last executing test programs: 12.895536017s ago: executing program 4 (id=2095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) getsockname(r4, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x8, 0x8, 0x0, 0x5, 0x3, 0x4, 0x8, [0x8001, 0x4]}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004814}, 0x1) 12.237850218s ago: executing program 1 (id=2100): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001300010000", @ANYRES32, @ANYBLOB="00000000000000001c"], 0x3c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0x4}, 0x18) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000780)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000600), &(0x7f00000006c0)=0x4) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 10.723345695s ago: executing program 4 (id=2112): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x1, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x409}, 0x20}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d2000001801000020696c2500000000002020207b1af8ff00000000bfa10000000007010000f802000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x80ab98fc2539988b, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0xdc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0xf}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x2}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x6}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa}, {0xa, 0x4, @random="3e750c68b755"}, {0xa, 0x4, @multicast}, {0xa, 0x4, @random="55b22fc1652a"}]}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xdc}}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x4008000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000002}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) 10.527110999s ago: executing program 1 (id=2114): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x100}, 0x70}}, 0x40880) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, &(0x7f0000000640)=0xfffffffffffffed6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x100}, 0x70}}, 0x40880) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, 0x0) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, &(0x7f0000000640)=0xfffffffffffffed6) (async) 10.433066307s ago: executing program 4 (id=2115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x11, 0x0, &(0x7f00000002c0)) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400100001000130428bd7004000000000000038900000000000000000000000000002400000a0020201d00000000000000001f00dfd3a330964b57168abbd64400000400004c500d9ea9ee34c243adace0ef49c451c581f71e75ded6217bfdefca18c95a8eefab87e8103860bc68e223f8241a0fb2ff084e5f73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000030100000000320000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000000000000000000000000000000000000ffffffffffffffff04000000000000000000000000000000f6000000040000000800000000000000ff340000020001fe00000000000000004f001200726663343330392863636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000800000006fc30700"], 0x140}}, 0x804) 10.302921548s ago: executing program 1 (id=2118): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, 0x1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 9.355824506s ago: executing program 1 (id=2120): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) unshare(0x6a040000) (rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x8) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x3, 0x1, 0x0, 0xa0000000, 0xfffffffa, 0x10}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async, rerun: 64) write$tun(r2, 0x0, 0x0) (rerun: 64) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async, rerun: 64) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4000080) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00', 0x0}) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00008000000000000000ee00800000000000000015f0978ab099805924914a700e3b7cce69a05975ab46800260bcb7050700021310362d19513dbd0756c0293fcddd07a219c9be8896040a1729d6a97255c39a3a35bfa6ef1434b79771330ee474906769b0fedaac5e53c98d2c2efdb6ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r9, &(0x7f0000000200), 0x0}, 0x20) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "bcc0f4cfc3c467a5"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "3e1f3ac67da2c6cffb36e6011d08"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "770bdf"}]}, 0x54}, 0x1, 0x0, 0x0, 0x100}, 0x800) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fddbdf256200000008000300", @ANYRES32=r7, @ANYBLOB="06000000000500b4002a0e00000600b4009f0d00000600b400fb1100000600b300010000000600b400a60000000600b300010000000600b300000000000600b400fc0100"/80], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 7.657586873s ago: executing program 1 (id=2130): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000000)=0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01191800"], 0x0, 0x44}, 0x28) unshare(0x2c060000) unshare(0x2c020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRESHEX, @ANYRESHEX=r1, @ANYRESOCT=r1], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r2, 0x952de000) 7.385223108s ago: executing program 1 (id=2132): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0xa000480) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4c841) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 6.364706749s ago: executing program 2 (id=2135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x10, 0x20, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) 6.211311397s ago: executing program 2 (id=2136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@void, @val={0x2, 0x4, 0x3, 0x6ec, 0x19, 0xc}, @mpls={[{0x2, 0x0, 0x1}], @ipv6=@gre_packet={0x7, 0x6, "d6ffe8", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3, 0x81}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x8}, 0x2, {0xfff, 0x3, 0x2, 0x7, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x7a) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9", 0x51}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) (fail_nth: 2) 5.629138823s ago: executing program 2 (id=2137): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000040)=0x1) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000040)=0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.905990422s ago: executing program 4 (id=2138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x268, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x360, 0x3a8, 0x3a8, 0x360, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x268, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x40, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x6, 0x200, 0xffcf, 0xfe01}, 0x8) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r10, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast]}, 0x40) 4.753638525s ago: executing program 2 (id=2139): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0xfffe}, 0x90) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000000)=0x3fd, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r6) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bb0a010100fffe4e24009c90780100000004000000497a1d08fd3d0ee007022798bb6374ed84284f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x27, 0xe80, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r9, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x9, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 4.434844786s ago: executing program 2 (id=2140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x7a) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9", 0x51}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) 4.241462868s ago: executing program 2 (id=2141): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000816900000000000100010000001a5dfa64fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x50) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @empty, 0x2}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000080), &(0x7f0000000a80)=@tcp=r0, 0x2}, 0x20) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000240)={0x20000000}) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010053797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b65740000140002800800024000000001080001400000000208000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r6) shutdown(r5, 0x0) close(r4) unshare(0x68040200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r11) 3.972059919s ago: executing program 4 (id=2144): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c00"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r9, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r10, r6, 0x4, r8}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x40, 0x107, 0xfffffff9, 0x25df5bfc, {0x4, 0x7c}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x800007}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f00000000c0)=0x726, 0x4) sendmmsg(r11, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x24044015) 3.418506911s ago: executing program 4 (id=2148): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000005c0)=ANY=[], 0xfdef) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000380)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r11, 0x11d, 0x1, 0x0, 0x4) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100001f0001000000000000000000070100800c0001000400"], 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r3, 0xffffffffffffffff, 0x17, 0x1, r4, @void, @value=r4, @void, @void, r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x34, 0x0, @val=@tcx={@void, @value=r14, @void, @void, r13}}, 0x1c) 856.31451ms ago: executing program 0 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) sendmmsg$inet6(r6, &(0x7f0000000240), 0x0, 0x40000c0) r7 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmsg(r9, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="9b87a7e080d34ad499b9b36f4e70aee186d5d1e5772aa3f0467475f8094db20c5e5127a95234343b77c67c308ea9c06415fc620429d23dbfc0ef1a0e7dda683e", 0x40}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000180)="c5b755bb45e1f3c340d438006dde6f05e385d0c7f8d02d9e53cc1d31329ec33529d7017f11e4ff150c155a844235938f3e54cc915d4add4d4e356f37f84cba1e208d464bc1df12e391766e6edf700b83b4", 0x51}], 0x4, &(0x7f0000000240)=[{0x60, 0x84, 0xfffffff7, "1c2cd211a6c738377413ecad1015c7b24a04613b3cf2d93fbf53703b1000f4c62137dfa60e159a4e6eb030755820677db90979fe3a9deaddeeb1aa9efe3c7b5fb7b8bfc2136bc2d9f3f801"}, {0x10, 0x113, 0xffffb0fe}, {0x70, 0x10f, 0x9, "6d8ee527374f15fac538cde3e25698a117b2ea8f7f9acfebebeb26c648b1742d0f66ce18f455175851346c8102e5790eaec776f9d12639a282d1e64fb53721c82f84a5bbbd1db0a490a6a5969d90018b84d58ec320f2ce507a"}, {0xd0, 0x10f, 0x0, "65f869128288bdcd38d8b5c5ee12184be16af530c0f7dc0aa7d03e8ab21e6b6d6b05d0a767ffa230d5e8ab0287fc8f402409c0a6188b71b6c7a951377364844a769da7ad4ce4e62fc6079f01943acc0d375f8ce53a17411d7347988dc91e8c69e4dc0293b989dfaf7b21ed33f5aad03545e63b78ca11d1c471e2a07ed5b7fcf2e99b040c62e1c95773ae31cd9edb59906dabd786fbe7cc920c95f8975e3ae268295ef53cc544d92c5acb2173a75487920ff440072aa321abf35d18"}], 0x1b0}, 0x8004) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000002d6400000000000045040300010000001704000001000a00b7040000ff010000720af2fe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) 485.04607ms ago: executing program 0 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x4, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40085}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c040) 477.574858ms ago: executing program 3 (id=2177): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7], 0x44}}, 0x28000) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) 409.123452ms ago: executing program 3 (id=2178): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2a, 0x5, 0x2, 0x70ff}, {0x20, 0x7, 0x0, 0xa56b}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x44}}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f00000003c0)=r2, 0xffffffffffffffaa) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRES16], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7, 0x3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff85, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf3de2e08d446ba69ef307182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x44}, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r9) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14002583", @ANYRES16=r3, @ANYBLOB="819b00"/14], 0x14}}, 0x40008c4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRES32=0x0, @ANYRES16=r7, @ANYBLOB="f23c433ef25f62baef266ceb50604902f6513450beac24d53f8b7cd31246ff98bcaaa0db6d955b6c8db2f5f844781f1b24fd0fabd0602f40baa50a17e049bc73f47dfb9021249f216b3fc737bc362c0e378792d588761a15c59b41ecb8cc5316638f48db2e8ed11e8149fed4077de3", @ANYRESHEX=r6], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000004040)={0x0, 0x200000000000000, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x2000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x8ac, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc]}) socket$inet6_mptcp(0xa, 0x1, 0x106) 346.70286ms ago: executing program 0 (id=2179): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) (async) shutdown(r0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="1196e752d367cd7d642c31c7e59053d37da6498ab40b10ca54a9a622067342ecf0bbbf9af317d1828052bab7aeeea89b1644bac3aaa0f2", 0x37}, {&(0x7f0000000180)="2107a5837ed96649f50aca188cb85880746861dac8957f41", 0x18}, {&(0x7f0000000280)="8f45e4007dac7d7dda7b7519cda23218626d0123ba3d77a25b55e71d7ce26a79bfa045efa511b2840c659b467dccbaac7d773d13b4cf7aad1cade9b7d190240f7b3ee0dc0409d91cf1e2a1999f5d9ec829d68c7c6bcd0445ff47c33856c8c8c607c155bf334992149efebe2cac10e50357a6d3e3f69f09e10ec4d8c8e6ef847945265f3562e58af2f0a6147be038b832642ff9b209a7b5989c8082d1995d1a2e06dd945c32a87f8db8cf27309cd6", 0xae}, {&(0x7f00000003c0)="9169ddeb8d43e7c84a6bab195f82a2df2e3198c2cd07d368597e6235f7bfa8b81c830e368f1aa1510846a10233055206e8e3b4db31b114620182bfbcf7343ea630e1", 0x42}, {&(0x7f0000000440)="a3206aa6041308b2ec4ae15f505091d16149f28f3876d3fb8538dd7d927b92a247586792c6fe64814bbac3546f2ac93c5dff803424472b9f6c15a0a44c38c90a1562b6e6c3fcd3e0284733f642c1d4c15dfbba4b42f28d946bf426e12e0f332b17ecb201ce2c50be9dd1229ce210f5b0035f6149c54557633566a9a4b96dc9268340209224b8e76e474f92582394c98a8b9cc8f13be181faf07f18c4074db3ff191795c8c08518bfdeb471b0b1716e9a", 0xb0}], 0x5, &(0x7f0000000580)="1186295d86a669ef5b00c4b152f7b2d2aa5ec571d97e83c140f92cf39ca2873dc1dd0c964cdcd88759e436ab79dfb5ff41d24b35ad9b4ad2d5c0e85a9c39da0861dbedb4099a35acf7ed751fec61868d52ae1fc83a4529d804edd17ff93d94a1b79afb5b8654185ec47c8159b6f19dc60ddfc05eaf9049a7d23c21b5a9ba9b548382beff74628c46d5c2e481eb4ba71c4a6801ef490d07e56f6459d0b098e0904c0df2deab41d3eb4fc236", 0xab, 0x80}, 0x40) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006400000000305000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x48a0}, 0x20048084) (async, rerun: 32) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000640)) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a080000040000000000000b01010000002e2e612e2e2e5f2e00"], &(0x7f00000006c0)=""/154, 0x2e, 0x9a, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7, '\x00', r10, r12, 0x2, 0x4, 0x3}, 0x50) close(0x4) 293.329747ms ago: executing program 3 (id=2180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) unshare(0x22020400) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r5, 0x0, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xc6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="24002d800800020003000000050001", @ANYRESHEX=r3], 0x40}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r9) (async) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r10, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @local}, 0x14) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 288.29184ms ago: executing program 0 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0xa4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) (async) r3 = socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='.\x00'}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x128, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40), 0x0, 0x0, 0x0) (rerun: 64) 216.305305ms ago: executing program 3 (id=2182): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xfcde, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x850, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x80, 0x800, 0x5, 0xf8a, 0x75, 0x7fffffff, 0x4, 0x7fffffff, 0x1, 0xfffffffb, 0x4, 0x6, 0x4, 0x8, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0xdb, 0x72f4, 0x6, 0x7, 0xd6, 0x0, 0x7, 0x3, 0x2, 0x5a18, 0x2a, 0x5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x0, 0x5, 0xd, 0x6, 0xe60, 0x3a, 0x14, 0x31, 0xc4e2, 0xbf3, 0xfffffff7, 0x2, 0x8, 0x50, 0xfffffff2, 0x8, 0x8, 0x80000001, 0xfffffff7, 0x671b, 0x0, 0x1, 0x9, 0x36, 0xd, 0x79, 0x0, 0x9, 0x8, 0x8, 0x4, 0x10, 0x722b, 0x3f38b6fd, 0x7, 0x4, 0xcb8, 0x713e, 0x8, 0x9, 0x5, 0x33b1026, 0xe9de, 0xf6, 0xd, 0xc, 0x7800000, 0xc1, 0x6f, 0x5, 0x8, 0x2, 0x4, 0xace1, 0x4, 0x6, 0x2, 0x4, 0xff, 0x87, 0x99cf, 0xf, 0x306, 0x6505, 0x4, 0x98, 0x3, 0x6, 0x1, 0x5ba, 0x8, 0x0, 0x7ff, 0x7ff, 0x6, 0x7fffffff, 0x8, 0x3c00000, 0x101, 0xf98, 0x5, 0xc46c, 0x8, 0x7, 0x3b, 0x9, 0xffffffff, 0x81, 0x2, 0x5, 0x1, 0x1000, 0x200, 0xc51, 0x6ee2, 0xe81, 0x8901, 0x2, 0x4, 0x3, 0x7, 0x7b9, 0xfa, 0x40, 0xe, 0x6, 0x9, 0x7fffffff, 0x7fffffff, 0x4ff5a575, 0xc6b7, 0x1, 0xffff8001, 0x40, 0xff, 0x7, 0x5, 0x6e7, 0x3, 0x1, 0xa434, 0xffff, 0x6, 0x6, 0x6, 0x9, 0x4, 0xfffffff7, 0x10001, 0xfffffffa, 0x0, 0x3, 0x3, 0xffffffff, 0x5, 0x357a, 0x1, 0x1, 0x4, 0x4, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x10001, 0xcbf, 0x7, 0x5, 0xf6, 0x8, 0x4, 0x9f8, 0x9, 0x6, 0x1, 0x9, 0x8, 0xff, 0x1ff, 0x2b, 0x5, 0x8, 0x9, 0xff, 0x2, 0x2, 0xfffffff8, 0x5, 0xc3, 0x40, 0x7, 0x80000001, 0x4000000, 0x3, 0xffffffff, 0x800, 0x8, 0x4, 0xb, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x1, 0x10000, 0xacd6, 0xfffffff7, 0x200, 0x10001, 0x8, 0xfffffffa, 0x2, 0x2, 0x4, 0x9, 0x6, 0xffff108b, 0xfffffead, 0x0, 0x0, 0x1ff, 0x4, 0x3, 0x8, 0x0, 0xa6d, 0x5c5, 0x2, 0x6, 0x82, 0x3, 0xffffff7d, 0x8001, 0xffffff2d, 0x2, 0x1000, 0x80000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x2, 0x7f, 0x3, 0x8, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x5, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x93, 0x7, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x9, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x1, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x3ff, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0xcc, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbb, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x3, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x800, 0x0, 0x0, 0x6, 0x9, 0x9, 0x49e88dee, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x200, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bd, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x884}}, 0x20004811) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xb0, 0xa, 0x148, 0xb0, 