276f36a226f87583e76c7cd695dd3985fe64615a6eb1782dcb1ab484b37954c4174d3a5d3d953a335fdf90d02d1d01e6f7be50dfbc5f8ad16b158a5c3c5ff2255517356c72233a84af554deaea85e735c538ec823d6385850060bfa13940e6c39fe44b1f8bfb3d3"}, &(0x7f0000000400)=0x8e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001680)={r4, 0x38, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0xb}]}, &(0x7f00000016c0)=0x10) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400800002010500004000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) write$nci(0xffffffffffffffff, 0x0, 0xfffffdc9) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000100)=0xe, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x128, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0xe1, 0xc, "ff5b6bb66b29f56775a81be3f0204f37009c6f275a147e3d32219f4468a1d62b8794182950920c5c433162a4c96748b9096a713ae6835d2a94a6c5505dc554e856f57062237ca5b68226fe505ff3e272175b2c348ab9c86c5fe5db9597ba042a2d18ef972e7c7cf8647401c3f2e0783830c8201ebc0d0ee0fae3ccc0784b0282ed7dd7c3fa2122de8ba7ae2979b7853685b2c228a0994b5a20839295e27fb7e6656a53a601835cd7d3f4e46d377cb3194476c2043a75eee41f290a5ed6390f0dafc27b7ea004db145f1733b4eb36b7d023054007c8e3cb20c4d9b802ca"}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x71e080d0}]}]}, @NFT_MSG_NEWSETELEM={0x2d4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x290, 0x3, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "cbd059bbe9b8bc039b30aad87de1404608eb270bf2b359f7c368ff5ea4c0607ebc02acb784"}]}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "ed268ea1ca48db1488272a989ccd38cad88d00b93249b78bd9947209"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "1a7a2a576bc625e018812e3d3c6b4c642f29bb04e4260f12b6c0f890daace2a55865a1495fcc35e0c4bb7b2644bc5fd4be7f6bc6e1f0b58c9100b01be3665c0db880abd31aa2699c450827652ddfda49f133694573a286333bcb4035e0d1ab393a5a6825062bb2e8b600f97877f5153383a8af371e1f79cb7cacce83c35fe9da956d9cfab8c12bcebb8411cc1afec9c4b7fd5db010df4b65ead85a2225dd87ff253ce617e0fcf936c28eb843c82dd357c125accb7e501889cc5af6a2f6b5e45568ec5471323b96b848e5ab207c3b048d2dbb5d186df09e6a9e26c9d278b812ba54eec3fdc9255d5a52bb49c9dd046e0ff5602119e383db"}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7, 0x6, 0x1, 0x0, "e50273"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xfc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x104, 0x2, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x16, 0x6, "0f2ec6f4eb4d306f1ef9b84d5565e8503014"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "00ee38529f278425ac85995c9fc6887cc597ccdab9fd694abbf5dc0da90dec41db0bc6883b7bca527d26f29285ec297ead68a9c8c1ea248801e873c93bb0399a45833047b78e0062f1e4266860b7ba403fa6507893184abae3f50a0f0a7fc9245b4e26b5fe1f77403e0cffe3c5e493e4d028a77259115f6e757e7ea6ab0f6141fc46ed6fbf810a44bd45a5ba0110cd7cc3656de0c1fe63d40e31231ee079e952240364707392a6a2e3b37f1ea9dad3741a14d8b5ab4a7f728d7e8c8a1798863779aeeb5f8c1a9a5bea2952d1"}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x578}}, 0x4) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r9) ioctl$TUNSETGROUP(r6, 0x400454ce, r9) (async) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.878222543s ago: executing program 3 (id=9458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44891}, 0x44) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) unshare(0x40000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000e00)={{r3}, r6, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r7}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000a00)={{r1}, r6, 0x8, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0xd45, 0x5, {0x14, 0x8, 0x3, 0x9, 0x8}, [0x9]}}, @name="04ddb1d5040c142c9f78b3ab3f8f8baab084e522aced83139d702cd8026fc6b69ee255438445736ee6c95ca4bea0e39588ec771222cc1dee631fadfc5adec3be8752cf09b53f28b2301833fa6b8d233452822cc28f878c17e3e78517683edf4a21fa98ed3b9f59f81000240a26fe73c7ec0c646adb8f5a10f93995549452ab5d781b4033bdc2a1d59b7706765c705f8e1b4e04a26ced0d19b3e3bae6ea214f6b55b0e2fa9333cbce6c49f13fa6bdfe8429633a1eed8d818bb699e84bf0cec8052b3aac8486279306305b9ebb1de45779b69e1d1928c9625239371368cfad37ebfe05239a91028fca50646e9ddcb9b88f5687474b742f926a61cc690f8e79fdff267565c9a8cb52ba7caf9485df1943d24efd13afe80c9194df66f7936269efa43e617be2533ba886db58428345fe76ca40b8c1b5306d4ecdfce98ba101afabc32c2988df7a91b9aaf3b4beceb38477e26604ce974bab6e3a9d4114f0b499a3248452613ecbfd8a55a5ff532da114a5022db4eb66cc859061414d2d1b9129d26c3ed4f2aaa60eedaf625494b65bcec273c209199cbc19641885f13e20a91c8e6da67d4598b82a07e7cc3da3aa8c09f1289757acbc52bdd97548f5185d9478b5f0982e7ecaa9a166d5c468ff37f2654fbe7733eec404e24c7dce903ecdc64479c7810992e5f53ead2e036b6bc6a8dd0610dda6d0339f9f402afe6f6c1ceaafc7361b74a3b187c9d23153710160ccfeb7b13aa117e7a608d328640dcef507aa24e3cd6ae63547f7a5f4d40855671c25ae2fdc0e3f53746519edf2cf1bf4f35439bf5e4b2c26efb5eedc46245709d8910e1b13d1ac79a4b3eff7d2695fb5ae27617cbf17dad2a35fd70eb250ec54803f4353a96a740e2c4e1028c6d1d8569c67cb43e583f76fab40f4762b9ef1ebbc74be5a58b6e71577c3fd51cf1051ee951e8d4ac59113cedce5cc9431b8eca9adcc50e1efd240d41f4542ebcf52550be96c5313233044e85babb5ea766d003f5c083fa2fcfd995a5a04b15f0e59bd948a9dc2c7d9b767ac86a6b8e8f5d5069b3d25d2941686acffd203586012bd5155e8f8485cc1c0a064666a6ead74f0ae13d9e834f1995693903f095588ca3cbdf22f9503e2ece6259d0e390f038403c8ebda5f24db81ea830fffaa49df2ce87124155411ad3500a8d056032f6a51606cf7aeabe39047a696a15682204fa8b033e582d6913590789b5445f66d6ca767ee3ecef1faaf79d2c7c2df35f4b674aae44fbd70e481b5244cc84ad4d5ec8008541d5413320bfca73828ddf90df15fb63ff39b6738eb84e19662a6306ef0058ede04730c00f44e93295e7a4a1f69d546a9a14350f1d53351110cd1a99ae7ea237ff6208e6e80c80e96116dec0df738a48892682e747d76efa83f6948b414b4a21018624d1184d1f25423c5eabf3dda33f5afb7cc9379125b1e642adaeb259eb568dd5eda21e0b36d7cf2213fe0b6a38c4d438b8fd9cd1f18213c32a5de19f1ca74af577e537b16daab2a805bb7de93c3d08f2f5326a6e414d0794dacd94d4b97af19011c64ef5306334870972d2ed9bd7d57a775e2ff04ea571e6a28b474c1aa11ffe43987ccd6a85f415d181fd279755cf6e9f2d4c7195f080eb98529c9bfca1100756c9fc090f478c02d63c1c8bc9cfd48718ed2905629ce28ddccd65415b7bf1885a9834bbd305a3a159627405a65438d2cd488c00c2965ccbe5159d1b9c29a2ae187a49a3fa7603d5ae2d160b8c2791c5eebd25403c07e425162623896299044072689cd345e041f03669984240590a537f097d616e5c13109927ff0f6c7dda27c08ad824c52303da96cc6ba77f3c0514ab1ed4410f855d89ed72a5724a4cbaa4bca31d6cbb8737b41e405ec72ae5ffe4d19462c327d8632d03943acb39a5e0eb502e83d2c9014a27ca50ceb0a9cec97114a7826aff36a99b3de44a11e88d15740dc667c55987b9627bfb07fb07f9c4094e71c74b2fc466e7a6d1ca4d5426137550dce56b19d6e07b8036455b131ee27548619d4c139c5cec45dce12282893abf4551e1a37edca24abfe1c7e04499d42ee16de13c358859f318303cea749a3117f26830293d3eb4401b208ce7c9e11589ac50959be8c6faa1230ce52690ddfce2f90f7cefc3ce85c3c5e53c2eed61d2bac3f120eaecac1ab4f71579f12030a04b138e4e66a3f443c7b28fb5536a06821f26ddee1d45d5e01e74454b0ddf6eae1e0b832b652a709c3c4acce62fbac3634d8c048a8c573f7ddc4f5f8b98f83c7c24b5f9e181f87a14c1d8f771ee0a84a16da487bfa994bf53f7d67caaaa0737a4b71322a2c932ce68bd99395e82e6ccb5de619aa869476d5ad3c05d9a24a242ff3bfe863334e5e26c6c9324bb067a5d1918a7cb3b26b8116bcb49250b0ec604af043b9766ddaf4813565f18ca8d0a6803b21d65423058f0b354c5f72de281549817c76e2b5bb2399e2b851557c44043f8c0453ed9d629be2a4c92b7bc8988d9e86c53a86994d364c9d0ed4f88aee6655515c01214ef7ca65c62812b3687aaeeea2d52f8acf3f0905d74177b1b204569036d83af8f00fcf0c028dd5fab417d1cb4aa897071d88349bb9e3b9a40c73561349cdb30d3676d0ea5a2526e4658c8bf13e5b628e7d07c992fb445d791dbf2028feb2e335b4fee1b8aade9d7f6de5be4ac61f88cbc74dc9899eac4321429e61c5c4fd5f773b25e904856303eab98cf916172718ef753e08f2169241f24c50a9227c0d061596b1d591f6000ddfff4bc5b3879373bae0437f249362c07d5b4cd9f85c3abcdf2560448d3414aa93ab31a2fec0178752aabb802633f4fdde225dc456de6999ea95b102921450d5f52abfa53b959ad2aa9e3ad1a39ba72e802df987b5f30ddf0f47d3130411fbdde621b3821249a67a1c583cc1ee10c44490b7b117f0ddb9b4434e27c4a9365a444658fba7670f5c5c3c8bc4fb140eb596a376532829660fb1f0c6a9f8dfadeab20c0d19532442dac58209725e2d26b979e9d33baab79e7d6d703d47c874e26c9bfc8c20c924da3697c9a0f4421d34d3daf2b50e4ddf3d34fd699f25abcb70e200f4fe398942a67d2f15c9e32eadc8313266e666c32eefd870c0b4e836e5b60c8afb81cf176b6edbab1f351d5322ae85772bbfa795db8ecf0f6d532b38bfa2fb2d6b1dcec7246a8f65e9735147d067c8aa92c217fcffe5d9c10de721902e6238ce9f28468cb816c6cccc39f3d7c85b469c865cd09037c5114e851520518d572df8de6d8d4477f8ad834cea3b54496a028785b7c733bd3320fb9d21e848f63b6f3622b9cdfb986d539c6aff72c1a76287b0c18a5d3b346c6349f99f26a69fde39315e3b04f1afefa0964b3efdf696ed81e23dfa746fa48044fb1379d3d82555396ce16381294d8ccd083caf464c9fb6591d4e01e2b100fc142e88d96f0045ab09cd8e0987d99888d43c1af2d4c065af2a870d67554cd20f598a668c9acd89d3ef1597f2715701895166edc77e7a31291485a8baa1f8161e51115f1d16d6fd014b05e5107df25bfa169ad7ba1db4d76be51c6f097e938b22c906a00e5d56cc346ab3641fbc2e1427fdc8364cf014a7c0a32a1aefd26909c51cdb627e0f84cec969259bd1218317ca39cc2ec99544e5ef18aa532b4785a0b2b58da9ac2fc9895d159632b759c5f3d5bb73a659a10e7beb384e59807e24d902063e311b0104d5f7377ddb803098d0cf3f0ee83470ca41470dba5e57c3b9e5bcceafdd1e51020791ca6803f17d87b94bfb6054503bc2e8ea9aca24937a7206064111576473f083fafb9f7649a84ac15c5851ba4cd4840efb41ad44e231b03fa73ac502c4ebb36d4f62369526ba798eacd4db94d9ebc7f4424cd8e8d29c28f57ff6c2a33590f35c9dc51111c984c5d24cb51bb15360340bd1db3dbbf35e5d308ff78039fc66e925ba6bda1ba992c1390951dfd0833c0b1ffd66d099cae2ea1eed97bd7d1f82d5cab34b9eacea073dd7e4703b1080d13233544094e54266fd11e7daa620590254e6e01c83c821f26cf030179e00fbf3ff305108a7584ab459aacd96c95ac8ead071b3bad777a00c363a9fced37725f3ca601c94bed9ab11675ee21dc4240886fd216e3fec27ec9b3ab2923f1a9a19739a6c0a185020cb243bbbd94799813c9832fd5721bc83f28e13df5aa3ab10c9261b520baabd29d484ddb625a652f0e1f27463472da0e848d3e09fe03d8503ffbb82a0ef319f310a965ffad2a8e85568b1101c2daf2e3c6afce9b5c3873371ea822faab6bb1312f47a85c2e77b3df42154a5e0159f6a4742cdf6e605cb12730dbccc994f41784171f565d09393b86b6a51c5de0e13fdc30a21e47370548585fb99b4ffde38f3594de21d5c28f6cf592756ce337f5a26a56335c2f82881b1613d0ed9c0ccfd8c8d46b57e8eba37b8ac5e51bf349b056cc71478c880a896cd154adc919014ded4c6490915fb577a315186aac293c9412f8ffb2f293197ae4b8db94d6bed3a1993176f723ced681fe8c6c9e2fdf881a14b077a911810764deef2234b141e35a67a3c02166715e698d4c612cdfb138a88863e5a6c55adf5338f8661ab34bc70028cf8ac02b99d6e901ba45502c3136b583590ae914faaf533fd38912b99fab6f7d3c1b6dc03f0f6d4de98e5db0629a656325cbb3e3be11b38358ac9a663a121c2e34c79f30d9e20caced75fc02a1bfb86d69ffbea8412a56e2891563245082be7fccf5f3317636932f8bb15eff652c4f04abcde13b4691143a723b95c61a00fbd151903c16552efa8bbadc72733932ca619352008ee87e099073ce96970bd9a6c9e36aaff97b6186613ec9820a644dcb38bbece87e0fa6c928bb122b9de16d45e2772f6f840100c3dcea58f0e344b0abde1b40adb626d050620e4bac9134f0029fa95bbd33ce6a73fa8b6dcf3bcc7d80d1d1a49385107e4b910fabadd2e17a74961314fc1ca38caba57980c5fcda2fb5c2a7893e7b54cdc882a3418f06ecd2cbb7801b5ea4c29f28eb439d1c328f11b737ac650cabc5d93a1e5a7be002e11d4638006e199f461886d29167d3e09abcec2ab2c205a93eedca6cdce92e161194d9ab7e0365ae457ba8dc49042674f72b8592366cb49e8dbeb9da3e23d4599ad0dd7023f3763d69be54f38c9785f3c773f7a0458e7faa76a1e021cc96993c082d5a4e88a2b86d9811b9805728daf477fd0972fa9588e72070a9deb0f864c1f857dcf0dd8a0ebe309f03cecb208f1ec5d71fa038aa7b8f06892bd9f0cb369ce0149974b286988691ca4bdb37e357afdae546df00f0d8453e47c7555f3926e84d1a6add466235e34a882150a97a47c71f759d6d85d6179f361e6164711e5774d07bb8f7499ebd0d41d6cc54ff31715e8f06f77c2f292cefac377e081d885e5e25e9795b07dddb8dfa2f66868f875b914b9995aa1da733746ea9417f48bc2b1fa7aad5aba572fdaf7017ef74a23d055f5cc71832b66728605da8ab7c655bbdb6106698c1bda43ce3adfafc93589be436f3f034034bd7d7345f1d41ad9026fdb005d3923c67d4bf498c735ecd97b8a94afbb09ac44e475af987ef043295ca5d2b77266cd678fdc6ff1dc39025801fe7d9ee476c88cebec5555f54d985fa50e6a91fc1b8614074b0d0be0114d6a6734e6fdfaa862cd6b30581049b6abf99ce7a637971af2a39a0ea43a6b4a8f62ed1339b26085316ca2ee"}) 1.747145988s ago: executing program 2 (id=9460): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfe11) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1}, 0x40002023) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0x4}, {0x6, 0xfe, 0x0, 0xfffffffd}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe74, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400019070000000000000025037c00008a0f428005000a"], 0x20}, 0x1, 0x0, 0x0, 0x4c896}, 0x4000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f0000000180)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r3, &(0x7f0000000080)='syzkaller\x00', 0x603c00, &(0x7f0000000280)={@align=0x55, {0x2, 0x40, 0x401, 0x792}}, 0x80000000, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) socket$netlink(0x10, 0x3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.727524199s ago: executing program 1 (id=9461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000c00058007000100696200"/26], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 1.593791092s ago: executing program 3 (id=9462): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000240)="289ce7bf636c6c64f1e560fff2d80933be8bbb3a999da16c1e", 0x19, 0x40000, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000400)=0xd934, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1e8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000340), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0x7, 0x3}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0xf8, {0x9}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @multicast2, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) 1.5501156s ago: executing program 1 (id=9463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="04005b0406006500"], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x44000) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0500880009000000060048004600000005008900000000000500880003000000060048004e0000000500880002000005000048004b000000060048004e000000"], 0x5c}, 0x1, 0x0, 0x0, 0x440c4}, 0x20000080) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000010000d042abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="d4010500400000002c0012800c0001006d6163766c616e001c0002800800090000ffffff08000100010000000800070007000000140035006d6163766c616e30"], 0x60}}, 0x8000) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="68b16216b30cabcf9b6093d1519ded764e13af1211b0788a12a5b22c0bc3dffd94332f622d8126cf936f48b5746f2fd2eff90ced229dc857568d46b3b7600e", @ANYBLOB="6d023154f4902d65ca4be2517adeec79d1709608e90c8efe67d258388566413ba6a840a94a30376f97362ec37c3ce1f7f8458aae11b96f500023a06802c44faf6463f2b9a08a89c096f9f4f4fb3338efbae1ab2e964a73135cd30a3ac488a8b3715def6c9c7741fb3c8bc313e0f6854d0fd5b1985fbf3ed165f619d24171cee870f48c7d1785c41aaa6333", @ANYRESHEX, @ANYRESDEC=r5, @ANYRES64, @ANYBLOB="54dca3c3f0c2bab08dfa6ecdf4ba9a69a31a009ef8fa6d387cd3faa794b16426c7b0"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRESHEX=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES32=r7], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffe0, 0xa}, {0x3, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) r10 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r10, 0x5450b000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.419951052s ago: executing program 3 (id=9464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0909000000000000000001"], 0x68}, 0x1, 0x0, 0x0, 0x2000c004}, 0x24004815) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0070ea", @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800010000000000040003800500020000000000"], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000a80)=[{{&(0x7f00000005c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000001c0)='\x00', 0x1}, {&(0x7f0000000800)="0917173a462a1c5ec03cb9b30c2530fb29f77ffd9d73d84f05d276b5297de40d43746373943a4e974e2220ece17ae923abb15b9222b76d0d96aa28cd1f361972c99af42f6fa7f9c13519828c1b7b76d9c48427822f0d18277560dd04e1b0e280435ea38835ee5fe8d3f858fc045f29dd236209c99fe03817813a25151e671f2b6e06dc41f27c2598078c168f8683ccb105d73b4bdc543b8118f7ef37eb8928", 0x9f}, {&(0x7f0000000900)="841627773dde3516a1d7d178a9abe6524c07b2df0db17ce98a7b6a96f68f513e5ab13374cc6891002971f0350a01e3d2f6b9b9da3e7ece564726dc03bb042edaac1908c130c0161b1c98e541630268df17f6dfccd94cfd06f23be10cd078be8a0df54aeaf1544a400921", 0x6a}], 0x3}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000240)="905bfb0d4700d41a436818004ac1ef26c69a74dcc7f5df68b28e03ccc86a63fb052f6dc3195bd91f0233ef1d53f4a5d4ca2bb8d8c7309f017beb8e68a600aa3ea79f0990c91af0ce29f47b73c99d1dff1dd7b4c57928172b5e0f7e492c1877fb75f39392f1b0102f21d3cfd586525e8b371934ab2108806ea86ab22f3ad69d5b906cdecd58610785c4eeea19df733d4cc9fb65c9a57706f6edbdc44bd368c180960912c3edd0a7", 0xa7}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="8baacba7270b50ed9e0866435964671538d75f62d9c19c417460d86863e8c34ddffb735d7cde91e914a8c9d2bf681eb40088c17848c3644c29ca3fed6a90ecc1150f1022dd5a3db68916c0feecf8fcc18e1df7626ff9226034bfc8d0ef2174d9afcd59d5bc8f66593d33ef73925d941fd99af62e5bda3ea96f4a24a2a9581096d44f4a714f4c7435e6b19fdaa43fee8ed44642fe2e1d53ef69b0ec2de39a85585f2daccd3a6691ccaa2d6c113d06180767b06765167778b8b3a017f52f", 0xbd}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="780f40fd276b1d35a0ebf79e9cb4ef4d7c35b0ce68d23f645a06d9b9ffb9b48a507a52c4534373667ec1c8d0c161a960b5778aa9db237a4dbade5cd38a728eca3ba47038edaaaab80fa856a6443f527f100f1f0c218b415053dba2f71b834ba7cfbc558efb0bbdd2f73d531b500a67", 0x6f}, {&(0x7f0000000640)="e7770969b373c1bd18c3bcfc6b009835841a7f5ad31eafda7be14be85f787bc466cfd40782f0d46be0208fd412c88c030000000000000091551b2e79559917c1d2aa8335f277eefd7b60c80322d2914327731ac4c9e4e0a77bf0194f13dacc4b5abb35bbcce242bc3f394fc46d0998a3fa1ae448189fbc", 0x77}], 0x2}}], 0x4, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={r8, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$igmp6(0xa, 0x3, 0x2) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x94}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r12, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f00000028c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002880)={&(0x7f0000005140)=ANY=[@ANYBLOB="e8130000", @ANYRESDEC=r13, @ANYBLOB="00022cbd7000ffdbdf258900000008000300e1cd58c4da793074e78f4d59f1ef5d30091761b2f7bfbd5b298af83086b4a7b469e813bc34ec39e90f823e8f064b73476de394f2ba965dfa8fda6a58032b6bdb53fa09e51f550b", @ANYRES16=r5, @ANYBLOB="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"], 0x13e8}}, 0x5f) 1.313003981s ago: executing program 1 (id=9465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x1, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0x20, 0xfe, &(0x7f0000000540)="6a43c928105ec17e3f50a12fd282d76955cfc44d99bb5c518605263e0b0452fa", &(0x7f0000000580)=""/254, 0x7, 0x0, 0x26, 0x5a, &(0x7f0000000680)="9f4120e3846c08cac94153f4a99b127d9a79650335034180f253e835f72e22e5c3dc56916d85", &(0x7f00000006c0)="2e8e7b16e9b3b9e406ac5af2124aa1bb25f53632e510c1d13b6a739316ab9b6e90d6f30c414b0cfb342be07b7b68d441b185dd239adc7c081634392289e5fd50eabb926774c63235ba6e6cc60e8e2130062b1af3117af1891021", 0x3, 0x0, 0xe}, 0x50) r5 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000007c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000840)={'erspan0\x00', 0x100}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000009c0)={'batadv_slave_0\x00', {0x2, 0x4e22, @loopback}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000080) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b00), 0x18400, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000000c40)={r0, &(0x7f0000000b40)=',[:/.