last executing test programs: 3m55.230069982s ago: executing program 2 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) sendmmsg(r1, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1}, 0x4040845) 3m55.057435447s ago: executing program 2 (id=141): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r3, 0x4) 3m54.925857819s ago: executing program 2 (id=144): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x880) 3m54.918047793s ago: executing program 0 (id=145): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001200add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3m54.781268564s ago: executing program 0 (id=146): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 3m54.598792291s ago: executing program 0 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01040008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) 3m54.462150062s ago: executing program 2 (id=152): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 3m54.444215972s ago: executing program 0 (id=153): r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) 3m53.981294266s ago: executing program 2 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x82823b2b84352706}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3m53.97611661s ago: executing program 0 (id=159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x5) 3m53.566394546s ago: executing program 0 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060"], 0xfdef) 3m53.451728033s ago: executing program 2 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) listen(r0, 0x3) 3m53.072897022s ago: executing program 32 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060"], 0xfdef) 3m52.995800425s ago: executing program 33 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) listen(r0, 0x3) 20.060256866s ago: executing program 4 (id=2180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xb, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x5, 0x101}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea07", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 19.765067141s ago: executing program 4 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400008000000000000200000028000480240001800b000100657874686472000014000280050002000700000008000640000000030900010073797a30000000000900020073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x22c, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1e0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x2}}}, 0x254}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 19.576008397s ago: executing program 4 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r3, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffb}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x30}}, 0x884) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2004c0c0) 19.163907832s ago: executing program 4 (id=2195): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0xfffffffe}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fff8, 0x8, 0x0, 0x1}, 0x48) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) splice(r5, 0x0, r4, 0x0, 0x100000003, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0xc2, 0x4, 0x0, 0x400, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x5, 0x5, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0124e30029bd172c02000000ada685f00000df5d079e6a90838b48135c799994e433ab47e55cdfabf0a9df34b0dcd8c226a916e71e0f6f107ef5b06877f9def3b7797664b38afa5a8ca08f3b02493325522019d87ff43620780d496a9191"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200480d1) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x891d, &(0x7f00000001c0)={'gre0\x00', 0x0}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 19.039572864s ago: executing program 4 (id=2198): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x401}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000890600001144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) 18.776075633s ago: executing program 4 (id=2203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="68020000000503000000000000000000030000005402010000000000080000000607ff000800180073797a30000057f46878f0b52e7c230587000000000000000000000000000000000000000000000000000086bca39346217518b16a2af4d30592156d0000000000000000000000000000008a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e80400080002000000030000008500d60001000000070000000300060003000000030000004000010002000000090000009b1a04000200000000000004ff0006000300000006000000cde7000402000000000100000200010003000000001000000b0003000300000001040000b5000400000000000500000001808000030000000300000005000000010000000000000000000500010000007f000000090032790100000006000000f801040001000000400000000700070001000000018000000100ad0e03000000070000000100f1fd02000000050000000900030001000000060000000100f8ff010000008cc6000004000000030000009a0d00007f0006000100000009000000400003000000000008000000000300000003000000a2f33f0001000000070000000600070003000000040000004001df45000000000800000005000a00000000000300000040000400020000000900000000005b0c01000000050080000d00d28102000000c8ffffff07000a0b01000000040000000000030000000000070000000100b600020000000d000000000015030300000010000000080007000200000002000000070001000300000000000100e4000600010000000200000080000700346ae0ba0500000006"], 0x268}}, 0x840) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000d80)) connect(r0, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd8, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x411a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8100}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 17.53818876s ago: executing program 5 (id=2225): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.382686417s ago: executing program 5 (id=2228): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 17.167248143s ago: executing program 6 (id=2231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 17.008967638s ago: executing program 3 (id=2232): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x1800, 0x1}, 0x48) 17.00865427s ago: executing program 6 (id=2233): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000006140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 17.007899195s ago: executing program 5 (id=2234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 16.900278501s ago: executing program 3 (id=2235): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x20000, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [""]}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4, 0x4}}, 0x10) 16.819226283s ago: executing program 6 (id=2236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 16.770381906s ago: executing program 3 (id=2238): socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.759194388s ago: executing program 5 (id=2239): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x401c5820, &(0x7f0000000000)={r0}) 16.612910063s ago: executing program 5 (id=2241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x70bd29, 0x80001, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff3, 0xb}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8000}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.590693349s ago: executing program 6 (id=2242): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {0x900}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}}, 0x24040084) 16.541916714s ago: executing program 3 (id=2243): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0xfffffd91}}, 0x2000000) 16.450199243s ago: executing program 6 (id=2244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, r3, 0xa5456c2fe1cd7aeb, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xfecd, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0x0, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xfffffffffffffdeb, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x40092) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 16.404175811s ago: executing program 3 (id=2246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="ab17cb42bf6e3a3d02250000"], 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2c, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000002000128009000100766c6106000000003000028004000480060001000300000008000500", @ANYRES32=r5, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000300)=""/180, 0xb4}], 0x4}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100426bd7000fedbdf25440000000c0000430000001300240060098bb06c2109e08024ec8de08336000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x4) 16.378157424s ago: executing program 6 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11cd96b409284697, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000ffffffff00040000001200000000000040", @ANYRES32, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xac, 0x9, 0x6, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x800}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 16.331376642s ago: executing program 5 (id=2248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000500140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 16.180282572s ago: executing program 3 (id=2249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 15.574623207s ago: executing program 1 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x6, 0x0, 0xc8) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x1, 0x8, 0x24, 0x67, 0x4, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, {0x17, 0x5, 0x0, @broadcast}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 15.530428101s ago: executing program 1 (id=2254): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xfff6}, {0x9}, {0x0, 0xffff}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$802154_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)="a6ac76cd035bf7995b94521fd7ba6b50f6aec0e27fedcf2939d5228b3e5e8fdaf00153bb814357d89c857d8fbf", 0x2d}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 15.440338687s ago: executing program 1 (id=2255): socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000b40)={@private1, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x4, 0x4, 0x51, 0x0, 0x17b, 0x20092, r3}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r7, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0xfffe) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={@mcast1, @mcast1, @local, 0x0, 0x9, 0x8e2, 0x500, 0x6, 0x1100002, r3}) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) getsockopt$sock_buf(r4, 0x1, 0x0, &(0x7f0000000480)=""/218, &(0x7f00000001c0)=0xffffffffffffff32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f0000000240)) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001200)={r4, 0x6, 0xfff8}) 15.439986238s ago: executing program 1 (id=2256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x41, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 15.405783296s ago: executing program 1 (id=2257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 15.363358157s ago: executing program 1 (id=2258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x70bd29, 0x80001, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff3, 0xb}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8000}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.498745654s ago: executing program 34 (id=2203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x268}}, 0x840) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000d80)) connect(r0, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd8, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x411a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8100}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 999.526443ms ago: executing program 35 (id=2248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000500140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 952.094318ms ago: executing program 36 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11cd96b409284697, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000ffffffff00040000001200000000000040", @ANYRES32, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xac, 0x9, 0x6, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x800}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 909.194862ms ago: executing program 37 (id=2249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 38 (id=2258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x70bd29, 0x80001, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff3, 0xb}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8000}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 89][ T6863] bond0: (slave bond_slave_1): Releasing backup interface [ 127.091928][ T6863] team0: Port device team_slave_0 removed [ 127.110313][ T6863] team0: Port device team_slave_1 removed [ 127.117037][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.124881][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.133920][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.141336][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.151146][ T6863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.182272][ T6866] team0: Mode changed to "loadbalance" [ 127.234560][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.268265][ T6872] syzkaller0: entered promiscuous mode [ 127.275642][ T6872] syzkaller0: entered allmulticast mode [ 127.297064][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.326840][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.377461][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.304'. [ 127.391227][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.423730][ T6884] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 127.495294][ T6883] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 129.651447][ T6923] syzkaller0: entered promiscuous mode [ 129.672752][ T6923] syzkaller0: entered allmulticast mode [ 129.725803][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.319'. [ 131.217925][ T6935] syzkaller1: entered promiscuous mode [ 131.223662][ T6935] syzkaller1: entered allmulticast mode [ 131.361270][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 131.391879][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 131.532163][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 131.726699][ T6979] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 131.782450][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.807880][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.833325][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 131.842178][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.457883][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 132.468595][ T7002] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 132.517126][ T7002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.722586][ T7003] hsr_slave_1 (unregistering): left promiscuous mode [ 132.821685][ T7002] bond1: (slave veth5): Enslaving as an active interface with a down link [ 132.872428][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.879168][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.901658][ T7011] bond1: (slave veth0_to_bond): making interface the new active one [ 132.934375][ T7011] veth0_to_bond: entered promiscuous mode [ 132.954033][ T7011] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 133.017324][ T7012] bond1: (slave veth7): Enslaving as an active interface with a down link [ 133.127648][ T7033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.830383][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'. [ 133.868510][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.6.362'. [ 133.893276][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.362'. [ 134.037964][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.365'. [ 134.473021][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.368'. [ 134.838575][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 135.058680][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 135.176641][ T7127] hsr_slave_1 (unregistering): left promiscuous mode [ 135.621933][ T7153] bridge_slave_0: left allmulticast mode [ 135.628870][ T7153] bridge_slave_0: left promiscuous mode [ 135.669556][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.729464][ T7153] bridge_slave_1: left allmulticast mode [ 135.763950][ T7153] bridge_slave_1: left promiscuous mode [ 135.778792][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.868885][ T7153] bond1: (slave veth0_to_bond): Releasing active interface [ 135.928072][ T7153] veth0_to_bond: left promiscuous mode [ 135.966472][ T7153] bond0: (slave bond_slave_0): Releasing backup interface [ 135.999169][ T7153] bond0: (slave bond_slave_1): Releasing backup interface [ 136.074619][ T7153] team0: Port device team_slave_0 removed [ 136.116413][ T7153] team0: Port device team_slave_1 removed [ 136.142196][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.169613][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.192310][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.230665][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.245060][ T7153] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.264597][ T7162] bridge: RTM_NEWNEIGH with invalid ether address [ 136.283401][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.304307][ T7163] bond0: (slave rose0): Enslaving as an active interface with an up link [ 136.651269][ T7192] syzkaller0: entered promiscuous mode [ 136.680937][ T7192] syzkaller0: entered allmulticast mode [ 137.105564][ T7212] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.403'. [ 138.515538][ T7228] netlink: 96 bytes leftover after parsing attributes in process `syz.5.408'. [ 138.788827][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 138.803425][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 138.928905][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.956430][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.288515][ T7263] syz_tun: entered allmulticast mode [ 139.329055][ T7262] pim6reg1: entered promiscuous mode [ 139.344732][ T7262] pim6reg1: entered allmulticast mode [ 139.366184][ T7258] syz_tun: left allmulticast mode [ 139.625595][ T7272] syzkaller1: entered promiscuous mode [ 139.631121][ T7272] syzkaller1: entered allmulticast mode [ 139.910867][ T7289] tipc: Started in network mode [ 139.933765][ T7289] tipc: Node identity , cluster identity 4711 [ 139.958296][ T7289] tipc: Failed to obtain node identity [ 139.973168][ T7289] tipc: Enabling of bearer rejected, failed to enable media [ 140.189958][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 140.798040][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.438'. [ 142.622777][ T7387] syzkaller1: entered promiscuous mode [ 142.677407][ T7387] syzkaller1: entered allmulticast mode [ 142.893096][ T7396] tipc: Started in network mode [ 142.944566][ T7396] tipc: Node identity e2f47fd9c5b9, cluster identity 4711 [ 143.002814][ T7396] tipc: Enabled bearer , priority 0 [ 143.274974][ T7412] netlink: 'syz.5.455': attribute type 33 has an invalid length. [ 143.337929][ T7412] netlink: 152 bytes leftover after parsing attributes in process `syz.5.455'. [ 143.399777][ T7403] syzkaller0: entered promiscuous mode [ 143.447326][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.455'. [ 143.501589][ T7403] syzkaller0: entered