last executing test programs: 6.295536641s ago: executing program 3 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f0000002ec0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xb, @private2, 0x9}, 0x1c, 0x0}}], 0x1, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) 5.613676521s ago: executing program 3 (id=2685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0x0, 0x20000890, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @mcast2, 0x5}, 0x1c) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r4], 0x40}, 0x4, 0x700000000000000}, 0x0) 5.236587373s ago: executing program 3 (id=2688): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000"], 0x26}}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x800) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4.983454852s ago: executing program 3 (id=2690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.518171353s ago: executing program 1 (id=2695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="0100000300000000000003008000800001800d0001007564703a73797a300000000038000400200001f409004e200000008000000000000012000000000000000001820000001400020002004e227f00000100000000020000002c"], 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) 4.391419657s ago: executing program 1 (id=2696): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) unshare(0x20000400) socket(0x400000000010, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}, @snprintf]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.839006898s ago: executing program 1 (id=2698): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x8, 0x8, 0x5}, 0xe) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x590b}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x1002000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, 0x0, 0xb8b86be5165abc0a) r5 = epoll_create(0xf) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0xe0000008}) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001280)}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="0000f52cc1fc1156004e1d24b9ddcb73244e70006ab0369b451e88e4814efe0aaa48f131a0b20dbb8e0ac5d3e9e9561456fcf3022ca080708cf7d95b041fa56854365cf6c5144a27f7ea32b545d55959ffc3c456", 0x54, 0x14008885, 0x0, 0x0) 3.672144147s ago: executing program 2 (id=2699): setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xf5, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000a4c000000060a0904000000000000040002000003200004800c000180080001006c6f6700100001800c000100636f756e746572000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/116], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) 3.669482382s ago: executing program 3 (id=2700): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, 0x0, 0x10000) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000004e3100000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) 3.623168211s ago: executing program 4 (id=2701): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002540)=ANY=[@ANYRES32=0x0, @ANYBLOB="09000400040010040002008ade53c17e54e53a4627c9d60c7c4de3e510d1629c987bcc541c3b920cb4756ba92819715a592197da3beb67b3862cc3a44c058d8eac2973af607263741829d599c8fc6d910653af019ab6dd3de97cfa1944d6f56fff256eb1d4914503ec55cd69de9e4642ec43d4e938da7d308a9676736f27fda818981ce80e5b6740a97045323a4fdbf0b7e06435dfdba3f564fb8046417571f40ed69be4d74f1a5ce7dc21cdc005d93ab7426505f6a448be9dcb3809ca4c13599341a3ad56c9312117"], 0x10) 3.513007248s ago: executing program 2 (id=2702): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4) 3.30076466s ago: executing program 0 (id=2703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\n\x00\x00\x00sm\xea\x02\xfd'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="c3aa00df5000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\n\x00\x00\x00sm\xea\x02\xfd'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="c3aa00df5000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) (async) 3.243031214s ago: executing program 0 (id=2704): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x3e, 0x23, &(0x7f00000000c0)="a0acf1117e0643e2a62f9fb5ec84bbb542603922fe306cd82cb14604a496eab85787dc0f21891e803563ac659986c15289efca595b9672a023e1e27f648e", &(0x7f0000000140)=""/35, 0x3, 0x0, 0x57, 0x72, &(0x7f0000000340)="4eae0c2d50456a3ba9a98842232adbd9d338b4a97ffebcadf57cdc53c998322c30557db46cf655fbc174c61e251071ce626ad1cca354d9635a7ad555d290cf7f34352b17659587536ca7163926103069e5bf8bcbeb445a", &(0x7f0000000400)="4185ff22eed96fcf97b705fbf0c3fbb7de46911d28898644bd0910d378ec7034593fa53033c93dab7e771fe6772db2b7b59d4d1c3b81bbf9db803e9d0521737d3cef0a7113c58f4dfd8ae1daaa15e9ae1957f694e7c8b110ff211ca8ca84ec04002b449feefc108f17de3c8390251fd9cb01", 0x1, 0x0, 0x32}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000001020102000000000000215e8b2ac26900000a0000078648eaac4978eb0a548d7f9a9103ee50084f0909a49961ee414397943fd87b8af26893aabc2a0a91d534a1bb2c0859af7ed3df52b3c9f78fa3e4e9a32101d2b920f3e8177d26e448e8b3a5091897b0e9df8753152e6f2a60d31f84ca304a9b565259962218f551729e5a1c"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000002c0)={0x1f, 0x2}, 0x6) write(r6, &(0x7f0000000000)="05000000", 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfd}]}, 0x50}, 0x1, 0x7}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0xf) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xff9f0007}, {0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20}, {0x0, 0x2}, {0x6, 0x9}]}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) recvmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000900)=""/104, 0x68}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/181, 0xb5}, {&(0x7f0000000b00)=""/207, 0xcf}, {&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000000cc0)=""/158, 0x9e}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000d80)=""/160, 0xa0}], 0x8}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a80)={0x14, 0x36, 0x300, 0x70bd28, 0x25dfdbfe, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc880) 2.999110003s ago: executing program 0 (id=2705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e, 0x7000000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x0) 2.897508375s ago: executing program 1 (id=2706): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b00000002"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="000c00052e3850001c0012800b0001006d61636f4500"/36], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002d00)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.792679966s ago: executing program 0 (id=2707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r1, 0x100, 0xfffffffe, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 2.707402314s ago: executing program 4 (id=2708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 2.58821687s ago: executing program 2 (id=2709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x16, 0x4, 0x6, 0xa, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x6, {0x6, 0x33, 0x2f, 0x9, 0x0, 0x8001, 0x0, @in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x50}}, 0x60080) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @mcast1={0xff, 0x4}, 0xfffffffe}, 0x1c) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x8c, 0x0, 0x221, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa63}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa6}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf5c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000240), 0x4) getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.388632176s ago: executing program 0 (id=2710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x210002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004a6546191de7a9b10d7ef3e68cba47223fa49d554e326c50aca7dfa309a6361e286c01ac877660ac251c7a601250c57e741333436facaf2666e164ab5d3c4dde3b8f4c54c5386ea83cac1f90c562e384d159fd0ef500e1be92e0c40909ab5e7520ee84cb1f85e4fd1fc07fa4b8b0976cc838c6ec569dab1744daaf97aad0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000a06700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x28, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4e22, 0x4, 0x4e21, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x80020000a0da, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x7, 0x1}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x4295000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0xb, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x400}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="a36668dc2c2efdb6a1d4f9b3d053dfa71e72de1f756bc4cd6fb87ee1b07d7a56e7dfca9fd94317508e162aff06dd35badeb4d48f5c722f002a9f6cea05063fd3fed51f13443712d73c94d37c1a6f5cd025edf21d19b2c98e1bef63b94ac5cc7ee02006d9c6dac8d2c46c6702ded6d66cb47fcf878b1b9617f928ae009a318b5eeacc6b168ec340862c63fd37ecb00cca33aff76e541b798dfedf0919931aaeca4778dacdf9757aa24592577e526dea76f7d9a1183603f4ef0bdc6a103ed3087406c9e9dee6350fbadb1d4989c53becb292edb536fa5abc47a2fc747317bdcfa1355a528c"], 0x1048}, 0x1, 0x7}, 0x4000880) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r2], 0x2c}}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) 2.387637635s ago: executing program 4 (id=2711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.327663713s ago: executing program 2 (id=2712): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008804}, 0x4008810) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r3) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x3c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}, @srh={0x0, 0x0, 0x4, 0x0, 0x5, 0x20, 0x5}]}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)={0x1, 0x2, [@remote, @link_local]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x7, 0x3269, 0x8, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x7, 0xdf19, 0x3}}) sendto$packet(r5, &(0x7f00000002c0)="b0b1ab432d2936", 0x7, 0x4000045, &(0x7f0000000400)={0x11, 0x18, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x44840) 2.273944665s ago: executing program 1 (id=2713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x4a67}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000017c0)=@gcm_256={{0x304}, "8eb8d303fc76622c", "94d27e2864a28e18463d54b5772d9cdaeee824a8ba978d89d7feaf14351f119d", "92147279", "f14261d29c603676"}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f00000006c0)={0x28, r5, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x400c000) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r12], 0x3c}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001800)=@deltaction={0x13c, 0x31, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2ec}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x13c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001bc0)=@newtfilter={0x1d84, 0x2c, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x9}, {0x6, 0x2}, {0x5eaefbf2a21dea21}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1d48, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb}}, @TCA_BPF_ACT={0x1d10, 0x1, [@m_mirred={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x1a, 0x6, "bbaee02b39784ecc54b9f620381b7cbdcead11e9c2e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x188, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0xffffffffffffff9e, 0x1, {{0x6, 0x7f, 0x0, 0x7fffffff, 0xfffffffe}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x7, 0x9, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x6, 0x1}, 0xa47}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xe3b, 0x0, 0x7ff, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0x7}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdbe, 0x6, 0xb, 0x5d5, 0xfff}, 0x5e4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7f, 0x8, 0x3a7a, 0x2}, 0x39e}}]}, {0x92, 0x6, "6904a3cb616696d0e3b63086e2dedd825a5d752b09984983b67b458cfe265472967fd1cef9e06ebb9306845f4ebca7b1087d4eea3aa3bcfc641bb6de45e8463f339b373d34313095c6eaaaa35a32560c72eddf3463bbd0540722b1fa031bde1db213235a0355b4f0f09f7e8f4c456db03d38227ad4091323ed750165fd2d34676a06267b11e11ed31690fd06b34e"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x180, 0x1c, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, 'wlan1\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xb027, 0x10000000, 0xfffffff2, 0x7}}, @TCA_DEF_DATA={0x10, 0x3, '[&--&!}S}\xbfa\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fffffff, 0x200, 0x1000000a, 0x140, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7, 0xb1e, 0x6}}, @TCA_DEF_DATA={0xf, 0x3, '\\\xe6[]&+/\x8b@-\x00'}]}, {0xc5, 0x6, "94a625af970942ca55e2e64148e9ddda3db674458f3345a7eda00e575188817d7351610dc46387b401ca17608cc58b4a65856d74fc6b0fcf38ba0c23817819d5670d1f39310c32ad231eda4d676bc85ca5d2b7b75e29913a42f056858806387e0f343e33d1eab7f4e345fc4de9a67dbb7c6e4aa876a22980fbcb0b6be5d029ae3e70beb0e43f27aa524338bf4f5ba178cf52b8d9c45ac9bb7a061283c50ed21d70a9596b2c74e1f6eeb7f2623e170b199cae22c58c168e71f8724b03016837e914"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x564, 0xf, 0x0, 0x0, {{0xb}, {0x4d4, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0xfffffc00, 0x7a40, 0x9be1, {0x9, 0x0, 0x5, 0x81, 0x2, 0x1}, {0xfd, 0x2, 0xd9, 0x3, 0xffff, 0x7}, 0x3ff, 0x6d5, 0x7ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x2, 0xc00, 0x2, 0x6, {0x1, 0x0, 0x8, 0x101, 0x3, 0x3ff}, {0x9, 0x1, 0xa0, 0x1, 0x7, 0x9186}, 0x2, 0xfa97, 0x5b}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x80000001, 0x9, 0x8, 0x5, 0x4, 0x0, 0xfffffffe, 0x4, 0x200, 0x1000, 0xa0eb, 0x80, 0xb, 0x12000, 0xb, 0x2, 0x3, 0x8001, 0x4, 0xc, 0xe09, 0x127, 0x7, 0x5, 0x3, 0x7f, 0xfffffff9, 0xbc96, 0x3, 0x1, 0xfffffffa, 0x7, 0x8, 0x5, 0x2, 0x7fff, 0xffffffff, 0x6, 0x5, 0x1, 0x1, 0x5, 0x6, 0x0, 0x9, 0x8000, 0x3ff, 0xa61d, 0x8, 0xffffffff, 0x8, 0x1ff, 0x5, 0x4, 0x4, 0x8, 0x81, 0x2, 0x7, 0x9, 0x6, 0x1000, 0x4, 0x1, 0xe, 0x75, 0x6, 0x9, 0xf, 0x4, 0xabfe, 0xffff, 0x7fffffff, 0xea, 0x8, 0x0, 0x2, 0xd8ff, 0x5, 0x1, 0x10000, 0x5b, 0x7fffffff, 0x800, 0xffffff81, 0xffffffff, 0xdd0, 0x8, 0x2, 0x4, 0x5, 0x8000, 0xcb05, 0x1, 0x5, 0x8, 0x2, 0x6, 0x1, 0x40, 0x3b09, 0x9, 0x9, 0x100, 0x8, 0xd769, 0xb94c, 0x0, 0x2, 0x1, 0x8, 0x0, 0x2ac9a787, 0xc, 0x4, 0x10001, 0x0, 0x6, 0x1, 0x0, 0x9, 0x9, 0xfffffff7, 0x10001, 0x4, 0x5, 0x22, 0x1c02a521, 0x8, 0x80000000, 0x2, 0x1, 0x18d, 0x4, 0x40, 0x3, 0x5, 0x8, 0xfffffff8, 0x3ff, 0x5, 0x3, 0x6b, 0x7, 0x42, 0x800, 0x100, 0x4, 0x2, 0xe, 0x0, 0x7aa, 0x10000, 0x9, 0x7fffffff, 0x6, 0x7, 0x4, 0xffffffff, 0x80, 0x8001, 0x4, 0x3ff, 0x6, 0x4, 0x9, 0x4, 0x7, 0xffffdf0e, 0x10000, 0xffff, 0xaf3e, 0xd, 0x8, 0x0, 0xbf, 0x8, 0x7f, 0xff, 0xfffff001, 0x8, 0x5, 0x2, 0x6, 0x80, 0x3, 0x2, 0x2, 0x1, 0x6, 0x1, 0xe6b, 0x8, 0x3, 0x80000001, 0xff, 0xb3c, 0x1, 0x6, 0x400, 0x0, 0x5, 0x5, 0x6, 0x0, 0x2, 0x8, 0x23a, 0x94, 0x7, 0xda2d, 0x7, 0x6, 0xfffffff8, 0xe0, 0x3, 0x3, 0x40, 0x0, 0x3, 0x4, 0x800, 0x0, 0x8, 0x2, 0x1ff, 0x743, 0x6, 0x7, 0x6, 0xd, 0x4, 0x76, 0x2, 0x1, 0x8, 0xb, 0x3000000, 0xffff, 0x3, 0xc, 0x9, 0xfa05, 0x8, 0x1, 0x0, 0x1, 0x400, 0x8, 0xd, 0x10001, 0x3, 0x401, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x2f, 0x0, 0x3d1, {0x7, 0x2, 0x2, 0x9c, 0x4, 0xd}, {0x3, 0x2, 0x47, 0x5, 0x5, 0x1}, 0x3, 0xebb, 0x77}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]]}, {0x68, 0x6, "d6d119c4237d3876c77c08460344c0ba630a543bca4276b2f8e12167c3d22dcfee0b5de6e5e9f01a4d4c59fc22fefb60d42bb2b4977ab6b054f8ad34262ce66fd6e66b301075fbc8f709cdbc7bc909b3ba85c2132421b76adb555f10314cc523e8468093"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x16c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x883e}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x2456, 0x9, 0x5, 0x5}, 0x2}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x138, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xf8, 0x6, "af6ea6862ee1e599d8e0c77932541f2676638b51db12de0f2705cfda35c368f5e91f4a770bb157edc29dae545faf89a38f83fabb7220c9c9944c0ec166df739b113a2d37317318b047abe088db4bfb96e0c7fdf79233ff651c15ec807c659acfd539519fc78137add4f3c22eaf82da5405db29f00be4c672b244a78149fa809f1db397f06db3bcb97787d6be6a55e05e57ae413410a69e993e823c5887e39c8bfedac1f29d56db9339546364cfd4aa68c18dffd10f156b37fcd4be88ea0517e56fdede174bcfdd64778dba196068370f64a25a6d35744d0feea1ca55473245dc652df5c1225651895ebaa66eab05d5768041bfb0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x1090, 0x13, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0x7, 0x20000000, 0x0, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x2, 0x5, 0x4}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x124, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2f2f}]}, {0xef, 0x6, "eb1af4bb0086434e13f0c6ca0d91db4f38e0d6186f47b6338c142b8790f5998bb8bbefe7dfcd2cea2b6f81134b40bf976e3212027315eae3e145e5e7b69a2bb8aaa3c032e7cc3ac7caea4d88bc41ba46ad511c8b880b90b65c535cc9730c19c512239cada7d962709729702c55a02a9251d9fd9a718ae9cc5f625e665f2a5a27fa0389ed31e6def44596878c3dc9f35903fc92078c84ab1e0b2da7916e94d6ee5bc54e727221f6a7de4617dc7f5a729f879a895bd055bd8e2c172ea5abe4eeddf9123bcd01d8687ada8366932ad8edc6a6fdfde8f9b88a4360bc4bee27dcb2accb2aa973ac12296e85b59d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x1d84}, 0x1, 0x0, 0x0, 0x8048004}, 0x4008000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000040)="42fe38b1e56168bfaa1d0228a27bd6faa8ea0c275f55a72452174e1dffddad6fa9c197644987511742e57d7885f66c743708005b825397a12b370b6f9d3b1f6690f72c9008a275f0636bf02564ca7b3fd0097ce8243289be9c5f2f44e296da", &(0x7f0000000740)=""/4096}, 0x20) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000440), 0x4) 2.131303894s ago: executing program 2 (id=2714): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.784610484s ago: executing program 2 (id=2715): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={r1, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/18, &(0x7f00000000c0)=0x12) socket(0x10, 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 1.750615429s ago: executing program 0 (id=2716): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x8, 0x8, 0x5}, 0xe) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x590b}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x1002000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, 0x0, 0xb8b86be5165abc0a) r5 = epoll_create(0xf) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0xe0000008}) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001280)}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="0000f52cc1fc1156004e1d24b9ddcb73244e70006ab0369b451e88e4814efe0aaa48f131a0b20dbb8e0ac5d3e9e9561456fcf3022ca080708cf7d95b041fa56854365cf6c5144a27f7ea32b545d55959ffc3c456", 0x54, 0x14008885, 0x0, 0x0) 1.045396649s ago: executing program 4 (id=2717): r0 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000040)=[{r0, 0x2800}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x206c, 0x800}, 0xc880) 930.952771ms ago: executing program 3 (id=2718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001401038010010080080003400000000203"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 423.905543ms ago: executing program 1 (id=2720): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e22, 0x5, @mcast2, 0x1}}, {{0xa, 