##\x00', 0x1e1200, &(0x7f0000000b80)={@align=0x6, {0xfffb, 0x5, 0x6}}, 0x8001, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10}) r11 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000c80), 0x800) ioctl$sock_x25_SIOCADDRT(r11, 0x890b, &(0x7f0000000cc0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x8, 'veth0\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x21, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x4, 0x6e, 0x14, 0x80000001, 0x44, @remote, @loopback, 0x8000, 0x80, 0x0, 0x4}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0xfffffffd, '\x00', r13, 0xffffffffffffffff, 0x2}, 0x50) bind$xdp(0xffffffffffffffff, &(0x7f0000000f80)={0x2c, 0x6, r13, 0x8}, 0x10) r14 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r14, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x1d, r13}, 0x10, &(0x7f0000001080)={&(0x7f0000001000)={0x3, 0xd28, 0x81, {0x77359400}, {0x0, 0x2710}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x29, 0x1, 0x0, 0x0, "59cd0e2fc0782693d0753ce6cdbec0dd4e9210419286f685e9e7a56e1c9b4942741c11cc6af24d8aca10efa466f1dae8e691e0e32d085b26e882b8d297dd0b0a"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) 1.311721315s ago: executing program 2 (id=9466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.266325959s ago: executing program 4 (id=9467): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="030000000800"/18, @ANYRESHEX=r4, @ANYRES32, @ANYBLOB="030000000100000004"], 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000840)=""/87, 0x57}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/61, 0x3d}], 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.256240791s ago: executing program 0 (id=9468): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendmmsg$inet6(r6, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000380), 0x8) unshare(0x2a020400) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000082a5d96fad"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.096086682s ago: executing program 1 (id=9469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000", @ANYRES32=r0], 0x24}}, 0x40004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x45}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2000000010e9020400000000fcffffff00000000", @ANYRES32=r4, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 1.037232885s ago: executing program 2 (id=9470): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040001) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "0e3f81a20e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc) close(0x3) close(r0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 1.029244211s ago: executing program 4 (id=9471): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000e700000000000000479c80bbb5d6fde18dede6849cc979ec546f8435a5967fdb2b1aec94f7709ab5fbeac1af8d1014cc95ce02ec5394ad0fad01637c8951ca31c889bdf27f3380b832f44ada7d4bc1abe97296c8de66740295f2999883b0", @ANYRES32=0x0, @ANYBLOB="02200000000000001c00128009000100626f6e64000000000c00028005000100fe000000"], 0x3c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x69}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r12) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x1c, r13, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8014}, 0x40041d0) 667.617539ms ago: executing program 4 (id=9472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x35c}, 0x1, 0x0, 0x0, 0x4006890}, 0x9005) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) 524.287846ms ago: executing program 2 (id=9473): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x60}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86", 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, r2, 0x2f}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, 0x0, 0x25, 0x19, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x81}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r5}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r4], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000003c0)=""/188, &(0x7f0000000480)=0xbc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket(0x10, 0x3, 0x0) 518.551319ms ago: executing program 3 (id=9474): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000240)="289ce7bf636c6c64f1e560fff2d80933be8bbb3a999da16c1e", 0x19, 0x40000, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000400)=0xd934, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1e8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000340), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0x7, 0x3}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0xf8, {0x9}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @multicast2, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) 462.312962ms ago: executing program 1 (id=9475): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000300000085000000860000001801000020756c5d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca499"]}]}, 0x64}}, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 400.63087ms ago: executing program 4 (id=9476): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002cbd7000ffdbdf2576750000000005000203aaaaaaaaaaaa09001f00706879330000000009001f0070d24c32000000000a0001007770616e33000000050020007f00000005002000000000000a0001007770616e30000000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 259.645169ms ago: executing program 4 (id=9477): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000010401010000000000000000050000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, 0x0, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) r9 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x60, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x200000c1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x1, 0xa, 0x16, 0x15, 0x15, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x40, 0x107, 0x70bd27, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @generic="b4e3946ad467116f7761cee11f3c064288"]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r0) 61.218363ms ago: executing program 4 (id=9478): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000440)=@ethtool_cmd={0xc, 0x9, 0xd7f, 0x6, 0xb5, 0x6e, 0x0, 0x1, 0xff, 0x8, 0x6, 0x6, 0x2, 0x7, 0x4, 0x7, [0x9, 0x17]}}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="1c0000005e007f029e0b18c9d25a27a69801976ab0a272", 0x17}, {&(0x7f0000000680)="313ad8d3b7", 0x5}], 0x2}, 0x20000080) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000027c0)=""/4093, 0xffd}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000600)=""/120, 0x78}], 0x3}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 48.706371ms ago: executing program 1 (id=9479): r0 = socket(0xa, 0x5, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xea}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000090000000100000000000000000c000000000000008f700000ac1e0101000000000000000000000000000004d23c00000000000000e00000020000000000000000000000000000000002000100"/500], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$isdn(0x22, 0x2, 0x24) close(r5) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x2}, &(0x7f0000005540)=0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x4000040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90c}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) splice(r6, 0x0, r8, 0x0, 0x10d00, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 0s ago: executing program 3 (id=9480): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x1d, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x219a2}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffc}}]}]}]}, 0x48}}, 0x20080080) kernel console output (not intermixed with test programs): 63.051159][ T8620] FAULT_INJECTION: forcing a failure. [ 1363.051159][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.074548][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.0.8720 Not tainted syzkaller #0 PREEMPT(full) [ 1363.074587][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1363.074601][ T8620] Call Trace: [ 1363.074612][ T8620] [ 1363.074622][ T8620] dump_stack_lvl+0xe8/0x150 [ 1363.074666][ T8620] should_fail_ex+0x412/0x560 [ 1363.074705][ T8620] should_failslab+0xa8/0x100 [ 1363.074731][ T8620] __kvmalloc_node_noprof+0x178/0x8a0 [ 1363.074753][ T8620] ? nla_strdup+0xb8/0x140 [ 1363.074774][ T8620] ? nf_tables_newchain+0x1c7a/0x2890 [ 1363.074808][ T8620] nf_tables_newchain+0x1c7a/0x2890 [ 1363.074852][ T8620] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1363.074904][ T8620] ? nft_trans_table_add+0x230/0x430 [ 1363.074933][ T8620] ? nfnl_pernet+0x23/0x240 [ 1363.074964][ T8620] ? nfnl_pernet+0x23/0x240 [ 1363.075003][ T8620] ? __nla_parse+0x40/0x60 [ 1363.075029][ T8620] nfnetlink_rcv+0x123e/0x27b0 [ 1363.075099][ T8620] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1363.075149][ T8620] ? ref_tracker_free+0x693/0x840 [ 1363.075218][ T8620] ? __netlink_deliver_tap+0x807/0x850 [ 1363.075262][ T8620] ? netlink_deliver_tap+0x2e/0x1b0 [ 1363.075293][ T8620] ? netlink_deliver_tap+0x2e/0x1b0 [ 1363.075333][ T8620] netlink_unicast+0x75c/0x8e0 [ 1363.075376][ T8620] netlink_sendmsg+0x813/0xb40 [ 1363.075420][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.075457][ T8620] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1363.075490][ T8620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1363.075528][ T8620] ____sys_sendmsg+0x972/0x9f0 [ 1363.075569][ T8620] ? __might_fault+0xaf/0x130 [ 1363.075607][ T8620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1363.075653][ T8620] ? import_iovec+0x73/0xa0 [ 1363.075681][ T8620] ___sys_sendmsg+0x2a5/0x360 [ 1363.075714][ T8620] ? __lock_acquire+0x6b5/0x2cf0 [ 1363.075749][ T8620] ? __pfx____sys_sendmsg+0x10/0x10 [ 1363.075826][ T8620] ? __fget_files+0x2a/0x420 [ 1363.075854][ T8620] ? __fget_files+0x3a0/0x420 [ 1363.075896][ T8620] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1363.075934][ T8620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1363.075980][ T8620] ? __pfx_ksys_write+0x10/0x10 [ 1363.076010][ T8620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.076045][ T8620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.076069][ T8620] do_syscall_64+0x15f/0xf80 [ 1363.076104][ T8620] ? trace_irq_disable+0x3b/0x140 [ 1363.076128][ T8620] ? clear_bhb_loop+0x40/0x90 [ 1363.076157][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.076180][ T8620] RIP: 0033:0x7fa8ea99c819 [ 1363.076201][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.076221][ T8620] RSP: 002b:00007fa8eb8e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.076247][ T8620] RAX: ffffffffffffffda RBX: 00007fa8eac15fa0 RCX: 00007fa8ea99c819 [ 1363.076264][ T8620] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1363.076278][ T8620] RBP: 00007fa8eb8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.076292][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.076306][ T8620] R13: 00007fa8eac16038 R14: 00007fa8eac15fa0 R15: 00007ffd69c1ec48 [ 1363.076345][ T8620] [ 1363.662584][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8722'. [ 1363.758832][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1363.803369][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1364.062548][ T8642] tipc: Enabled bearer , priority 10 [ 1364.326197][ T8647] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1364.475569][ T8649] lo speed is unknown, defaulting to 1000 [ 1364.962667][ T8665] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1365.741430][ T8670] netlink: 'syz.4.8734': attribute type 21 has an invalid length. [ 1365.821787][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8734'. [ 1365.931818][ T8649] syzkaller0 speed is unknown, defaulting to 1000 [ 1365.969870][ T8649] lo speed is unknown, defaulting to 1000 [ 1366.593277][ T8701] sch_tbf: peakrate 7 is lower than or equals to rate 4947910040494822028 ! [ 1366.710591][ T8703] sctp: [Deprecated]: syz.3.8743 (pid 8703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1366.710591][ T8703] Use struct sctp_sack_info instead [ 1366.934329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1366.942576][ C1] lec:lec_tx_timeout: lec0 [ 1367.272050][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1367.310837][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8747'. [ 1367.466154][ T8726] FAULT_INJECTION: forcing a failure. [ 1367.466154][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.484254][ T8726] CPU: 1 UID: 0 PID: 8726 Comm: syz.2.8752 Not tainted syzkaller #0 PREEMPT(full) [ 1367.484290][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1367.484304][ T8726] Call Trace: [ 1367.484313][ T8726] [ 1367.484323][ T8726] dump_stack_lvl+0xe8/0x150 [ 1367.484363][ T8726] should_fail_ex+0x412/0x560 [ 1367.484399][ T8726] _copy_to_user+0x31/0xb0 [ 1367.484425][ T8726] simple_read_from_buffer+0xe1/0x170 [ 1367.484458][ T8726] proc_fail_nth_read+0x1bb/0x230 [ 1367.484492][ T8726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.484526][ T8726] ? rw_verify_area+0x2a6/0x4d0 [ 1367.484557][ T8726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.484588][ T8726] vfs_read+0x20c/0xa70 [ 1367.484626][ T8726] ? __pfx___mutex_lock+0x10/0x10 [ 1367.484655][ T8726] ? __pfx_vfs_read+0x10/0x10 [ 1367.484687][ T8726] ? __fget_files+0x2a/0x420 [ 1367.484721][ T8726] ? __fget_files+0x3a0/0x420 [ 1367.484747][ T8726] ? __fget_files+0x2a/0x420 [ 1367.484784][ T8726] ksys_read+0x150/0x270 [ 1367.484846][ T8726] ? __pfx_ksys_read+0x10/0x10 [ 1367.484887][ T8726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.484925][ T8726] do_syscall_64+0x15f/0xf80 [ 1367.484957][ T8726] ? trace_irq_disable+0x3b/0x140 [ 1367.484983][ T8726] ? clear_bhb_loop+0x40/0x90 [ 1367.485017][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.485040][ T8726] RIP: 0033:0x7f3d34d5d04e [ 1367.485061][ T8726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1367.485081][ T8726] RSP: 002b:00007f3d35cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1367.485106][ T8726] RAX: ffffffffffffffda RBX: 00007f3d35cbf6c0 RCX: 00007f3d34d5d04e [ 1367.485120][ T8726] RDX: 000000000000000f RSI: 00007f3d35cbf0a0 RDI: 0000000000000004 [ 1367.485133][ T8726] RBP: 00007f3d35cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.485147][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.485160][ T8726] R13: 00007f3d35016038 R14: 00007f3d35015fa0 R15: 00007ffe1804cef8 [ 1367.485203][ T8726] [ 1367.733850][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8753'. [ 1367.747283][ T8735] netlink: 'syz.4.8753': attribute type 1 has an invalid length. [ 1367.780896][ T8735] netlink: 'syz.4.8753': attribute type 2 has an invalid length. [ 1367.928250][ T8746] nbd: nbd3 already in use [ 1367.998964][ T8756] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1368.097569][ T8753] netlink: 'syz.0.8758': attribute type 4 has an invalid length. [ 1368.107764][ T8753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8758'. [ 1368.262260][ T8761] netlink: 'syz.3.8761': attribute type 7 has an invalid length. [ 1368.279264][ T8761] netlink: 'syz.3.8761': attribute type 7 has an invalid length. [ 1368.293059][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8762'. [ 1368.333363][ T8767] netlink: 'syz.1.8764': attribute type 1 has an invalid length. [ 1368.427598][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1368.440113][ T8767] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1368.506251][ T8767] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 1368.629310][ T8770] netlink: 'syz.0.8765': attribute type 1 has an invalid length. [ 1368.656956][ T8774] bond10: (slave bridge7): Enslaving as an active interface with a down link [ 1368.748087][ T8779] macvlan3: entered promiscuous mode [ 1368.764674][ T8779] macvlan3: entered allmulticast mode [ 1368.784854][ T8779] bond10: entered promiscuous mode [ 1368.820532][ T8779] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1368.889285][ T8779] bond10: left promiscuous mode [ 1369.071671][ T8792] lo speed is unknown, defaulting to 1000 [ 1369.108400][ T8797] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1369.180520][ T8799] __nla_validate_parse: 1 callbacks suppressed [ 1369.180541][ T8799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8771'. [ 1369.223683][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8772'. [ 1369.713425][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8776'. [ 1370.579871][ T8792] syzkaller0 speed is unknown, defaulting to 1000 [ 1370.609410][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8790'. [ 1370.638679][ T8792] lo speed is unknown, defaulting to 1000 [ 1371.067994][ T30] audit: type=1107 audit(1776461238.998:16): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''o»ðØÿêd7ü°ùŒˆIÓÜIáK)OŸâÞ¸-Ôà7Q¼/ä¦ï«ä˜)²=NÊÏ&é/°HZÛÄ<»@.˜ ™‚£l¦¼Ü+v`£¿æ$—)Õ#>~„ˆÚ64ÿ¸ùL [ 1371.067994][ T30] ×°rï{–§—tNyVœÅØ.Ž# rejected, failed to enable media [ 1381.470104][ T9124] netlink: 'syz.2.8864': attribute type 1 has an invalid length. [ 1381.487310][ T9124] netlink: 'syz.2.8864': attribute type 1 has an invalid length. [ 1381.522864][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8864'. [ 1381.552395][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8864'. [ 1381.591725][ T9124] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8864'. [ 1381.671800][ T9128] xt_hashlimit: size too large, truncated to 1048576 [ 1381.812364][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1383.722328][ T9167] netlink: 'syz.3.8876': attribute type 1 has an invalid length. [ 1383.895247][ T9174] xt_hashlimit: size too large, truncated to 1048576 [ 1383.907127][ T9167] bond5: entered promiscuous mode [ 1383.912941][ T9167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1383.989057][ T9170] ipvlan0: entered allmulticast mode [ 1384.004551][ T9170] bond5: entered allmulticast mode [ 1384.176385][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8879'. [ 1384.223594][ T9188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1384.228283][ T9189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1384.259941][ T9186] netlink: 'syz.2.8879': attribute type 13 has an invalid length. [ 1384.455841][ T9196] syzkaller0: entered promiscuous mode [ 1384.488783][ T9196] syzkaller0: entered allmulticast mode [ 1384.571937][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1384.595700][ T9193] netlink: 'syz.0.8881': attribute type 1 has an invalid length. [ 1384.604489][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1384.717474][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.749320][ T9193] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1384.882243][ T9196] bond19: (slave veth9): Enslaving as an active interface with a down link [ 1384.934112][T16366] lec:lec_start_xmit: lec0:No lecd attached [ 1384.956907][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.965730][ T9210] bond19: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1385.154745][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.261675][ T9230] xt_hashlimit: size too large, truncated to 1048576 [ 1385.421957][ T9239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8893'. [ 1385.944154][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.961019][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.990377][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1385.999581][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1386.549268][ T9278] lo speed is unknown, defaulting to 1000 [ 1386.667287][ T9289] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1386.728080][T30797] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.095270][T30797] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.188534][ T9315] xt_l2tp: v2 doesn't support IP mode [ 1387.207367][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.237636][ T9319] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1387.310660][ T9278] syzkaller0 speed is unknown, defaulting to 1000 [ 1387.354482][ T9278] lo speed is unknown, defaulting to 1000 [ 1387.497262][ T9326] __nla_validate_parse: 4 callbacks suppressed [ 1387.497285][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8919'. [ 1387.832048][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8925'. [ 1387.873670][ T9345] netlink: 'syz.3.8925': attribute type 7 has an invalid length. [ 1387.904136][ T9345] netlink: 'syz.3.8925': attribute type 8 has an invalid length. [ 1387.951377][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8925'. [ 1387.989976][ T9346] veth0_to_bond: left allmulticast mode [ 1388.197363][ T9359] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1388.336011][ T7605] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1388.361494][ T7605] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1388.385188][ T9366] can: request_module (can-proto-0) failed. [ 1388.396921][ T9347] vlan1: entered