last executing test programs: 23.933168616s ago: executing program 2 (id=7990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x5, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x82, 0x7, "0441b613a3"}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@remote}]}]}}, {{0x0, 0x0, r2, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680000000000000027dd", 0x0, 0x57b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) preadv(r1, &(0x7f0000000040), 0x0, 0xe, 0x80000000) 23.931696441s ago: executing program 2 (id=7991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x274, 0x15, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_OBJ_USERDATA={0xf6, 0x8, "ee822eb1b828fdfc97f930d8459025fca511ce6747be4dd1e5d671926623c76291e9bb40dd4ea8036a917f951eb79c1fce4bd47b61c434405cf0e59d0c616f56040b5461a4f0e15d5dc143fdcee3c5d18d02bdfdfe2b1d9bb0bbeced2ba0f56d5a7ce714d55d806a4cda68314427b0b4b4950b88aa8933813371ecacf3c41fb6b283414714ad2e2dda5be96afa19830fe19711785234b2d456b23508c34de0e8cb972c120dd30b9da14c1d59b6bf307ad049af111d8f21cc22032e065e44f57c7c77307c0005ea006f5541fd933d21205357b8454586eae2d37830618364c3b7209e0bb27eb18e02d14128fb636a881d67db"}, @NFTA_OBJ_USERDATA={0x104, 0x8, "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"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "2b1ec0c22fbd13335af53288f54886fa15746eaee75a"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x400c084) 23.929585888s ago: executing program 2 (id=7995): unshare(0x24020400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) close(r3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) 23.863792323s ago: executing program 2 (id=7997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffdf8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004200000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 23.728974229s ago: executing program 2 (id=7999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="2400000028ffffffffe5000000000002017c002c7fee9302db4012179762800000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003360000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) close(r1) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e618", 0x56}, {&(0x7f00000016c0)="071cd289a39a3f01ed2affd0895bd7609db5749c6eeb091e8dc49819bd1cc6dc180463d6c1f4001a76121387fddfcf97887edfbd82f8f0406b131f694209901e95ab186efe41ffd0d0dfa9e30e2c4afde5b05c05c71d5e50b318db7520ff9df567b9fb", 0x63}, {&(0x7f0000001840)="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", 0xe91}], 0x3}, 0xc008) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b0040000000000000030000edff00000008000a00010000000800010001"], 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200)=0x10001, 0x12) sendfile(r8, r7, 0x0, 0xf03a0005) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) 21.185580727s ago: executing program 2 (id=8005): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3df9", 0x2}], 0x1}}], 0x1, 0x4008000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000600)="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", 0x5ad, 0x5, 0x0, 0x0) recvfrom(r4, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020445, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="2800000000000000170100000200000010"], 0x28}], 0x1, 0x40800) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000300)=0x14) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a80)={0x418, 0x12, 0x4, 0x70bd2a, 0x25dfdbfc, {0xb, 0x7, 0xa8, 0x0, {0x4e22, 0x4e24, [0xc, 0x0, 0x0, 0x101], [0xf, 0x40, 0x5, 0xc6], r5, [0x2, 0x5]}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "acbb13dbe2639a605db8202f23eebdfa793fc710d7e1c35a086e67fb8db4fd049e482f33495bd5cc201b9cd98d6092736023a9492f98d651d1176f0eaf1168588b9599603f035dfdb766e784a6d3bac8bd5d6afa409f7583369ce4a8f8111b067fe1506acbcb61bc8bc921d4d275c4274dce930c9bc0321c6a7b1a2326f6c0bbe6a7df3c28b141600f5c44e0900d41fc9fc8d628a250408f2ed0"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2d607c0f6c0b7ff01f719bfe4f2a8c95995b3d5e6476a9da5b9c98b956baf0dea0974aa26ad07b8cce516cf30459daf2e1bb5e27ccc34d556a276465ff05c35da36b9fee2fe5787480066e09ce968c3ff7727285b93783e9da27276da2fe91c0842403935b53d6a9baf6a0fa3a330df4c84f17c39e415df39f94f076eddba9609a0178090a4a1718caac497ddd920c57b40d0a1614f6c9d7"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "09998835d7006446c62db7ce0ca58f41809b12338fce617e799e836a5ad44242643be2c57734ad812305c8e4c068573ddae276ed4410c61b72c494c3a65fc1c0a54c22be47b8c048a91c2cce510a0adf11a8f80bb6cce63456c3d67b716fce031c85d1fc72db3bfbbf610bb9bcc56b67275ea3afeecdb7b400745d337aa862bea9cbe457c3ab46c9ebbf5cff198bd45dcf33d057e2c035a550b5df1c7c3951e011a689c05256a459b28a2e3267c843df52d04461311f29edb00e45ad26076c35a59524fb7ee0ac"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "f8e2ba2ab328063fc4dc228ba5f38f0fdc2828e091b133d807679d79097795118b31079a9be8216a2e18e4b87834b5cf89eac22168934242a6efe6679d994a23f873afebca51c1b91d04c39c90425689e1846bdc2c56260e7131fbded657a49a7dc3ff3ddd7aa9d64f1571dc2b732fdf4d1c5442782aa620"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "319c33bf5334056fcb077751979a7b339bdc001b72389c3d926bf5d043320e29bd00174389ccd9e33bf7b27bb07ff5feef61b5d7866ea740f41aba9918708c3e7f084c1e26e5f69a78635e6b78e6553b76233f819519b6dbaf930a7276065f1124fc0c4792dcb16f5fe8f4a6e4e9e05bd79157e028777f30c0719d2ba9ddcf80e1ab7631f8cb3ff1625ae25655962b3f76faceb3d398cb4a72a9aa9558ae59f75f821435021bc24c0f5ba5cbb4f2e331dcfa1191f4643e07880f99139159397ea3bf9d20770119db06c7fbdd72d042c4c0b8c6f7056f6fee55551470da6d5787"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a47c6eeaacb38fef7d6a481a88596c60d7def2b3e0992c89a6d8bdadbddf28acf68534bd35843573749faf78aafbc9edbd3b47cb6bbe17c452493f406c429c0d4acfcd60cc7449e2b6788492425aa7c4ae9f5a6fa4339eb648d9bf57b8f3b168"}]}, 0x418}, 0x1, 0x0, 0x0, 0xc0440a4}, 0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19.661748093s ago: executing program 3 (id=8024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001a80)="ad56b6c5820fae9d71cdb7a9820638bc395f036ce16e1108", 0x3b) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) 19.39238723s ago: executing program 3 (id=8030): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3010000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1404, 0x8, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40041}, 0x20000051) setsockopt(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xd0256000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010024bd70e1f4dbdf25030000000c00018008001c00", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20001015}, 0x4000880) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x6}}}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) pread64(r11, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 19.103676282s ago: executing program 0 (id=8033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004890}, 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000540), 0xfe) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x4, 0x0, 0x2, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "15000000000006c3"}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40494) 18.538015732s ago: executing program 0 (id=8038): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100010010016d778549e2ca3b0000000001000000"], 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0xffffffffffffffbd) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2}, 0x142) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff58) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2095, 0x3, 0x9, 0x20000, 0x1, 0xa4a9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001880)={r7, &(0x7f0000001700)="e212980539e3c7f264396ccaa01cd05a52f905fe0916c682c2d1979e54788e4e716db8fae6d56aef761b4647f1cd263593cc2915b86e69890eb469d83a9cd4ffe6050a696d1c34f744072f24b7b88ffd8cd8161ecd5e38eb6ceab2d1212d54b2747f4a05461013af9f9dd75b5d84c5ea5f9925a040051f9ad32eb1b8796a4da097d6fc01adcdff4c04580d47679d1184d6f341a2ddabe2069857af7e9d1999ce8de1", &(0x7f00000017c0)=""/146}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4b67cab4cec1b7279ea00000", @ANYRES16=0x0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x24008080}, 0x844) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r9, 0x1, 0x70bd24}, 0x14}}, 0x0) 18.4805512s ago: executing program 3 (id=8040): r0 = socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000280)='/proc/net\x00\x00t4/c+\x0fG\xf9\xe1K\fX\a0\x04\x00\x00\x82D\x80\xa2EZ\xad}\\-\xd1\x96R\x91\xd7x\xb5\xfb\xc4N\xc7\xb3+\xb3qW\xa9\x83\x9b\x84\xbc\xe9\xc6$\x9b/\xda\x9d=P\xd1Xzk\xb5\x95\x18\xd7\xa8\xcc\x99v\x84hQ\xf1fZ\n\xb6\x02\xd5\xf1\xb4b\xa6\aM+\xc1\xe8\"\x0f\x89\xba\xb3\x06:a\xd335^x\xaf\x14\x82'}, 0x30) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async, rerun: 32) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x23c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001180)={0x2, 0x9, 0xfa, 0x6, 0x2, 0x0, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x24000800) (async, rerun: 64) ppoll(&(0x7f0000002f80)=[{r9, 0x8e}], 0x1, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) (async) r11 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r11, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) (async, rerun: 32) accept4$tipc(r11, 0x0, 0x0, 0x800) (rerun: 32) socket$kcm(0x10, 0x2, 0x0) 18.333905273s ago: executing program 3 (id=8042): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="95d0756c"]}, 0x18}}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) clock_gettime(0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socket$inet(0x2, 0x3, 0x6) bind$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) 18.184820433s ago: executing program 4 (id=8043): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="abf919061000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b0500000000002400128009000100697069700000000014000280050009008900000008000300ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0xc0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) ppoll(&(0x7f0000000500)=[{r7}], 0x2000014f, 0x0, 0x0, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r9 = socket(0x2d, 0x80000, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000000100), 0x0, 0x80) setsockopt$inet_buf(r9, 0x0, 0x2f, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r6, 0x10000000) 17.579377298s ago: executing program 0 (id=8044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10022}}, 0x20}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async, rerun: 64) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaab6aaaaaa0008004500002000000000002f907800001fe1e0000001a00086dd000c907801000000"], 0x32) 17.43446205s ago: executing program 0 (id=8045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x401, 0x30}, &(0x7f0000000100)=0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x4, @mcast2, 0x12d2}]}, &(0x7f0000000200)=0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@generic={0x8864}}}}, 0x16) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400f41b460300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001fe0ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7], 0x80}}, 0x8000) 17.39686722s ago: executing program 3 (id=8046): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001d00)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x4800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f80)={r0, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x7, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, [@map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x312}]}, &(0x7f0000001000)='GPL\x00', 0xc00, 0xa9, &(0x7f0000001040)=""/169, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0xf, 0x6, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001280)={r4, r5, 0x4, r0}, 0x10) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000012c0)={0x0, 0x1, 0x30, 0xffffffffffffffff, 0x5}, &(0x7f0000001300)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000001340)={r7, 0x80, 0x2d, "3400f65bde51aadeed528c31d47d5a82cd37ec3b8216f945f48682a65ee2f29b6abfca4a23192fb57c5242f1f8"}, 0x35) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400ab000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x140a, 0x0, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x8c850) 17.142448648s ago: executing program 4 (id=8048): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004890}, 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000540), 0xfe) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x4, 0x0, 0x2, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "15000000000006c3"}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40494) 17.09690025s ago: executing program 3 (id=8049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x277}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7}, 0x8) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2004c0e1}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 16.943638198s ago: executing program 1 (id=8050): r0 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xfffffffffffffc99, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast2}}}]}, @CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'syz0\x00'}}]}, 0x60}}, 0x4000040) sendto$inet(r0, 0x0, 0x20, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000140)="378303076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0), 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r4, &(0x7f0000000100)={0x1f, @none}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 16.890997647s ago: executing program 0 (id=8051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x3d8, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf09}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x835}]}, @TIPC_NLA_BEARER={0x1b4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa676}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf64c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xa7e, @empty}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8724}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "6349b38a8433ad368522b2655fa49da2515267563f56b17a79d4859fff997475bda7a71ce095ec485ffeaa4527901576dbf1d983b182c45e7d8417b46e8554c58445ebe26ace87fe9987fb11946b5bc817c510d85fb79e6b883072e5407c4b00acf4b148c5055b64434cbb60c5e9bfe82f6b2cf9ad6b994fdd088a1c97cf55ef61365240572559251e9bd442dc56257b84268a09276e137b28bccfa68612341c7d78cb67b505b8986460b13c6e89ec513393d2f4a866b65eb6129e971500f6951cd9fa1cead878ac5c03039356c2309c2926edbc"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff123}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) close(r3) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) 16.753334381s ago: executing program 0 (id=8052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={@remote, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@remote}, {}, {@local}, {@initdev}]}}) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xc}}], 0x1, 0x4044044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030028bd7000fcdbdf251a000000060021006100000004002280"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800600000000000000159db33dbcee5c80080005000100000014000700000000004b4b83b4429ee36d0000000108000f"], 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc4f9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x240}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000050000fb510000000a00"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0xd, 0x10, {{0x25, 0x4, 0x1, 0x2d, 0x94, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@ssrr={0x89, 0x13, 0x68, [@empty, @multicast1, @remote, @broadcast]}, @cipso={0x86, 0x5c, 0x0, [{0x5, 0x2}, {0x2, 0x10, "f4df464220e222616f8a9a333293"}, {0x2, 0x8, "3099a29293f2"}, {0x2, 0x10, "a23035feb8f150c16935bf9b79ba"}, {0x7, 0x12, "952294a0df16a975b18a2d65e454bba5"}, {0x1, 0xc, "7b7e59aa150fdd5bb742"}, {0x3, 0xe, "d9ad44f251cd1c63fbfb9840"}]}, @lsrr={0x83, 0xf, 0xa6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x26c, r7, 0xc4dcf16d3f708663, 0x70bd25, 0x2f1, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "869c9084c594a53e7356b3ae199110c2cec0c64123db47d42db5499258ab2ea39b05568a8facb4b1c8251d2afcfa7879378d770c0da3964b0d46d0e5da07303f137d8f3c335062c17ad8d2422747c9999a12d73d3c317d87fd11302f992b7856e9ae01a8e747079c1b1c48ed907fb59a67ee7a6e125d323d015589d7dfb2086ca7fbf610d26c9b348966f31046b547c34fdf06cc9b215ff6b4b4262383b7df47253ef888db69abff8c12f3baf77b9c5159dee7e62ab1efbb8e9997788fd4114a4b29181fabdf1c80917dcd5cb81c550ca52dacdfb69e4d1b6abbef10ab3c6f7fb713fa552fb6cc66b4"}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "51aee2c1c1c775f7d788fb44cd9d0e1e59ff746f4053bbcfc085ef7532da7e6b9ac55ed3d2843cf0a6aeda818a7924c8739ebdfe43576b08d3b6e96b41ff7dc1eb902d65d907f3b09aeca467a512a97ccf7ef40a3fb3d0ab062a8218e4fd3a8afb7962856446eb908ebab80a03bf971c0c9d0b1f7654b80ed1dd73e0a39cc1ab15b1c9e504561b98b1c710fc8e30b162d7fbd77914a145f0c9ed5f1a99efc3e3a10e3a8ee835720f59ae603d96417bb3ffb59fa070015abdd8b1f8e829355663f7dc47d29868f21221b1163f589e4c3641d32eeae00feb756b3ae744ac886c30c88de76c4b3e54206e8225c5e8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0xffffffff}}}, 0x84) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'erspan0\x00', @ifru_flags=0x1000}) 16.75000992s ago: executing program 4 (id=8053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000d306b21c00000404"], 0x18}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000001c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="54020000", @ANYRES16=r7, @ANYBLOB="000129bd7000fedbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x1}, 0x104) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r11, &(0x7f0000000300)="b76b3bcfcf1c37facd3ac22422306599eb640e4e7d80f15810f430abb6cca061c4927a0bff14d791d556473859491954f95fc12c52f14ed658ce727ce22518ffc8f2253cb932e2b003d1527a92a813f39c398611e23208755164b291f8239b50d5272aaacd5fbecd0b2143ac772d8b42cc5a993d49517b9f92eb353ecdbfc5b338cf41340b565bf44cdde90ded2b3aef19ef2bde3cc73c75f57c105c1c1d6bd004952a716289ed0602188b95ffa16b567c4e976f7b637c3e20c04149d567f00eda06d75ca216bf21285f11a2a5bfab6ba598a0ea545624e47a65ffd35387141e6e9bca5964a2d20ba764a60e"}, 0x20) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_MSG_GETGEN(r10, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}}}, 0x24}}, 0x0) 16.263864081s ago: executing program 4 (id=8054): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x9}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r3, 0x5f, "2a918926aa13776b007d33e6a31aa19433b4dd6e3eb561709bcc0991544efae00db4874d90c62d3672ef852c95b276384ec28a44487d2f98bc6858c35d7a170843a1c29cdcd0e4f124c5ab3124ebf5fbab59afde21ab0998273da8afa1ec5d"}, &(0x7f0000000180)=0x67) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.198003672s ago: executing program 1 (id=8055): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000001080)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000340)={'team_slave_1\x00', 0xfe}) 16.032713666s ago: executing program 1 (id=8056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@delnexthop={0x20, 0x69, 0x1, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000000002010100000000000000000000000908160940000008c3ea6e250b9ea9ed03ee30c56009c80cc837dae4a011d8a66836c42e0ea634f72518e79ae7db687d62d033ced502c30a2edd0b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40801) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x4, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x0) 15.839909585s ago: executing program 1 (id=8057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0xfffffffffffffffc, &(0x7f00000002c0)=0x60) (async, rerun: 64) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000240)) (rerun: 64) 15.833916343s ago: executing program 1 (id=8058): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)=ANY=[@ANYBLOB="020000000c060102000000000000000007000004"], 0x14}, 0x1, 0x0, 0x0, 0x4048980}, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x80}], 0x18}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="553e12df315719c9cddfbe741e4317080000007b058e7211a5", 0x19}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349d", 0x36}, {&(0x7f0000000240)="3773705d971f6caa2f6c27730337ec033b0328", 0x13}], 0x4}], 0x1, 0x840) recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) 15.784697626s ago: executing program 1 (id=8059): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1b6a53", 0x3}], 0x1}, 0x24000041) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'veth0_to_team\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0xb4, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1e4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x32e4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb526}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x5, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x1, 0x4, 0x1, 0x2, 0xffff}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4040000) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) r9 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r9, &(0x7f0000000600)={0xa, 0x4e24, 0xbb3, @mcast2, 0x4}, 0x1c) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) 15.350637329s ago: executing program 4 (id=8060): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000d00000000000090841812b8b8fd03a1830734056c00"/42], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e86dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x9, 0x7ff, 0x2, 0x5, 0x1ff, 0x1, 0x60, 0x3}, &(0x7f0000000040)={0xa006, 0xb, 0x0, 0x10001, 0xdd1b, 0x9, 0x4, 0x7}, &(0x7f0000000080)={0x9, 0x9, 0xfffffffffffffffe, 0x9, 0xd07b, 0x3, 0x10001, 0xd85}, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10]}, 0x8}) 15.349620821s ago: executing program 4 (id=8061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @local}}}}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 5.581278233s ago: executing program 32 (id=8005): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3df9", 0x2}], 0x1}}], 0x1, 