0x4621, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xe9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040027bd7000fddbdf2502000000042af282246cc856fe70ae18bc75f0a5000180040006802800068014000400ff020000000000000000000000000001060001000200000006", @ANYRES32=0x0, @ANYBLOB="080003000200000008000400ff000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="e9567ec2a8dd25ec9d7803f22f094c7375ef476c04eca030faa0d36079bf76768f73520f444020871e596992b946b0a2f871f2155c2187684c9413ecc8d797f57603fe053b3110", 0x47}, {&(0x7f0000000280)="bcc108bb0d72d367641fb4a35ec004dbe6988f398d408b87d9df81e374628bfaa3f69ef2c779647affd6fefd29cffd7a6d5a4635f730453338b8056994f4082fa8f0ac9b73374a42254b2452cb4b6ff394d2d8f33c19a9159f1fc804f22351721e379259ee3b7579fc2fa86bec24b6794d0e5de88b7dfc39cbe396030fbdc7b9f228b77e8c31aa87006ac8bd5860783e89ca57f5f030f4ef721c9c18a2c49013bb16b0e8230f98630613440cc4", 0xad}, {&(0x7f00000001c0)="390348af6f6e5c119fea743cd0ddf7a99dd4d27a404c21c59206f668163ac8f23b07214aaf11cd18a59eaeab5693b0806124ff4add14eb8bcf29348f815e688ccd077d0d1a6c1cd81f3bfe58752cc409c3ff8b616948a66ef8d55c8ea1fb67dc9b0cced3a96ebc369baf7959f65db61c9a247d650807fa502c93a1af01be60", 0x7f}], 0x3}, 0x80c0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 72.994354ms ago: executing program 4 (id=2721): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 0s ago: executing program 4 (id=2722): r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003d80)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000110029018000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x100) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r8 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003bc0)=[{{&(0x7f0000001200)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001280)}, {&(0x7f00000012c0)=""/143, 0x8f}, {&(0x7f0000001380)=""/237, 0xed}, {&(0x7f0000001480)=""/107, 0x6b}, {&(0x7f0000001500)=""/111, 0x6f}, {&(0x7f0000001580)=""/29, 0x1d}, {&(0x7f0000001640)=""/175, 0xaf}], 0x7, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000002cc0), 0x0, &(0x7f0000002d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000002e40), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/237, 0xed}, {&(0x7f00000030c0)=""/193, 0xc1}], 0x3, &(0x7f0000003200)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000003480)=[{&(0x7f0000003340)=""/147, 0x93}, {&(0x7f0000003400)=""/58, 0x3a}, {&(0x7f0000003440)=""/49, 0x31}], 0x3, &(0x7f00000034c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003e40)=""/235, 0xeb}, {&(0x7f00000036c0)=""/169, 0xa9}, {&(0x7f0000003780)=""/79, 0x4f}, {&(0x7f0000003800)=""/24, 0x18}], 0x4, &(0x7f0000003880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003a00)=""/12, 0xc}, {&(0x7f0000003a40)=""/124, 0x7c}, {&(0x7f0000003ac0)=""/163, 0xa3}], 0x3}}], 0x6, 0x0, &(0x7f0000003d40)={0x0, 0x3938700}) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f00000015c0)={'HL\x00'}, &(0x7f0000001600)=0x1e) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0xc0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r9, 0x0, 0x0, 0x140800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) unshare(0x22020600) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): ffffffffffffda RBX: 00007fe87bbe5fa0 RCX: 00007fe87b98efc9 [ 339.456876][T12366] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 339.456889][T12366] RBP: 00007fe87c87a090 R08: 0000000000000000 R09: 0000000000000000 [ 339.456901][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.456913][T12366] R13: 00007fe87bbe6038 R14: 00007fe87bbe5fa0 R15: 00007ffe56405408 [ 339.456948][T12366] [ 339.461556][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 339.948438][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 340.023466][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 340.148775][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 340.209616][T12375] lo speed is unknown, defaulting to 1000 [ 340.279065][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 340.505129][T12390] xt_bpf: check failed: parse error [ 340.544768][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 340.785861][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 90 seconds [ 340.796622][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 90 seconds [ 340.807594][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 90 seconds [ 340.818513][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 90 seconds [ 341.102686][T12402] netlink: 'syz.2.1895': attribute type 54 has an invalid length. [ 341.156466][T12388] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 341.165313][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 341.174503][T12388] netlink: 'syz.3.1891': attribute type 4 has an invalid length. [ 341.196362][T12388] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1891'. [ 341.225908][T12397] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 341.254798][T12397] netlink: 'syz.3.1891': attribute type 4 has an invalid length. [ 341.265922][T12397] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1891'. [ 341.343368][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 341.505258][T12417] netlink: 'syz.0.1900': attribute type 2 has an invalid length. [ 341.531633][T12417] netlink: 'syz.0.1900': attribute type 2 has an invalid length. [ 341.680244][T12417] lo speed is unknown, defaulting to 1000 [ 341.953107][ T5920] lo speed is unknown, defaulting to 1000 [ 342.770308][T12446] netlink: 'syz.2.1907': attribute type 4 has an invalid length. [ 342.977497][T12452] netlink: 'syz.2.1909': attribute type 2 has an invalid length. [ 343.192855][T12463] __nla_validate_parse: 2 callbacks suppressed [ 343.192875][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1911'. [ 343.532309][T12458] lo speed is unknown, defaulting to 1000 [ 343.635542][ T1322] net_ratelimit: 17 callbacks suppressed [ 343.635563][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 343.765587][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 343.858688][T12473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1914'. [ 344.024165][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 344.107804][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'. [ 344.167253][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 344.305745][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 344.437272][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 344.597622][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 344.607358][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 344.745681][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 344.854965][T12494] validate_nla: 1 callbacks suppressed [ 344.854984][T12494] netlink: 'syz.3.1919': attribute type 54 has an invalid length. [ 344.885546][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 344.995497][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 345.605190][T12514] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 346.031016][T12515] lo speed is unknown, defaulting to 1000 [ 346.220060][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1928'. [ 346.448631][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.456490][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.971579][T12518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.023082][T12518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.312853][ T5831] lo speed is unknown, defaulting to 1000 [ 347.351029][ T5831] syz2: Port: 1 Link DOWN [ 347.384819][ T5831] lo speed is unknown, defaulting to 1000 [ 347.518874][ T4382] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.535553][ T4382] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.544027][ T4382] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.564321][ T4382] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.635681][ T4382] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.644100][ T4382] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.660875][T12536] netlink: 'syz.4.1931': attribute type 54 has an invalid length. [ 347.667972][ T4382] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.670558][ T5832] Bluetooth: hci0: command tx timeout [ 347.698907][ T4382] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.811598][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 347.911377][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 348.125729][T12557] netlink: 'syz.2.1936': attribute type 25 has an invalid length. [ 348.144072][T12557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1936'. [ 348.300507][T12562] syzkaller1: entered promiscuous mode [ 348.315761][T12562] syzkaller1: entered allmulticast mode [ 348.343440][T12562] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68 [ 348.725913][ T12] net_ratelimit: 16 callbacks suppressed [ 348.725935][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 348.787675][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1940'. [ 348.868587][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 349.056676][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 349.207781][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 349.265239][T12584] syzkaller0: entered promiscuous mode [ 349.292578][T12584] syzkaller0: entered allmulticast mode [ 349.332847][T12584] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1941'. [ 349.348126][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 349.741231][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 349.806260][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 349.846092][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 349.885645][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 349.916066][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 350.247482][T12595] lo speed is unknown, defaulting to 1000 [ 351.091015][T12623] netlink: 'syz.1.1955': attribute type 54 has an invalid length. [ 351.967124][T12638] netlink: 'syz.1.1959': attribute type 8 has an invalid length. [ 352.231567][T12643] dummy0: entered promiscuous mode [ 352.238865][T12642] dummy0: left promiscuous mode [ 352.513339][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 352.681486][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 352.936593][T12666] lo speed is unknown, defaulting to 1000 [ 352.955735][T12672] bridge0: port 3(veth0_to_bridge) entered blocking state [ 352.967809][T12672] bridge0: port 3(veth0_to_bridge) entered disabled state [ 352.983977][T12672] veth0_to_bridge: entered allmulticast mode [ 353.006106][T12672] FAULT_INJECTION: forcing a failure. [ 353.006106][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 353.020034][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.0.1970 Not tainted syzkaller #0 PREEMPT(full) [ 353.020078][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.020099][T12672] Call Trace: [ 353.020108][T12672] [ 353.020117][T12672] dump_stack_lvl+0x189/0x250 [ 353.020154][T12672] ? __pfx____ratelimit+0x10/0x10 [ 353.020180][T12672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.020210][T12672] ? __pfx__printk+0x10/0x10 [ 353.020237][T12672] ? __pfx___might_resched+0x10/0x10 [ 353.020261][T12672] ? fs_reclaim_acquire+0x7d/0x100 [ 353.020302][T12672] should_fail_ex+0x414/0x560 [ 353.020340][T12672] should_failslab+0xa8/0x100 [ 353.020364][T12672] kmem_cache_alloc_noprof+0x74/0x6e0 [ 353.020395][T12672] ? __kernfs_new_node+0xd7/0x7e0 [ 353.020431][T12672] __kernfs_new_node+0xd7/0x7e0 [ 353.020459][T12672] ? __lock_acquire+0xab9/0xd20 [ 353.020490][T12672] ? __pfx___kernfs_new_node+0x10/0x10 [ 353.020520][T12672] ? kernfs_root+0x1c/0x230 [ 353.020555][T12672] ? kernfs_root+0x1c/0x230 [ 353.020581][T12672] ? kernfs_root+0x1c/0x230 [ 353.020613][T12672] ? kernfs_root+0x1c/0x230 [ 353.020645][T12672] kernfs_new_node+0x102/0x210 [ 353.020679][T12672] __kernfs_create_file+0x4b/0x2e0 [ 353.020704][T12672] sysfs_add_file_mode_ns+0x238/0x300 [ 353.020737][T12672] sysfs_create_file_ns+0x128/0x1a0 [ 353.020764][T12672] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 353.020802][T12672] br_sysfs_addif+0xc8/0x240 [ 353.020834][T12672] br_add_if+0x3a4/0xeb0 [ 353.020863][T12672] ? bpf_lsm_capable+0x9/0x20 [ 353.020890][T12672] ? security_capable+0x7e/0x2e0 [ 353.020933][T12672] br_ioctl_stub+0x6aa/0xc80 [ 353.020963][T12672] ? __mutex_lock+0x335/0x1350 [ 353.020995][T12672] ? __pfx_br_ioctl_stub+0x10/0x10 [ 353.021023][T12672] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 353.021056][T12672] ? sock_ioctl+0x4b4/0x790 [ 353.021111][T12672] ? __pfx_br_ioctl_stub+0x10/0x10 [ 353.021139][T12672] sock_ioctl+0x4d8/0x790 [ 353.021168][T12672] ? __pfx_sock_ioctl+0x10/0x10 [ 353.021199][T12672] ? __fget_files+0x3a0/0x420 [ 353.021218][T12672] ? __fget_files+0x2a/0x420 [ 353.021243][T12672] ? bpf_lsm_file_ioctl+0x9/0x20 [ 353.021267][T12672] ? __pfx_sock_ioctl+0x10/0x10 [ 353.021293][T12672] __se_sys_ioctl+0xfc/0x170 [ 353.021342][T12672] do_syscall_64+0xfa/0xfa0 [ 353.021369][T12672] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.021395][T12672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.021417][T12672] ? clear_bhb_loop+0x60/0xb0 [ 353.021444][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.021466][T12672] RIP: 0033:0x7f6af4b8efc9 [ 353.021485][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.021506][T12672] RSP: 002b:00007f6af5ac3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.021529][T12672] RAX: ffffffffffffffda RBX: 00007f6af4de5fa0 RCX: 00007f6af4b8efc9 [ 353.021545][T12672] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 353.021560][T12672] RBP: 00007f6af5ac3090 R08: 0000000000000000 R09: 0000000000000000 [ 353.021573][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.021586][T12672] R13: 00007f6af4de6038 R14: 00007f6af4de5fa0 R15: 00007ffc4a1ba108 [ 353.021631][T12672] [ 353.359075][T12672] veth0_to_bridge: left allmulticast mode [ 353.661661][T12674] syzkaller0: entered promiscuous mode [ 353.706290][T12674] syzkaller0: entered allmulticast mode [ 353.885953][ T1322] net_ratelimit: 29 callbacks suppressed [ 353.885975][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 353.938588][T12680] atomic_op ffff88807c0f9198 conn xmit_atomic 0000000000000000 [ 354.035686][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 354.131750][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 354.148184][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 354.157566][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 354.177061][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 354.296778][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 354.415530][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 354.535696][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 354.704731][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 354.793811][T12711] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 354.816994][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 354.826521][T12712] netlink: 'syz.1.1984': attribute type 2 has an invalid length. [ 354.843039][T12712] netlink: 'syz.1.1984': attribute type 2 has an invalid length. [ 354.921933][T12712] lo speed is unknown, defaulting to 1000 [ 354.932138][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 354.941462][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 355.062096][T12721] bridge_slave_0: left allmulticast mode [ 355.072209][T12721] bridge_slave_0: left promiscuous mode [ 355.082634][T12721] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.256584][T12721] bridge_slave_1: left allmulticast mode [ 355.262455][T12721] bridge_slave_1: left promiscuous mode [ 355.268435][T12721] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.304815][T12721] team0: Port device team_slave_0 removed [ 355.318556][T12721] team0: Port device team_slave_1 removed [ 355.328147][T12721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.349001][T12721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.361611][T12721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.500540][T12732] bond0: Removing last ns target with arp_interval on [ 355.511504][T12732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1990'. [ 355.558878][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1990'. [ 355.585924][T12732] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1990'. [ 355.622604][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1990'. [ 355.723785][T12736] bridge_slave_0: left allmulticast mode [ 355.746067][T12736] bridge_slave_0: left promiscuous mode [ 355.751920][T12736] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.784380][T12736] bridge_slave_1: left allmulticast mode [ 355.820935][T12736] bridge_slave_1: left promiscuous mode [ 355.856124][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.867768][T12744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1991'. [ 355.929333][T12736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.947712][T12736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.056837][T12736] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1991'. [ 356.102437][T12748] : entered promiscuous mode [ 356.520382][T12761] raw_sendmsg: syz.0.2000 forgot to set AF_INET. Fix it! [ 356.825683][T12769] syzkaller0: entered promiscuous mode [ 356.843677][T12769] syzkaller0: entered allmulticast mode [ 359.358213][ T1322] net_ratelimit: 12 callbacks suppressed [ 359.358236][ T1322] bond1: (slave bridge1): link status up again after 0 ms [ 359.415883][ T1322] bond1: (slave bridge1): link status up again after 0 ms [ 359.435536][ T1322] bond1: (slave bridge1): link status up again after 0 ms [ 359.463577][ T1322] bond1: (slave bridge1): link status up again after 0 ms [ 359.495474][ T1146] bond1: (slave bridge1): link status up again after 0 ms [ 359.503593][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 359.589460][T12818] ipvlan0: entered promiscuous mode [ 359.611178][T12818] bridge0: port 3(ipvlan0) entered blocking state [ 359.623082][T12818] bridge0: port 3(ipvlan0) entered disabled state [ 359.635776][T12818] ipvlan0: entered allmulticast mode [ 359.641115][T12818] bridge0: entered allmulticast mode [ 359.656132][T12818] ipvlan0: left allmulticast mode [ 359.673042][T12818] bridge0: left allmulticast mode [ 359.735795][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 359.815037][T12823] lo speed is unknown, defaulting to 1000 [ 359.845474][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 360.012866][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 360.125538][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 360.338559][T12851] syzkaller0: entered promiscuous mode [ 360.356529][T12851] syzkaller0: entered allmulticast mode [ 361.006127][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x21 [ 364.415686][ T4382] net_ratelimit: 34 callbacks suppressed [ 364.415708][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 364.535746][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 364.646044][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 364.755785][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 364.877123][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 364.985608][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 365.095557][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 365.151573][ T5199] udevd[5199]: worker [5889] /devices/virtual/block/nbd3 is taking a long time [ 365.205599][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 365.315574][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 365.425665][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 369.516559][ T38] net_ratelimit: 36 callbacks suppressed [ 369.516584][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 369.635606][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 369.746167][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 369.856199][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 369.965640][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 370.075643][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 370.185611][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 370.305729][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 370.415564][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 370.525640][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 370.866040][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 120 seconds [ 370.877877][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 120 seconds [ 370.889150][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 120 seconds [ 370.900961][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 120 seconds [ 374.605587][ T12] net_ratelimit: 36 callbacks suppressed [ 374.605606][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 374.725596][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 374.835648][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 374.946232][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 375.055669][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 375.165645][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 375.275581][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 375.385680][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 375.495573][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 375.605628][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 379.675592][ T12] net_ratelimit: 36 callbacks suppressed [ 379.675619][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 379.795621][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 379.905775][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 380.015637][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 380.125596][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 380.235544][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 380.345545][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 380.455612][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 380.565556][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 380.675570][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 384.755555][ T12] net_ratelimit: 36 callbacks suppressed [ 384.755575][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 384.875666][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 384.985737][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 385.095648][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 385.205607][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 385.315630][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 385.425721][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 385.535726][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 385.645610][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 385.755601][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 389.845766][ T4382] net_ratelimit: 36 callbacks suppressed [ 389.845791][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 389.965584][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 390.075545][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 390.185615][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 390.295539][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 390.405561][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 390.515583][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 390.625930][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 390.735592][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 390.845583][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 394.926000][ T38] net_ratelimit: 36 callbacks suppressed [ 394.926025][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 395.045625][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 395.155717][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 395.265813][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 395.375590][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 395.485584][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 395.595566][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 395.705630][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 395.815566][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 395.925549][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 400.025717][ T38] net_ratelimit: 36 callbacks suppressed [ 400.025742][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 400.145679][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 400.255498][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 400.365608][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 400.475665][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 400.585595][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 400.695684][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 400.805536][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 400.915654][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 400.953260][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 150 seconds [ 400.964151][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 150 seconds [ 400.975217][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 150 seconds [ 400.986288][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 150 seconds [ 401.025953][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 405.115575][ T4382] net_ratelimit: 36 callbacks suppressed [ 405.115601][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 405.235540][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 405.345697][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 405.455565][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 405.565524][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 405.675512][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 405.785596][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 405.895564][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 406.005506][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 406.115505][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 410.195665][ T4382] net_ratelimit: 36 callbacks suppressed [ 410.195688][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 410.316161][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 410.435570][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 410.545825][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 410.655624][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 410.765647][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 410.875604][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 410.985680][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 411.095649][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 411.205672][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 415.285522][ T1322] net_ratelimit: 36 callbacks suppressed [ 415.285545][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 415.405576][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 415.515558][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 415.625606][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 415.735553][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 415.845610][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 415.955648][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 416.065787][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 416.175601][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 416.285649][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 420.355809][ T8054] net_ratelimit: 36 callbacks suppressed [ 420.355835][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 420.475597][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 420.585594][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 420.695581][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 420.805542][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 420.915574][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 421.025572][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 421.135531][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 421.245560][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 421.355515][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 425.435692][ T8054] net_ratelimit: 36 callbacks suppressed [ 425.435717][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 425.555503][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 425.666128][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 425.775555][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 425.885539][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 425.995534][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 426.105553][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 426.225589][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 426.335591][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 426.445580][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 430.535545][ T4382] net_ratelimit: 36 callbacks suppressed [ 430.535570][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 430.655560][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 430.765537][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 430.875586][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 430.985550][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 431.025896][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 180 seconds [ 431.036699][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 180 seconds [ 431.047776][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 180 seconds [ 431.058811][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 180 seconds [ 431.095552][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 431.205589][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 431.261994][ T5199] udevd[5199]: worker [5889] /devices/virtual/block/nbd3 timeout; kill it [ 431.270878][ T5199] udevd[5199]: seq 16531 '/devices/virtual/block/nbd3' killed [ 431.315564][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 431.425644][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 431.535609][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 435.605512][ T1322] net_ratelimit: 36 callbacks suppressed [ 435.605532][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 435.725563][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 435.835492][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 435.945561][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 436.055625][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 436.165548][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 436.275519][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 436.385827][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 436.495565][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 436.605502][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 440.676820][ T12] net_ratelimit: 36 callbacks suppressed [ 440.676843][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 440.796902][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 440.905543][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 441.016031][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 441.125568][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 441.235667][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 441.345603][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 441.455633][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 441.565585][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 441.675619][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 445.765552][ T4382] net_ratelimit: 36 callbacks suppressed [ 445.765572][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 445.885673][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 445.995621][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 446.105659][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 446.215643][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 446.325692][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 446.435503][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 446.545561][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 446.655543][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 446.765536][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 450.866602][ T4382] net_ratelimit: 36 callbacks suppressed [ 450.866626][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 450.985629][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 451.095533][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 451.205500][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 451.315584][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 451.425615][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 451.535598][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 451.645542][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 451.755496][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 451.865595][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 455.955635][ T1322] net_ratelimit: 36 callbacks suppressed [ 455.955669][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 456.075556][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 456.185596][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 456.295506][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 456.405531][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 456.515520][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 456.626073][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 456.735505][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 456.845503][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 456.955583][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 461.035722][ T1322] net_ratelimit: 36 callbacks suppressed [ 461.035747][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 461.105771][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 210 seconds [ 461.116592][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 210 seconds [ 461.127585][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 210 seconds [ 461.138627][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 210 seconds [ 461.155525][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 461.266220][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 461.375543][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 461.485511][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 461.595552][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 461.705557][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 461.815539][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 461.925524][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 462.035541][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 466.125540][ T38] net_ratelimit: 36 callbacks suppressed [ 466.125564][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 466.245570][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 466.355559][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 466.466091][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 466.585637][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 466.695580][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 466.805611][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 466.915608][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 467.026977][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 467.135524][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 471.205584][ T1322] net_ratelimit: 36 callbacks suppressed [ 471.205610][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 471.325487][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 471.435521][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 471.545531][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 471.655520][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 471.765573][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 471.875563][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 471.986208][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 472.105599][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 472.215520][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 476.285534][ T4382] net_ratelimit: 36 callbacks suppressed [ 476.285553][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 476.405663][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 476.515604][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 476.625769][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 476.735692][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 476.845646][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 476.955542][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 477.065659][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 477.175684][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 477.285505][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 481.365542][ T12] net_ratelimit: 36 callbacks suppressed [ 481.365565][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 481.485727][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 481.595531][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 481.705612][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 481.815497][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 481.925684][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 482.035661][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 482.145943][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 482.265691][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 482.375595][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 486.475542][ T4382] net_ratelimit: 36 callbacks suppressed [ 486.475567][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 486.595515][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 486.705949][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 486.815518][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 486.925569][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 487.035509][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 487.145585][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 487.255528][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 487.365509][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 487.462601][T12903] __nla_validate_parse: 4 callbacks suppressed [ 487.462622][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 