0x60, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2d}, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x9, "e7cfa59b06be2a27f6394deea4fe91c3d706f80e3439be1ee22cbc653caf"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x10001}], 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x6, 0x0, 0xc, 0x1, 0x1], 0x1}, {0x4, [0x2, 0x1, 0x4, 0x2, 0x2]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x7}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 178.904271ms ago: executing program 0 (id=2183): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @default, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfffffc01, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x6, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8044}, 0x2000000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x400, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8b9b42cff04f42d8}, 0x4054) 78.098018ms ago: executing program 0 (id=2184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x6b, 0x78, 0x0, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000600180009000000060018007f0000000500160002"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x3d, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xfffffffffffffffd, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 47.657039ms ago: executing program 3 (id=2185): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000040)=0x14) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x4e24, 0x5e, 0x4e22, 0x9, 0xa, 0x0, 0xa0, 0x0, r1, r2}, {0x7, 0xc, 0xd, 0xfffffffffffeffff, 0x4, 0x2, 0xde2, 0x8}, {0x101, 0x0, 0x77, 0x9}, 0x7dd, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x32}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x34ff, 0x1, 0x3, 0x4, 0x8, 0x7, 0x9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079100800d6573172fb000000007b0af8ff000000009500747e6a3736ca7ab71603c12b3e75dbcf63def4da2f1265829047cbf60b7140aa0b7ea2ec896e728ea923d352b04bfd506a437de7a4d28d1d2b8fcf5dd512749ed987e6e0a2eb5ea80cbb2c4d6e59b8758e33497279b4fd2d79eb480dfbdf951c6c6ae421d1ab46584ac4d1232667688f13551241b22b3a6697ca6957e0b535c414b922ab3a7c26f3bfd812ed7aeba68863d4fc1ba65726b690d6b6163d14dcb55210c13f1a61f442a0e31877e3af6e0a19c08d476983"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x41100, 0x50, '\x00', 0x0, @sk_msg}, 0x94) 0s ago: executing program 3 (id=2186): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x10, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)={@local, @link_local, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c59700000000070000000000000000000000000000006b00", "cf00", "fffffffffffffffd"}, 0x38) writev(r7, &(0x7f0000000100)=[{&(0x7f0000001480)="acca", 0x2}], 0x1) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xbb, 0x1000000757}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000480)=@udp6=r9, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ] syz_tun: left allmulticast mode [ 196.040474][ T9984] syz_tun: left promiscuous mode [ 196.089602][ T9985] macsec1: entered promiscuous mode [ 196.127276][ T9985] macsec1: entered allmulticast mode [ 196.177299][ T9982] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.696327][T10005] IPVS: rr: FWM 3 0x00000003 - no destination available [ 196.719334][T10008] Bluetooth: MGMT ver 1.23 [ 196.871878][T10017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1049'. [ 197.250465][T10034] tipc: Enabling of bearer rejected, failed to enable media [ 197.528110][T10034] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.614512][T10046] vlan3: entered promiscuous mode [ 197.647117][T10046] bond0: entered promiscuous mode [ 197.683865][T10046] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 198.151981][T10072] veth9: entered promiscuous mode [ 198.172469][T10073] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 198.648747][T10103] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 198.694805][T10103] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 198.703355][T10103] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 199.006053][T10127] __nla_validate_parse: 6 callbacks suppressed [ 199.006073][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'. [ 199.463363][T10145] tipc: Enabled bearer , priority 0 [ 199.517790][T10145] syzkaller0: entered promiscuous mode [ 199.523318][T10145] syzkaller0: entered allmulticast mode [ 199.553493][T10145] tipc: Resetting bearer [ 199.577204][T10144] tipc: Resetting bearer [ 199.617727][T10144] tipc: Disabling bearer [ 199.661137][T10153] syzkaller1: entered promiscuous mode [ 199.666769][T10153] syzkaller1: entered allmulticast mode [ 199.674010][T10150] validate_nla: 10 callbacks suppressed [ 199.674028][T10150] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 199.697940][T10153] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 199.716227][T10155] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 199.751619][T10159] syzkaller0: entered promiscuous mode [ 199.757542][T10159] syzkaller0: entered allmulticast mode [ 199.775736][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 199.812084][T10159] openvswitch: netlink: IP tunnel dst address not specified [ 199.879932][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 200.349289][ T1012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.369063][ T1012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.392577][ T1012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.411755][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.539922][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'. [ 200.550798][T10218] sctp: [Deprecated]: syz.3.1097 (pid 10218) Use of int in maxseg socket option. [ 200.550798][T10218] Use struct sctp_assoc_value instead [ 200.743818][T10222] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.815797][T10232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.612819][T10258] tap0: tun_chr_ioctl cmd 1074025692 [ 201.819164][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.906351][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.969075][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.999130][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 202.058317][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 202.380530][T10299] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.697915][T10317] netlink: 'syz.2.1120': attribute type 18 has an invalid length. [ 202.706037][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 202.735897][T10317] netlink: 'syz.2.1120': attribute type 18 has an invalid length. [ 202.867873][T10320] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 202.884717][T10320] netlink: 'syz.1.1121': attribute type 3 has an invalid length. [ 202.902686][T10320] NCSI netlink: No device for ifindex 813332851 [ 203.625871][T10330] syzkaller0: entered promiscuous mode [ 203.660799][T10330] syzkaller0: entered allmulticast mode [ 203.855347][T10337] xt_connbytes: Forcing CT accounting to be enabled [ 204.652112][T10359] __nla_validate_parse: 2 callbacks suppressed [ 204.652131][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 204.696781][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1132'. [ 204.746831][T10359] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 204.762715][T10359] bond3 (unregistering): Released all slaves [ 204.784975][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 204.868815][T10363] netlink: 'syz.3.1133': attribute type 10 has an invalid length. [ 204.942250][T10371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1135'. [ 204.958052][T10368] syzkaller1: entered promiscuous mode [ 204.966891][T10368] syzkaller1: entered allmulticast mode [ 204.968880][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1136'. [ 205.052817][T10379] IPVS: rr: FWM 3 0x00000003 - no destination available [ 205.057039][T10381] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 205.082241][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 205.396156][T10397] TCP: TCP_TX_DELAY enabled [ 205.475115][T10406] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 205.486683][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 205.526053][T10404] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 205.546478][T10404] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 205.556618][T10404] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 205.574332][T10409] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.723300][T10413] bond3: (slave veth11): Enslaving as an active interface with a down link [ 206.041523][T10435] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 206.056569][T10430] sit2: entered allmulticast mode [ 206.063759][T10428] geneve1: entered promiscuous mode [ 206.069915][T10428] geneve1: entered allmulticast mode [ 206.184875][T10435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.204056][ T8475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.225161][ T8475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.234309][ T8475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.235357][T10448] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 206.245628][ T8475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.287133][T10440] bond5: (slave veth5): Enslaving as an active interface with a down link [ 206.325317][T10444] vlan2: entered allmulticast mode [ 206.330491][T10444] veth1: entered allmulticast mode [ 206.371183][T10454] netlink: zone id is out of range [ 206.376844][T10454] netlink: zone id is out of range [ 206.376873][T10444] bond5: (slave vlan2): Opening slave failed [ 206.382134][T10454] netlink: zone id is out of range [ 206.393661][T10454] netlink: zone id is out of range [ 206.399169][T10454] netlink: zone id is out of range [ 206.404543][T10454] netlink: zone id is out of range [ 206.410069][T10454] netlink: zone id is out of range [ 206.415691][T10454] netlink: zone id is out of range [ 206.420946][T10454] netlink: zone id is out of range [ 206.427611][T10454] netlink: zone id is out of range [ 206.519317][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 206.519326][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 206.531815][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 206.575624][T10448] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 206.607791][T10458] netlink: 'syz.3.1162': attribute type 10 has an invalid length. [ 206.632051][T10458] team0: Port device netdevsim0 removed [ 206.642080][T10458] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 206.682324][T10458] bond0: (slave bridge0): Releasing backup interface [ 206.772155][T10458] bond0: (slave team0): Releasing backup interface [ 206.792456][T10458] bridge_slave_0: left allmulticast mode [ 206.798798][T10458] bridge_slave_0: left promiscuous mode [ 206.804781][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.816319][T10458] bridge_slave_1: left allmulticast mode [ 206.822086][T10458] bridge_slave_1: left promiscuous mode [ 206.832508][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.858161][T10458] bond0: (slave bond_slave_0): Releasing backup interface [ 206.868545][T10458] bond0: (slave bond_slave_1): Releasing backup interface [ 206.883767][T10458] team0: Port device team_slave_0 removed [ 206.891766][T10458] team0: Port device team_slave_1 removed [ 206.899155][T10458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.907515][T10458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.916809][T10458] bond0: (slave netdevsim0): Releasing backup interface [ 206.929259][T10458] bond1: (slave veth3): Releasing backup interface [ 206.936097][T10458] veth3: left promiscuous mode [ 206.944397][T10458] bond2: (slave gretap2): Releasing active interface [ 207.194011][T10490] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.143360][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 208.162850][T10519] syzkaller0: entered promiscuous mode [ 208.168521][T10519] syzkaller0: entered allmulticast mode [ 208.315101][T10526] netlink: 'syz.0.1181': attribute type 13 has an invalid length. [ 208.528471][ T5992] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.576908][ T5992] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.628353][ T5992] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.662944][ T5992] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.697616][T10549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1186'. [ 208.768731][T10552] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.350757][T10549] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.398388][T10571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1191'. [ 209.674121][T10574] __nla_validate_parse: 1 callbacks suppressed [ 209.674140][T10574] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1191'. [ 210.083200][T10591] netlink: 'syz.2.1195': attribute type 2 has an invalid length. [ 210.329640][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 210.342985][T10600] ip6_vti0 speed is unknown, defaulting to 1000 [ 210.399607][T10606] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 210.573340][T10598] bond0: (slave bond_slave_1): Releasing backup interface [ 210.806181][T10607] bond4: entered promiscuous mode [ 210.835725][T10607] bond4: entered allmulticast mode [ 210.854094][T10607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.938113][T10608] bridge7: entered promiscuous mode [ 210.958427][T10608] bridge7: entered allmulticast mode [ 210.988448][T10608] bond4: (slave bridge7): Enslaving as a backup interface with an up link [ 211.065597][T10625] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1204'. [ 211.210968][T10625] syzkaller0: entered promiscuous mode [ 211.217013][T10625] syzkaller0: entered allmulticast mode [ 211.321543][T10628] xt_hashlimit: max too large, truncated to 1048576 [ 211.441718][T10628] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 211.471917][T10628] team0: Failed to send options change via netlink (err -105) [ 211.490166][T10628] team0: Port device dummy0 added [ 211.504959][T10628] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 211.544537][T10628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 211.599234][T10628] team0: Failed to send options change via netlink (err -105) [ 211.613322][T10628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 211.645292][T10628] team0: Port device dummy0 removed [ 211.697378][T10628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.903252][T10638] 8021q: VLANs not supported on ip6_vti0 [ 212.055836][T10638] ip6_vti0 speed is unknown, defaulting to 1000 [ 212.493735][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 213.225930][T10715] netlink: 'syz.0.1226': attribute type 2 has an invalid length. [ 213.248261][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.256453][T10711] net_ratelimit: 37 callbacks suppressed [ 213.256469][T10711] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.340064][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 213.461044][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 213.668848][T10744] netlink: 'syz.0.1233': attribute type 26 has an invalid length. [ 213.758839][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 213.797808][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 213.817086][T10758] netlink: 'syz.3.1235': attribute type 11 has an invalid length. [ 213.932557][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1237'. [ 213.993712][T10766] netlink: 'syz.2.1237': attribute type 7 has an invalid length. [ 214.024701][T10766] netlink: 'syz.2.1237': attribute type 8 has an invalid length. [ 214.057017][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 214.217925][ T8473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.234818][T10779] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 214.243031][ T8473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.404345][T10779] bond2: entered promiscuous mode [ 214.481983][T10779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.565722][T10786] bond2: (slave veth7): making interface the new active one [ 214.584766][T10786] veth7: entered promiscuous mode [ 214.592987][T10786] bond2: (slave veth7): Enslaving as an active interface with an up link [ 214.712889][T10803] xt_cgroup: invalid path, errno=-2 [ 214.862892][T10814] __nla_validate_parse: 1 callbacks suppressed [ 214.862910][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 215.016350][T10818] tipc: Enabled bearer , priority 0 [ 215.055413][T10818] syzkaller0: entered promiscuous mode [ 215.056677][T10820] IPVS: length: 153 != 24 [ 215.061061][T10818] syzkaller0: entered allmulticast mode [ 215.115288][T10818] tipc: Resetting bearer [ 215.186126][T10817] tipc: Resetting bearer [ 215.300287][T10817] tipc: Disabling bearer [ 215.321180][T10838] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1256'. [ 215.419005][T10840] validate_nla: 1 callbacks suppressed [ 215.419022][T10840] netlink: 'syz.2.1257': attribute type 25 has an invalid length. [ 215.424057][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 215.527018][T10845] syzkaller0: entered promiscuous mode [ 215.532555][T10845] syzkaller0: entered allmulticast mode [ 215.575330][T10845] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 215.658158][T10851] xt_hashlimit: size too large, truncated to 1048576 [ 216.951913][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1272'. [ 217.173037][T10904] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 217.266806][T10909] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 217.459762][T10912] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.497312][T10912] bond6: (slave bond7): making interface the new active one [ 217.515009][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 217.535459][T10912] bond6: (slave bond7): Enslaving as an active interface with an up link [ 217.546731][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 217.559260][T10917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.610283][T10909] vlan2: entered promiscuous mode [ 217.615564][T10909] bond6: entered promiscuous mode [ 217.620636][T10909] bond7: entered promiscuous mode [ 217.765977][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 217.893138][T10929] tipc: Enabled bearer , priority 0 [ 217.910373][T10929] syzkaller0: entered promiscuous mode [ 217.916583][T10929] syzkaller0: entered allmulticast mode [ 217.996786][T10929] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1281'. [ 218.032722][T10927] tipc: Resetting bearer [ 218.246072][T10927] tipc: Disabling bearer [ 218.308670][T10952] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1287'. [ 218.423922][T10955] netlink: 'syz.4.1287': attribute type 1 has an invalid length. [ 218.575922][T10956] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 218.598655][T10964] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 218.647814][T10964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.864516][T10968] netlink: 'syz.1.1291': attribute type 3 has an invalid length. [ 