0x4008000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000600)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71551ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fe1056788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f07000000d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72898b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02ffa49528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880ff7d9256a4bd1eba07dad00000000bd57b4a28b73320aa5e7c15d78b8fbe9ca8d31636b1001481cb72dc29bf855", 0x5ad, 0x5, 0x0, 0x0) recvfrom(r4, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020445, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="2800000000000000170100000200000010"], 0x28}], 0x1, 0x40800) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000300)=0x14) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002a80)={0x418, 0x12, 0x4, 0x70bd2a, 0x25dfdbfc, {0xb, 0x7, 0xa8, 0x0, {0x4e22, 0x4e24, [0xc, 0x0, 0x0, 0x101], [0xf, 0x40, 0x5, 0xc6], r5, [0x2, 0x5]}, 0x0, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "acbb13dbe2639a605db8202f23eebdfa793fc710d7e1c35a086e67fb8db4fd049e482f33495bd5cc201b9cd98d6092736023a9492f98d651d1176f0eaf1168588b9599603f035dfdb766e784a6d3bac8bd5d6afa409f7583369ce4a8f8111b067fe1506acbcb61bc8bc921d4d275c4274dce930c9bc0321c6a7b1a2326f6c0bbe6a7df3c28b141600f5c44e0900d41fc9fc8d628a250408f2ed0"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2d607c0f6c0b7ff01f719bfe4f2a8c95995b3d5e6476a9da5b9c98b956baf0dea0974aa26ad07b8cce516cf30459daf2e1bb5e27ccc34d556a276465ff05c35da36b9fee2fe5787480066e09ce968c3ff7727285b93783e9da27276da2fe91c0842403935b53d6a9baf6a0fa3a330df4c84f17c39e415df39f94f076eddba9609a0178090a4a1718caac497ddd920c57b40d0a1614f6c9d7"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "09998835d7006446c62db7ce0ca58f41809b12338fce617e799e836a5ad44242643be2c57734ad812305c8e4c068573ddae276ed4410c61b72c494c3a65fc1c0a54c22be47b8c048a91c2cce510a0adf11a8f80bb6cce63456c3d67b716fce031c85d1fc72db3bfbbf610bb9bcc56b67275ea3afeecdb7b400745d337aa862bea9cbe457c3ab46c9ebbf5cff198bd45dcf33d057e2c035a550b5df1c7c3951e011a689c05256a459b28a2e3267c843df52d04461311f29edb00e45ad26076c35a59524fb7ee0ac"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "f8e2ba2ab328063fc4dc228ba5f38f0fdc2828e091b133d807679d79097795118b31079a9be8216a2e18e4b87834b5cf89eac22168934242a6efe6679d994a23f873afebca51c1b91d04c39c90425689e1846bdc2c56260e7131fbded657a49a7dc3ff3ddd7aa9d64f1571dc2b732fdf4d1c5442782aa620"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "319c33bf5334056fcb077751979a7b339bdc001b72389c3d926bf5d043320e29bd00174389ccd9e33bf7b27bb07ff5feef61b5d7866ea740f41aba9918708c3e7f084c1e26e5f69a78635e6b78e6553b76233f819519b6dbaf930a7276065f1124fc0c4792dcb16f5fe8f4a6e4e9e05bd79157e028777f30c0719d2ba9ddcf80e1ab7631f8cb3ff1625ae25655962b3f76faceb3d398cb4a72a9aa9558ae59f75f821435021bc24c0f5ba5cbb4f2e331dcfa1191f4643e07880f99139159397ea3bf9d20770119db06c7fbdd72d042c4c0b8c6f7056f6fee55551470da6d5787"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a47c6eeaacb38fef7d6a481a88596c60d7def2b3e0992c89a6d8bdadbddf28acf68534bd35843573749faf78aafbc9edbd3b47cb6bbe17c452493f406c429c0d4acfcd60cc7449e2b6788492425aa7c4ae9f5a6fa4339eb648d9bf57b8f3b168"}]}, 0x418}, 0x1, 0x0, 0x0, 0xc0440a4}, 0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.07983097s ago: executing program 33 (id=8049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x277}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7}, 0x8) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2004c0e1}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 1.053808379s ago: executing program 34 (id=8052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={@remote, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@remote}, {}, {@local}, {@initdev}]}}) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xc}}], 0x1, 0x4044044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030028bd7000fcdbdf251a000000060021006100000004002280"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800600000000000000159db33dbcee5c80080005000100000014000700000000004b4b83b4429ee36d0000000108000f"], 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc4f9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x240}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000050000fb510000000a00"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0xd, 0x10, {{0x25, 0x4, 0x1, 0x2d, 0x94, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@ssrr={0x89, 0x13, 0x68, [@empty, @multicast1, @remote, @broadcast]}, @cipso={0x86, 0x5c, 0x0, [{0x5, 0x2}, {0x2, 0x10, "f4df464220e222616f8a9a333293"}, {0x2, 0x8, "3099a29293f2"}, {0x2, 0x10, "a23035feb8f150c16935bf9b79ba"}, {0x7, 0x12, "952294a0df16a975b18a2d65e454bba5"}, {0x1, 0xc, "7b7e59aa150fdd5bb742"}, {0x3, 0xe, "d9ad44f251cd1c63fbfb9840"}]}, @lsrr={0x83, 0xf, 0xa6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x26c, r7, 0xc4dcf16d3f708663, 0x70bd25, 0x2f1, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "869c9084c594a53e7356b3ae199110c2cec0c64123db47d42db5499258ab2ea39b05568a8facb4b1c8251d2afcfa7879378d770c0da3964b0d46d0e5da07303f137d8f3c335062c17ad8d2422747c9999a12d73d3c317d87fd11302f992b7856e9ae01a8e747079c1b1c48ed907fb59a67ee7a6e125d323d015589d7dfb2086ca7fbf610d26c9b348966f31046b547c34fdf06cc9b215ff6b4b4262383b7df47253ef888db69abff8c12f3baf77b9c5159dee7e62ab1efbb8e9997788fd4114a4b29181fabdf1c80917dcd5cb81c550ca52dacdfb69e4d1b6abbef10ab3c6f7fb713fa552fb6cc66b4"}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "51aee2c1c1c775f7d788fb44cd9d0e1e59ff746f4053bbcfc085ef7532da7e6b9ac55ed3d2843cf0a6aeda818a7924c8739ebdfe43576b08d3b6e96b41ff7dc1eb902d65d907f3b09aeca467a512a97ccf7ef40a3fb3d0ab062a8218e4fd3a8afb7962856446eb908ebab80a03bf971c0c9d0b1f7654b80ed1dd73e0a39cc1ab15b1c9e504561b98b1c710fc8e30b162d7fbd77914a145f0c9ed5f1a99efc3e3a10e3a8ee835720f59ae603d96417bb3ffb59fa070015abdd8b1f8e829355663f7dc47d29868f21221b1163f589e4c3641d32eeae00feb756b3ae744ac886c30c88de76c4b3e54206e8225c5e8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0xffffffff}}}, 0x84) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'erspan0\x00', @ifru_flags=0x1000}) 32.930855ms ago: executing program 35 (id=8059): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1b6a53", 0x3}], 0x1}, 0x24000041) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'veth0_to_team\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0xb4, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1e4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x32e4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb526}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x5, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x1, 0x4, 0x1, 0x2, 0xffff}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4040000) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) r9 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r9, &(0x7f0000000600)={0xa, 0x4e24, 0xbb3, @mcast2, 0x4}, 0x1c) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) 0s ago: executing program 36 (id=8061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @local}}}}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) kernel console output (not intermixed with test programs): 18][T31861] wg1 speed is unknown, defaulting to 1000 [ 1334.354171][T31871] netlink: 'syz.0.6586': attribute type 1 has an invalid length. [ 1334.412738][T31876] netlink: 'syz.3.6585': attribute type 72 has an invalid length. [ 1334.435826][T31876] __nla_validate_parse: 4 callbacks suppressed [ 1334.435858][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6585'. [ 1334.614542][T31881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6585'. [ 1334.772915][T31887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1335.004062][T31890] lo speed is unknown, defaulting to 1000 [ 1335.024981][T31890] wg1 speed is unknown, defaulting to 1000 [ 1335.165441][T31909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'. [ 1335.205551][T31909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.220998][T31911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6596'. [ 1335.230523][T31909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.243528][T31911] netlink: 560 bytes leftover after parsing attributes in process `syz.1.6596'. [ 1335.273412][T31909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.281432][T31909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.411025][T31924] tipc: Started in network mode [ 1335.419410][T31924] tipc: Node identity 96cf21480412, cluster identity 4711 [ 1335.447423][T31924] tipc: Enabled bearer , priority 0 [ 1335.486668][T31924] syzkaller0: entered promiscuous mode [ 1335.510807][T31924] syzkaller0: entered allmulticast mode [ 1335.871237][T31924] tipc: Resetting bearer [ 1335.960105][T31924] tipc: Disabling bearer [ 1336.037468][T31959] netlink: 'syz.2.6607': attribute type 1 has an invalid length. [ 1336.141675][T31959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1336.207594][T31950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1336.225378][T31950] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1336.238520][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6609'. [ 1336.266138][T31950] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1336.323524][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6607'. [ 1336.356175][T31959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6607'. [ 1336.375338][T31957] x_tables: duplicate underflow at hook 1 [ 1336.422942][T31971] gretap2: entered promiscuous mode [ 1336.432645][T31971] bond3: (slave gretap2): making interface the new active one [ 1336.449606][T31971] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1336.720342][T31984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1336.735116][T31985] netlink: 'syz.3.6614': attribute type 72 has an invalid length. [ 1337.033003][T31997] bridge_slave_1: left allmulticast mode [ 1337.047277][T31997] bridge_slave_1: left promiscuous mode [ 1337.056977][T31997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.091010][T31997] bridge_slave_0: left allmulticast mode [ 1337.096716][T31997] bridge_slave_0: left promiscuous mode [ 1337.103026][T31997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.384476][T32012] netlink: 'syz.2.6623': attribute type 9 has an invalid length. [ 1337.398958][T32012] netlink: 'syz.2.6623': attribute type 6 has an invalid length. [ 1337.434277][T32015] wireguard0: entered promiscuous mode [ 1337.462689][T32015] wireguard0: entered allmulticast mode [ 1337.503658][T32013] lo speed is unknown, defaulting to 1000 [ 1337.555741][T32013] wg1 speed is unknown, defaulting to 1000 [ 1337.760406][T32037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.768011][T32037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.807867][T32038] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1338.262467][ T30] audit: type=1800 audit(1764563601.278:20): pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6638" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=747 res=0 errno=0 [ 1338.778499][T32098] netlink: 'syz.1.6644': attribute type 1 has an invalid length. [ 1338.800151][T32100] netlink: 'syz.2.6645': attribute type 1 has an invalid length. [ 1339.601917][T32149] __nla_validate_parse: 11 callbacks suppressed [ 1339.601938][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6657'. [ 1340.267857][T32180] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1340.280493][T32141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1340.303280][T32175] syzkaller0: entered promiscuous mode [ 1340.319686][T32175] syzkaller0: entered allmulticast mode [ 1340.327855][T32174] tipc: Enabled bearer , priority 0 [ 1340.366695][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6665'. [ 1340.403992][T32184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6665'. [ 1340.463433][T32174] tipc: Resetting bearer [ 1340.520227][T32174] tipc: Disabling bearer [ 1340.679243][T32199] x_tables: duplicate underflow at hook 2 [ 1340.695979][T32199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1340.893755][T32214] netlink: 356 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1340.940157][T32213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6673'. [ 1341.258548][T32224] team0: Port device dummy0 removed [ 1341.274767][T32224] batman_adv: batadv0: Adding interface: dummy0 [ 1341.291442][T32224] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.321747][T32224] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1341.340249][T32227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1341.350841][T32229] openvswitch: netlink: EtherType 0 is less than min 600 [ 1341.404579][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6678'. [ 1341.444934][T32232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6679'. [ 1341.461135][T32232] xt_hashlimit: size too large, truncated to 1048576 [ 1341.554260][T32236] batadv_slave_0: entered promiscuous mode [ 1341.644170][T32238] netlink: 'syz.1.6682': attribute type 10 has an invalid length. [ 1341.703455][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1341.783683][T32244] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1341.802447][T32251] delete_channel: no stack [ 1341.821060][T32244] bond2 (unregistering): Released all slaves [ 1341.869512][T32235] batadv_slave_0: left promiscuous mode [ 1342.196994][T32273] pimreg: entered allmulticast mode [ 1342.488219][T32281] syzkaller1: entered promiscuous mode [ 1342.495090][T32281] syzkaller1: entered allmulticast mode [ 1342.912795][T32307] netlink: zone id is out of range [ 1342.930762][T32307] netlink: zone id is out of range [ 1342.945631][T32307] netlink: zone id is out of range [ 1342.986645][T32307] netlink: zone id is out of range [ 1343.024703][T32307] netlink: zone id is out of range [ 1343.040388][T32307] netlink: zone id is out of range [ 1343.050436][T32307] netlink: zone id is out of range [ 1343.062797][T32307] netlink: zone id is out of range [ 1343.475673][T32330] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 1343.488238][T32330] netlink: 'syz.1.6706': attribute type 6 has an invalid length. [ 1343.496258][T32330] netlink: 'syz.1.6706': attribute type 5 has an invalid length. [ 1343.506927][T32330] netlink: 'syz.1.6706': attribute type 4 has an invalid length. [ 1343.518052][T32330] netlink: 'syz.1.6706': attribute type 4 has an invalid length. [ 1343.981412][T32348] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1343.993127][T32349] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1344.186609][T32357] syzkaller0: entered promiscuous mode [ 1344.192392][T32357] syzkaller0: entered allmulticast mode [ 1344.814919][T32404] tipc: Enabling of bearer rejected, failed to enable media [ 1344.851062][T32404] netlink: 'syz.3.6727': attribute type 2 has an invalid length. [ 1344.872973][T32406] __nla_validate_parse: 15 callbacks suppressed [ 1344.872995][T32406] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1344.891218][T32406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1344.930186][T32406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1344.940648][T32406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1345.197944][T32425] syzkaller0: entered promiscuous mode [ 1345.203796][T32425] syzkaller0: entered allmulticast mode [ 1345.218392][T32428] tipc: Enabled bearer , priority 0 [ 1345.275286][T32430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1345.286106][T32430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1345.289119][T32427] syzkaller0: entered promiscuous mode [ 1345.309126][T32427] syzkaller0: entered allmulticast mode [ 1345.366284][T32435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6735'. [ 1345.538576][T32438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6735'. [ 1345.878494][T32442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1345.928865][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 1347.065816][T32428] tipc: Resetting bearer [ 1347.084245][T32428] tipc: Disabling bearer [ 1347.244601][T32450] netlink: ct family unspecified [ 1347.250983][T32450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.311541][T32445] syzkaller0: entered allmulticast mode [ 1347.339090][T32447] lo speed is unknown, defaulting to 1000 [ 1347.385476][T32447] wg1 speed is unknown, defaulting to 1000 [ 1347.397256][T32456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1347.709018][ T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1347.717025][ T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1347.732210][T18437] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1347.750108][ T5834] Bluetooth: hci2: link tx timeout [ 1347.755964][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1347.788889][ T5829] Bluetooth: hci2: link tx timeout [ 1347.795281][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1347.803147][ T5829] Bluetooth: hci2: link tx timeout [ 1347.808434][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1347.864734][ T5829] Bluetooth: hci2: link tx timeout [ 1347.870397][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1347.878167][ T5829] Bluetooth: hci2: link tx timeout [ 1347.883553][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1348.008910][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1348.185859][T32480] vlan0: entered promiscuous mode [ 1348.191312][T32480] bond0: entered promiscuous mode [ 1348.196457][T32480] bond_slave_0: entered promiscuous mode [ 1348.207614][T32480] bond_slave_1: entered promiscuous mode [ 1348.299364][T18437] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1348.325437][T18437] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1348.467433][T32486] lo speed is unknown, defaulting to 1000 [ 1348.493247][T32486] wg1 speed is unknown, defaulting to 1000 [ 1348.691310][T32509] netlink: 'syz.0.6753': attribute type 5 has an invalid length. [ 1348.699537][T32509] nbd: couldn't find a device at index 0 [ 1348.772211][T32505] lo speed is unknown, defaulting to 1000 [ 1348.799798][T32505] wg1 speed is unknown, defaulting to 1000 [ 1348.836611][T32502] lo speed is unknown, defaulting to 1000 [ 1348.993133][T32502] wg1 speed is unknown, defaulting to 1000 [ 1349.222935][T32533] nbd: couldn't find a device at index 0 [ 1349.849243][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 1350.026525][T32582] __nla_validate_parse: 5 callbacks suppressed [ 1350.026547][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6769'. [ 1350.216829][T32588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6771'. [ 1350.315856][T32591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6772'. [ 1350.427996][T32593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6773'. [ 1350.552044][T32600] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1350.680912][T32606] syzkaller0: entered promiscuous mode [ 1350.686466][T32606] syzkaller0: entered allmulticast mode [ 1351.056491][T32628] lo speed is unknown, defaulting to 1000 [ 1351.121020][T32628] wg1 speed is unknown, defaulting to 1000 [ 1351.163887][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6789'. [ 1351.202472][T32642] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 1351.328162][T32645] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1351.368446][T32645] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1351.857424][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1352.088210][T32695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6800'. [ 1352.098417][T32694] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1352.714227][T32731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.722200][T32731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.983306][T32731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.999908][T32731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.011416][T32746] netlink: 'syz.2.6815': attribute type 1 has an invalid length. [ 1353.020088][T32746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1353.066372][T32731] macvlan0: left promiscuous mode [ 1353.120907][T32731] ip6gre1: left allmulticast mode [ 1353.128260][T32731] vlan2: left promiscuous mode [ 1353.128965][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1353.134824][T32731] bond0: left promiscuous mode [ 1353.146052][T32731] bond_slave_0: left promiscuous mode [ 1353.152329][T32731] bond_slave_1: left promiscuous mode [ 1353.182492][T22054] wg1 speed is unknown, defaulting to 1000 [ 1353.189446][T22054] syz0: Port: 1 Link DOWN [ 1353.191393][T32747] wireguard0: entered promiscuous mode [ 1353.199847][T32747] wireguard0: entered allmulticast mode [ 1353.213294][T32747] team0: Device wireguard0 is of different type [ 1353.282043][T32751] pim6reg: entered allmulticast mode [ 1353.310357][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.357267][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.377286][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.401697][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.931186][ T317] lo speed is unknown, defaulting to 1000 [ 1353.941924][ T317] wg1 speed is unknown, defaulting to 1000 [ 1353.973941][ T321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6828'. [ 1354.010353][T31740] Bluetooth: hci1: command 0x0406 tx timeout [ 1354.168887][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1354.769929][ T358] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1354.797614][ T358] bond5 (unregistering): Released all slaves [ 1355.219134][T18437] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1355.227779][T18437] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1355.309148][ T371] syzkaller0: entered promiscuous mode [ 1355.315204][ T371] syzkaller0: entered allmulticast mode [ 1355.434807][ T370] lo speed is unknown, defaulting to 1000 [ 1355.451220][ T370] wg1 speed is unknown, defaulting to 1000 [ 1355.572668][ T384] __nla_validate_parse: 3 callbacks suppressed [ 1355.572690][ T384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6842'. [ 1355.591512][ T384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6842'. [ 1355.649393][ T5887] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1355.756786][ T396] FAULT_INJECTION: forcing a failure. [ 1355.756786][ T396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.761547][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1355.806455][ T396] CPU: 1 UID: 0 PID: 396 Comm: syz.2.6843 Not tainted syzkaller #0 PREEMPT(full) [ 1355.806492][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1355.806507][ T396] Call Trace: [ 1355.806516][ T396] [ 1355.806527][ T396] dump_stack_lvl+0x189/0x250 [ 1355.806562][ T396] ? __pfx____ratelimit+0x10/0x10 [ 1355.806589][ T396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.806618][ T396] ? __pfx__printk+0x10/0x10 [ 1355.806643][ T396] ? __might_fault+0xb0/0x130 [ 1355.806687][ T396] should_fail_ex+0x414/0x560 [ 1355.806735][ T396] _copy_from_user+0x2d/0xb0 [ 1355.806766][ T396] ___sys_sendmsg+0x158/0x2a0 [ 1355.806797][ T396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1355.806869][ T396] ? __fget_files+0x2a/0x420 [ 1355.806890][ T396] ? __fget_files+0x3a0/0x420 [ 1355.806924][ T396] __x64_sys_sendmsg+0x19b/0x260 [ 1355.806956][ T396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1355.806997][ T396] ? __pfx_ksys_write+0x10/0x10 [ 1355.807034][ T396] ? do_syscall_64+0xbe/0xfa0 [ 1355.807067][ T396] do_syscall_64+0xfa/0xfa0 [ 1355.807092][ T396] ? lockdep_hardirqs_on+0x9c/0x150 [ 1355.807120][ T396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.807142][ T396] ? clear_bhb_loop+0x60/0xb0 [ 1355.807170][ T396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.807192][ T396] RIP: 0033:0x7fd6a3b8f749 [ 1355.807212][ T396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.807233][ T396] RSP: 002b:00007fd6a4a6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.807258][ T396] RAX: ffffffffffffffda RBX: 00007fd6a3de5fa0 RCX: 00007fd6a3b8f749 [ 1355.807276][ T396] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1355.807291][ T396] RBP: 00007fd6a4a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.807305][ T396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.807319][ T396] R13: 00007fd6a3de6038 R14: 00007fd6a3de5fa0 R15: 00007ffc37166848 [ 1355.807357][ T396] [ 1356.022292][T18437] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1356.060601][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 1356.496367][ T416] lo speed is unknown, defaulting to 1000 [ 1356.572154][ T416] wg1 speed is unknown, defaulting to 1000 [ 1356.770235][ T433] netlink: 'syz.2.6850': attribute type 2 has an invalid length. [ 1356.837278][ T433] : entered promiscuous mode [ 1357.112439][ T446] batman_adv: batadv0: Adding interface: dummy0 [ 1357.119136][ T446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.240974][ T446] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1357.347493][ T447] netlink: 182 bytes leftover after parsing attributes in process `syz.0.6853'. [ 1357.384450][ T457] FAULT_INJECTION: forcing a failure. [ 1357.384450][ T457] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.428958][ T447] syzkaller0: entered promiscuous mode [ 1357.434559][ T447] syzkaller0: entered allmulticast mode [ 1357.468916][ T457] CPU: 1 UID: 0 PID: 457 Comm: syz.2.6856 Not tainted syzkaller #0 PREEMPT(full) [ 1357.468947][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1357.468962][ T457] Call Trace: [ 1357.468971][ T457] [ 1357.468981][ T457] dump_stack_lvl+0x189/0x250 [ 1357.469018][ T457] ? __pfx____ratelimit+0x10/0x10 [ 1357.469045][ T457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1357.469075][ T457] ? __pfx__printk+0x10/0x10 [ 1357.469101][ T457] ? __pfx___might_resched+0x10/0x10 [ 1357.469126][ T457] ? fs_reclaim_acquire+0x7d/0x100 [ 1357.469153][ T457] should_fail_ex+0x414/0x560 [ 1357.469193][ T457] should_failslab+0xa8/0x100 [ 1357.469216][ T457] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1357.469246][ T457] ? __alloc_skb+0x255/0x430 [ 1357.469285][ T457] ? napi_skb_cache_get+0x4a5/0x790 [ 1357.469308][ T457] ? napi_skb_cache_get+0x151/0x790 [ 1357.469341][ T457] __alloc_skb+0x255/0x430 [ 1357.469365][ T457] ? __pfx___alloc_skb+0x10/0x10 [ 1357.469389][ T457] ? netlink_autobind+0xdb/0x300 [ 1357.469413][ T457] ? netlink_autobind+0x2c2/0x300 [ 1357.469443][ T457] netlink_sendmsg+0x5c6/0xb30 [ 1357.469478][ T457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.469506][ T457] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1357.469538][ T457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1357.469557][ T457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1357.469584][ T457] __sock_sendmsg+0x21c/0x270 [ 1357.469621][ T457] ____sys_sendmsg+0x505/0x830 [ 1357.469655][ T457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1357.469694][ T457] ? import_iovec+0x74/0xa0 [ 1357.469726][ T457] ___sys_sendmsg+0x21f/0x2a0 [ 1357.469757][ T457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1357.469821][ T457] ? __fget_files+0x2a/0x420 [ 1357.469843][ T457] ? __fget_files+0x3a0/0x420 [ 1357.469876][ T457] __x64_sys_sendmsg+0x19b/0x260 [ 1357.469908][ T457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1357.469950][ T457] ? __pfx_ksys_write+0x10/0x10 [ 1357.469982][ T457] ? do_syscall_64+0xbe/0xfa0 [ 1357.470009][ T457] do_syscall_64+0xfa/0xfa0 [ 1357.470031][ T457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1357.470055][ T457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.470074][ T457] ? clear_bhb_loop+0x60/0xb0 [ 1357.470097][ T457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.470116][ T457] RIP: 0033:0x7fd6a3b8f749 [ 1357.470134][ T457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.470152][ T457] RSP: 002b:00007fd6a4a6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1357.470173][ T457] RAX: ffffffffffffffda RBX: 00007fd6a3de5fa0 RCX: 00007fd6a3b8f749 [ 1357.470188][ T457] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1357.470201][ T457] RBP: 00007fd6a4a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.470213][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.470225][ T457] R13: 00007fd6a3de6038 R14: 00007fd6a3de5fa0 R15: 00007ffc37166848 [ 1357.470258][ T457] [ 1358.144885][ T470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6858'. [ 1358.705823][ T482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6862'. [ 1358.715708][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6862'. [ 1358.730036][ T483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6863'. [ 1359.614745][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1360.359612][ T483] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 1360.379122][ T483] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 1360.397921][ T488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6863'. [ 1360.502086][ T493] Cannot find del_set index 2 as target [ 1360.888977][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1360.911809][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1360.918359][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1360.944711][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.012829][ T523] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1361.093401][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.102163][ T527] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1361.117343][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.137006][ T533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1361.158921][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.173655][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.182822][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.217572][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.241069][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.269735][ T523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1361.370406][ T537] pim6reg1: entered allmulticast mode [ 1361.636290][ T553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6882'. [ 1361.789598][ T561] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 1361.853698][ T571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6887'. [ 1361.889976][ T574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6887'. [ 1362.140908][ T592] netlink: 'syz.2.6891': attribute type 1 has an invalid length. [ 1362.358925][ T601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1362.369963][ T602] "syz.0.6893" (602) uses obsolete ecb(arc4) skcipher [ 1362.431310][ T605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1362.448821][ T601] nbd: must specify a size in bytes for the device [ 1363.211671][ T640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1363.225448][ T626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6900'. [ 1363.305393][ T642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1363.802540][ T670] netlink: 'syz.1.6908': attribute type 3 has an invalid length. [ 1363.811939][ T670] ipt_ECN: cannot use operation on non-tcp rule [ 1364.164649][ T690] batman_adv: batadv0: Adding interface: dummy0 [ 1364.190476][ T690] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.283485][ T690] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1365.065647][ T738] tipc: Enabled bearer , priority 0 [ 1365.074494][ T738] syzkaller0: entered promiscuous mode [ 1365.080230][ T738] syzkaller0: entered allmulticast mode [ 1365.127255][ T736] tipc: Resetting bearer [ 1365.168480][ T736] tipc: Disabling bearer [ 1365.277754][ T749] lo speed is unknown, defaulting to 1000 [ 1365.286174][ T749] wg1 speed is unknown, defaulting to 1000 [ 1365.294208][ T749] virt_wifi0 speed is unknown, defaulting to 1000 [ 1365.635221][ T769] lo speed is unknown, defaulting to 1000 [ 1365.649046][ T769] wg1 speed is unknown, defaulting to 1000 [ 1365.657429][ T769] virt_wifi0 speed is unknown, defaulting to 1000 [ 1365.674495][ T773] netlink: 'syz.1.6934': attribute type 6 has an invalid length. [ 1366.082536][ T796] netlink: 'syz.0.6938': attribute type 1 has an invalid length. [ 1366.144528][ T799] netlink: 'syz.3.6941': attribute type 1 has an invalid length. [ 1366.163847][ T799] __nla_validate_parse: 14 callbacks suppressed [ 1366.163871][ T799] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1366.220609][ T800] netlink: 'syz.3.6941': attribute type 1 has an invalid length. [ 1366.231148][ T800] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1366.253621][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6943'. [ 1366.291387][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6943'. [ 1366.312579][ T802] tipc: Enabled bearer , priority 0 [ 1366.413320][ T809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6942'. [ 1366.644079][ T823] netlink: 'syz.4.6948': attribute type 1 has an invalid length. [ 1366.667125][ T822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1366.674452][ T822] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.681763][ T822] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.702567][ T823] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1366.871429][ T829] lo speed is unknown, defaulting to 1000 [ 1366.888026][ T829] wg1 speed is unknown, defaulting to 1000 [ 1366.926748][ T829] virt_wifi0 speed is unknown, defaulting to 1000 [ 1367.438949][T22054] tipc: Node number set to 1965896769 [ 1367.467369][ T853] x_tables: duplicate underflow at hook 2 [ 1367.703675][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1368.144872][ T898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1368.180617][ T901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6969'. [ 1368.222856][ T901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1368.253701][ T901] macvlan0: entered promiscuous mode [ 1368.261475][ T901] macvlan0: entered allmulticast mode [ 1368.269097][ T901] bond2: (slave macvlan0): Opening slave failed [ 1368.308834][ T905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6970'. [ 1368.356811][ T908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6971'. [ 1368.394722][ T908] bridge4: port 1(ip6gretap4) entered blocking state [ 1368.402115][ T908] bridge4: port 1(ip6gretap4) entered disabled state [ 1368.412141][ T908] ip6gretap4: entered allmulticast mode [ 1368.420324][ T908] ip6gretap4: entered promiscuous mode [ 1368.478322][ T908] bridge4: port 2(veth7) entered blocking state [ 1368.494593][ T908] bridge4: port 2(veth7) entered disabled state [ 1368.501897][ T908] veth7: entered allmulticast mode [ 1368.514817][ T908] veth7: entered promiscuous mode [ 1368.532379][ T908] bridge4: port 2(veth7) entered blocking state [ 1368.538899][ T908] bridge4: port 2(veth7) entered forwarding state [ 1368.773930][ T945] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 1369.111906][ T965] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1369.174628][ T965] CPU: 0 UID: 0 PID: 965 Comm: syz.4.6981 Not tainted syzkaller #0 PREEMPT(full) [ 1369.174662][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1369.174675][ T965] Call Trace: [ 1369.174684][ T965] [ 1369.174693][ T965] dump_stack_lvl+0x189/0x250 [ 1369.174732][ T965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1369.174762][ T965] ? __pfx__printk+0x10/0x10 [ 1369.174792][ T965] ? kernfs_path_from_node+0x2f/0x290 [ 1369.174819][ T965] ? kernfs_path_from_node+0x250/0x290 [ 1369.174844][ T965] ? kernfs_path_from_node+0x2f/0x290 [ 1369.174876][ T965] sysfs_warn_dup+0x8e/0xa0 [ 1369.174903][ T965] sysfs_do_create_link_sd+0xc0/0x110 [ 1369.174934][ T965] device_add_class_symlinks+0x1cf/0x240 [ 1369.174966][ T965] device_add+0x475/0xb50 [ 1369.174998][ T965] wiphy_register+0x1d2e/0x2d20 [ 1369.175043][ T965] ? __pfx_wiphy_register+0x10/0x10 [ 1369.175067][ T965] ? __pfx_netdev_run_todo+0x10/0x10 [ 1369.175097][ T965] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1369.175138][ T965] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1369.175174][ T965] ieee80211_register_hw+0x3473/0x40d0 [ 1369.175226][ T965] ? ieee80211_register_hw+0x1451/0x40d0 [ 1369.175269][ T965] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1369.175299][ T965] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1369.175342][ T965] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1369.175367][ T965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1369.175401][ T965] ? __hrtimer_setup+0x187/0x210 [ 1369.175424][ T965] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1369.175455][ T965] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 1369.175516][ T965] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1369.175537][ T965] ? trace_kmalloc+0x1f/0xd0 [ 1369.175564][ T965] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 1369.175598][ T965] ? kstrndup+0xbf/0x160 [ 1369.175635][ T965] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1369.175667][ T965] ? __pfx___nla_validate_parse+0x10/0x10 [ 1369.175710][ T965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1369.175742][ T965] ? rcu_is_watching+0x15/0xb0 [ 1369.175771][ T965] ? __nla_parse+0x40/0x60 [ 1369.175800][ T965] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1369.175831][ T965] genl_family_rcv_msg_doit+0x215/0x300 [ 1369.175862][ T965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1369.175901][ T965] ? bpf_lsm_capable+0x9/0x20 [ 1369.175928][ T965] ? security_capable+0x7e/0x2e0 [ 1369.175966][ T965] genl_rcv_msg+0x60e/0x790 [ 1369.175996][ T965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1369.176015][ T965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1369.176057][ T965] netlink_rcv_skb+0x208/0x470 [ 1369.176082][ T965] ? __lock_acquire+0xab9/0xd20 [ 1369.176105][ T965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1369.176127][ T965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1369.176178][ T965] ? down_read+0x1ad/0x2e0 [ 1369.176211][ T965] genl_rcv+0x28/0x40 [ 1369.176241][ T965] netlink_unicast+0x82f/0x9e0 [ 1369.176276][ T965] ? __pfx_netlink_unicast+0x10/0x10 [ 1369.176303][ T965] ? netlink_sendmsg+0x642/0xb30 [ 1369.176423][ T965] ? skb_put+0x11b/0x210 [ 1369.176470][ T965] netlink_sendmsg+0x805/0xb30 [ 1369.176510][ T965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1369.176540][ T965] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1369.176613][ T965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1369.176633][ T965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1369.176661][ T965] __sock_sendmsg+0x21c/0x270 [ 1369.176703][ T965] ____sys_sendmsg+0x505/0x830 [ 1369.176741][ T965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1369.176782][ T965] ? import_iovec+0x74/0xa0 [ 1369.176817][ T965] ___sys_sendmsg+0x21f/0x2a0 [ 1369.176847][ T965] ? __pfx____sys_sendmsg+0x10/0x10 [ 1369.176922][ T965] ? __fget_files+0x2a/0x420 [ 1369.176942][ T965] ? __fget_files+0x3a0/0x420 [ 1369.176977][ T965] __x64_sys_sendmsg+0x19b/0x260 [ 1369.177008][ T965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1369.177057][ T965] ? do_syscall_64+0xbe/0xfa0 [ 1369.177088][ T965] do_syscall_64+0xfa/0xfa0 [ 1369.177112][ T965] ? lockdep_hardirqs_on+0x9c/0x150 [ 1369.177138][ T965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.177160][ T965] ? clear_bhb_loop+0x60/0xb0 [ 1369.177186][ T965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.177208][ T965] RIP: 0033:0x7f1b3538f749 [ 1369.177228][ T965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.177248][ T965] RSP: 002b:00007f1b362cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1369.177272][ T965] RAX: ffffffffffffffda RBX: 00007f1b355e6090 RCX: 00007f1b3538f749 [ 1369.177289][ T965] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 1369.177304][ T965] RBP: 00007f1b35413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1369.177317][ T965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.177331][ T965] R13: 00007f1b355e6128 R14: 00007f1b355e6090 R15: 00007ffd099e7b78 [ 1369.177371][ T965] [ 1369.709853][T11691] bridge4: port 2(veth7) entered disabled state [ 1369.847308][ T974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.929407][ T978] lo speed is unknown, defaulting to 1000 [ 1369.935444][ T987] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1369.960614][ T978] wg1 speed is unknown, defaulting to 1000 [ 1369.960628][ T973] lo speed is unknown, defaulting to 1000 [ 1369.974538][ T973] wg1 speed is unknown, defaulting to 1000 [ 1369.981736][ T978] virt_wifi0 speed is unknown, defaulting to 1000 [ 1369.998376][ T973] virt_wifi0 speed is unknown, defaulting to 1000 [ 1370.121032][ T991] syzkaller0: entered promiscuous mode [ 1370.127235][ T991] syzkaller0: entered allmulticast mode [ 1371.201312][ T1043] __nla_validate_parse: 8 callbacks suppressed [ 1371.201331][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1371.320019][ T1043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1371.333680][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1371.630641][T12432] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.639962][T12432] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.655728][T12432] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.684791][T12432] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.836005][ T1054] SET target dimension over the limit! [ 1372.159978][ T1066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7005'. [ 1372.169623][ T1066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7005'. [ 1372.341795][ T1075] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1372.444155][ T1083] x_tables: unsorted entry at hook 3 [ 1372.592396][ T1089] netlink: 'syz.4.7011': attribute type 13 has an invalid length. [ 1372.665353][ T1095] netlink: 'syz.0.7013': attribute type 1 has an invalid length. [ 1372.680253][ T1095] netlink: 'syz.0.7013': attribute type 2 has an invalid length. [ 1372.688254][ T1095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1372.788505][ T1095] netlink: 'syz.0.7013': attribute type 1 has an invalid length. [ 1372.813958][ T1095] netlink: 'syz.0.7013': attribute type 2 has an invalid length. [ 1372.854925][ T1095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1372.881179][ T1104] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1372.895011][ T1104] syzkaller1: Linktype set failed because interface is up [ 1372.910232][T16891] syzkaller1: tun_net_xmit 90 [ 1372.981407][ T1104] hsr0: left allmulticast mode [ 1372.986576][ T1104] hsr_slave_0: left allmulticast mode [ 1372.992560][T16891] syzkaller1: tun_net_xmit 90 [ 1373.001580][ T1104] hsr_slave_1: left allmulticast mode [ 1373.007245][ T1104] hsr0: left promiscuous mode [ 1373.263923][ T1122] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7021'. [ 1373.489894][ T1141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7028'. [ 1373.730995][ T1149] netlink: 'syz.1.7029': attribute type 39 has an invalid length. [ 1374.050064][ T1163] netlink: 'syz.1.7033': attribute type 2 has an invalid length. [ 1374.067192][ T1163] : entered promiscuous mode [ 1374.335337][ T1170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1374.369957][ T1170] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1374.918098][ T1203] ªªªªªª: renamed from wg2 [ 1375.350985][ T1234] tipc: Enabled bearer , priority 0 [ 1375.457848][ T1234] syzkaller0: entered promiscuous mode [ 1375.467416][ T1234] syzkaller0: entered allmulticast mode [ 1375.556370][ T1236] lo speed is unknown, defaulting to 1000 [ 1375.609735][ T1226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1375.623179][ T1233] tipc: Resetting bearer [ 1375.679437][ T1233] tipc: Disabling bearer [ 1375.707592][ T1236] wg1 speed is unknown, defaulting to 1000 [ 1375.729818][ T1236] virt_wifi0 speed is unknown, defaulting to 1000 [ 1375.775817][ T1255] lo speed is unknown, defaulting to 1000 [ 1375.800573][ T1255] wg1 speed is unknown, defaulting to 1000 [ 1375.828209][ T1255] virt_wifi0 speed is unknown, defaulting to 1000 [ 1375.828235][ T1261] lo speed is unknown, defaulting to 1000 [ 1375.856011][ T1261] wg1 speed is unknown, defaulting to 1000 [ 1375.888894][ T1261] virt_wifi0 speed is unknown, defaulting to 1000 [ 1375.952076][ T1262] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1375.964283][ T1262] bond4 (unregistering): Released all slaves [ 1376.017534][ T1268] geneve2: entered promiscuous mode [ 1376.023970][ T1268] geneve2: entered allmulticast mode [ 1376.054394][ T7519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1376.063520][ T7519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1376.114046][T12430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1376.123402][T12430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1376.134539][ T1264] lo speed is unknown, defaulting to 1000 [ 1376.161916][ T1264] wg1 speed is unknown, defaulting to 1000 [ 1376.287179][ T1264] virt_wifi0 speed is unknown, defaulting to 1000 [ 1376.774267][ T1291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1376.812707][ T1291] netlink: 'syz.2.7064': attribute type 13 has an invalid length. [ 1377.127361][ T1300] lo speed is unknown, defaulting to 1000 [ 1377.135296][ T1300] wg1 speed is unknown, defaulting to 1000 [ 1377.143198][ T1300] virt_wifi0 speed is unknown, defaulting to 1000 [ 1377.235174][ T1317] netlink: 'syz.3.7071': attribute type 1 has an invalid length. [ 1377.643704][ T1346] __nla_validate_parse: 9 callbacks suppressed [ 1377.643725][ T1346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7078'. [ 1377.705776][ T1344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 1378.045232][ T1367] tipc: Cannot configure node identity twice [ 1378.166629][ T1374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1378.443773][ T1390] netlink: 'syz.3.7085': attribute type 1 has an invalid length. [ 1378.614800][ T1394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1378.662516][ T1400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7089'. [ 1378.749035][T16891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1378.808957][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1379.043363][ T1417] netlink: 'syz.1.7094': attribute type 1 has an invalid length. [ 1379.065483][ T1417] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7094'. [ 1379.400358][T16884] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1379.430479][ T1422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7095'. [ 1379.462781][ T1423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1379.559670][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7097'. [ 1379.616439][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7099'. [ 1379.637140][ T1436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1379.646706][ T1436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1379.656186][ T1434] netlink: 'syz.1.7099': attribute type 14 has an invalid length. [ 1379.765762][ T1439] tipc: Enabling of bearer rejected, already enabled [ 1380.010082][T16884] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1380.117549][ T1470] 8021q: VLANs not supported on tunl0 [ 1380.124941][ T1471] 8021q: VLANs not supported on tunl0 [ 1380.253451][ T1481] netlink: 'syz.0.7115': attribute type 1 has an invalid length. [ 1380.254345][ T1473] lo speed is unknown, defaulting to 1000 [ 1380.280200][ T1481] netlink: 'syz.0.7115': attribute type 4 has an invalid length. [ 1380.290691][ T1483] netlink: 'syz.4.7113': attribute type 8 has an invalid length. [ 1380.307358][ T1473] wg1 speed is unknown, defaulting to 1000 [ 1380.328016][ T1483] lo speed is unknown, defaulting to 1000 [ 1380.382206][ T1473] virt_wifi0 speed is unknown, defaulting to 1000 [ 1380.382231][ T1483] wg1 speed is unknown, defaulting to 1000 [ 1380.475311][ T1483] virt_wifi0 speed is unknown, defaulting to 1000 [ 1380.527392][ T1495] [†’Ì: entered promiscuous mode [ 1380.552034][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.587445][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.637173][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.696685][ T1488] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1380.761760][ T1502] lo speed is unknown, defaulting to 1000 [ 1380.791955][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.800387][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.865595][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.887698][ T1502] wg1 speed is unknown, defaulting to 1000 [ 1380.890974][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1380.899446][ T1502] virt_wifi0 speed is unknown, defaulting to 1000 [ 1380.925829][ T1502] wg1 speed is unknown, defaulting to 1000 [ 1380.952838][ T1515] netlink: 'syz.1.7122': attribute type 8 has an invalid length. [ 1381.026104][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1381.040875][ T1515] bond0: entered promiscuous mode [ 1381.046418][ T1515] bond_slave_0: entered promiscuous mode [ 1381.064066][ T1515] bond_slave_1: entered promiscuous mode [ 1381.075161][ T1515] geneve0: entered promiscuous mode [ 1381.081799][ T1515] team_slave_0: entered promiscuous mode [ 1381.087819][ T1515] team_slave_0: left promiscuous mode [ 1381.097719][ T1515] bond0: left promiscuous mode [ 1381.110751][ T1515] bond_slave_0: left promiscuous mode [ 1381.119043][ T1515] bond_slave_1: left promiscuous mode [ 1381.129183][ T1515] geneve0: left promiscuous mode [ 1381.226425][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1381.263131][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1381.299703][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1381.367664][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1381.409687][ T1488] wg1 speed is unknown, defaulting to 1000 [ 1381.471628][ T1536] netlink: 'syz.1.7127': attribute type 1 has an invalid length. [ 1381.898976][ T1567] netlink: 'syz.0.7135': attribute type 1 has an invalid length. [ 1381.961551][ T1567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1381.985677][ T1577] bond9: entered promiscuous mode [ 1382.005868][ T1577] bond9: entered allmulticast mode [ 1382.074170][ T1567] batman_adv: batadv0: Removing interface: dummy0 [ 1382.134072][ T1567] bond9: (slave dummy0): making interface the new active one [ 1382.166498][ T1567] dummy0: entered promiscuous mode [ 1382.200013][ T1567] dummy0: entered allmulticast mode [ 1382.300918][ T1567] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1383.363197][ T1612] tipc: Enabling of bearer rejected, failed to enable media [ 1383.654052][ T1618] siw: device registration error -23 [ 1383.740080][ T1620] netlink: 'syz.3.7148': attribute type 1 has an invalid length. [ 1383.769472][ T1620] __nla_validate_parse: 12 callbacks suppressed [ 1383.769492][ T1620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1383.832040][ T1623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7149'. [ 1383.950826][ T1629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7151'. [ 1383.952708][ T1631] Cannot find del_set index 4 as target [ 1384.218401][ T1644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7155'. [ 1384.664633][ T1664] lo speed is unknown, defaulting to 1000 [ 1384.694959][ T1664] wg1 speed is unknown, defaulting to 1000 [ 1384.750792][ T1664] virt_wifi0 speed is unknown, defaulting to 1000 [ 1384.759979][ T1664] wg1 speed is unknown, defaulting to 1000 [ 1384.865422][ T1678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7164'. [ 1384.925858][ T1682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1385.011254][ T1678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7164'. [ 1385.192696][ T1693] mac80211_hwsim hwsim82 wlan1: left allmulticast mode [ 1385.200429][ T1693] macvlan2: left promiscuous mode [ 1385.205602][ T1693] macvlan2: left allmulticast mode [ 1385.225600][ T1693] ipvlan2: left promiscuous mode [ 1385.230868][ T1693] ipvlan2: left allmulticast mode [ 1385.236072][ T1693] geneve1: left allmulticast mode [ 1385.242309][ T1693] gretap2: left promiscuous mode [ 1385.248023][ T1693] mac80211_hwsim hwsim82 syzkaller0: left promiscuous mode [ 1385.289834][ T1693] mac80211_hwsim hwsim82 syzkaller0: left allmulticast mode [ 1385.353268][ T1695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.365417][ T1695] batman_adv: batadv0: Interface activated: dummy0 [ 1385.384016][ T1695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1385.429558][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7171'. [ 1385.481112][ T1706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7171'. [ 1385.505962][ T1707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7170'. [ 1385.552759][ T1702] netlink: 'syz.0.7170': attribute type 1 has an invalid length. [ 1385.639523][ T1704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1385.653937][ T1704] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 1385.763540][ T1713] lo speed is unknown, defaulting to 1000 [ 1385.771508][ T1713] wg1 speed is unknown, defaulting to 1000 [ 1385.779431][ T1713] virt_wifi0 speed is unknown, defaulting to 1000 [ 1385.788500][ T1713] wg1 speed is unknown, defaulting to 1000 [ 1386.250356][ T1718] lo speed is unknown, defaulting to 1000 [ 1386.319459][ T1718] wg1 speed is unknown, defaulting to 1000 [ 1386.329782][ T1718] virt_wifi0 speed is unknown, defaulting to 1000 [ 1386.365054][ T1718] wg1 speed is unknown, defaulting to 1000 [ 1386.494671][ T1744] tipc: Resetting bearer [ 1386.566627][T16884] wg1 speed is unknown, defaulting to 1000 [ 1386.842118][ T1768] x_tables: duplicate underflow at hook 1 [ 1386.967764][ T1772] netlink: 'syz.1.7191': attribute type 1 has an invalid length. [ 1386.988979][ T1776] netlink: 'syz.4.7189': attribute type 1 has an invalid length. [ 1387.118174][ T1780] lo speed is unknown, defaulting to 1000 [ 1387.158484][ T1780] wg1 speed is unknown, defaulting to 1000 [ 1387.166641][ T1780] virt_wifi0 speed is unknown, defaulting to 1000 [ 1387.175293][ T1780] wg1 speed is unknown, defaulting to 1000 [ 1387.194744][ T1793] netlink: 'syz.0.7194': attribute type 33 has an invalid length. [ 1387.266061][ T1795] sctp: [Deprecated]: syz.4.7196 (pid 1795) Use of int in maxseg socket option. [ 1387.266061][ T1795] Use struct sctp_assoc_value instead [ 1387.301403][ T1793] bond9: (slave dummy0): Releasing active interface [ 1387.312169][ T1793] dummy0 (unregistering): left promiscuous mode [ 1387.319068][ T1793] dummy0 (unregistering): left allmulticast mode [ 1387.568077][ T1814] sit0: entered promiscuous mode [ 1387.855696][ T1834] Bluetooth: MGMT ver 1.23 [ 1387.870135][ T1836] macvlan0: entered allmulticast mode [ 1387.877121][ T1836] veth1_vlan: entered allmulticast mode [ 1389.026699][T12432] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1389.040351][T12432] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1389.049270][T12922] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1389.306289][ T1891] __nla_validate_parse: 19 callbacks suppressed [ 1389.306310][ T1891] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1389.355803][ T1891] TC_ACT_REPEAT abuse ? [ 1389.402709][ T1895] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7224'. [ 1389.558561][ T1910] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1389.606802][ T1909] lo speed is unknown, defaulting to 1000 [ 1389.614555][ T1909] wg1 speed is unknown, defaulting to 1000 [ 1389.622657][ T1909] virt_wifi0 speed is unknown, defaulting to 1000 [ 1389.630626][T22054] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1389.632085][ T1909] wg1 speed is unknown, defaulting to 1000 [ 1389.650366][ T1914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7228'. [ 1389.722769][ T1916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7229'. [ 1389.883407][ T1922] netlink: 'syz.0.7231': attribute type 2 has an invalid length. [ 1389.930041][T22054] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1389.944811][ T1925] netlink: 'syz.0.7231': attribute type 2 has an invalid length. [ 1390.025570][ T1922] !: entered promiscuous mode [ 1390.067488][ T1925] !: left promiscuous mode [ 1390.213895][ T1939] FAULT_INJECTION: forcing a failure. [ 1390.213895][ T1939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.285884][ T1939] CPU: 1 UID: 0 PID: 1939 Comm: syz.3.7236 Not tainted syzkaller #0 PREEMPT(full) [ 1390.285917][ T1939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.285931][ T1939] Call Trace: [ 1390.285940][ T1939] [ 1390.285950][ T1939] dump_stack_lvl+0x189/0x250 [ 1390.285988][ T1939] ? __pfx____ratelimit+0x10/0x10 [ 1390.286015][ T1939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.286045][ T1939] ? __pfx__printk+0x10/0x10 [ 1390.286083][ T1939] should_fail_ex+0x414/0x560 [ 1390.286123][ T1939] _copy_to_user+0x31/0xb0 [ 1390.286155][ T1939] simple_read_from_buffer+0xe1/0x170 [ 1390.286193][ T1939] proc_fail_nth_read+0x1b3/0x220 [ 1390.286226][ T1939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1390.286259][ T1939] ? rw_verify_area+0x2a6/0x4d0 [ 1390.286287][ T1939] ? __lock_acquire+0xab9/0xd20 [ 1390.286308][ T1939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1390.286338][ T1939] vfs_read+0x200/0xa30 [ 1390.286372][ T1939] ? fdget_pos+0x247/0x320 [ 1390.286399][ T1939] ? __pfx___mutex_lock+0x10/0x10 [ 1390.286429][ T1939] ? __pfx_vfs_read+0x10/0x10 [ 1390.286461][ T1939] ? __fget_files+0x2a/0x420 [ 1390.286487][ T1939] ? __fget_files+0x3a0/0x420 [ 1390.286507][ T1939] ? __fget_files+0x2a/0x420 [ 1390.286539][ T1939] ksys_read+0x145/0x250 [ 1390.286603][ T1939] ? __pfx_ksys_read+0x10/0x10 [ 1390.286639][ T1939] ? do_syscall_64+0xbe/0xfa0 [ 1390.286671][ T1939] do_syscall_64+0xfa/0xfa0 [ 1390.286696][ T1939] ? lockdep_hardirqs_on+0x9c/0x150 [ 1390.286723][ T1939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.286745][ T1939] ? clear_bhb_loop+0x60/0xb0 [ 1390.286771][ T1939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.286793][ T1939] RIP: 0033:0x7f656838e15c [ 1390.286814][ T1939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1390.286834][ T1939] RSP: 002b:00007f65665d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1390.286858][ T1939] RAX: ffffffffffffffda RBX: 00007f65685e6090 RCX: 00007f656838e15c [ 1390.286874][ T1939] RDX: 000000000000000f RSI: 00007f65665d50a0 RDI: 0000000000000004 [ 1390.286888][ T1939] RBP: 00007f65665d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.286901][ T1939] R10: 0000000000002043 R11: 0000000000000246 R12: 0000000000000001 [ 1390.286914][ T1939] R13: 00007f65685e6128 R14: 00007f65685e6090 R15: 00007ffebe074398 [ 1390.286953][ T1939] [ 1390.569250][ T1941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1390.613003][ T1941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1391.049538][ T1951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7241'. [ 1391.231242][ T1957] l2tp_mt_check: 55 callbacks suppressed [ 1391.231264][ T1957] xt_l2tp: invalid flags combination: 0 [ 1391.251342][ T1960] xt_l2tp: invalid flags combination: 0 [ 1391.262065][ T1957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7243'. [ 1391.273439][ T1958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7242'. [ 1391.325894][ T1957] netlink: 'syz.1.7243': attribute type 1 has an invalid length. [ 1391.358809][ T1957] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7243'. [ 1391.409290][ T1962] lo speed is unknown, defaulting to 1000 [ 1391.450189][ T1962] wg1 speed is unknown, defaulting to 1000 [ 1391.468407][ T1962] virt_wifi0 speed is unknown, defaulting to 1000 [ 1391.490172][ T1962] wg1 speed is unknown, defaulting to 1000 [ 1391.563386][ T1975] netlink: 'syz.4.7246': attribute type 2 has an invalid length. [ 1391.977939][ T1992] netlink: 'syz.4.7251': attribute type 1 has an invalid length. [ 1392.011675][ T1986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.135757][ T1992] bond2: entered promiscuous mode [ 1392.141220][ T1992] bond2: entered allmulticast mode [ 1392.147016][ T1992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1392.366115][ T1986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.491017][ T1986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.610852][ T1986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.667319][ T2019] lo speed is unknown, defaulting to 1000 [ 1392.681027][ T2019] wg1 speed is unknown, defaulting to 1000 [ 1392.698432][ T2019] virt_wifi0 speed is unknown, defaulting to 1000 [ 1392.717617][ T2019] wg1 speed is unknown, defaulting to 1000 [ 1392.770468][ T2027] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1392.789320][ T2027] 0ªî{X¹¦: entered allmulticast mode [ 1392.799414][ T2027] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1392.890441][ T2030] lo speed is unknown, defaulting to 1000 [ 1392.898803][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1392.901411][ T2030] wg1 speed is unknown, defaulting to 1000 [ 1393.125858][ T2035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.145011][ T2035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.193751][T12430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.236279][ T2030] virt_wifi0 speed is unknown, defaulting to 1000 [ 1393.255390][T12430] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.295213][ T2030] wg1 speed is unknown, defaulting to 1000 [ 1393.346803][T12431] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.368837][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1393.477900][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.859210][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1414.009337][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1419.129119][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1452.408986][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1463.679429][ T2069] netlink: 'syz.3.7269': attribute type 13 has an invalid length. [ 1463.687484][ T2069] netlink: 'syz.3.7269': attribute type 17 has an invalid length. [ 1463.899849][ T2081] __nla_validate_parse: 10 callbacks suppressed [ 1463.899872][ T2081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7269'. [ 1463.979488][ T2081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7269'. [ 1464.105735][ T2086] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1464.182945][ T2086] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1464.237692][ T2086] netlink: 'syz.4.7272': attribute type 6 has an invalid length. [ 1464.269254][ T2089] netlink: 'syz.4.7272': attribute type 4 has an invalid length. [ 1464.277412][ T2086] netlink: 'syz.4.7272': attribute type 5 has an invalid length. [ 1464.286122][ T2086] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7272'. [ 1464.334123][ T2086] netlink: 'syz.4.7272': attribute type 4 has an invalid length. [ 1464.568893][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1464.735548][ T2079] lo speed is unknown, defaulting to 1000 [ 1464.775822][ T2079] wg1 speed is unknown, defaulting to 1000 [ 1464.818061][ T2079] virt_wifi0 speed is unknown, defaulting to 1000 [ 1464.836102][ T2079] wg1 speed is unknown, defaulting to 1000 [ 1464.939647][ T2095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7273'. [ 1465.095996][ T2107] netlink: 'syz.3.7275': attribute type 13 has an invalid length. [ 1465.509789][ T2110] lo speed is unknown, defaulting to 1000 [ 1465.535435][ T2110] wg1 speed is unknown, defaulting to 1000 [ 1465.542479][ T2115] lo speed is unknown, defaulting to 1000 [ 1465.562446][ T2110] virt_wifi0 speed is unknown, defaulting to 1000 [ 1465.571987][ T2110] wg1 speed is unknown, defaulting to 1000 [ 1465.655631][ T2115] wg1 speed is unknown, defaulting to 1000 [ 1465.670917][ T2120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7279'. [ 1465.708914][ T2115] virt_wifi0 speed is unknown, defaulting to 1000 [ 1465.717334][ T2115] wg1 speed is unknown, defaulting to 1000 [ 1466.029432][ T2122] lo speed is unknown, defaulting to 1000 [ 1466.081017][ T2122] wg1 speed is unknown, defaulting to 1000 [ 1466.089598][ T2122] virt_wifi0 speed is unknown, defaulting to 1000 [ 1466.097975][ T2122] wg1 speed is unknown, defaulting to 1000 [ 1466.728460][ T2171] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1466.821111][ T2174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1467.101999][ T2196] netlink: 'syz.0.7298': attribute type 1 has an invalid length. [ 1467.116146][ T2196] netlink: 364 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1467.140446][ T2196] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1467.396606][ T2205] netlink: 'syz.3.7300': attribute type 3 has an invalid length. [ 1467.439735][ T2205] netlink: 'syz.3.7300': attribute type 7 has an invalid length. [ 1467.533313][ T2205] pimreg: entered allmulticast mode [ 1467.846729][ T2240] tipc: Enabled bearer , priority 0 [ 1467.862764][ T2240] syzkaller0: entered promiscuous mode [ 1467.884580][ T2240] syzkaller0: entered allmulticast mode [ 1467.947248][ T2248] mac80211_hwsim hwsim86 syzkaller0: entered promiscuous mode [ 1467.955486][ T2248] mac80211_hwsim hwsim86 syzkaller0: entered allmulticast mode [ 1467.969279][ T2240] tipc: Resetting bearer [ 1467.986455][ T2239] tipc: Resetting bearer [ 1468.007551][ T2239] tipc: Disabling bearer [ 1468.316219][ T2265] IPVS: set_ctl: invalid protocol: 22 172.20.20.39:20004 [ 1468.497301][ T2274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1468.941630][ T2300] tipc: Enabled bearer , priority 0 [ 1468.953956][ T2300] syzkaller0: entered promiscuous mode [ 1468.976308][ T2300] syzkaller0: entered allmulticast mode [ 1468.985319][ T2304] __nla_validate_parse: 9 callbacks suppressed [ 1468.985338][ T2304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7328'. [ 1469.028046][ T2300] tipc: Resetting bearer [ 1469.036762][ T2299] tipc: Resetting bearer [ 1469.067216][ T2299] tipc: Disabling bearer [ 1469.307333][ T2328] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 1469.435533][ T2335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7336'. [ 1469.510500][ T2338] bond0: (slave gre0): Error: Device type is different from other slaves [ 1469.640633][ T2352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7341'. [ 1470.465384][ T2376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7347'. [ 1470.487960][ T2378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1470.540929][ T2380] validate_nla: 1 callbacks suppressed [ 1470.540950][ T2380] netlink: 'syz.2.7347': attribute type 33 has an invalid length. [ 1470.647314][ T2382] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1470.725194][ T2385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7349'. [ 1470.763261][ T2385] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1470.876878][ T2391] siw: device registration error -23 [ 1471.049905][ T2406] netlink: 'syz.3.7353': attribute type 3 has an invalid length. [ 1471.061172][ T2406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7353'. [ 1471.136881][ T2408] geneve2: entered promiscuous mode [ 1471.138115][ T2416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1471.152717][T23152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.159886][ T2412] netlink: 384 bytes leftover after parsing attributes in process `syz.4.7356'. [ 1471.177409][T23152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.190373][T23152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.224268][T23152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.332919][ T2424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7358'. [ 1471.381289][ T2428] lo speed is unknown, defaulting to 1000 [ 1471.389755][ T2428] wg1 speed is unknown, defaulting to 1000 [ 1471.397558][ T2428] virt_wifi0 speed is unknown, defaulting to 1000 [ 1471.409620][ T2428] wg1 speed is unknown, defaulting to 1000 [ 1472.308923][ T2480] lo speed is unknown, defaulting to 1000 [ 1472.317577][ T2480] wg1 speed is unknown, defaulting to 1000 [ 1472.325366][ T2480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1472.334295][ T2480] wg1 speed is unknown, defaulting to 1000 [ 1472.686096][ T2514] lo speed is unknown, defaulting to 1000 [ 1472.755002][ T2514] wg1 speed is unknown, defaulting to 1000 [ 1472.847876][ T2514] virt_wifi0 speed is unknown, defaulting to 1000 [ 1472.870879][ T2514] wg1 speed is unknown, defaulting to 1000 [ 1474.197403][ T2598] __nla_validate_parse: 5 callbacks suppressed [ 1474.197425][ T2598] netlink: 212048 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1474.476383][ T2614] netlink: 'syz.0.7393': attribute type 8 has an invalid length. [ 1474.525087][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1474.544646][ T2617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1474.561127][ T2617] netlink: 'syz.1.7394': attribute type 20 has an invalid length. [ 1474.801665][ T2630] lo speed is unknown, defaulting to 1000 [ 1474.827323][ T2630] wg1 speed is unknown, defaulting to 1000 [ 1474.905089][ T2630] virt_wifi0 speed is unknown, defaulting to 1000 [ 1474.913861][ T2630] wg1 speed is unknown, defaulting to 1000 [ 1475.111993][ T2650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7402'. [ 1475.237419][ T2650] IPVS: Scheduler module ip_vs_sip not found [ 1475.279917][ T2659] IPv6: Can't replace route, no match found [ 1475.465352][ T2672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7406'. [ 1475.568396][ T2675] gretap0: left promiscuous mode [ 1475.590183][ T2675] sit0: left promiscuous mode [ 1475.611225][ T2675] 8021q: adding VLAN 0 to HW filter on device ` [ 1475.622501][ T2675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1475.639284][T16884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1475.775968][ T2692] lo speed is unknown, defaulting to 1000 [ 1475.787754][ T2692] wg1 speed is unknown, defaulting to 1000 [ 1475.797049][ T2692] virt_wifi0 speed is unknown, defaulting to 1000 [ 1475.827453][ T2692] wg1 speed is unknown, defaulting to 1000 [ 1475.967887][ T2696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7410'. [ 1476.178970][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1476.208875][T13434] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1476.373060][ T2705] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1476.439245][ T2705] bond6 (unregistering): Released all slaves [ 1477.117854][ T2738] tipc: Enabling of bearer rejected, already enabled [ 1477.139112][ T2738] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 1477.146644][ T2738] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 1477.211749][ T2745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1477.228407][ T2742] lo speed is unknown, defaulting to 1000 [ 1477.236545][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1477.249858][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1477.307495][ T2742] wg1 speed is unknown, defaulting to 1000 [ 1477.315831][ T2742] virt_wifi0 speed is unknown, defaulting to 1000 [ 1477.323011][T16884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1477.333155][ T2742] wg1 speed is unknown, defaulting to 1000 [ 1477.994640][ T2776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7427'. [ 1478.252972][ T2780] lo speed is unknown, defaulting to 1000 [ 1478.321692][ T2780] wg1 speed is unknown, defaulting to 1000 [ 1478.348083][ T2780] virt_wifi0 speed is unknown, defaulting to 1000 [ 1478.366752][ T2780] wg1 speed is unknown, defaulting to 1000 [ 1478.718164][ T2794] FAULT_INJECTION: forcing a failure. [ 1478.718164][ T2794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.738738][ T2794] CPU: 1 UID: 0 PID: 2794 Comm: syz.4.7431 Not tainted syzkaller #0 PREEMPT(full) [ 1478.738767][ T2794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1478.738782][ T2794] Call Trace: [ 1478.738791][ T2794] [ 1478.738801][ T2794] dump_stack_lvl+0x189/0x250 [ 1478.738838][ T2794] ? __pfx____ratelimit+0x10/0x10 [ 1478.738864][ T2794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1478.738894][ T2794] ? __pfx__printk+0x10/0x10 [ 1478.738918][ T2794] ? __might_fault+0xb0/0x130 [ 1478.738963][ T2794] should_fail_ex+0x414/0x560 [ 1478.739004][ T2794] _copy_from_user+0x2d/0xb0 [ 1478.739035][ T2794] ___sys_sendmsg+0x158/0x2a0 [ 1478.739067][ T2794] ? __pfx____sys_sendmsg+0x10/0x10 [ 1478.739136][ T2794] ? __fget_files+0x2a/0x420 [ 1478.739157][ T2794] ? __fget_files+0x3a0/0x420 [ 1478.739191][ T2794] __x64_sys_sendmsg+0x19b/0x260 [ 1478.739227][ T2794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1478.739267][ T2794] ? __pfx_ksys_write+0x10/0x10 [ 1478.739323][ T2794] ? do_syscall_64+0xbe/0xfa0 [ 1478.739356][ T2794] do_syscall_64+0xfa/0xfa0 [ 1478.739387][ T2794] ? lockdep_hardirqs_on+0x9c/0x150 [ 1478.739414][ T2794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.739436][ T2794] ? clear_bhb_loop+0x60/0xb0 [ 1478.739462][ T2794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.739485][ T2794] RIP: 0033:0x7f1b3538f749 [ 1478.739505][ T2794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1478.739525][ T2794] RSP: 002b:00007f1b362f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1478.739549][ T2794] RAX: ffffffffffffffda RBX: 00007f1b355e5fa0 RCX: 00007f1b3538f749 [ 1478.739566][ T2794] RDX: 0000000000040494 RSI: 0000200000000000 RDI: 0000000000000003 [ 1478.739580][ T2794] RBP: 00007f1b362f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.739594][ T2794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.739607][ T2794] R13: 00007f1b355e6038 R14: 00007f1b355e5fa0 R15: 00007ffd099e7b78 [ 1478.739646][ T2794] [ 1479.483251][ T2844] netlink: 'syz.1.7440': attribute type 1 has an invalid length. [ 1479.586418][ T2856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7441'. [ 1479.600131][ T2856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7441'. [ 1479.628296][ T2862] netlink: 'syz.2.7443': attribute type 1 has an invalid length. [ 1479.772061][ T2867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1479.820371][ T2867] syzkaller0: entered promiscuous mode [ 1479.825997][ T2867] syzkaller0: entered allmulticast mode [ 1480.602256][ T2878] FAULT_INJECTION: forcing a failure. [ 1480.602256][ T2878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.615585][ T2878] CPU: 1 UID: 0 PID: 2878 Comm: syz.3.7446 Not tainted syzkaller #0 PREEMPT(full) [ 1480.615615][ T2878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1480.615630][ T2878] Call Trace: [ 1480.615639][ T2878] [ 1480.615648][ T2878] dump_stack_lvl+0x189/0x250 [ 1480.615683][ T2878] ? __pfx____ratelimit+0x10/0x10 [ 1480.615708][ T2878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1480.615737][ T2878] ? __pfx__printk+0x10/0x10 [ 1480.615759][ T2878] ? __might_fault+0xb0/0x130 [ 1480.615798][ T2878] should_fail_ex+0x414/0x560 [ 1480.615832][ T2878] _copy_from_iter+0x1de/0x1790 [ 1480.615871][ T2878] ? __pfx__copy_from_iter+0x10/0x10 [ 1480.615910][ T2878] bcm_sendmsg+0x15b/0x6a0 [ 1480.615947][ T2878] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1480.615984][ T2878] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1480.616019][ T2878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1480.616041][ T2878] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1480.616072][ T2878] __sock_sendmsg+0x21c/0x270 [ 1480.616110][ T2878] ____sys_sendmsg+0x505/0x830 [ 1480.616144][ T2878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1480.616182][ T2878] ? import_iovec+0x74/0xa0 [ 1480.616214][ T2878] ___sys_sendmsg+0x21f/0x2a0 [ 1480.616245][ T2878] ? __pfx____sys_sendmsg+0x10/0x10 [ 1480.616314][ T2878] ? __fget_files+0x2a/0x420 [ 1480.616334][ T2878] ? __fget_files+0x3a0/0x420 [ 1480.616368][ T2878] __x64_sys_sendmsg+0x19b/0x260 [ 1480.616399][ T2878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1480.616439][ T2878] ? __pfx_ksys_write+0x10/0x10 [ 1480.616488][ T2878] ? do_syscall_64+0xbe/0xfa0 [ 1480.616521][ T2878] do_syscall_64+0xfa/0xfa0 [ 1480.616545][ T2878] ? lockdep_hardirqs_on+0x9c/0x150 [ 1480.616571][ T2878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.616592][ T2878] ? clear_bhb_loop+0x60/0xb0 [ 1480.616615][ T2878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.616632][ T2878] RIP: 0033:0x7f656838f749 [ 1480.616651][ T2878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.616668][ T2878] RSP: 002b:00007f65665d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1480.616690][ T2878] RAX: ffffffffffffffda RBX: 00007f65685e6090 RCX: 00007f656838f749 [ 1480.616705][ T2878] RDX: 0000000000040494 RSI: 0000200000000000 RDI: 0000000000000003 [ 1480.616717][ T2878] RBP: 00007f65665d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.616730][ T2878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.616741][ T2878] R13: 00007f65685e6128 R14: 00007f65685e6090 R15: 00007ffebe074398 [ 1480.616775][ T2878] [ 1481.528928][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1481.528983][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 1482.243638][ T2880] lo speed is unknown, defaulting to 1000 [ 1482.254885][ T2880] wg1 speed is unknown, defaulting to 1000 [ 1482.263253][ T2880] virt_wifi0 speed is unknown, defaulting to 1000 [ 1482.275715][ T2880] wg1 speed is unknown, defaulting to 1000 [ 1482.468165][ T2893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7452'. [ 1482.596802][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.611161][ T2903] netlink: 'syz.3.7455': attribute type 2 has an invalid length. [ 1482.619320][ T2903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1482.628396][ T2903] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1482.911734][ T2911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7456'. [ 1483.001168][ T2909] FAULT_INJECTION: forcing a failure. [ 1483.001168][ T2909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.021987][ T2916] lo speed is unknown, defaulting to 1000 [ 1483.031477][ T2916] wg1 speed is unknown, defaulting to 1000 [ 1483.039607][ T2916] virt_wifi0 speed is unknown, defaulting to 1000 [ 1483.050203][ T2916] wg1 speed is unknown, defaulting to 1000 [ 1483.056521][ T2909] CPU: 1 UID: 0 PID: 2909 Comm: syz.2.7457 Not tainted syzkaller #0 PREEMPT(full) [ 1483.056551][ T2909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1483.056565][ T2909] Call Trace: [ 1483.056575][ T2909] [ 1483.056585][ T2909] dump_stack_lvl+0x189/0x250 [ 1483.056622][ T2909] ? __pfx____ratelimit+0x10/0x10 [ 1483.056648][ T2909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.056684][ T2909] ? __pfx__printk+0x10/0x10 [ 1483.056723][ T2909] should_fail_ex+0x414/0x560 [ 1483.056764][ T2909] _copy_to_user+0x31/0xb0 [ 1483.056806][ T2909] simple_read_from_buffer+0xe1/0x170 [ 1483.056847][ T2909] proc_fail_nth_read+0x1b3/0x220 [ 1483.056885][ T2909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1483.056918][ T2909] ? rw_verify_area+0x2a6/0x4d0 [ 1483.056952][ T2909] ? __lock_acquire+0xab9/0xd20 [ 1483.056972][ T2909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1483.057003][ T2909] vfs_read+0x200/0xa30 [ 1483.057033][ T2909] ? fdget_pos+0x247/0x320 [ 1483.057072][ T2909] ? __pfx___mutex_lock+0x10/0x10 [ 1483.057101][ T2909] ? __pfx_vfs_read+0x10/0x10 [ 1483.057135][ T2909] ? __fget_files+0x2a/0x420 [ 1483.057167][ T2909] ? __fget_files+0x3a0/0x420 [ 1483.057187][ T2909] ? __fget_files+0x2a/0x420 [ 1483.057218][ T2909] ksys_read+0x145/0x250 [ 1483.057256][ T2909] ? __pfx_ksys_read+0x10/0x10 [ 1483.057290][ T2909] ? do_syscall_64+0xbe/0xfa0 [ 1483.057322][ T2909] do_syscall_64+0xfa/0xfa0 [ 1483.057349][ T2909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.057369][ T2909] ? asm_common_interrupt+0x26/0x40 [ 1483.057388][ T2909] ? clear_bhb_loop+0x60/0xb0 [ 1483.057419][ T2909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.057439][ T2909] RIP: 0033:0x7fd6a3b8e15c [ 1483.057459][ T2909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1483.057478][ T2909] RSP: 002b:00007fd6a4a6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1483.057506][ T2909] RAX: ffffffffffffffda RBX: 00007fd6a3de5fa0 RCX: 00007fd6a3b8e15c [ 1483.057523][ T2909] RDX: 000000000000000f RSI: 00007fd6a4a6c0a0 RDI: 0000000000000007 [ 1483.057536][ T2909] RBP: 00007fd6a4a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.057554][ T2909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.057568][ T2909] R13: 00007fd6a3de6038 R14: 00007fd6a3de5fa0 R15: 00007ffc37166848 [ 1483.057607][ T2909] [ 1483.552192][ T2927] netlink: 'syz.2.7460': attribute type 8 has an invalid length. [ 1483.731264][ T2927] lo speed is unknown, defaulting to 1000 [ 1483.744573][ T2927] wg1 speed is unknown, defaulting to 1000 [ 1483.811848][ T2927] virt_wifi0 speed is unknown, defaulting to 1000 [ 1483.841489][ T2927] wg1 speed is unknown, defaulting to 1000 [ 1483.934908][ T2926] lo speed is unknown, defaulting to 1000 [ 1484.012564][ T2926] wg1 speed is unknown, defaulting to 1000 [ 1484.082176][ T2926] virt_wifi0 speed is unknown, defaulting to 1000 [ 1484.120690][ T2926] wg1 speed is unknown, defaulting to 1000 [ 1484.235400][ T2953] vlan5: entered promiscuous mode [ 1484.262246][ T2953] ip6gretap0: entered promiscuous mode [ 1484.456662][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7470'. [ 1484.844745][ T30] audit: type=1800 audit(1764563747.858:21): pid=2989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7477" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1179 res=0 errno=0 [ 1484.972546][ T3001] mac80211_hwsim hwsim82 syzkaller0: left promiscuous mode [ 1484.988976][ T3001] mac80211_hwsim hwsim82 syzkaller0: left allmulticast mode [ 1485.034269][ T3002] lo speed is unknown, defaulting to 1000 [ 1485.048904][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1485.066399][ T3002] wg1 speed is unknown, defaulting to 1000 [ 1485.080978][ T3002] virt_wifi0 speed is unknown, defaulting to 1000 [ 1485.091891][ T3002] wg1 speed is unknown, defaulting to 1000 [ 1485.340882][ T3018] netlink: 'syz.2.7484': attribute type 27 has an invalid length. [ 1485.352860][ T3018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1485.467121][ T3022] lo speed is unknown, defaulting to 1000 [ 1485.481853][ T3022] wg1 speed is unknown, defaulting to 1000 [ 1485.498465][ T3022] virt_wifi0 speed is unknown, defaulting to 1000 [ 1485.507659][ T3022] wg1 speed is unknown, defaulting to 1000 [ 1486.281875][ T3058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1486.374475][ T3052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7495'. [ 1486.390269][ T3057] lo speed is unknown, defaulting to 1000 [ 1486.401178][ T3057] wg1 speed is unknown, defaulting to 1000 [ 1486.474638][ T3057] virt_wifi0 speed is unknown, defaulting to 1000 [ 1486.514142][ T3057] wg1 speed is unknown, defaulting to 1000 [ 1486.909211][ T3066] lo speed is unknown, defaulting to 1000 [ 1486.922350][ T3066] wg1 speed is unknown, defaulting to 1000 [ 1486.930593][ T3066] virt_wifi0 speed is unknown, defaulting to 1000 [ 1486.939504][ T3066] wg1 speed is unknown, defaulting to 1000 [ 1487.134276][ T3082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7502'. [ 1487.219486][ T3084] netlink: 'syz.2.7505': attribute type 1 has an invalid length. [ 1487.232847][ T3084] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7505'. [ 1487.327483][ T3084] bond7: option arp_all_targets: invalid value (18446744073709551615) [ 1487.376514][ T3084] bond7 (unregistering): Released all slaves [ 1487.582493][ T3104] dvmrp31: entered allmulticast mode [ 1488.170467][ T3146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7517'. [ 1488.332312][ T3155] netlink: 'syz.3.7521': attribute type 3 has an invalid length. [ 1488.363375][ T3156] netlink: 'syz.3.7521': attribute type 3 has an invalid length. [ 1488.372057][ T3159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1488.392663][ T3155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1488.402821][ T3156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1488.427391][ T3156] batadv0: mtu less than device minimum [ 1488.490813][ T3156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1488.522378][ T3156] bridge_slave_1: left allmulticast mode [ 1488.528901][ T3156] bridge_slave_1: left promiscuous mode [ 1488.534882][ T3156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.549690][ T3156] bridge_slave_0: left allmulticast mode [ 1488.555655][ T3156] bridge_slave_0: left promiscuous mode [ 1488.563254][ T3156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.060302][ T3194] lo speed is unknown, defaulting to 1000 [ 1489.088151][ T3195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1489.104846][ T3194] wg1 speed is unknown, defaulting to 1000 [ 1489.128446][ T3194] virt_wifi0 speed is unknown, defaulting to 1000 [ 1489.144452][ T3194] wg1 speed is unknown, defaulting to 1000 [ 1489.485466][T22054] IPVS: starting estimator thread 0... [ 1489.589042][ T3215] IPVS: using max 25 ests per chain, 60000 per kthread [ 1489.623384][ T3219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1490.161808][ T3241] 0ªî{X¹¦: entered promiscuous mode [ 1490.169227][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1490.347645][ T3244] syzkaller0: entered promiscuous mode [ 1490.353610][ T3244] syzkaller0: entered allmulticast mode [ 1490.806368][ T3266] __nla_validate_parse: 7 callbacks suppressed [ 1490.806389][ T3266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7547'. [ 1492.481530][ T3275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1492.491458][ T3278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7549'. [ 1492.500987][ T3275] netlink: 'syz.0.7550': attribute type 5 has an invalid length. [ 1492.717232][ T3287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1492.787928][ T3287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1492.830508][ T3292] lo speed is unknown, defaulting to 1000 [ 1492.844936][ T3292] wg1 speed is unknown, defaulting to 1000 [ 1492.853016][ T3292] virt_wifi0 speed is unknown, defaulting to 1000 [ 1492.871651][ T3292] wg1 speed is unknown, defaulting to 1000 [ 1493.266213][ T3315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7560'. [ 1493.485636][ T3320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1493.520887][ T3324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7561'. [ 1493.640407][ T3322] lo speed is unknown, defaulting to 1000 [ 1493.648164][ T3322] wg1 speed is unknown, defaulting to 1000 [ 1493.672937][ T3328] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 1493.689286][ T3322] virt_wifi0 speed is unknown, defaulting to 1000 [ 1493.698262][ T3322] wg1 speed is unknown, defaulting to 1000 [ 1494.047680][ T3344] netlink: 'syz.1.7567': attribute type 15 has an invalid length. [ 1494.074208][T12430] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.087388][T12430] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.112338][T12430] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.161221][ T3352] SET target dimension over the limit! [ 1494.167394][T12430] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.200400][ T3353] SET target dimension over the limit! [ 1494.245621][ T3355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7571'. [ 1494.549649][ T3371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7576'. [ 1494.659791][ T3378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7578'. [ 1494.670781][ T3378] netlink: 'syz.1.7578': attribute type 14 has an invalid length. [ 1494.679065][ T3378] netlink: 'syz.1.7578': attribute type 13 has an invalid length. [ 1495.287061][ T3414] netlink: 'syz.1.7588': attribute type 3 has an invalid length. [ 1495.303707][ T3410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1495.935829][ T3445] __nla_validate_parse: 6 callbacks suppressed [ 1495.935850][ T3445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7597'. [ 1496.021008][ T3457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1496.260749][ T3470] netlink: 'syz.2.7604': attribute type 10 has an invalid length. [ 1496.345721][ T3477] batman_adv: batadv0: Interface deactivated: dummy0 [ 1496.352937][ T3477] batman_adv: batadv0: Removing interface: dummy0 [ 1496.371282][ T3477] bridge_slave_0: left allmulticast mode [ 1496.386916][ T3477] bridge_slave_0: left promiscuous mode [ 1496.405897][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.422617][ T3477] bridge_slave_1: left allmulticast mode [ 1496.428412][ T3477] bridge_slave_1: left promiscuous mode [ 1496.437548][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.453947][ T3477] bond0: (slave bond_slave_0): Releasing backup interface [ 1496.476376][ T3477] bond0: (slave bond_slave_1): Releasing backup interface [ 1496.502659][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.552316][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.612885][ T3477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1496.719713][ T3498] bridge0: entered promiscuous mode [ 1496.726876][ T3498] bridge0: port 1(macvtap1) entered blocking state [ 1496.734929][ T3498] bridge0: port 1(macvtap1) entered disabled state [ 1496.748897][ T3498] macvtap1: entered allmulticast mode [ 1496.754337][ T3498] bridge0: entered allmulticast mode [ 1496.861580][ T3498] macvtap1: left allmulticast mode [ 1496.867058][ T3498] bridge0: left allmulticast mode [ 1496.999130][ T3498] bridge0: left promiscuous mode [ 1497.144765][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7613'. [ 1497.154756][ T3510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7614'. [ 1497.313783][ T3514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7618'. [ 1497.338030][ T3514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7618'. [ 1498.025623][ T3549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7626'. [ 1498.562818][ T3572] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7632'. [ 1498.588796][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1498.600352][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1498.611132][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1498.619772][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1498.627527][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1498.640797][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1498.679672][ T3573] lo speed is unknown, defaulting to 1000 [ 1498.687272][ T3573] wg1 speed is unknown, defaulting to 1000 [ 1498.739528][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1498.787884][ T3573] virt_wifi0 speed is unknown, defaulting to 1000 [ 1498.818265][ T3573] wg1 speed is unknown, defaulting to 1000 [ 1499.276309][ T3607] delete_channel: no stack [ 1499.296254][ T3573] chnl_net:caif_netlink_parms(): no params data found [ 1499.491317][ T3623] team0: Port device bridge6 added [ 1499.627246][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.664405][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.674282][ T3573] bridge_slave_0: entered allmulticast mode [ 1499.683029][ T3573] bridge_slave_0: entered promiscuous mode [ 1499.695400][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.728828][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.736184][ T3573] bridge_slave_1: entered allmulticast mode [ 1499.749493][ T3573] bridge_slave_1: entered promiscuous mode [ 1499.885621][ T3573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.933828][ T3573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.136830][ T3573] team0: Port device team_slave_0 added [ 1500.148137][ T3573] team0: Port device team_slave_1 added [ 1500.281253][ T3668] netlink: 'syz.3.7657': attribute type 13 has an invalid length. [ 1500.330674][ T3653] lo speed is unknown, defaulting to 1000 [ 1500.460042][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.467276][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.533053][ T3573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.545926][ T3653] wg1 speed is unknown, defaulting to 1000 [ 1500.555626][ T3675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.635231][ T3653] virt_wifi0 speed is unknown, defaulting to 1000 [ 1500.643103][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.660915][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.724631][ T3573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.732990][ T5834] Bluetooth: hci3: command tx timeout [ 1500.781011][ T3653] wg1 speed is unknown, defaulting to 1000 [ 1500.996777][ T3573] hsr_slave_0: entered promiscuous mode [ 1501.026211][ T3573] hsr_slave_1: entered promiscuous mode [ 1501.045052][ T3573] debugfs: 'hsr0' already exists in 'hsr' [ 1501.064062][ T3573] Cannot create hsr debugfs directory [ 1501.122565][ T3706] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 1501.224833][ T3697] __nla_validate_parse: 12 callbacks suppressed [ 1501.224855][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1501.298870][ T3714] netlink: 'syz.1.7667': attribute type 3 has an invalid length. [ 1502.422656][ T3573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1502.459228][ T3573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1502.505627][ T3573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1502.543487][ T3573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1502.808339][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7677'. [ 1502.817992][ T5834] Bluetooth: hci3: command tx timeout [ 1502.912774][ T3769] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1503.093244][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.137463][ T3573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.161186][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.168464][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.177202][ T3778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7682'. [ 1503.212942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.220248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.249100][ T3780] netlink: 'syz.2.7683': attribute type 3 has an invalid length. [ 1503.262602][ T3780] netlink: 'syz.2.7683': attribute type 7 has an invalid length. [ 1503.270796][ T3780] netlink: 'syz.2.7683': attribute type 8 has an invalid length. [ 1503.278765][ T3780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7683'. [ 1503.395873][ T3790] vlan3: entered promiscuous mode [ 1503.407198][ T3790] bond0: entered promiscuous mode [ 1503.412971][ T3790] bond_slave_0: entered promiscuous mode [ 1503.422893][ T3790] team0: entered promiscuous mode [ 1503.429219][ T3790] team_slave_0: entered promiscuous mode [ 1503.435329][ T3790] team_slave_1: entered promiscuous mode [ 1503.442865][ T3790] geneve0: entered promiscuous mode [ 1503.449217][ T3790] bridge6: entered promiscuous mode [ 1503.734308][ T3805] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1503.996670][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.166256][ T3573] veth0_vlan: entered promiscuous mode [ 1504.190950][ T3825] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1504.242724][ T3573] veth1_vlan: entered promiscuous mode [ 1504.362555][ T3573] veth0_macvtap: entered promiscuous mode [ 1504.384714][ T3573] veth1_macvtap: entered promiscuous mode [ 1504.402672][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1504.422374][ T3829] netlink: 'syz.1.7694': attribute type 10 has an invalid length. [ 1504.458179][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.505106][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.522941][ T3828] lo speed is unknown, defaulting to 1000 [ 1504.544098][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.561164][ T3828] wg1 speed is unknown, defaulting to 1000 [ 1504.561317][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.597134][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.618501][ T3828] virt_wifi0 speed is unknown, defaulting to 1000 [ 1504.626083][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.652381][ T3828] wg1 speed is unknown, defaulting to 1000 [ 1504.816101][T12432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.826929][T12432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.889654][ T5834] Bluetooth: hci3: command tx timeout [ 1504.960033][T23152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.984698][T23152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.461924][ T3848] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7623'. [ 1505.623287][ T3859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1505.771274][ T3864] netlink: 'syz.0.7702': attribute type 10 has an invalid length. [ 1505.854582][ T3864] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1506.455533][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1506.528357][ T3902] netlink: 'syz.1.7710': attribute type 29 has an invalid length. [ 1506.568058][ T3902] netlink: 'syz.1.7710': attribute type 29 has an invalid length. [ 1506.584225][ T3902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1506.829257][ T3907] bond7: option min_links: invalid value (18446744073709551612) [ 1506.841028][ T3907] bond7: option min_links: allowed values 0 - 2147483647 [ 1506.850606][ T3907] bond7 (unregistering): Released all slaves [ 1506.897919][ T3914] bond0: Caught tx_queue_len zero misconfig [ 1506.970604][ T5834] Bluetooth: hci3: command tx timeout [ 1507.082687][ T3923] tipc: Enabling not permitted [ 1507.088799][ T3923] tipc: Enabling of bearer rejected, failed to enable media [ 1507.424187][ T3928] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7718'. [ 1507.887925][ T3948] netlink: 'syz.0.7724': attribute type 1 has an invalid length. [ 1508.044135][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7724'. [ 1508.088777][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1508.299282][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1508.519860][ T3978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7728'. [ 1508.561836][T16884] IPVS: starting estimator thread 0... [ 1508.569331][ T3977] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1508.582574][ T3977] netlink: 'syz.3.7727': attribute type 7 has an invalid length. [ 1508.590882][ T3977] netlink: 'syz.3.7727': attribute type 8 has an invalid length. [ 1508.679355][ T3980] IPVS: using max 25 ests per chain, 60000 per kthread [ 1509.336178][ T3998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7734'. [ 1509.380439][ T3999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7734'. [ 1510.028540][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7738'. [ 1510.112820][ T4022] SET target dimension over the limit! [ 1510.178136][ T4032] netlink: 'syz.4.7740': attribute type 10 has an invalid length. [ 1510.307738][ T4036] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1510.547092][ T4045] lo speed is unknown, defaulting to 1000 [ 1510.581287][ T4045] wg1 speed is unknown, defaulting to 1000 [ 1510.632010][ T4045] virt_wifi0 speed is unknown, defaulting to 1000 [ 1510.643812][ T4045] wg1 speed is unknown, defaulting to 1000 [ 1511.601559][ T4089] __nla_validate_parse: 2 callbacks suppressed [ 1511.601580][ T4089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1511.783661][ T4086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1511.977428][ T4103] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 1511.994986][ T4103] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 1512.005896][ T4103] tipc: Resetting bearer [ 1512.029526][T12432] tipc: Resetting bearer [ 1512.205014][ T4117] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1512.213708][ T4108] IPVS: length: 24 != 14328 [ 1512.617718][ T4134] openvswitch: netlink: Unknown key attributes 2 [ 1512.644833][ T4136] netlink: 'syz.1.7767': attribute type 5 has an invalid length. [ 1512.917010][ T4136] ip6erspan0: entered promiscuous mode [ 1513.122827][ T4146] netlink: 1311 bytes leftover after parsing attributes in process `syz.3.7770'. [ 1513.136943][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7769'. [ 1513.175007][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7770'. [ 1513.305908][ T4154] netlink: 'syz.4.7772': attribute type 3 has an invalid length. [ 1513.324404][ T4154] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7772'. [ 1513.607420][ T4171] team0: Device xfrm1 is of different type [ 1513.641880][ T4178] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7779'. [ 1513.779324][ T4189] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1513.834799][ T4196] netlink: 'syz.1.7780': attribute type 1 has an invalid length. [ 1513.940076][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7783'. [ 1514.284451][ T4220] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7789'. [ 1514.621346][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7788'. [ 1514.656402][ T4230] wireguard0: entered promiscuous mode [ 1514.662807][ T4230] wireguard0: entered allmulticast mode [ 1514.691195][ T4230] team0: Device wireguard0 is of different type [ 1515.056756][ T4259] syzkaller0: entered promiscuous mode [ 1515.068884][ T4259] syzkaller0: entered allmulticast mode [ 1515.793946][ T4305] netlink: 'syz.2.7808': attribute type 2 has an invalid length. [ 1515.843368][ T4305] lo speed is unknown, defaulting to 1000 [ 1515.876199][ T4305] wg1 speed is unknown, defaulting to 1000 [ 1516.017114][ T4305] virt_wifi0 speed is unknown, defaulting to 1000 [ 1516.042384][ T4305] wg1 speed is unknown, defaulting to 1000 [ 1516.586193][ T4354] netlink: 'syz.0.7819': attribute type 12 has an invalid length. [ 1516.722715][ T4359] __nla_validate_parse: 10 callbacks suppressed [ 1516.722741][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7821'. [ 1516.801362][ T4360] lo speed is unknown, defaulting to 1000 [ 1516.801391][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7819'. [ 1516.819971][ T4360] wg1 speed is unknown, defaulting to 1000 [ 1516.911094][ T4354] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7819'. [ 1516.920790][ T4360] virt_wifi0 speed is unknown, defaulting to 1000 [ 1516.930715][ T4360] wg1 speed is unknown, defaulting to 1000 [ 1517.151780][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7823'. [ 1517.317737][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7822'. [ 1517.415930][ T4386] lo speed is unknown, defaulting to 1000 [ 1517.464523][ T4386] wg1 speed is unknown, defaulting to 1000 [ 1517.517976][ T4386] virt_wifi0 speed is unknown, defaulting to 1000 [ 1517.534567][ T4386] wg1 speed is unknown, defaulting to 1000 [ 1517.662873][ T4404] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7826'. [ 1517.754652][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1518.086104][ T4425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7832'. [ 1518.421088][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7834'. [ 1518.621181][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7836'. [ 1518.837611][ T4457] FAULT_INJECTION: forcing a failure. [ 1518.837611][ T4457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.874321][ T4466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1518.882475][ T4457] CPU: 0 UID: 0 PID: 4457 Comm: syz.4.7841 Not tainted syzkaller #0 PREEMPT(full) [ 1518.882514][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1518.882529][ T4457] Call Trace: [ 1518.882538][ T4457] [ 1518.882548][ T4457] dump_stack_lvl+0x189/0x250 [ 1518.882584][ T4457] ? __pfx____ratelimit+0x10/0x10 [ 1518.882611][ T4457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1518.882642][ T4457] ? __pfx__printk+0x10/0x10 [ 1518.882665][ T4457] ? __might_fault+0xb0/0x130 [ 1518.882709][ T4457] should_fail_ex+0x414/0x560 [ 1518.882751][ T4457] _copy_from_user+0x2d/0xb0 [ 1518.882781][ T4457] ___sys_sendmsg+0x158/0x2a0 [ 1518.882812][ T4457] ? __pfx____sys_sendmsg+0x10/0x10 [ 1518.882882][ T4457] ? __fget_files+0x2a/0x420 [ 1518.882903][ T4457] ? __fget_files+0x3a0/0x420 [ 1518.882936][ T4457] __x64_sys_sendmsg+0x19b/0x260 [ 1518.882967][ T4457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1518.883006][ T4457] ? __pfx_ksys_write+0x10/0x10 [ 1518.883042][ T4457] ? do_syscall_64+0xbe/0xfa0 [ 1518.883084][ T4457] do_syscall_64+0xfa/0xfa0 [ 1518.883109][ T4457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1518.883136][ T4457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.883157][ T4457] ? clear_bhb_loop+0x60/0xb0 [ 1518.883185][ T4457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.883207][ T4457] RIP: 0033:0x7f1b3538f749 [ 1518.883228][ T4457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.883247][ T4457] RSP: 002b:00007f1b362f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1518.883271][ T4457] RAX: ffffffffffffffda RBX: 00007f1b355e5fa0 RCX: 00007f1b3538f749 [ 1518.883287][ T4457] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 1518.883302][ T4457] RBP: 00007f1b362f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.883316][ T4457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.883331][ T4457] R13: 00007f1b355e6038 R14: 00007f1b355e5fa0 R15: 00007ffd099e7b78 [ 1518.883369][ T4457] [ 1519.382930][ T4481] tipc: Enabled bearer , priority 0 [ 1519.480060][ T4492] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1519.777601][ T4509] netlink: 'syz.4.7854': attribute type 4 has an invalid length. [ 1519.825642][ T4509] netlink: 'syz.4.7854': attribute type 4 has an invalid length. [ 1519.843573][ T4509] nbd: must specify at least one socket [ 1520.109852][ T4532] FAULT_INJECTION: forcing a failure. [ 1520.109852][ T4532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.129336][ T4532] CPU: 1 UID: 0 PID: 4532 Comm: syz.2.7858 Not tainted syzkaller #0 PREEMPT(full) [ 1520.129368][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1520.129382][ T4532] Call Trace: [ 1520.129392][ T4532] [ 1520.129402][ T4532] dump_stack_lvl+0x189/0x250 [ 1520.129438][ T4532] ? __pfx____ratelimit+0x10/0x10 [ 1520.129464][ T4532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1520.129494][ T4532] ? __pfx__printk+0x10/0x10 [ 1520.129533][ T4532] should_fail_ex+0x414/0x560 [ 1520.129574][ T4532] _copy_from_user+0x2d/0xb0 [ 1520.129603][ T4532] __copy_msghdr+0x3c5/0x5b0 [ 1520.129637][ T4532] ___sys_sendmsg+0x1a5/0x2a0 [ 1520.129669][ T4532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1520.129739][ T4532] ? __fget_files+0x2a/0x420 [ 1520.129759][ T4532] ? __fget_files+0x3a0/0x420 [ 1520.129793][ T4532] __x64_sys_sendmsg+0x19b/0x260 [ 1520.129825][ T4532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1520.129864][ T4532] ? __pfx_ksys_write+0x10/0x10 [ 1520.129900][ T4532] ? do_syscall_64+0xbe/0xfa0 [ 1520.129931][ T4532] do_syscall_64+0xfa/0xfa0 [ 1520.129955][ T4532] ? lockdep_hardirqs_on+0x9c/0x150 [ 1520.129991][ T4532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.130012][ T4532] ? clear_bhb_loop+0x60/0xb0 [ 1520.130039][ T4532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.130060][ T4532] RIP: 0033:0x7fd6a3b8f749 [ 1520.130079][ T4532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.130098][ T4532] RSP: 002b:00007fd6a4a4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1520.130123][ T4532] RAX: ffffffffffffffda RBX: 00007fd6a3de6090 RCX: 00007fd6a3b8f749 [ 1520.130139][ T4532] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 1520.130153][ T4532] RBP: 00007fd6a4a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.130166][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.130178][ T4532] R13: 00007fd6a3de6128 R14: 00007fd6a3de6090 R15: 00007ffc37166848 [ 1520.130215][ T4532] [ 1520.401836][ T4534] lo speed is unknown, defaulting to 1000 [ 1520.425273][ T4534] wg1 speed is unknown, defaulting to 1000 [ 1520.442040][ T4534] virt_wifi0 speed is unknown, defaulting to 1000 [ 1520.469630][T16884] tipc: Node number set to 1697285456 [ 1520.475412][ T4534] wg1 speed is unknown, defaulting to 1000 [ 1520.720643][ T4554] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1520.889262][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1521.126290][ T4578] @0Ù: renamed from bond_slave_1 (while UP) [ 1521.379123][ T4589] netlink: 'syz.3.7876': attribute type 13 has an invalid length. [ 1521.389445][ T4589] netlink: 'syz.3.7876': attribute type 17 has an invalid length. [ 1521.453641][ T4595] FAULT_INJECTION: forcing a failure. [ 1521.453641][ T4595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.537241][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.2.7877 Not tainted syzkaller #0 PREEMPT(full) [ 1521.537274][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1521.537287][ T4595] Call Trace: [ 1521.537297][ T4595] [ 1521.537307][ T4595] dump_stack_lvl+0x189/0x250 [ 1521.537343][ T4595] ? __pfx____ratelimit+0x10/0x10 [ 1521.537370][ T4595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1521.537401][ T4595] ? __pfx__printk+0x10/0x10 [ 1521.537424][ T4595] ? __might_fault+0xb0/0x130 [ 1521.537469][ T4595] should_fail_ex+0x414/0x560 [ 1521.537509][ T4595] _copy_from_user+0x2d/0xb0 [ 1521.537540][ T4595] ____sys_sendmsg+0x2fe/0x830 [ 1521.537575][ T4595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1521.537614][ T4595] ? import_iovec+0x74/0xa0 [ 1521.537648][ T4595] ___sys_sendmsg+0x21f/0x2a0 [ 1521.537679][ T4595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1521.537749][ T4595] ? __fget_files+0x2a/0x420 [ 1521.537771][ T4595] ? __fget_files+0x3a0/0x420 [ 1521.537812][ T4595] __x64_sys_sendmsg+0x19b/0x260 [ 1521.537845][ T4595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1521.537885][ T4595] ? __pfx_ksys_write+0x10/0x10 [ 1521.537922][ T4595] ? do_syscall_64+0xbe/0xfa0 [ 1521.537954][ T4595] do_syscall_64+0xfa/0xfa0 [ 1521.537980][ T4595] ? lockdep_hardirqs_on+0x9c/0x150 [ 1521.538007][ T4595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.538029][ T4595] ? clear_bhb_loop+0x60/0xb0 [ 1521.538055][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.538073][ T4595] RIP: 0033:0x7fd6a3b8f749 [ 1521.538092][ T4595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1521.538111][ T4595] RSP: 002b:00007fd6a4a6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1521.538134][ T4595] RAX: ffffffffffffffda RBX: 00007fd6a3de5fa0 RCX: 00007fd6a3b8f749 [ 1521.538151][ T4595] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 1521.538165][ T4595] RBP: 00007fd6a4a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.538179][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.538191][ T4595] R13: 00007fd6a3de6038 R14: 00007fd6a3de5fa0 R15: 00007ffc37166848 [ 1521.538232][ T4595] [ 1521.832183][ T4600] __nla_validate_parse: 9 callbacks suppressed [ 1521.832206][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1521.890865][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1522.165075][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1522.177531][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1522.587623][ T4635] netlink: 'syz.2.7882': attribute type 21 has an invalid length. [ 1522.623569][ T4635] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7882'. [ 1522.636324][ T4629] lo speed is unknown, defaulting to 1000 [ 1522.645675][ T4635] netlink: 