allmulticast mode [ 1388.402942][ T9347] bridge0: port 4(vlan1) entered blocking state [ 1388.417719][ T9347] bridge0: port 4(vlan1) entered disabled state [ 1388.436918][ T9347] vlan1: entered promiscuous mode [ 1388.444813][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1388.457690][ T57] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1388.489732][ T7605] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1388.526295][ T7605] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1388.603326][ T7605] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1388.638814][ T7605] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1388.647937][ T7605] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1388.657693][ T7605] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1388.676817][ T9377] netlink: 'syz.4.8932': attribute type 10 has an invalid length. [ 1388.698312][ T9376] netlink: 'syz.3.8933': attribute type 11 has an invalid length. [ 1388.706821][ T9376] netlink: 'syz.3.8933': attribute type 11 has an invalid length. [ 1388.715150][ T9376] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8933'. [ 1388.814740][T30797] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1388.917465][ T9378] "syz.4.8932" (9378) uses obsolete ecb(arc4) skcipher [ 1388.982817][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8932'. [ 1389.290050][ T9394] vlan3: entered promiscuous mode [ 1389.305319][ T9394] geneve1: entered promiscuous mode [ 1389.318242][ T9394] vlan3: entered allmulticast mode [ 1389.335288][ T9394] geneve1: entered allmulticast mode [ 1389.650803][ T9411] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8940'. [ 1389.700236][ T9411] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8940'. [ 1389.726815][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8940'. [ 1389.773193][ T9406] IPVS: Scheduler module ip_vs_sip not found [ 1389.795257][ T9411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.974467][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 1389.982698][ C1] lec:lec_tx_timeout: lec0 [ 1390.050149][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1390.070968][ T9416] netlink: 'syz.2.8943': attribute type 7 has an invalid length. [ 1390.087983][ T9418] netlink: 'syz.4.8944': attribute type 1 has an invalid length. [ 1390.089777][ T9416] netlink: 'syz.2.8943': attribute type 8 has an invalid length. [ 1390.123096][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1390.179406][ T9418] bond9: entered promiscuous mode [ 1390.193506][ T9418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1390.288941][ T9418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1390.301251][ T9418] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 1390.335570][ T9418] bond9: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1390.364860][ T9418] bond9: (slave gre2): making interface the new active one [ 1390.380210][ T9418] gre2: entered promiscuous mode [ 1390.397109][ T9418] bond9: (slave gre2): Enslaving as an active interface with an up link [ 1390.455376][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1390.643996][ T9431] siw: device registration error -23 [ 1391.183214][ T9454] netlink: 'syz.4.8955': attribute type 7 has an invalid length. [ 1391.213164][ T9454] netlink: 'syz.4.8955': attribute type 8 has an invalid length. [ 1391.267169][ T9454] ip6gretap0: entered promiscuous mode [ 1391.318192][ T9454] ip6gretap0: left promiscuous mode [ 1391.454839][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1391.471275][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1391.483063][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1391.494845][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1391.515638][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1391.526642][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1391.637042][T20539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1391.646307][T20539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1391.653772][T20539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1391.663411][T20539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1391.672283][T20539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1391.873113][ T9457] lo speed is unknown, defaulting to 1000 [ 1392.257918][T30042] syz_tun (unregistering): left promiscuous mode [ 1392.382449][ T9487] syzkaller1: entered promiscuous mode [ 1392.402513][ T9487] syzkaller1: entered allmulticast mode [ 1392.420795][ T9487] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1392.535974][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1392.615019][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1392.745482][ T9496] __nla_validate_parse: 5 callbacks suppressed [ 1392.745506][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8965'. [ 1392.765397][ T9496] netlink: 'syz.0.8965': attribute type 7 has an invalid length. [ 1392.800606][ T9496] netlink: 'syz.0.8965': attribute type 8 has an invalid length. [ 1392.838476][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8965'. [ 1392.866394][ T9457] syzkaller0 speed is unknown, defaulting to 1000 [ 1392.889499][ T9496] ip6gretap0: entered promiscuous mode [ 1392.916705][ T9496] ip6gretap0: left promiscuous mode [ 1392.959121][ T9457] lo speed is unknown, defaulting to 1000 [ 1393.256613][ T13] bridge_slave_1: left allmulticast mode [ 1393.280074][ T13] bridge_slave_1: left promiscuous mode [ 1393.304854][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.326653][ T13] bridge_slave_0: left allmulticast mode [ 1393.338130][ T13] bridge_slave_0: left promiscuous mode [ 1393.350742][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.413264][ T13] pimreg9: left allmulticast mode [ 1393.576602][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1393.642030][ T9527] netlink: 'syz.2.8969': attribute type 39 has an invalid length. [ 1393.736960][ T5842] Bluetooth: hci3: command tx timeout [ 1393.766078][ T9530] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1393.930195][ T9536] Bluetooth: MGMT ver 1.23 [ 1394.099145][ T13] erspan0 (unregistering): left promiscuous mode [ 1394.213474][ T13] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1394.615102][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1394.743833][ T13] bond0 (unregistering): Released all slaves [ 1394.760911][ T13] bond1 (unregistering): Released all slaves [ 1394.780935][ T13] bond2 (unregistering): Released all slaves [ 1394.799792][ T13] bond3 (unregistering): Released all slaves [ 1394.829949][ T13] bond4 (unregistering): (slave veth11): Releasing backup interface [ 1394.838515][ T13] veth11: left promiscuous mode [ 1394.846512][ T13] bond4 (unregistering): Released all slaves [ 1394.878383][ T13] bond5 (unregistering): Released all slaves [ 1394.983813][ T9532] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1395.013506][ T9533] team0: No ports can be present during mode change [ 1395.089563][ T13] tipc: Disabling bearer [ 1395.136881][ T13] tipc: Left network mode [ 1395.291337][ T9544] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1395.531427][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1395.607525][ T9549] netlink: 'syz.1.8977': attribute type 7 has an invalid length. [ 1395.621167][ T9549] netlink: 'syz.1.8977': attribute type 8 has an invalid length. [ 1395.640950][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8977'. [ 1395.654815][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1395.666429][ T9558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8978'. [ 1395.743795][ T9549] ip6gretap0: entered promiscuous mode [ 1395.758611][ T9549] ip6gretap0: left promiscuous mode [ 1395.819292][ T5842] Bluetooth: hci3: command tx timeout [ 1396.115937][ T9457] chnl_net:caif_netlink_parms(): no params data found [ 1396.171165][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8980'. [ 1396.206961][ T9575] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 1396.289357][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8981'. [ 1396.331182][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8981'. [ 1396.380779][ T9573] netlink: 'syz.4.8981': attribute type 6 has an invalid length. [ 1396.531049][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8981'. [ 1396.583269][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8981'. [ 1396.621926][ T9573] netlink: 'syz.4.8981': attribute type 6 has an invalid length. [ 1396.697053][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1397.002468][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1397.012570][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.031709][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.049335][ T9457] bridge_slave_0: entered allmulticast mode [ 1397.092142][ T9457] bridge_slave_0: entered promiscuous mode [ 1397.112941][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.127951][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.142771][ T9457] bridge_slave_1: entered allmulticast mode [ 1397.171284][ T9457] bridge_slave_1: entered promiscuous mode [ 1397.220537][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.246626][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.281737][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.409467][ T9617] netlink: 'syz.4.8988': attribute type 22 has an invalid length. [ 1397.480526][ T9620] netlink: 'syz.1.8992': attribute type 1 has an invalid length. [ 1397.642311][ T13] ` (unregistering): Port device team_slave_1 removed [ 1397.734717][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1397.841498][ T9617] netlink: 'syz.4.8988': attribute type 22 has an invalid length. [ 1397.865790][ T9617] __nla_validate_parse: 3 callbacks suppressed [ 1397.865813][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8988'. [ 1397.903278][ T9620] bond11: entered promiscuous mode [ 1397.908486][ T5842] Bluetooth: hci3: command tx timeout [ 1397.918419][ T9620] bond11: entered allmulticast mode [ 1397.924670][ T9620] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1397.970183][ T9627] erspan1: entered allmulticast mode [ 1398.039035][ T9627] bond11: (slave erspan1): making interface the new active one [ 1398.064959][ T9627] erspan1: entered promiscuous mode [ 1398.072861][ T9627] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 1398.114448][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.161628][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.289000][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.417727][ T9457] team0: Port device team_slave_0 added [ 1398.448131][ T9457] team0: Port device team_slave_1 added [ 1398.681778][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.695165][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.774985][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1398.808037][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.866156][ T13] IPVS: stop unused estimator thread 0... [ 1398.878768][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.881546][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1398.906337][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.916655][ T9668] netlink: 'syz.0.9002': attribute type 7 has an invalid length. [ 1398.972383][ T9668] netlink: 'syz.0.9002': attribute type 8 has an invalid length. [ 1399.007529][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.025445][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1399.111963][ T9668] ip6gretap0: entered promiscuous mode [ 1399.553068][ T9668] ip6gretap0: left promiscuous mode [ 1399.631923][ T9688] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9006'. [ 1399.684223][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9006'. [ 1399.815157][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1399.908946][ T9694] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9008'. [ 1399.959690][ T9457] hsr_slave_0: entered promiscuous mode [ 1399.975462][T20539] Bluetooth: hci3: command tx timeout [ 1399.994765][ T9457] hsr_slave_1: entered promiscuous mode [ 1400.015401][ T9457] debugfs: 'hsr0' already exists in 'hsr' [ 1400.052395][ T9457] Cannot create hsr debugfs directory [ 1400.153209][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1400.251474][ T9712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9009'. [ 1400.376761][ T9715] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1400.662586][ T9721] xt_hashlimit: size too large, truncated to 1048576 [ 1400.857267][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1400.910018][ T9725] bond12 (unregistering): Released all slaves [ 1401.160322][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1401.436446][ T9737] ip6gretap0 (unregistering): left promiscuous mode [ 1401.515739][ T9753] xt_hashlimit: size too large, truncated to 1048576 [ 1401.750399][ T9760] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1401.894767][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.055709][T20539] Bluetooth: hci3: command 0x0405 tx timeout [ 1402.202490][ T9775] netlink: 'syz.1.9024': attribute type 1 has an invalid length. [ 1402.262734][ T9775] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9024'. [ 1402.365453][ T9775] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003 [ 1402.498521][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.587274][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.682158][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.756771][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.838050][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.897780][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.923071][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9028'. [ 1402.934774][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.966133][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1402.995584][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1403.034107][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9030'. [ 1403.045909][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1403.074055][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1403.089270][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9030'. [ 1403.100844][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1403.126865][ T9784] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1403.475984][ T9457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1403.520682][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1403.553748][ T9823] xt_hashlimit: size too large, truncated to 1048576 [ 1403.558106][ T9457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1403.622699][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1403.656137][ T9457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1403.690740][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1403.714059][ T9457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1403.771041][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1404.094002][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.192296][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.245407][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.252686][ T7605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.342053][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.349349][T11814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.417592][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9035'. [ 1405.226801][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.463059][ T9457] veth0_vlan: entered promiscuous mode [ 1405.505750][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1405.527065][ T9457] veth1_vlan: entered promiscuous mode [ 1405.562154][ T9871] dummy0: entered promiscuous mode [ 1405.580571][ T9871] macsec2: entered promiscuous mode [ 1405.593564][ T9871] team0: entered promiscuous mode [ 1405.615473][ T9871] team_slave_0: entered promiscuous mode [ 1405.622020][ T9871] team_slave_1: entered promiscuous mode [ 1405.643377][ T9871] macsec2: entered allmulticast mode [ 1405.662988][ T9871] team0: entered allmulticast mode [ 1405.675273][ T9871] team_slave_0: entered allmulticast mode [ 1405.687182][ T9879] xt_hashlimit: size too large, truncated to 1048576 [ 1405.694110][ T9871] team_slave_1: entered allmulticast mode [ 1405.701416][ T9871] dummy0: entered allmulticast mode [ 1405.720545][ T9871] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1405.722111][ T9880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1405.742127][ T9871] team0: Device macsec2 is already an upper device of the team interface [ 1405.776668][ T9871] team0: left allmulticast mode [ 1405.781755][ T9871] team_slave_0: left allmulticast mode [ 1405.797494][ T9871] team_slave_1: left allmulticast mode [ 1405.811489][ T9871] dummy0: left allmulticast mode [ 1405.827524][ T9871] team0: left promiscuous mode [ 1405.839723][ T9871] team_slave_0: left promiscuous mode [ 1405.854097][ T9871] team_slave_1: left promiscuous mode [ 1405.872440][ T9871] dummy0: left promiscuous mode [ 1406.030820][ T9457] veth0_macvtap: entered promiscuous mode [ 1406.088355][ T9457] veth1_macvtap: entered promiscuous mode [ 1406.175590][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.252133][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.329434][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9046'. [ 1406.353304][ T7605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.381266][ T7605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.426360][ T7605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.452481][ T7605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.512389][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9047'. [ 1406.560388][ T9896] netlink: 'syz.1.9047': attribute type 7 has an invalid length. [ 1406.592303][ T9896] netlink: 'syz.1.9047': attribute type 8 has an invalid length. [ 1406.634819][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9047'. [ 1406.703824][ T9896] ip6gretap0: entered promiscuous mode [ 1406.752305][ T9896] ip6gretap0: left promiscuous mode [ 1406.973418][T11800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.001657][T11800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.170580][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.201737][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.380156][ T9784] syz.4.9025 (9784) used greatest stack depth: 15360 bytes left [ 1407.597737][ T9929] xt_hashlimit: size too large, truncated to 1048576 [ 1407.828035][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9059'. [ 1407.878160][ T9938] netlink: 'syz.2.9059': attribute type 7 has an invalid length. [ 1407.931221][ T9938] netlink: 'syz.2.9059': attribute type 8 has an invalid length. [ 1407.980200][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9059'. [ 1408.007242][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9061'. [ 1408.134776][ C0] net_ratelimit: 1017 callbacks suppressed [ 1408.134797][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1408.189414][ T9951] tipc: Started in network mode [ 1408.220533][ T9951] tipc: Node identity ac14140f, cluster identity 4711 [ 1408.246096][ T9459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1408.272254][ T9459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1408.273076][ T9951] tipc: New replicast peer: 255.255.255.255 [ 1408.290006][ T9459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1408.308122][ T9459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1408.319978][ T9459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1408.367359][ T9951] tipc: Enabled bearer , priority 10 [ 1408.526630][ T9954] lo speed is unknown, defaulting to 1000 [ 1408.850890][ T9972] Cannot find set identified by id 0 to match [ 1408.893131][ T30] audit: type=1804 audit(1776461276.818:17): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9063" name="/newroot/614/memory.events" dev="tmpfs" ino=3164 res=1 errno=0 [ 1408.925487][T30420] syz_tun (unregistering): left promiscuous mode [ 1408.972549][ T30] audit: type=1800 