allmulticast mode [ 143.541173][ T7403] tipc: Resetting bearer [ 143.757239][ T6596] tipc: Resetting bearer [ 143.830423][ T7395] tipc: Resetting bearer [ 144.086683][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.532115][ T7395] tipc: Disabling bearer [ 145.558498][ T5967] tipc: Node number set to 659390425 [ 145.669624][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 146.051304][ T7483] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 146.096676][ T7483] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 146.142324][ T7485] syzkaller0: entered allmulticast mode [ 146.724375][ T7507] syzkaller0: entered promiscuous mode [ 146.738321][ T7507] syzkaller0: entered allmulticast mode [ 149.700634][ T13] syzkaller0: tun_net_xmit 76 [ 149.706378][ T13] syzkaller0: tun_net_xmit 48 [ 149.725015][ T44] syzkaller0: tun_net_xmit 76 [ 149.783449][ T7590] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 149.795609][ T10] syzkaller0: tun_net_xmit 76 [ 149.800750][ T7590] syzkaller0: Linktype set failed because interface is up [ 149.842325][ T7604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.923559][ T44] syzkaller0: tun_net_xmit 76 [ 149.924361][ T7600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.017017][ T7604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.517995][ T7613] syzkaller0: entered promiscuous mode [ 151.523676][ T7613] syzkaller0: entered allmulticast mode [ 154.199661][ T7673] syz_tun: entered allmulticast mode [ 154.210210][ T7672] syz_tun: left allmulticast mode [ 154.354536][ T7682] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 154.515028][ T7682] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.558947][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 154.564210][ T7682] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.579935][ T7682] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 154.684072][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027d9f400: rx timeout, send abort [ 154.705217][ T7691] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.718038][ T7691] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.729380][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.515'. [ 155.112022][ T7694] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 155.191041][ T7694] team1: entered promiscuous mode [ 155.202678][ T7694] team1: entered allmulticast mode [ 155.219749][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027d9f800: rx timeout, send abort [ 155.228063][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027d9f400: abort rx timeout. Force session deactivation [ 155.271793][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 155.475755][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.518'. [ 155.601605][ T7697] netlink: 'syz.4.516': attribute type 5 has an invalid length. [ 155.609986][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 155.728064][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027d9f800: abort rx timeout. Force session deactivation [ 155.810077][ T7715] syzkaller0: entered promiscuous mode [ 155.818569][ T7715] syzkaller0: entered allmulticast mode [ 155.859693][ T7711] GUP no longer grows the stack in syz.1.521 (7711): 200000003000-20000000a000 (200000001000) [ 155.893500][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT(full) [ 155.893531][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.893566][ T7711] Call Trace: [ 155.893575][ T7711] [ 155.893584][ T7711] dump_stack_lvl+0x189/0x250 [ 155.893622][ T7711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.893651][ T7711] ? __pfx__printk+0x10/0x10 [ 155.893668][ T7711] ? find_vma+0xe7/0x160 [ 155.893710][ T7711] __get_user_pages+0x2470/0x2a00 [ 155.893748][ T7711] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 155.893801][ T7711] ? rcu_is_watching+0x15/0xb0 [ 155.893831][ T7711] __gup_longterm_locked+0xde4/0x1660 [ 155.893861][ T7711] ? try_grab_folio_fast+0x1bf/0x6a0 [ 155.893900][ T7711] ? gup_fast_fallback+0x1b86/0x22d0 [ 155.893927][ T7711] gup_fast_fallback+0x1d65/0x22d0 [ 155.894002][ T7711] ? __pfx_gup_fast_fallback+0x10/0x10 [ 155.894026][ T7711] ? __mutex_lock+0x335/0x1350 [ 155.894062][ T7711] ? is_valid_gup_args+0x11f/0x200 [ 155.894088][ T7711] ? get_user_pages_fast+0x4d/0xb0 [ 155.894112][ T7711] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 155.894145][ T7711] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 155.894164][ T7711] ? wait_for_space+0x248/0x2d0 [ 155.894183][ T7711] iov_iter_get_pages2+0x5e/0xa0 [ 155.894210][ T7711] __se_sys_vmsplice+0x548/0x10d0 [ 155.894251][ T7711] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 155.894272][ T7711] ? __pfx_futex_wait+0x10/0x10 [ 155.894307][ T7711] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 155.894399][ T7711] ? do_syscall_64+0xbe/0xfa0 [ 155.894431][ T7711] do_syscall_64+0xfa/0xfa0 [ 155.894456][ T7711] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.894483][ T7711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.894502][ T7711] ? clear_bhb_loop+0x60/0xb0 [ 155.894526][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.894544][ T7711] RIP: 0033:0x7f017a38f6c9 [ 155.894562][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.894577][ T7711] RSP: 002b:00007f017b2a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 155.894599][ T7711] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38f6c9 [ 155.894613][ T7711] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 155.894625][ T7711] RBP: 00007f017a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.894637][ T7711] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 155.894648][ T7711] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 155.894686][ T7711] [ 156.247935][ T7719] netlink: 'syz.5.523': attribute type 1 has an invalid length. [ 156.332193][ T7721] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 156.428444][ T7721] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 156.444479][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'. [ 156.459557][ T7721] bond1: (slave xfrm1): making interface the new active one [ 156.479560][ T7721] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 156.491871][ T7729] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 156.493107][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 156.520812][ T7719] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 156.532302][ T7719] bond1 (unregistering): Released all slaves [ 156.650157][ T7729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.658933][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.682603][ T7728] batadv0: mtu less than device minimum [ 156.698778][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.711150][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.723321][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.735602][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.747694][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.760191][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.772372][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.784461][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.796563][ T7728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.837558][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.847059][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.887321][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.901024][ T7728] batman_adv: batadv0: Interface deactivated: dummy0 [ 156.908140][ T7728] batman_adv: batadv0: Removing interface: dummy0 [ 156.952443][ T7731] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 156.981403][ T7735] bond2: (slave ip6gretap1): making interface the new active one [ 156.991534][ T7735] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 157.015755][ T7732] syzkaller0: entered promiscuous mode [ 157.021932][ T7732] syzkaller0: entered allmulticast mode [ 157.107202][ T7744] svc: failed to register nfsdv3 RPC service (errno 111). [ 157.119728][ T7744] svc: failed to register nfsaclv3 RPC service (errno 111). [ 157.420217][ T7765] syzkaller0: entered promiscuous mode [ 157.434479][ T7765] syzkaller0: entered allmulticast mode [ 157.573451][ T7773] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 157.674189][ T7773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.685100][ T7773] bond3: (slave bond4): making interface the new active one [ 157.695145][ T7773] bond3: (slave bond4): Enslaving as an active interface with an up link [ 157.738139][ T7782] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.755906][ T7782] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 157.786362][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 157.878780][ T7780] syzkaller1: entered promiscuous mode [ 157.886140][ T7780] syzkaller1: entered allmulticast mode [ 158.025910][ T7792] syzkaller0: entered promiscuous mode [ 158.031459][ T7792] syzkaller0: entered allmulticast mode [ 158.129657][ T5839] Bluetooth: hci2: link tx timeout [ 158.135909][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.163290][ T7798] syzkaller0: entered promiscuous mode [ 158.168927][ T7798] syzkaller0: entered allmulticast mode [ 158.257065][ T7802] bridge2: entered allmulticast mode [ 158.309668][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.548'. [ 158.387756][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.548'. [ 158.526105][ T7811] tipc: Enabled bearer , priority 0 [ 158.597911][ T7811] syzkaller0: entered promiscuous mode [ 158.603597][ T7811] syzkaller0: entered allmulticast mode [ 158.615849][ T7811] tipc: Resetting bearer [ 158.774525][ T197] tipc: Resetting bearer [ 158.781544][ T7820] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 158.807392][ T7810] tipc: Resetting bearer [ 159.500690][ T7851] netlink: 'syz.5.561': attribute type 1 has an invalid length. [ 159.622123][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.561'. [ 160.223333][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 160.285718][ T7810] tipc: Disabling bearer [ 160.355450][ T7851] bond1 (unregistering): Released all slaves [ 160.477387][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.563'. [ 160.577377][ T7858] bridge0: port 1(veth3) entered blocking state [ 160.585625][ T7858] bridge0: port 1(veth3) entered disabled state [ 160.592747][ T7858] veth3: entered allmulticast mode [ 160.603513][ T7858] veth3: entered promiscuous mode [ 160.644162][ T7864] bridge0: port 2(veth5) entered blocking state [ 160.651211][ T7864] bridge0: port 2(veth5) entered disabled state [ 160.669272][ T7864] veth5: entered allmulticast mode [ 160.679879][ T7864] veth5: entered promiscuous mode [ 160.930607][ T7877] syzkaller0: entered promiscuous mode [ 160.936442][ T7877] syzkaller0: entered allmulticast mode [ 161.026480][ T7882] netlink: 'syz.6.571': attribute type 1 has an invalid length. [ 161.177835][ T7885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.188770][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.571'. [ 161.200296][ T7885] bond1: (slave bond2): making interface the new active one [ 161.209263][ T7885] bond1: (slave bond2): Enslaving as an active interface with an up link [ 161.225517][ T7882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.664883][ T7911] netlink: 'syz.1.579': attribute type 83 has an invalid length. [ 161.669445][ T7906] syzkaller0: entered promiscuous mode [ 161.678944][ T7906] syzkaller0: entered allmulticast mode [ 161.747085][ T7910] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.890708][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 162.029962][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 162.146753][ T7929] syzkaller0: entered promiscuous mode [ 162.152711][ T7929] syzkaller0: entered allmulticast mode [ 162.393295][ T7936] netlink: 'syz.3.590': attribute type 13 has an invalid length. [ 162.401438][ T7936] netlink: 'syz.3.590': attribute type 27 has an invalid length. [ 162.424242][ T7938] syzkaller0: entered promiscuous mode [ 162.433468][ T7938] syzkaller0: entered allmulticast mode [ 162.479201][ T7941] syzkaller0: entered promiscuous mode [ 162.493225][ T7941] syzkaller0: entered allmulticast mode [ 162.874056][ T7949] syz.5.593 (7949) used greatest stack depth: 17832 bytes left [ 162.911402][ T7960] tipc: Enabled bearer , priority 0 [ 162.930491][ T7960] syzkaller0: entered promiscuous mode [ 162.948775][ T7960] syzkaller0: entered allmulticast mode [ 163.000090][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.599'. [ 163.004936][ T7960] tipc: Resetting bearer [ 163.015599][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.599'. [ 163.026579][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.599'. [ 163.045226][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.599'. [ 163.055996][ T7959] tipc: Resetting bearer [ 163.082494][ T7959] tipc: Disabling bearer [ 163.330718][ T7973] netlink: 'syz.1.602': attribute type 9 has an invalid length. [ 163.405124][ T7977] syzkaller0: entered promiscuous mode [ 163.410659][ T7977] syzkaller0: entered allmulticast mode [ 163.822002][ T8001] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 163.934685][ T8001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.991621][ T8005] macvlan0: entered promiscuous mode [ 163.997258][ T8005] macvlan0: entered allmulticast mode [ 164.003756][ T8005] bond2: entered allmulticast mode [ 164.009149][ T8005] bond2: entered promiscuous mode [ 164.016448][ T8005] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 164.027044][ T8005] team0: Port device macvlan0 added [ 164.276801][ T7982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.341720][ T8017] syzkaller0: entered promiscuous mode [ 164.347453][ T8017] syzkaller0: entered allmulticast mode [ 164.569059][ T8022] syzkaller0: entered promiscuous mode [ 164.584028][ T8022] syzkaller0: entered allmulticast mode [ 164.659807][ T8022] tipc: Enabled bearer , priority 0 [ 164.673847][ T8019] tipc: Resetting bearer [ 164.723294][ T8019] tipc: Disabling bearer [ 164.893941][ T8039] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 164.981745][ T8043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.996358][ T8043] bond0: (slave bond4): Enslaving as an active interface with an up link [ 165.023871][ T8046] tipc: Enabled bearer , priority 0 [ 165.053071][ T8046] syzkaller0: entered promiscuous mode [ 165.058618][ T8046] syzkaller0: entered allmulticast mode [ 165.078610][ T8046] tipc: Resetting bearer [ 165.085199][ T8048] tipc: Enabled bearer , priority 0 [ 165.099339][ T8045] tipc: Resetting bearer [ 165.116609][ T8045] tipc: Disabling bearer [ 165.128694][ T8048] syzkaller0: entered promiscuous mode [ 165.134285][ T8048] syzkaller0: entered allmulticast mode [ 165.146157][ T8048] tipc: Resetting bearer [ 165.153758][ T8047] tipc: Resetting bearer [ 165.167052][ T8047] tipc: Disabling bearer [ 165.219940][ T10] IPVS: starting estimator thread 0... [ 165.325543][ T8054] IPVS: using max 27 ests per chain, 64800 per kthread [ 165.360318][ T8057] syzkaller0: entered promiscuous mode [ 165.366779][ T8059] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 165.374672][ T8057] syzkaller0: entered allmulticast mode [ 165.421483][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 165.424010][ T8059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.613889][ T8067] vlan0: entered allmulticast mode [ 165.619278][ T8067] bridge_slave_0: entered allmulticast mode [ 165.662714][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 165.682066][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 166.002955][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 166.038066][ T8082] syzkaller0: entered promiscuous mode [ 166.043825][ T8082] syzkaller0: entered allmulticast mode [ 166.051347][ T8083] tipc: Enabled bearer , priority 0 [ 166.078663][ T8086] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 166.095313][ T8077] tipc: Resetting bearer [ 167.331016][ T8077] tipc: Disabling bearer [ 167.340566][ T8087] syzkaller0: entered promiscuous mode [ 167.349413][ T8087] syzkaller0: entered allmulticast mode [ 167.359047][ T8079] tipc: Enabled bearer , priority 0 [ 167.379706][ T8076] tipc: Resetting bearer [ 168.711422][ T8076] tipc: Disabling bearer [ 168.920241][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.645'. [ 168.941700][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.645'. [ 168.957968][ T8110] syzkaller0: entered promiscuous mode [ 168.976561][ T8110] syzkaller0: entered allmulticast mode [ 169.100520][ T8120] netlink: 'syz.6.651': attribute type 1 has an invalid length. [ 169.177222][ T8120] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.192383][ T8120] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 169.248568][ T8126] syzkaller0: entered promiscuous mode [ 169.254386][ T8126] syzkaller0: entered allmulticast mode [ 169.275811][ T8125] gretap1: entered promiscuous mode [ 169.295305][ T8125] bond3: (slave gretap1): making interface the new active one [ 169.303773][ T8125] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 169.325929][ T8131] macvlan0: entered promiscuous mode [ 169.331293][ T8131] macvlan0: entered allmulticast mode [ 169.337706][ T8131] bond3: entered promiscuous mode [ 169.349872][ T8131] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 169.379427][ T8131] bond3: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 169.398857][ T8131] bond3: left promiscuous mode [ 169.484767][ T8128] syzkaller0: entered promiscuous mode [ 169.490304][ T8128] syzkaller0: entered allmulticast mode [ 169.782266][ T8147] tipc: Started in network mode [ 169.787966][ T8147] tipc: Node identity 22b2c272cb62, cluster identity 4711 [ 169.798289][ T8147] tipc: Enabled bearer , priority 0 [ 169.811616][ T8147] syzkaller0: entered promiscuous mode [ 169.818482][ T8147] syzkaller0: entered allmulticast mode [ 169.973025][ T8154] tipc: Resetting bearer [ 169.992260][ T8145] tipc: Resetting bearer [ 170.038761][ T8145] tipc: Disabling bearer [ 170.057044][ T8159] syz_tun: entered allmulticast mode [ 170.080057][ T8152] syz_tun: left allmulticast mode [ 170.101245][ T8162] tipc: Enabled bearer , priority 0 [ 170.123091][ T8162] syzkaller0: entered promiscuous mode [ 170.128713][ T8162] syzkaller0: entered allmulticast mode [ 170.141384][ T8158] tipc: Started in network mode [ 170.149744][ T8158] tipc: Node identity 16865a5adead, cluster identity 4711 [ 170.161393][ T8158] tipc: Enabled bearer , priority 0 [ 170.171962][ T8162] tipc: Resetting bearer [ 170.181353][ T8158] syzkaller0: entered promiscuous mode [ 170.189863][ T8158] syzkaller0: entered allmulticast mode [ 170.198307][ T8161] tipc: Resetting bearer [ 170.236046][ T8161] tipc: Disabling bearer [ 170.292626][ C1] syzkaller0: tun_net_xmit 90 [ 170.300840][ T8158] tipc: Resetting bearer [ 170.315322][ T8158] syzkaller0: tun_net_xmit 90 [ 170.339364][ T8157] tipc: Resetting bearer [ 170.408194][ T8157] tipc: Disabling bearer [ 170.452161][ T8175] vlan0: entered promiscuous mode [ 170.457611][ T8175] vlan0: entered allmulticast mode [ 170.464894][ T8175] hsr_slave_1: entered allmulticast mode [ 170.561286][ T8183] syzkaller0: create flow: hash 