'syz.2.7882': attribute type 4 has an invalid length. [ 1522.674974][ T4635] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7882'. [ 1522.682847][ T4639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7882'. [ 1522.692812][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1522.709412][ T4629] wg1 speed is unknown, defaulting to 1000 [ 1522.745242][ T4624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1522.765717][ T4629] virt_wifi0 speed is unknown, defaulting to 1000 [ 1522.776456][ T4629] wg1 speed is unknown, defaulting to 1000 [ 1522.850421][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7887'. [ 1522.889085][ T4644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7887'. [ 1523.050000][ T4653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 1523.067492][ T4642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1524.427964][ T4724] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1524.843566][ T4738] syzkaller0: entered promiscuous mode [ 1524.849523][ T4738] syzkaller0: entered allmulticast mode [ 1524.966728][ T4743] bond6 (unregistering): Released all slaves [ 1525.426562][ T4774] tipc: Started in network mode [ 1525.432587][ T4774] tipc: Node identity aed1e9fa3733, cluster identity 4711 [ 1525.443606][ T4774] tipc: Enabled bearer , priority 0 [ 1525.466483][ T4774] netlink: 'syz.0.7920': attribute type 2 has an invalid length. [ 1525.480102][ T4774] syzkaller0: entered promiscuous mode [ 1525.496145][ T4774] syzkaller0: entered allmulticast mode [ 1525.587621][ T4776] nbd: socks must be embedded in a SOCK_ITEM attr [ 1525.628082][ T4774] tipc: Resetting bearer [ 1525.639359][ T4773] tipc: Resetting bearer [ 1525.661414][ T4773] tipc: Disabling bearer [ 1525.699197][ T4776] lo speed is unknown, defaulting to 1000 [ 1525.707210][ T4776] wg1 speed is unknown, defaulting to 1000 [ 1525.733292][ T4776] virt_wifi0 speed is unknown, defaulting to 1000 [ 1525.746667][ T4776] wg1 speed is unknown, defaulting to 1000 [ 1525.989788][ T4793] sctp: [Deprecated]: syz.0.7925 (pid 4793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1525.989788][ T4793] Use struct sctp_sack_info instead [ 1526.342692][ T4803] nbd: socks must be embedded in a SOCK_ITEM attr [ 1526.520667][ T4815] No such timeout policy "syz0" [ 1526.871913][ T4825] lo speed is unknown, defaulting to 1000 [ 1526.881676][ T4825] wg1 speed is unknown, defaulting to 1000 [ 1526.890703][ T4825] virt_wifi0 speed is unknown, defaulting to 1000 [ 1526.899657][ T4825] wg1 speed is unknown, defaulting to 1000 [ 1527.278989][ T4858] __nla_validate_parse: 17 callbacks suppressed [ 1527.279014][ T4858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7939'. [ 1527.489769][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7940'. [ 1527.564681][ T4873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7942'. [ 1527.574942][ T4872] sctp: [Deprecated]: syz.0.7942 (pid 4872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1527.574942][ T4872] Use struct sctp_sack_info instead [ 1527.843668][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7945'. [ 1527.861934][ T4888] syzkaller1: entered promiscuous mode [ 1527.867768][ T4888] syzkaller1: entered allmulticast mode [ 1527.939965][ T4892] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1528.063872][ T4899] netlink: 'syz.4.7949': attribute type 4 has an invalid length. [ 1528.078683][ T4899] netlink: 'syz.4.7949': attribute type 4 has an invalid length. [ 1528.148446][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1528.157931][ T4904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1528.336315][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7953'. [ 1528.376722][ T4913] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1528.651158][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7954'. [ 1529.069825][ T4945] netlink: 'syz.3.7961': attribute type 1 has an invalid length. [ 1529.081071][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1529.151206][ T4945] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1529.207397][ T4951] veth5: entered promiscuous mode [ 1529.221757][ T4951] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1529.280751][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.289600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.430619][ T4965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7967'. [ 1529.485324][ T4966] lo speed is unknown, defaulting to 1000 [ 1529.545554][ T4966] wg1 speed is unknown, defaulting to 1000 [ 1529.574262][ T4966] virt_wifi0 speed is unknown, defaulting to 1000 [ 1529.646738][ T4966] wg1 speed is unknown, defaulting to 1000 [ 1530.502205][ T5016] siw: device registration error -23 [ 1530.682808][ T5027] netlink: 'syz.3.7980': attribute type 1 has an invalid length. [ 1530.702980][ T5027] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1531.247766][ T5054] netlink: 'syz.1.7986': attribute type 13 has an invalid length. [ 1531.262829][ T5054] netlink: 'syz.1.7986': attribute type 17 has an invalid length. [ 1531.274542][ T5056] netlink: 'syz.4.7987': attribute type 13 has an invalid length. [ 1531.429662][ T5063] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1531.473745][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.501463][ T5054] batman_adv: batadv0: Interface activated: dummy0 [ 1531.508524][ T5054] batadv0: mtu less than device minimum [ 1531.516514][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.536274][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.548236][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.560420][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.572446][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1531.766058][ T5083] syzkaller0: create flow: hash 967072194 index 1 [ 1532.341237][ T5114] __nla_validate_parse: 10 callbacks suppressed [ 1532.341260][ T5114] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8003'. [ 1532.399715][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8001'. [ 1532.411562][ T5083] syzkaller0: delete flow: hash 967072194 index 1 [ 1534.505257][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8003'. [ 1534.612176][ T5126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8007'. [ 1534.621621][ T5126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8007'. [ 1534.631792][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8007'. [ 1534.685429][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1534.863181][ T5151] netlink: 'syz.1.8011': attribute type 12 has an invalid length. [ 1535.073327][ T5164] netlink: 'syz.3.8013': attribute type 15 has an invalid length. [ 1535.163491][ T5165] lo speed is unknown, defaulting to 1000 [ 1535.179088][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1535.185437][ T5165] wg1 speed is unknown, defaulting to 1000 [ 1535.222694][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1535.223588][ T5165] virt_wifi0 speed is unknown, defaulting to 1000 [ 1535.255639][ T5165] wg1 speed is unknown, defaulting to 1000 [ 1535.275099][ T5168] lo speed is unknown, defaulting to 1000 [ 1535.283199][ T5168] wg1 speed is unknown, defaulting to 1000 [ 1535.292885][ T5168] virt_wifi0 speed is unknown, defaulting to 1000 [ 1535.316143][ T5168] wg1 speed is unknown, defaulting to 1000 [ 1535.842410][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1536.123605][ T5200] mac80211_hwsim hwsim86 syzkaller0: left promiscuous mode [ 1536.131924][ T5200] mac80211_hwsim hwsim86 syzkaller0: left allmulticast mode [ 1536.468080][ T5222] netlink: 'syz.3.8030': attribute type 1 has an invalid length. [ 1536.599729][ T5222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1536.659752][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1536.703007][ T5232] bond7: (slave batadv1): making interface the new active one [ 1536.722301][ T5232] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 1537.077733][ T5234] bond7 (unregistering): (slave batadv1): Releasing active interface [ 1537.091917][ T5234] bond7 (unregistering): Released all slaves [ 1537.295775][ T5257] lo speed is unknown, defaulting to 1000 [ 1537.313287][ T5257] wg1 speed is unknown, defaulting to 1000 [ 1537.324327][ T5257] virt_wifi0 speed is unknown, defaulting to 1000 [ 1537.391249][ T5257] wg1 speed is unknown, defaulting to 1000 [ 1537.546193][ T5276] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1538.188773][ T5285] syzkaller1: entered promiscuous mode [ 1538.194375][ T5285] syzkaller1: entered allmulticast mode [ 1538.441836][ T5289] __nla_validate_parse: 7 callbacks suppressed [ 1538.441857][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8045'. [ 1538.863309][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1538.920062][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8050'. [ 1538.944871][ T5311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8050'. [ 1539.092085][ T5318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1539.117182][ T5311] lo speed is unknown, defaulting to 1000 [ 1539.171814][ T5316] 8021q: VLANs not supported on ip6_vti0 [ 1539.192585][ T5311] wg1 speed is unknown, defaulting to 1000 [ 1539.200066][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1539.214534][ T5311] virt_wifi0 speed is unknown, defaulting to 1000 [ 1539.228466][ T5311] wg1 speed is unknown, defaulting to 1000 [ 1539.562008][ T5332] netlink: 'syz.4.8054': attribute type 8 has an invalid length. [ 1539.570435][ T5333] netlink: 'syz.4.8054': attribute type 8 has an invalid length. [ 1539.578340][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1539.588425][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1539.607647][ T5332] bond0: entered promiscuous mode [ 1539.617266][ T5332] bond0: left promiscuous mode [ 1539.664359][ T5333] bond0: entered promiscuous mode [ 1539.671346][ T5333] bond0: left promiscuous mode [ 1539.760375][ T5337] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1539.774032][ T5337] bond5 (unregistering): Released all slaves [ 1543.929059][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1604.888804][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1607.929422][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1613.083294][T11691] veth7: left allmulticast mode [ 1613.088209][T11691] veth7: left promiscuous mode [ 1613.093778][T11691] bridge4: port 2(veth7) entered disabled state [ 1613.102605][T11691] ip6gretap4: left allmulticast mode [ 1613.107966][T11691] ip6gretap4: left promiscuous mode [ 1613.113748][T11691] bridge4: port 1(ip6gretap4) entered disabled state [ 1613.509826][T11691] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1613.561474][T11691] dvmrp0 (unregistering): left allmulticast mode [ 1614.074969][T11691] bond1 (unregistering): Released all slaves [ 1614.204905][T11691] bond2 (unregistering): Released all slaves [ 1614.223478][T11691] bond0 (unregistering): Released all slaves [ 1614.350285][T11691] bond3 (unregistering): Released all slaves [ 1614.471960][T11691] bond4 (unregistering): Released all slaves [ 1614.485921][T11691] bond5 (unregistering): Released all slaves [ 1614.501188][T11691] bond6 (unregistering): Released all slaves [ 1614.515567][T11691] bond7 (unregistering): Released all slaves [ 1614.536292][T11691] bond8 (unregistering): Released all slaves [ 1614.669629][T11691] bond9 (unregistering): Released all slaves [ 1614.795202][T11691] [†’Ì: left promiscuous mode [ 1614.855808][T11691] tipc: Disabling bearer [ 1614.865998][T11691] tipc: Left network mode [ 1656.088919][ T5375] Bluetooth: hci3: command 0x0405 tx timeout [ 1659.129268][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1684.729020][ T31] INFO: task kworker/1:15:6512 blocked for more than 143 seconds. [ 1684.736935][ T31] Not tainted syzkaller #0 [ 1684.742101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1684.750927][ T31] task:kworker/1:15 state:D stack:22936 pid:6512 tgid:6512 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1684.763280][ T31] Workqueue: events rfkill_sync_work [ 1684.768764][ T31] Call Trace: [ 1684.772070][ T31] [ 1684.775007][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1684.779672][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1684.785712][ T31] ? __pfx___schedule+0x10/0x10 [ 1684.790919][ T31] ? schedule+0x91/0x360 [ 1684.795217][ T31] schedule+0x165/0x360 [ 1684.799496][ T31] schedule_preempt_disabled+0x13/0x30 [ 1684.804998][ T31] __mutex_lock+0x7e6/0x1350 [ 1684.815915][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1684.820819][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1684.826187][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1684.831825][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1684.837069][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1684.843045][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1684.849677][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1684.855451][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1684.860742][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1684.866521][ T31] rfkill_set_block+0x1d2/0x440 [ 1684.871696][ T31] rfkill_sync_work+0x114/0x200 [ 1684.876608][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1684.882493][ T31] process_scheduled_works+0xae1/0x17b0 [ 1684.888119][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1684.894440][ T31] worker_thread+0x8a0/0xda0 [ 1684.899186][ T31] kthread+0x711/0x8a0 [ 1684.903302][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1684.908457][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.913668][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1684.918946][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1684.924183][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.929045][ T31] ret_from_fork+0x4bc/0x870 [ 1684.933680][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.939209][ T31] ? __switch_to_asm+0x39/0x70 [ 1684.944020][ T31] ? __switch_to_asm+0x33/0x70 [ 1684.949023][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.953668][ T31] ret_from_fork_asm+0x1a/0x30 [ 1684.958562][ T31] [ 1684.961626][ T31] INFO: task kworker/1:0:13434 blocked for more than 143 seconds. [ 1684.969991][ T31] Not tainted syzkaller #0 [ 1684.974965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1684.983849][ T31] task:kworker/1:0 state:D stack:22792 pid:13434 tgid:13434 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1684.996137][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1685.002963][ T31] Call Trace: [ 1685.006269][ T31] [ 1685.009492][ T31] __schedule+0x1798/0x4cc0 [ 1685.014187][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1685.048774][ T31] ? __pfx___schedule+0x10/0x10 [ 1685.053733][ T31] ? schedule+0x91/0x360 [ 1685.058029][ T31] schedule+0x165/0x360 [ 1685.091586][ T31] schedule_preempt_disabled+0x13/0x30 [ 1685.097218][ T31] __mutex_lock+0x7e6/0x1350 [ 1685.102144][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1685.106972][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1685.113359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1685.119089][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1685.124869][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1685.130837][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1685.136972][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1685.142886][ T31] process_scheduled_works+0xae1/0x17b0 [ 1685.148856][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1685.154870][ T31] worker_thread+0x8a0/0xda0 [ 1685.159643][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1685.166118][ T31] ? __kthread_parkme+0x7b/0x200 [ 1685.171489][ T31] kthread+0x711/0x8a0 [ 1685.175618][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1685.181384][ T31] ? __pfx_kthread+0x10/0x10 [ 1685.186026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1685.191473][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.196719][ T31] ? __pfx_kthread+0x10/0x10 [ 1685.201606][ T31] ret_from_fork+0x4bc/0x870 [ 1685.206382][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.212415][ T31] ? __switch_to_asm+0x39/0x70 [ 1685.217442][ T31] ? __switch_to_asm+0x33/0x70 [ 1685.222333][ T31] ? __pfx_kthread+0x10/0x10 [ 1685.226993][ T31] ret_from_fork_asm+0x1a/0x30 [ 1685.231976][ T31] [ 1685.235089][ T31] INFO: task syz.2.8005:5127 blocked for more than 143 seconds. [ 1685.243418][ T31] Not tainted syzkaller #0 [ 1685.248390][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1685.257375][ T31] task:syz.2.8005 state:D stack:27904 pid:5127 tgid:5127 ppid:29099 task_flags:0x400040 flags:0x00080002 [ 1685.269695][ T31] Call Trace: [ 1685.272988][ T31] [ 1685.275947][ T31] __schedule+0x1798/0x4cc0 [ 1685.280529][ T31] ? __kernel_text_address+0xd/0x40 [ 1685.285759][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1685.292113][ T31] ? arch_stack_walk+0xfc/0x150 [ 1685.296996][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.302142][ T31] ? __pfx___schedule+0x10/0x10 [ 1685.307028][ T31] ? schedule+0x91/0x360 [ 1685.311360][ T31] schedule+0x165/0x360 [ 1685.315578][ T31] schedule_timeout+0x9a/0x270 [ 1685.320505][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1685.326005][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1685.331505][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.336823][ T31] ? wait_for_completion+0x267/0x5d0 [ 1685.342183][ T31] wait_for_completion+0x2bf/0x5d0 [ 1685.347321][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1685.353047][ T31] ? __flush_work+0xd2/0xbc0 [ 1685.357672][ T31] ? __flush_work+0xd2/0xbc0 [ 1685.362705][ T31] __flush_work+0x9b9/0xbc0 [ 1685.367234][ T31] ? __flush_work+0xd2/0xbc0 [ 1685.372312][ T31] ? __pfx___flush_work+0x10/0x10 [ 1685.377394][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1685.382742][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1685.387865][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1685.393887][ T31] __cancel_work_sync+0xbe/0x110 [ 1685.399115][ T31] rfkill_unregister+0x92/0x220 [ 1685.404014][ T31] nfc_unregister_device+0x96/0x2a0 [ 1685.409345][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1685.415124][ T31] virtual_ncidev_close+0x56/0x90 [ 1685.420443][ T31] __fput+0x44c/0xa70 [ 1685.424536][ T31] task_work_run+0x1d4/0x260 [ 1685.429185][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1685.434317][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 1685.439869][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 1685.445249][ T31] do_syscall_64+0x2bd/0xfa0 [ 1685.450129][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.455395][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.461572][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1685.466264][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.472376][ T31] RIP: 0033:0x7fd6a3b8f749 [ 1685.476890][ T31] RSP: 002b:00007ffc371669a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1685.485644][ T31] RAX: 0000000000000000 RBX: 0000000000176a7d RCX: 00007fd6a3b8f749 [ 1685.493706][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1685.501730][ T31] RBP: 00007fd6a3de7da0 R08: 0000000000000001 R09: 0000001a37166c9f [ 1685.510003][ T31] R10: 0000001b2d120000 R11: 0000000000000246 R12: 00007fd6a3de5fac [ 1685.518007][ T31] R13: 00007fd6a3de5fa0 R14: ffffffffffffffff R15: 00007ffc37166ac0 [ 1685.526217][ T31] [ 1685.529374][ T31] INFO: task syz.3.8049:5302 blocked for more than 144 seconds. [ 1685.537040][ T31] Not tainted syzkaller #0 [ 1685.542424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1685.551221][ T31] task:syz.3.8049 state:D stack:27112 pid:5302 tgid:5301 ppid:30506 task_flags:0x400040 flags:0x00080002 [ 1685.563305][ T31] Call Trace: [ 1685.566642][ T31] [ 1685.569889][ T31] __schedule+0x1798/0x4cc0 [ 1685.574456][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.579591][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.584485][ T31] ? __pfx___schedule+0x10/0x10 [ 1685.589477][ T31] ? schedule+0x91/0x360 [ 1685.593755][ T31] schedule+0x165/0x360 [ 1685.597920][ T31] schedule_preempt_disabled+0x13/0x30 [ 1685.603702][ T31] __mutex_lock+0x7e6/0x1350 [ 1685.608329][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1685.613195][ T31] ? rfkill_fop_open+0x12d/0x820 [ 1685.618149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1685.623236][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1685.629045][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1685.634462][ T31] rfkill_fop_open+0x12d/0x820 [ 1685.639309][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1685.644690][ T31] misc_open+0x2d5/0x350 [ 1685.649004][ T31] chrdev_open+0x4cc/0x5e0 [ 1685.653437][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1685.666012][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1685.672443][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1685.677398][ T31] do_dentry_open+0x953/0x13f0 [ 1685.682244][ T31] vfs_open+0x3b/0x340 [ 1685.686381][ T31] ? path_openat+0x2ecd/0x3830 [ 1685.691819][ T31] path_openat+0x2ee5/0x3830 [ 1685.696494][ T31] ? __pfx_path_openat+0x10/0x10 [ 1685.701653][ T31] do_filp_open+0x1fa/0x410 [ 1685.706217][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.711154][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1685.716212][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1685.721352][ T31] ? alloc_fd+0x64c/0x6c0 [ 1685.725709][ T31] do_sys_openat2+0x121/0x1c0 [ 1685.730522][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1685.735740][ T31] ? rcu_is_watching+0x15/0xb0 [ 1685.740569][ T31] __x64_sys_openat+0x138/0x170 [ 1685.745436][ T31] do_syscall_64+0xfa/0xfa0 [ 1685.750260][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.755588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.761730][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1685.766540][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.772853][ T31] RIP: 0033:0x7f656838f749 [ 1685.777298][ T31] RSP: 002b:00007f65665f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1685.786050][ T31] RAX: ffffffffffffffda RBX: 00007f65685e5fa0 RCX: 00007f656838f749 [ 