487.478107][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 487.486357][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 487.505690][T12903] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 487.717292][T12921] FAULT_INJECTION: forcing a failure. [ 487.717292][T12921] name failslab, interval 1, probability 0, space 0, times 0 [ 487.721949][T12916] lo speed is unknown, defaulting to 1000 [ 487.733732][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.4.2044 Not tainted syzkaller #0 PREEMPT(full) [ 487.733765][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.733785][T12921] Call Trace: [ 487.733794][T12921] [ 487.733804][T12921] dump_stack_lvl+0x189/0x250 [ 487.733846][T12921] ? __pfx____ratelimit+0x10/0x10 [ 487.733875][T12921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.733927][T12921] ? __pfx__printk+0x10/0x10 [ 487.733967][T12921] ? __pfx___might_resched+0x10/0x10 [ 487.733999][T12921] ? fs_reclaim_acquire+0x7d/0x100 [ 487.734058][T12921] should_fail_ex+0x414/0x560 [ 487.734106][T12921] should_failslab+0xa8/0x100 [ 487.734131][T12921] kmem_cache_alloc_node_noprof+0x77/0x710 [ 487.734165][T12921] ? __alloc_skb+0x112/0x2d0 [ 487.734200][T12921] ? __pfx_netlink_unicast+0x10/0x10 [ 487.734237][T12921] __alloc_skb+0x112/0x2d0 [ 487.734277][T12921] netlink_sendmsg+0x5c6/0xb30 [ 487.734311][T12921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.734337][T12921] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.734376][T12921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.734400][T12921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.734423][T12921] __sock_sendmsg+0x21c/0x270 [ 487.734458][T12921] ____sys_sendmsg+0x52d/0x830 [ 487.734489][T12921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.734524][T12921] ? import_iovec+0x74/0xa0 [ 487.734557][T12921] ___sys_sendmsg+0x21f/0x2a0 [ 487.734583][T12921] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.734683][T12921] ? __might_fault+0xb0/0x130 [ 487.734728][T12921] __sys_sendmmsg+0x227/0x430 [ 487.734760][T12921] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.734805][T12921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.734860][T12921] ? ksys_write+0x22a/0x250 [ 487.734897][T12921] ? __pfx_ksys_write+0x10/0x10 [ 487.734945][T12921] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.734973][T12921] do_syscall_64+0xfa/0xfa0 [ 487.735001][T12921] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.735030][T12921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.735069][T12921] ? clear_bhb_loop+0x60/0xb0 [ 487.735104][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.735135][T12921] RIP: 0033:0x7fe92198efc9 [ 487.735161][T12921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.735189][T12921] RSP: 002b:00007fe922852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.735230][T12921] RAX: ffffffffffffffda RBX: 00007fe921be5fa0 RCX: 00007fe92198efc9 [ 487.735249][T12921] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 487.735266][T12921] RBP: 00007fe922852090 R08: 0000000000000000 R09: 0000000000000000 [ 487.735281][T12921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.735296][T12921] R13: 00007fe921be6038 R14: 00007fe921be5fa0 R15: 00007ffe57a438b8 [ 487.735343][T12921] [ 487.873753][T12926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2045'. [ 488.220080][T12934] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 488.248518][T12934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2049'. [ 488.328405][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 488.426192][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 488.448248][T12939] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 488.733937][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 488.863776][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880212ac800: rx timeout, send abort [ 488.874158][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880212ac800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 488.955784][T12955] tun0: tun_chr_ioctl cmd 1074025675 [ 488.961135][T12955] tun0: persist enabled [ 488.967269][T12955] tun0: tun_chr_ioctl cmd 1074025675 [ 488.972612][T12955] tun0: persist disabled [ 489.003708][T12958] lo speed is unknown, defaulting to 1000 [ 489.716041][T12975] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 489.755075][T12975] lo speed is unknown, defaulting to 1000 [ 489.972809][T12980] tun0: tun_chr_ioctl cmd 1074025675 [ 489.989405][T12980] tun0: persist enabled [ 490.003085][T12980] tun0: tun_chr_ioctl cmd 1074025675 [ 490.008779][T12980] tun0: persist disabled [ 490.360850][T12985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.370036][T12985] bridge0: port 3(bond3) entered blocking state [ 490.377011][T12985] bridge0: port 3(bond3) entered disabled state [ 490.383546][T12985] bond3: entered allmulticast mode [ 490.392369][T12985] bond3: entered promiscuous mode [ 490.398644][T12985] bridge0: port 3(bond3) entered blocking state [ 490.405362][T12985] bridge0: port 3(bond3) entered forwarding state [ 490.801703][ T1322] bridge0: port 3(bond3) entered disabled state [ 491.102015][T12994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.110049][T12994] bridge0: port 3(bond3) entered blocking state [ 491.126389][T12994] bridge0: port 3(bond3) entered disabled state [ 491.135725][T12994] bond3: entered allmulticast mode [ 491.171673][T12994] bond3: entered promiscuous mode [ 491.207905][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 240 seconds [ 491.219834][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 240 seconds [ 491.231305][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 240 seconds [ 491.242529][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 240 seconds [ 491.282644][T13001] tun0: tun_chr_ioctl cmd 1074025675 [ 491.288170][T13001] tun0: persist enabled [ 491.293009][T13001] tun0: tun_chr_ioctl cmd 1074025675 [ 491.298440][T13001] tun0: persist disabled [ 491.371490][T12992] lo speed is unknown, defaulting to 1000 [ 491.382872][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 491.409154][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 491.535478][ T38] net_ratelimit: 25 callbacks suppressed [ 491.535499][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 491.665942][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 491.775788][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 491.895500][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 492.025654][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 492.055237][T13007] lo speed is unknown, defaulting to 1000 [ 492.145610][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 492.222890][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2079'. [ 492.255510][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 492.286906][T13029] netlink: 'syz.1.2079': attribute type 5 has an invalid length. [ 492.426084][T13029] geneve2: entered promiscuous mode [ 492.431675][T13029] geneve2: entered allmulticast mode [ 492.483523][ T8054] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 492.517773][ T8054] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 492.546869][ T8054] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 492.575661][ T1322] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 492.585691][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 492.695965][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 492.774260][T13040] tun0: tun_chr_ioctl cmd 1074025675 [ 492.780328][T13040] tun0: persist enabled [ 492.805177][T13040] tun0: tun_chr_ioctl cmd 1074025675 [ 492.811076][T13040] tun0: persist disabled [ 493.066176][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 493.208236][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.214380][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.251823][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.270412][T13030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 493.338332][T13030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 493.554732][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.640080][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.671937][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.715235][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.762740][T13030] wg1 speed is unknown, defaulting to 1000 [ 493.792796][T13030] wg1 speed is unknown, defaulting to 1000 [ 494.014802][T13058] erspan0: entered promiscuous mode [ 494.739151][T13076] __nla_validate_parse: 3 callbacks suppressed [ 494.739172][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 494.760531][T13076] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 494.802810][T13078] netlink: 'syz.3.2092': attribute type 2 has an invalid length. [ 494.812800][T13078] netlink: 'syz.3.2092': attribute type 2 has an invalid length. [ 494.855673][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 494.942139][T13078] lo speed is unknown, defaulting to 1000 [ 495.060776][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 495.756852][T13078] wg1 speed is unknown, defaulting to 1000 [ 495.763758][T13101] siw: device registration error -23 [ 495.774735][T13111] lo speed is unknown, defaulting to 1000 [ 496.002922][T13117] netlink: 'syz.2.2103': attribute type 2 has an invalid length. [ 496.497676][T13111] wg1 speed is unknown, defaulting to 1000 [ 496.505301][T13117] lo speed is unknown, defaulting to 1000 [ 496.633298][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 496.722815][T13125] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 496.735545][ T1322] net_ratelimit: 26 callbacks suppressed [ 496.735562][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 496.867682][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 496.882710][T13119] lo speed is unknown, defaulting to 1000 [ 496.995513][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 497.105794][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 497.184133][T13119] wg1 speed is unknown, defaulting to 1000 [ 497.565661][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 497.685470][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 497.726263][T13117] wg1 speed is unknown, defaulting to 1000 [ 498.108886][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 498.245479][ T1322] bond1: (slave bridge1): link status up again after 0 ms [ 498.275427][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 498.295409][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 499.069281][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 499.327624][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2111'. [ 501.165049][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 501.187119][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 501.436229][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 501.462883][T13203] lo speed is unknown, defaulting to 1000 [ 501.806362][ T4382] net_ratelimit: 25 callbacks suppressed [ 501.806383][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 501.927102][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 501.983009][T13221] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2126'. [ 502.045497][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 502.155447][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 502.265516][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 502.343999][T13203] wg1 speed is unknown, defaulting to 1000 [ 502.363425][T13212] siw: device registration error -23 [ 502.456549][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 502.739099][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 502.855761][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 502.948748][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 502.972151][T13243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2131'. [ 502.992776][T13243] tipc: Invalid UDP bearer configuration [ 502.992837][T13243] tipc: Enabling of bearer rejected, failed to enable media [ 503.008331][T13246] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2132'. [ 503.078397][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'. [ 503.245475][T13249] batadv5: left allmulticast mode [ 503.252628][T13249] batadv5: left promiscuous mode [ 503.258061][T13249] bridge0: port 3(batadv5) entered disabled state [ 503.485470][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 503.597178][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 503.698524][T13263] lo speed is unknown, defaulting to 1000 [ 503.896177][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 504.944850][T13279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.021177][T13273] lo speed is unknown, defaulting to 1000 [ 505.104740][T13279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.278327][T13279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.335518][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 505.366685][T13293] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 505.458999][T13279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.654045][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.716269][ T4382] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.738760][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.765586][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.785870][T13263] wg1 speed is unknown, defaulting to 1000 [ 506.241875][T13273] wg1 speed is unknown, defaulting to 1000 [ 506.301975][T13317] lo speed is unknown, defaulting to 1000 [ 506.401570][T13321] __nla_validate_parse: 3 callbacks suppressed [ 506.401588][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2153'. [ 506.449424][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 506.569513][T13323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2154'. [ 506.835779][ T1322] net_ratelimit: 15 callbacks suppressed [ 506.835804][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 506.898686][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 506.945711][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2156'. [ 507.035913][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 507.085810][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2159'. [ 507.094812][T13335] tipc: Invalid UDP bearer configuration [ 507.094873][T13335] tipc: Enabling of bearer rejected, failed to enable media [ 507.184223][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 507.231775][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 507.315480][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 507.420058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 507.452513][ T10] wg1 speed is unknown, defaulting to 1000 [ 507.455866][T13352] netlink: 'syz.2.2165': attribute type 2 has an invalid length. [ 507.495453][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 507.537322][T13350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.657627][T13360] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2167'. [ 507.673870][T13360] block nbd0: reconnected socket [ 507.683632][ T5832] block nbd0: Receive control failed (result -32) [ 507.873396][T13350] bond4 (unregistering): Released all slaves [ 507.939429][T13364] FAULT_INJECTION: forcing a failure. [ 507.939429][T13364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.954474][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.4.2168 Not tainted syzkaller #0 PREEMPT(full) [ 507.954503][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.954516][T13364] Call Trace: [ 507.954525][T13364] [ 507.954534][T13364] dump_stack_lvl+0x189/0x250 [ 507.954569][T13364] ? __pfx____ratelimit+0x10/0x10 [ 507.954594][T13364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.954623][T13364] ? __pfx__printk+0x10/0x10 [ 507.954645][T13364] ? __might_fault+0xb0/0x130 [ 507.954691][T13364] should_fail_ex+0x414/0x560 [ 507.954730][T13317] wg1 speed is unknown, defaulting to 1000 [ 507.954727][T13364] _copy_from_user+0x2d/0xb0 [ 507.954757][T13364] ___sys_recvmsg+0x12e/0x510 [ 507.954784][T13364] ? __pfx____sys_recvmsg+0x10/0x10 [ 507.954847][T13364] ? __might_fault+0xb0/0x130 [ 507.954887][T13364] do_recvmmsg+0x307/0x770 [ 507.954925][T13364] ? __pfx_do_recvmmsg+0x10/0x10 [ 507.954967][T13364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 507.955020][T13364] __x64_sys_recvmmsg+0x190/0x240 [ 507.955052][T13364] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 507.955092][T13364] ? do_syscall_64+0xbe/0xfa0 [ 507.955127][T13364] do_syscall_64+0xfa/0xfa0 [ 507.955155][T13364] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.955184][T13364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.955213][T13364] ? clear_bhb_loop+0x60/0xb0 [ 507.955242][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.955265][T13364] RIP: 0033:0x7fe92198efc9 [ 507.955288][T13364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.955309][T13364] RSP: 002b:00007fe922852038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 507.955336][T13364] RAX: ffffffffffffffda RBX: 00007fe921be5fa0 RCX: 00007fe92198efc9 [ 507.955354][T13364] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000006 [ 507.955369][T13364] RBP: 00007fe922852090 R08: 0000000000000000 R09: 0000000000000000 [ 507.955385][T13364] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002 [ 507.955401][T13364] R13: 00007fe921be6038 R14: 00007fe921be5fa0 R15: 00007ffe57a438b8 [ 507.955441][T13364] [ 507.969350][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 508.249759][T13367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2170'. [ 508.348286][T13358] lo speed is unknown, defaulting to 1000 [ 508.387659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.845516][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 509.028150][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 509.155668][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 509.348526][T13394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.604336][T13394] bond2 (unregistering): Released all slaves [ 509.803846][T13358] wg1 speed is unknown, defaulting to 1000 [ 510.120613][T13406] tipc: Invalid UDP bearer configuration [ 510.120661][T13406] tipc: Enabling of bearer rejected, failed to enable media [ 511.325604][T13448] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 511.334124][T13448] syzkaller0: linktype set to 1 [ 511.780395][T13467] netlink: 'syz.1.2202': attribute type 3 has an invalid length. [ 511.789061][T13467] __nla_validate_parse: 6 callbacks suppressed [ 511.789078][T13467] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2202'. [ 511.945556][ T38] net_ratelimit: 11 callbacks suppressed [ 511.945579][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 512.071610][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 512.185520][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 512.295543][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 512.368303][T13492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2208'. [ 512.421544][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 512.545814][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 