218.896282][T10968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1291'. [ 218.948999][T10970] netlink: 'syz.1.1291': attribute type 3 has an invalid length. [ 219.207349][T10973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.326222][T10978] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 219.377836][T10978] netlink: 'syz.3.1292': attribute type 2 has an invalid length. [ 220.691279][T11000] geneve1: entered promiscuous mode [ 220.709672][T10949] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.802542][T11004] netlink: 'syz.3.1300': attribute type 10 has an invalid length. [ 221.189598][T11032] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20003 [ 221.322155][T11032] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.083868][T11059] __nla_validate_parse: 3 callbacks suppressed [ 222.083886][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 222.157580][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 222.263055][T11066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1318'. [ 222.344132][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 222.546869][T11077] 8021q: VLANs not supported on ip6gre0 [ 222.554463][T11066] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1318'. [ 222.564315][T11066] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.583079][T11068] ip6_vti0 speed is unknown, defaulting to 1000 [ 223.605043][T11125] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1331'. [ 223.671240][T11125] team0: Mode changed to "loadbalance" [ 223.718384][T11130] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1334'. [ 223.749427][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 223.920969][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 223.935651][T11141] tipc: Enabling of bearer rejected, failed to enable media [ 224.511916][T11163] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.882331][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 225.195760][T11185] sch_fq: defrate 4294967293 ignored. [ 225.300430][T11191] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 225.475770][T11204] unsupported nlmsg_type 40 [ 225.507643][T11204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 225.520424][T11197] macvtap1: entered promiscuous mode [ 225.527236][T11197] batadv0: entered promiscuous mode [ 225.534256][T11197] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 225.662177][T11196] ip6_vti0 speed is unknown, defaulting to 1000 [ 226.156851][T11241] FAULT_INJECTION: forcing a failure. [ 226.156851][T11241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.205013][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.0.1363 Not tainted syzkaller #0 PREEMPT(full) [ 226.205040][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.205053][T11241] Call Trace: [ 226.205061][T11241] [ 226.205069][T11241] dump_stack_lvl+0xe8/0x150 [ 226.205101][T11241] should_fail_ex+0x414/0x560 [ 226.205137][T11241] _copy_to_user+0x31/0xb0 [ 226.205164][T11241] simple_read_from_buffer+0xe1/0x170 [ 226.205193][T11241] proc_fail_nth_read+0x1b3/0x220 [ 226.205218][T11241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.205242][T11241] ? rw_verify_area+0x2a6/0x4d0 [ 226.205260][T11241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.205283][T11241] vfs_read+0x200/0xa30 [ 226.205299][T11241] ? fdget_pos+0x247/0x320 [ 226.205329][T11241] ? __pfx___mutex_lock+0x10/0x10 [ 226.205351][T11241] ? __pfx_vfs_read+0x10/0x10 [ 226.205372][T11241] ? __fget_files+0x2a/0x420 [ 226.205401][T11241] ? __fget_files+0x3a0/0x420 [ 226.205424][T11241] ? __fget_files+0x2a/0x420 [ 226.205458][T11241] ksys_read+0x145/0x250 [ 226.205478][T11241] ? __pfx_ksys_read+0x10/0x10 [ 226.205508][T11241] do_syscall_64+0xec/0xf80 [ 226.205527][T11241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.205545][T11241] ? trace_irq_disable+0x37/0x100 [ 226.205571][T11241] ? clear_bhb_loop+0x60/0xb0 [ 226.205594][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.205613][T11241] RIP: 0033:0x7f0cd158e15c [ 226.205630][T11241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.205647][T11241] RSP: 002b:00007f0cd24fb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.205667][T11241] RAX: ffffffffffffffda RBX: 00007f0cd17e5fa0 RCX: 00007f0cd158e15c [ 226.205681][T11241] RDX: 000000000000000f RSI: 00007f0cd24fb0a0 RDI: 0000000000000004 [ 226.205693][T11241] RBP: 00007f0cd24fb090 R08: 0000000000000000 R09: 0000000000000000 [ 226.205704][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.205715][T11241] R13: 00007f0cd17e6038 R14: 00007f0cd17e5fa0 R15: 00007ffdb5d6ffd8 [ 226.205746][T11241] [ 226.574200][T11233] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.114384][T11274] __nla_validate_parse: 4 callbacks suppressed [ 227.114401][T11274] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1373'. [ 227.142422][T11274] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1373'. [ 227.159561][T11274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1373'. [ 227.242610][T11235] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.287909][T11284] sctp: [Deprecated]: syz.1.1376 (pid 11284) Use of int in max_burst socket option. [ 227.287909][T11284] Use struct sctp_assoc_value instead [ 227.371509][T11289] Cannot find add_set index 4 as target [ 227.522372][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1380'. [ 227.582477][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 227.593338][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 227.667475][T11277] siw: device registration error -23 [ 228.327269][T11298] bond0: (slave netdevsim0): Releasing backup interface [ 228.346968][T11298] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 228.553844][T11317] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.699462][T11325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1388'. [ 228.873677][T11333] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1391'. [ 228.920995][T11337] veth1_to_bond: entered allmulticast mode [ 228.935618][T11337] veth1_to_bond: entered promiscuous mode [ 229.234220][T11347] syzkaller0: entered promiscuous mode [ 229.241499][T11347] syzkaller0: entered allmulticast mode [ 229.291825][T11347] tipc: Enabled bearer , priority 0 [ 229.321773][T11347] tipc: Resetting bearer [ 229.345832][T11346] tipc: Resetting bearer [ 229.362452][T11346] tipc: Disabling bearer [ 229.767284][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.782554][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.784924][T11356] openvswitch: netlink: Tunnel attr 11528 out of range max 16 [ 229.791240][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.806819][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.824251][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.835348][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.858477][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.875401][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.894996][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 229.915007][T11353] netlink: 'syz.4.1398': attribute type 29 has an invalid length. [ 230.007227][T11367] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1403'. [ 230.037345][T11369] IPVS: rr: FWM 3 0x00000003 - no destination available [ 230.052867][T11367] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 230.073318][T11367] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1403'. [ 230.216942][T11336] veth1_to_bond: left promiscuous mode [ 230.234862][T11336] veth1_to_bond: left allmulticast mode [ 230.348425][T11385] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.375663][T11385] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 230.906976][T11403] ip6_vti0 speed is unknown, defaulting to 1000 [ 230.916014][T11413] tipc: Enabled bearer , priority 0 [ 230.923297][T11413] syzkaller0: entered promiscuous mode [ 230.935030][T11413] syzkaller0: entered allmulticast mode [ 230.973545][T11413] tipc: Resetting bearer [ 231.017745][T11412] tipc: Resetting bearer [ 231.037340][T11412] tipc: Disabling bearer [ 231.065498][T11418] veth0_to_batadv: entered promiscuous mode [ 231.074795][T11418] veth0_to_batadv: entered allmulticast mode [ 231.300169][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.309925][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.326314][T11428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.359815][T11427] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 231.361550][T11429] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 231.783721][ T5840] Bluetooth: hci4: link tx timeout [ 231.797477][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 232.006541][ T9075] IPVS: starting estimator thread 0... [ 232.144638][T11463] IPVS: using max 30 ests per chain, 72000 per kthread [ 232.235170][T11465] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.691343][T11484] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.716837][T11534] __nla_validate_parse: 23 callbacks suppressed [ 233.716857][T11534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1439'. [ 233.878454][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 234.046224][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 234.160661][T11529] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1439'. [ 234.211192][T11529] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1439'. [ 234.253937][T11529] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1439'. [ 234.281205][T11543] dvmrp1: entered allmulticast mode [ 234.420028][T11550] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1442'. [ 234.678716][T11562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1449'. [ 234.790979][T11562] syzkaller0: entered promiscuous mode [ 234.792243][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 234.808303][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1452'. [ 234.833630][T11562] syzkaller0: entered allmulticast mode [ 235.892927][T11606] bond8: option min_links: invalid value (18446744073709551612) [ 235.926838][T11606] bond8: option min_links: allowed values 0 - 2147483647 [ 235.968781][T11606] bond8 (unregistering): Released all slaves [ 236.029982][T11609] geneve2: entered promiscuous mode [ 236.060001][ T8477] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.087946][ T8477] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.123339][ T8477] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.148416][ T8477] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.245214][T11626] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1470'. [ 236.754366][T11652] FAULT_INJECTION: forcing a failure. [ 236.754366][T11652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.769568][T11652] CPU: 0 UID: 0 PID: 11652 Comm: syz.1.1481 Not tainted syzkaller #0 PREEMPT(full) [ 236.769593][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.769604][T11652] Call Trace: [ 236.769610][T11652] [ 236.769618][T11652] dump_stack_lvl+0xe8/0x150 [ 236.769646][T11652] should_fail_ex+0x414/0x560 [ 236.769678][T11652] _copy_from_user+0x2d/0xb0 [ 236.769700][T11652] ___sys_recvmsg+0x12e/0x510 [ 236.769727][T11652] ? __pfx____sys_recvmsg+0x10/0x10 [ 236.769751][T11652] ? __fget_files+0x2a/0x420 [ 236.769788][T11652] ? __fget_files+0x3a0/0x420 [ 236.769819][T11652] do_recvmmsg+0x307/0x770 [ 236.769847][T11652] ? __pfx_do_recvmmsg+0x10/0x10 [ 236.769878][T11652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.769912][T11652] __x64_sys_recvmmsg+0x190/0x240 [ 236.769937][T11652] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 236.769972][T11652] do_syscall_64+0xec/0xf80 [ 236.769992][T11652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.770010][T11652] ? trace_irq_disable+0x37/0x100 [ 236.770034][T11652] ? clear_bhb_loop+0x60/0xb0 [ 236.770064][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.770082][T11652] RIP: 0033:0x7f507b18f749 [ 236.770098][T11652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.770115][T11652] RSP: 002b:00007f507bf7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 236.770135][T11652] RAX: ffffffffffffffda RBX: 00007f507b3e5fa0 RCX: 00007f507b18f749 [ 236.770149][T11652] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 236.770161][T11652] RBP: 00007f507bf7b090 R08: 0000000000000000 R09: 0000000000000000 [ 236.770172][T11652] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 236.770185][T11652] R13: 00007f507b3e6038 R14: 00007f507b3e5fa0 R15: 00007ffdffe31a48 [ 236.770215][T11652] [ 237.126852][T11659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.215436][ T2965] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.252490][ T2965] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.303839][ T2965] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.323870][ T2965] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.407007][T11666] validate_nla: 26 callbacks suppressed [ 237.407028][T11666] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 237.473072][T11666] vxcan2: entered allmulticast mode [ 238.098147][T11696] FAULT_INJECTION: forcing a failure. [ 238.098147][T11696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.204853][T11696] CPU: 1 UID: 0 PID: 11696 Comm: syz.0.1493 Not tainted syzkaller #0 PREEMPT(full) [ 238.204889][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.204903][T11696] Call Trace: [ 238.204912][T11696] [ 238.204921][T11696] dump_stack_lvl+0xe8/0x150 [ 238.204963][T11696] should_fail_ex+0x414/0x560 [ 238.205008][T11696] _copy_from_user+0x2d/0xb0 [ 238.205037][T11696] ___sys_recvmsg+0x12e/0x510 [ 238.205078][T11696] ? __pfx____sys_recvmsg+0x10/0x10 [ 238.205111][T11696] ? __fget_files+0x2a/0x420 [ 238.205181][T11696] do_recvmmsg+0x307/0x770 [ 238.205223][T11696] ? __pfx_do_recvmmsg+0x10/0x10 [ 238.205264][T11696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.205313][T11696] __x64_sys_recvmmsg+0x190/0x240 [ 238.205344][T11696] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 238.205391][T11696] do_syscall_64+0xec/0xf80 [ 238.205413][T11696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.205434][T11696] ? trace_irq_disable+0x37/0x100 [ 238.205468][T11696] ? clear_bhb_loop+0x60/0xb0 [ 238.205494][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.205516][T11696] RIP: 0033:0x7f0cd158f749 [ 238.205535][T11696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.205554][T11696] RSP: 002b:00007f0cd24b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 238.205577][T11696] RAX: ffffffffffffffda RBX: 00007f0cd17e6180 RCX: 00007f0cd158f749 [ 238.205594][T11696] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 238.205608][T11696] RBP: 00007f0cd24b9090 R08: 0000000000000000 R09: 0000000000000000 [ 238.205621][T11696] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 238.205636][T11696] R13: 00007f0cd17e6218 R14: 00007f0cd17e6180 R15: 00007ffdb5d6ffd8 [ 238.205672][T11696] [ 238.995197][T11717] __nla_validate_parse: 10 callbacks suppressed [ 238.995237][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'. [ 239.158461][T11717] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 239.206066][T11717] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 239.712772][T11747] IPVS: rr: FWM 3 0x00000003 - no destination available [ 239.960631][T11759] FAULT_INJECTION: forcing a failure. [ 239.960631][T11759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.004897][T11759] CPU: 1 UID: 0 PID: 11759 Comm: syz.0.1506 Not tainted syzkaller #0 PREEMPT(full) [ 240.004924][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.004936][T11759] Call Trace: [ 240.004943][T11759] [ 240.004951][T11759] dump_stack_lvl+0xe8/0x150 [ 240.004980][T11759] should_fail_ex+0x414/0x560 [ 240.005014][T11759] _copy_from_user+0x2d/0xb0 [ 240.005038][T11759] ___sys_recvmsg+0x12e/0x510 [ 240.005066][T11759] ? __pfx____sys_recvmsg+0x10/0x10 [ 240.005093][T11759] ? __fget_files+0x2a/0x420 [ 240.005147][T11759] do_recvmmsg+0x307/0x770 [ 240.005178][T11759] ? __pfx_do_recvmmsg+0x10/0x10 [ 240.005211][T11759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.005248][T11759] __x64_sys_recvmmsg+0x190/0x240 [ 240.005275][T11759] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 240.005310][T11759] do_syscall_64+0xec/0xf80 [ 240.005329][T11759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.005345][T11759] ? trace_irq_disable+0x37/0x100 [ 240.005370][T11759] ? clear_bhb_loop+0x60/0xb0 [ 240.005392][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.005410][T11759] RIP: 0033:0x7f0cd158f749 [ 240.005426][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.005442][T11759] RSP: 002b:00007f0cd24da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 240.005463][T11759] RAX: ffffffffffffffda RBX: 00007f0cd17e6090 RCX: 00007f0cd158f749 [ 240.005476][T11759] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 240.005488][T11759] RBP: 00007f0cd24da090 R08: 0000000000000000 R09: 0000000000000000 [ 240.005500][T11759] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 240.005513][T11759] R13: 00007f0cd17e6128 R14: 00007f0cd17e6090 R15: 00007ffdb5d6ffd8 [ 240.005543][T11759] [ 240.423923][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 240.454244][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 240.489584][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1513'. [ 240.696377][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.824861][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.846249][ T8477] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 240.854244][ T8477] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 240.876313][ T9078] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 241.124979][ T9078] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 241.175518][T11815] FAULT_INJECTION: forcing a failure. [ 241.175518][T11815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.211595][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.3.1519 Not tainted syzkaller #0 PREEMPT(full) [ 241.211621][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.211634][T11815] Call Trace: [ 241.211641][T11815] [ 241.211648][T11815] dump_stack_lvl+0xe8/0x150 [ 241.211678][T11815] should_fail_ex+0x414/0x560 [ 241.211712][T11815] _copy_from_user+0x2d/0xb0 [ 241.211737][T11815] ___sys_recvmsg+0x12e/0x510 [ 241.211767][T11815] ? __pfx____sys_recvmsg+0x10/0x10 [ 241.211794][T11815] ? __fget_files+0x2a/0x420 [ 241.211848][T11815] do_recvmmsg+0x307/0x770 [ 241.211880][T11815] ? __pfx_do_recvmmsg+0x10/0x10 [ 241.211915][T11815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.211953][T11815] __x64_sys_recvmmsg+0x190/0x240 [ 241.211979][T11815] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 241.212015][T11815] do_syscall_64+0xec/0xf80 [ 241.212037][T11815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.212054][T11815] ? trace_irq_disable+0x37/0x100 [ 241.212079][T11815] ? clear_bhb_loop+0x60/0xb0 [ 241.212101][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.212120][T11815] RIP: 0033:0x7f80cab8f749 [ 