702524874 index 2 [ 170.593004][ T8185] tipc: Enabled bearer , priority 0 [ 170.666206][ T8179] syzkaller0: entered promiscuous mode [ 170.679209][ T8179] syzkaller0: entered allmulticast mode [ 170.708813][ T8177] syzkaller0: delete flow: hash 702524874 index 2 [ 170.737042][ T8179] tipc: Resetting bearer [ 172.887233][ T8178] tipc: Resetting bearer [ 172.900148][ T8178] tipc: Disabling bearer [ 172.955787][ T8212] syzkaller0: entered promiscuous mode [ 172.961630][ T8212] syzkaller0: entered allmulticast mode [ 172.970155][ T8215] tipc: Enabled bearer , priority 0 [ 173.044848][ T8209] tipc: Resetting bearer [ 173.094526][ T8209] tipc: Disabling bearer [ 173.156447][ T8223] tipc: Enabled bearer , priority 0 [ 173.184419][ T8223] syzkaller0: entered promiscuous mode [ 173.189964][ T8223] syzkaller0: entered allmulticast mode [ 173.248765][ T8223] tipc: Resetting bearer [ 173.286763][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 173.340029][ T8222] tipc: Resetting bearer [ 173.361826][ T8222] tipc: Disabling bearer [ 173.982839][ T8261] netlink: 168 bytes leftover after parsing attributes in process `syz.4.691'. [ 174.060458][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 174.157475][ T8272] syzkaller0: entered promiscuous mode [ 174.163689][ T8272] syzkaller0: entered allmulticast mode [ 174.331343][ T8280] syzkaller0: entered promiscuous mode [ 174.339482][ T8280] syzkaller0: entered allmulticast mode [ 174.563521][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.571519][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.832118][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.853013][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.048021][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.061946][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.077965][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.099826][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.129997][ T8307] syzkaller0: entered promiscuous mode [ 175.148402][ T8307] syzkaller0: entered allmulticast mode [ 175.383068][ T8317] syzkaller0: entered promiscuous mode [ 175.388593][ T8317] syzkaller0: entered allmulticast mode [ 175.415037][ T8314] syzkaller0: entered promiscuous mode [ 175.420630][ T8314] syzkaller0: entered allmulticast mode [ 175.438037][ T8317] net_ratelimit: 31 callbacks suppressed [ 175.438059][ T8317] 0: reclassify loop, rule prio 0, protocol 800 [ 175.602367][ T8326] tipc: Enabled bearer , priority 0 [ 175.626418][ T8326] syzkaller0: entered promiscuous mode [ 175.638832][ T8326] syzkaller0: entered allmulticast mode [ 175.671471][ T8326] tipc: Resetting bearer [ 175.689503][ T8325] tipc: Resetting bearer [ 175.714848][ T8325] tipc: Disabling bearer [ 175.858891][ T5891] IPVS: starting estimator thread 0... [ 175.919725][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 175.948100][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 175.957214][ T8340] IPVS: using max 25 ests per chain, 60000 per kthread [ 175.961272][ T8344] syzkaller0: entered promiscuous mode [ 175.969980][ T8344] syzkaller0: entered allmulticast mode [ 176.144087][ T8347] tipc: Enabled bearer , priority 0 [ 176.153981][ T8347] syzkaller0: entered promiscuous mode [ 176.159626][ T8347] syzkaller0: entered allmulticast mode [ 176.183140][ T8347] tipc: Resetting bearer [ 176.198224][ T8346] tipc: Resetting bearer [ 176.222115][ T8346] tipc: Disabling bearer [ 176.315472][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 176.342000][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 176.351829][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.557084][ T8357] syzkaller0: entered promiscuous mode [ 176.573438][ T8357] syzkaller0: entered allmulticast mode [ 176.688881][ T8364] syzkaller0: entered promiscuous mode [ 176.695733][ T8364] syzkaller0: entered allmulticast mode [ 176.842801][ T8369] tipc: Enabled bearer , priority 0 [ 176.851157][ T8369] syzkaller0: entered promiscuous mode [ 176.858098][ T8369] syzkaller0: entered allmulticast mode [ 176.884260][ T8369] tipc: Resetting bearer [ 176.901623][ T8373] syzkaller0: entered promiscuous mode [ 176.922963][ T8373] syzkaller0: entered allmulticast mode [ 176.937725][ T8367] tipc: Resetting bearer [ 176.950646][ T8378] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 176.980134][ T8367] tipc: Disabling bearer [ 177.023834][ T8378] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.134757][ T8382] bond5: (slave veth3): Enslaving as an active interface with a down link [ 177.686231][ T8378] veth5: entered promiscuous mode [ 177.700590][ T8378] bond5: (slave veth5): Enslaving as an active interface with a down link [ 177.847800][ T8382] vlan0: entered allmulticast mode [ 177.854082][ T8382] bond5: entered allmulticast mode [ 177.860560][ T8382] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 177.900009][ T8384] syzkaller1: entered promiscuous mode [ 177.907875][ T8384] syzkaller1: entered allmulticast mode [ 178.229544][ T8415] syzkaller0: entered promiscuous mode [ 178.248326][ T8415] syzkaller0: entered allmulticast mode [ 178.309801][ T8419] tipc: Enabled bearer , priority 0 [ 178.356818][ T8422] tipc: Enabled bearer , priority 0 [ 178.365753][ T8422] syzkaller0: entered promiscuous mode [ 178.371259][ T8422] syzkaller0: entered allmulticast mode [ 178.379930][ T8419] syzkaller0: entered promiscuous mode [ 178.386785][ T8419] syzkaller0: entered allmulticast mode [ 178.409388][ T8422] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.465815][ T8422] tipc: Resetting bearer [ 178.471955][ T8424] tipc: Enabled bearer , priority 0 [ 178.487085][ T8419] tipc: Resetting bearer [ 178.495542][ T8421] tipc: Resetting bearer [ 178.513718][ T8421] tipc: Disabling bearer [ 178.526092][ T8424] syzkaller0: entered promiscuous mode [ 178.531609][ T8424] syzkaller0: entered allmulticast mode [ 178.548620][ T8417] tipc: Resetting bearer [ 178.586245][ T8417] tipc: Disabling bearer [ 178.601367][ T8427] tipc: Enabled bearer , priority 0 [ 178.622314][ T8433] netlink: 'syz.5.750': attribute type 1 has an invalid length. [ 178.654702][ T8424] tipc: Resetting bearer [ 178.660671][ T8424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.669235][ T8424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.688181][ T8432] syzkaller0: entered promiscuous mode [ 178.700928][ T8432] syzkaller0: entered allmulticast mode [ 178.756488][ T8433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.764346][ T8423] tipc: Resetting bearer [ 178.782178][ T8423] tipc: Disabling bearer [ 178.821024][ T8436] veth5: entered promiscuous mode [ 178.831591][ T8436] bond1: (slave veth5): Enslaving as an active interface with a down link [ 178.935145][ T8433] veth7: entered promiscuous mode [ 178.950227][ T8433] bond1: (slave veth7): Enslaving as an active interface with a down link [ 178.964195][ T8427] tipc: Resetting bearer [ 179.006122][ T8446] bond1: entered allmulticast mode [ 179.013294][ T8426] tipc: Resetting bearer [ 179.069175][ T8426] tipc: Disabling bearer [ 179.268341][ T8462] Cannot find add_set index 0 as target [ 180.812076][ T8460] tipc: Enabling of bearer rejected, failed to enable media [ 181.023121][ T8495] tipc: Enabled bearer , priority 0 [ 181.066614][ T8495] syzkaller0: entered promiscuous mode [ 181.072225][ T8495] syzkaller0: entered allmulticast mode [ 181.203578][ T8495] tipc: Resetting bearer [ 181.244672][ T8493] tipc: Resetting bearer [ 181.296360][ T8493] tipc: Disabling bearer [ 181.343893][ T8514] tipc: Enabled bearer , priority 0 [ 181.352433][ T8514] syzkaller0: entered promiscuous mode [ 181.358282][ T8514] syzkaller0: entered allmulticast mode [ 181.441809][ T8514] tipc: Resetting bearer [ 181.482992][ T8513] tipc: Resetting bearer [ 181.501805][ T8513] tipc: Disabling bearer [ 181.526169][ T8518] syzkaller0: entered promiscuous mode [ 181.531827][ T8518] syzkaller0: entered allmulticast mode [ 181.541950][ T8522] syzkaller0: entered promiscuous mode [ 181.548513][ T8522] syzkaller0: entered allmulticast mode [ 181.587360][ T8520] syzkaller0: entered promiscuous mode [ 181.594339][ T8520] syzkaller0: entered allmulticast mode [ 181.766085][ T8524] syzkaller0: entered promiscuous mode [ 181.788277][ T8524] syzkaller0: entered allmulticast mode [ 183.552148][ T8532] tipc: Enabled bearer , priority 0 [ 183.559487][ T8536] syzkaller0: entered promiscuous mode [ 183.566587][ T8536] syzkaller0: entered allmulticast mode [ 183.590942][ T8545] tipc: Resetting bearer [ 183.617026][ T8526] tipc: Resetting bearer [ 183.640973][ T8526] tipc: Disabling bearer [ 183.843440][ T8572] tipc: Enabled bearer , priority 0 [ 183.852420][ T8567] syzkaller0: entered promiscuous mode [ 183.858301][ T8567] syzkaller0: entered allmulticast mode [ 183.986274][ T8569] tipc: Resetting bearer [ 183.996920][ T8566] tipc: Resetting bearer [ 184.036412][ T8566] tipc: Disabling bearer [ 184.400145][ T8595] tipc: Enabled bearer , priority 0 [ 184.416162][ T8592] syzkaller0: entered promiscuous mode [ 184.421684][ T8592] syzkaller0: entered allmulticast mode [ 184.440353][ T8595] syzkaller0: entered promiscuous mode [ 184.447435][ T8595] syzkaller0: entered allmulticast mode [ 184.484020][ T8596] tipc: Enabled bearer , priority 0 [ 184.500601][ T8596] syzkaller0: entered promiscuous mode [ 184.506755][ T8596] syzkaller0: entered allmulticast mode [ 184.577406][ T8595] tipc: Resetting bearer [ 184.610471][ T8593] tipc: Resetting bearer [ 184.631825][ T8593] tipc: Disabling bearer [ 184.657066][ T8604] netlink: 2 bytes leftover after parsing attributes in process `syz.5.792'. [ 184.682168][ T8596] tipc: Resetting bearer [ 184.746024][ T8594] tipc: Resetting bearer [ 184.762359][ T8594] tipc: Disabling bearer [ 184.771773][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 184.798529][ T8612] tipc: Enabled bearer , priority 0 [ 184.807099][ T8607] syzkaller0: entered promiscuous mode [ 184.813520][ T8607] syzkaller0: entered allmulticast mode [ 184.853518][ T8609] tipc: Enabled bearer , priority 0 [ 184.900180][ T8607] tipc: Resetting bearer [ 184.921203][ T8609] syzkaller0: entered promiscuous mode [ 184.929925][ T8609] syzkaller0: entered allmulticast mode [ 184.949984][ T8616] netlink: 76 bytes leftover after parsing attributes in process `syz.5.800'. [ 184.962127][ T8606] tipc: Resetting bearer [ 184.994550][ T8606] tipc: Disabling bearer [ 185.018968][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.800'. [ 185.030399][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.800'. [ 185.076715][ T8613] tipc: Resetting bearer [ 185.104421][ T8616] 0: reclassify loop, rule prio 0, protocol 800 [ 185.136134][ T8608] tipc: Resetting bearer [ 185.153383][ T8608] tipc: Disabling bearer [ 185.188252][ T8625] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 185.208596][ T8623] syzkaller0: entered promiscuous mode [ 185.217578][ T8623] syzkaller0: entered allmulticast mode [ 185.606488][ T8639] tipc: Enabled bearer , priority 0 [ 185.639862][ T8639] syzkaller0: entered promiscuous mode [ 185.659978][ T8639] syzkaller0: entered allmulticast mode [ 185.700025][ T8639] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 185.781923][ T8639] tipc: Resetting bearer [ 185.797033][ T8637] tipc: Resetting bearer [ 185.815850][ T8637] tipc: Disabling bearer [ 186.011312][ T8659] tipc: Enabled bearer , priority 0 [ 186.083404][ T8661] syzkaller0: entered promiscuous mode [ 186.103644][ T8661] syzkaller0: entered allmulticast mode [ 186.121912][ T8668] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 186.147244][ T8662] syzkaller0: entered promiscuous mode [ 186.173355][ T8662] syzkaller0: entered allmulticast mode [ 186.326238][ T8662] tipc: Resetting bearer [ 186.431931][ T8685] netlink: 'syz.6.821': attribute type 39 has an invalid length. [ 187.799078][ T8657] tipc: Resetting bearer [ 187.811911][ T8657] tipc: Disabling bearer [ 189.235065][ T5891] tipc: Node number set to 1534115457 [ 189.261177][ T8706] tipc: Enabled bearer , priority 0 [ 189.304136][ T8707] syzkaller0: entered promiscuous mode [ 189.309667][ T8707] syzkaller0: entered allmulticast mode [ 189.342231][ T8705] tipc: Resetting bearer [ 189.420405][ T8703] tipc: Resetting bearer [ 189.474243][ T8703] tipc: Disabling bearer [ 189.538992][ T8728] syzkaller0: entered promiscuous mode [ 189.548650][ T8728] syzkaller0: entered allmulticast mode [ 189.676918][ T8728] tipc: Enabled bearer , priority 0 [ 189.695405][ T8734] syzkaller0: entered promiscuous mode [ 189.701174][ T8734] syzkaller0: entered allmulticast mode [ 189.735659][ T8727] tipc: Resetting bearer [ 189.785057][ T8727] tipc: Disabling bearer [ 189.825666][ T8739] tipc: Enabled bearer , priority 0 [ 189.844094][ T8736] syzkaller0: entered promiscuous mode [ 189.862988][ T8736] syzkaller0: entered allmulticast mode [ 189.880809][ T8736] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 190.095109][ T8742] tipc: Enabled bearer , priority 0 [ 190.434167][ T8743] syzkaller0: entered promiscuous mode [ 190.449484][ T8743] syzkaller0: entered allmulticast mode [ 190.457391][ T8743] tipc: Resetting bearer [ 190.471762][ T8739] netlink: 2 bytes leftover after parsing attributes in process `syz.3.832'. [ 190.513223][ T8749] tipc: Resetting bearer [ 190.519648][ T8735] tipc: Resetting bearer [ 190.568557][ T8735] tipc: Disabling bearer [ 190.622016][ T8753] netlink: 76 bytes leftover after parsing attributes in process `syz.5.836'. [ 190.772294][ T13] tipc: Resetting bearer [ 190.804173][ T8741] tipc: Resetting bearer [ 193.586938][ T8741] tipc: Disabling bearer [ 193.959335][ T8745] Set syz1 is full, maxelem 65536 reached [ 194.310793][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318647][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.552152][ T8768] tipc: Enabling of bearer rejected, failed to enable media [ 195.872144][ T8840] syzkaller0: entered promiscuous mode [ 195.881921][ T8840] syzkaller0: entered allmulticast mode [ 195.914263][ T8843] tipc: Enabled bearer , priority 0 [ 195.982892][ T8843] syzkaller0: entered promiscuous mode [ 195.988414][ T8843] syzkaller0: entered allmulticast mode [ 196.024171][ T8848] syz_tun: entered allmulticast mode [ 196.066725][ T8844] pimreg: entered allmulticast mode [ 196.087863][ T8843] tipc: Resetting bearer [ 196.113689][ T8841] syz_tun: left allmulticast mode [ 196.124321][ T8842] tipc: Resetting bearer [ 196.223888][ T8842] tipc: Disabling bearer [ 196.627311][ T8874] syzkaller0: entered promiscuous mode [ 196.652808][ T8874] syzkaller0: entered allmulticast mode [ 196.838989][ T8887] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.962429][ T8894] Bluetooth: MGMT ver 1.23 [ 197.234092][ T8906] netlink: 76 bytes leftover after parsing attributes in process `syz.6.873'. [ 197.397892][ T8914] syzkaller0: entered promiscuous mode [ 197.404146][ T8914] syzkaller0: entered allmulticast mode [ 197.567539][ T8923] syzkaller0: entered promiscuous mode [ 197.583015][ T8923] syzkaller0: entered allmulticast mode [ 198.047176][ T8946] netlink: 76 bytes leftover after parsing attributes in process `syz.4.891'. [ 198.069292][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 198.090397][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 198.151364][ T8954] netlink: 100 bytes leftover after parsing attributes in process `syz.3.894'. [ 198.486146][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.902'. [ 198.646037][ T8979] tipc: Enabled bearer , priority 0 [ 198.654207][ T8979] syzkaller0: entered promiscuous mode [ 198.659784][ T8979] syzkaller0: entered allmulticast mode [ 198.694459][ T8979] tipc: Resetting bearer [ 198.705785][ T8978] tipc: Resetting bearer [ 198.743299][ T8978] tipc: Disabling bearer [ 198.766821][ T8983] netlink: 76 bytes leftover after parsing attributes in process `syz.3.908'. [ 198.778286][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 198.789125][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 199.279109][ T9010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 199.289631][ T9010] tipc: Invalid UDP bearer configuration [ 199.289696][ T9010] tipc: Enabling of bearer rejected, failed to enable media [ 199.320735][ T9007] syzkaller0: entered promiscuous mode [ 199.348762][ T9007] syzkaller0: entered allmulticast mode [ 199.412037][ T9017] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 199.548663][ T9022] syzkaller0: entered promiscuous mode [ 199.584483][ T9022] syzkaller0: entered allmulticast mode [ 200.433711][ T9076] syzkaller0: entered promiscuous mode [ 200.439246][ T9076] syzkaller0: entered allmulticast mode [ 200.614826][ T9086] team0: Device vti0 is up. Set it down before adding it as a team port [ 200.898602][ T9101] tipc: Enabled bearer , priority 0 [ 200.915198][ T9101] syzkaller0: entered promiscuous mode [ 200.920805][ T9101] syzkaller0: entered allmulticast mode [ 200.934992][ T9101] tipc: Resetting bearer [ 200.960157][ T9100] tipc: Resetting bearer [ 200.984189][ T9100] tipc: Disabling bearer [ 201.189413][ T9116] syzkaller0: entered promiscuous mode [ 201.210164][ T9116] syzkaller0: entered allmulticast mode [ 201.518084][ T9133] syzkaller0: entered promiscuous mode [ 201.523815][ T9133] syzkaller0: entered allmulticast mode [ 201.670854][ T9146] tipc: Enabling of bearer rejected, failed to enable media [ 202.199907][ T9173] syzkaller0: entered promiscuous mode [ 202.247237][ T9173] syzkaller0: entered allmulticast mode [ 202.389807][ T9187] sctp: Trying to GSO but underlying device doesn't support it. [ 202.778727][ T9207] __nla_validate_parse: 4 callbacks suppressed [ 202.778749][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1011'. [ 202.966198][ T9219] xt_l2tp: missing protocol rule (udp|l2tpip) [ 203.082469][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1020'. [ 203.093363][ T9226] lo: Caught tx_queue_len zero misconfig [ 203.099049][ T9226] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1020'. [ 203.110859][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1021'. [ 203.259582][ T9233] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1024'. [ 203.550803][ T9247] syzkaller0: entered promiscuous mode [ 203.559547][ T9247] syzkaller0: entered allmulticast mode [ 203.905774][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1041'. [ 203.920600][ T9268] block nbd0: not configured, cannot reconfigure [ 204.228830][ T9291] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.420706][ T9297] syzkaller0: entered promiscuous mode [ 204.430172][ T9297] syzkaller0: entered allmulticast mode [ 204.443008][ T9299] netem: change failed [ 204.596628][ T9307] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1056'. [ 204.605817][ T9307] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 205.182939][ T9339] netlink: 'syz.4.1071': attribute type 3 has an invalid length. [ 205.402752][ T9351] tipc: Enabled bearer , priority 0 [ 205.416153][ T9351] syzkaller0: entered promiscuous mode [ 205.428383][ T9351] syzkaller0: entered allmulticast mode [ 205.440836][ T9351] tipc: Resetting bearer [ 205.461439][ T9349] tipc: Resetting bearer [ 205.517561][ T9349] tipc: Disabling bearer [ 205.607083][ T9361] syzkaller0: entered promiscuous mode [ 205.622728][ T9361] syzkaller0: entered allmulticast mode [ 206.224273][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1094'. [ 206.242202][ T9396] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1096'. [ 206.269766][ T9394] tipc: Enabled bearer , priority 0 [ 206.285103][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 206.359106][ T9394] syzkaller0: entered promiscuous mode [ 206.369172][ T9394] syzkaller0: entered allmulticast mode [ 206.383121][ T9394] tipc: Resetting bearer [ 206.392923][ T9391] tipc: Resetting bearer [ 206.428396][ T9391] tipc: Disabling bearer [ 206.781161][ T9418] raw_sendmsg: syz.3.1102 forgot to set AF_INET. Fix it! [ 206.968138][ T9435] tipc: Enabled bearer , priority 0 [ 207.022865][ T9435] syzkaller0: entered promiscuous mode [ 207.028396][ T9435] syzkaller0: entered allmulticast mode [ 207.087031][ T9435] tipc: Resetting bearer [ 207.115948][ T9432] tipc: Resetting bearer [ 207.137009][ T9432] tipc: Disabling bearer [ 207.950493][ T9486] tipc: Enabled bearer , priority 0 [ 207.973191][ T9492] __nla_validate_parse: 1 callbacks suppressed [ 207.973211][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1136'. [ 208.131753][ T9488] syzkaller0: entered promiscuous mode [ 208.150765][ T9488] syzkaller0: entered allmulticast mode [ 208.168910][ T9490] syzkaller0: entered promiscuous mode [ 208.175413][ T9490] syzkaller0: entered allmulticast mode [ 208.196790][ T9476] tipc: Resetting bearer [ 208.281212][ T9476] tipc: Disabling bearer [ 208.293146][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1141'. [ 210.240949][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 210.377912][ T9540] tipc: Enabled bearer , priority 13 [ 210.556460][ T9551] tipc: Enabled bearer , priority 0 [ 210.574605][ T9551] syzkaller0: entered promiscuous mode [ 210.580122][ T9551] syzkaller0: entered allmulticast mode [ 210.622391][ T9557] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1156'. [ 210.651935][ T9549] tipc: Resetting bearer [ 210.694167][ T9549] tipc: Disabling bearer [ 211.272407][ T9594] syzkaller1: entered promiscuous mode [ 211.278125][ T9594] syzkaller1: entered allmulticast mode [ 211.749111][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.757996][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 211.766022][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 213.829670][ T9640] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1190'. [ 214.503334][ T9713] vxcan1: tx address claim with different name [ 214.574800][ T9714] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1210'. [ 214.617344][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 214.627051][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 214.861745][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.022346][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.177002][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.297902][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.497457][ T36] bridge_slave_1: left allmulticast mode [ 215.505308][ T36] bridge_slave_1: left promiscuous mode [ 215.511152][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.530902][ T36] bridge_slave_0: left allmulticast mode [ 215.531977][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1231'. [ 215.547464][ T36] bridge_slave_0: left promiscuous mode [ 215.561838][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.954493][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.971096][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.998870][ T36] bond0 (unregistering): Released all slaves [ 216.573863][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'. [ 216.758281][ T36] hsr_slave_0: left promiscuous mode [ 216.769940][ T36] hsr_slave_1: left promiscuous mode [ 216.776236][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.784215][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.794418][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.803758][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.834713][ T36] veth1_macvtap: left promiscuous mode [ 216.840412][ T36] veth0_macvtap: left promiscuous mode [ 216.846472][ T36] veth1_vlan: left promiscuous mode [ 216.851879][ T36] veth0_vlan: left promiscuous mode [ 217.481989][ T36] team0 (unregistering): Port device team_slave_1 removed [ 217.577542][ T36] team0 (unregistering): Port device team_slave_0 removed [ 218.138683][ T9840] syzkaller0: entered promiscuous mode [ 218.161507][ T9840] syzkaller0: entered allmulticast mode [ 218.507958][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1260'. [ 218.652223][ T9871] netlink: 'syz.1.1264': attribute type 14 has an invalid length. [ 218.679486][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 218.712290][ T6596] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.725741][ T9871] netlink: 'syz.1.1264': attribute type 14 has an invalid length. [ 218.739812][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 218.761338][ T6596] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.784070][ T6596] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.932090][ T9891] tls_set_device_offload: netdev not found [ 219.141313][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 219.218759][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 219.527307][ T9917] "syz.1.1281" (9917) uses obsolete ecb(arc4) skcipher [ 219.848382][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 219.854028][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.866086][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.953517][ T9927] bridge_slave_1 (unregistering): left allmulticast mode [ 219.960626][ T9927] bridge_slave_1 (unregistering): left promiscuous mode [ 219.968396][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.118748][ T9938] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 221.878572][ T9972] netlink: 'syz.4.1298': attribute type 4 has an invalid length. [ 221.976593][ T9975] syzkaller1: entered promiscuous mode [ 221.982117][ T9975] syzkaller1: entered allmulticast mode [ 222.017361][ T9977] team0: No ports can be present during mode change [ 222.191886][ T9983] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1303'. [ 222.315768][ T9994] TCP: TCP_TX_DELAY enabled [ 222.696058][T10016] netlink: 'syz.4.1314': attribute type 29 has an invalid length. [ 222.709961][ T3463] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 222.723835][T10016] netlink: 'syz.4.1314': attribute type 29 has an invalid length. [ 222.753510][T10016] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1314'. [ 224.000334][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1343'. [ 224.032410][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1343'. [ 224.046624][ T197] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.087276][ T197] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.099663][ T197] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.121976][T10093] unsupported nlmsg_type 40 [ 224.152962][ T197] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.488311][T10114] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 224.518838][T10114] team0: Port device dummy0 added [ 224.534395][T10114] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 224.543976][T10114] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 224.560905][T10114] team0: Failed to send options change via netlink (err -105) [ 224.574610][T10114] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 224.607534][T10114] team0: Port device dummy0 removed [ 224.629118][T10114] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.665375][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1356'. [ 224.720994][T10124] netlink: 'syz.1.1357': attribute type 26 has an invalid length. [ 224.729401][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 224.818988][T10124] netlink: 'syz.1.1357': attribute type 26 has an invalid length. [ 224.827744][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 225.501403][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 229.434406][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1395'. [ 229.683913][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880583e9000: rx timeout, send abort [ 229.899860][T10241] syzkaller0: entered promiscuous mode [ 229.905654][T10241] syzkaller0: entered allmulticast mode [ 231.523632][T10276] tipc: Failed to remove unknown binding: 66,1,1/0:2359012865/2359012867 [ 232.011464][T10294] vlan2: entered allmulticast mode [ 232.022675][T10294] hsr0: entered allmulticast mode [ 232.032450][T10294] hsr_slave_0: entered allmulticast mode [ 232.044888][T10294] hsr_slave_1: entered allmulticast mode [ 232.331226][T10296] syzkaller0: entered promiscuous mode [ 232.337820][T10296] syzkaller0: entered allmulticast mode [ 232.537230][T10302] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1412'. [ 234.502066][T10337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1420'. [ 234.940024][T10354] netlink: 'syz.6.1425': attribute type 29 has an invalid length. [ 235.029877][T10354] netlink: 'syz.6.1425': attribute type 29 has an invalid length. [ 235.715374][T10387] syzkaller0: entered promiscuous mode [ 235.749571][T10387] syzkaller0: entered allmulticast mode [ 238.106285][T10405] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.279279][T10424] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 238.348986][T10427] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 238.664622][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1445'. [ 239.804480][T10443] syzkaller0: entered promiscuous mode [ 239.812193][T10443] syzkaller0: entered allmulticast mode [ 240.165600][T10453] syzkaller0: entered promiscuous mode [ 240.171220][T10453] syzkaller0: entered allmulticast mode [ 240.415425][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 241.686250][T10456] syzkaller0: entered promiscuous mode [ 241.691879][T10456] syzkaller0: entered allmulticast mode [ 241.839851][T10484] syzkaller0: entered promiscuous mode [ 241.847670][T10484] syzkaller0: entered allmulticast mode [ 241.912058][T10488] syzkaller0: entered promiscuous mode [ 241.918660][T10488] syzkaller0: entered allmulticast mode [ 242.340444][T10500] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 242.611863][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 242.735993][T10523] syzkaller0: entered promiscuous mode [ 242.741783][T10523] syzkaller0: entered allmulticast mode [ 244.512902][T10552] syzkaller0: entered promiscuous mode [ 244.543122][T10552] syzkaller0: entered allmulticast mode [ 246.708429][T10607] netlink: 'syz.4.1485': attribute type 3 has an invalid length. [ 246.723529][T10607] netlink: 'syz.4.1485': attribute type 3 has an invalid length. [ 246.881650][T10614] syzkaller0: entered promiscuous mode [ 246.894386][T10614] syzkaller0: entered allmulticast mode [ 248.856151][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 248.952445][T10669] syzkaller0: entered promiscuous mode [ 248.958607][T10669] syzkaller0: entered allmulticast mode [ 251.641000][T10720] tipc: Enabled bearer , priority 0 [ 251.675221][T10720] syzkaller0: entered promiscuous mode [ 251.680744][T10720] syzkaller0: entered allmulticast mode [ 251.740270][T10720] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 251.772622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.787261][T10720] tipc: Resetting bearer [ 251.816284][T10719] tipc: Resetting bearer [ 251.867558][T10719] tipc: Disabling bearer [ 251.889481][T10726] tipc: New replicast peer: 255.255.255.255 [ 251.898666][T10726] tipc: Enabled bearer , priority 10 [ 251.910687][T10728] syzkaller0: entered promiscuous mode [ 251.917465][T10728] syzkaller0: entered allmulticast mode [ 251.929807][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1512'. [ 252.120235][T10743] tipc: Enabled bearer , priority 0 [ 252.156353][T10743] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.181763][T10743] tipc: Resetting bearer [ 252.203985][T10740] tipc: Disabling bearer [ 252.246544][T10748] netlink: 'syz.5.1519': attribute type 8 has an invalid length. [ 252.398631][T10752] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1521'. [ 252.570670][T10759] netlink: 'syz.4.1524': attribute type 4 has an invalid length. [ 252.981064][T10775] tipc: Enabled bearer , priority 0 [ 253.022043][T10775] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.045810][T10775] tipc: Resetting bearer [ 253.092992][T10774] tipc: Disabling bearer [ 253.193653][T10786] tipc: Enabled bearer , priority 0 [ 253.234078][T10786] syzkaller0: entered promiscuous mode [ 253.240151][T10786] syzkaller0: entered allmulticast mode [ 253.313069][T10786] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.340961][T10786] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 253.383830][T10786] tipc: Resetting bearer [ 253.406039][T10795] syzkaller0: entered promiscuous mode [ 253.411562][T10795] syzkaller0: entered allmulticast mode [ 253.434536][T10784] tipc: Resetting bearer [ 253.471078][T10784] tipc: Disabling bearer [ 253.481425][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 253.692008][T10813] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 253.780793][T10813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.749721][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756147][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.887221][T10820] veth13: entered promiscuous mode [ 255.896589][T10820] bond5: (slave veth13): Enslaving as an active interface with an up link [ 255.905847][T10831] tipc: Enabling of bearer rejected, failed to enable media [ 257.934817][T10891] tipc: Enabled bearer , priority 0 [ 257.951442][T10918] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1558'. [ 257.961561][T10894] syzkaller0: entered promiscuous mode [ 257.968541][T10894] syzkaller0: entered allmulticast mode [ 258.085224][T10894] tipc: Resetting bearer [ 258.136871][T10894] tipc: Disabling bearer [ 258.438710][T10940] netlink: 'syz.6.1568': attribute type 4 has an invalid length. [ 259.975111][T10947] tipc: Enabling of bearer rejected, failed to enable media [ 259.986315][T10959] netlink: 'syz.6.1568': attribute type 11 has an invalid length. [ 259.994391][T10959] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1568'. [ 260.210577][T10981] tipc: Enabling of bearer rejected, failed to enable media [ 260.305766][T10994] Cannot find add_set index 1 as target [ 260.679139][T11013] netlink: 'syz.1.1579': attribute type 3 has an invalid length. [ 260.695023][T11014] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 260.701800][T11014] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 260.826146][T11018] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1580'. [ 260.918447][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 261.033820][T10984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.051362][T10984] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 261.139187][T10984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.169414][T10984] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 261.232231][T10984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.259827][T10984] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 261.705091][T10984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.711051][T10984] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 262.102644][T11077] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1598'. [ 262.136147][T11077] block nbd0: not configured, cannot reconfigure [ 264.470059][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 265.153666][T11190] tipc: Enabling of bearer rejected, failed to enable media [ 265.398925][T11212] tls_set_device_offload_rx: netdev not found [ 265.967281][T11237] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.984196][ T44] IPVS: starting estimator thread 0... [ 266.095356][T11243] IPVS: using max 25 ests per chain, 60000 per kthread [ 268.804191][T11396] tipc: Enabled bearer , priority 0 [ 268.811870][T11396] syzkaller0: entered promiscuous mode [ 268.817612][T11396] syzkaller0: entered allmulticast mode [ 268.840864][T11396] tipc: Resetting bearer [ 268.855768][T11394] tipc: Resetting bearer [ 268.893742][T11394] tipc: Disabling bearer [ 269.034644][T11406] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.227233][T11411] syzkaller0: entered promiscuous mode [ 269.233282][T11411] syzkaller0: entered allmulticast mode [ 269.697637][ T30] audit: type=1800 audit(1763128166.558:2): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1695" name="memory.events" dev="tmpfs" ino=1786 res=0 errno=0 [ 269.801153][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 271.464679][T11447] tipc: Enabling of bearer rejected, failed to enable media [ 272.114110][T11509] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 272.274879][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 272.295851][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 272.308035][T11509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.326676][T11523] netlink: 'syz.5.1712': attribute type 16 has an invalid length. [ 272.346130][T11523] netlink: 'syz.5.1712': attribute type 17 has an invalid length. [ 272.360073][T11515] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.369370][T11515] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 272.381174][T11515] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 272.455827][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.476017][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.503267][T11523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.599611][T11530] tipc: Enabled bearer , priority 0 [ 272.675276][T11530] syzkaller0: entered promiscuous mode [ 272.680893][T11530] syzkaller0: entered allmulticast mode [ 272.733289][T11530] tipc: Resetting bearer [ 272.788229][T11528] tipc: Resetting bearer [ 272.868552][T11528] tipc: Disabling bearer [ 273.209292][T11560] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 273.295676][T11560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.335896][T11566] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.344650][T11566] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 273.356164][T11566] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 273.358068][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1724'. [ 273.402917][T11563] tipc: Enabled bearer , priority 0 [ 273.420137][T11563] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 273.432294][T11563] tipc: Resetting bearer [ 273.460596][T11562] tipc: Disabling bearer [ 273.474415][T11560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.580617][T11577] syzkaller0: entered promiscuous mode [ 273.606149][T11577] syzkaller0: entered allmulticast mode [ 273.693974][T11583] syzkaller0: entered promiscuous mode [ 273.699623][T11583] syzkaller0: entered allmulticast mode [ 274.323088][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1737'. [ 274.490548][T11619] netlink: 'syz.6.1741': attribute type 1 has an invalid length. [ 