512.699966][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 512.828525][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 512.955968][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 513.010300][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 513.038203][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2214'. [ 513.056075][T13512] tipc: Invalid UDP bearer configuration [ 513.056136][T13512] tipc: Enabling of bearer rejected, failed to enable media [ 513.074750][T13516] netlink: 'syz.0.2217': attribute type 2 has an invalid length. [ 513.082607][T13518] FAULT_INJECTION: forcing a failure. [ 513.082607][T13518] name failslab, interval 1, probability 0, space 0, times 0 [ 513.082647][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.4.2215 Not tainted syzkaller #0 PREEMPT(full) [ 513.082670][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.082683][T13518] Call Trace: [ 513.082691][T13518] [ 513.082699][T13518] dump_stack_lvl+0x189/0x250 [ 513.082732][T13518] ? __pfx____ratelimit+0x10/0x10 [ 513.082755][T13518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.082783][T13518] ? __pfx__printk+0x10/0x10 [ 513.082814][T13518] ? __pfx___might_resched+0x10/0x10 [ 513.082847][T13518] should_fail_ex+0x414/0x560 [ 513.082891][T13518] should_failslab+0xa8/0x100 [ 513.082919][T13518] kmem_cache_alloc_node_noprof+0x77/0x710 [ 513.082952][T13518] ? stack_trace_save+0x9c/0xe0 [ 513.082981][T13518] ? __alloc_skb+0x112/0x2d0 [ 513.083015][T13518] ? radix_tree_lookup+0x25c/0x290 [ 513.083043][T13518] __alloc_skb+0x112/0x2d0 [ 513.083083][T13518] netlink_ack+0x146/0xa50 [ 513.083115][T13518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.083164][T13518] netlink_rcv_skb+0x28c/0x470 [ 513.083196][T13518] ? __lock_acquire+0xab9/0xd20 [ 513.083220][T13518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.083249][T13518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.083308][T13518] ? down_read+0x1ad/0x2e0 [ 513.083343][T13518] genl_rcv+0x28/0x40 [ 513.083366][T13518] netlink_unicast+0x82f/0x9e0 [ 513.083409][T13518] ? __pfx_netlink_unicast+0x10/0x10 [ 513.083444][T13518] ? netlink_sendmsg+0x642/0xb30 [ 513.083463][T13518] ? skb_put+0x11b/0x210 [ 513.083504][T13518] netlink_sendmsg+0x805/0xb30 [ 513.083535][T13518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.083563][T13518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.083601][T13518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.083631][T13518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.083653][T13518] __sock_sendmsg+0x21c/0x270 [ 513.083687][T13518] ____sys_sendmsg+0x505/0x830 [ 513.083717][T13518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.083752][T13518] ? import_iovec+0x74/0xa0 [ 513.083787][T13518] ___sys_sendmsg+0x21f/0x2a0 [ 513.083814][T13518] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.083882][T13518] ? __fget_files+0x2a/0x420 [ 513.083902][T13518] ? __fget_files+0x3a0/0x420 [ 513.083937][T13518] __x64_sys_sendmsg+0x19b/0x260 [ 513.083965][T13518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.084001][T13518] ? __pfx_ksys_write+0x10/0x10 [ 513.084040][T13518] ? do_syscall_64+0xbe/0xfa0 [ 513.084072][T13518] do_syscall_64+0xfa/0xfa0 [ 513.084100][T13518] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.084127][T13518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.084151][T13518] ? clear_bhb_loop+0x60/0xb0 [ 513.084180][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.084203][T13518] RIP: 0033:0x7fe92198efc9 [ 513.084223][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.084245][T13518] RSP: 002b:00007fe922831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.084272][T13518] RAX: ffffffffffffffda RBX: 00007fe921be6090 RCX: 00007fe92198efc9 [ 513.084290][T13518] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 513.084305][T13518] RBP: 00007fe922831090 R08: 0000000000000000 R09: 0000000000000000 [ 513.084320][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.084335][T13518] R13: 00007fe921be6128 R14: 00007fe921be6090 R15: 00007ffe57a438b8 [ 513.084391][T13518] [ 513.225874][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 513.599929][T13534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2220'. [ 513.609826][T13532] tun0: tun_chr_ioctl cmd 1074025675 [ 513.615231][T13532] tun0: persist enabled [ 513.620151][T13521] tun0: tun_chr_ioctl cmd 1074025675 [ 513.627779][T13521] tun0: persist disabled [ 513.640679][T13529] lo speed is unknown, defaulting to 1000 [ 513.706464][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 513.955049][T13524] lo speed is unknown, defaulting to 1000 [ 514.058663][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 514.431111][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2224'. [ 514.907014][T13529] wg1 speed is unknown, defaulting to 1000 [ 514.975515][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 514.997319][T13575] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 515.009561][T13575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2228'. [ 515.287537][T13524] wg1 speed is unknown, defaulting to 1000 [ 515.304341][T13580] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 516.643750][T13616] tipc: Invalid UDP bearer configuration [ 516.643805][T13616] tipc: Enabling of bearer rejected, failed to enable media [ 517.048032][ T38] net_ratelimit: 23 callbacks suppressed [ 517.048056][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 517.107489][T13634] syzkaller0: entered promiscuous mode [ 517.113061][T13634] syzkaller0: entered allmulticast mode [ 517.246478][T13640] FAULT_INJECTION: forcing a failure. [ 517.246478][T13640] name failslab, interval 1, probability 0, space 0, times 0 [ 517.334573][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.1.2250 Not tainted syzkaller #0 PREEMPT(full) [ 517.334600][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.334612][T13640] Call Trace: [ 517.334620][T13640] [ 517.334628][T13640] dump_stack_lvl+0x189/0x250 [ 517.334679][T13640] ? __pfx____ratelimit+0x10/0x10 [ 517.334703][T13640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.334751][T13640] ? __pfx__printk+0x10/0x10 [ 517.334779][T13640] ? __pfx___might_resched+0x10/0x10 [ 517.334810][T13640] should_fail_ex+0x414/0x560 [ 517.334848][T13640] should_failslab+0xa8/0x100 [ 517.334872][T13640] kmem_cache_alloc_node_noprof+0x77/0x710 [ 517.334902][T13640] ? __alloc_skb+0x112/0x2d0 [ 517.334941][T13640] __alloc_skb+0x112/0x2d0 [ 517.334987][T13640] netlink_ack+0x146/0xa50 [ 517.335019][T13640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.335049][T13640] ? __asan_memcpy+0x40/0x70 [ 517.335077][T13640] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.335106][T13640] netlink_rcv_skb+0x28c/0x470 [ 517.335136][T13640] ? __lock_acquire+0xab9/0xd20 [ 517.335159][T13640] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.335186][T13640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.335241][T13640] ? down_read+0x1ad/0x2e0 [ 517.335275][T13640] genl_rcv+0x28/0x40 [ 517.335298][T13640] netlink_unicast+0x82f/0x9e0 [ 517.335342][T13640] ? __pfx_netlink_unicast+0x10/0x10 [ 517.335375][T13640] ? netlink_sendmsg+0x642/0xb30 [ 517.335393][T13640] ? skb_put+0x11b/0x210 [ 517.335428][T13640] netlink_sendmsg+0x805/0xb30 [ 517.335459][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.335483][T13640] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.335518][T13640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.335539][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.335560][T13640] __sock_sendmsg+0x21c/0x270 [ 517.335591][T13640] __sys_sendto+0x3bd/0x520 [ 517.335627][T13640] ? __pfx___sys_sendto+0x10/0x10 [ 517.335656][T13640] ? count_memcg_event_mm+0x21/0x260 [ 517.335712][T13640] ? exc_page_fault+0x82/0x100 [ 517.335743][T13640] ? do_user_addr_fault+0xc85/0x1380 [ 517.335770][T13640] __x64_sys_sendto+0xde/0x100 [ 517.335809][T13640] do_syscall_64+0xfa/0xfa0 [ 517.335834][T13640] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.335871][T13640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.335892][T13640] ? clear_bhb_loop+0x60/0xb0 [ 517.335929][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.335947][T13640] RIP: 0033:0x7f1edbf90e5c [ 517.335971][T13640] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 517.335988][T13640] RSP: 002b:00007f1edcd91ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.336009][T13640] RAX: ffffffffffffffda RBX: 00007f1edcd91fc0 RCX: 00007f1edbf90e5c [ 517.336023][T13640] RDX: 0000000000000020 RSI: 00007f1edcd92010 RDI: 0000000000000003 [ 517.336035][T13640] RBP: 0000000000000000 R08: 00007f1edcd91f14 R09: 000000000000000c [ 517.336047][T13640] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 517.336059][T13640] R13: 00007f1edcd91f68 R14: 00007f1edcd92010 R15: 0000000000000000 [ 517.336090][T13640] [ 517.745668][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 517.814019][T13652] __nla_validate_parse: 4 callbacks suppressed [ 517.814040][T13652] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2249'. [ 517.867126][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 518.005630][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 518.071317][T13657] syzkaller0: entered promiscuous mode [ 518.087491][T13657] syzkaller0: entered allmulticast mode [ 518.107684][T13663] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 518.115653][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 518.220558][T13660] lo speed is unknown, defaulting to 1000 [ 518.236380][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 518.355480][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 518.465470][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 518.604969][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 518.618124][T13663] lo speed is unknown, defaulting to 1000 [ 518.726297][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 518.803101][T13674] FAULT_INJECTION: forcing a failure. [ 518.803101][T13674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.816751][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.2.2262 Not tainted syzkaller #0 PREEMPT(full) [ 518.816779][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 518.816792][T13674] Call Trace: [ 518.816800][T13674] [ 518.816809][T13674] dump_stack_lvl+0x189/0x250 [ 518.816843][T13674] ? __pfx____ratelimit+0x10/0x10 [ 518.816866][T13674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.816906][T13674] ? __pfx__printk+0x10/0x10 [ 518.816928][T13674] ? __might_fault+0xb0/0x130 [ 518.816969][T13674] should_fail_ex+0x414/0x560 [ 518.817006][T13674] _copy_from_user+0x2d/0xb0 [ 518.817033][T13674] kstrtouint_from_user+0xc4/0x170 [ 518.817058][T13674] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 518.817098][T13674] proc_fail_nth_write+0x88/0x200 [ 518.817124][T13674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 518.817158][T13674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 518.817187][T13674] vfs_write+0x27e/0xb30 [ 518.817227][T13674] ? __pfx_vfs_write+0x10/0x10 [ 518.817258][T13674] ? __fget_files+0x2a/0x420 [ 518.817283][T13674] ? __fget_files+0x3a0/0x420 [ 518.817302][T13674] ? __fget_files+0x2a/0x420 [ 518.817332][T13674] ksys_write+0x145/0x250 [ 518.817365][T13674] ? __pfx_ksys_write+0x10/0x10 [ 518.817398][T13674] ? do_syscall_64+0xbe/0xfa0 [ 518.817425][T13674] do_syscall_64+0xfa/0xfa0 [ 518.817446][T13674] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.817469][T13674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.817487][T13674] ? clear_bhb_loop+0x60/0xb0 [ 518.817510][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.817528][T13674] RIP: 0033:0x7fe87b98da7f [ 518.817544][T13674] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 518.817561][T13674] RSP: 002b:00007fe87c87a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 518.817581][T13674] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe87b98da7f [ 518.817594][T13674] RDX: 0000000000000001 RSI: 00007fe87c87a0a0 RDI: 0000000000000005 [ 518.817605][T13674] RBP: 00007fe87c87a090 R08: 0000000000000000 R09: 0000000000000000 [ 518.817616][T13674] R10: 0000000000000f00 R11: 0000000000000293 R12: 0000000000000001 [ 518.817626][T13674] R13: 00007fe87bbe6038 R14: 00007fe87bbe5fa0 R15: 00007ffe56405408 [ 518.817657][T13674] [ 519.296028][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2265'. [ 519.318416][T13682] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 519.327164][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 519.335894][T13672] lo speed is unknown, defaulting to 1000 [ 519.413408][T13660] wg1 speed is unknown, defaulting to 1000 [ 519.652924][T13695] FAULT_INJECTION: forcing a failure. [ 519.652924][T13695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.676976][T13695] CPU: 0 UID: 0 PID: 13695 Comm: syz.3.2270 Not tainted syzkaller #0 PREEMPT(full) [ 519.677004][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.677017][T13695] Call Trace: [ 519.677025][T13695] [ 519.677034][T13695] dump_stack_lvl+0x189/0x250 [ 519.677068][T13695] ? __pfx____ratelimit+0x10/0x10 [ 519.677092][T13695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.677121][T13695] ? __pfx__printk+0x10/0x10 [ 519.677142][T13695] ? __might_fault+0xb0/0x130 [ 519.677184][T13695] should_fail_ex+0x414/0x560 [ 519.677221][T13695] _copy_from_user+0x2d/0xb0 [ 519.677248][T13695] generic_map_update_batch+0x525/0x7f0 [ 519.677290][T13695] ? __pfx_generic_map_update_batch+0x10/0x10 [ 519.677318][T13695] ? __fget_files+0x2a/0x420 [ 519.677346][T13695] ? __pfx_generic_map_update_batch+0x10/0x10 [ 519.677373][T13695] bpf_map_do_batch+0x39b/0x630 [ 519.677402][T13695] __sys_bpf+0x690/0x860 [ 519.677424][T13695] ? __pfx___sys_bpf+0x10/0x10 [ 519.677461][T13695] ? ksys_write+0x22a/0x250 [ 519.677493][T13695] ? __pfx_ksys_write+0x10/0x10 [ 519.677529][T13695] __x64_sys_bpf+0x7c/0x90 [ 519.677560][T13695] do_syscall_64+0xfa/0xfa0 [ 519.677585][T13695] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.677611][T13695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.677632][T13695] ? clear_bhb_loop+0x60/0xb0 [ 519.677662][T13695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.677682][T13695] RIP: 0033:0x7f4daa78efc9 [ 519.677702][T13695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.677719][T13695] RSP: 002b:00007f4dab614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.677741][T13695] RAX: ffffffffffffffda RBX: 00007f4daa9e5fa0 RCX: 00007f4daa78efc9 [ 519.677756][T13695] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 519.677777][T13695] RBP: 00007f4dab614090 R08: 0000000000000000 R09: 0000000000000000 [ 519.677790][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.677803][T13695] R13: 00007f4daa9e6038 R14: 00007f4daa9e5fa0 R15: 00007ffdd7e99f68 [ 519.677837][T13695] [ 520.353827][T13663] wg1 speed is unknown, defaulting to 1000 [ 520.423170][T13672] wg1 speed is unknown, defaulting to 1000 [ 520.513054][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 520.731148][T13711] bridge_slave_1: left allmulticast mode [ 520.738081][T13711] bridge_slave_1: left promiscuous mode [ 520.744189][T13711] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.760381][T13711] bridge_slave_0: left allmulticast mode [ 520.772267][T13711] bridge_slave_0: left promiscuous mode [ 520.780731][T13711] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.271557][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 270 seconds [ 521.282474][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 270 seconds [ 521.294361][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 270 seconds [ 521.306378][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 270 seconds [ 521.313515][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'. [ 521.430835][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 521.661651][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'. [ 522.158479][ T3524] net_ratelimit: 21 callbacks suppressed [ 522.158502][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 522.321876][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 522.458373][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 522.554553][T13754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2287'. [ 522.574278][T13753] lo speed is unknown, defaulting to 1000 [ 522.726773][T13760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2287'. [ 522.757499][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 522.879688][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 522.951554][T13765] syzkaller0: entered promiscuous mode [ 522.958923][T13765] syzkaller0: entered allmulticast mode [ 523.017046][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 523.147958][T13770] tun0: tun_chr_ioctl cmd 1074025675 [ 523.153452][T13770] tun0: persist enabled [ 523.167357][T13770] tun0: tun_chr_ioctl cmd 1074025675 [ 523.175445][T13770] tun0: persist disabled [ 523.187321][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 523.209850][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 523.225863][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2290'. [ 523.232183][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 523.306103][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 523.485461][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 523.613927][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 523.670384][T13753] wg1 speed is unknown, defaulting to 1000 [ 523.884896][T13791] netlink: 'syz.3.2296': attribute type 2 has an invalid length. [ 524.180504][T13792] lo speed is unknown, defaulting to 1000 [ 525.091656][T13798] lo speed is unknown, defaulting to 1000 [ 525.567040][T13815] tun0: tun_chr_ioctl cmd 1074025675 [ 525.576696][T13815] tun0: persist enabled [ 525.595505][T13815] tun0: tun_chr_ioctl cmd 1074025675 [ 525.600842][T13815] tun0: persist disabled [ 525.727235][T13792] wg1 speed is unknown, defaulting to 1000 [ 526.289961][T13821] lo speed is unknown, defaulting to 1000 [ 526.374608][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 526.518869][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 526.939732][T13854] tipc: Enabled bearer , priority 0 [ 526.949174][T13854] syzkaller0: entered promiscuous mode [ 526.957398][T13854] syzkaller0: entered allmulticast mode [ 526.979616][T13853] tipc: Resetting bearer [ 527.044458][T13853] tipc: Disabling bearer [ 527.073725][T13844] lo speed is unknown, defaulting to 1000 [ 527.080626][T13798] wg1 speed is unknown, defaulting to 1000 [ 527.093429][T13821] wg1 speed is unknown, defaulting to 1000 [ 527.815470][ T3524] net_ratelimit: 25 callbacks suppressed [ 527.815492][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 527.975933][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 528.165438][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 528.645047][T13864] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 528.662788][T13864] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 528.845483][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 528.876433][ T5905] wg1 speed is unknown, defaulting