241.212136][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.212152][T11815] RSP: 002b:00007f80cb9c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 241.212172][T11815] RAX: ffffffffffffffda RBX: 00007f80cade6090 RCX: 00007f80cab8f749 [ 241.212186][T11815] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 241.212199][T11815] RBP: 00007f80cb9c8090 R08: 0000000000000000 R09: 0000000000000000 [ 241.212211][T11815] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 241.212223][T11815] R13: 00007f80cade6128 R14: 00007f80cade6090 R15: 00007ffef9345bc8 [ 241.212253][T11815] [ 241.554879][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.563843][ T9078] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 241.713512][T11826] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 241.741118][T11826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.261684][T11837] vxcan0: entered allmulticast mode [ 242.528521][T11845] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.618019][T11858] veth0: entered promiscuous mode [ 242.624857][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 242.650980][T11836] IPVS: rr: FWM 3 0x00000003 - no destination available [ 242.659904][T11858] veth0 (unregistering): left promiscuous mode [ 242.901104][T11868] x_tables: duplicate entry at hook 3 [ 242.913592][T11866] batadv0: entered promiscuous mode [ 242.921695][T11866] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 242.932304][T11866] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 242.946508][T11866] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 242.970632][T11866] batadv0: left promiscuous mode [ 243.258648][T11873] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 243.286080][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.0.1537 Not tainted syzkaller #0 PREEMPT(full) [ 243.286113][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.286139][T11873] Call Trace: [ 243.286149][T11873] [ 243.286159][T11873] dump_stack_lvl+0xe8/0x150 [ 243.286193][T11873] sysfs_warn_dup+0x8e/0xa0 [ 243.286218][T11873] sysfs_do_create_link_sd+0xc0/0x110 [ 243.286245][T11873] device_add_class_symlinks+0x1cf/0x240 [ 243.286273][T11873] device_add+0x475/0xb80 [ 243.286300][T11873] wiphy_register+0x1d2e/0x2d20 [ 243.286351][T11873] ? __pfx_wiphy_register+0x10/0x10 [ 243.286382][T11873] ? __pfx_netdev_run_todo+0x10/0x10 [ 243.286417][T11873] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 243.286451][T11873] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 243.286481][T11873] ieee80211_register_hw+0x34a7/0x4110 [ 243.286525][T11873] ? ieee80211_register_hw+0x1411/0x4110 [ 243.286561][T11873] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 243.286646][T11873] ? __hrtimer_setup+0x181/0x200 [ 243.286684][T11873] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 243.286712][T11873] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 243.286764][T11873] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 243.286783][T11873] ? kstrndup+0xbf/0x160 [ 243.286815][T11873] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 243.286842][T11873] ? __pfx___nla_validate_parse+0x10/0x10 [ 243.286880][T11873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.286908][T11873] ? rcu_is_watching+0x15/0xb0 [ 243.286938][T11873] ? __nla_parse+0x40/0x60 [ 243.286964][T11873] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 243.286993][T11873] genl_family_rcv_msg_doit+0x215/0x300 [ 243.287020][T11873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.287054][T11873] ? bpf_lsm_capable+0x9/0x20 [ 243.287077][T11873] ? security_capable+0x7e/0x2e0 [ 243.287107][T11873] genl_rcv_msg+0x60e/0x790 [ 243.287133][T11873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.287151][T11873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 243.287188][T11873] netlink_rcv_skb+0x208/0x470 [ 243.287214][T11873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.287234][T11873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.287256][T11873] ? genl_rcv+0x19/0x40 [ 243.287304][T11873] ? down_read+0x274/0x2e0 [ 243.287344][T11873] ? genl_rcv+0xd/0x40 [ 243.287378][T11873] genl_rcv+0x28/0x40 [ 243.287408][T11873] netlink_unicast+0x82f/0x9e0 [ 243.287442][T11873] ? __pfx_netlink_unicast+0x10/0x10 [ 243.287465][T11873] ? __alloc_skb+0x198/0x3a0 [ 243.287487][T11873] ? netlink_sendmsg+0x642/0xb30 [ 243.287512][T11873] ? skb_put+0x11b/0x210 [ 243.287539][T11873] netlink_sendmsg+0x805/0xb30 [ 243.287583][T11873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.287614][T11873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 243.287642][T11873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.287661][T11873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.287688][T11873] __sock_sendmsg+0x21c/0x270 [ 243.287731][T11873] ____sys_sendmsg+0x505/0x820 [ 243.287771][T11873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.287802][T11873] ? import_iovec+0x74/0xa0 [ 243.287827][T11873] ___sys_sendmsg+0x21f/0x2a0 [ 243.287851][T11873] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.287874][T11873] ? futex_wait+0x285/0x360 [ 243.287913][T11873] ? __fget_files+0x2a/0x420 [ 243.287931][T11873] ? __fget_files+0x3a0/0x420 [ 243.287957][T11873] __x64_sys_sendmsg+0x19b/0x260 [ 243.287977][T11873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.288002][T11873] ? rcu_is_watching+0x15/0xb0 [ 243.288029][T11873] do_syscall_64+0xec/0xf80 [ 243.288045][T11873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.288059][T11873] ? trace_irq_disable+0x37/0x100 [ 243.288078][T11873] ? clear_bhb_loop+0x60/0xb0 [ 243.288096][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.288110][T11873] RIP: 0033:0x7f0cd158f749 [ 243.288124][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.288137][T11873] RSP: 002b:00007f0cd24fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.288153][T11873] RAX: ffffffffffffffda RBX: 00007f0cd17e5fa0 RCX: 00007f0cd158f749 [ 243.288164][T11873] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 243.288174][T11873] RBP: 00007f0cd1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 243.288183][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.288191][T11873] R13: 00007f0cd17e6038 R14: 00007f0cd17e5fa0 R15: 00007ffdb5d6ffd8 [ 243.288215][T11873] [ 243.774678][T11878] lo: Caught tx_queue_len zero misconfig [ 244.039416][T11888] xt_connbytes: Forcing CT accounting to be enabled [ 244.082297][T11888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.207317][T11896] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 244.220457][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 244.312878][T11899] netlink: 'syz.0.1545': attribute type 13 has an invalid length. [ 244.363675][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 244.389003][T11899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1545'. [ 244.410265][T11899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1545'. [ 244.539223][T11905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1548'. [ 244.676565][T11905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.701436][T11905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.713480][T11905] bond0 (unregistering): Released all slaves [ 244.924759][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 244.947651][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 244.962189][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 245.043905][T11924] team0 (unregistering): Port device team_slave_0 removed [ 245.072667][T11924] team0 (unregistering): Port device team_slave_1 removed [ 245.179751][T11929] gretap0: entered promiscuous mode [ 245.198679][T11935] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 245.208447][T11929] gretap0: left promiscuous mode [ 245.228670][ T9064] syz0: Port: 1 Link DOWN [ 245.321159][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 245.332339][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 245.359753][T11939] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.385606][T11944] netlink: 'syz.2.1556': attribute type 6 has an invalid length. [ 245.468327][T11945] netlink: 'syz.2.1556': attribute type 6 has an invalid length. [ 245.558167][T11947] tipc: Enabled bearer , priority 0 [ 245.585641][T11947] syzkaller0: entered promiscuous mode [ 245.601489][T11947] syzkaller0: entered allmulticast mode [ 245.617956][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 245.659371][T11947] tipc: Resetting bearer [ 245.671428][T11946] tipc: Resetting bearer [ 245.748697][T11958] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 245.803803][T11946] tipc: Disabling bearer [ 245.933024][T11956] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.109779][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.179781][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.294063][T11965] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.531187][T11979] netlink: 'syz.2.1566': attribute type 9 has an invalid length. [ 247.330623][T12031] netlink: 'syz.0.1574': attribute type 8 has an invalid length. [ 247.668753][T12038] netlink: 'syz.2.1576': attribute type 10 has an invalid length. [ 247.688075][T12045] batadv1: entered promiscuous mode [ 247.724435][T12040] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.089711][T12052] veth0_to_bridge: entered promiscuous mode [ 248.470479][T12055] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.887135][T12047] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.970303][T12051] veth0_to_bridge: left promiscuous mode [ 249.212581][T12050] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.431440][T12083] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.480791][T12090] syzkaller0: entered promiscuous mode [ 250.505712][T12090] syzkaller0: entered allmulticast mode [ 250.561420][T12097] __nla_validate_parse: 14 callbacks suppressed [ 250.561440][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 250.567668][T12090] TC_ACT_REPEAT abuse ? [ 250.617128][T12081] syzkaller0: entered promiscuous mode [ 250.622667][T12081] syzkaller0: entered allmulticast mode [ 250.640336][T12101] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1588'. [ 250.654723][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'. [ 250.685036][T12101] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1588'. [ 250.947398][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 251.021570][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 251.034463][T12115] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 251.529886][ T30] audit: type=1800 audit(1767581126.954:3): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1594" name="memory.events" dev="tmpfs" ino=1748 res=0 errno=0 [ 251.732111][T12146] xt_limit: Overflow, try lower: 271964/0 [ 251.757915][T12111] IPVS: rr: FWM 3 0x00000003 - no destination available [ 251.775742][T12146] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1600'. [ 251.846652][T12142] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 252.039013][T12150] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.164380][T12161] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 252.396139][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 253.074825][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 253.093922][T12197] Cannot find add_set index 4 as target [ 253.122196][T12201] Cannot find add_set index 4 as target [ 253.208509][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 253.337783][T12207] syz_tun: entered allmulticast mode [ 253.481743][T12208] syzkaller0: entered promiscuous mode [ 253.487638][T12208] syzkaller0: entered allmulticast mode [ 253.663404][T12216] openvswitch: netlink: Missing valid actions attribute. [ 253.672029][T12216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.893146][T12226] ip6_vti0 speed is unknown, defaulting to 1000 [ 253.984885][T12233] openvswitch: netlink: Flow key attr not present in new flow. [ 254.749655][T12259] ipt_rpfilter: unknown options [ 255.057220][T12274] tipc: Enabled bearer , priority 0 [ 255.067588][T12274] syzkaller0: entered promiscuous mode [ 255.079027][T12274] syzkaller0: entered allmulticast mode [ 255.189075][T12285] lo speed is unknown, defaulting to 1000 [ 255.244984][T12272] tipc: Resetting bearer [ 255.300454][T12272] tipc: Disabling bearer [ 255.343374][T12285] lo speed is unknown, defaulting to 1000 [ 255.396167][T12285] lo speed is unknown, defaulting to 1000 [ 255.450941][T12285] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.501949][T12298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.588499][T12285] lo speed is unknown, defaulting to 1000 [ 255.611746][T12285] lo speed is unknown, defaulting to 1000 [ 255.644489][T12285] lo speed is unknown, defaulting to 1000 [ 255.695039][T12299] veth1_vlan: left allmulticast mode [ 255.928439][T12285] lo speed is unknown, defaulting to 1000 [ 255.934473][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.948891][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.959939][T12285] lo speed is unknown, defaulting to 1000 [ 255.997193][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.014876][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.110994][T12319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1645'. [ 256.308984][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 257.006754][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 257.236975][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'. [ 257.303937][T12373] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.388886][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 257.578558][T12390] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 257.592826][T12390] dvmrp1: linktype set to 774 [ 257.639719][T12381] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.651024][T12373] lo speed is unknown, defaulting to 1000 [ 257.704624][T12387] dvmrp1: tun_chr_ioctl cmd 1075377419 [ 257.992791][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 258.012550][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'. [ 258.054936][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 258.076002][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'. [ 258.090441][T12381] lo speed is unknown, defaulting to 1000 [ 258.185640][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 258.341153][T12421] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 258.584856][T12434] netlink: 'syz.3.1678': attribute type 21 has an invalid length. [ 258.592848][T12435] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 258.653104][T12434] netlink: 'syz.3.1678': attribute type 4 has an invalid length. [ 258.661685][T12434] netlink: 'syz.3.1678': attribute type 5 has an invalid length. [ 259.072277][T12450] tipc: Enabled bearer , priority 10 [ 259.397464][T12475] tipc: Enabling of bearer rejected, failed to enable media [ 259.466430][T12472] syzkaller0: entered promiscuous mode [ 259.471951][T12472] syzkaller0: entered allmulticast mode [ 259.679265][T12501] netlink: 'syz.2.1697': attribute type 6 has an invalid length. [ 260.876935][ T9075] tipc: Node number set to 3294759571 [ 260.978844][T12516] netlink: 'syz.2.1701': attribute type 15 has an invalid length. [ 261.055891][T12521] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.382477][T12521] lo speed is unknown, defaulting to 1000 [ 261.388852][T12531] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.648621][T12555] pim6reg: entered allmulticast mode [ 261.698025][T12531] lo speed is unknown, defaulting to 1000 [ 261.709805][T12563] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 261.743948][T12562] __nla_validate_parse: 11 callbacks suppressed [ 261.743961][T12562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1711'. [ 261.803950][T12560] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 261.816712][T12560] bond9 (unregistering): Released all slaves [ 261.882518][T12566] pim6reg: left allmulticast mode [ 262.133037][T12572] tipc: Enabling of bearer rejected, failed to enable media [ 262.164202][T12572] erspan0: entered promiscuous mode [ 262.170503][T12572] erspan0: entered allmulticast mode [ 262.619788][T12587] netlink: 'syz.4.1717': attribute type 11 has an invalid length. [ 262.632222][T12587] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1717'. [ 262.647257][T12589] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 263.104826][ T30] audit: type=1804 audit(1767581138.514:4): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1722" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1770 res=1 errno=0 [ 263.140028][T12601] IPVS: length: 69 != 24 [ 263.166106][ T30] audit: type=1800 audit(1767581138.514:5): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1722" name="cgroup.controllers" dev="tmpfs" ino=1770 res=0 errno=0 [ 263.337755][T12610] Bluetooth: MGMT ver 1.23 [ 263.542235][T12623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1725'. [ 263.707428][T12631] netlink: 'syz.2.1728': attribute type 1 has an invalid length. [ 263.732139][T12631] siw: device registration error -23 [ 264.015246][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 264.100926][T12655] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 264.149154][T12653] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.699782][T12662] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.709347][T12653] lo speed is unknown, defaulting to 1000 [ 265.394685][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 265.400949][ T5835] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 265.559946][T12699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.585659][T12699] netlink: 'syz.0.1748': attribute type 4 has an invalid length. [ 265.612127][T12662] lo speed is unknown, defaulting to 1000 [ 265.612127][T12672] ip6_vti0 speed is unknown, defaulting to 1000 [ 265.624924][T12699] netlink: 'syz.0.1748': attribute type 4 has an invalid length. [ 265.695551][T12699] netlink: 'syz.0.1748': attribute type 21 has an invalid length. [ 265.725150][T12699] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 265.732953][T12699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1748'. [ 266.115827][T12672] lo speed is unknown, defaulting to 1000 [ 267.018169][T12753] ip6_vti0 speed is unknown, defaulting to 1000 [ 267.164363][T12770] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 267.257098][T12767] block nbd2: NBD_DISCONNECT [ 267.434847][T12783] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 267.602239][T12789] IPVS: rr: FWM 3 0x00000003 - no destination available [ 267.801637][T12753] lo speed is unknown, defaulting to 1000 [ 268.237084][T12821] netlink: 'syz.3.1776': attribute type 2 has an invalid length. [ 268.334876][T12827] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1779'. [ 268.360829][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1776'. [ 268.375736][T12829] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 268.417768][T12829] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 