audit(1776461276.818:18): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9063" name="memory.events" dev="tmpfs" ino=3164 res=0 errno=0 [ 1409.174997][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1409.231749][ T9987] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1409.860142][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9071'. [ 1409.872369][T10017] xt_hashlimit: size too large, truncated to 1048576 [ 1409.896139][T10018] netlink: 'syz.2.9071': attribute type 7 has an invalid length. [ 1409.940893][T10018] netlink: 'syz.2.9071': attribute type 8 has an invalid length. [ 1409.985728][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9071'. [ 1410.028979][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1410.087066][T30797] tipc: Node number set to 2886997007 [ 1410.112344][ T9954] syzkaller0 speed is unknown, defaulting to 1000 [ 1410.214863][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1410.229843][ T9954] lo speed is unknown, defaulting to 1000 [ 1410.378638][ T9771] Bluetooth: hci5: command tx timeout [ 1410.873507][T10044] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1411.310113][T10051] syzkaller0: entered promiscuous mode [ 1411.327673][T10051] syzkaller0: entered allmulticast mode [ 1411.617107][T10046] netlink: 'syz.0.9082': attribute type 1 has an invalid length. [ 1411.627945][T10046] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1411.637064][T10046] netlink: 658 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1411.877994][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1411.910356][T10067] netlink: 'syz.4.9086': attribute type 7 has an invalid length. [ 1411.935512][T10067] netlink: 'syz.4.9086': attribute type 8 has an invalid length. [ 1411.953601][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1412.014669][T10067] ip6gretap0: entered promiscuous mode [ 1412.040733][T10067] ip6gretap0: left promiscuous mode [ 1412.053182][T10073] xt_hashlimit: size too large, truncated to 1048576 [ 1412.455154][ T9771] Bluetooth: hci5: command tx timeout [ 1412.475376][ T9954] chnl_net:caif_netlink_parms(): no params data found [ 1412.516981][ T13] batadv0: left allmulticast mode [ 1412.533176][ T13] batadv0: left promiscuous mode [ 1412.540280][ T13] bridge0: port 3(batadv0) entered disabled state [ 1412.558130][ T13] bridge_slave_1: left allmulticast mode [ 1412.563968][ T13] bridge_slave_1: left promiscuous mode [ 1412.570273][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.583471][ T13] bridge_slave_0: left allmulticast mode [ 1412.588082][T10091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1412.592662][ T13] bridge_slave_0: left promiscuous mode [ 1412.606009][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.639705][ T13] pimreg: left allmulticast mode [ 1412.762541][ T13] bond7 (unregistering): (slave ip6erspan1): Releasing active interface [ 1412.902650][ T13] erspan0 (unregistering): left promiscuous mode [ 1412.932335][ T13] bond11 (unregistering): (slave erspan1): Releasing active interface [ 1412.942586][ T13] erspan1 (unregistering): left promiscuous mode [ 1413.002691][ T13] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1413.013329][ T13] gretap1 (unregistering): left promiscuous mode [ 1413.020568][ T13] gretap1 (unregistering): left allmulticast mode [ 1413.186768][T10095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9094'. [ 1413.335436][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1413.550347][ T13] bond10 (unregistering): (slave bridge7): Releasing active interface [ 1413.599679][ T13] bond1 (unregistering): Released all slaves [ 1413.619036][ T13] bond2 (unregistering): Released all slaves [ 1413.647271][ T13] bond0 (unregistering): Released all slaves [ 1413.666091][ T13] bond3 (unregistering): Released all slaves [ 1413.682873][ T13] bond4 (unregistering): Released all slaves [ 1413.705352][ T13] bond5 (unregistering): Released all slaves [ 1413.733923][ T13] bond6 (unregistering): Released all slaves [ 1413.757682][ T13] bond7 (unregistering): Released all slaves [ 1413.775353][ T13] bond8 (unregistering): Released all slaves [ 1413.791948][ T13] bond9 (unregistering): Released all slaves [ 1413.830626][ T13] bond10 (unregistering): Released all slaves [ 1413.850968][ T13] bond11 (unregistering): Released all slaves [ 1413.890799][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1414.374875][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1414.465917][ T13] tipc: Disabling bearer [ 1414.506940][ T13] tipc: Left network mode [ 1414.530980][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.538737][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.549800][ T9771] Bluetooth: hci5: command tx timeout [ 1414.555896][ T9954] bridge_slave_0: entered allmulticast mode [ 1414.564085][ T9954] bridge_slave_0: entered promiscuous mode [ 1414.616415][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.626797][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.634218][ T9954] bridge_slave_1: entered allmulticast mode [ 1414.646575][ T9954] bridge_slave_1: entered promiscuous mode [ 1414.818602][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.833149][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.968824][ T9954] team0: Port device team_slave_0 added [ 1415.002914][ T9954] team0: Port device team_slave_1 added [ 1415.363511][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.414918][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.418222][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1415.473871][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.518780][T10122] lo speed is unknown, defaulting to 1000 [ 1415.623056][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.643295][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.744424][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.100279][ T9954] hsr_slave_0: entered promiscuous mode [ 1416.116096][ T9954] hsr_slave_1: entered promiscuous mode [ 1416.130169][ T9954] debugfs: 'hsr0' already exists in 'hsr' [ 1416.166025][ T9954] Cannot create hsr debugfs directory [ 1416.187604][T10153] xt_hashlimit: size too large, truncated to 1048576 [ 1416.362007][T10122] syzkaller0 speed is unknown, defaulting to 1000 [ 1416.438152][T10122] lo speed is unknown, defaulting to 1000 [ 1416.455083][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1416.549709][T10161] xt_hashlimit: size too large, truncated to 1048576 [ 1416.616002][ T9771] Bluetooth: hci5: command tx timeout [ 1416.661128][T10162] netlink: 'syz.0.9106': attribute type 9 has an invalid length. [ 1417.236515][T10171] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9108'. [ 1417.305370][T10171] Cannot find add_set index 0 as target [ 1417.495193][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1417.561652][T10176] siw: device registration error -23 [ 1417.611928][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1417.720462][T10185] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9111'. [ 1418.091504][ T13] hsr_slave_0: left promiscuous mode [ 1418.098453][ T13] hsr_slave_1: left promiscuous mode [ 1418.107076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.118460][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.389808][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1418.410497][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1418.539805][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1418.560367][ T12] smc: removing ib device sqz0 [ 1418.588080][T10197] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1418.762785][T10201] ipvlan0: entered promiscuous mode [ 1419.399352][T10218] xt_hashlimit: size too large, truncated to 1048576 [ 1419.576407][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1420.083146][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9117'. [ 1420.135997][T10235] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 1420.300800][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9117'. [ 1420.615871][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1420.788680][T10237] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1420.827049][T10237] bond20: (slave vxcan3): Error -95 calling set_mac_address [ 1421.122299][T10242] macvlan3: entered promiscuous mode [ 1421.148683][T10242] macvlan3: entered allmulticast mode [ 1421.163335][T10242] bond20: entered promiscuous mode [ 1421.180789][T10242] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1421.205190][T10242] bond20: left promiscuous mode [ 1421.334134][ T9954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1421.382657][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1421.425525][ T9954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1421.469487][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.543311][ T9954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1421.571957][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1421.582108][T10271] netlink: 'syz.3.9126': attribute type 3 has an invalid length. [ 1421.611212][ T9954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1421.637859][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1421.655256][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1421.732081][T10271] nbd: nbd3 already in use [ 1421.769748][T10271] block nbd3: NBD_DISCONNECT [ 1421.786660][T10271] block nbd3: Send disconnect failed -32 [ 1421.797692][T10271] block nbd3: shutting down sockets [ 1421.893219][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.064688][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.128150][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9130'. [ 1422.157175][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.164435][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.171755][T10290] netlink: 'syz.3.9130': attribute type 7 has an invalid length. [ 1422.208079][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.215358][ T7605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.238821][T10290] netlink: 'syz.3.9130': attribute type 8 has an invalid length. [ 1422.265664][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9130'. [ 1422.337844][T10290] ip6gretap0: entered promiscuous mode [ 1422.362438][T10290] syz_tun: entered promiscuous mode [ 1422.379224][T10290] erspan0: entered promiscuous mode [ 1422.399759][T10290] debugfs: 'hsr1' already exists in 'hsr' [ 1422.429007][T10298] xt_hashlimit: max too large, truncated to 1048576 [ 1422.434760][T10290] Cannot create hsr debugfs directory [ 1422.695181][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1422.968272][T10312] xt_hashlimit: size too large, truncated to 1048576 [ 1423.089773][T10319] netlink: 'syz.0.9140': attribute type 1 has an invalid length. [ 1423.116739][T10319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1423.159604][T10319] netlink: 658 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1423.187412][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1423.198933][T10319] netlink: 'syz.0.9140': attribute type 1 has an invalid length. [ 1423.612458][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.723064][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1423.735225][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1423.750145][T10336] netlink: 'syz.0.9144': attribute type 7 has an invalid length. [ 1423.790335][T10336] netlink: 'syz.0.9144': attribute type 8 has an invalid length. [ 1423.833872][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1423.872020][T10338] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9145'. [ 1423.917639][T10336] ip6gretap0: entered promiscuous mode [ 1423.957961][T10336] ip6gretap0: left promiscuous mode [ 1424.074927][T10346] xt_HMARK: spi-set and port-set can't be combined [ 1424.092118][ T9954] veth0_vlan: entered promiscuous mode [ 1424.152288][ T9954] veth1_vlan: entered promiscuous mode [ 1424.292501][T10343] lo speed is unknown, defaulting to 1000 [ 1424.353905][ T9954] veth0_macvtap: entered promiscuous mode [ 1424.438253][ T9954] veth1_macvtap: entered promiscuous mode [ 1424.449450][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1424.566541][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.624075][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.678068][ T7605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.709951][ T7605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.743532][ T7605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.767587][ T7605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.777401][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1425.304602][T10377] FAULT_INJECTION: forcing a failure. [ 1425.304602][T10377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.334093][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.2.9150 Not tainted syzkaller #0 PREEMPT(full) [ 1425.334132][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1425.334147][T10377] Call Trace: [ 1425.334156][T10377] [ 1425.334167][T10377] dump_stack_lvl+0xe8/0x150 [ 1425.334207][T10377] should_fail_ex+0x412/0x560 [ 1425.334245][T10377] _copy_from_iter+0x1d3/0x1670 [ 1425.334282][T10377] ? rcu_is_watching+0x15/0xb0 [ 1425.334321][T10377] ? __pfx__copy_from_iter+0x10/0x10 [ 1425.334364][T10377] ? netlink_sendmsg+0x650/0xb40 [ 1425.334395][T10377] ? skb_put+0x11b/0x210 [ 1425.334431][T10377] netlink_sendmsg+0x6c0/0xb40 [ 1425.334475][T10377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.334512][T10377] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1425.334544][T10377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1425.334581][T10377] ____sys_sendmsg+0x972/0x9f0 [ 1425.334615][T10377] ? __might_fault+0xaf/0x130 [ 1425.334652][T10377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.334697][T10377] ? import_iovec+0x73/0xa0 [ 1425.334724][T10377] ___sys_sendmsg+0x2a5/0x360 [ 1425.334756][T10377] ? __lock_acquire+0x6b5/0x2cf0 [ 1425.334791][T10377] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.334822][T10377] ? __lock_acquire+0x6b5/0x2cf0 [ 1425.334865][T10377] ? kstrtouint+0x6e/0xe0 [ 1425.334942][T10377] __sys_sendmmsg+0x27c/0x4e0 [ 1425.334990][T10377] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1425.335023][T10377] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1425.335082][T10377] ? ksys_write+0x242/0x270 [ 1425.335119][T10377] ? __pfx_ksys_write+0x10/0x10 [ 1425.335159][T10377] __x64_sys_sendmmsg+0xa0/0xc0 [ 1425.335193][T10377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.335216][T10377] do_syscall_64+0x15f/0xf80 [ 1425.335243][T10377] ? trace_irq_disable+0x3b/0x140 [ 1425.335267][T10377] ? clear_bhb_loop+0x40/0x90 [ 1425.335295][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.335318][T10377] RIP: 0033:0x7f3d34d9c819 [ 1425.335339][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.335359][T10377] RSP: 002b:00007f3d35cbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1425.335385][T10377] RAX: ffffffffffffffda RBX: 00007f3d35015fa0 RCX: 00007f3d34d9c819 [ 1425.335401][T10377] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1425.335417][T10377] RBP: 00007f3d35cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.335432][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.335446][T10377] R13: 00007f3d35016038 R14: 00007f3d35015fa0 R15: 00007ffe1804cef8 [ 1425.335483][T10377] [ 1425.603275][T27487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.634841][T27487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.815293][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1425.840845][T27487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.849994][T27487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.918884][T10384] netlink: 'syz.0.9153': attribute type 16 has an invalid length. [ 1425.938493][T10384] netlink: 'syz.0.9153': attribute type 17 has an invalid length. [ 1426.027452][T10384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1426.278412][T10343] syzkaller0 speed is unknown, defaulting to 1000 [ 1426.577822][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9156'. [ 1426.607120][T10397] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1426.644173][T10397] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1426.781026][ T9459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1426.799815][ T9459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1426.810755][ T9459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1426.827447][ T9459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1426.841074][ T9459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1426.855067][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1426.968195][T10396] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1427.008499][T10396] syzkaller1: linktype set to 805 [ 1427.038675][T10397] dummy0: entered allmulticast mode [ 1427.187503][T10400] tipc: Resetting bearer [ 1427.341881][T28742] syz_tun (unregistering): left promiscuous mode [ 1427.469030][T10400] lo speed is unknown, defaulting to 1000 [ 1427.583314][T10420] netlink: 'syz.1.9162': attribute type 1 has an invalid length. [ 1427.674679][T10420] veth3: entered promiscuous mode [ 1427.722628][T10420] openvswitch: netlink: Unknown key attributes 2 [ 1427.729515][T10423] FAULT_INJECTION: forcing a failure. [ 1427.729515][T10423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.758131][T10423] CPU: 1 UID: 0 PID: 10423 Comm: syz.2.9163 Not tainted syzkaller #0 PREEMPT(full) [ 1427.758162][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1427.758177][T10423] Call Trace: [ 1427.758185][T10423] [ 1427.758196][T10423] dump_stack_lvl+0xe8/0x150 [ 1427.758235][T10423] should_fail_ex+0x412/0x560 [ 1427.758271][T10423] _copy_from_iter+0x1d3/0x1670 [ 1427.758309][T10423] ? rcu_is_watching+0x15/0xb0 [ 1427.758357][T10423] ? __pfx__copy_from_iter+0x10/0x10 [ 1427.758399][T10423] ? netlink_sendmsg+0x650/0xb40 [ 1427.758437][T10423] ? skb_put+0x11b/0x210 [ 1427.758473][T10423] netlink_sendmsg+0x6c0/0xb40 [ 1427.758516][T10423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.758614][T10423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1427.758646][T10423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1427.758683][T10423] ____sys_sendmsg+0x972/0x9f0 [ 1427.758717][T10423] ? __might_fault+0xaf/0x130 [ 1427.758754][T10423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1427.758799][T10423] ? import_iovec+0x73/0xa0 [ 1427.758826][T10423] ___sys_sendmsg+0x2a5/0x360 [ 1427.758859][T10423] ? __lock_acquire+0x6b5/0x2cf0 [ 1427.758894][T10423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.758926][T10423] ? __lock_acquire+0x6b5/0x2cf0 [ 1427.758960][T10423] ? kstrtouint+0x6e/0xe0 [ 1427.759038][T10423] __sys_sendmmsg+0x27c/0x4e0 [ 1427.759079][T10423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1427.759111][T10423] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1427.759170][T10423] ? ksys_write+0x242/0x270 [ 1427.759206][T10423] ? __pfx_ksys_write+0x10/0x10 [ 1427.759247][T10423] __x64_sys_sendmmsg+0xa0/0xc0 [ 1427.759281][T10423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.759306][T10423] do_syscall_64+0x15f/0xf80 [ 1427.759333][T10423] ? trace_irq_disable+0x3b/0x140 [ 1427.759357][T10423] ? clear_bhb_loop+0x40/0x90 [ 1427.759385][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.759408][T10423] RIP: 0033:0x7f3d34d9c819 [ 1427.759430][T10423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.759450][T10423] RSP: 002b:00007f3d35cbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1427.759476][T10423] RAX: ffffffffffffffda RBX: 00007f3d35015fa0 RCX: 00007f3d34d9c819 [ 1427.759493][T10423] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1427.759509][T10423] RBP: 00007f3d35cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.759524][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1427.759544][T10423] R13: 00007f3d35016038 R14: 00007f3d35015fa0 R15: 00007ffe1804cef8 [ 1427.759582][T10423] [ 1427.896886][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1428.157311][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1428.186118][ T13] IPVS: stop unused estimator