to 1000 [ 528.882307][ T5905] syz0: Port: 1 Link DOWN [ 528.886912][ T8054] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.905635][ T8054] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.935787][ T8054] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 20004 - 0 [ 528.950454][ T8054] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.960135][ T8054] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.972532][ T8054] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 529.002420][ T8054] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.012027][ T8054] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.046335][ T8054] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 529.065585][ T8054] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.084701][ T8054] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.132236][ T8054] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 529.161595][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 529.173452][ T1322] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.182844][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 529.195478][ T1322] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.203823][ T1322] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.215583][ T1322] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.235793][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 529.310181][T13844] wg1 speed is unknown, defaulting to 1000 [ 529.602342][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 529.726939][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2327'. [ 529.892552][T13896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2330'. [ 529.915523][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 530.025505][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 530.098680][T13902] netlink: 'syz.2.2332': attribute type 5 has an invalid length. [ 530.205766][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 530.295956][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 530.335806][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 530.356105][T13904] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 530.488699][T13912] FAULT_INJECTION: forcing a failure. [ 530.488699][T13912] name failslab, interval 1, probability 0, space 0, times 0 [ 530.517127][T13912] CPU: 1 UID: 0 PID: 13912 Comm: syz.0.2337 Not tainted syzkaller #0 PREEMPT(full) [ 530.517167][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.517180][T13912] Call Trace: [ 530.517188][T13912] [ 530.517197][T13912] dump_stack_lvl+0x189/0x250 [ 530.517233][T13912] ? __pfx____ratelimit+0x10/0x10 [ 530.517258][T13912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.517288][T13912] ? __pfx__printk+0x10/0x10 [ 530.517325][T13912] should_fail_ex+0x414/0x560 [ 530.517364][T13912] should_failslab+0xa8/0x100 [ 530.517387][T13912] __kmalloc_cache_noprof+0x6f/0x6f0 [ 530.517419][T13912] ? sctp_verify_init+0x1c4a/0x1f40 [ 530.517447][T13912] ? sctp_association_new+0x89/0x25f0 [ 530.517487][T13912] sctp_association_new+0x89/0x25f0 [ 530.517530][T13912] ? __ipv6_addr_type+0x247/0x2f0 [ 530.517556][T13912] sctp_make_temp_asoc+0x89/0x160 [ 530.517589][T13912] sctp_sf_do_unexpected_init+0x574/0x1110 [ 530.517627][T13912] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 530.517670][T13912] sctp_do_sm+0x1e7/0x5a20 [ 530.517691][T13912] ? __pfx_sctp_cname+0x10/0x10 [ 530.517725][T13912] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 530.517753][T13912] ? __pfx_sctp_do_sm+0x10/0x10 [ 530.517776][T13912] ? __lock_acquire+0xab9/0xd20 [ 530.517843][T13912] ? sctp_inq_pop+0xbd4/0xfb0 [ 530.517875][T13912] sctp_assoc_bh_rcv+0x3f2/0x630 [ 530.517914][T13912] sctp_backlog_rcv+0x167/0x3f0 [ 530.517932][T13912] ? do_raw_spin_unlock+0x122/0x240 [ 530.517968][T13912] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 530.518000][T13912] __release_sock+0x297/0x3a0 [ 530.518037][T13912] release_sock+0x5f/0x1f0 [ 530.518078][T13912] sctp_sendmsg+0x1b72/0x2810 [ 530.518124][T13912] ? __pfx_sctp_sendmsg+0x10/0x10 [ 530.518160][T13912] ? aa_sk_perm+0x81e/0x950 [ 530.518197][T13912] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.518231][T13912] ? sock_rps_record_flow+0x19/0x410 [ 530.518267][T13912] ? inet_sendmsg+0x2f4/0x370 [ 530.518297][T13912] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.518323][T13912] __sock_sendmsg+0x19c/0x270 [ 530.518355][T13912] __sys_sendto+0x3bd/0x520 [ 530.518391][T13912] ? __pfx___sys_sendto+0x10/0x10 [ 530.518421][T13912] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 530.518465][T13912] ? __fget_files+0x3a0/0x420 [ 530.518498][T13912] ? ksys_write+0x22a/0x250 [ 530.518532][T13912] ? __pfx_ksys_write+0x10/0x10 [ 530.518568][T13912] __x64_sys_sendto+0xde/0x100 [ 530.518605][T13912] do_syscall_64+0xfa/0xfa0 [ 530.518631][T13912] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.518656][T13912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.518678][T13912] ? clear_bhb_loop+0x60/0xb0 [ 530.518705][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.518726][T13912] RIP: 0033:0x7f6af4b8efc9 [ 530.518744][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.518762][T13912] RSP: 002b:00007f6af5ac3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.518785][T13912] RAX: ffffffffffffffda RBX: 00007f6af4de5fa0 RCX: 00007f6af4b8efc9 [ 530.518801][T13912] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 530.518815][T13912] RBP: 00007f6af5ac3090 R08: 0000200000000140 R09: 000000000000001c [ 530.518830][T13912] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 530.518843][T13912] R13: 00007f6af4de6038 R14: 00007f6af4de5fa0 R15: 00007ffc4a1ba108 [ 530.518881][T13912] [ 531.273948][T13924] geneve2: entered promiscuous mode [ 531.284145][T13924] geneve2: entered allmulticast mode [ 531.321311][T13910] lo speed is unknown, defaulting to 1000 [ 531.657308][T13921] lo speed is unknown, defaulting to 1000 [ 532.089447][T13910] wg1 speed is unknown, defaulting to 1000 [ 532.117239][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2345'. [ 532.513120][T13938] lo speed is unknown, defaulting to 1000 [ 532.535895][T13958] netlink: 'syz.1.2347': attribute type 6 has an invalid length. [ 532.543996][T13958] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2347'. [ 533.241245][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 534.285758][ T12] net_ratelimit: 12 callbacks suppressed [ 534.285780][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 534.325970][T13921] wg1 speed is unknown, defaulting to 1000 [ 534.455675][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 534.598537][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 534.709830][T13938] wg1 speed is unknown, defaulting to 1000 [ 534.725663][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 534.936070][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2355'. [ 535.108498][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 535.455484][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 535.849184][T14000] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2357'. [ 536.945548][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 537.055436][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 537.106517][T14003] lo speed is unknown, defaulting to 1000 [ 537.177039][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 537.235081][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 537.285463][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 537.344442][T14017] netlink: 'syz.0.2360': attribute type 2 has an invalid length. [ 537.351022][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 537.437232][T14025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2363'. [ 537.626081][T14025] IPVS: length: 141 != 8 [ 537.783192][T14017] lo speed is unknown, defaulting to 1000 [ 537.872230][T14036] tun0: tun_chr_ioctl cmd 1074025675 [ 537.895473][T14036] tun0: persist enabled [ 537.911936][T14036] tun0: tun_chr_ioctl cmd 1074025675 [ 537.935553][T14036] tun0: persist disabled [ 538.343737][T14003] wg1 speed is unknown, defaulting to 1000 [ 538.513533][T14053] FAULT_INJECTION: forcing a failure. [ 538.513533][T14053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.531662][T14053] CPU: 0 UID: 0 PID: 14053 Comm: syz.4.2370 Not tainted syzkaller #0 PREEMPT(full) [ 538.531691][T14053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.531704][T14053] Call Trace: [ 538.531712][T14053] [ 538.531721][T14053] dump_stack_lvl+0x189/0x250 [ 538.531753][T14053] ? __pfx____ratelimit+0x10/0x10 [ 538.531777][T14053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.531804][T14053] ? __pfx__printk+0x10/0x10 [ 538.531837][T14053] should_fail_ex+0x414/0x560 [ 538.531873][T14053] _copy_to_user+0x31/0xb0 [ 538.531900][T14053] simple_read_from_buffer+0xe1/0x170 [ 538.531936][T14053] proc_fail_nth_read+0x1b3/0x220 [ 538.531965][T14053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.531993][T14053] ? rw_verify_area+0x2a6/0x4d0 [ 538.532019][T14053] ? __lock_acquire+0xab9/0xd20 [ 538.532036][T14053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.532063][T14053] vfs_read+0x200/0xa30 [ 538.532088][T14053] ? fdget_pos+0x247/0x320 [ 538.532113][T14053] ? __pfx___mutex_lock+0x10/0x10 [ 538.532141][T14053] ? __pfx_vfs_read+0x10/0x10 [ 538.532170][T14053] ? __fget_files+0x2a/0x420 [ 538.532193][T14053] ? __fget_files+0x3a0/0x420 [ 538.532209][T14053] ? __fget_files+0x2a/0x420 [ 538.532237][T14053] ksys_read+0x145/0x250 [ 538.532267][T14053] ? __pfx_ksys_read+0x10/0x10 [ 538.532299][T14053] ? do_syscall_64+0xbe/0xfa0 [ 538.532328][T14053] do_syscall_64+0xfa/0xfa0 [ 538.532360][T14053] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.532383][T14053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.532403][T14053] ? clear_bhb_loop+0x60/0xb0 [ 538.532427][T14053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.532446][T14053] RIP: 0033:0x7fe92198d9dc [ 538.532463][T14053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 538.532482][T14053] RSP: 002b:00007fe922852030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 538.532504][T14053] RAX: ffffffffffffffda RBX: 00007fe921be5fa0 RCX: 00007fe92198d9dc [ 538.532519][T14053] RDX: 000000000000000f RSI: 00007fe9228520a0 RDI: 0000000000000003 [ 538.532532][T14053] RBP: 00007fe922852090 R08: 0000000000000000 R09: 0000000000000000 [ 538.532545][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.532557][T14053] R13: 00007fe921be6038 R14: 00007fe921be5fa0 R15: 00007ffe57a438b8 [ 538.532591][T14053] [ 539.926778][T14060] veth0_to_bridge: entered promiscuous mode [ 539.934423][T14061] veth0_to_bridge: left promiscuous mode [ 540.247709][ T38] net_ratelimit: 6 callbacks suppressed [ 540.247730][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 540.379330][T14017] wg1 speed is unknown, defaulting to 1000 [ 540.386330][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 540.452041][T14070] lo speed is unknown, defaulting to 1000 [ 540.728437][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 540.839074][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 540.848833][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 540.975622][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 541.085802][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 541.113702][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 541.197062][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 541.273651][T14095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2382'. [ 541.305620][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 541.369775][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 541.381220][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 541.424757][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 541.546603][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 541.564660][T14070] wg1 speed is unknown, defaulting to 1000 [ 542.116966][T14111] netlink: 'syz.4.2386': attribute type 1 has an invalid length. [ 542.124754][T14111] netlink: 'syz.4.2386': attribute type 3 has an invalid length. [ 542.162768][T14111] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2386'. [ 542.249313][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2387'. [ 543.978476][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'. [ 544.603572][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 544.659289][T14153] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 544.845531][T14164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2404'. [ 544.854823][T14160] lo speed is unknown, defaulting to 1000 [ 545.255627][ T3524] net_ratelimit: 30 callbacks suppressed [ 545.255647][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 545.406414][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 545.536440][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 545.725653][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 545.847163][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 546.055928][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 546.146439][T14160] wg1 speed is unknown, defaulting to 1000 [ 546.155807][T14173] siw: device registration error -23 [ 546.217989][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 546.551858][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 546.612749][T14212] __nla_validate_parse: 3 callbacks suppressed [ 546.612770][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 546.631206][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 546.835503][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 547.170703][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2421'. [ 547.305568][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 547.313409][T14211] lo speed is unknown, defaulting to 1000 [ 547.333077][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 547.949129][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2426'. [ 547.964797][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 548.070275][T14223] lo speed is unknown, defaulting to 1000 [ 548.226708][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2427'. [ 548.517836][T14211] wg1 speed is unknown, defaulting to 1000 [ 548.625084][T14229] lo speed is unknown, defaulting to 1000 [ 549.044990][T14236] lo speed is unknown, defaulting to 1000 [ 549.350765][T14223] wg1 speed is unknown, defaulting to 1000 [ 549.415795][T14236] wg1 speed is unknown, defaulting to 1000 [ 549.873636][T14229] wg1 speed is unknown, defaulting to 1000 [ 550.093787][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 550.171179][T14268] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 550.375587][ T38] net_ratelimit: 36 callbacks suppressed [ 550.375610][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 550.508488][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 550.617452][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 550.632486][T14275] netlink: 'syz.1.2436': attribute type 2 has an invalid length. [ 550.640471][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 550.775473][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 550.797805][T14275] lo speed is unknown, defaulting to 1000 [ 550.895497][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 551.005862][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 551.149160][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 551.297213][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 551.359542][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 300 seconds [ 551.370518][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 300 seconds [ 551.381723][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 300 seconds [ 551.393407][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 300 seconds [ 551.443675][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 551.555718][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 551.904203][T14293] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 552.141343][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 552.259812][T14302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2446'. [ 552.293370][T14275] wg1 speed is unknown, defaulting to 1000 [ 552.768765][T14316] lo speed is unknown, defaulting to 1000 [ 552.848393][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 553.057716][T14322] lo speed is unknown, defaulting to 1000 [ 553.071545][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 553.485681][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2459'. [ 553.544361][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'. [ 553.580166][T14342] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2458'. [ 553.652521][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2460'. [ 553.964597][T14357] IPVS: Unknown mcast interface: hsr0 [ 554.246098][T14322] wg1 speed is unknown, defaulting to 1000 [ 554.327111][T14316] wg1 speed is unknown, defaulting to 1000 [ 554.824428][T14373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.009111][T14374] lo speed is unknown, defaulting to 1000 [ 555.407233][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2471'. [ 555.525682][ T1322] net_ratelimit: 30 callbacks suppressed [ 555.525705][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 555.676062][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 555.786089][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 555.821492][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 555.895474][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 556.095743][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 556.225468][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 556.345974][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 556.467339][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 556.518986][T14374] wg1 speed is unknown, defaulting to 1000 [ 556.635633][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 556.816405][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 557.463125][T14408] __nla_validate_parse: 2 callbacks suppressed [ 557.463146][T14408] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2475'. [ 557.832082][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'. [ 557.951265][T14433] lo speed is unknown, defaulting to 1000 [ 558.059727][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 558.220369][T14449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2488'. [ 558.235505][T14449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2488'. [ 558.654070][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 558.669939][T14464] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 558.788366][T14434] lo speed is unknown, defaulting to 1000 [ 559.003833][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 559.410686][T14470] lo speed is unknown, defaulting to 1000 [ 559.520991][T14433] wg1 speed is unknown, defaulting to 1000 [ 559.993037][T14434] wg1 speed is unknown, defaulting to 1000 [ 560.545622][ T4382] net_ratelimit: 27 callbacks suppressed [ 560.545647][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 560.591580][T14470] wg1 speed is