268.649112][T12829] "syz.1.1780" (12829) uses obsolete ecb(arc4) skcipher [ 269.131612][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1788'. [ 269.283987][T12881] netlink: 'syz.3.1790': attribute type 6 has an invalid length. [ 269.315016][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 269.376281][T12874] team0 (unregistering): Port device team_slave_0 removed [ 269.400216][T12874] team0 (unregistering): Port device team_slave_1 removed [ 269.471763][T12887] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 269.524036][T12880] ip6_vti0 speed is unknown, defaulting to 1000 [ 269.544169][T12888] IPVS: rr: FWM 3 0x00000003 - no destination available [ 269.902951][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.911454][T12913] bridge0: port 1(1¾x9ÿ) entered disabled state [ 270.133960][T12917] syzkaller0: entered promiscuous mode [ 270.147750][T12917] syzkaller0: entered allmulticast mode [ 270.147891][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 270.176259][T12895] ip6_vti0 speed is unknown, defaulting to 1000 [ 270.182603][T12880] lo speed is unknown, defaulting to 1000 [ 270.195057][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 270.223846][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 270.233715][T12924] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1799'. [ 270.267596][T12920] netlink: 'syz.0.1799': attribute type 6 has an invalid length. [ 270.544816][T12895] lo speed is unknown, defaulting to 1000 [ 270.554844][ T2082] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.574394][ T2082] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.651429][T12932] syzkaller1: entered promiscuous mode [ 270.657177][T12932] syzkaller1: entered allmulticast mode [ 270.669332][ T2082] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.728210][ T2082] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.760863][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 270.939359][T12933] ip6_vti0 speed is unknown, defaulting to 1000 [ 271.370411][T12933] lo speed is unknown, defaulting to 1000 [ 271.635841][T12952] sctp: [Deprecated]: syz.2.1806 (pid 12952) Use of int in maxseg socket option. [ 271.635841][T12952] Use struct sctp_assoc_value instead [ 272.091859][T12955] sctp: [Deprecated]: syz.1.1807 (pid 12955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.091859][T12955] Use struct sctp_sack_info instead [ 272.275066][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.427173][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 272.523566][T12983] openvswitch: netlink: Missing valid actions attribute. [ 272.533270][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.852017][T12993] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.956705][T12993] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.040096][T12993] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.114392][T12993] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.238244][ T8476] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.308574][ T8476] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.343520][ T8476] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.352718][ T8476] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.835806][T13054] netlink: 'syz.4.1830': attribute type 7 has an invalid length. [ 275.024209][T13063] netlink: 'syz.0.1833': attribute type 10 has an invalid length. [ 275.245499][T13069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.301694][T13069] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 275.318874][T13069] bond5: (slave macvlan0): Enslaving as a backup interface with a down link [ 275.355125][T13071] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 275.391221][T13073] tipc: Enabling of bearer rejected, failed to enable media [ 275.441736][T13073] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.681220][T13090] tipc: Cannot configure node identity twice [ 275.698829][T13090] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 275.715679][T13090] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1841'. [ 275.884827][T13073] lo speed is unknown, defaulting to 1000 [ 276.164694][T13106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1844'. [ 276.384118][T13114] netlink: 'syz.3.1847': attribute type 83 has an invalid length. [ 276.538858][T13127] veth0: entered promiscuous mode [ 276.566830][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1851'. [ 276.638345][T13125] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 276.697090][T13128] syzkaller0: entered promiscuous mode [ 276.702678][T13128] syzkaller0: entered allmulticast mode [ 276.709280][T13130] veth0: left promiscuous mode [ 277.969309][T13145] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.040561][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 278.066656][T13153] netlink: zone id is out of range [ 278.082030][T13153] netlink: zone id is out of range [ 278.094997][T13153] netlink: zone id is out of range [ 278.100172][T13153] netlink: zone id is out of range [ 278.127704][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 278.141898][T13153] netlink: zone id is out of range [ 278.150418][T13153] netlink: zone id is out of range [ 278.176627][T13153] netlink: zone id is out of range [ 278.182032][T13161] tipc: Enabled bearer , priority 0 [ 278.198510][T13153] netlink: zone id is out of range [ 278.212560][T13153] netlink: zone id is out of range [ 278.226295][T13161] syzkaller0: entered promiscuous mode [ 278.239690][T13153] netlink: zone id is out of range [ 278.255035][T13161] syzkaller0: entered allmulticast mode [ 278.343087][T13153] tipc: Resetting bearer [ 278.365237][T13152] tipc: Resetting bearer [ 278.414941][T13152] tipc: Disabling bearer [ 278.439760][T13145] lo speed is unknown, defaulting to 1000 [ 278.523328][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1860'. [ 279.043448][T13191] syzkaller0: entered promiscuous mode [ 279.065418][T13191] syzkaller0: entered allmulticast mode [ 279.259015][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 279.479990][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 279.723738][T13218] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 279.989126][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'. [ 279.998455][T13225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 281.298201][T13224] tipc: Enabling of bearer rejected, failed to enable media [ 281.307039][T13225] macvlan0: entered allmulticast mode [ 281.313559][T13225] veth1_vlan: entered allmulticast mode [ 281.571615][T13251] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1879'. [ 281.759518][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1882'. [ 281.830036][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 281.981221][T13274] ip6_vti0 speed is unknown, defaulting to 1000 [ 282.368724][T13302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1889'. [ 282.380025][T13274] lo speed is unknown, defaulting to 1000 [ 282.460537][T13308] netlink: 'syz.2.1890': attribute type 83 has an invalid length. [ 283.087815][T13336] bridge0: entered promiscuous mode [ 283.105341][T13336] bridge0: port 3(vlan2) entered blocking state [ 283.122064][T13336] bridge0: port 3(vlan2) entered disabled state [ 283.135203][T13336] vlan2: entered allmulticast mode [ 283.150990][T13336] bridge0: entered allmulticast mode [ 283.290181][T13336] vlan2: left allmulticast mode [ 283.295471][T13336] bridge0: left allmulticast mode [ 283.314285][T13336] bridge0: left promiscuous mode [ 283.345730][T13341] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001 [ 283.668176][T13353] geneve2: entered promiscuous mode [ 283.704003][T12550] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.724464][T12550] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.729388][T13355] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 283.734669][T12550] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.752592][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 283.762492][T12550] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.823152][T13369] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1903'. [ 283.846902][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1907'. [ 283.867141][T13360] netlink: 'syz.2.1905': attribute type 11 has an invalid length. [ 283.875670][T13360] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1905'. [ 283.899748][T13360] netlink: 'syz.2.1905': attribute type 15 has an invalid length. [ 283.908594][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 283.931044][T13360] netlink: 'syz.2.1905': attribute type 15 has an invalid length. [ 283.966429][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 283.997081][T13372] ip6_vti0 speed is unknown, defaulting to 1000 [ 284.290195][T13376] ip6_vti0 speed is unknown, defaulting to 1000 [ 284.298062][T13372] lo speed is unknown, defaulting to 1000 [ 284.476599][T13376] lo speed is unknown, defaulting to 1000 [ 284.477085][T13378] ip6_vti0 speed is unknown, defaulting to 1000 [ 284.625678][T13391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.835240][T13405] net_ratelimit: 4 callbacks suppressed [ 284.835259][T13405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.894177][T13384] ip6_vti0 speed is unknown, defaulting to 1000 [ 284.929077][T13409] ip6tnl0: Caught tx_queue_len zero misconfig [ 285.262465][T13378] lo speed is unknown, defaulting to 1000 [ 285.279216][T13384] lo speed is unknown, defaulting to 1000 [ 285.821518][T13430] syzkaller0: entered promiscuous mode [ 285.837268][T13430] syzkaller0: entered allmulticast mode [ 286.019401][T13438] tipc: Invalid UDP bearer configuration [ 286.021730][T13438] tipc: Enabling of bearer rejected, failed to enable media [ 286.261185][T13443] netlink: 'syz.4.1929': attribute type 6 has an invalid length. [ 286.634472][T13460] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 286.794424][T13460] syzkaller0: entered promiscuous mode [ 286.803533][T13460] syzkaller0: entered allmulticast mode [ 286.843442][T13467] __nla_validate_parse: 2 callbacks suppressed [ 286.843508][T13467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1935'. [ 287.079898][T13470] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1936'. [ 287.104668][T13470] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 287.290905][T13479] IPVS: rr: FWM 3 0x00000003 - no destination available [ 288.531397][T13483] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.541632][T13483] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.627441][T13483] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.669495][T13483] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.732486][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 288.745789][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1949'. [ 288.772381][T13520] bond0: (slave dummy0): Releasing backup interface [ 288.866291][T13483] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.892284][T13483] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.983032][T13483] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.001865][T13483] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.173230][T13536] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 289.189496][T12550] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.192086][T13536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.207246][T12550] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.225022][T13534] 8021q: VLANs not supported on wlan0 [ 289.259814][T12550] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.284739][T12550] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.309355][T13538] syzkaller0: entered promiscuous mode [ 289.316166][T13538] syzkaller0: entered allmulticast mode [ 289.356801][T12550] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.366003][T12550] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.401535][ T2082] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.426136][ T2082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.432351][T13538] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.881609][T13578] veth6: entered allmulticast mode [ 289.894320][T13579] trusted_key: syz.4.1965 sent an empty control message without MSG_MORE. [ 290.070747][T13582] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.274410][T13582] lo speed is unknown, defaulting to 1000 [ 290.303634][T13599] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 290.371275][T13601] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.515228][T13605] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1974'. [ 290.678902][T13601] lo speed is unknown, defaulting to 1000 [ 290.702470][T13609] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 291.018533][T13616] ip6_vti0 speed is unknown, defaulting to 1000 [ 291.143458][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1981'. [ 291.479172][T13616] lo speed is unknown, defaulting to 1000 [ 291.561667][T13639] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.592570][T13639] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.602782][T13647] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1982'. [ 291.830596][T13639] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.851354][T13639] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.948758][T13639] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.974836][T13639] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.091929][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 292.114119][T13639] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.124525][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 292.137811][T13639] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.158315][T13663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 292.244303][ T2082] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.258623][ T2082] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.319192][T12550] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.340498][T12550] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.394108][T12550] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.425635][T12550] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.467907][T12550] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.490065][T12550] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.515041][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 292.536152][T13679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.709429][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 292.846181][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 292.855813][T13692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.877857][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 292.892194][T13692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1998'. [ 293.062862][T13714] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 293.189471][T13714] bond6 (unregistering): Released all slaves [ 293.466063][T13727] IPVS: rr: FWM 3 0x00000003 - no destination available [ 293.973437][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 294.181116][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 294.197987][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 294.301678][T13765] netlink: 'syz.3.2017': attribute type 6 has an invalid length. [ 294.357053][T13765] team0: Port device ip6tnl3 added [ 295.487564][T13818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.510629][ T8849] lo speed is unknown, defaulting to 1000 [ 295.521439][ T8849] syz1: Port: 1 Link ACTIVE [ 295.527670][T13822] bridge_slave_0: left allmulticast mode [ 295.548002][T13822] bridge_slave_0: left promiscuous mode [ 295.553787][T13822] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.576443][T13822] bridge_slave_1: left allmulticast mode [ 295.582322][T13822] bridge_slave_1: left promiscuous mode [ 295.589259][T13822] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.626070][T13822] bond0: (slave bond_slave_0): Releasing backup interface [ 295.662083][T13822] bond0: (slave bond_slave_1): Releasing backup interface [ 295.672311][T13822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.681986][T13822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.691017][T13822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.710965][T13826] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 295.836122][T12548] bond4: (slave bridge7): link status up again after 0 ms [ 295.865354][T12548] bond4: (slave bridge7): failed to get link speed/duplex [ 295.985521][T12548] bond4: (slave bridge7): failed to get link speed/duplex [ 296.094750][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 296.141295][T13851] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.244812][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 296.542289][T13851] lo speed is unknown, defaulting to 1000 [ 296.925037][T13876] netlink: 'syz.2.2044': attribute type 10 has an invalid length. [ 297.377236][T13891] xt_CT: No such helper "syz0" [ 297.613343][T13906] __nla_validate_parse: 8 callbacks suppressed [ 297.613363][T13906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'. [ 297.747166][T13902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 297.764671][ T2082] net_ratelimit: 10 callbacks suppressed [ 297.764696][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 297.895504][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 298.025753][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 298.134721][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 298.258017][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 298.336301][T13936] x_tables: duplicate underflow at hook 3 [ 298.374628][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 298.484748][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 298.610424][T13946] netlink: 'syz.3.2061': attribute type 2 has an invalid length. [ 298.624669][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 298.638885][T13946] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 298.676479][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 298.735048][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 298.857969][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 298.948054][T13965] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 298.961762][T13963] rdma_rxe: rxe_newlink: failed to add lo [ 299.108830][T13969] syzkaller0: entered promiscuous mode [ 299.114386][T13969] syzkaller0: entered allmulticast mode [ 299.315332][T13985] syzkaller1: entered promiscuous mode [ 299.333020][T13985] syzkaller1: entered allmulticast mode [ 299.342273][T13991] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.2073'. [ 299.609533][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 299.716804][T14013] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 299.778379][T14007] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 299.800422][T14007] bond7 (unregistering): Released all slaves [ 