thread 0... [ 1428.323301][T10435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9167'. [ 1428.383091][T10400] syzkaller0 speed is unknown, defaulting to 1000 [ 1428.749238][ T13] bond6: left allmulticast mode [ 1428.761897][ T13] bridge0: port 5(bond6) entered disabled state [ 1428.780686][ T13] macvlan2: left allmulticast mode [ 1428.792757][ T13] macvlan2: left promiscuous mode [ 1428.803330][ T13] bridge0: port 3(macvlan2) entered disabled state [ 1428.934827][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1428.944748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 1428.953004][ C1] lec:lec_tx_timeout: lec0 [ 1428.957710][ T9771] Bluetooth: hci4: command tx timeout [ 1429.421567][ T13] bond9 (unregistering): (slave gretap1): Releasing active interface [ 1429.545672][ T13] bond4 (unregistering): (slave bridge1): Releasing active interface [ 1429.599531][ T13] team0: Port device bridge2 removed [ 1429.783227][ T13] bond2 (unregistering): Released all slaves [ 1429.800810][ T13] bond1 (unregistering): Released all slaves [ 1429.829557][ T13] bond3 (unregistering): Released all slaves [ 1429.853468][ T13] bond4 (unregistering): Released all slaves [ 1429.871220][ T13] bond5 (unregistering): Released all slaves [ 1429.891514][ T13] bond6 (unregistering): Released all slaves [ 1429.929089][ T13] bond0 (unregistering): Released all slaves [ 1429.949943][ T13] bond7 (unregistering): Released all slaves [ 1429.973819][ T13] bond8 (unregistering): Released all slaves [ 1429.981923][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1430.051113][ T13] bond9 (unregistering): Released all slaves [ 1430.087888][ T13] bond10 (unregistering): left promiscuous mode [ 1430.110414][ T13] bond10 (unregistering): Released all slaves [ 1430.153397][ T13] team0: Port device bond11 removed [ 1430.173643][ T13] bond11 (unregistering): Released all slaves [ 1430.196316][ T13] bond12 (unregistering): Released all slaves [ 1430.258554][ T13] bond13 (unregistering): Released all slaves [ 1430.339966][T10449] syzkaller0: entered promiscuous mode [ 1430.346760][T10449] syzkaller0: entered allmulticast mode [ 1430.718065][T10400] chnl_net:caif_netlink_parms(): no params data found [ 1430.772046][T10499] netlink: 'syz.3.9181': attribute type 1 has an invalid length. [ 1430.785811][ T13] !: left promiscuous mode [ 1431.009138][T10499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9181'. [ 1431.018742][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1431.019263][ T9459] Bluetooth: hci4: command tx timeout [ 1431.189741][T10509] siw: device registration error -23 [ 1431.210768][ T13] tipc: Disabling bearer [ 1431.216980][ T13] tipc: Disabling bearer [ 1431.237637][ T13] tipc: Left network mode [ 1431.459279][T10512] netlink: 'syz.4.9185': attribute type 3 has an invalid length. [ 1431.480039][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1431.490006][T10514] netlink: 'syz.2.9186': attribute type 7 has an invalid length. [ 1431.500301][T10514] netlink: 'syz.2.9186': attribute type 8 has an invalid length. [ 1431.508910][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1431.572368][T10512] nbd: nbd4 already in use [ 1431.602993][T10512] block nbd4: NBD_DISCONNECT [ 1431.631384][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.639396][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.647182][T10400] bridge_slave_0: entered allmulticast mode [ 1431.649924][T10512] block nbd4: Send disconnect failed -32 [ 1431.656099][T10400] bridge_slave_0: entered promiscuous mode [ 1431.716514][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.750789][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.762158][T10400] bridge_slave_1: entered allmulticast mode [ 1431.802638][T10400] bridge_slave_1: entered promiscuous mode [ 1432.054976][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1432.096433][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.176636][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.193643][T10545] xt_hashlimit: size too large, truncated to 1048576 [ 1432.327094][T10400] team0: Port device team_slave_0 added [ 1432.422080][T10400] team0: Port device team_slave_1 added [ 1432.503684][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9197'. [ 1432.526665][T10555] netlink: 'syz.2.9197': attribute type 7 has an invalid length. [ 1432.540932][T10555] netlink: 'syz.2.9197': attribute type 8 has an invalid length. [ 1432.557969][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9197'. [ 1432.666279][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.689121][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.752300][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.766138][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.773184][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.806888][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.819159][T10552] lo speed is unknown, defaulting to 1000 [ 1433.094744][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1433.107284][ T9459] Bluetooth: hci4: command tx timeout [ 1433.267945][T10400] hsr_slave_0: entered promiscuous mode [ 1433.283801][T10400] hsr_slave_1: entered promiscuous mode [ 1433.293610][T10400] debugfs: 'hsr0' already exists in 'hsr' [ 1433.306243][T10400] Cannot create hsr debugfs directory [ 1433.391295][T10577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9206'. [ 1433.488351][T10580] netlink: 'syz.3.9205': attribute type 16 has an invalid length. [ 1433.552605][T10580] netlink: 'syz.3.9205': attribute type 17 has an invalid length. [ 1433.659481][T10580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1433.930067][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9208'. [ 1433.970681][T10597] netlink: 'syz.1.9208': attribute type 7 has an invalid length. [ 1434.014906][T10597] netlink: 'syz.1.9208': attribute type 8 has an invalid length. [ 1434.031041][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9208'. [ 1434.091817][T10597] ip6gretap0: entered promiscuous mode [ 1434.101019][T10597] syz_tun: entered promiscuous mode [ 1434.108433][T10597] erspan0: entered promiscuous mode [ 1434.115208][T10597] debugfs: 'hsr1' already exists in 'hsr' [ 1434.121309][T10597] Cannot create hsr debugfs directory [ 1434.133032][T10552] syzkaller0 speed is unknown, defaulting to 1000 [ 1434.136645][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1434.376947][T10608] xt_hashlimit: size too large, truncated to 1048576 [ 1434.521235][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1435.174736][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1435.187583][ T9459] Bluetooth: hci4: command tx timeout [ 1435.639636][T10635] syzkaller1: entered promiscuous mode [ 1435.655124][T10635] syzkaller1: entered allmulticast mode [ 1435.719291][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9217'. [ 1435.850126][ T13] hsr_slave_0: left promiscuous mode [ 1435.868039][ T13] hsr_slave_1: left promiscuous mode [ 1436.214990][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1437.255479][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1437.502023][T10683] xt_hashlimit: size too large, truncated to 1048576 [ 1437.667915][T10687] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9224'. [ 1437.687010][ T13] IPVS: stop unused estimator thread 0... [ 1437.991571][T10702] xt_HMARK: spi-set and port-set can't be combined [ 1438.296768][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1438.583264][T10692] lo speed is unknown, defaulting to 1000 [ 1438.841098][T10729] netdevsim0: mtu less than device minimum [ 1438.920125][T10400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1438.981901][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1439.006773][T10400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1439.053651][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.129601][T10400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1439.229368][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.255547][T10400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1439.329651][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1439.334808][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1439.884154][T10743] lo speed is unknown, defaulting to 1000 [ 1440.374990][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1440.466751][T10774] netlink: 'syz.3.9237': attribute type 2 has an invalid length. [ 1440.501413][T10774] netlink: 'syz.3.9237': attribute type 9 has an invalid length. [ 1440.553304][T10774] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9237'. [ 1440.556461][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.674048][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.743182][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.750484][T11809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.831690][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9240'. [ 1440.852757][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.860096][T11814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.129898][T10738] lo speed is unknown, defaulting to 1000 [ 1441.342825][T10794] FAULT_INJECTION: forcing a failure. [ 1441.342825][T10794] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.381179][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.4.9243 Not tainted syzkaller #0 PREEMPT(full) [ 1441.381211][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1441.381225][T10794] Call Trace: [ 1441.381235][T10794] [ 1441.381244][T10794] dump_stack_lvl+0xe8/0x150 [ 1441.381283][T10794] should_fail_ex+0x412/0x560 [ 1441.381320][T10794] should_failslab+0xa8/0x100 [ 1441.381347][T10794] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1441.381380][T10794] ? __alloc_skb+0x186/0x7d0 [ 1441.381409][T10794] ? __alloc_skb+0x1d0/0x7d0 [ 1441.381436][T10794] ? __local_bh_enable_ip+0xd0/0x130 [ 1441.381471][T10794] __alloc_skb+0x1d0/0x7d0 [ 1441.381501][T10794] ? is_bpf_text_address+0x26/0x2b0 [ 1441.381532][T10794] alloc_skb_with_frags+0xca/0x890 [ 1441.381574][T10794] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.381607][T10794] sock_alloc_send_pskb+0x878/0x990 [ 1441.381638][T10794] ? __kernel_text_address+0xd/0x30 [ 1441.381675][T10794] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1441.381696][T10794] ? do_raw_spin_lock+0x12b/0x2f0 [ 1441.381739][T10794] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.381771][T10794] __ip_append_data+0x2bbb/0x3f30 [ 1441.381818][T10794] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1441.381844][T10794] ? ipv4_mtu+0x23/0x650 [ 1441.381887][T10794] ? ipv4_mtu+0x23/0x650 [ 1441.381922][T10794] ? __pfx___ip_append_data+0x10/0x10 [ 1441.381944][T10794] ? ipv4_mtu+0x23/0x650 [ 1441.381976][T10794] ? __pfx_ipv4_mtu+0x10/0x10 [ 1441.382007][T10794] ? ip_setup_cork+0x57e/0xa50 [ 1441.382032][T10794] ip_make_skb+0x22e/0x450 [ 1441.382061][T10794] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1441.382085][T10794] ? __pfx_ip_make_skb+0x10/0x10 [ 1441.382129][T10794] udp_sendmsg+0x18fd/0x21a0 [ 1441.382164][T10794] ? string+0x279/0x2b0 [ 1441.382208][T10794] ? __pfx_udp_sendmsg+0x10/0x10 [ 1441.382247][T10794] ? format_decode+0x5a3/0xe10 [ 1441.382278][T10794] ? look_up_lock_class+0x57/0x110 [ 1441.382314][T10794] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.382360][T10794] ? get_random_u32+0x4ce/0x8b0 [ 1441.382396][T10794] udpv6_sendmsg+0x996/0x25c0 [ 1441.382443][T10794] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1441.382468][T10794] ? udp_lib_get_port+0x177a/0x1c60 [ 1441.382502][T10794] ? ip6_datagram_release_cb+0x7c/0x550 [ 1441.382551][T10794] ? inet_send_prepare+0x1b9/0x270 [ 1441.382574][T10794] ? inet_send_prepare+0x1b9/0x270 [ 1441.382600][T10794] ? inet_send_prepare+0x1b9/0x270 [ 1441.382620][T10794] ? __local_bh_enable_ip+0xd0/0x130 [ 1441.382650][T10794] ? inet_send_prepare+0x1b9/0x270 [ 1441.382676][T10794] ? inet6_sendmsg+0xe4/0x120 [ 1441.382703][T10794] ____sys_sendmsg+0x5c7/0x9f0 [ 1441.382753][T10794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.382798][T10794] ? import_iovec+0x73/0xa0 [ 1441.382825][T10794] ___sys_sendmsg+0x2a5/0x360 [ 1441.382857][T10794] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.382891][T10794] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.382965][T10794] ? __fget_files+0x2a/0x420 [ 1441.382992][T10794] ? __fget_files+0x3a0/0x420 [ 1441.383032][T10794] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1441.383069][T10794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1441.383114][T10794] ? __pfx_ksys_write+0x10/0x10 [ 1441.383156][T10794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.383180][T10794] do_syscall_64+0x15f/0xf80 [ 1441.383206][T10794] ? trace_irq_disable+0x3b/0x140 [ 1441.383230][T10794] ? clear_bhb_loop+0x40/0x90 [ 1441.383257][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.383279][T10794] RIP: 0033:0x7f2baa59c819 [ 1441.383300][T10794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.383319][T10794] RSP: 002b:00007f2bab3d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.383345][T10794] RAX: ffffffffffffffda RBX: 00007f2baa815fa0 RCX: 00007f2baa59c819 [ 1441.383362][T10794] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1441.383377][T10794] RBP: 00007f2bab3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.383392][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.383405][T10794] R13: 00007f2baa816038 R14: 00007f2baa815fa0 R15: 00007ffe80681798 [ 1441.383442][T10794] [ 1441.403459][ T13] tipc: Resetting bearer [ 1441.416080][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1442.003069][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9244'. [ 1442.014848][T10803] netlink: 'syz.4.9244': attribute type 7 has an invalid length. [ 1442.022839][T10803] netlink: 'syz.4.9244': attribute type 8 has an invalid length. [ 1442.031417][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9244'. [ 1442.274136][ T13] tipc: Disabling bearer [ 1442.454999][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1442.573120][ T13] bond4 (unregistering): (slave gretap0): Releasing active interface [ 1442.675880][ T13] bond7 (unregistering): (slave geneve4): Releasing backup interface [ 1442.799831][ T13] team0: Port device bridge1 removed [ 1443.140591][ T13] bond1 (unregistering): Released all slaves [ 1443.158272][ T13] bond2 (unregistering): Released all slaves [ 1443.179492][ T13] bond0 (unregistering): left promiscuous mode [ 1443.186849][ T13] bond0 (unregistering): Released all slaves [ 1443.210576][ T13] bond3 (unregistering): Released all slaves [ 1443.228468][ T13] bond4 (unregistering): Released all slaves [ 1443.250668][ T13] bond5 (unregistering): (slave veth7): Releasing backup interface [ 1443.260599][ T13] veth7: left promiscuous mode [ 1443.266137][ T13] veth7: left allmulticast mode [ 1443.272697][ T13] bond5 (unregistering): Released all slaves [ 1443.291026][ T13] bond6 (unregistering): Released all slaves [ 1443.307782][ T13] bond7 (unregistering): Released all slaves [ 1443.354893][T10792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9242'. [ 1443.478940][ T13] tipc: Disabling bearer [ 1443.490340][ T13] tipc: Left network mode [ 1443.495060][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1443.543406][T10803] ip6gretap0: entered promiscuous mode [ 1443.602947][T10803] ip6gretap0: left promiscuous mode [ 1444.183003][T10829] lo speed is unknown, defaulting to 1000 [ 1444.534822][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1444.607713][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9247'. [ 1445.197600][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9252'. [ 1445.209839][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.399727][T10869] netlink: 'syz.2.9253': attribute type 13 has an invalid length. [ 1445.575062][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1445.927972][T10400] veth0_vlan: entered promiscuous mode [ 1446.060164][T10400] veth1_vlan: entered promiscuous mode [ 1446.089935][T10880] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1446.317471][T10400] veth0_macvtap: entered promiscuous mode [ 1446.354594][T10400] veth1_macvtap: entered promiscuous mode [ 1446.438959][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.480328][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.488307][T10885] netlink: 'syz.4.9256': attribute type 1 has an invalid length. [ 1446.540454][T10885] netlink: 248 bytes leftover after parsing attributes in process `syz.4.9256'. [ 1446.571821][T10374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.599434][T10374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.614796][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1446.631317][T10374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.676133][T10374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.812019][T10892] xt_hashlimit: size too large, truncated to 1048576 [ 1446.970614][T10897] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1446.994742][T10897] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1447.004776][ T13] batadv0: left promiscuous mode [ 1447.051056][ T13] hsr_slave_0: left promiscuous mode [ 1447.068696][ T13] hsr_slave_1: left promiscuous mode [ 1447.654629][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1448.100954][ T13] team0 (unregistering): Port device €Â removed [ 1448.185775][T10899] geneve6: entered promiscuous mode [ 1448.192851][T10920] gre0: entered promiscuous mode [ 1448.200436][T10920] gre0: entered allmulticast mode [ 1448.216922][T10927] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1448.249074][T11817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1448.274717][T11817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1448.300647][T10929] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1448.343876][T11807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.376573][T11807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.449190][T11817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1448.489566][T11817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1448.643604][T27487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.657487][T27487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.694798][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1449.268011][ T13] IPVS: stop unused estimator thread 0... [ 1449.479458][T10964] lo speed is unknown, defaulting to 1000 [ 1449.734663][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1450.239285][ T9771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1450.258035][ T9771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1450.271916][ T9771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1450.286710][ T9771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1450.310263][ T9771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1450.679845][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1450.774706][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1451.244090][T16366] lec:lec_start_xmit: lec0:No lecd attached [ 1451.768437][T10995] lo speed is unknown, defaulting to 1000 [ 1451.815576][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1452.376596][ T9459] Bluetooth: hci2: command tx timeout [ 1452.621164][T11063] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1452.713441][T11077] netlink: 'syz.0.9296': attribute type 13 has an invalid length. [ 1452.772844][T11077] netlink: 'syz.0.9296': attribute type 17 has an invalid length. [ 1452.854980][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1453.042082][T11077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1453.896657][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1454.459777][ T9459] Bluetooth: hci2: command tx timeout [ 1454.526185][T11131] veth0_macvtap: left promiscuous mode [ 1454.842879][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1454.888581][T11147] pimreg: entered allmulticast mode [ 1454.894172][T11147] pimreg: left allmulticast mode [ 1454.936817][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1455.026480][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9309'. [ 