1685.794207][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1685.802393][ T31] RBP: 00007f6568413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1685.810662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.818810][ T31] R13: 00007f65685e6038 R14: 00007f65685e5fa0 R15: 00007ffebe074398 [ 1685.826845][ T31] [ 1685.830472][ T31] INFO: task syz.3.8049:5306 blocked for more than 144 seconds. [ 1685.838270][ T31] Not tainted syzkaller #0 [ 1685.848909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1685.857626][ T31] task:syz.3.8049 state:D stack:28296 pid:5306 tgid:5301 ppid:30506 task_flags:0x400040 flags:0x00080002 [ 1685.872255][ T31] Call Trace: [ 1685.875596][ T31] [ 1685.878992][ T31] __schedule+0x1798/0x4cc0 [ 1685.883558][ T31] ? security_file_open+0xb1/0x270 [ 1685.888764][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.893678][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.899006][ T31] ? __pfx___schedule+0x10/0x10 [ 1685.903923][ T31] ? schedule+0x91/0x360 [ 1685.908175][ T31] schedule+0x165/0x360 [ 1685.912605][ T31] schedule_preempt_disabled+0x13/0x30 [ 1685.918166][ T31] __mutex_lock+0x7e6/0x1350 [ 1685.922944][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1685.927729][ T31] ? misc_open+0x51/0x350 [ 1685.932364][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1685.937607][ T31] misc_open+0x51/0x350 [ 1685.941929][ T31] chrdev_open+0x4cc/0x5e0 [ 1685.946411][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1685.951482][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1685.958043][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1685.963261][ T31] do_dentry_open+0x953/0x13f0 [ 1685.968087][ T31] vfs_open+0x3b/0x340 [ 1685.972256][ T31] ? path_openat+0x2ecd/0x3830 [ 1685.977049][ T31] path_openat+0x2ee5/0x3830 [ 1685.981781][ T31] ? __pfx_path_openat+0x10/0x10 [ 1685.986761][ T31] do_filp_open+0x1fa/0x410 [ 1685.991744][ T31] ? __lock_acquire+0xab9/0xd20 [ 1685.996648][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1686.001779][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1686.006647][ T31] ? alloc_fd+0x64c/0x6c0 [ 1686.011458][ T31] do_sys_openat2+0x121/0x1c0 [ 1686.016194][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1686.022120][ T31] ? rcu_is_watching+0x15/0xb0 [ 1686.027408][ T31] __x64_sys_openat+0x138/0x170 [ 1686.032385][ T31] do_syscall_64+0xfa/0xfa0 [ 1686.036997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.042411][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.048994][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1686.053720][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.059702][ T31] RIP: 0033:0x7f656838f749 [ 1686.064257][ T31] RSP: 002b:00007f65665d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1686.073167][ T31] RAX: ffffffffffffffda RBX: 00007f65685e6090 RCX: 00007f656838f749 [ 1686.081579][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1686.089806][ T31] RBP: 00007f6568413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1686.097879][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.106005][ T31] R13: 00007f65685e6128 R14: 00007f65685e6090 R15: 00007ffebe074398 [ 1686.114330][ T31] [ 1686.117389][ T31] INFO: task syz.3.8049:5307 blocked for more than 144 seconds. [ 1686.125179][ T31] Not tainted syzkaller #0 [ 1686.130317][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1686.139524][ T31] task:syz.3.8049 state:D stack:26888 pid:5307 tgid:5301 ppid:30506 task_flags:0x400140 flags:0x00080002 [ 1686.151577][ T31] Call Trace: [ 1686.154865][ T31] [ 1686.157804][ T31] __schedule+0x1798/0x4cc0 [ 1686.162406][ T31] ? security_file_open+0xb1/0x270 [ 1686.167559][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.174448][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.179413][ T31] ? __pfx___schedule+0x10/0x10 [ 1686.184310][ T31] ? schedule+0x91/0x360 [ 1686.188667][ T31] schedule+0x165/0x360 [ 1686.192885][ T31] schedule_preempt_disabled+0x13/0x30 [ 1686.198362][ T31] __mutex_lock+0x7e6/0x1350 [ 1686.203358][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1686.208145][ T31] ? misc_open+0x51/0x350 [ 1686.212562][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1686.217623][ T31] misc_open+0x51/0x350 [ 1686.221871][ T31] chrdev_open+0x4cc/0x5e0 [ 1686.226335][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1686.231592][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1686.237951][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1686.243203][ T31] do_dentry_open+0x953/0x13f0 [ 1686.248146][ T31] vfs_open+0x3b/0x340 [ 1686.252682][ T31] ? path_openat+0x2ecd/0x3830 [ 1686.257481][ T31] path_openat+0x2ee5/0x3830 [ 1686.262570][ T31] ? __pfx_path_openat+0x10/0x10 [ 1686.267679][ T31] do_filp_open+0x1fa/0x410 [ 1686.272417][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.277297][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1686.282464][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1686.287341][ T31] ? alloc_fd+0x64c/0x6c0 [ 1686.292159][ T31] do_sys_openat2+0x121/0x1c0 [ 1686.296971][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1686.302389][ T31] ? rcu_is_watching+0x15/0xb0 [ 1686.307204][ T31] __x64_sys_openat+0x138/0x170 [ 1686.312169][ T31] do_syscall_64+0xfa/0xfa0 [ 1686.316721][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.322212][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.328571][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1686.333286][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.339264][ T31] RIP: 0033:0x7f656838f749 [ 1686.343804][ T31] RSP: 002b:00007f65665b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1686.352698][ T31] RAX: ffffffffffffffda RBX: 00007f65685e6180 RCX: 00007f656838f749 [ 1686.360735][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1686.368756][ T31] RBP: 00007f6568413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1686.376733][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.385000][ T31] R13: 00007f65685e6218 R14: 00007f65685e6180 R15: 00007ffebe074398 [ 1686.393205][ T31] [ 1686.396262][ T31] INFO: task syz.0.8052:5320 blocked for more than 145 seconds. [ 1686.404028][ T31] Not tainted syzkaller #0 [ 1686.409579][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1686.418371][ T31] task:syz.0.8052 state:D stack:26888 pid:5320 tgid:5319 ppid:3573 task_flags:0x400140 flags:0x00080002 [ 1686.430975][ T31] Call Trace: [ 1686.434295][ T31] [ 1686.437388][ T31] __schedule+0x1798/0x4cc0 [ 1686.442251][ T31] ? security_file_open+0xb1/0x270 [ 1686.447637][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.452598][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.457550][ T31] ? __pfx___schedule+0x10/0x10 [ 1686.462912][ T31] ? schedule+0x91/0x360 [ 1686.467264][ T31] schedule+0x165/0x360 [ 1686.471732][ T31] schedule_preempt_disabled+0x13/0x30 [ 1686.477285][ T31] __mutex_lock+0x7e6/0x1350 [ 1686.482040][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1686.486829][ T31] ? misc_open+0x51/0x350 [ 1686.491243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1686.496301][ T31] misc_open+0x51/0x350 [ 1686.500775][ T31] chrdev_open+0x4cc/0x5e0 [ 1686.505205][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1686.510309][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1686.516782][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1686.521813][ T31] do_dentry_open+0x953/0x13f0 [ 1686.526609][ T31] vfs_open+0x3b/0x340 [ 1686.531024][ T31] ? path_openat+0x2ecd/0x3830 [ 1686.535820][ T31] path_openat+0x2ee5/0x3830 [ 1686.540564][ T31] ? __pfx_path_openat+0x10/0x10 [ 1686.545554][ T31] do_filp_open+0x1fa/0x410 [ 1686.550228][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.555136][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1686.560654][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1686.565542][ T31] ? alloc_fd+0x64c/0x6c0 [ 1686.570279][ T31] do_sys_openat2+0x121/0x1c0 [ 1686.575093][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1686.580362][ T31] ? rcu_is_watching+0x15/0xb0 [ 1686.585186][ T31] __x64_sys_openat+0x138/0x170 [ 1686.590453][ T31] do_syscall_64+0xfa/0xfa0 [ 1686.595063][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.600343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.606548][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1686.611374][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.617289][ T31] RIP: 0033:0x7f73ee98f749 [ 1686.622047][ T31] RSP: 002b:00007f73ef783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1686.630654][ T31] RAX: ffffffffffffffda RBX: 00007f73eebe5fa0 RCX: 00007f73ee98f749 [ 1686.638712][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1686.646706][ T31] RBP: 00007f73eea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1686.655405][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.663534][ T31] R13: 00007f73eebe6038 R14: 00007f73eebe5fa0 R15: 00007fff26c84e78 [ 1686.671629][ T31] [ 1686.674683][ T31] INFO: task syz.1.8059:5345 blocked for more than 145 seconds. [ 1686.683172][ T31] Not tainted syzkaller #0 [ 1686.688119][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1686.696835][ T31] task:syz.1.8059 state:D stack:28040 pid:5345 tgid:5344 ppid:30160 task_flags:0x400040 flags:0x00080002 [ 1686.709076][ T31] Call Trace: [ 1686.712367][ T31] [ 1686.715312][ T31] __schedule+0x1798/0x4cc0 [ 1686.719994][ T31] ? security_file_open+0xb1/0x270 [ 1686.725156][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.730338][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.735340][ T31] ? __pfx___schedule+0x10/0x10 [ 1686.741025][ T31] ? schedule+0x91/0x360 [ 1686.745320][ T31] schedule+0x165/0x360 [ 1686.749751][ T31] schedule_preempt_disabled+0x13/0x30 [ 1686.755350][ T31] __mutex_lock+0x7e6/0x1350 [ 1686.760054][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1686.764882][ T31] ? misc_open+0x51/0x350 [ 1686.769523][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1686.774618][ T31] misc_open+0x51/0x350 [ 1686.778889][ T31] chrdev_open+0x4cc/0x5e0 [ 1686.783524][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1686.788905][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1686.795276][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1686.800534][ T31] do_dentry_open+0x953/0x13f0 [ 1686.805326][ T31] vfs_open+0x3b/0x340 [ 1686.809703][ T31] ? path_openat+0x2ecd/0x3830 [ 1686.814506][ T31] path_openat+0x2ee5/0x3830 [ 1686.819200][ T31] ? __pfx_path_openat+0x10/0x10 [ 1686.824190][ T31] do_filp_open+0x1fa/0x410 [ 1686.829158][ T31] ? __lock_acquire+0xab9/0xd20 [ 1686.834117][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1686.839349][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1686.844359][ T31] ? alloc_fd+0x64c/0x6c0 [ 1686.848818][ T31] do_sys_openat2+0x121/0x1c0 [ 1686.853639][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1686.859454][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 1686.864795][ T31] __x64_sys_openat+0x138/0x170 [ 1686.869852][ T31] do_syscall_64+0xfa/0xfa0 [ 1686.874366][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.879725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.885820][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1686.890819][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.896745][ T31] RIP: 0033:0x7f95e958f749 [ 1686.901468][ T31] RSP: 002b:00007f95e77f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1686.910021][ T31] RAX: ffffffffffffffda RBX: 00007f95e97e5fa0 RCX: 00007f95e958f749 [ 1686.918043][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1686.926450][ T31] RBP: 00007f95e9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1686.934605][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.942791][ T31] R13: 00007f95e97e6038 R14: 00007f95e97e5fa0 R15: 00007ffdfc4406b8 [ 1686.951134][ T31] [ 1686.954198][ T31] INFO: task syz.4.8061:5352 blocked for more than 145 seconds. [ 1686.962069][ T31] Not tainted syzkaller #0 [ 1686.967017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1686.975801][ T31] task:syz.4.8061 state:D stack:28296 pid:5352 tgid:5351 ppid:29539 task_flags:0x400040 flags:0x00080002 [ 1686.988113][ T31] Call Trace: [ 1686.991473][ T31] [ 1686.994683][ T31] __schedule+0x1798/0x4cc0 [ 1686.999347][ T31] ? security_file_open+0xb1/0x270 [ 1687.004481][ T31] ? __lock_acquire+0xab9/0xd20 [ 1687.009765][ T31] ? __lock_acquire+0xab9/0xd20 [ 1687.014645][ T31] ? __pfx___schedule+0x10/0x10 [ 1687.019677][ T31] ? schedule+0x91/0x360 [ 1687.023938][ T31] schedule+0x165/0x360 [ 1687.028322][ T31] schedule_preempt_disabled+0x13/0x30 [ 1687.034114][ T31] __mutex_lock+0x7e6/0x1350 [ 1687.039208][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1687.044004][ T31] ? misc_open+0x51/0x350 [ 1687.048367][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1687.053701][ T31] misc_open+0x51/0x350 [ 1687.057898][ T31] chrdev_open+0x4cc/0x5e0 [ 1687.062563][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1687.067554][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1687.074192][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1687.079262][ T31] do_dentry_open+0x953/0x13f0 [ 1687.084055][ T31] vfs_open+0x3b/0x340 [ 1687.088145][ T31] ? path_openat+0x2ecd/0x3830 [ 1687.092989][ T31] path_openat+0x2ee5/0x3830 [ 1687.097624][ T31] ? __pfx_path_openat+0x10/0x10 [ 1687.102990][ T31] do_filp_open+0x1fa/0x410 [ 1687.107613][ T31] ? __lock_acquire+0xab9/0xd20 [ 1687.112662][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1687.117741][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1687.123083][ T31] ? alloc_fd+0x64c/0x6c0 [ 1687.127481][ T31] do_sys_openat2+0x121/0x1c0 [ 1687.132562][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1687.137820][ T31] ? exc_page_fault+0x82/0x100 [ 1687.142808][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1687.148757][ T31] __x64_sys_openat+0x138/0x170 [ 1687.154032][ T31] do_syscall_64+0xfa/0xfa0 [ 1687.159202][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1687.164648][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.171070][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1687.175766][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.181727][ T31] RIP: 0033:0x7f1b3538f749 [ 1687.186168][ T31] RSP: 002b:00007f1b362f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1687.194939][ T31] RAX: ffffffffffffffda RBX: 00007f1b355e5fa0 RCX: 00007f1b3538f749 [ 1687.203071][ T31] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1687.211314][ T31] RBP: 00007f1b35413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1687.219721][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.227727][ T31] R13: 00007f1b355e6038 R14: 00007f1b355e5fa0 R15: 00007ffd099e7b78 [ 1687.236094][ T31] [ 1687.239194][ T31] [ 1687.239194][ T31] Showing all locks held in the system: [ 1687.247022][ T31] 1 lock held by khungtaskd/31: [ 1687.252263][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1687.262312][ T31] 2 locks held by getty/5587: [ 1687.267096][ T31] #0: ffff88803004b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1687.276958][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1687.287517][ T31] 4 locks held by kworker/1:15/6512: [ 1687.293166][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1687.305254][ T31] #1: ffffc90003cffba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1687.318013][ T31] #2: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1687.328160][ T31] #3: ffff888050267100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1687.337990][ T31] 4 locks held by kworker/u8:20/11691: [ 1687.343985][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1687.355056][ T31] #1: ffffc90003627ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1687.365764][ T31] #2: ffffffff8f2c0990 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1687.375626][ T31] #3: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1687.385936][ T31] 3 locks held by kworker/1:0/13434: [ 1687.391300][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1687.402624][ T31] #1: ffffc9000a7f7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1687.416212][ T31] #2: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1687.427773][ T31] 1 lock held by syz.2.8005/5127: [ 1687.433226][ T31] #0: ffff888050267100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1687.443093][ T31] 2 locks held by syz.3.8049/5302: [ 1687.448211][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.456936][ T31] #1: ffffffff8f5aea28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1687.467394][ T31] 1 lock held by syz.3.8049/5306: [ 1687.472631][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.481148][ T31] 1 lock held by syz.3.8049/5307: [ 1687.486219][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.494974][ T31] 1 lock held by syz.0.8052/5320: [ 1687.500076][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.508805][ T31] 1 lock held by syz.1.8059/5345: [ 1687.513885][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.522640][ T31] 1 lock held by syz.4.8061/5352: [ 1687.527789][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.536461][ T31] 1 lock held by syz-executor/5355: [ 1687.541744][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.550525][ T31] 1 lock held by syz-executor/5357: [ 1687.555739][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.564395][ T31] 1 lock held by syz-executor/5359: [ 1687.569668][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.578235][ T31] 1 lock held by syz-executor/5362: [ 1687.583781][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.592440][ T31] 1 lock held by syz-executor/5363: [ 1687.597661][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.606243][ T31] 1 lock held by syz-executor/5366: [ 1687.611736][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.620304][ T31] 1 lock held by syz-executor/5368: [ 1687.625535][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.634549][ T31] 1 lock held by syz-executor/5370: [ 1687.640105][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.648705][ T31] 1 lock held by syz-executor/5373: [ 1687.653923][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.662554][ T31] 1 lock held by syz-executor/5374: [ 1687.667820][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.676857][ T31] 1 lock held by syz-executor/5377: [ 1687.682146][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.690697][ T31] 1 lock held by syz-executor/5379: [ 1687.695898][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.714231][ T31] 1 lock held by syz-executor/5381: [ 1687.719521][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.728013][ T31] 1 lock held by syz-executor/5384: [ 1687.733478][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.742333][ T31] 1 lock held by syz-executor/5385: [ 1687.747547][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1687.756294][ T31] [ 1687.758785][ T31] ============================================= [ 1687.758785][ T31] [ 1687.767237][ T31] NMI backtrace for cpu 1 [ 1687.767251][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1687.767268][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.767278][ T31] Call Trace: [ 1687.767285][ T31] [ 1687.767292][ T31] dump_stack_lvl+0x189/0x250 [ 1687.767321][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1687.767344][ T31] ? __pfx__printk+0x10/0x10 [ 1687.767370][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1687.767398][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1687.767425][ T31] ? __pfx__printk+0x10/0x10 [ 1687.767445][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1687.767481][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1687.767509][ T31] watchdog+0xf60/0xfa0 [ 1687.767529][ T31] ? watchdog+0x1e2/0xfa0 [ 1687.767550][ T31] kthread+0x711/0x8a0 [ 1687.767574][ T31] ? __pfx_watchdog+0x10/0x10 [ 1687.767588][ T31] ? __pfx_kthread+0x10/0x10 [ 1687.767610][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1687.767627][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1687.767645][ T31] ? __pfx_kthread+0x10/0x10 [ 1687.767666][ T31] ret_from_fork+0x4bc/0x870 [ 1687.767684][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1687.767706][ T31] ? __switch_to_asm+0x39/0x70 [ 1687.767718][ T31] ? __switch_to_asm+0x33/0x70 [ 1687.767730][ T31] ? __pfx_kthread+0x10/0x10 [ 1687.767751][ T31] ret_from_fork_asm+0x1a/0x30 [ 1687.767778][ T31] [ 1687.767784][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1687.917642][ C0] NMI backtrace for cpu 0 [ 1687.917676][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1687.917696][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1687.917708][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1687.917736][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c1 1f 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1687.917753][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1687.917770][ C0] RAX: 0148a73d7fe52600 RBX: ffffffff81967b47 RCX: 0148a73d7fe52600 [ 1687.917784][ C0] RDX: 0000000000000001 RSI: ffffffff8d714225 RDI: ffffffff8bbf08e0 [ 1687.917797][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 1687.917811][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d1e70 [ 1687.917825][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 1687.917837][ C0] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 1687.917852][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1687.917864][ C0] CR2: 00007fffcd98bb58 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1687.917881][ C0] Call Trace: [ 1687.917890][ C0] [ 1687.917897][ C0] default_idle+0x13/0x20 [ 1687.917922][ C0] default_idle_call+0x73/0xb0 [ 1687.917949][ C0] do_idle+0x1e7/0x510 [ 1687.917974][ C0] ? __pfx_do_idle+0x10/0x10 [ 1687.918004][ C0] cpu_startup_entry+0x44/0x60 [ 1687.918023][ C0] rest_init+0x2de/0x300 [ 1687.918051][ C0] start_kernel+0x3ae/0x410 [ 1687.918078][ C0] x86_64_start_reservations+0x24/0x30 [ 1687.918099][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1687.918117][ C0] common_startup_64+0x13e/0x147 [ 1687.918153][ C0]