299.905028][T14014] ip6_vti0 speed is unknown, defaulting to 1000 [ 299.977876][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 300.316339][T14039] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 300.423508][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 300.441076][T14050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.547741][T14040] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.558753][T14040] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 300.576769][T14040] bond7: (slave vxcan3): making interface the new active one [ 300.585382][T14040] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 300.594352][T14044] syzkaller1: entered promiscuous mode [ 300.600558][T14044] syzkaller1: entered allmulticast mode [ 300.610341][T14015] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.621926][T14039] bond7 (unregistering): (slave vxcan3): Releasing backup interface [ 300.628864][T14014] lo speed is unknown, defaulting to 1000 [ 300.680732][T14039] bond7 (unregistering): Released all slaves [ 300.746976][T14050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.915626][T14050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.023966][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2092'. [ 301.080989][T14050] bond0: (slave netdevsim0): Releasing backup interface [ 301.094863][T14050] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.190636][T14015] lo speed is unknown, defaulting to 1000 [ 301.231779][T14075] 8021q: VLANs not supported on ip_vti0 [ 301.287771][T14071] tipc: Enabled bearer , priority 0 [ 301.299981][T14074] syzkaller0: entered promiscuous mode [ 301.316136][T14074] syzkaller0: entered allmulticast mode [ 301.379726][ T8476] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.411647][T12553] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.420722][T14070] tipc: Resetting bearer [ 301.461891][T14070] tipc: Disabling bearer [ 301.493054][T14073] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.555688][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.584392][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 301.604946][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.623804][T14080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2096'. [ 301.793335][T14091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2099'. [ 301.862813][T14073] lo speed is unknown, defaulting to 1000 [ 301.907974][T14093] bridge_slave_1: left allmulticast mode [ 301.919891][T14093] bridge_slave_1: left promiscuous mode [ 301.949112][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.983874][T14093] ¾x9ÿ: left allmulticast mode [ 301.989282][T14093] ¾x9ÿ: left promiscuous mode [ 302.010399][T14093] bridge0: port 1(1¾x9ÿ) entered disabled state [ 302.302926][T14105] xt_l2tp: invalid flags combination: 8 [ 302.333791][T14103] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.680376][T14103] lo speed is unknown, defaulting to 1000 [ 302.843631][T14122] __nla_validate_parse: 3 callbacks suppressed [ 302.843648][T14122] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2108'. [ 303.002253][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 303.034323][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 303.060806][ T36] net_ratelimit: 19 callbacks suppressed [ 303.060823][ T36] bond4: (slave bridge7): failed to get link speed/duplex [ 303.197275][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 303.354642][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 303.494671][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 303.636136][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 303.744719][ T36] bond4: (slave bridge7): failed to get link speed/duplex [ 303.865190][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 303.995586][ T36] bond4: (slave bridge7): failed to get link speed/duplex [ 304.114724][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 304.254679][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 304.415042][T14149] syzkaller1: entered promiscuous mode [ 304.420562][T14149] syzkaller1: entered allmulticast mode [ 304.889043][T14167] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.372203][T14174] FAULT_INJECTION: forcing a failure. [ 305.372203][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.414678][T14174] CPU: 1 UID: 0 PID: 14174 Comm: syz.0.2123 Not tainted syzkaller #0 PREEMPT(full) [ 305.414718][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.414736][T14174] Call Trace: [ 305.414743][T14174] [ 305.414753][T14174] dump_stack_lvl+0xe8/0x150 [ 305.414782][T14174] should_fail_ex+0x414/0x560 [ 305.414817][T14174] _copy_from_user+0x2d/0xb0 [ 305.414841][T14174] __sys_bpf+0x1e3/0x860 [ 305.414882][T14174] ? __pfx___sys_bpf+0x10/0x10 [ 305.414922][T14174] ? ksys_write+0x22a/0x250 [ 305.414942][T14174] ? __pfx_ksys_write+0x10/0x10 [ 305.414967][T14174] __x64_sys_bpf+0x7c/0x90 [ 305.414992][T14174] do_syscall_64+0xec/0xf80 [ 305.415012][T14174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.415030][T14174] ? trace_irq_disable+0x37/0x100 [ 305.415054][T14174] ? clear_bhb_loop+0x60/0xb0 [ 305.415077][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.415096][T14174] RIP: 0033:0x7f0cd158f749 [ 305.415112][T14174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.415128][T14174] RSP: 002b:00007f0cd24fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.415148][T14174] RAX: ffffffffffffffda RBX: 00007f0cd17e5fa0 RCX: 00007f0cd158f749 [ 305.415162][T14174] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 305.415174][T14174] RBP: 00007f0cd24fb090 R08: 0000000000000000 R09: 0000000000000000 [ 305.415186][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.415197][T14174] R13: 00007f0cd17e6038 R14: 00007f0cd17e5fa0 R15: 00007ffdb5d6ffd8 [ 305.415228][T14174] [ 305.537079][T14167] lo speed is unknown, defaulting to 1000 [ 306.546897][ T30] audit: type=1800 audit(1767581181.974:6): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2130" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=2261 res=0 errno=0 [ 308.034151][T14222] FAULT_INJECTION: forcing a failure. [ 308.034151][T14222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.083057][T14222] CPU: 0 UID: 0 PID: 14222 Comm: syz.2.2136 Not tainted syzkaller #0 PREEMPT(full) [ 308.083090][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.083104][T14222] Call Trace: [ 308.083113][T14222] [ 308.083123][T14222] dump_stack_lvl+0xe8/0x150 [ 308.083156][T14222] should_fail_ex+0x414/0x560 [ 308.083197][T14222] copy_fpstate_to_sigframe+0xa70/0xcc0 [ 308.083229][T14222] ? get_signal+0x55e/0x1340 [ 308.083252][T14222] ? copy_fpstate_to_sigframe+0x181/0xcc0 [ 308.083291][T14222] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 308.083348][T14222] ? fpu__alloc_mathframe+0xad/0x130 [ 308.083384][T14222] get_sigframe+0x58d/0x7d0 [ 308.083421][T14222] ? __pfx_get_sigframe+0x10/0x10 [ 308.083449][T14222] ? kmem_cache_free+0x197/0x620 [ 308.083469][T14222] ? __dequeue_signal+0x487/0x5b0 [ 308.083510][T14222] x64_setup_rt_frame+0x15b/0xd40 [ 308.083548][T14222] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.083581][T14222] ? lockdep_hardirqs_on+0x7b/0x110 [ 308.083604][T14222] ? _raw_spin_unlock_irq+0x2e/0x50 [ 308.083633][T14222] ? get_signal+0x1150/0x1340 [ 308.083661][T14222] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 308.083719][T14222] arch_do_signal_or_restart+0x3d1/0x7a0 [ 308.083750][T14222] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 308.083787][T14222] ? ksys_write+0x22a/0x250 [ 308.083816][T14222] exit_to_user_mode_loop+0x87/0x4e0 [ 308.083838][T14222] ? rcu_is_watching+0x15/0xb0 [ 308.083865][T14222] do_syscall_64+0x2b7/0xf80 [ 308.083885][T14222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.083905][T14222] ? trace_irq_disable+0x37/0x100 [ 308.083931][T14222] ? clear_bhb_loop+0x60/0xb0 [ 308.083955][T14222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.083974][T14222] RIP: 0033:0x7f7a6bf8f749 [ 308.083991][T14222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.084008][T14222] RSP: 002b:00007f7a6cf0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.084029][T14222] RAX: ffffffffffffffea RBX: 00007f7a6c1e5fa0 RCX: 00007f7a6bf8f749 [ 308.084044][T14222] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 308.084057][T14222] RBP: 00007f7a6cf0e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.084070][T14222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.084082][T14222] R13: 00007f7a6c1e6038 R14: 00007f7a6c1e5fa0 R15: 00007ffe9dee39f8 [ 308.084114][T14222] [ 309.197366][T14229] xt_hashlimit: invalid interval [ 309.825386][T14234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2138'. [ 309.841633][T14234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2138'. [ 309.922245][T14229] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 309.935108][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 309.965116][T12545] net_ratelimit: 15 callbacks suppressed [ 309.965136][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 310.044987][T14209] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.105538][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 310.161189][T14249] netlink: 153320 bytes leftover after parsing attributes in process `syz.0.2143'. [ 310.214748][T12548] bond4: (slave bridge7): failed to get link speed/duplex [ 310.253969][T14253] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.2144'. [ 310.335704][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 310.364757][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 310.381430][T14257] geneve1: left promiscuous mode [ 310.397431][T14251] netlink: set zone limit has 4 unknown bytes [ 310.408765][T14257] geneve2: left promiscuous mode [ 310.432052][T14257] bond1: left promiscuous mode [ 310.459530][T14251] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 310.477315][T14257] sit1: left allmulticast mode [ 310.491203][T14257] gretap1: left promiscuous mode [ 310.506319][T14257] sit2: left allmulticast mode [ 310.549083][T14242] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.549111][T14209] lo speed is unknown, defaulting to 1000 [ 310.561670][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 310.795381][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 310.856136][ T2965] bond4: (slave bridge7): failed to get link speed/duplex [ 310.975753][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 310.986318][T14242] lo speed is unknown, defaulting to 1000 [ 310.989136][T14275] netlink: 'syz.4.2148': attribute type 1 has an invalid length. [ 311.000329][T14275] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2148'. [ 311.002651][T14270] siw: device registration error -23 [ 311.184690][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 311.342464][T14288] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.521323][T14288] lo speed is unknown, defaulting to 1000 [ 311.760457][T14301] FAULT_INJECTION: forcing a failure. [ 311.760457][T14301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.774078][T14301] CPU: 1 UID: 0 PID: 14301 Comm: syz.0.2153 Not tainted syzkaller #0 PREEMPT(full) [ 311.774102][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.774114][T14301] Call Trace: [ 311.774122][T14301] [ 311.774130][T14301] dump_stack_lvl+0xe8/0x150 [ 311.774158][T14301] should_fail_ex+0x414/0x560 [ 311.774187][T14301] _copy_from_user+0x2d/0xb0 [ 311.774207][T14301] restore_altstack+0x9d/0x4b0 [ 311.774229][T14301] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.774252][T14301] ? __pfx_restore_altstack+0x10/0x10 [ 311.774277][T14301] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.774304][T14301] __ia32_sys_rt_sigreturn+0x281/0x860 [ 311.774334][T14301] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 311.774356][T14301] ? _raw_spin_unlock_irq+0x2e/0x50 [ 311.774377][T14301] ? signal_setup_done+0x2cf/0x3b0 [ 311.774400][T14301] ? arch_do_signal_or_restart+0x465/0x7a0 [ 311.774428][T14301] ? __task_pid_nr_ns+0x28/0x490 [ 311.774458][T14301] ? __task_pid_nr_ns+0x28/0x490 [ 311.774490][T14301] do_syscall_64+0xec/0xf80 [ 311.774508][T14301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.774525][T14301] ? trace_irq_disable+0x37/0x100 [ 311.774553][T14301] ? clear_bhb_loop+0x60/0xb0 [ 311.774575][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.774593][T14301] RIP: 0033:0x7f0cd152b829 [ 311.774609][T14301] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 311.774624][T14301] RSP: 002b:00007f0cd24faa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 311.774644][T14301] RAX: ffffffffffffffda RBX: 00007f0cd17e5fa0 RCX: 00007f0cd152b829 [ 311.774666][T14301] RDX: 00007f0cd24faa80 RSI: 00007f0cd24fabb0 RDI: 0000000000000021 [ 311.774678][T14301] RBP: 00007f0cd24fb090 R08: 0000000000000000 R09: 0000000000000000 [ 311.774690][T14301] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 311.774700][T14301] R13: 00007f0cd17e6038 R14: 00007f0cd17e5fa0 R15: 00007ffdb5d6ffd8 [ 311.774730][T14301] [ 312.099179][T14309] veth1_to_bond: entered allmulticast mode [ 312.106120][T14311] veth1_to_bond: entered promiscuous mode [ 312.112500][T14309] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 312.122975][T14309] x_tables: duplicate underflow at hook 3 [ 312.129771][T14308] veth1_to_bond: left promiscuous mode [ 312.135677][T14308] veth1_to_bond: left allmulticast mode [ 312.435179][T14330] pim6reg99999999: entered allmulticast mode [ 312.617338][T14339] FAULT_INJECTION: forcing a failure. [ 312.617338][T14339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.631359][T14339] CPU: 0 UID: 0 PID: 14339 Comm: syz.3.2166 Not tainted syzkaller #0 PREEMPT(full) [ 312.631384][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.631396][T14339] Call Trace: [ 312.631403][T14339] [ 312.631411][T14339] dump_stack_lvl+0xe8/0x150 [ 312.631440][T14339] should_fail_ex+0x414/0x560 [ 312.631473][T14339] _copy_from_user+0x2d/0xb0 [ 312.631497][T14339] __ia32_sys_rt_sigreturn+0x314/0x860 [ 312.631534][T14339] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 312.631561][T14339] ? _raw_spin_unlock_irq+0x2e/0x50 [ 312.631622][T14339] ? __task_pid_nr_ns+0x28/0x490 [ 312.631657][T14339] do_syscall_64+0xec/0xf80 [ 312.631676][T14339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.631694][T14339] ? trace_irq_disable+0x37/0x100 [ 312.631719][T14339] ? clear_bhb_loop+0x60/0xb0 [ 312.631741][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.631758][T14339] RIP: 0033:0x7f80cab2b829 [ 312.631774][T14339] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 312.631791][T14339] RSP: 002b:00007f80cb9e8a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 312.631812][T14339] RAX: ffffffffffffffda RBX: 00007f80cade5fa0 RCX: 00007f80cab2b829 [ 312.631826][T14339] RDX: 00007f80cb9e8a80 RSI: 00007f80cb9e8bb0 RDI: 0000000000000021 [ 312.631839][T14339] RBP: 00007f80cb9e9090 R08: 0000000000000000 R09: 0000000000000000 [ 312.631850][T14339] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 312.631861][T14339] R13: 00007f80cade6038 R14: 00007f80cade5fa0 R15: 00007ffef9345bc8 [ 312.631890][T14339] [ 313.069750][T14358] netlink: 'syz.3.2171': attribute type 11 has an invalid length. [ 313.184839][T14361] sctp: [Deprecated]: syz.3.2172 (pid 14361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.184839][T14361] Use struct sctp_sack_info instead [ 313.296967][T14368] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.438759][T14368] lo speed is unknown, defaulting to 1000 [ 313.606785][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2177'. [ 313.951322][T14414] syzkaller0: entered promiscuous mode [ 313.957846][T14414] syzkaller0: entered allmulticast mode [ 313.977731][T14414] tipc: Enabled bearer , priority 0 [ 313.987146][T14413] tipc: Resetting bearer [ 314.021228][T14413] tipc: Disabling bearer [ 314.068076][T14418] netlink: 'syz.3.2186': attribute type 39 has an invalid length. [ 314.191354][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 314.295319][T14427] vlan0: entered promiscuous mode [ 314.300683][T14427] bond0: entered promiscuous mode [ 314.519717][T14449] netlink: 'syz.0.2194': attribute type 9 has an invalid length. [ 314.580107][T14452] tipc: Enabled bearer , priority 0 [ 314.589713][T14452] syzkaller0: entered promiscuous mode [ 314.596219][T14452] syzkaller0: entered allmulticast mode [ 314.630620][T14452] tipc: Resetting bearer [ 314.637396][T14453] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.650479][T14451] tipc: Resetting bearer [ 314.687328][T14451] tipc: Disabling bearer [ 314.833476][T14453] lo speed is unknown, defaulting to 1000 [ 315.044674][T12542] net_ratelimit: 30 callbacks suppressed [ 315.044695][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 315.164702][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 315.274831][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 315.384752][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 315.494784][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 315.604740][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 315.714761][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 315.824726][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 315.934826][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 316.044738][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 320.114676][T12542] net_ratelimit: 37 callbacks suppressed [ 320.114696][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 320.234777][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 320.344729][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 320.464753][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 320.574702][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 320.684832][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 320.794769][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 320.904863][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 321.014719][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 321.124814][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 325.214696][T12549] net_ratelimit: 36 callbacks suppressed [ 325.214720][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 325.334806][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 325.444737][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 325.554983][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 325.664802][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 325.774797][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 325.884837][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 325.994824][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 326.104736][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 326.214790][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 330.304788][T12542] net_ratelimit: 36 callbacks suppressed [ 330.304810][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 