1455.078611][T11813] vlan1: left promiscuous mode [ 1455.084975][T11813] bridge0: port 4(vlan1) entered disabled state [ 1455.093901][T11813] team0: left allmulticast mode [ 1455.099377][T11813] team_slave_1: left allmulticast mode [ 1455.106525][T11813] team0: left promiscuous mode [ 1455.112179][T11813] team_slave_1: left promiscuous mode [ 1455.121477][T11813] bridge0: port 3(team0) entered disabled state [ 1455.131733][T11813] bridge_slave_1: left allmulticast mode [ 1455.140482][T11813] bridge_slave_1: left promiscuous mode [ 1455.150306][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.172493][T11813] bridge_slave_0: left promiscuous mode [ 1455.203869][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.282590][T11166] xt_hashlimit: size too large, truncated to 1048576 [ 1455.513600][T11813] erspan0 (unregistering): left promiscuous mode [ 1455.659540][T11813] bridge0 (unregistering): left promiscuous mode [ 1455.921340][T11813] team0: Port device bridge5 removed [ 1455.974809][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1456.070718][T11813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.083692][T11813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.097957][T11813] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 1456.110852][T11813] bond0 (unregistering): Released all slaves [ 1456.136655][T11813] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 1456.147446][T11813] bond1 (unregistering): Released all slaves [ 1456.165873][T11813] bond2 (unregistering): Released all slaves [ 1456.182869][T11813] bond3 (unregistering): Released all slaves [ 1456.208429][T11813] bond4 (unregistering): Released all slaves [ 1456.230603][T11813] bond5 (unregistering): Released all slaves [ 1456.250253][T11813] bond6 (unregistering): Released all slaves [ 1456.266402][T11813] bond7 (unregistering): Released all slaves [ 1456.282333][T10995] chnl_net:caif_netlink_parms(): no params data found [ 1456.353377][T11160] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1456.529099][T11813] : left promiscuous mode [ 1456.540360][ T9459] Bluetooth: hci2: command tx timeout [ 1456.746041][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9313'. [ 1456.910750][T11813] tipc: Left network mode [ 1456.943643][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 1456.951788][ C1] lec:lec_tx_timeout: lec0 [ 1457.015768][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1457.085044][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.124124][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.179171][T10995] bridge_slave_0: entered allmulticast mode [ 1457.199763][T10995] bridge_slave_0: entered promiscuous mode [ 1457.240628][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1457.379981][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9317'. [ 1457.493848][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.501891][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.523492][T10995] bridge_slave_1: entered allmulticast mode [ 1457.541508][T10995] bridge_slave_1: entered promiscuous mode [ 1457.681928][T11197] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1457.719092][T11200] bond10: entered promiscuous mode [ 1457.769011][T11200] bond10: entered allmulticast mode [ 1457.931959][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.052151][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.061859][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1458.096592][T11224] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1458.240885][T10995] team0: Port device team_slave_0 added [ 1458.266175][T10995] team0: Port device team_slave_1 added [ 1458.287613][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1458.349229][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1458.406440][T11234] team_slave_0: entered promiscuous mode [ 1458.414415][T11234] team_slave_1: entered promiscuous mode [ 1458.443614][T11234] macvtap1: entered promiscuous mode [ 1458.459992][T11234] team0: entered promiscuous mode [ 1458.492220][T11234] macvtap1: entered allmulticast mode [ 1458.512070][T11234] team0: entered allmulticast mode [ 1458.524495][T11234] team_slave_0: entered allmulticast mode [ 1458.530465][T11234] team_slave_1: entered allmulticast mode [ 1458.540434][T11234] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1458.615272][ T9459] Bluetooth: hci2: command tx timeout [ 1458.636171][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.643525][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.672384][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.711986][T11236] team0: left allmulticast mode [ 1458.724839][T11236] team_slave_0: left allmulticast mode [ 1458.730638][T11236] team_slave_1: left allmulticast mode [ 1458.754050][T11236] team0: left promiscuous mode [ 1458.768857][T11236] team_slave_0: left promiscuous mode [ 1458.776994][T11236] team_slave_1: left promiscuous mode [ 1458.792703][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1458.838385][T11242] tipc: Enabling of bearer rejected, already enabled [ 1458.844057][T11251] Bluetooth: MGMT ver 1.23 [ 1458.852350][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.862159][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.891043][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.013133][T11256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9326'. [ 1459.048985][T11254] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9326'. [ 1459.100676][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1459.136298][T11238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.166642][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9327'. [ 1459.365124][T11267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.447365][T11272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9330'. [ 1459.528046][T11238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.566537][T11276] xt_hashlimit: size too large, truncated to 1048576 [ 1459.720247][T10995] hsr_slave_0: entered promiscuous mode [ 1459.762464][T10995] hsr_slave_1: entered promiscuous mode [ 1459.772559][T10995] debugfs: 'hsr0' already exists in 'hsr' [ 1459.788735][T10995] Cannot create hsr debugfs directory [ 1460.066583][T11238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.134762][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1460.187014][T11295] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1460.401973][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1460.480063][T11238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.675338][T11317] SET target dimension over the limit! [ 1461.093474][T11813] hsr_slave_0: left promiscuous mode [ 1461.144143][T11813] hsr_slave_1: left promiscuous mode [ 1461.161925][T11813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.170491][T11813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.175990][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1461.436916][T11813] team0 (unregistering): Port device team_slave_1 removed [ 1461.679819][T11325] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1461.726686][T11328] batadv_slave_0: entered promiscuous mode [ 1461.740451][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1461.791101][T11326] batadv_slave_0: left promiscuous mode [ 1462.059770][T11342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.216639][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1462.376262][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.537731][T11817] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.626693][T11809] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.716476][T11358] __nla_validate_parse: 1 callbacks suppressed [ 1462.716501][T11358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1463.166317][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.187952][T11813] IPVS: stop unused estimator thread 0... [ 1463.245817][T11809] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.254925][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1463.393187][T11374] syzkaller0: entered promiscuous mode [ 1463.409533][T11376] FAULT_INJECTION: forcing a failure. [ 1463.409533][T11376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.429090][T11374] syzkaller0: entered allmulticast mode [ 1463.491290][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.4.9348 Not tainted syzkaller #0 PREEMPT(full) [ 1463.491322][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1463.491336][T11376] Call Trace: [ 1463.491345][T11376] [ 1463.491355][T11376] dump_stack_lvl+0xe8/0x150 [ 1463.491393][T11376] should_fail_ex+0x412/0x560 [ 1463.491430][T11376] _copy_from_user+0x2d/0xb0 [ 1463.491460][T11376] do_sock_getsockopt+0x200/0x7e0 [ 1463.491500][T11376] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1463.491551][T11376] ? __fget_files+0x3a0/0x420 [ 1463.491578][T11376] ? __fget_files+0x2a/0x420 [ 1463.491614][T11376] __x64_sys_getsockopt+0x1a4/0x240 [ 1463.491654][T11376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.491678][T11376] do_syscall_64+0x15f/0xf80 [ 1463.491704][T11376] ? trace_irq_disable+0x3b/0x140 [ 1463.491728][T11376] ? clear_bhb_loop+0x40/0x90 [ 1463.491757][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.491779][T11376] RIP: 0033:0x7f2baa59c819 [ 1463.491800][T11376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.491820][T11376] RSP: 002b:00007f2bab3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1463.491845][T11376] RAX: ffffffffffffffda RBX: 00007f2baa815fa0 RCX: 00007f2baa59c819 [ 1463.491862][T11376] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 1463.491888][T11376] RBP: 00007f2bab3d7090 R08: 0000200000005540 R09: 0000000000000000 [ 1463.491904][T11376] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1463.491919][T11376] R13: 00007f2baa816038 R14: 00007f2baa815fa0 R15: 00007ffe80681798 [ 1463.491956][T11376] [ 1463.747071][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9347'. [ 1463.940523][T10995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1463.990224][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1464.014840][T10995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1464.048493][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.172405][T10995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1464.220933][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1464.294720][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1464.321240][T10995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1464.340990][T10995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1464.542941][T10995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.592605][T10995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.621792][T27487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.629106][T27487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.658747][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.666110][T11809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.075581][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.167586][T10995] veth0_vlan: entered promiscuous mode [ 1465.188078][T10995] veth1_vlan: entered promiscuous mode [ 1465.266619][T10995] veth0_macvtap: entered promiscuous mode [ 1465.289567][T10995] veth1_macvtap: entered promiscuous mode [ 1465.314025][T10995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.334765][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1465.360599][T10995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.382234][T27487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.401266][T27487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.440269][T27487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.479937][T27487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.620192][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.645113][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.692384][T27487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.702628][T27487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.374988][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1467.414897][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1468.454803][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1468.857222][ T5193] udevd[5193]: worker [5835] /devices/virtual/block/nbd1 is taking a long time [ 1469.494924][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1470.535422][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1471.574810][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1472.614886][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1473.654852][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1474.694835][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1475.734879][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1476.774814][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1476.931018][T11459] x_tables: duplicate underflow at hook 1 [ 1477.148127][T11466] FAULT_INJECTION: forcing a failure. [ 1477.148127][T11466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.185034][T11466] CPU: 0 UID: 0 PID: 11466 Comm: syz.0.9360 Not tainted syzkaller #0 PREEMPT(full) [ 1477.185066][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1477.185081][T11466] Call Trace: [ 1477.185091][T11466] [ 1477.185101][T11466] dump_stack_lvl+0xe8/0x150 [ 1477.185139][T11466] should_fail_ex+0x412/0x560 [ 1477.185187][T11466] _copy_from_user+0x2d/0xb0 [ 1477.185213][T11466] sctp_getsockopt_enable_strreset+0xbe/0x540 [ 1477.185246][T11466] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1477.185276][T11466] ? __pfx_sctp_getsockopt_enable_strreset+0x10/0x10 [ 1477.185305][T11466] ? sctp_getsockopt+0x12f/0xb90 [ 1477.185338][T11466] ? __local_bh_enable_ip+0xd0/0x130 [ 1477.185373][T11466] sctp_getsockopt+0xa4f/0xb90 [ 1477.185403][T11466] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1477.185432][T11466] do_sock_getsockopt+0x51d/0x7e0 [ 1477.185473][T11466] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1477.185526][T11466] ? __fget_files+0x3a0/0x420 [ 1477.185554][T11466] ? __fget_files+0x2a/0x420 [ 1477.185590][T11466] __x64_sys_getsockopt+0x1a4/0x240 [ 1477.185629][T11466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.185654][T11466] do_syscall_64+0x15f/0xf80 [ 1477.185680][T11466] ? trace_irq_disable+0x3b/0x140 [ 1477.185703][T11466] ? clear_bhb_loop+0x40/0x90 [ 1477.185731][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.185753][T11466] RIP: 0033:0x7f53b419c819 [ 1477.185773][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.185792][T11466] RSP: 002b:00007f53b4fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1477.185814][T11466] RAX: ffffffffffffffda RBX: 00007f53b4415fa0 RCX: 00007f53b419c819 [ 1477.185831][T11466] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 1477.185844][T11466] RBP: 00007f53b4fc8090 R08: 0000200000005540 R09: 0000000000000000 [ 1477.185859][T11466] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1477.185874][T11466] R13: 00007f53b4416038 R14: 00007f53b4415fa0 R15: 00007ffd36e97608 [ 1477.185909][T11466] [ 1477.566060][ T9771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1477.586667][ T9771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1477.602725][ T9771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1477.611206][ T9771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1477.620285][ T9771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1477.814899][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1477.852696][T11485] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1477.871326][T11468] lo speed is unknown, defaulting to 1000 [ 1477.888833][T11479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9362'. [ 1477.926515][T11485] openvswitch: netlink: Message has 16 unknown bytes. [ 1477.926515][T11484] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1478.007435][T11486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9365'. [ 1478.129413][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1478.177420][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9369'. [ 1478.330073][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1478.346825][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1478.363312][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1478.373724][T11492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1478.411474][T11500] netlink: 'syz.2.9370': attribute type 7 has an invalid length. [ 1478.428392][T11500] netlink: 'syz.2.9370': attribute type 8 has an invalid length. [ 1478.502442][T11500] ip6gretap0: entered promiscuous mode [ 1478.517279][T11500] syz_tun: entered promiscuous mode [ 1478.533434][T11500] erspan0: entered promiscuous mode [ 1478.631294][T11507] FAULT_INJECTION: forcing a failure. [ 1478.631294][T11507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.645351][T11507] CPU: 0 UID: 0 PID: 11507 Comm: syz.0.9373 Not tainted syzkaller #0 PREEMPT(full) [ 1478.645383][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1478.645397][T11507] Call Trace: [ 1478.645407][T11507] [ 1478.645417][T11507] dump_stack_lvl+0xe8/0x150 [ 1478.645456][T11507] should_fail_ex+0x412/0x560 [ 1478.645493][T11507] _copy_to_user+0x31/0xb0 [ 1478.645520][T11507] sctp_getsockopt_enable_strreset+0x3f3/0x540 [ 1478.645552][T11507] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1478.645581][T11507] ? __pfx_sctp_getsockopt_enable_strreset+0x10/0x10 [ 1478.645610][T11507] ? sctp_getsockopt+0x12f/0xb90 [ 1478.645642][T11507] ? __local_bh_enable_ip+0xd0/0x130 [ 1478.645678][T11507] sctp_getsockopt+0xa4f/0xb90 [ 1478.645708][T11507] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1478.645737][T11507] do_sock_getsockopt+0x51d/0x7e0 [ 1478.645778][T11507] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1478.645830][T11507] ? __fget_files+0x3a0/0x420 [ 1478.645872][T11507] ? __fget_files+0x2a/0x420 [ 1478.645909][T11507] __x64_sys_getsockopt+0x1a4/0x240 [ 1478.645949][T11507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.645974][T11507] do_syscall_64+0x15f/0xf80 [ 1478.646006][T11507] ? trace_irq_disable+0x3b/0x140 [ 1478.646030][T11507] ? clear_bhb_loop+0x40/0x90 [ 1478.646058][T11507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.646081][T11507] RIP: 0033:0x7f53b419c819 [ 1478.646101][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.646118][T11507] RSP: 002b:00007f53b4fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1478.646142][T11507] RAX: ffffffffffffffda RBX: 00007f53b4415fa0 RCX: 00007f53b419c819 [ 1478.646159][T11507] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 1478.646173][T11507] RBP: 00007f53b4fc8090 R08: 0000200000005540 R09: 0000000000000000 [ 1478.646189][T11507] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1478.646203][T11507] R13: 00007f53b4416038 R14: 00007f53b4415fa0 R15: 00007ffd36e97608 [ 1478.646240][T11507] [ 1478.866071][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1478.901863][T11503] geneve2: entered promiscuous mode [ 1479.109353][T11514] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1479.149816][T11514] bond1 (unregistering): Released all slaves [ 1479.499530][T11468] chnl_net:caif_netlink_parms(): no params data found [ 1479.734595][ T9459] Bluetooth: hci1: command tx timeout [ 1479.776346][T11566] FAULT_INJECTION: forcing a failure. [ 1479.776346][T11566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1479.790038][T11566] CPU: 1 UID: 0 PID: 11566 Comm: syz.3.9384 Not tainted syzkaller #0 PREEMPT(full) [ 1479.790067][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1479.790080][T11566] Call Trace: [ 1479.790090][T11566] [ 1479.790099][T11566] dump_stack_lvl+0xe8/0x150 [ 1479.790137][T11566] should_fail_ex+0x412/0x560 [ 1479.790174][T11566] _copy_to_user+0x31/0xb0 [ 1479.790201][T11566] simple_read_from_buffer+0xe1/0x170 [ 1479.790235][T11566] proc_fail_nth_read+0x1bb/0x230 [ 1479.790270][T11566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1479.790304][T11566] ? rw_verify_area+0x2a6/0x4d0 [ 