274.578496][T11619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.679343][T11623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.693116][T11623] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.723726][T11623] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 274.847527][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1741'. [ 274.900517][T11624] tipc: Enabled bearer , priority 0 [ 274.990466][T11619] veth7: entered promiscuous mode [ 275.009366][T11629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.040242][T11640] tipc: Resetting bearer [ 275.049894][T11630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.106548][T11620] tipc: Disabling bearer [ 275.151160][T11648] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1745'. [ 275.394087][T11652] syzkaller0: entered promiscuous mode [ 275.400157][T11652] syzkaller0: entered allmulticast mode [ 275.439104][T11662] syzkaller0: entered promiscuous mode [ 275.453394][T11662] syzkaller0: entered allmulticast mode [ 275.611909][T11659] syzkaller0: entered promiscuous mode [ 275.617655][T11659] syzkaller0: entered allmulticast mode [ 275.897547][T11682] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 276.075447][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1756'. [ 278.778150][T11682] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 278.829826][T11684] veth11: entered promiscuous mode [ 279.109803][ T7543] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.130242][ T7543] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.153218][ T7543] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.175845][ T7543] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.193383][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 279.299099][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 279.328827][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 279.353042][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 279.630589][T11725] tipc: Enabled bearer , priority 0 [ 279.640266][T11731] netlink: 'syz.6.1773': attribute type 1 has an invalid length. [ 279.668754][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 279.694005][T11731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.703653][T11725] syzkaller0: entered promiscuous mode [ 279.711070][T11725] syzkaller0: entered allmulticast mode [ 279.764900][T11738] syzkaller0: entered promiscuous mode [ 279.770914][T11738] syzkaller0: entered allmulticast mode [ 279.798693][T11736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.805921][T11736] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.818274][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1773'. [ 279.822077][T11736] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 279.857840][T11731] veth9: entered promiscuous mode [ 280.472084][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1777'. [ 281.310306][T11742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.319860][T11725] tipc: Resetting bearer [ 281.336323][T11745] gre1: entered promiscuous mode [ 281.341522][T11745] gre1: entered allmulticast mode [ 281.358693][T11723] tipc: Resetting bearer [ 281.381626][T11723] tipc: Disabling bearer [ 281.516660][T11753] syzkaller0: entered promiscuous mode [ 281.522290][T11753] syzkaller0: entered allmulticast mode [ 283.189574][T11786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1786'. [ 283.468661][T11798] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 283.636742][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1790'. [ 284.691331][T11798] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 284.823446][T11800] veth13: entered promiscuous mode [ 284.901689][T11808] tipc: Enabled bearer , priority 0 [ 284.931602][T11813] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1794'. [ 284.981579][T11808] syzkaller0: entered promiscuous mode [ 284.987773][T11808] syzkaller0: entered allmulticast mode [ 285.013347][T11808] tipc: Resetting bearer [ 285.062810][T11807] tipc: Resetting bearer [ 285.177420][T11807] tipc: Disabling bearer [ 285.239499][T11827] syzkaller0: entered promiscuous mode [ 285.262908][T11827] syzkaller0: entered allmulticast mode [ 285.295941][T11827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.640803][T11855] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 285.689814][T11855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.737267][T11855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.748811][T11855] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 285.761979][T11855] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 285.822784][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1807'. [ 285.914251][T11862] veth15: entered promiscuous mode [ 285.937562][T11865] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.017658][T11874] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1813'. [ 286.931292][T11924] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1828'. [ 287.007862][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 287.160373][T11928] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.233937][T11948] tipc: Enabled bearer , priority 0 [ 287.287139][T11942] macvlan3: entered promiscuous mode [ 287.316587][T11942] macvlan3: entered allmulticast mode [ 287.471213][T11938] syzkaller0: entered promiscuous mode [ 287.477021][T11938] syzkaller0: entered allmulticast mode [ 287.487005][T11938] tipc: Resetting bearer [ 287.539496][T11928] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 287.564983][T11934] tipc: Resetting bearer [ 287.814444][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1838'. [ 289.173352][T11934] tipc: Disabling bearer [ 289.184753][T11965] syz_tun: entered allmulticast mode [ 289.254097][T11970] syz_tun (unregistering): left allmulticast mode [ 289.319058][T11972] tipc: Enabled bearer , priority 0 [ 289.337072][T11974] syzkaller0: entered promiscuous mode [ 289.351362][T11974] syzkaller0: entered allmulticast mode [ 289.371019][T11981] tipc: Resetting bearer [ 289.379200][T11971] tipc: Resetting bearer [ 289.415507][T11971] tipc: Disabling bearer [ 289.593472][T11990] syzkaller0: entered promiscuous mode [ 289.618457][T11990] syzkaller0: entered allmulticast mode [ 291.265220][T12022] tipc: Enabling of bearer rejected, failed to enable media [ 291.558806][T12040] syzkaller0: entered promiscuous mode [ 291.583342][T12040] syzkaller0: entered allmulticast mode [ 291.685274][T12049] FAULT_INJECTION: forcing a failure. [ 291.685274][T12049] name failslab, interval 1, probability 0, space 0, times 1 [ 291.723334][T12049] CPU: 1 UID: 0 PID: 12049 Comm: syz.5.1856 Not tainted syzkaller #0 PREEMPT(full) [ 291.723364][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.723375][T12049] Call Trace: [ 291.723383][T12049] [ 291.723392][T12049] dump_stack_lvl+0x189/0x250 [ 291.723424][T12049] ? __pfx____ratelimit+0x10/0x10 [ 291.723450][T12049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.723475][T12049] ? __pfx__printk+0x10/0x10 [ 291.723502][T12049] ? __pfx___might_resched+0x10/0x10 [ 291.723522][T12049] ? fs_reclaim_acquire+0x7d/0x100 [ 291.723546][T12049] should_fail_ex+0x414/0x560 [ 291.723580][T12049] should_failslab+0xa8/0x100 [ 291.723602][T12049] kmem_cache_alloc_noprof+0x74/0x6e0 [ 291.723629][T12049] ? create_new_namespaces+0x31/0x720 [ 291.723654][T12049] create_new_namespaces+0x31/0x720 [ 291.723673][T12049] ? apparmor_capable+0x137/0x1b0 [ 291.723705][T12049] ? bpf_lsm_capable+0x9/0x20 [ 291.723729][T12049] ? security_capable+0x7e/0x2e0 [ 291.723762][T12049] unshare_nsproxy_namespaces+0x11c/0x170 [ 291.723787][T12049] ksys_unshare+0x4c8/0x8c0 [ 291.723818][T12049] ? __pfx_ksys_unshare+0x10/0x10 [ 291.723839][T12049] ? ksys_write+0x22a/0x250 [ 291.723868][T12049] ? __pfx_ksys_write+0x10/0x10 [ 291.723903][T12049] __x64_sys_unshare+0x38/0x50 [ 291.723927][T12049] do_syscall_64+0xfa/0xfa0 [ 291.723952][T12049] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.723978][T12049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.723996][T12049] ? clear_bhb_loop+0x60/0xb0 [ 291.724020][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.724038][T12049] RIP: 0033:0x7f01a778f6c9 [ 291.724056][T12049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.724071][T12049] RSP: 002b:00007f01a59f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.724093][T12049] RAX: ffffffffffffffda RBX: 00007f01a79e5fa0 RCX: 00007f01a778f6c9 [ 291.724106][T12049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 291.724117][T12049] RBP: 00007f01a59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.724128][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.724139][T12049] R13: 00007f01a79e6038 R14: 00007f01a79e5fa0 R15: 00007ffe5edf6ff8 [ 291.724170][T12049] [ 291.756324][T12050] syzkaller0: entered promiscuous mode [ 291.774170][T12052] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 291.972836][T12050] syzkaller0: entered allmulticast mode [ 292.613505][T12084] netlink: 'syz.6.1863': attribute type 13 has an invalid length. [ 292.945654][T12090] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1865'. [ 292.975373][T12090] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1865'. [ 292.989837][T12090] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1865'. [ 293.155913][T12101] syzkaller0: entered promiscuous mode [ 293.162686][T12101] syzkaller0: entered allmulticast mode [ 293.189438][T12102] netlink: 'syz.6.1868': attribute type 5 has an invalid length. [ 293.211936][T12094] syzkaller0: entered promiscuous mode [ 293.228020][T12094] syzkaller0: entered allmulticast mode [ 293.592804][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 293.612579][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 293.644037][T12118] syzkaller0: entered promiscuous mode [ 293.649565][T12118] syzkaller0: entered allmulticast mode [ 294.210958][T12151] sctp: [Deprecated]: syz.1.1884 (pid 12151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.210958][T12151] Use struct sctp_sack_info instead [ 294.433028][T12164] FAULT_INJECTION: forcing a failure. [ 294.433028][T12164] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.487853][T12164] CPU: 0 UID: 0 PID: 12164 Comm: syz.1.1888 Not tainted syzkaller #0 PREEMPT(full) [ 294.487880][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.487891][T12164] Call Trace: [ 294.487898][T12164] [ 294.487906][T12164] dump_stack_lvl+0x189/0x250 [ 294.487937][T12164] ? __pfx____ratelimit+0x10/0x10 [ 294.487960][T12164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.487986][T12164] ? __pfx__printk+0x10/0x10 [ 294.488019][T12164] should_fail_ex+0x414/0x560 [ 294.488053][T12164] _copy_to_user+0x31/0xb0 [ 294.488080][T12164] simple_read_from_buffer+0xe1/0x170 [ 294.488114][T12164] proc_fail_nth_read+0x1b3/0x220 [ 294.488143][T12164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.488170][T12164] ? rw_verify_area+0x2a6/0x4d0 [ 294.488194][T12164] ? __lock_acquire+0xab9/0xd20 [ 294.488212][T12164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.488237][T12164] vfs_read+0x200/0xa30 [ 294.488261][T12164] ? fdget_pos+0x247/0x320 [ 294.488284][T12164] ? __pfx___mutex_lock+0x10/0x10 [ 294.488313][T12164] ? __pfx_vfs_read+0x10/0x10 [ 294.488341][T12164] ? __fget_files+0x2a/0x420 [ 294.488364][T12164] ? __fget_files+0x3a0/0x420 [ 294.488380][T12164] ? __fget_files+0x2a/0x420 [ 294.488408][T12164] ksys_read+0x145/0x250 [ 294.488437][T12164] ? __pfx_ksys_read+0x10/0x10 [ 294.488476][T12164] ? do_syscall_64+0xbe/0xfa0 [ 294.488506][T12164] do_syscall_64+0xfa/0xfa0 [ 294.488529][T12164] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.488553][T12164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.488571][T12164] ? clear_bhb_loop+0x60/0xb0 [ 294.488595][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.488613][T12164] RIP: 0033:0x7f017a38e0dc [ 294.488631][T12164] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.488647][T12164] RSP: 002b:00007f017b2a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.488667][T12164] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38e0dc [ 294.488679][T12164] RDX: 000000000000000f RSI: 00007f017b2a80a0 RDI: 0000000000000003 [ 294.488690][T12164] RBP: 00007f017b2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 294.488701][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.488711][T12164] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 294.488747][T12164] [ 294.726569][T12170] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1887'. [ 294.850164][T12178] SET target dimension over the limit! [ 294.913888][T12185] FAULT_INJECTION: forcing a failure. [ 294.913888][T12185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.927285][T12185] CPU: 0 UID: 0 PID: 12185 Comm: syz.1.1893 Not tainted syzkaller #0 PREEMPT(full) [ 294.927312][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.927324][T12185] Call Trace: [ 294.927332][T12185] [ 294.927340][T12185] dump_stack_lvl+0x189/0x250 [ 294.927370][T12185] ? __pfx____ratelimit+0x10/0x10 [ 294.927394][T12185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.927419][T12185] ? __pfx__printk+0x10/0x10 [ 294.927454][T12185] should_fail_ex+0x414/0x560 [ 294.927496][T12185] _copy_to_user+0x31/0xb0 [ 294.927523][T12185] simple_read_from_buffer+0xe1/0x170 [ 294.927555][T12185] proc_fail_nth_read+0x1b3/0x220 [ 294.927583][T12185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.927610][T12185] ? rw_verify_area+0x2a6/0x4d0 [ 294.927632][T12185] ? __lock_acquire+0xab9/0xd20 [ 294.927649][T12185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.927672][T12185] vfs_read+0x200/0xa30 [ 294.927697][T12185] ? fdget_pos+0x247/0x320 [ 294.927718][T12185] ? __pfx___mutex_lock+0x10/0x10 [ 294.927745][T12185] ? __pfx_vfs_read+0x10/0x10 [ 294.927770][T12185] ? __fget_files+0x2a/0x420 [ 294.927791][T12185] ? __fget_files+0x3a0/0x420 [ 294.927807][T12185] ? __fget_files+0x2a/0x420 [ 294.927836][T12185] ksys_read+0x145/0x250 [ 294.927864][T12185] ? __pfx_ksys_read+0x10/0x10 [ 294.927892][T12185] ? do_syscall_64+0xbe/0xfa0 [ 294.927923][T12185] do_syscall_64+0xfa/0xfa0 [ 294.927945][T12185] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.927969][T12185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.927984][T12185] ? clear_bhb_loop+0x60/0xb0 [ 294.928006][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.928024][T12185] RIP: 0033:0x7f017a38e0dc [ 294.928042][T12185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.928058][T12185] RSP: 002b:00007f017b2a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.928079][T12185] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38e0dc [ 294.928093][T12185] RDX: 000000000000000f RSI: 00007f017b2a80a0 RDI: 0000000000000003 [ 294.928105][T12185] RBP: 00007f017b2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 294.928116][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.928127][T12185] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 294.928164][T12185] [ 295.757206][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1899'. [ 296.464041][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1904'. [ 296.609819][T12239] syzkaller0: entered promiscuous mode [ 296.620204][T12239] syzkaller0: entered allmulticast mode [ 296.643815][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1905'. [ 296.729113][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1905'. [ 296.871310][T12251] netlink: 'syz.4.1908': attribute type 83 has an invalid length. [ 297.188889][T12263] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.379722][T12284] set match dimension is over the limit! [ 299.284256][T12303] tipc: Enabling of bearer rejected, failed to enable media [ 299.327049][T12325] x_tables: duplicate underflow at hook 3 [ 299.428537][T12327] syzkaller0: entered promiscuous mode [ 299.434118][T12327] syzkaller0: entered allmulticast mode [ 299.443414][T12327] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 299.619334][T12339] __nla_validate_parse: 2 callbacks suppressed [ 299.619354][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 299.896952][T12350] FAULT_INJECTION: forcing a failure. [ 299.896952][T12350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.925673][T12350] CPU: 1 UID: 0 PID: 12350 Comm: syz.4.1926 Not tainted syzkaller #0 PREEMPT(full) [ 299.925704][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.925725][T12350] Call Trace: [ 299.925732][T12350] [ 299.925741][T12350] dump_stack_lvl+0x189/0x250 [ 299.925772][T12350] ? __pfx____ratelimit+0x10/0x10 [ 299.925800][T12350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.925825][T12350] ? __pfx__printk+0x10/0x10 [ 299.925845][T12350] ? __might_fault+0xb0/0x130 [ 299.925885][T12350] should_fail_ex+0x414/0x560 [ 299.925918][T12350] _copy_from_user+0x2d/0xb0 [ 299.925944][T12350] do_bnep_sock_ioctl+0x285/0x640 [ 299.925966][T12350] ? kasan_quarantine_put+0xdd/0x220 [ 299.925994][T12350] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 299.926024][T12350] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 299.926055][T12350] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 299.926092][T12350] sock_do_ioctl+0xdc/0x300 [ 299.926120][T12350] ? __pfx_sock_do_ioctl+0x10/0x10 [ 299.926159][T12350] sock_ioctl+0x576/0x790 [ 299.926185][T12350] ? __pfx_sock_ioctl+0x10/0x10 [ 299.926213][T12350] ? __fget_files+0x3a0/0x420 [ 299.926229][T12350] ? __fget_files+0x2a/0x420 [ 299.926251][T12350] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.926273][T12350] ? __pfx_sock_ioctl+0x10/0x10 [ 299.926296][T12350] __se_sys_ioctl+0xfc/0x170 [ 299.926324][T12350] do_syscall_64+0xfa/0xfa0 [ 299.926348][T12350] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.926373][T12350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.926391][T12350] ? clear_bhb_loop+0x60/0xb0 [ 299.926415][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.926431][T12350] RIP: 0033:0x7f52d158f6c9 [ 299.926471][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.926486][T12350] RSP: 002b:00007f52d2425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.926507][T12350] RAX: ffffffffffffffda RBX: 00007f52d17e5fa0 RCX: 00007f52d158f6c9 [ 299.926520][T12350] RDX: 0000200000001200 RSI: 00000000400442c8 RDI: 0000000000000005 [ 299.926533][T12350] RBP: 00007f52d2425090 R08: 0000000000000000 R09: 0000000000000000 [ 299.926544][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.926556][T12350] R13: 00007f52d17e6038 R14: 00007f52d17e5fa0 R15: 00007fffeadce0d8 [ 299.926589][T12350] [ 300.044933][T12357] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1930'. [ 300.105148][T12359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1929'. [ 300.192773][T12359] netlink: 'syz.1.1929': attribute type 7 has an invalid length. [ 300.222798][T12359] netlink: 'syz.1.1929': attribute type 8 has an invalid length. [ 300.252543][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 300.305870][T12359] ip6gretap0: entered promiscuous mode [ 300.341108][T12359] syz_tun: entered promiscuous mode [ 300.354124][T12359] gretap0: entered promiscuous mode [ 300.960047][T12389] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 301.087724][T12399] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 301.175665][T12391] syzkaller0: entered promiscuous mode [ 301.181198][T12391] syzkaller0: entered allmulticast mode [ 301.431200][T12418] FAULT_INJECTION: forcing a failure. [ 301.431200][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.471885][T12418] CPU: 1 UID: 0 PID: 12418 Comm: syz.5.1945 Not tainted syzkaller #0 PREEMPT(full) [ 301.471914][T12418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.471925][T12418] Call Trace: [ 301.471933][T12418] [ 301.471941][T12418] dump_stack_lvl+0x189/0x250 [ 301.471972][T12418] ? __pfx____ratelimit+0x10/0x10 [ 301.471999][T12418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.472023][T12418] ? __pfx__printk+0x10/0x10 [ 301.472043][T12418] ? __might_fault+0xb0/0x130 [ 301.472082][T12418] should_fail_ex+0x414/0x560 [ 301.472116][T12418] _copy_from_iter+0x1de/0x1790 [ 301.472142][T12418] ? rcu_is_watching+0x15/0xb0 [ 301.472166][T12418] ? kmalloc_reserve+0xbd/0x290 [ 301.472184][T12418] ? __pfx__copy_from_iter+0x10/0x10 [ 301.472206][T12418] ? __build_skb_around+0x262/0x3f0 [ 301.472236][T12418] ? netlink_sendmsg+0x642/0xb30 [ 301.472253][T12418] ? skb_put+0x11b/0x210 [ 301.472273][T12418] netlink_sendmsg+0x6b2/0xb30 [ 301.472301][T12418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.472324][T12418] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.472352][T12418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.472370][T12418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.472390][T12418] __sock_sendmsg+0x21c/0x270 [ 301.472417][T12418] ____sys_sendmsg+0x505/0x830 [ 301.472460][T12418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.472491][T12418] ? import_iovec+0x74/0xa0 [ 301.472518][T12418] ___sys_sendmsg+0x21f/0x2a0 [ 301.472541][T12418] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.472601][T12418] ? __fget_files+0x2a/0x420 [ 301.472619][T12418] ? __fget_files+0x3a0/0x420 [ 301.472649][T12418] __x64_sys_sendmsg+0x19b/0x260 [ 301.472672][T12418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.472702][T12418] ? __pfx_ksys_write+0x10/0x10 [ 301.472733][T12418] ? do_syscall_64+0xbe/0xfa0 [ 301.472762][T12418] do_syscall_64+0xfa/0xfa0 [ 301.472784][T12418] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.472808][T12418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.472825][T12418] ? clear_bhb_loop+0x60/0xb0 [ 301.472845][T12418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.472860][T12418] RIP: 0033:0x7f01a778f6c9 [ 301.472877][T12418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.472892][T12418] RSP: 002b:00007f01a59f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.472912][T12418] RAX: ffffffffffffffda RBX: 00007f01a79e5fa0 RCX: 00007f01a778f6c9 [ 301.472924][T12418] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 301.472935][T12418] RBP: 00007f01a59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.472946][T12418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.472956][T12418] R13: 00007f01a79e6038 R14: 00007f01a79e5fa0 R15: 00007ffe5edf6ff8 [ 301.472989][T12418] [ 301.897292][T12428] tipc: Enabled bearer , priority 0 [ 301.917043][T12422] tipc: Resetting bearer [ 301.918504][T12434] FAULT_INJECTION: forcing a failure. [ 301.918504][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 301.935978][T12434] CPU: 0 UID: 0 PID: 12434 Comm: syz.1.1952 Not tainted syzkaller #0 PREEMPT(full) [ 301.936005][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.936016][T12434] Call Trace: [ 301.936024][T12434] [ 301.936031][T12434] dump_stack_lvl+0x189/0x250 [ 301.936062][T12434] ? __pfx____ratelimit+0x10/0x10 [ 301.936085][T12434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.936108][T12434] ? __pfx__printk+0x10/0x10 [ 301.936134][T12434] ? __pfx___might_resched+0x10/0x10 [ 301.936153][T12434] ? fs_reclaim_acquire+0x7d/0x100 [ 301.936176][T12434] should_fail_ex+0x414/0x560 [ 301.936209][T12434] should_failslab+0xa8/0x100 [ 301.936231][T12434] __kvmalloc_node_noprof+0x158/0x910 [ 301.936255][T12434] ? do_ip6t_set_ctl+0x88a/0xce0 [ 301.936278][T12434] ? nf_setsockopt+0x26f/0x290 [ 301.936298][T12434] ? translate_table+0x19b/0x2040 [ 301.936321][T12434] ? do_syscall_64+0xfa/0xfa0 [ 301.936351][T12434] translate_table+0x19b/0x2040 [ 301.936392][T12434] ? __lock_acquire+0xab9/0xd20 [ 301.936415][T12434] ? __pfx_translate_table+0x10/0x10 [ 301.936443][T12434] ? __might_fault+0xb0/0x130 [ 301.936484][T12434] ? _copy_from_user+0x94/0xb0 [ 301.936511][T12434] do_ip6t_set_ctl+0x970/0xce0 [ 301.936541][T12434] ? rcu_is_watching+0x15/0xb0 [ 301.936564][T12434] ? trace_contention_end+0x39/0x120 [ 301.936586][T12434] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 301.936638][T12434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.936677][T12434] ? __pfx_aa_sk_perm+0x10/0x10 [ 301.936718][T12434] nf_setsockopt+0x26f/0x290 [ 301.936743][T12434] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 301.936771][T12434] do_sock_setsockopt+0x17c/0x1b0 [ 301.936796][T12434] __x64_sys_setsockopt+0x13f/0x1b0 [ 301.936821][T12434] do_syscall_64+0xfa/0xfa0 [ 301.936844][T12434] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.936869][T12434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.936887][T12434] ? clear_bhb_loop+0x60/0xb0 [ 301.936911][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.936927][T12434] RIP: 0033:0x7f017a38f6c9 [ 301.936943][T12434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.936958][T12434] RSP: 002b:00007f017b2a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 301.936979][T12434] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38f6c9 [ 301.936992][T12434] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 301.937003][T12434] RBP: 00007f017b2a8090 R08: 00000000000003b8 R09: 0000000000000000 [ 301.937013][T12434] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.937024][T12434] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 301.937053][T12434] [ 302.214572][T12421] tipc: Disabling bearer [ 302.229387][T12436] netlink: 'syz.3.1949': attribute type 25 has an invalid length. [ 302.490719][T12451] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 302.510708][T12445] syzkaller0: entered promiscuous mode [ 302.510815][T12451] netlink: 'syz.6.1957': attribute type 1 has an invalid length. [ 302.516581][T12445] syzkaller0: entered allmulticast mode [ 302.554187][T12452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 302.691511][T12456] syzkaller0: entered promiscuous mode [ 302.732598][T12456] syzkaller0: entered allmulticast mode [ 303.080329][T12479] syzkaller0: entered promiscuous mode [ 303.087771][T12479] syzkaller0: entered allmulticast mode [ 303.335236][T12495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1974'. [ 303.368685][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 303.407764][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 303.445250][T12502] x_tables: unsorted underflow at hook 3 [ 303.446302][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 303.485576][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1975'. [ 303.497573][T12501] x_tables: unsorted underflow at hook 3 [ 303.532420][T12506] syzkaller0: entered promiscuous mode [ 303.560575][T12506] syzkaller0: entered allmulticast mode [ 303.871798][T12524] netlink: 'syz.5.1986': attribute type 11 has an invalid length. [ 303.912334][T12528] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1988'. [ 304.033274][T12529] veth11: entered promiscuous mode [ 304.059970][T12531] netlink: 'syz.4.1990': attribute type 83 has an invalid length. [ 304.218517][T12540] FAULT_INJECTION: forcing a failure. [ 304.218517][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 304.235527][T12540] CPU: 1 UID: 0 PID: 12540 Comm: syz.1.1995 Not tainted syzkaller #0 PREEMPT(full) [ 304.235557][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.235568][T12540] Call Trace: [ 304.235577][T12540] [ 304.235586][T12540] dump_stack_lvl+0x189/0x250 [ 304.235619][T12540] ? __pfx____ratelimit+0x10/0x10 [ 304.235646][T12540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.235673][T12540] ? __pfx__printk+0x10/0x10 [ 304.235700][T12540] ? __lock_acquire+0xab9/0xd20 [ 304.235761][T12540] should_fail_ex+0x414/0x560 [ 304.235798][T12540] should_failslab+0xa8/0x100 [ 304.235820][T12540] kmem_cache_alloc_noprof+0x74/0x6e0 [ 304.235847][T12540] ? skb_clone+0x212/0x3a0 [ 304.235876][T12540] skb_clone+0x212/0x3a0 [ 304.235902][T12540] __netlink_deliver_tap+0x404/0x850 [ 304.235937][T12540] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.235958][T12540] netlink_deliver_tap+0x19c/0x1b0 [ 304.235979][T12540] netlink_unicast+0x7fa/0x9e0 [ 304.236031][T12540] ? __pfx_netlink_unicast+0x10/0x10 [ 304.236062][T12540] ? netlink_sendmsg+0x642/0xb30 [ 304.236087][T12540] ? skb_put+0x11b/0x210 [ 304.236111][T12540] netlink_sendmsg+0x805/0xb30 [ 304.236141][T12540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.236165][T12540] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.236197][T12540] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.236216][T12540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.236249][T12540] __sock_sendmsg+0x21c/0x270 [ 304.236279][T12540] ____sys_sendmsg+0x505/0x830 [ 304.236308][T12540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.236341][T12540] ? import_iovec+0x74/0xa0 [ 304.236371][T12540] ___sys_sendmsg+0x21f/0x2a0 [ 304.236396][T12540] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.236481][T12540] ? __fget_files+0x2a/0x420 [ 304.236499][T12540] ? __fget_files+0x3a0/0x420 [ 304.236530][T12540] __x64_sys_sendmsg+0x19b/0x260 [ 304.236556][T12540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.236589][T12540] ? __pfx_ksys_write+0x10/0x10 [ 304.236621][T12540] ? do_syscall_64+0xbe/0xfa0 [ 304.236653][T12540] do_syscall_64+0xfa/0xfa0 [ 304.236678][T12540] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.236716][T12540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.236735][T12540] ? clear_bhb_loop+0x60/0xb0 [ 304.236759][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.236778][T12540] RIP: 0033:0x7f017a38f6c9 [ 304.236797][T12540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.236813][T12540] RSP: 002b:00007f017b2a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.236835][T12540] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38f6c9 [ 304.236849][T12540] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 304.236877][T12540] RBP: 00007f017b2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 304.236889][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.236901][T12540] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 304.236937][T12540] [ 304.622980][T12549] lo: Caught tx_queue_len zero misconfig [ 304.695973][T12553] FAULT_INJECTION: forcing a failure. [ 304.695973][T12553] name failslab, interval 1, probability 0, space 0, times 0 [ 304.709783][T12553] CPU: 1 UID: 0 PID: 12553 Comm: syz.3.1999 Not tainted syzkaller #0 PREEMPT(full) [ 304.709810][T12553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.709822][T12553] Call Trace: [ 304.709829][T12553] [ 304.709837][T12553] dump_stack_lvl+0x189/0x250 [ 304.709868][T12553] ? __pfx____ratelimit+0x10/0x10 [ 304.709893][T12553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.709918][T12553] ? __pfx__printk+0x10/0x10 [ 304.709940][T12553] ? __pfx___might_resched+0x10/0x10 [ 304.709961][T12553] ? fs_reclaim_acquire+0x7d/0x100 [ 304.709984][T12553] should_fail_ex+0x414/0x560 [ 304.710017][T12553] should_failslab+0xa8/0x100 [ 304.710038][T12553] __kmalloc_cache_noprof+0x6f/0x6f0 [ 304.710063][T12553] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 304.710089][T12553] ? pcpu_alloc_noprof+0xf85/0x1720 [ 304.710114][T12553] ? shrinker_alloc+0x59/0xa80 [ 304.710142][T12553] shrinker_alloc+0x59/0xa80 [ 304.710161][T12553] ? __raw_spin_lock_init+0x45/0x100 [ 304.710192][T12553] ? __raw_spin_lock_init+0x45/0x100 [ 304.710224][T12553] alloc_super+0x6a9/0x930 [ 304.710247][T12553] ? do_raw_spin_unlock+0x122/0x240 [ 304.710277][T12553] sget_fc+0x329/0xa40 [ 304.710304][T12553] ? __pfx_set_anon_super_fc+0x10/0x10 [ 304.710328][T12553] ? __pfx_mqueue_fill_super+0x10/0x10 [ 304.710353][T12553] get_tree_nodev+0x2a/0x150 [ 304.710382][T12553] vfs_get_tree+0x92/0x2b0 [ 304.710411][T12553] fc_mount_longterm+0x1c/0x100 [ 304.710437][T12553] mq_init_ns+0x3a1/0x510 [ 304.710463][T12553] copy_ipcs+0x29c/0x460 [ 304.710491][T12553] create_new_namespaces+0x218/0x720 [ 304.710515][T12553] ? security_capable+0x7e/0x2e0 [ 304.710548][T12553] unshare_nsproxy_namespaces+0x11c/0x170 [ 304.710570][T12553] ksys_unshare+0x4c8/0x8c0 [ 304.710602][T12553] ? __pfx_ksys_unshare+0x10/0x10 [ 304.710623][T12553] ? ksys_write+0x22a/0x250 [ 304.710652][T12553] ? __pfx_ksys_write+0x10/0x10 [ 304.710695][T12553] __x64_sys_unshare+0x38/0x50 [ 304.710718][T12553] do_syscall_64+0xfa/0xfa0 [ 304.710742][T12553] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.710768][T12553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.710786][T12553] ? clear_bhb_loop+0x60/0xb0 [ 304.710809][T12553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.710827][T12553] RIP: 0033:0x7fd23cb8f6c9 [ 304.710844][T12553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.710859][T12553] RSP: 002b:00007fd23daa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 304.710880][T12553] RAX: ffffffffffffffda RBX: 00007fd23cde5fa0 RCX: 00007fd23cb8f6c9 [ 304.710894][T12553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 304.710905][T12553] RBP: 00007fd23daa5090 R08: 0000000000000000 R09: 0000000000000000 [ 304.710917][T12553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.710928][T12553] R13: 00007fd23cde6038 R14: 00007fd23cde5fa0 R15: 00007fff279e43c8 [ 304.710962][T12553] [ 305.121869][T12563] __nla_validate_parse: 1 callbacks suppressed [ 305.121890][T12563] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2002'. [ 305.311386][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'. [ 305.417838][T12579] veth9: entered promiscuous mode [ 305.438565][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2006'. [ 305.695706][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 305.714546][ T197] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.725745][ T197] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.751344][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 305.760828][ T197] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.770694][ T197] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.796550][ T197] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.805722][ T197] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.819883][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.841458][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.131138][T12624] syzkaller0: entered promiscuous mode [ 306.139436][T12624] syzkaller0: entered allmulticast mode [ 306.227531][T12627] netlink: 'syz.1.2023': attribute type 1 has an invalid length. [ 306.353254][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2023'. [ 306.371989][T12627] veth15: entered promiscuous mode [ 306.408025][T12637] netlink: 'syz.6.2027': attribute type 11 has an invalid length. [ 306.420108][T12637] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2027'. [ 306.658801][T12643] tipc: Enabled bearer , priority 0 [ 306.745373][T12643] syzkaller0: entered promiscuous mode [ 306.750888][T12643] syzkaller0: entered allmulticast mode [ 306.767307][T12643] tipc: Resetting bearer [ 306.789343][T12647] syzkaller0: entered promiscuous mode [ 306.801213][T12647] syzkaller0: entered allmulticast mode [ 306.852229][T12643] tipc: Resetting bearer [ 308.440279][T12643] tipc: Disabling bearer [ 308.490711][T12670] syzkaller0: entered promiscuous mode [ 308.497910][T12670] syzkaller0: entered allmulticast mode [ 308.725782][T12686] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 308.756757][T12688] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 308.836988][T12686] veth17: entered promiscuous mode [ 308.849546][T12686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2038'. [ 308.917416][T12699] netlink: 'syz.4.2043': attribute type 83 has an invalid length. [ 309.108318][T12707] syzkaller0: entered promiscuous mode [ 309.116225][T12707] syzkaller0: entered allmulticast mode [ 309.123460][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2048'. [ 309.216219][T12709] tipc: Enabling of bearer rejected, failed to enable media [ 309.304021][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2052'. [ 309.339308][T12717] netlink: 'syz.6.2051': attribute type 1 has an invalid length. [ 309.358677][T12722] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 309.463992][T12722] veth21: entered promiscuous mode [ 309.478260][T12727] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.644215][T12734] netlink: 'syz.3.2058': attribute type 83 has an invalid length. [ 311.392257][T12741] __nla_validate_parse: 3 callbacks suppressed [ 311.392278][T12741] netlink: 64971 bytes leftover after parsing attributes in process `syz.4.2057'. [ 311.675025][T12786] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 311.683885][T12788] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 311.757054][T12788] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.916603][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2068'. [ 311.935795][T12788] veth17: entered promiscuous mode [ 312.160787][T12813] tipc: Enabled bearer , priority 0 [ 312.168746][T12813] syzkaller0: entered promiscuous mode [ 312.175971][T12813] syzkaller0: entered allmulticast mode [ 312.195867][T12811] syzkaller0: entered promiscuous mode [ 312.201412][T12811] syzkaller0: entered allmulticast mode [ 312.245364][T12818] netlink: 528 bytes leftover after parsing attributes in process `syz.5.2081'. [ 312.250043][T12813] tipc: Resetting bearer [ 312.260701][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 312.275875][T12814] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 312.305320][T12810] tipc: Resetting bearer [ 312.325029][T12810] tipc: Disabling bearer [ 312.489152][T12824] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2084'. [ 312.533893][T12824] netlink: 'syz.4.2084': attribute type 83 has an invalid length. [ 312.552631][T12826] sctp: [Deprecated]: syz.5.2085 (pid 12826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.552631][T12826] Use struct sctp_sack_info instead [ 312.599719][T12831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2083'. [ 312.665352][T12833] netlink: 'syz.4.2087': attribute type 21 has an invalid length. [ 312.674283][T12833] netlink: 'syz.4.2087': attribute type 22 has an invalid length. [ 312.692094][T12833] netlink: 'syz.4.2087': attribute type 23 has an invalid length. [ 312.706505][T12833] netlink: 'syz.4.2087': attribute type 25 has an invalid length. [ 312.711731][T12836] netlink: 'syz.5.2088': attribute type 1 has an invalid length. [ 312.723703][T12833] netlink: 'syz.4.2087': attribute type 26 has an invalid length. [ 312.741885][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'. [ 312.930504][T12846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2088'. [ 314.114713][T12836] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 314.174759][T12843] veth11: entered promiscuous mode [ 314.477451][T12866] syzkaller0: entered promiscuous mode [ 314.502748][T12866] syzkaller0: entered allmulticast mode [ 314.823440][T12889] netlink: 'syz.5.2104': attribute type 1 has an invalid length. [ 314.898697][T12889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.138661][T12889] veth13: entered promiscuous mode [ 316.166531][T12951] syzkaller0: entered promiscuous mode [ 316.172157][T12951] syzkaller0: entered allmulticast mode [ 316.278928][T12956] netlink: 'syz.5.2118': attribute type 1 has an invalid length. [ 316.418458][T12963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2118'. [ 316.451734][T12956] veth15: entered promiscuous mode [ 316.620317][T12975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2122'. [ 316.748716][T12983] validate_nla: 1 callbacks suppressed [ 316.748739][T12983] netlink: 'syz.4.2125': attribute type 83 has an invalid length. [ 316.907039][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2128'. [ 316.955362][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2130'. [ 317.200377][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.208285][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.237433][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 317.250124][T13009] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2134'. [ 317.274256][T13006] syzkaller0: entered promiscuous mode [ 317.279867][T13006] syzkaller0: entered allmulticast mode [ 317.332352][T13016] ip6t_rpfilter: unknown options [ 317.339382][T13018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.671870][T13031] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2139'. [ 317.759021][T13026] netlink: 'syz.6.2138': attribute type 1 has an invalid length. [ 317.767311][T13026] netlink: 'syz.6.2138': attribute type 1 has an invalid length. [ 317.836061][T13048] netlink: 'syz.1.2142': attribute type 1 has an invalid length. [ 317.961989][T13048] veth19: entered promiscuous mode [ 317.971101][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 318.475456][T13074] syzkaller0: entered promiscuous mode [ 318.484883][T13074] syzkaller0: entered allmulticast mode [ 318.635201][T13077] tipc: Enabled bearer , priority 0 [ 318.667435][T13077] syzkaller0: entered promiscuous mode [ 318.677514][T13077] syzkaller0: entered allmulticast mode [ 318.711880][T13077] tipc: Resetting bearer [ 318.726308][T13078] delete_channel: no stack [ 318.734617][T13076] tipc: Resetting bearer [ 318.785755][T13076] tipc: Disabling bearer [ 318.979487][T13095] syzkaller0: entered promiscuous mode [ 318.988372][T13095] syzkaller0: entered allmulticast mode [ 319.172822][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2162'. [ 319.359875][T13116] syzkaller0: entered promiscuous mode [ 319.375529][T13116] syzkaller0: entered allmulticast mode [ 319.540052][T13123] netlink: 'syz.5.2168': attribute type 1 has an invalid length. [ 319.635558][T13123] bond3: entered promiscuous mode [ 319.647436][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2169'. [ 319.655220][T13123] bond3: entered allmulticast mode [ 319.662227][T13123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.686038][T13129] macvlan2: entered promiscuous mode [ 319.706052][T13129] macvlan2: entered allmulticast mode [ 319.747161][T13129] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.840244][T13132] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 320.147289][T13162] netlink: 'syz.1.2176': attribute type 83 has an invalid length. [ 320.284448][T13164] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 320.463146][T13175] syzkaller0: entered promiscuous mode [ 320.477045][T13175] syzkaller0: entered allmulticast mode [ 320.531539][T13177] netlink: 'syz.1.2181': attribute type 2 has an invalid length. [ 321.117214][T13220] pim6reg1: entered promiscuous mode [ 321.123963][T13220] pim6reg1: entered allmulticast mode [ 321.346570][T13230] xt_socket: unknown flags 0xe4 [ 321.497037][T13239] syzkaller0: entered promiscuous mode [ 321.510395][T13239] syzkaller0: entered allmulticast mode [ 321.705792][ T1225] IPVS: starting estimator thread 0... [ 321.718811][T13251] __nla_validate_parse: 1 callbacks suppressed [ 321.718833][T13251] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2202'. [ 321.852929][T13252] IPVS: using max 27 ests per chain, 64800 per kthread [ 321.910718][T13266] team_slave_1: Caught tx_queue_len zero misconfig [ 321.967465][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2206'. [ 322.101438][T13274] netlink: 'syz.6.2211': attribute type 1 has an invalid length. [ 322.125750][T13274] netlink: 'syz.6.2211': attribute type 1 has an invalid length. [ 322.262765][T13283] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2211'. [ 322.264193][T13282] netlink: 'syz.3.2213': attribute type 25 has an invalid length. [ 322.292146][T13274] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 322.303670][T13280] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2211'. [ 322.462258][T13291] tipc: Enabled bearer , priority 0 [ 322.471551][T13289] syzkaller0: entered promiscuous mode [ 322.476001][T13287] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2215'. [ 322.479396][T13289] syzkaller0: entered allmulticast mode [ 322.516733][T13291] tipc: Resetting bearer [ 322.538707][T13290] tipc: Disabling bearer [ 322.547696][T13287] tipc: Enabled bearer , priority 0 [ 322.556345][T13287] syzkaller0: entered promiscuous mode [ 322.562013][T13287] syzkaller0: entered allmulticast mode [ 322.606959][T13287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 322.629377][T13285] tipc: Resetting bearer [ 322.682628][T13285] tipc: Disabling bearer [ 322.904806][T13304] bond7: invalid ARP target 0.0.0.0 specified for addition [ 322.912666][T13304] bond7: option arp_ip_target: invalid value (0) [ 322.949450][T13304] bond7 (unregistering): Released all slaves [ 322.956720][T13309] netlink: 'syz.5.2225': attribute type 25 has an invalid length. [ 323.144484][T13316] tipc: Enabled bearer , priority 0 [ 323.158569][T13316] tipc: Resetting bearer [ 323.182038][T13315] tipc: Disabling bearer [ 323.591515][T13331] tipc: Can't bind to reserved service type 2 [ 323.786937][T13340] netlink: 'syz.3.2238': attribute type 25 has an invalid length. [ 323.814298][T13342] syz_tun: entered allmulticast mode [ 323.826715][T13342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.860203][T13338] syz_tun: left allmulticast mode [ 323.924060][T13345] tipc: Enabled bearer , priority 0 [ 323.951146][T13345] tipc: Resetting bearer [ 323.991678][T13343] tipc: Disabling bearer [ 324.011602][T13350] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2244'. [ 324.113035][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2246'. [ 324.348491][T13377] FAULT_INJECTION: forcing a failure. [ 324.348491][T13377] name failslab, interval 1, probability 0, space 0, times 0 [ 324.362023][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.1.2250 Not tainted syzkaller #0 PREEMPT(full) [ 324.362052][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.362062][T13377] Call Trace: [ 324.362070][T13377] [ 324.362079][T13377] dump_stack_lvl+0x189/0x250 [ 324.362110][T13377] ? __pfx____ratelimit+0x10/0x10 [ 324.362134][T13377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.362158][T13377] ? __pfx__printk+0x10/0x10 [ 324.362183][T13377] ? __pfx___might_resched+0x10/0x10 [ 324.362201][T13377] ? fs_reclaim_acquire+0x7d/0x100 [ 324.362223][T13377] should_fail_ex+0x414/0x560 [ 324.362257][T13377] should_failslab+0xa8/0x100 [ 324.362278][T13377] kmem_cache_alloc_noprof+0x74/0x6e0 [ 324.362303][T13377] ? alloc_vfsmnt+0x23/0x430 [ 324.362331][T13377] alloc_vfsmnt+0x23/0x430 [ 324.362356][T13377] vfs_create_mount+0x69/0x320 [ 324.362381][T13377] fc_mount_longterm+0xa5/0x100 [ 324.362416][T13377] mq_init_ns+0x3a1/0x510 [ 324.362450][T13377] copy_ipcs+0x29c/0x460 [ 324.362487][T13377] create_new_namespaces+0x218/0x720 [ 324.362513][T13377] ? security_capable+0x7e/0x2e0 [ 324.362546][T13377] unshare_nsproxy_namespaces+0x11c/0x170 [ 324.362569][T13377] ksys_unshare+0x4c8/0x8c0 [ 324.362599][T13377] ? __pfx_ksys_unshare+0x10/0x10 [ 324.362619][T13377] ? ksys_write+0x22a/0x250 [ 324.362646][T13377] ? __pfx_ksys_write+0x10/0x10 [ 324.362679][T13377] __x64_sys_unshare+0x38/0x50 [ 324.362700][T13377] do_syscall_64+0xfa/0xfa0 [ 324.362723][T13377] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.362747][T13377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.362765][T13377] ? clear_bhb_loop+0x60/0xb0 [ 324.362788][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.362805][T13377] RIP: 0033:0x7f017a38f6c9 [ 324.362823][T13377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.362837][T13377] RSP: 002b:00007f017b2a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 324.362859][T13377] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38f6c9 [ 324.362873][T13377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 324.362885][T13377] RBP: 00007f017b2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 324.362896][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.362907][T13377] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 324.362941][T13377] [ 324.927824][T13392] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2254'. [ 325.144919][T13402] tipc: Enabling of bearer rejected, failed to enable media [ 378.627167][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635108][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.075418][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081778][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.142810][ T31] INFO: task kworker/0:3:1225 blocked for more than 143 seconds. [ 470.150593][ T31] Not tainted syzkaller #0 [ 470.155664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.164541][ T31] task:kworker/0:3 state:D stack:24008 pid:1225 tgid:1225 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 470.176635][ T31] Workqueue: events rfkill_sync_work [ 470.182141][ T31] Call Trace: [ 470.185530][ T31] [ 470.188501][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.193201][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.198618][ T31] ? __pfx___schedule+0x10/0x10 [ 470.203558][ T31] ? schedule+0x91/0x360 [ 470.207839][ T31] schedule+0x165/0x360 [ 470.212030][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.217672][ T31] __mutex_lock+0x7e6/0x1350 [ 470.222311][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.227445][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 470.252439][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.257550][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.280190][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.286296][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.292729][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 470.298496][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 470.305774][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 470.311536][ T31] rfkill_set_block+0x1d2/0x440 [ 470.316565][ T31] rfkill_sync_work+0x114/0x200 [ 470.321465][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.328547][ T31] process_scheduled_works+0xae1/0x17b0 [ 470.334570][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.341398][ T31] worker_thread+0x8a0/0xda0 [ 470.346450][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.353221][ T31] ? __kthread_parkme+0x7b/0x200 [ 470.358185][ T31] kthread+0x711/0x8a0 [ 470.362251][ T31] ? __pfx_worker_thread+0x10/0x10 [ 470.367663][ T31] ? __pfx_kthread+0x10/0x10 [ 470.372282][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.377715][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.385244][ T31] ? __pfx_kthread+0x10/0x10 [ 470.389877][ T31] ret_from_fork+0x4bc/0x870 [ 470.394551][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 470.399680][ T31] ? __switch_to_asm+0x39/0x70 [ 470.404578][ T31] ? __switch_to_asm+0x33/0x70 [ 470.409373][ T31] ? __pfx_kthread+0x10/0x10 [ 470.414027][ T31] ret_from_fork_asm+0x1a/0x30 [ 470.418806][ T31] [ 470.421914][ T31] INFO: task kworker/0:6:5967 blocked for more than 143 seconds. [ 470.429728][ T31] Not tainted syzkaller #0 [ 470.434781][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.443605][ T31] task:kworker/0:6 state:D stack:21000 pid:5967 tgid:5967 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 470.455957][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 470.462758][ T31] Call Trace: [ 470.466057][ T31] [ 470.469010][ T31] __schedule+0x1798/0x4cc0 [ 470.473760][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.479156][ T31] ? __pfx___schedule+0x10/0x10 [ 470.484050][ T31] ? schedule+0x91/0x360 [ 470.488294][ T31] schedule+0x165/0x360 [ 470.492617][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.498214][ T31] __mutex_lock+0x7e6/0x1350 [ 470.503027][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.507815][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 470.514161][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.519214][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.525011][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.530739][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 470.536868][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 470.542802][ T31] process_scheduled_works+0xae1/0x17b0 [ 470.548497][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 470.554603][ T31] worker_thread+0x8a0/0xda0 [ 470.559216][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.565593][ T31] ? __kthread_parkme+0x7b/0x200 [ 470.570623][ T31] kthread+0x711/0x8a0 [ 470.574718][ T31] ? __pfx_worker_thread+0x10/0x10 [ 470.579831][ T31] ? __pfx_kthread+0x10/0x10 [ 470.584471][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.589694][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.595043][ T31] ? __pfx_kthread+0x10/0x10 [ 470.599647][ T31] ret_from_fork+0x4bc/0x870 [ 470.604309][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 470.609429][ T31] ? __switch_to_asm+0x39/0x70 [ 470.614412][ T31] ? __switch_to_asm+0x33/0x70 [ 470.619256][ T31] ? __pfx_kthread+0x10/0x10 [ 470.623953][ T31] ret_from_fork_asm+0x1a/0x30 [ 470.628751][ T31] [ 470.631814][ T31] INFO: task syz.4.2203:13249 blocked for more than 143 seconds. [ 470.639601][ T31] Not tainted syzkaller #0 [ 470.644609][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.653420][ T31] task:syz.4.2203 state:D stack:25960 pid:13249 tgid:13249 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 470.665396][ T31] Call Trace: [ 470.668764][ T31] [ 470.671692][ T31] __schedule+0x1798/0x4cc0 [ 470.676265][ T31] ? validate_chain+0x897/0x2140 [ 470.681236][ T31] ? __lock_acquire+0xab9/0xd20 [ 470.686195][ T31] ? __pfx___schedule+0x10/0x10 [ 470.691070][ T31] ? schedule+0x91/0x360 [ 470.695508][ T31] schedule+0x165/0x360 [ 470.699672][ T31] schedule_timeout+0x9a/0x270 [ 470.704462][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 470.709847][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.715070][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.720265][ T31] ? wait_for_completion+0x267/0x5d0 [ 470.725605][ T31] wait_for_completion+0x2bf/0x5d0 [ 470.730726][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 470.736556][ T31] ? __flush_work+0xd2/0xbc0 [ 470.741176][ T31] ? __flush_work+0xd2/0xbc0 [ 470.745821][ T31] __flush_work+0x9b9/0xbc0 [ 470.750332][ T31] ? __flush_work+0xd2/0xbc0 [ 470.754957][ T31] ? __pfx___flush_work+0x10/0x10 [ 470.760010][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 470.765364][ T31] ? __pfx___cancel_work+0x10/0x10 [ 470.770470][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 470.776336][ T31] __cancel_work_sync+0xbe/0x110 [ 470.781447][ T31] rfkill_unregister+0x92/0x220 [ 470.786468][ T31] nfc_unregister_device+0x96/0x2a0 [ 470.791705][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 470.797479][ T31] virtual_ncidev_close+0x56/0x90 [ 470.802556][ T31] __fput+0x44c/0xa70 [ 470.806630][ T31] task_work_run+0x1d4/0x260 [ 470.811217][ T31] ? __pfx_task_work_run+0x10/0x10 [ 470.816367][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 470.821832][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 470.827143][ T31] do_syscall_64+0x2bd/0xfa0 [ 470.831729][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.836964][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.843076][ T31] ? clear_bhb_loop+0x60/0xb0 [ 470.847835][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.853827][ T31] RIP: 0033:0x7f52d158f6c9 [ 470.858243][ T31] RSP: 002b:00007fffeadce238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 470.866773][ T31] RAX: 0000000000000000 RBX: 000000000004e861 RCX: 00007f52d158f6c9 [ 470.874779][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 470.882834][ T31] RBP: 00007f52d17e7da0 R08: 0000000000000001 R09: 00000011eadce52f [ 470.890829][ T31] R10: 0000001b30120000 R11: 0000000000000246 R12: 00007f52d17e5fac [ 470.898890][ T31] R13: 00007f52d17e5fa0 R14: ffffffffffffffff R15: 00007fffeadce350 [ 470.906930][ T31] [ 470.909961][ T31] INFO: task syz.6.2247:13357 blocked for more than 144 seconds. [ 470.921461][ T31] Not tainted syzkaller #0 [ 470.926467][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.935156][ T31] task:syz.6.2247 state:D stack:24744 pid:13357 tgid:13356 ppid:6389 task_flags:0x400140 flags:0x00080002 [ 470.947491][ T31] Call Trace: [ 470.950789][ T31] [ 470.953767][ T31] __schedule+0x1798/0x4cc0 [ 470.958276][ T31] ? __lock_acquire+0xab9/0xd20 [ 470.963153][ T31] ? __lock_acquire+0xab9/0xd20 [ 470.968006][ T31] ? __pfx___schedule+0x10/0x10 [ 470.972960][ T31] ? schedule+0x91/0x360 [ 470.977226][ T31] schedule+0x165/0x360 [ 470.981378][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.986943][ T31] __mutex_lock+0x7e6/0x1350 [ 470.991545][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.996512][ T31] ? rfkill_fop_open+0x12d/0x820 [ 471.001544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.006598][ T31] ? rfkill_fop_open+0x5a/0x820 [ 471.011456][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 471.016809][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 471.022212][ T31] rfkill_fop_open+0x12d/0x820 [ 471.027001][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 471.032278][ T31] misc_open+0x2d5/0x350 [ 471.036549][ T31] chrdev_open+0x4cc/0x5e0 [ 471.040974][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.045986][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 471.052331][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.057367][ T31] do_dentry_open+0x953/0x13f0 [ 471.062167][ T31] vfs_open+0x3b/0x340 [ 471.066282][ T31] ? path_openat+0x2ecd/0x3830 [ 471.071062][ T31] path_openat+0x2ee5/0x3830 [ 471.075706][ T31] ? __pfx_path_openat+0x10/0x10 [ 471.080649][ T31] do_filp_open+0x1fa/0x410 [ 471.085180][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.090025][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 471.095093][ T31] ? _raw_spin_unlock+0x28/0x50 [ 471.099941][ T31] ? alloc_fd+0x64c/0x6c0 [ 471.104299][ T31] do_sys_openat2+0x121/0x1c0 [ 471.108974][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.114196][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.118960][ T31] __x64_sys_openat+0x138/0x170 [ 471.123840][ T31] do_syscall_64+0xfa/0xfa0 [ 471.128345][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.133582][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.139730][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.144424][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.150307][ T31] RIP: 0033:0x7f79a738f6c9 [ 471.154741][ T31] RSP: 002b:00007f79a8206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.163214][ T31] RAX: ffffffffffffffda RBX: 00007f79a75e5fa0 RCX: 00007f79a738f6c9 [ 471.171219][ T31] RDX: 0000000000080080 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 471.179241][ T31] RBP: 00007f79a7411f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.187389][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.195411][ T31] R13: 00007f79a75e6038 R14: 00007f79a75e5fa0 R15: 00007ffdd37a9918 [ 471.203561][ T31] [ 471.206635][ T31] INFO: task syz.5.2248:13366 blocked for more than 144 seconds. [ 471.214412][ T31] Not tainted syzkaller #0 [ 471.219355][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.228065][ T31] task:syz.5.2248 state:D stack:25800 pid:13366 tgid:13364 ppid:6387 task_flags:0x400140 flags:0x00080002 [ 471.240032][ T31] Call Trace: [ 471.243429][ T31] [ 471.246398][ T31] __schedule+0x1798/0x4cc0 [ 471.250911][ T31] ? security_file_open+0xb1/0x270 [ 471.256092][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.260975][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.265849][ T31] ? __pfx___schedule+0x10/0x10 [ 471.270725][ T31] ? schedule+0x91/0x360 [ 471.275087][ T31] schedule+0x165/0x360 [ 471.279273][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.284906][ T31] __mutex_lock+0x7e6/0x1350 [ 471.289530][ T31] ? __mutex_lock+0x5bb/0x1350 [ 471.294363][ T31] ? misc_open+0x51/0x350 [ 471.298707][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.303868][ T31] misc_open+0x51/0x350 [ 471.308041][ T31] chrdev_open+0x4cc/0x5e0 [ 471.312535][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.317479][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 471.323861][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.328815][ T31] do_dentry_open+0x953/0x13f0 [ 471.333659][ T31] vfs_open+0x3b/0x340 [ 471.337746][ T31] ? path_openat+0x2ecd/0x3830 [ 471.342564][ T31] path_openat+0x2ee5/0x3830 [ 471.347235][ T31] ? __pfx_path_openat+0x10/0x10 [ 471.352225][ T31] do_filp_open+0x1fa/0x410 [ 471.356802][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.361651][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 471.366709][ T31] ? _raw_spin_unlock+0x28/0x50 [ 471.371563][ T31] ? alloc_fd+0x64c/0x6c0 [ 471.375944][ T31] do_sys_openat2+0x121/0x1c0 [ 471.380621][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.385859][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.390635][ T31] __x64_sys_openat+0x138/0x170 [ 471.395535][ T31] do_syscall_64+0xfa/0xfa0 [ 471.400039][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.405359][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.411420][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.416131][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.422018][ T31] RIP: 0033:0x7f01a778f6c9 [ 471.427440][ T31] RSP: 002b:00007f01a59f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.435957][ T31] RAX: ffffffffffffffda RBX: 00007f01a79e5fa0 RCX: 00007f01a778f6c9 [ 471.443974][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 471.451944][ T31] RBP: 00007f01a7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.460022][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.468080][ T31] R13: 00007f01a79e6038 R14: 00007f01a79e5fa0 R15: 00007ffe5edf6ff8 [ 471.476137][ T31] [ 471.479209][ T31] INFO: task syz.3.2249:13369 blocked for more than 144 seconds. [ 471.487145][ T31] Not tainted syzkaller #0 [ 471.492072][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.500777][ T31] task:syz.3.2249 state:D stack:27704 pid:13369 tgid:13368 ppid:5842 task_flags:0x400040 flags:0x00080002 [ 471.512810][ T31] Call Trace: [ 471.516119][ T31] [ 471.519066][ T31] __schedule+0x1798/0x4cc0 [ 471.523600][ T31] ? security_file_open+0xb1/0x270 [ 471.528800][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.533681][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.538527][ T31] ? __pfx___schedule+0x10/0x10 [ 471.543518][ T31] ? schedule+0x91/0x360 [ 471.547756][ T31] schedule+0x165/0x360 [ 471.551990][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.557483][ T31] __mutex_lock+0x7e6/0x1350 [ 471.562077][ T31] ? __mutex_lock+0x5bb/0x1350 [ 471.566883][ T31] ? misc_open+0x51/0x350 [ 471.571209][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.576355][ T31] misc_open+0x51/0x350 [ 471.580512][ T31] chrdev_open+0x4cc/0x5e0 [ 471.585022][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.589957][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 471.596339][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.601298][ T31] do_dentry_open+0x953/0x13f0 [ 471.606118][ T31] vfs_open+0x3b/0x340 [ 471.610177][ T31] ? path_openat+0x2ecd/0x3830 [ 471.614988][ T31] path_openat+0x2ee5/0x3830 [ 471.619643][ T31] ? __pfx_path_openat+0x10/0x10 [ 471.624627][ T31] do_filp_open+0x1fa/0x410 [ 471.629127][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.634034][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 471.639155][ T31] ? _raw_spin_unlock+0x28/0x50 [ 471.644037][ T31] ? alloc_fd+0x64c/0x6c0 [ 471.648460][ T31] do_sys_openat2+0x121/0x1c0 [ 471.653158][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.658367][ T31] ? exc_page_fault+0x82/0x100 [ 471.663214][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 471.668541][ T31] __x64_sys_openat+0x138/0x170 [ 471.673439][ T31] do_syscall_64+0xfa/0xfa0 [ 471.677939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.683155][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.689215][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.693956][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.699911][ T31] RIP: 0033:0x7fd23cb8f6c9 [ 471.704437][ T31] RSP: 002b:00007fd23daa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.712897][ T31] RAX: ffffffffffffffda RBX: 00007fd23cde5fa0 RCX: 00007fd23cb8f6c9 [ 471.720901][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 471.728911][ T31] RBP: 00007fd23cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 471.736933][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.744985][ T31] R13: 00007fd23cde6038 R14: 00007fd23cde5fa0 R15: 00007fff279e43c8 [ 471.753298][ T31] [ 471.756338][ T31] INFO: task syz.1.2258:13401 blocked for more than 144 seconds. [ 471.764141][ T31] Not tainted syzkaller #0 [ 471.769243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.777967][ T31] task:syz.1.2258 state:D stack:28296 pid:13401 tgid:13400 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 471.789947][ T31] Call Trace: [ 471.793253][ T31] [ 471.796183][ T31] __schedule+0x1798/0x4cc0 [ 471.800684][ T31] ? security_file_open+0xb1/0x270 [ 471.805838][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.810690][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.815641][ T31] ? __pfx___schedule+0x10/0x10 [ 471.820587][ T31] ? schedule+0x91/0x360 [ 471.824877][ T31] schedule+0x165/0x360 [ 471.829028][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.834503][ T31] __mutex_lock+0x7e6/0x1350 [ 471.839091][ T31] ? __mutex_lock+0x5bb/0x1350 [ 471.843972][ T31] ? misc_open+0x51/0x350 [ 471.848305][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.853373][ T31] misc_open+0x51/0x350 [ 471.857524][ T31] chrdev_open+0x4cc/0x5e0 [ 471.861934][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.866916][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 471.873260][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.878199][ T31] do_dentry_open+0x953/0x13f0 [ 471.883094][ T31] vfs_open+0x3b/0x340 [ 471.887154][ T31] ? path_openat+0x2ecd/0x3830 [ 471.891952][ T31] path_openat+0x2ee5/0x3830 [ 471.896635][ T31] ? __pfx_path_openat+0x10/0x10 [ 471.901780][ T31] do_filp_open+0x1fa/0x410 [ 471.906690][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.911546][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 471.916608][ T31] ? _raw_spin_unlock+0x28/0x50 [ 471.921473][ T31] ? alloc_fd+0x64c/0x6c0 [ 471.925858][ T31] do_sys_openat2+0x121/0x1c0 [ 471.930631][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.935980][ T31] ? exc_page_fault+0x82/0x100 [ 471.940773][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 471.946105][ T31] __x64_sys_openat+0x138/0x170 [ 471.950963][ T31] do_syscall_64+0xfa/0xfa0 [ 471.955487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.960679][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.966764][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.971441][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.977468][ T31] RIP: 0033:0x7f017a38f6c9 [ 471.981877][ T31] RSP: 002b:00007f017b2a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.990352][ T31] RAX: ffffffffffffffda RBX: 00007f017a5e5fa0 RCX: 00007f017a38f6c9 [ 471.998383][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 472.006407][ T31] RBP: 00007f017a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.014402][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.022457][ T31] R13: 00007f017a5e6038 R14: 00007f017a5e5fa0 R15: 00007ffd4dda4fc8 [ 472.030567][ T31] [ 472.033683][ T31] INFO: task syz.1.2258:13402 blocked for more than 145 seconds. [ 472.041420][ T31] Not tainted syzkaller #0 [ 472.046767][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.055475][ T31] task:syz.1.2258 state:D stack:25480 pid:13402 tgid:13400 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 472.067520][ T31] Call Trace: [ 472.070801][ T31] [ 472.073745][ T31] __schedule+0x1798/0x4cc0 [ 472.078261][ T31] ? security_file_open+0xb1/0x270 [ 472.083599][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.088446][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.093337][ T31] ? __pfx___schedule+0x10/0x10 [ 472.098192][ T31] ? schedule+0x91/0x360 [ 472.102481][ T31] schedule+0x165/0x360 [ 472.106686][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.112143][ T31] __mutex_lock+0x7e6/0x1350 [ 472.116763][ T31] ? __mutex_lock+0x5bb/0x1350 [ 472.121530][ T31] ? misc_open+0x51/0x350 [ 472.125885][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.130921][ T31] misc_open+0x51/0x350 [ 472.135112][ T31] chrdev_open+0x4cc/0x5e0 [ 472.139538][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.144651][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 472.151001][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 472.156019][ T31] do_dentry_open+0x953/0x13f0 [ 472.160791][ T31] vfs_open+0x3b/0x340 [ 472.164897][ T31] ? path_openat+0x2ecd/0x3830 [ 472.169694][ T31] path_openat+0x2ee5/0x3830 [ 472.174427][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.179434][ T31] do_filp_open+0x1fa/0x410 [ 472.184002][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.188847][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.193904][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.198749][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.203126][ T31] do_sys_openat2+0x121/0x1c0 [ 472.207830][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.213220][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.218010][ T31] __x64_sys_openat+0x138/0x170 [ 472.222949][ T31] do_syscall_64+0xfa/0xfa0 [ 472.227569][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.232793][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.238864][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.243564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.249459][ T31] RIP: 0033:0x7f017a38f6c9 [ 472.253918][ T31] RSP: 002b:00007f017b287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.262334][ T31] RAX: ffffffffffffffda RBX: 00007f017a5e6090 RCX: 00007f017a38f6c9 [ 472.270374][ T31] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 472.278392][ T31] RBP: 00007f017a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.286388][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.294591][ T31] R13: 00007f017a5e6128 R14: 00007f017a5e6090 R15: 00007ffd4dda4fc8 [ 472.302651][ T31] [ 472.305728][ T31] [ 472.305728][ T31] Showing all locks held in the system: [ 472.313512][ T31] 1 lock held by khungtaskd/31: [ 472.318367][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 472.328280][ T31] 2 locks held by kworker/u8:3/42: [ 472.333420][ T31] #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.345158][ T31] #1: ffffc90000b27ba0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 472.357250][ T31] 4 locks held by kworker/0:3/1225: [ 472.362502][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.373662][ T31] #1: ffffc90003a4fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.386158][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 472.396245][ T31] #3: ffff888079950100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 472.405999][ T31] 2 locks held by getty/5591: [ 472.410704][ T31] #0: ffff88814ded50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 472.420487][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 472.430611][ T31] 3 locks held by kworker/0:6/5967: [ 472.435821][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.446820][ T31] #1: ffffc9000ab97ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.460338][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 472.472562][ T31] 1 lock held by syz.4.2203/13249: [ 472.477706][ T31] #0: ffff888079950100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 472.487670][ T31] 2 locks held by syz.6.2247/13357: [ 472.493026][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.501467][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 472.511524][ T31] 1 lock held by syz.5.2248/13366: [ 472.516672][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.525130][ T31] 1 lock held by syz.3.2249/13369: [ 472.530230][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.538723][ T31] 1 lock held by syz.1.2258/13401: [ 472.543930][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.552494][ T31] 1 lock held by syz.1.2258/13402: [ 472.557617][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.566100][ T31] 1 lock held by syz-executor/13407: [ 472.571388][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.579892][ T31] 1 lock held by syz-executor/13411: [ 472.585306][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.593865][ T31] 1 lock held by syz-executor/13412: [ 472.599163][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.607686][ T31] 1 lock held by syz-executor/13413: [ 472.613099][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.621533][ T31] 1 lock held by syz-executor/13415: [ 472.626894][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.635401][ T31] 1 lock held by syz-executor/13420: [ 472.640692][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.649205][ T31] 1 lock held by syz-executor/13424: [ 472.654593][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.663054][ T31] 1 lock held by syz-executor/13425: [ 472.668326][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.676818][ T31] 1 lock held by syz-executor/13426: [ 472.682105][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.690620][ T31] 1 lock held by syz-executor/13428: [ 472.695963][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.704458][ T31] 1 lock held by syz-executor/13433: [ 472.709760][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.718313][ T31] 1 lock held by syz-executor/13436: [ 472.723656][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.732189][ T31] 1 lock held by syz-executor/13437: [ 472.737549][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.746112][ T31] 1 lock held by syz-executor/13439: [ 472.751405][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.759896][ T31] 1 lock held by syz-executor/13441: [ 472.765200][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 472.773678][ T31] [ 472.776010][ T31] ============================================= [ 472.776010][ T31] [ 472.784498][ T31] NMI backtrace for cpu 1 [ 472.784519][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 472.784532][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.784539][ T31] Call Trace: [ 472.784545][ T31] [ 472.784550][ T31] dump_stack_lvl+0x189/0x250 [ 472.784569][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.784583][ T31] ? __pfx__printk+0x10/0x10 [ 472.784601][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 472.784616][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.784630][ T31] ? __pfx__printk+0x10/0x10 [ 472.784643][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.784661][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 472.784676][ T31] watchdog+0xf60/0xfa0 [ 472.784690][ T31] ? watchdog+0x1e2/0xfa0 [ 472.784703][ T31] kthread+0x711/0x8a0 [ 472.784719][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.784730][ T31] ? __pfx_kthread+0x10/0x10 [ 472.784745][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.784759][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.784773][ T31] ? __pfx_kthread+0x10/0x10 [ 472.784787][ T31] ret_from_fork+0x4bc/0x870 [ 472.784800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.784815][ T31] ? __switch_to_asm+0x39/0x70 [ 472.784823][ T31] ? __switch_to_asm+0x33/0x70 [ 472.784832][ T31] ? __pfx_kthread+0x10/0x10 [ 472.784846][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.784864][ T31] [ 472.784868][ T31] Sending NMI from CPU 1 to CPUs 0: [ 472.929829][ C0] NMI backtrace for cpu 0 [ 472.929847][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 472.929865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.929874][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 472.929900][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 472.929912][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 472.929928][ C0] RAX: 6e7b5ab4f1daae00 RBX: ffffffff81967b47 RCX: 6e7b5ab4f1daae00 [ 472.929940][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e04f RDI: ffffffff8bbf0760 [ 472.929950][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 472.929961][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 472.929972][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 472.929982][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 472.929995][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.930006][ C0] CR2: 0000562026c9bf40 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 472.930021][ C0] Call Trace: [ 472.930028][ C0] [ 472.930034][ C0] default_idle+0x13/0x20 [ 472.930049][ C0] default_idle_call+0x73/0xb0 [ 472.930064][ C0] do_idle+0x1e7/0x510 [ 472.930083][ C0] ? __pfx_do_idle+0x10/0x10 [ 472.930105][ C0] cpu_startup_entry+0x44/0x60 [ 472.930121][ C0] rest_init+0x2de/0x300 [ 472.930137][ C0] start_kernel+0x3ae/0x410 [ 472.930156][ C0] x86_64_start_reservations+0x24/0x30 [ 472.930175][ C0] x86_64_start_kernel+0x143/0x1c0 [ 472.930194][ C0] common_startup_64+0x13e/0x147 [ 472.930221][ C0]