unknown, defaulting to 1000 [ 560.841664][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 561.005412][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 561.125479][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 561.204629][T14497] bridge_slave_0: left allmulticast mode [ 561.210594][T14497] bridge_slave_0: left promiscuous mode [ 561.217421][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.264401][T14497] bridge_slave_1: left allmulticast mode [ 561.270522][T14497] bridge_slave_1: left promiscuous mode [ 561.278072][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.309135][T14497] bond0: (slave bond_slave_0): Releasing backup interface [ 561.348435][T14497] bond0: (slave bond_slave_1): Releasing backup interface [ 561.367149][T14497] team_slave_0: left promiscuous mode [ 561.374541][T14497] team0: Port device team_slave_0 removed [ 561.382796][T14497] team_slave_1: left promiscuous mode [ 561.402384][T14497] team0: Port device team_slave_1 removed [ 561.420809][T14497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.575469][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 561.738481][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 561.856418][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 561.924779][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 561.970461][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 562.085576][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 562.488245][T14513] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2504'. [ 562.497750][T14513] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2504'. [ 564.494649][T14544] tun0: tun_chr_ioctl cmd 1074025675 [ 564.500514][T14544] tun0: persist enabled [ 564.506978][T14547] tun0: tun_chr_ioctl cmd 1074025675 [ 564.512414][T14547] tun0: persist disabled [ 564.728454][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2518'. [ 564.746760][T14570] FAULT_INJECTION: forcing a failure. [ 564.746760][T14570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.760171][T14570] CPU: 0 UID: 0 PID: 14570 Comm: syz.4.2520 Not tainted syzkaller #0 PREEMPT(full) [ 564.760199][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.760212][T14570] Call Trace: [ 564.760220][T14570] [ 564.760229][T14570] dump_stack_lvl+0x189/0x250 [ 564.760264][T14570] ? __pfx____ratelimit+0x10/0x10 [ 564.760289][T14570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.760317][T14570] ? __pfx__printk+0x10/0x10 [ 564.760353][T14570] should_fail_ex+0x414/0x560 [ 564.760391][T14570] _copy_to_user+0x31/0xb0 [ 564.760421][T14570] bpf_test_finish+0x56f/0x700 [ 564.760466][T14570] ? __pfx_bpf_test_finish+0x10/0x10 [ 564.760515][T14570] bpf_prog_test_run_skb+0xef8/0x1550 [ 564.760568][T14570] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 564.760602][T14570] bpf_prog_test_run+0x2c7/0x340 [ 564.760630][T14570] __sys_bpf+0x562/0x860 [ 564.760653][T14570] ? __pfx___sys_bpf+0x10/0x10 [ 564.760692][T14570] ? ksys_write+0x22a/0x250 [ 564.760726][T14570] ? __pfx_ksys_write+0x10/0x10 [ 564.760763][T14570] __x64_sys_bpf+0x7c/0x90 [ 564.760796][T14570] do_syscall_64+0xfa/0xfa0 [ 564.760821][T14570] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.760847][T14570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.760868][T14570] ? clear_bhb_loop+0x60/0xb0 [ 564.760895][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.760916][T14570] RIP: 0033:0x7fe92198efc9 [ 564.760935][T14570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.760954][T14570] RSP: 002b:00007fe922852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.760977][T14570] RAX: ffffffffffffffda RBX: 00007fe921be5fa0 RCX: 00007fe92198efc9 [ 564.760993][T14570] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 564.761007][T14570] RBP: 00007fe922852090 R08: 0000000000000000 R09: 0000000000000000 [ 564.761020][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.761033][T14570] R13: 00007fe921be6038 R14: 00007fe921be5fa0 R15: 00007ffe57a438b8 [ 564.761083][T14570] [ 565.010549][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 565.082471][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 565.110758][T14574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2522'. [ 565.134406][T14581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2523'. [ 565.302082][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2524'. [ 565.574674][T14604] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2530'. [ 565.579586][T14601] tun0: tun_chr_ioctl cmd 1074025675 [ 565.589307][T14601] tun0: persist enabled [ 565.608133][T14604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.616817][T14601] tun0: tun_chr_ioctl cmd 1074025675 [ 565.622264][T14601] tun0: persist disabled [ 565.655951][ T8054] net_ratelimit: 11 callbacks suppressed [ 565.655971][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 565.694937][T14607] lo speed is unknown, defaulting to 1000 [ 565.770285][T14611] FAULT_INJECTION: forcing a failure. [ 565.770285][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.775487][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 565.895669][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 566.005613][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 566.105441][T14611] CPU: 0 UID: 0 PID: 14611 Comm: syz.0.2532 Not tainted syzkaller #0 PREEMPT(full) [ 566.105471][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.105486][T14611] Call Trace: [ 566.105494][T14611] [ 566.105503][T14611] dump_stack_lvl+0x189/0x250 [ 566.105539][T14611] ? __pfx____ratelimit+0x10/0x10 [ 566.105566][T14611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.105600][T14611] ? __pfx__printk+0x10/0x10 [ 566.105623][T14611] ? __might_fault+0xb0/0x130 [ 566.105667][T14611] should_fail_ex+0x414/0x560 [ 566.105703][T14611] _copy_from_user+0x2d/0xb0 [ 566.105733][T14611] generic_map_update_batch+0x525/0x7f0 [ 566.105777][T14611] ? __pfx_generic_map_update_batch+0x10/0x10 [ 566.105807][T14611] ? __fget_files+0x2a/0x420 [ 566.105835][T14611] ? __pfx_generic_map_update_batch+0x10/0x10 [ 566.105863][T14611] bpf_map_do_batch+0x39b/0x630 [ 566.105893][T14611] __sys_bpf+0x690/0x860 [ 566.105927][T14611] ? __pfx___sys_bpf+0x10/0x10 [ 566.105964][T14611] ? ksys_write+0x22a/0x250 [ 566.105996][T14611] ? __pfx_ksys_write+0x10/0x10 [ 566.106039][T14611] __x64_sys_bpf+0x7c/0x90 [ 566.106071][T14611] do_syscall_64+0xfa/0xfa0 [ 566.106095][T14611] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.106120][T14611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.106141][T14611] ? clear_bhb_loop+0x60/0xb0 [ 566.106167][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.106187][T14611] RIP: 0033:0x7f6af4b8efc9 [ 566.106205][T14611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.106224][T14611] RSP: 002b:00007f6af5aa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.106244][T14611] RAX: ffffffffffffffda RBX: 00007f6af4de6090 RCX: 00007f6af4b8efc9 [ 566.106260][T14611] RDX: 0000000000000038 RSI: 0000200000000680 RDI: 000000000000001a [ 566.106273][T14611] RBP: 00007f6af5aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 566.106286][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.106298][T14611] R13: 00007f6af4de6128 R14: 00007f6af4de6090 R15: 00007ffc4a1ba108 [ 566.106331][T14611] [ 566.317686][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 566.478482][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 566.485891][T14607] wg1 speed is unknown, defaulting to 1000 [ 566.539522][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2534'. [ 566.739239][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 566.780232][T14626] pimreg: entered allmulticast mode [ 566.844774][T14626] pimreg: left allmulticast mode [ 566.985432][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 567.098009][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 567.277350][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 567.599917][T14640] __nla_validate_parse: 3 callbacks suppressed [ 567.599937][T14640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'. [ 567.829822][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 567.839413][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 568.369417][T14667] netlink: 'syz.2.2546': attribute type 2 has an invalid length. [ 568.380594][T14666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2547'. [ 568.411429][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 568.433214][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'. [ 568.502146][T14664] lo speed is unknown, defaulting to 1000 [ 568.567638][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2548'. [ 568.731237][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2551'. [ 568.756384][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 568.982247][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 569.572447][T14722] dvmrp0: entered allmulticast mode [ 569.947945][T14664] wg1 speed is unknown, defaulting to 1000 [ 570.317280][T14744] netlink: 'syz.0.2572': attribute type 21 has an invalid length. [ 570.650178][T14758] lo speed is unknown, defaulting to 1000 [ 570.750840][ T1146] net_ratelimit: 23 callbacks suppressed [ 570.750859][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 570.895499][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 571.008230][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 571.129411][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 571.265903][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 571.395638][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 571.545459][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 571.804499][T14768] lo speed is unknown, defaulting to 1000 [ 571.810722][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 572.043483][T14795] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 573.359764][T14758] wg1 speed is unknown, defaulting to 1000 [ 573.375709][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 573.490729][T14806] __nla_validate_parse: 7 callbacks suppressed [ 573.490748][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 573.519077][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 573.528124][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 573.833218][T14768] wg1 speed is unknown, defaulting to 1000 [ 574.031610][T14819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2597'. [ 574.732902][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2602'. [ 575.493197][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'. [ 575.527904][T14832] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2601'. [ 575.556252][T14832] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2601'. [ 575.631381][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 575.756329][ T8054] net_ratelimit: 15 callbacks suppressed [ 575.756350][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 575.905561][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 576.025606][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 576.145852][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 576.265455][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 576.328489][T14871] lo speed is unknown, defaulting to 1000 [ 576.365369][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 576.375436][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 576.505483][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 576.615708][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 576.692659][T14883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 576.745493][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 576.875486][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 576.904307][T14882] lo speed is unknown, defaulting to 1000 [ 577.253213][T14871] wg1 speed is unknown, defaulting to 1000 [ 577.576481][T14882] wg1 speed is unknown, defaulting to 1000 [ 578.586201][T14933] __nla_validate_parse: 2 callbacks suppressed [ 578.586220][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 579.151799][T14941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2628'. [ 579.352121][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 579.600088][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 580.153883][T14987] lo speed is unknown, defaulting to 1000 [ 580.268572][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'. [ 580.454502][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2641'. [ 580.775456][ T8054] net_ratelimit: 26 callbacks suppressed [ 580.775479][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 580.895433][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 581.005476][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 581.185438][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 581.201738][T15022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2648'. [ 581.208137][T14987] wg1 speed is unknown, defaulting to 1000 [ 581.435595][ T56] block nbd3: Possible stuck request ffff888024df7000: control (read@0,1024B). Runtime 330 seconds [ 581.447099][ T56] block nbd3: Possible stuck request ffff888024df71c0: control (read@1024,1024B). Runtime 330 seconds [ 581.458921][ T56] block nbd3: Possible stuck request ffff888024df7380: control (read@2048,1024B). Runtime 330 seconds [ 581.470268][ T56] block nbd3: Possible stuck request ffff888024df7540: control (read@3072,1024B). Runtime 330 seconds [ 581.507963][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 581.548717][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 581.558561][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 581.655470][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 581.689846][T15033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2652'. [ 581.785420][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 581.905856][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 582.026360][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 582.112971][T15047] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 582.220119][T15050] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 582.233547][T15050] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 582.298830][T15054] tun0: tun_chr_ioctl cmd 1074025675 [ 582.304313][T15054] tun0: persist enabled [ 582.309186][T15055] tun0: tun_chr_ioctl cmd 1074025675 [ 582.314643][T15055] tun0: persist enabled [ 582.338626][T15048] tun0: tun_chr_ioctl cmd 1074025675 [ 582.344045][T15048] tun0: persist disabled [ 582.349164][T15045] tun0: tun_chr_ioctl cmd 1074025675 [ 582.354631][T15045] tun0: persist disabled [ 582.371953][T15047] tipc: Enabled bearer , priority 0 [ 582.383138][T15047] syzkaller0: entered promiscuous mode [ 582.389648][T15047] syzkaller0: entered allmulticast mode [ 582.398026][T15046] tipc: Resetting bearer [ 582.425158][T15046] tipc: Disabling bearer [ 582.435680][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 582.672333][T15061] lo speed is unknown, defaulting to 1000 [ 582.674374][T15067] netlink: 'syz.4.2663': attribute type 2 has an invalid length. [ 583.600601][T15090] netlink: 'syz.1.2660': attribute type 4 has an invalid length. [ 583.608540][T15090] __nla_validate_parse: 11 callbacks suppressed [ 583.608558][T15090] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2660'. [ 584.748301][T15097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2666'. [ 584.815809][T15061] wg1 speed is unknown, defaulting to 1000 [ 584.823886][T15067] lo speed is unknown, defaulting to 1000 [ 585.110520][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 585.445191][T15067] wg1 speed is unknown, defaulting to 1000 [ 585.452960][T15086] rdma_rxe: rxe_newlink: failed to add lo [ 585.787091][ T4382] net_ratelimit: 10 callbacks suppressed [ 585.787112][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 585.920267][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 585.932768][T15132] netlink: 'syz.3.2675': attribute type 1 has an invalid length. [ 586.096517][T15132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.106023][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 586.139784][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2676'. [ 586.182633][T15137] vlan0: entered promiscuous mode [ 586.188072][T15137] bond4: entered promiscuous mode [ 586.193444][T15137] vlan0: entered allmulticast mode [ 586.199169][T15137] bond4: entered allmulticast mode [ 586.257367][T15139] bond4: (slave gretap1): making interface the new active one [ 586.265070][T15139] gretap1: entered promiscuous mode [ 586.272372][T15139] gretap1: entered allmulticast mode [ 586.280083][T15139] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 586.415798][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 586.423286][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2679'. [ 586.434091][T15138] lo speed is unknown, defaulting to 1000 [ 586.536245][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 586.753050][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 586.875505][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 586.989061][ T8054] bond1: (slave bridge1): failed to get link speed/duplex [ 587.145427][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 587.260720][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 587.411526][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'. [ 587.493428][T15138] wg1 speed is unknown, defaulting to 1000 [ 587.659822][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 587.676455][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 587.676894][ T12] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.696580][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.748512][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.763336][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.020369][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2691'. [ 588.087386][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'. [ 589.179548][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'. [ 589.329247][T15230] lo speed is unknown, defaulting to 1000 [ 589.835679][T15249] syzkaller0: entered promiscuous mode [ 589.841213][T15249] syzkaller0: entered allmulticast mode [ 589.943846][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'. [ 590.276731][T15266] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 590.285594][T15230] wg1 speed is unknown, defaulting to 1000 [ 590.391347][T15268] bond5: (slave geneve4): making interface the new active one [ 590.400045][T15268] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 590.424923][ T12] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 590.462542][ T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 590.491320][ T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 590.579702][ T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 590.825444][ T12] net_ratelimit: 27 callbacks suppressed [ 590.825466][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 590.975633][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 591.085788][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 591.233831][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 