1479.790335][T11566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1479.790367][T11566] vfs_read+0x20c/0xa70 [ 1479.790405][T11566] ? __pfx___mutex_lock+0x10/0x10 [ 1479.790436][T11566] ? __pfx_vfs_read+0x10/0x10 [ 1479.790470][T11566] ? __fget_files+0x2a/0x420 [ 1479.790504][T11566] ? __fget_files+0x3a0/0x420 [ 1479.790530][T11566] ? __fget_files+0x2a/0x420 [ 1479.790567][T11566] ksys_read+0x150/0x270 [ 1479.790602][T11566] ? __pfx_ksys_read+0x10/0x10 [ 1479.790631][T11566] ? fput+0xa0/0xd0 [ 1479.790667][T11566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.790703][T11566] do_syscall_64+0x15f/0xf80 [ 1479.790729][T11566] ? trace_irq_disable+0x3b/0x140 [ 1479.790753][T11566] ? clear_bhb_loop+0x40/0x90 [ 1479.790781][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.790803][T11566] RIP: 0033:0x7f8b0c15d04e [ 1479.790824][T11566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1479.790844][T11566] RSP: 002b:00007f8b0d05bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1479.790868][T11566] RAX: ffffffffffffffda RBX: 00007f8b0d05c6c0 RCX: 00007f8b0c15d04e [ 1479.790885][T11566] RDX: 000000000000000f RSI: 00007f8b0d05c0a0 RDI: 0000000000000004 [ 1479.790900][T11566] RBP: 00007f8b0d05c090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.790913][T11566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.790926][T11566] R13: 00007f8b0c416038 R14: 00007f8b0c415fa0 R15: 00007ffd0ab1a438 [ 1479.790964][T11566] [ 1480.007503][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1480.076108][T11468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.092190][T11567] netlink: 'syz.1.9382': attribute type 12 has an invalid length. [ 1480.093695][T11468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.142424][T11468] bridge_slave_0: entered allmulticast mode [ 1480.154796][T11468] bridge_slave_0: entered promiscuous mode [ 1480.187421][T11468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.209684][T11568] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1480.219708][T11468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.238286][T11468] bridge_slave_1: entered allmulticast mode [ 1480.246953][T11468] bridge_slave_1: entered promiscuous mode [ 1480.290805][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.413821][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.507329][T11468] team0: Port device team_slave_0 added [ 1480.518570][T11468] team0: Port device team_slave_1 added [ 1480.595902][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.611862][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.669971][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.683812][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.712811][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.751657][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.879796][T11468] hsr_slave_0: entered promiscuous mode [ 1480.888391][T11468] hsr_slave_1: entered promiscuous mode [ 1480.896182][T11468] debugfs: 'hsr0' already exists in 'hsr' [ 1480.902069][T11468] Cannot create hsr debugfs directory [ 1480.992453][T10375] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 1481.014703][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1481.038898][T11600] openvswitch: netlink: IP tunnel dst address not specified [ 1481.284202][T11468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1481.408983][T11605] lo speed is unknown, defaulting to 1000 [ 1481.514944][T11468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1481.656337][T11593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1481.752399][T11468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1481.815754][ T9459] Bluetooth: hci1: command tx timeout [ 1481.890997][T11468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1482.054977][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1482.448541][T11631] sctp: [Deprecated]: syz.1.9398 (pid 11631) Use of int in maxseg socket option. [ 1482.448541][T11631] Use struct sctp_assoc_value instead [ 1482.648358][T11633] bridge0: port 3(bond0) entered blocking state [ 1482.662760][T11633] bridge0: port 3(bond0) entered disabled state [ 1482.675653][T11633] bond0: entered allmulticast mode [ 1482.685243][T11633] bond_slave_0: entered allmulticast mode [ 1482.700132][T11633] bond_slave_1: entered allmulticast mode [ 1482.720912][T11633] bond0: entered promiscuous mode [ 1482.731623][T11633] bond_slave_0: entered promiscuous mode [ 1482.745139][T11633] bond_slave_1: entered promiscuous mode [ 1482.757837][T11633] bridge0: port 3(bond0) entered blocking state [ 1482.764368][T11633] bridge0: port 3(bond0) entered forwarding state [ 1483.094663][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1483.212623][T11468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1483.258931][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1483.290256][T11468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1483.352539][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1483.382378][T11468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1483.455098][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1483.481871][T11468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1483.517653][T11545] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 1483.560043][T11468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1483.894796][ T9459] Bluetooth: hci1: command tx timeout [ 1484.117457][T11664] bridge_slave_1: left allmulticast mode [ 1484.134715][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1484.147714][T11654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1484.159197][T11664] bridge_slave_1: left promiscuous mode [ 1484.171650][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.229835][T11664] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1484.283736][T11667] __nla_validate_parse: 36 callbacks suppressed [ 1484.283760][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1484.389647][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1484.429020][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1484.450708][T11678] syzkaller0: entered promiscuous mode [ 1484.462733][T11678] syzkaller0: entered allmulticast mode [ 1484.470786][T11667] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1484.498065][T11673] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1484.520145][T11678] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1484.598593][T11468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.627599][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1484.737449][T11468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.769212][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.776527][T10375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.837881][T11545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.845353][T11545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.174651][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1485.526245][T11468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.622789][T11698] netlink: 'syz.3.9409': attribute type 1 has an invalid length. [ 1485.848779][T11698] veth3: entered allmulticast mode [ 1485.869122][T11698] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1485.976592][ T9459] Bluetooth: hci1: command tx timeout [ 1486.175439][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9411'. [ 1486.214657][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1486.232046][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9411'. [ 1486.457397][T11468] veth0_vlan: entered promiscuous mode [ 1486.479675][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9413'. [ 1486.510734][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9413'. [ 1486.512113][T11722] nbd: must specify at least one socket [ 1486.549735][T11468] veth1_vlan: entered promiscuous mode [ 1486.658051][T11468] veth0_macvtap: entered promiscuous mode [ 1486.694730][T11468] veth1_macvtap: entered promiscuous mode [ 1486.747953][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9414'. [ 1486.782353][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9414'. [ 1486.818250][T11725] netlink: 'syz.0.9414': attribute type 5 has an invalid length. [ 1486.955974][T11468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1487.019755][T11732] netlink: 'syz.2.9418': attribute type 1 has an invalid length. [ 1487.031920][T11468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.106365][T11545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.148800][T11545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.172947][T11545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.229227][T11545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.254685][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1487.543773][T11542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.559250][T11542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.707997][T11542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.727933][T11752] xt_cgroup: invalid path, errno=-2 [ 1487.730873][T11542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.992491][T11758] netlink: 'syz.4.9359': attribute type 7 has an invalid length. [ 1488.006022][T11758] netlink: 'syz.4.9359': attribute type 8 has an invalid length. [ 1488.015075][T11756] netlink: 'syz.3.9426': attribute type 30 has an invalid length. [ 1488.036882][T11758] ip6gretap0: entered promiscuous mode [ 1488.051715][T11758] syz_tun: entered promiscuous mode [ 1488.061769][T11758] erspan0: entered promiscuous mode [ 1488.068687][T11758] debugfs: 'hsr1' already exists in 'hsr' [ 1488.074917][T11758] Cannot create hsr debugfs directory [ 1488.083430][T11756] bond0: option arp_missed_max: invalid value (0) [ 1488.101248][T11756] bond0: option arp_missed_max: allowed values 1 - 255 [ 1488.152596][T11760] netlink: 'syz.2.9427': attribute type 25 has an invalid length. [ 1488.294770][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1488.496431][T10375] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.546483][T10375] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.589989][T11803] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.633603][T11803] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.817451][T11785] team0: Device vlan2 is already an upper device of the team interface [ 1488.894017][T11789] lo speed is unknown, defaulting to 1000 [ 1489.104617][T11791] netlink: 'syz.3.9439': attribute type 1 has an invalid length. [ 1489.267299][T11816] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1489.334710][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1489.513089][T11826] x_tables: duplicate underflow at hook 1 [ 1489.697543][T11835] veth0_to_hsr: entered allmulticast mode [ 1489.718056][T11841] vlan2: entered promiscuous mode [ 1489.900374][T11833] veth0_to_hsr: entered promiscuous mode [ 1489.971898][T11851] __nla_validate_parse: 10 callbacks suppressed [ 1489.971930][T11851] netlink: 504 bytes leftover after parsing attributes in process `syz.4.9454'. [ 1489.978402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 1489.978435][ C1] lec:lec_tx_timeout: lec0 [ 1490.060275][T11832] veth0_to_hsr: left promiscuous mode [ 1490.089017][T11832] veth0_to_hsr: left allmulticast mode [ 1490.376081][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1490.565258][T11882] netlink: 'syz.2.9460': attribute type 10 has an invalid length. [ 1490.628366][T11884] x_tables: duplicate underflow at hook 1 [ 1490.673790][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9463'. [ 1490.933133][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9467'. [ 1490.994191][T11896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9464'. [ 1491.211018][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9469'. [ 1491.229811][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9471'. [ 1491.265221][T11909] netlink: 'syz.1.9469': attribute type 1 has an invalid length. [ 1491.416224][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1491.527928][T11912] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 1491.862595][T11904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.899644][T11932] x_tables: duplicate underflow at hook 1 [ 1491.964045][T11935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1492.013544][T11926] lo speed is unknown, defaulting to 1000 [ 1492.027572][T11926] lo speed is unknown, defaulting to 1000 [ 1492.236813][T11931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.259258][T11926] lo speed is unknown, defaulting to 1000 [ 1492.295602][ T31] INFO: task udevd:5835 blocked for more than 143 seconds. [ 1492.306976][ T31] Not tainted syzkaller #0 [ 1492.323787][T11926] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1492.332689][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1492.343319][ T31] task:udevd state:D stack:23400 pid:5835 tgid:5835 ppid:5193 task_flags:0x400140 flags:0x00080000 [ 1492.367835][ T31] Call Trace: [ 1492.374049][ T31] [ 1492.383477][ T31] __schedule+0x17b4/0x5680 [ 1492.399475][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1492.412319][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 1492.419444][ T31] ? __pfx___schedule+0x10/0x10 [ 1492.424993][ T31] ? schedule+0x90/0x360 [ 1492.431686][ T31] schedule+0x164/0x360 [ 1492.436420][T11949] delete_channel: no stack [ 1492.438033][ T31] schedule_timeout+0x158/0x2c0 [ 1492.447082][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1492.452671][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1492.458459][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1492.470458][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1492.477105][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1492.478099][T11949] netlink: 'syz.1.9479': attribute type 30 has an invalid length. [ 1492.482914][ T31] nbd_queue_rq+0x857/0x1100 [ 1492.482959][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1492.482982][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1492.483017][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1492.483051][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1492.483088][ T31] ? sbitmap_get+0x229/0x390 [ 1492.483111][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1492.483133][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1492.483160][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1492.483201][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1492.483223][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1492.483252][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1492.483291][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1492.483316][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1492.483346][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1492.483380][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 1492.483401][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 1492.483429][ T31] ? blk_mq_dispatch_list+0x1f0/0xe10 [ 1492.483458][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1492.483484][ T31] ? rcu_is_watching+0x15/0xb0 [ 1492.483516][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 1492.483537][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 1492.483571][ T31] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 1492.483592][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1492.483623][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 1492.483650][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 1492.483680][ T31] __submit_bio+0x28d/0x580 [ 1492.483705][ T31] ? __pfx___submit_bio+0x10/0x10 [ 1492.483732][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1492.483765][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1492.483793][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1492.483831][ T31] block_read_full_folio+0x7b7/0x830 [ 1492.483859][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 1492.484023][ T31] filemap_read_folio+0x137/0x3b0 [ 1492.698850][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1492.704807][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1492.710441][ T31] ? filemap_add_folio+0x356/0x530 [ 1492.717914][ T31] do_read_cache_folio+0x358/0x590 [ 1492.723157][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1492.730071][ T31] read_part_sector+0xb6/0x2b0 [ 1492.736159][ T31] adfspart_check_ICS+0xb1/0x960 [ 1492.741533][ T31] ? seq_buf_printf+0x212/0x2d0 [ 1492.747022][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1492.753468][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1492.759357][ T31] bdev_disk_changed+0x817/0x1770 [ 1492.764788][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1492.770397][ T31] blkdev_get_whole+0x380/0x510 [ 1492.775685][ T31] bdev_open+0x31e/0xd30 [ 1492.780042][ T31] blkdev_open+0x470/0x610 [ 1492.784934][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1492.789966][ T31] do_dentry_open+0x785/0x14e0 [ 1492.795074][ T31] vfs_open+0x3b/0x340 [ 1492.800675][ T31] ? path_openat+0x2df0/0x3860 [ 1492.805720][ T31] path_openat+0x2e08/0x3860 [ 1492.810433][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1492.816629][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1492.822165][ T31] ? __pfx_path_openat+0x10/0x10 [ 1492.828108][ T31] ? __x64_sys_openat+0x138/0x170 [ 1492.833235][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1492.839428][ T31] do_file_open+0x23e/0x4a0 [ 1492.844139][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1492.849493][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1492.863526][ T31] ? alloc_fd+0x64b/0x6c0 [ 1492.869044][ T31] do_sys_openat2+0x113/0x200 [ 1492.873803][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1492.879578][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1492.885025][ T31] ? rcu_is_watching+0x15/0xb0 [ 1492.889871][ T31] __x64_sys_openat+0x138/0x170 [ 1492.895746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.903738][ T31] do_syscall_64+0x15f/0xf80 [ 1492.908584][ T31] ? clear_bhb_loop+0x40/0x90 [ 1492.913344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.919500][ T31] RIP: 0033:0x7f9532bdf407 [ 1492.924077][ T31] RSP: 002b:00007ffc36052490 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1492.932630][ T31] RAX: ffffffffffffffda RBX: 00007f9532b53880 RCX: 00007f9532bdf407 [ 1492.942169][ T31] RDX: 00000000000a0800 RSI: 000055a7359a1480 RDI: ffffffffffffff9c [ 1492.951827][ T31] RBP: 000055a7359a0910 R08: 0000000000000000 R09: 0000000000000000 [ 1492.960115][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a7359b4ba0 [ 1492.968335][ T31] R13: 000055a7359ae190 R14: 0000000000000000 R15: 000055a7359b4ba0 [ 1492.977033][ T31] [ 1492.997788][ T31] [ 1492.997788][ T31] Showing all locks held in the system: [ 1493.008583][ T31] 1 lock held by khungtaskd/31: [ 1493.013546][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1493.026710][ T31] 2 locks held by getty/5583: [ 1493.031522][ T31] #0: ffff888032ef00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1493.041675][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1493.052444][ T31] 3 locks held by udevd/5835: [ 1493.058287][ T31] #0: ffff88802747b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1493.067739][ T31] #1: ffff888025ccb118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1493.077447][ T31] #2: ffff8880274f0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1493.086907][ T31] 3 locks held by kworker/u8:19/11542: [ 1493.092429][ T31] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1493.104575][ T31] #1: ffffc90004f2fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1493.117555][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1493.126695][ T31] 6 locks held by syz.0.9468/11904: [ 1493.131938][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1493.140754][ T31] #1: ffff88803fb31128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 1493.151415][ T31] #2: ffff88808e33c258 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 1493.163060][ T31] #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 [ 1493.172290][ T31] #4: ffff888079994d88 