330.424770][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 330.534739][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 330.645271][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 330.754835][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 330.865273][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 330.974819][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 331.084939][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 331.195088][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 331.304985][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 332.434765][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.324751][ T2082] net_ratelimit: 35 callbacks suppressed [ 335.324781][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 335.444788][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 335.554811][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 335.664725][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 335.774681][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 335.884676][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 335.994773][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 336.104681][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 336.214695][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 336.324710][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 340.404684][ T2082] net_ratelimit: 36 callbacks suppressed [ 340.404710][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 340.534836][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 340.644827][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 340.755666][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 340.864742][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 340.974798][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 341.084804][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 341.194782][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 341.315017][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 341.424788][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 345.434823][T12549] net_ratelimit: 35 callbacks suppressed [ 345.434841][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 345.554850][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 345.664692][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 345.774670][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 345.894824][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 346.004720][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 346.114849][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 346.224801][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 346.334836][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 346.444761][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 350.464866][T12542] net_ratelimit: 35 callbacks suppressed [ 350.464890][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 350.584770][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 350.694716][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 350.814812][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 350.924743][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 351.034848][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 351.155276][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 351.264726][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 351.374829][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 351.494705][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 355.524823][T12542] net_ratelimit: 35 callbacks suppressed [ 355.524849][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 355.644811][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 355.754800][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 355.864739][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 355.974796][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 356.084764][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 356.194898][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 356.304734][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 356.414846][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 356.524809][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 360.634835][T12542] net_ratelimit: 36 callbacks suppressed [ 360.634864][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 360.754774][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 360.864712][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 360.974728][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 361.084780][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 361.194794][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 361.304690][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 361.414748][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 361.524842][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 361.635373][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 365.644717][ T8476] net_ratelimit: 35 callbacks suppressed [ 365.644741][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 365.764815][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 365.874763][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 365.984743][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 366.094655][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 366.204708][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 366.314819][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 366.434913][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 366.544795][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 366.665371][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 370.714789][ T2082] net_ratelimit: 35 callbacks suppressed [ 370.714807][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 370.834914][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 370.944701][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 371.064730][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 371.174704][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 371.284698][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 371.394770][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 371.504727][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 371.614781][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 371.724747][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 375.824700][ T8476] net_ratelimit: 36 callbacks suppressed [ 375.824726][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 375.944754][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 376.064709][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 376.174693][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 376.284741][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 376.394798][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 376.504838][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 376.614743][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 376.724729][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 376.834734][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 380.864734][ T2082] net_ratelimit: 36 callbacks suppressed [ 380.864770][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 380.984909][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 381.094824][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 381.204756][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 381.314730][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 381.424737][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 381.534674][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 381.644888][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 381.754749][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 381.874747][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 385.924804][ T2082] net_ratelimit: 35 callbacks suppressed [ 385.924823][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 386.044830][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 386.165014][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 386.274813][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 386.384679][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 386.494848][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 386.604856][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 386.714783][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 386.824819][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 386.934755][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 390.944778][T12550] net_ratelimit: 35 callbacks suppressed [ 390.944806][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 391.064666][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 391.184701][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 391.294668][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 391.414749][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 391.524686][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 391.634856][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 391.744706][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 391.854803][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 391.964742][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 395.974842][T12549] net_ratelimit: 35 callbacks suppressed [ 395.974910][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 396.094840][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 396.204766][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 396.314711][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 396.424659][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 396.534805][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 396.644727][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 396.754805][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 396.864674][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 396.974804][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 401.074891][ T8476] net_ratelimit: 36 callbacks suppressed [ 401.074911][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 401.194768][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 401.304760][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 401.424660][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 401.534771][T12545] bond4: (slave bridge7): failed to get link speed/duplex [ 401.644782][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 401.754693][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 401.864667][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 401.974758][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 402.084753][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 406.094744][ T8476] net_ratelimit: 35 callbacks suppressed [ 406.094768][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 406.224747][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 406.344721][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 406.454792][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 406.564737][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 406.674879][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 406.784742][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 406.894897][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 407.004743][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 407.114881][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 411.154815][T12549] net_ratelimit: 35 callbacks suppressed [ 411.154837][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 411.274646][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 411.384647][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 411.494706][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 411.604803][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 411.714669][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 411.824636][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 411.934626][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 412.044730][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 412.154709][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 416.244813][T12549] net_ratelimit: 36 callbacks suppressed [ 416.244831][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 416.364968][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 416.474667][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 416.584739][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 416.704840][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 416.814750][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 416.924746][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 417.034883][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 417.144721][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 417.254789][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 421.284723][T12550] net_ratelimit: 35 callbacks suppressed [ 421.284743][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 421.404730][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 421.514700][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 421.624674][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 421.734683][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 421.844781][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 421.954939][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 422.064808][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 422.174677][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 422.284764][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 426.314859][ T8476] net_ratelimit: 35 callbacks suppressed [ 426.314879][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 426.434738][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 426.554683][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 426.664643][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 426.774661][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 426.884779][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 426.994731][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 427.104645][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 427.214665][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 427.324691][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 431.384695][T12549] net_ratelimit: 35 callbacks suppressed [ 431.384721][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 431.504762][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 431.624655][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 431.734665][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 431.854832][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 431.964709][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 432.074873][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 432.184712][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 432.294648][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 432.404770][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 436.404778][ T2082] net_ratelimit: 35 callbacks suppressed [ 436.404800][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 436.524740][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 436.634853][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 436.744709][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 436.864935][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 436.974813][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 437.084836][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 437.194883][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 437.314919][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 437.434720][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 441.464719][T12542] net_ratelimit: 36 callbacks suppressed [ 441.464743][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 441.594710][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 441.714696][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 441.824719][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 441.934752][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 442.044721][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 442.154654][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 442.264784][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 442.374849][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 442.484807][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 446.514836][T12550] net_ratelimit: 35 callbacks suppressed [ 446.514889][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 446.644680][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 446.754699][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 446.864647][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 446.974697][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 447.084674][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 447.194672][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 447.304689][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 447.414730][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 447.524627][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 450.194840][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 451.554799][T12542] net_ratelimit: 35 callbacks suppressed [ 451.554822][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 451.674633][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 451.794846][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 451.904636][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 452.014650][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 452.124784][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 452.234783][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 452.344667][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 452.464690][ T8476] bond4: (slave bridge7): failed to get link speed/duplex [ 452.584767][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 456.594963][ T2082] net_ratelimit: 35 callbacks suppressed [ 456.594985][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 456.714836][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 456.824800][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 456.934605][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 457.044761][ T2082] bond4: (slave bridge7): failed to get link speed/duplex [ 457.154825][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 457.264709][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 457.374719][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 457.484709][T12553] bond4: (slave bridge7): failed to get link speed/duplex [ 457.594844][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 461.604837][T12550] net_ratelimit: 35 callbacks suppressed [ 461.604860][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 461.724941][T12542] bond4: (slave