591.275546][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 591.361959][T15292] lo speed is unknown, defaulting to 1000 [ 591.385583][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 591.545439][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 591.602863][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 591.655465][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 591.765448][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 591.875499][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 591.996845][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 592.470631][T15309] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2718'. [ 592.483182][T15309] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2718'. [ 592.711143][T15316] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2720'. [ 592.916974][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2722'. [ 592.948420][ T31] INFO: task udevd:5889 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 592.976863][ T31] Not tainted syzkaller #0 [ 592.985403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.994128][ T31] task:udevd state:D stack:21248 pid:5889 tgid:5889 ppid:5199 task_flags:0x400140 flags:0x00080003 [ 593.065388][ T31] Call Trace: [ 593.068747][ T31] [ 593.071796][ T31] __schedule+0x1798/0x4cc0 [ 593.115371][ T31] ? __pfx___schedule+0x10/0x10 [ 593.120348][ T31] ? schedule+0x91/0x360 [ 593.124647][ T31] schedule+0x165/0x360 [ 593.155380][ T31] io_schedule+0x80/0xd0 [ 593.159713][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 593.165074][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 593.205797][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 593.222741][ T31] ? __filemap_get_folio+0x770/0xaf0 [ 593.273696][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 593.288315][ T31] do_read_cache_folio+0x1aa/0x590 [ 593.309126][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 593.319958][ T31] read_part_sector+0xb6/0x2b0 [ 593.324859][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 593.330962][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 593.336802][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 593.342848][ T31] bdev_disk_changed+0x75f/0x14b0 [ 593.350311][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 593.355903][ T31] ? wait_on_inode+0xc0/0x230 [ 593.360614][ T31] blkdev_get_whole+0x380/0x510 [ 593.365552][ T31] bdev_open+0x31e/0xd30 [ 593.369842][ T31] blkdev_open+0x457/0x600 [ 593.374259][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 593.379237][ T31] do_dentry_open+0x953/0x13f0 [ 593.384035][ T31] vfs_open+0x3b/0x340 [ 593.388226][ T31] ? path_openat+0x2ecd/0x3830 [ 593.393026][ T31] path_openat+0x2ee5/0x3830 [ 593.397753][ T31] ? __pfx_path_openat+0x10/0x10 [ 593.402747][ T31] do_filp_open+0x1fa/0x410 [ 593.407518][ T31] ? __lock_acquire+0xab9/0xd20 [ 593.412387][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 593.417583][ T31] ? _raw_spin_unlock+0x28/0x50 [ 593.422463][ T31] ? alloc_fd+0x64c/0x6c0 [ 593.427364][ T31] do_sys_openat2+0x121/0x1c0 [ 593.432078][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.437455][ T31] __x64_sys_openat+0x138/0x170 [ 593.442350][ T31] do_syscall_64+0xfa/0xfa0 [ 593.446926][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.452994][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.459226][ T31] ? clear_bhb_loop+0x60/0xb0 [ 593.463932][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.470012][ T31] RIP: 0033:0x7faad7ca7407 [ 593.474618][ T31] RSP: 002b:00007ffddd5971c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 593.483108][ T31] RAX: ffffffffffffffda RBX: 00007faad849f880 RCX: 00007faad7ca7407 [ 593.491142][ T31] RDX: 00000000000a0800 RSI: 000055a638afe3f0 RDI: ffffffffffffff9c [ 593.499268][ T31] RBP: 000055a638af4910 R08: 0000000000000000 R09: 0000000000000000 [ 593.507398][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a638b0ce00 [ 593.515641][ T31] R13: 000055a638b02190 R14: 0000000000000000 R15: 000055a638b0ce00 [ 593.523661][ T31] [ 593.526842][ T31] [ 593.526842][ T31] Showing all locks held in the system: [ 593.534587][ T31] 5 locks held by kworker/u8:0/12: [ 593.541396][ T31] #0: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 593.551448][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 593.560414][ T31] #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 593.569482][ T31] #3: ffffffff99a0d1d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 593.579826][ T31] #4: ffffffff8dde87a8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 593.591245][ T31] 1 lock held by khungtaskd/31: [ 593.596264][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 593.606233][ T31] 2 locks held by getty/5585: [ 593.610923][ T31] #0: ffff88803313d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 593.620741][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 593.631129][ T31] 1 lock held by syz-executor/5828: [ 593.636369][ T31] #0: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 593.647345][ T31] 1 lock held by udevd/5889: [ 593.651936][ T31] #0: ffff88814278b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 593.661261][ T31] 3 locks held by kworker/0:14/8888: [ 593.666612][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 593.677682][ T31] #1: ffffc90003057ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 593.691299][ T31] #2: ffffffff8f5a9ea8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 593.702701][ T31] 5 locks held by syz.2.2715/15292: [ 593.707947][ T31] #0: ffffffff8f2be230 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 593.717448][ T31] #1: ffffffff8f037090 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 593.727181][ T31] #2: ffffffff8f037250 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 593.737252][ T31] #3: ffff88804a484f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 593.748144][ T31] #4: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 593.757645][ T31] 2 locks held by syz.1.2720/15320: [ 593.762850][ T31] #0: ffffffff8f5a9ea8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 593.773025][ T31] #1: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 593.783030][ T31] 1 lock held by syz.1.2720/15323: [ 593.788236][ T31] #0: ffffffff8f5a9ea8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 593.798424][ T31] 1 lock held by syz.1.2720/15324: [ 593.803529][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 593.813332][ T31] 1 lock held by syz.1.2720/15327: [ 593.818512][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 593.828380][ T31] 1 lock held by syz.4.2722/15322: [ 593.833509][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x346/0x700 [ 593.842621][ T31] 2 locks held by syz-executor/15329: [ 593.848176][ T31] #0: ffff88807928f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 593.858446][ T31] #1: ffffffff8f5a9ea8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 593.868522][ T31] [ 593.870880][ T31] ============================================= [ 593.870880][ T31] [ 593.879621][ T31] NMI backtrace for cpu 1 [ 593.879640][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 593.879673][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 593.879688][ T31] Call Trace: [ 593.879700][ T31] [ 593.879713][ T31] dump_stack_lvl+0x189/0x250 [ 593.879758][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.879786][ T31] ? __pfx__printk+0x10/0x10 [ 593.879821][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 593.879857][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 593.879894][ T31] ? __pfx__printk+0x10/0x10 [ 593.879921][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 593.879958][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 593.879995][ T31] watchdog+0xf60/0xfa0 [ 593.880021][ T31] ? watchdog+0x1e2/0xfa0 [ 593.880049][ T31] kthread+0x711/0x8a0 [ 593.880080][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.880100][ T31] ? __pfx_kthread+0x10/0x10 [ 593.880131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.880154][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.880177][ T31] ? __pfx_kthread+0x10/0x10 [ 593.880207][ T31] ret_from_fork+0x4bc/0x870 [ 593.880233][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.880279][ T31] ? __switch_to_asm+0x39/0x70 [ 593.880297][ T31] ? __switch_to_asm+0x33/0x70 [ 593.880315][ T31] ? __pfx_kthread+0x10/0x10 [ 593.880344][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.880383][ T31] [ 593.880396][ T31] Sending NMI from CPU 1 to CPUs 0: [ 594.026567][ C0] NMI backtrace for cpu 0 [ 594.026586][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 594.026606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.026618][ C0] Workqueue: events drain_vmap_area_work [ 594.026642][ C0] RIP: 0010:match_held_lock+0x2/0xc0 [ 594.026665][ C0] Code: 41 5f e9 c1 dc 02 00 cc e8 fb f8 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 <53> bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 [ 594.026682][ C0] RSP: 0018:ffffc900000f72c0 EFLAGS: 00000006 [ 594.026697][ C0] RAX: 0000000000000004 RBX: 000000000000000f RCX: d6ce2fab4ccae600 [ 594.026709][ C0] RDX: ffffc900000f7401 RSI: ffffffff8df3d2e0 RDI: ffff88801ca829e8 [ 594.026723][ C0] RBP: ffff88801ca829e8 R08: ffffc900000f79c8 R09: 0000000000000000 [ 594.026735][ C0] R10: ffffc900000f7458 R11: fffff5200001ee8d R12: 0000000000000003 [ 594.026748][ C0] R13: 0000000000000003 R14: ffffffff8df3d2e0 R15: ffff88801ca81e40 [ 594.026761][ C0] FS: 0000000000000000(0000) GS:ffff888126141000(0000) knlGS:0000000000000000 [ 594.026775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.026788][ C0] CR2: 00007fff8cdcaf9c CR3: 000000006bb2c000 CR4: 00000000003526f0 [ 594.026803][ C0] Call Trace: [ 594.026810][ C0] [ 594.026817][ C0] lock_release+0x127/0x3e0 [ 594.026835][ C0] ? unwind_next_frame+0xa5/0x2390 [ 594.026859][ C0] ? unwind_next_frame+0xa5/0x2390 [ 594.026879][ C0] unwind_next_frame+0x19a9/0x2390 [ 594.026902][ C0] ? unwind_next_frame+0xa5/0x2390 [ 594.026923][ C0] ? decay_va_pool_node+0x724/0xdb0 [ 594.026942][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 594.026967][ C0] arch_stack_walk+0x11c/0x150 [ 594.026991][ C0] ? __purge_vmap_area_lazy+0x15d/0xb40 [ 594.027010][ C0] stack_trace_save+0x9c/0xe0 [ 594.027033][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 594.027057][ C0] ? stack_depot_save_flags+0x40/0x860 [ 594.027087][ C0] ? __lock_acquire+0xab9/0xd20 [ 594.027103][ C0] kasan_save_track+0x3e/0x80 [ 594.027128][ C0] ? kasan_save_track+0x3e/0x80 [ 594.027152][ C0] ? __kasan_save_free_info+0x46/0x50 [ 594.027172][ C0] ? __kasan_slab_free+0x5c/0x80 [ 594.027197][ C0] ? kmem_cache_free+0x19b/0x690 [ 594.027222][ C0] ? decay_va_pool_node+0x724/0xdb0 [ 594.027262][ C0] ? decay_va_pool_node+0x724/0xdb0 [ 594.027278][ C0] __kasan_save_free_info+0x46/0x50 [ 594.027306][ C0] __kasan_slab_free+0x5c/0x80 [ 594.027332][ C0] kmem_cache_free+0x19b/0x690 [ 594.027361][ C0] decay_va_pool_node+0x724/0xdb0 [ 594.027388][ C0] ? __pfx_decay_va_pool_node+0x10/0x10 [ 594.027410][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 594.027436][ C0] __purge_vmap_area_lazy+0x15d/0xb40 [ 594.027456][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 594.027476][ C0] drain_vmap_area_work+0x27/0x40 [ 594.027492][ C0] process_scheduled_works+0xae1/0x17b0 [ 594.027524][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 594.027552][ C0] worker_thread+0x8a0/0xda0 [ 594.027595][ C0] kthread+0x711/0x8a0 [ 594.027619][ C0] ? __pfx_worker_thread+0x10/0x10 [ 594.027637][ C0] ? __pfx_kthread+0x10/0x10 [ 594.027660][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.027678][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.027697][ C0] ? __pfx_kthread+0x10/0x10 [ 594.027720][ C0] ret_from_fork+0x4bc/0x870 [ 594.027738][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 594.027758][ C0] ? __switch_to_asm+0x39/0x70 [ 594.027773][ C0] ? __switch_to_asm+0x33/0x70 [ 594.027786][ C0] ? __pfx_kthread+0x10/0x10 [ 594.027808][ C0] ret_from_fork_asm+0x1a/0x30 [ 594.027831][ C0] [ 594.436365][ T1146] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.454798][T15292] wg1 speed is unknown, defaulting to 1000 [ 594.518079][T15331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.527019][T15331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.535540][T15331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.550251][T15331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.569026][T15331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.638006][ T1146] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.832732][T15329] lo speed is unknown, defaulting to 1000 [ 594.857333][ T1146] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.088402][ T1146] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.362567][ T1146] bond3: left allmulticast mode [ 595.375392][ T1146] bond3: left promiscuous mode [ 595.381471][ T1146] bridge0: port 3(bond3) entered disabled state [ 595.940359][ T1146] bond0 (unregistering): Released all slaves [ 595.954048][ T1146] bond1 (unregistering): Released all slaves [ 595.968799][ T1146] bond2 (unregistering): Released all slaves [ 596.058200][ T1146] bond3 (unregistering): Released all slaves [ 596.071386][T15329] wg1 speed is unknown, defaulting to 1000 [ 596.077441][ T4382] net_ratelimit: 11 callbacks suppressed [ 596.077458][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 596.169890][ T1146] : left promiscuous mode [ 596.259196][ T1146] tipc: Left network mode [ 596.276099][ T38] bond1: (slave bridge1): failed to get link speed/duplex [ 596.349402][T15329] chnl_net:caif_netlink_parms(): no params data found [ 596.536117][T15329] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.543570][T15329] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.559663][T15329] bridge_slave_0: entered allmulticast mode [ 596.568923][T15329] bridge_slave_0: entered promiscuous mode [ 596.588800][T15329] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.605575][T15329] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.612830][T15329] bridge_slave_1: entered allmulticast mode [ 596.625486][ T5832] Bluetooth: hci1: command tx timeout [ 596.639122][T15329] bridge_slave_1: entered promiscuous mode [ 596.827710][T15329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.850562][T15329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.986879][ T1146] hsr_slave_0: left promiscuous mode [ 596.994938][ T1146] hsr_slave_1: left promiscuous mode [ 597.752830][T15329] team0: Port device team_slave_0 added [ 597.763715][T15329] team0: Port device team_slave_1 added [ 597.795769][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 597.803510][T15329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.810514][T15329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.836722][T15329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.849671][T15329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.857048][T15329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.883162][T15329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.930951][T15329] hsr_slave_0: entered promiscuous mode [ 597.937539][T15329] hsr_slave_1: entered promiscuous mode [ 597.943651][T15329] debugfs: 'hsr0' already exists in 'hsr' [ 597.949839][T15329] Cannot create hsr debugfs directory [ 598.055468][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 598.166102][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 598.277545][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 598.355534][T15329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 598.371068][T15329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 598.381354][T15329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 598.391609][T15329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 598.426132][ T4382] bond1: (slave bridge1): failed to get link speed/duplex [ 598.427326][ T1146] IPVS: stop unused estimator thread 0... [ 598.512371][T15329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.543907][T15329] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.561542][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.568800][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.584592][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.591729][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.619915][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 598.716518][ T5832] Bluetooth: hci1: command tx timeout [ 598.736148][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 598.783681][T15329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.822383][T15329] veth0_vlan: entered promiscuous mode [ 598.835601][T15329] veth1_vlan: entered promiscuous mode [ 598.847352][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 598.873376][T15329] veth0_macvtap: entered promiscuous mode [ 598.883479][T15329] veth1_macvtap: entered promiscuous mode [ 598.903132][T15329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.917667][T15329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.931758][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.941764][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.951816][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.961249][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.027173][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.035041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.065445][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.073309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.629674][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.095476][ T1322] net_ratelimit: 19 callbacks suppressed [ 601.095501][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 601.215511][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 601.325508][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 601.435524][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 601.545511][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 601.655552][ T1146] bond1: (slave bridge1): failed to get link speed/duplex [ 601.765556][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 601.875543][ T1322] bond1: (slave bridge1): failed to get link speed/duplex [ 601.985592][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 602.101705][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.135924][ T3524] bond1: (slave bridge1): failed to get link speed/duplex [ 602.310424][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.382964][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.497038][ T12] bridge_slave_1: left allmulticast mode [ 602.503536][ T12] bridge_slave_1: left promiscuous mode [ 602.510249][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.521502][ T12] bridge_slave_0: left allmulticast mode [ 602.528022][ T12] bridge_slave_0: left promiscuous mode [ 602.534054][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.823090][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.833938][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.844479][ T12] bond0 (unregistering): Released all slaves