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1197/0x22c0 [ 1493.186509][ T31] #5: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1493.198076][ T31] 6 locks held by syz.2.9473/11926: [ 1493.203440][ T31] #0: ffffffff9a863f28 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x328/0xa10 [ 1493.215175][ T31] #1: ffffffff8fb34fa8 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x650 [ 1493.226325][ T31] #2: ffffffff8fb26828 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 1493.236466][ T31] #3: ffffffff8fb269e8 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x27c/0x3e0 [ 1493.246970][ T31] #4: ffff88807a25cfe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 1493.258280][ T31] #5: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 1493.268255][ T31] 4 locks held by syz.2.9473/11931: [ 1493.273586][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1493.282229][ T31] #1: ffff888055899128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 1493.292748][ T31] #2: ffff88805589e258 (&devlink->lock_key#19){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 1493.304617][ T31] #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1493.316890][ T31] 2 locks held by syz.4.9478/11947: [ 1493.322249][ T31] #0: ffff88805702d6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1493.332946][ T31] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1493.342779][ T31] 1 lock held by syz.1.9479/11944: [ 1493.348243][ T31] #0: ffff888026976c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 1493.357541][ T31] 3 locks held by syz.1.9479/11949: [ 1493.362768][ T31] #0: ffff888026976c60 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x15f/0x11f0 [ 1493.372726][ T31] #1: ffffffff90324f50 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1493.383116][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1493.392548][ T31] 1 lock held by syz.1.9479/11950: [ 1493.397976][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1493.407194][ T31] 1 lock held by syz.3.9480/11948: [ 1493.412697][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1493.423534][ T31] [ 1493.437316][T11904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.448091][ T31] ============================================= [ 1493.448091][ T31] [ 1493.460613][ T31] NMI backtrace for cpu 1 [ 1493.460632][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1493.460650][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1493.460667][ T31] Call Trace: [ 1493.460674][ T31] [ 1493.460682][ T31] dump_stack_lvl+0xe8/0x150 [ 1493.460711][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1493.460737][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1493.460761][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1493.460788][ T31] sys_info+0x135/0x170 [ 1493.460809][ T31] watchdog+0xfaa/0x1000 [ 1493.460830][ T31] ? watchdog+0x209/0x1000 [ 1493.460852][ T31] kthread+0x388/0x470 [ 1493.460869][ T31] ? __pfx_watchdog+0x10/0x10 [ 1493.460884][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.460900][ T31] ret_from_fork+0x514/0xb70 [ 1493.460927][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.460949][ T31] ? __switch_to+0xc79/0x1410 [ 1493.460970][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.460986][ T31] ret_from_fork_asm+0x1a/0x30 [ 1493.461022][ T31] [ 1493.461028][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1493.496047][ C0] ip_tunnel_core: Dead loop on virtual device gre2 (net 1749), fix it urgently! [ 1493.498106][ C0] NMI backtrace for cpu 0 [ 1493.498123][ C0] CPU: 0 UID: 0 PID: 11904 Comm: syz.0.9468 Not tainted syzkaller #0 PREEMPT(full) [ 1493.498145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1493.498157][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1493.498183][ C0] Code: e8 8e 83 83 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 50 ef fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 2d 74 06 cc 44 89 f9 80 e1 07 [ 1493.498199][ C0] RSP: 0018:ffffc900000057d0 EFLAGS: 00000002 [ 1493.498218][ C0] RAX: 1ffffffff34fd400 RBX: 00000000000003fd RCX: 0000000000000000 [ 1493.498231][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1493.498242][ C0] RBP: ffffffff9a7ea870 R08: ffff888140ab822f R09: 1ffff11028157045 [ 1493.498257][ C0] R10: dffffc0000000000 R11: ffffffff8541da10 R12: dffffc0000000000 [ 1493.498271][ C0] R13: 0000000000000000 R14: ffffffff9a7ea5e0 R15: 0000000000000000 [ 1493.498284][ C0] FS: 00007f53b4fa76c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1493.498300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1493.498313][ C0] CR2: 00007f78429e9f00 CR3: 0000000061fd4000 CR4: 00000000003526f0 [ 1493.498330][ C0] Call Trace: [ 1493.498339][ C0] [ 1493.498348][ C0] wait_for_lsr+0x1a1/0x2f0 [ 1493.498371][ C0] serial8250_console_write+0x1348/0x1ba0 [ 1493.498401][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1493.498421][ C0] ? console_flush_all+0x123/0xb20 [ 1493.498445][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1493.498469][ C0] ? console_flush_all+0x123/0xb20 [ 1493.498490][ C0] console_flush_all+0x718/0xb20 [ 1493.498515][ C0] ? console_flush_all+0x123/0xb20 [ 1493.498540][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1493.498563][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1493.498588][ C0] console_unlock+0xd1/0x1c0 [ 1493.498616][ C0] ? vprintk_emit+0x2cf/0x560 [ 1493.498644][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1493.498676][ C0] ? vprintk_emit+0x2cf/0x560 [ 1493.498702][ C0] ? vprintk_emit+0x2cf/0x560 [ 1493.498731][ C0] vprintk_emit+0x485/0x560 [ 1493.498760][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1493.498795][ C0] _printk+0xdd/0x130 [ 1493.498816][ C0] ? __pfx__printk+0x10/0x10 [ 1493.498834][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1493.498855][ C0] ? ___ratelimit+0x58c/0x8d0 [ 1493.498879][ C0] iptunnel_xmit+0xa19/0xd10 [ 1493.498910][ C0] ? tnl_update_pmtu+0x918/0x1190 [ 1493.498942][ C0] ip_tunnel_xmit+0x193a/0x1f20 [ 1493.498983][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1493.499015][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 1493.499039][ C0] ? skb_network_protocol+0x23d/0x400 [ 1493.499069][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1493.499095][ C0] ipgre_xmit+0x8e6/0xc70 [ 1493.499125][ C0] ? __pfx_ipgre_xmit+0x10/0x10 [ 1493.499156][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1493.499184][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1493.499202][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1493.499224][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1493.499247][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.499273][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1493.499290][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1493.499317][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.499352][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.499380][ C0] bond_start_xmit+0xd5c/0x1900 [ 1493.499411][ C0] ? bond_start_xmit+0xb4/0x1900 [ 1493.499438][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 1493.499465][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1493.499482][ C0] ? ip_vs_fill_iph_skb_off+0x341/0x7c0 [ 1493.499507][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 1493.499530][ C0] ? ip_vs_fill_iph_skb_off+0x341/0x7c0 [ 1493.499558][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1493.499585][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1493.499608][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1493.499632][ C0] ? bond_header_create+0x3b/0x300 [ 1493.499655][ C0] ? lock_acquire+0x106/0x350 [ 1493.499681][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1493.499702][ C0] ? bond_header_create+0x3b/0x300 [ 1493.499726][ C0] ? bond_header_create+0x3b/0x300 [ 1493.499749][ C0] ? bond_header_create+0x3b/0x300 [ 1493.499774][ C0] ? bond_header_create+0x2aa/0x300 [ 1493.499813][ C0] ? ip_finish_output2+0x3c2/0x1070 [ 1493.499830][ C0] ip_finish_output2+0xca9/0x1070 [ 1493.499848][ C0] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1493.499868][ C0] ? ip_finish_output+0x40e/0x530 [ 1493.499898][ C0] ip_output+0x29f/0x450 [ 1493.499933][ C0] ? ip_output+0x5b/0x450 [ 1493.499962][ C0] iptunnel_xmit+0x621/0xd10 [ 1493.499991][ C0] ip_tunnel_xmit+0x193a/0x1f20 [ 1493.500033][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1493.500063][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 1493.500088][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1493.500114][ C0] ipgre_xmit+0x8e6/0xc70 [ 1493.500144][ C0] ? __pfx_ipgre_xmit+0x10/0x10 [ 1493.500169][ C0] ? notifier_call_chain+0x1ad/0x3d0 [ 1493.500185][ C0] ? lock_acquire+0x106/0x350 [ 1493.500212][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1493.500240][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1493.500263][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1493.500287][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.500312][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1493.500336][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 1493.500370][ C0] bond_start_xmit+0xd5c/0x1900 [ 1493.500400][ C0] ? bond_start_xmit+0xb4/0x1900 [ 1493.500426][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 1493.500454][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1493.500474][ C0] ? udp_conn_schedule+0x35a/0x7a0 [ 1493.500496][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1493.500524][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1493.500547][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1493.500571][ C0] ? bond_header_create+0x3b/0x300 [ 1493.500594][ C0] ? lock_acquire+0x106/0x350 [ 1493.500618][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1493.500639][ C0] ? bond_header_create+0x3b/0x300 [ 1493.500664][ C0] ? bond_header_create+0x3b/0x300 [ 1493.500687][ C0] ? bond_header_create+0x3b/0x300 [ 1493.500713][ C0] ? bond_header_create+0x2aa/0x300 [ 1493.500751][ C0] ? ip_finish_output2+0x3c2/0x1070 [ 1493.500769][ C0] ip_finish_output2+0xca9/0x1070 [ 1493.500787][ C0] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1493.500807][ C0] ? ip_finish_output+0x40e/0x530 [ 1493.500837][ C0] ip_output+0x29f/0x450 [ 1493.500866][ C0] ? ip_output+0x5b/0x450 [ 1493.500895][ C0] iptunnel_xmit+0x621/0xd10 [ 1493.500931][ C0] udp_tunnel_xmit_skb+0x2b8/0x410 [ 1493.500956][ C0] tipc_udp_xmit+0x877/0xba0 [ 1493.500985][ C0] ? tipc_udp_xmit+0xb8/0xba0 [ 1493.501008][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 1493.501035][ C0] ? tipc_net+0x45/0x270 [ 1493.501059][ C0] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 1493.501102][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 1493.501123][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1493.501144][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1493.501163][ C0] ? tipc_disc_timeout+0x576/0x6f0 [ 1493.501184][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1493.501212][ C0] tipc_disc_timeout+0x595/0x6f0 [ 1493.501235][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1493.501253][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1493.501279][ C0] ? __traceiter_hrtimer_start+0x33/0xd0 [ 1493.501309][ C0] ? lock_acquire+0x221/0x350 [ 1493.501353][ C0] call_timer_fn+0x192/0x5e0 [ 1493.501391][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1493.501409][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1493.501433][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1493.501465][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1493.501484][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1493.501504][ C0] __run_timer_base+0x652/0x8b0 [ 1493.501526][ C0] ? ktime_get+0x45/0x220 [ 1493.501554][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1493.501596][ C0] run_timer_softirq+0xb7/0x170 [ 1493.501620][ C0] handle_softirqs+0x22a/0x840 [ 1493.501646][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1493.501677][ C0] __irq_exit_rcu+0xca/0x220 [ 1493.501708][ C0] irq_exit_rcu+0x9/0x30 [ 1493.501732][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1493.501754][ C0] [ 1493.501760][ C0] [ 1493.501768][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1493.501787][ C0] RIP: 0010:__asan_memset+0x2f/0x50 [ 1493.501813][ C0] Code: 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 1e e5 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b <41> 5e 5d e9 a9 0c 82 09 31 c0 5b 41 5e 5d c3 cc cc cc cc cc 66 66 [ 1493.501828][ C0] RSP: 0018:ffffc90005fee7a0 EFLAGS: 00000202 [ 1493.501845][ C0] RAX: 1ffff92000bfdd01 RBX: ffffc90005fee8d8 RCX: ffffffff817673c3 [ 1493.501860][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90005fee8d8 [ 1493.501872][ C0] RBP: 0000000000000000 R08: ffffc90005fee8e7 R09: 1ffff92000bfdd1c [ 1493.501886][ C0] R10: dffffc0000000000 R11: fffff52000bfdd1d R12: ffffc90005fef1d8 [ 1493.501900][ C0] R13: 1ffff92000bfdd13 R14: ffffc90005fee8d8 R15: ffffc90005fee8d0 [ 1493.501926][ C0] ? unwind_next_frame+0xf33/0x2550 [ 1493.501948][ C0] unwind_next_frame+0xf33/0x2550 [ 1493.501969][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1493.501986][ C0] ? nsim_dev_reload_destroy+0x288/0x490 [ 1493.502017][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1493.502039][ C0] arch_stack_walk+0x11b/0x150 [ 1493.502060][ C0] ? nsim_dev_reload_down+0x8a/0xc0 [ 1493.502091][ C0] stack_trace_save+0xa9/0x100 [ 1493.502110][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1493.502131][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.502159][ C0] kasan_save_stack+0x3e/0x60 [ 1493.502185][ C0] ? kasan_save_stack+0x3e/0x60 [ 1493.502210][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 1493.502232][ C0] ? call_rcu+0xee/0x890 [ 1493.502256][ C0] ? kernfs_put+0x259/0x520 [ 1493.502280][ C0] ? kernfs_remove_by_name_ns+0xc8/0x140 [ 1493.502297][ C0] ? sysfs_unmerge_group+0xd4/0x140 [ 1493.502320][ C0] ? dpm_sysfs_remove+0x76/0xd0 [ 1493.502345][ C0] ? device_del+0x250/0x8f0 [ 1493.502365][ C0] ? unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 1493.502386][ C0] ? unregister_netdevice_queue+0x31f/0x360 [ 1493.502404][ C0] ? nsim_destroy+0x20b/0x780 [ 1493.502425][ C0] ? __nsim_dev_port_del+0x14f/0x200 [ 1493.502451][ C0] ? nsim_dev_reload_destroy+0x288/0x490 [ 1493.502505][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1493.502528][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 1493.502552][ C0] call_rcu+0xee/0x890 [ 1493.502580][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1493.502602][ C0] kernfs_put+0x259/0x520 [ 1493.502631][ C0] kernfs_remove_by_name_ns+0xc8/0x140 [ 1493.502650][ C0] sysfs_unmerge_group+0xd4/0x140 [ 1493.502679][ C0] dpm_sysfs_remove+0x76/0xd0 [ 1493.502705][ C0] device_del+0x250/0x8f0 [ 1493.502730][ C0] ? pm_runtime_set_memalloc_noio+0x202/0x260 [ 1493.502754][ C0] ? __pfx_device_del+0x10/0x10 [ 1493.502775][ C0] ? netdev_unregister_kobject+0x344/0x450 [ 1493.502801][ C0] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 1493.502831][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1493.502854][ C0] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1493.502892][ C0] unregister_netdevice_queue+0x31f/0x360 [ 1493.502919][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1493.502955][ C0] nsim_destroy+0x20b/0x780 [ 1493.502982][ C0] __nsim_dev_port_del+0x14f/0x200 [ 1493.503012][ C0] nsim_dev_reload_destroy+0x288/0x490 [ 1493.503043][ C0] nsim_dev_reload_down+0x8a/0xc0 [ 1493.503072][ C0] devlink_reload+0x1eb/0x8c0 [ 1493.503103][ C0] ? __pfx_devlink_reload+0x10/0x10 [ 1493.503125][ C0] ? apparmor_capable+0x126/0x170 [ 1493.503144][ C0] ? bpf_lsm_capable+0x9/0x20 [ 1493.503165][ C0] ? security_capable+0x7e/0x2c0 [ 1493.503193][ C0] devlink_nl_reload_doit+0x9d4/0xc80 [ 1493.503223][ C0] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1493.503250][ C0] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1493.503272][ C0] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1493.503298][ C0] genl_family_rcv_msg_doit+0x22a/0x330 [ 1493.503320][ C0] ? __asan_memcpy+0x40/0x70 [ 1493.503346][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1493.503374][ C0] ? bpf_lsm_capable+0x9/0x20 [ 1493.503394][ C0] ? security_capable+0x7e/0x2c0 [ 1493.503420][ C0] genl_rcv_msg+0x61c/0x7a0 [ 1493.503444][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1493.503463][ C0] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1493.503485][ C0] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1493.503509][ C0] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1493.503533][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 1493.503567][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1493.503593][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1493.503614][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1493.503649][ C0] ? down_read+0x270/0x2e0 [ 1493.503674][ C0] ? genl_rcv+0xd/0x40 [ 1493.503694][ C0] genl_rcv+0x28/0x40 [ 1493.503711][ C0] netlink_unicast+0x75c/0x8e0 [ 1493.503741][ C0] netlink_sendmsg+0x813/0xb40 [ 1493.503772][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1493.503801][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1493.503826][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1493.503856][ C0] ____sys_sendmsg+0x972/0x9f0 [ 1493.503884][ C0] ? __might_fault+0xaf/0x130 [ 1493.503918][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1493.503951][ C0] ? import_iovec+0x73/0xa0 [ 1493.503971][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1493.504012][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.504038][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1493.504070][ C0] ? futex_wake+0x4ac/0x580 [ 1493.504104][ C0] ? __fget_files+0x2a/0x420 [ 1493.504127][ C0] ? __fget_files+0x3a0/0x420 [ 1493.504156][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1493.504186][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1493.504220][ C0] ? rcu_is_watching+0x15/0xb0 [ 1493.504254][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.504274][ C0] do_syscall_64+0x15f/0xf80 [ 1493.504295][ C0] ? trace_irq_disable+0x3b/0x140 [ 1493.504315][ C0] ? clear_bhb_loop+0x40/0x90 [ 1493.504336][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.504354][ C0] RIP: 0033:0x7f53b419c819 [ 1493.504371][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.504386][ C0] RSP: 002b:00007f53b4fa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1493.504405][ C0] RAX: ffffffffffffffda RBX: 00007f53b4416090 RCX: 00007f53b419c819 [ 1493.504419][ C0] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000009 [ 1493.504431][ C0] RBP: 00007f53b4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1493.504443][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.504454][ C0] R13: 00007f53b4416128 R14: 00007f53b4416090 R15: 00007ffd36e97608 [ 1493.504479][ C0] [ 1493.507751][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1493.507814][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1493.507882][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1493.507918][ T31] Call Trace: [ 1493.507942][ T31] [ 1493.507973][ T31] vpanic+0x56c/0xa60 [ 1493.508039][ T31] ? __pfx___schedule+0x10/0x10 [ 1493.508065][ T31] ? __pfx_vpanic+0x10/0x10 [ 1493.508107][ T31] panic+0xc5/0xd0 [ 1493.508137][ T31] ? __pfx_panic+0x10/0x10 [ 1493.508170][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1495.081046][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1495.087249][ T31] watchdog+0xff4/0x1000 [ 1495.091534][ T31] ? watchdog+0x209/0x1000 [ 1495.096002][ T31] kthread+0x388/0x470 [ 1495.100189][ T31] ? __pfx_watchdog+0x10/0x10 [ 1495.104889][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.109507][ T31] ret_from_fork+0x514/0xb70 [ 1495.114136][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.119372][ T31] ? __switch_to+0xc79/0x1410 [ 1495.124109][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.128728][ T31] ret_from_fork_asm+0x1a/0x30 [ 1495.133550][ T31] [ 1495.137263][ T31] Kernel Offset: disabled [ 1495.141613][ T31] Rebooting in 86400 seconds..