bridge7): failed to get link speed/duplex [ 461.834802][ T1012] bond4: (slave bridge7): failed to get link speed/duplex [ 461.944653][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 462.054752][ T1012] bond4: (slave bridge7): failed to get link speed/duplex [ 462.164697][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 462.274817][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 462.384691][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 462.494764][T12549] bond4: (slave bridge7): failed to get link speed/duplex [ 462.604820][T12550] bond4: (slave bridge7): failed to get link speed/duplex [ 464.915042][ T31] INFO: task kworker/u8:8:2965 blocked for more than 143 seconds. [ 464.922899][ T31] Not tainted syzkaller #0 [ 464.928014][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.936928][ T31] task:kworker/u8:8 state:D stack:23064 pid:2965 tgid:2965 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 464.949111][ T31] Workqueue: netns cleanup_net [ 464.953924][ T31] Call Trace: [ 464.957441][ T31] [ 464.960436][ T31] __schedule+0x149b/0x4fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 464.965251][ T31] ? __pfx___schedule+0x10/0x10 [ 464.970704][ T31] ? schedule+0x91/0x360 [ 464.975158][ T31] schedule+0x165/0x360 [ 464.979344][ T31] schedule_preempt_disabled+0x13/0x30 [ 464.984918][ T31] __mutex_lock+0x7e6/0x1350 [ 464.989548][ T31] ? __mutex_lock+0x5bb/0x1350 [ 464.994343][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 464.999948][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 465.005102][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 465.010786][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.017019][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 465.022268][ T31] ? _raw_spin_unlock+0x28/0x50 [ 465.027329][ T31] rdma_dev_change_netns+0x39/0x300 [ 465.032577][ T31] rdma_dev_exit_net+0x203/0x340 [ 465.037921][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 465.043257][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 465.048982][ T31] ? rtnl_is_locked+0x15/0x20 [ 465.053730][ T31] ops_undo_list+0x49a/0x990 [ 465.058620][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 465.063764][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 465.069220][ T31] cleanup_net+0x4d8/0x7a0 [ 465.073666][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 465.079611][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 465.085737][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 465.091485][ T31] process_scheduled_works+0xad1/0x1770 [ 465.097615][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.103643][ T31] ? do_raw_spin_lock+0x121/0x290 [ 465.108945][ T31] worker_thread+0x8a0/0xda0 [ 465.113590][ T31] kthread+0x711/0x8a0 [ 465.118010][ T31] ? __pfx_worker_thread+0x10/0x10 [ 465.123152][ T31] ? __pfx_kthread+0x10/0x10 [ 465.128002][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.133239][ T31] ? __pfx_kthread+0x10/0x10 [ 465.138168][ T31] ret_from_fork+0x510/0xa50 [ 465.142797][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 465.148148][ T31] ? __switch_to+0xc9e/0x1480 [ 465.152868][ T31] ? __pfx_kthread+0x10/0x10 [ 465.157828][ T31] ret_from_fork_asm+0x1a/0x30 [ 465.162662][ T31] [ 465.166407][ T31] INFO: task syz.1.2132:14209 blocked for more than 143 seconds. [ 465.174154][ T31] Not tainted syzkaller #0 [ 465.179438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.188460][ T31] task:syz.1.2132 state:D stack:25464 pid:14209 tgid:14208 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 465.200693][ T31] Call Trace: [ 465.203996][ T31] [ 465.207395][ T31] __schedule+0x149b/0x4fd0 [ 465.211989][ T31] ? __pfx___schedule+0x10/0x10 [ 465.243257][ T31] ? schedule+0x91/0x360 [ 465.249203][ T31] schedule+0x165/0x360 [ 465.253406][ T31] schedule_preempt_disabled+0x13/0x30 [ 465.273508][ T31] __mutex_lock+0x7e6/0x1350 [ 465.278453][ T31] ? __mutex_lock+0x5bb/0x1350 [ 465.283255][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 465.288835][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 465.294889][ T31] ? kobject_put+0x26d/0x570 [ 465.299538][ T31] ? kfree+0x1c0/0x660 [ 465.303653][ T31] rdma_dev_change_netns+0x39/0x300 [ 465.324616][ T31] rdma_dev_exit_net+0x203/0x340 [ 465.329610][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 465.335913][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 465.341414][ T31] ? rtnl_is_locked+0x15/0x20 [ 465.346206][ T31] ops_undo_list+0x49a/0x990 [ 465.350828][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 465.356142][ T31] ? ops_init+0x469/0x5c0 [ 465.360497][ T31] setup_net+0x2e8/0x330 [ 465.364854][ T31] ? __pfx_setup_net+0x10/0x10 [ 465.369635][ T31] ? preinit_net+0x47d/0x780 [ 465.374220][ T31] copy_net_ns+0x3e3/0x570 [ 465.378963][ T31] create_new_namespaces+0x3e7/0x6a0 [ 465.384276][ T31] ? security_capable+0x7e/0x2e0 [ 465.389315][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 465.396183][ T31] ksys_unshare+0x4c8/0x8c0 [ 465.400733][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 465.406115][ T31] __x64_sys_unshare+0x38/0x50 [ 465.410907][ T31] do_syscall_64+0xec/0xf80 [ 465.415612][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.421699][ T31] ? trace_irq_disable+0x37/0x100 [ 465.426856][ T31] ? clear_bhb_loop+0x60/0xb0 [ 465.431564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.437697][ T31] RIP: 0033:0x7f507b18f749 [ 465.442132][ T31] RSP: 002b:00007f507bf7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 465.450703][ T31] RAX: ffffffffffffffda RBX: 00007f507b3e5fa0 RCX: 00007f507b18f749 [ 465.458838][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 465.466952][ T31] RBP: 00007f507b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.475133][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.483141][ T31] R13: 00007f507b3e6038 R14: 00007f507b3e5fa0 R15: 00007ffdffe31a48 [ 465.491274][ T31] [ 465.494404][ T31] INFO: task syz.2.2141:14242 blocked for more than 143 seconds. [ 465.502347][ T31] Not tainted syzkaller #0 [ 465.507411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.516364][ T31] task:syz.2.2141 state:D stack:24904 pid:14242 tgid:14238 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 465.528414][ T31] Call Trace: [ 465.531716][ T31] [ 465.534827][ T31] __schedule+0x149b/0x4fd0 [ 465.539387][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 465.544940][ T31] ? __pfx___schedule+0x10/0x10 [ 465.549837][ T31] ? schedule+0x91/0x360 [ 465.554103][ T31] schedule+0x165/0x360 [ 465.559176][ T31] schedule_preempt_disabled+0x13/0x30 [ 465.564761][ T31] __mutex_lock+0x7e6/0x1350 [ 465.569398][ T31] ? __mutex_lock+0x5bb/0x1350 [ 465.574197][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 465.579836][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 465.585153][ T31] ? kobject_put+0x26d/0x570 [ 465.589777][ T31] ? kfree+0x1c0/0x660 [ 465.593884][ T31] rdma_dev_change_netns+0x39/0x300 [ 465.599557][ T31] rdma_dev_exit_net+0x203/0x340 [ 465.604730][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 465.610055][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 465.615916][ T31] ? rtnl_is_locked+0x15/0x20 [ 465.620631][ T31] ops_undo_list+0x49a/0x990 [ 465.625599][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 465.630745][ T31] ? ops_init+0x469/0x5c0 [ 465.635470][ T31] setup_net+0x2e8/0x330 [ 465.639749][ T31] ? __pfx_setup_net+0x10/0x10 [ 465.644772][ T31] ? preinit_net+0x47d/0x780 [ 465.649412][ T31] copy_net_ns+0x3e3/0x570 [ 465.653851][ T31] create_new_namespaces+0x3e7/0x6a0 [ 465.660442][ T31] ? security_capable+0x7e/0x2e0 [ 465.665639][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 465.671398][ T31] ksys_unshare+0x4c8/0x8c0 [ 465.676323][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 465.681392][ T31] ? trace_sys_enter+0x5e/0xf0 [ 465.686423][ T31] ? rcu_is_watching+0x15/0xb0 [ 465.691219][ T31] ? trace_sys_enter+0x25/0xf0 [ 465.696333][ T31] __x64_sys_unshare+0x38/0x50 [ 465.701137][ T31] do_syscall_64+0xec/0xf80 [ 465.706037][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.712131][ T31] ? trace_irq_disable+0x37/0x100 [ 465.717641][ T31] ? clear_bhb_loop+0x60/0xb0 [ 465.722366][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.728602][ T31] RIP: 0033:0x7f7a6bf8f749 [ 465.733040][ T31] RSP: 002b:00007f7a6ceed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 465.741957][ T31] RAX: ffffffffffffffda RBX: 00007f7a6c1e6090 RCX: 00007f7a6bf8f749 [ 465.750398][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 465.758733][ T31] RBP: 00007f7a6c013f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.766996][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.775364][ T31] R13: 00007f7a6c1e6128 R14: 00007f7a6c1e6090 R15: 00007ffe9dee39f8 [ 465.783392][ T31] [ 465.786803][ T31] INFO: task syz.4.2148:14273 blocked for more than 144 seconds. [ 465.795050][ T31] Not tainted syzkaller #0 [ 465.800009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.808928][ T31] task:syz.4.2148 state:D stack:23328 pid:14273 tgid:14268 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 465.821218][ T31] Call Trace: [ 465.824739][ T31] [ 465.827712][ T31] __schedule+0x149b/0x4fd0 [ 465.832264][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 465.837831][ T31] ? stack_trace_save+0x9c/0xe0 [ 465.842766][ T31] ? __pfx___schedule+0x10/0x10 [ 465.848183][ T31] ? schedule+0x91/0x360 [ 465.852467][ T31] schedule+0x165/0x360 [ 465.857525][ T31] schedule_timeout+0x9a/0x270 [ 465.862340][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 465.868108][ T31] ? do_raw_spin_lock+0x121/0x290 [ 465.873179][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.894638][ T31] ? wait_for_completion+0x267/0x5d0 [ 465.899980][ T31] wait_for_completion+0x2bf/0x5d0 [ 465.924569][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 465.930265][ T31] ? disable_device+0x137/0x320 [ 465.944535][ T31] ? remove_client_context+0xc0/0x1e0 [ 465.949968][ T31] disable_device+0x1c6/0x320 [ 465.974769][ T31] ? __pfx_disable_device+0x10/0x10 [ 465.980052][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 465.994553][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 466.000506][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 466.014665][ T31] nldev_dellink+0x2d1/0x320 [ 466.019306][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 466.035181][ T31] ? apparmor_capable+0x137/0x1a0 [ 466.040274][ T31] ? bpf_lsm_capable+0x9/0x20 [ 466.048919][ T31] ? security_capable+0x7e/0x2e0 [ 466.053898][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 466.059096][ T31] rdma_nl_rcv+0x6ae/0x980 [ 466.063693][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 466.068880][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.074242][ T31] netlink_unicast+0x82f/0x9e0 [ 466.079073][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 466.084522][ T31] ? __alloc_skb+0x198/0x3a0 [ 466.089141][ T31] ? netlink_sendmsg+0x642/0xb30 [ 466.094099][ T31] ? skb_put+0x11b/0x210 [ 466.098818][ T31] netlink_sendmsg+0x805/0xb30 [ 466.103690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.109066][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 466.114033][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.119599][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.125041][ T31] __sock_sendmsg+0x21c/0x270 [ 466.129815][ T31] ____sys_sendmsg+0x505/0x820 [ 466.134694][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.140137][ T31] ? import_iovec+0x74/0xa0 [ 466.144721][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 466.149523][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.154853][ T31] ? futex_wake+0x4b2/0x560 [ 466.159411][ T31] ? __fget_files+0x2a/0x420 [ 466.164030][ T31] ? __fget_files+0x3a0/0x420 [ 466.168978][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 466.173951][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.179640][ T31] ? rcu_is_watching+0x15/0xb0 [ 466.184450][ T31] do_syscall_64+0xec/0xf80 [ 466.189120][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.196619][ T31] ? trace_irq_disable+0x37/0x100 [ 466.201706][ T31] ? clear_bhb_loop+0x60/0xb0 [ 466.211432][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.218215][ T31] RIP: 0033:0x7f7620f8f749 [ 466.222678][ T31] RSP: 002b:00007f7621e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.231185][ T31] RAX: ffffffffffffffda RBX: 00007f76211e6090 RCX: 00007f7620f8f749 [ 466.239253][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 466.247557][ T31] RBP: 00007f7621013f91 R08: 0000000000000000 R09: 0000000000000000 [ 466.255663][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.263814][ T31] R13: 00007f76211e6128 R14: 00007f76211e6090 R15: 00007ffe2a7592e8 [ 466.275330][ T31] [ 466.278917][ T31] [ 466.278917][ T31] Showing all locks held in the system: [ 466.292539][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 466.297943][ T31] 1 lock held by khungtaskd/31: [ 466.302819][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 466.312738][ T31] 4 locks held by kworker/u8:8/2965: [ 466.318078][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 466.329134][ T31] #1: ffffc9000bb67bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 466.339739][ T31] #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 466.349096][ T31] #3: ffff888028b9c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 466.360452][ T31] 2 locks held by getty/5584: [ 466.365201][ T31] #0: ffff88814dca60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 466.375049][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 466.385216][ T31] 1 lock held by syz-executor/5824: [ 466.390437][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 466.399737][ T31] 3 locks held by syz-executor/5832: [ 466.405124][ T31] #0: ffff88806001cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 466.415203][ T31] #1: ffff88806001c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 466.425092][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 466.436452][ T31] 3 locks held by kworker/1:9/9063: [ 466.441657][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 466.453190][ T31] #1: ffffc9001ba17bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 466.463628][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 466.474613][ T31] 2 locks held by syz.1.2132/14209: [ 466.479894][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 466.489391][ T31] #1: ffff888028b9c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 466.500808][ T31] 2 locks held by syz.2.2141/14242: [ 466.506431][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 466.516342][ T31] #1: ffff888028b9c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 466.527745][ T31] 2 locks held by syz.4.2148/14273: [ 466.532957][ T31] #0: ffffffff99c82df8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 466.543358][ T31] #1: ffff888028b9c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 466.556442][ T31] [ 466.558804][ T31] ============================================= [ 466.558804][ T31] [ 466.567892][ T31] NMI backtrace for cpu 1 [ 466.567924][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 466.567943][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.567954][ T31] Call Trace: [ 466.567961][ T31] [ 466.567969][ T31] dump_stack_lvl+0xe8/0x150 [ 466.567997][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 466.568023][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 466.568055][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 466.568084][ T31] sys_info+0x135/0x170 [ 466.568104][ T31] watchdog+0xf95/0xfe0 [ 466.568135][ T31] ? watchdog+0x20a/0xfe0 [ 466.568167][ T31] kthread+0x711/0x8a0 [ 466.568194][ T31] ? __pfx_watchdog+0x10/0x10 [ 466.568217][ T31] ? __pfx_kthread+0x10/0x10 [ 466.568242][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.568266][ T31] ? __pfx_kthread+0x10/0x10 [ 466.568289][ T31] ret_from_fork+0x510/0xa50 [ 466.568307][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.568321][ T31] ? __switch_to+0xc9e/0x1480 [ 466.568348][ T31] ? __pfx_kthread+0x10/0x10 [ 466.568370][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.568407][ T31] [ 466.568414][ T31] Sending NMI from CPU 1 to CPUs 0: [ 466.688641][ C0] NMI backtrace for cpu 0 [ 466.688657][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 466.688674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.688684][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 466.688705][ C0] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 466.688718][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 466.688733][ C0] RAX: 00000000001d757b RBX: ffffffff819713ee RCX: 0000000080000001 [ 466.688744][ C0] RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0 [ 466.688755][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 466.688767][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270 [ 466.688779][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 466.688790][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 466.688803][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.688813][ C0] CR2: 000056286a0ee528 CR3: 0000000084e62000 CR4: 00000000003526f0 [ 466.688828][ C0] Call Trace: [ 466.688834][ C0] [ 466.688839][ C0] default_idle+0x13/0x20 [ 466.688858][ C0] default_idle_call+0x73/0xb0 [ 466.688877][ C0] do_idle+0x1be/0x4d0 [ 466.688894][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 466.688911][ C0] ? __pfx_do_idle+0x10/0x10 [ 466.688933][ C0] cpu_startup_entry+0x44/0x60 [ 466.688950][ C0] rest_init+0x2de/0x300 [ 466.688970][ C0] start_kernel+0x381/0x3d0 [ 466.688996][ C0] x86_64_start_reservations+0x24/0x30 [ 466.689016][ C0] x86_64_start_kernel+0x143/0x1c0 [ 466.689036][ C0] common_startup_64+0x13e/0x147 [ 466.689064][ C0] [ 466.869389][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 466.876263][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 466.885394][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.895477][ T31] Call Trace: [ 466.898752][ T31] [ 466.901679][ T31] vpanic+0x1e0/0x670 [ 466.905671][ T31] panic+0xb9/0xc0 [ 466.909412][ T31] ? __pfx_panic+0x10/0x10 [ 466.913840][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 466.919222][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 466.925402][ T31] watchdog+0xfdf/0xfe0 [ 466.929586][ T31] ? watchdog+0x20a/0xfe0 [ 466.933938][ T31] kthread+0x711/0x8a0 [ 466.938039][ T31] ? __pfx_watchdog+0x10/0x10 [ 466.942732][ T31] ? __pfx_kthread+0x10/0x10 [ 466.947345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.952569][ T31] ? __pfx_kthread+0x10/0x10 [ 466.957171][ T31] ret_from_fork+0x510/0xa50 [ 466.961778][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.966894][ T31] ? __switch_to+0xc9e/0x1480 [ 466.971602][ T31] ? __pfx_kthread+0x10/0x10 [ 466.976224][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.981016][ T31] [ 466.984644][ T31] Kernel Offset: disabled [ 466.988973][ T31] Rebooting in 86400 seconds..