last executing test programs: 4m29.167420195s ago: executing program 3 (id=4202): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000040000000000000000100000e22009c90"], 0x0) 4m29.034966157s ago: executing program 3 (id=4206): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x80001) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r7], 0x3c}}, 0x10) 4m28.922983904s ago: executing program 2 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0x4, 0xff, 0x504c1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) (async, rerun: 64) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f00000002c0)="0403c1c72016e4f708c48cdaf516bd69ebd3cedc52754fbf834f4fa89b6113606063e498224641833320166cb98275e26751101f67ec164a42fe4a9604b843b67f6c40d08f3362327623f5fe07e8aa6a537a2e2a4f687a6a47b363bd37424763f3f48f", &(0x7f00000004c0)=""/181, &(0x7f00000006c0)="1eb967a7424ef0ff5933b69fb350a74ce1b4c461ab9d0e728b941feef58372ae42d3d8b84ae90a9dc0aa3ea3a226bbf8a2f11dd179c85ed0ba1bd5117dc58469ccbbb997700e65ec47b6c309cb6198cacb44b550d928c05f66200eacf1fc6b29ba82d2cbcd2f4269fb5aa62e9fedd0173df25aec71fbbd40001ce7d968e5e87996bdf5cfd1a3bf9b355eb29028f92a87359377ab163b59e51d180d2ed9e9ec8506b9e90a193b43ab5e8a2c57d0b7f71d91a8b12dfdb321ccfc2e5f46bb6de71a67a4e903500146f40ab69fabac", &(0x7f0000000240)="54faee0e3f9a721de15617b5b14fca9cf88ca8933d2d0d9e8d", 0x6a, r0, 0x4}, 0x38) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x8}, 0x94) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0xa2, 0x2}) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m28.528430725s ago: executing program 0 (id=4213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x80000) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0), 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000039439d40348c55b14701a744d65d9d8f409dbef598c4ff903282dd49733742e76486e13ad4a6cee08d530fcee2d07dd202676d73d38ccd314d58e"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000200)=""/69, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, 0xfffffd24) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c990000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x4, 0x7}, {0xfff2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x2c}}, 0xc0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x4048) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000200)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30005bd90000", @ANYRES16=r11, @ANYBLOB="01002cbd7000feffefff8900000008000300", @ANYRES32=r12, @ANYBLOB="14001d80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000440)=[{0x16, 0x0, 0x8, 0x10001}]}) sendmsg$TIPC_NL_MEDIA_GET(r2, 0x0, 0x4001) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x26e1, 0x0) 4m28.362992426s ago: executing program 2 (id=4214): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x11, 0x4, 0x0, 0x1000000000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 4m28.274667097s ago: executing program 4 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601030000000900000000000000000500010007000000050005000a00000014000300686173683a69702c706f72742c6970000900020073797a32000000001400078008000600000001000800134000000000050004"], 0x60}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5df307b2}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xe0}}, 0x8000) 4m28.274117231s ago: executing program 0 (id=4217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3], 0x3c}}, 0x10) 4m28.230511483s ago: executing program 0 (id=4219): syz_emit_ethernet(0x1012, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) write$tun(r0, &(0x7f0000001300)={@void, @void, @mpls={[{0x67376}, {0x7, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0x77ac8, 0x0, 0x1}], @llc={@snap={0xaa, 0x1, "fe", "973c6b", 0x201, "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"}}}}, 0x101c) r1 = socket(0x1d, 0x2, 0x806) bind$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04112dbd70544a897a0f3400fbdbdfd20662bbf2bd76d26bc56e9213504e25730000002863fc5d00e098b9ba9c495da5fbc70c0099000228f488fbc047acbc2e506dd7c9bc639a70ef0bf322a946b55152756d4334b9eea75dd6d261d13dda78e319f1583a98c52815237c9df5c04a59a506d876abde63ea871c137ddbcfa13dc0ee3a750a5a5ad32b42b6fa1e32968543b4498942ecf49a8954f08e41f1fd9518cdb26c80fe2fac95bf86acef2916d01a72a63e4a3cd7e8a89ddbf3e88f6513f3a272835ddb"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048800) 4m28.229637739s ago: executing program 4 (id=4220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700000020", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) 4m28.182464117s ago: executing program 2 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m28.182244537s ago: executing program 3 (id=4222): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 4m28.142546644s ago: executing program 4 (id=4223): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x2, 0x7}, &(0x7f0000000280)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000006800090300000000000000000a000000000000400400040014000600fe8000"/48], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) 4m28.107044998s ago: executing program 3 (id=4224): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000fcdbdf25090000000500330000000000080031000400000008"], 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x2000c001) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) 4m28.094103302s ago: executing program 2 (id=4225): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x600, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 4m28.069679847s ago: executing program 4 (id=4226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305829, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x0, 0x3, 0x3, 0x2c1, r5, 0xff, '\x00', r4, r6, 0x5, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xaa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r14, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x460, 0x24, 0x5820a61ca228651, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {}, {0x4, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x430, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "adffcc3653ad8e26e62b504cec2b5fc47b448ae95de8f61b90677a5ee73badb8be942ffcc8a1581e2657dd06402659a2f86e73298632a36b0a1c1230aac0b7ee58515b48f65620bd530124594480bb109399f31540b74a14adef934d8cdfa0b8c3eb5ae988f9efba17bb4f62dcdc74c99d69adb206d133e20161937247d214f291b585955601ee9fc860cbeac932be512c2ab51e8aa1f7e61cb45428a76194337d826798fd4be0af84d7e58bbb4242bbee2e3b5c913113ecdbf732404651571fa02526ec344da03bb5ab0bcb4f5e7aa183c78aab4e268c9a242474838baafbd08cdccba901dc8519a568c39e77a7181a60f5f2556efd3b2b5f5627bab27b87a7"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xb2c3}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x9, 0x4, 0x5, 0x11, 0xc, 0x4}}]}}]}, 0x460}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r13, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="a97d00001176c5002abd7000618b546f53d7cad6a2fd4e3dff52f4017762178d5f8e4dfc7fcb9860d76b2ca8f0459dccfa65e80603fcf996538e154f8a072ef0611028cc7fa85105fee93d74624ff3d2d00ae33b6beb59fb40406d513edd34cd0f028024eb8a7764ee4e8500713a4eec512c83975f6c4928108a92cf1b1b07d3dd6c55a5", @ANYRES32=r4, @ANYBLOB="08010700001002000800230009000000080028004668000008001d00221fffff240118805400018005000200000000000500020020000000080001000600000008000100040000000c0002002d2740c3277d5b0005000600090000000500020000000000140005000e12acdc1525ec373f77a470bed2408080000180050006000400000005000600050000001400040081ef4cd758868bb7fea42ba967424bd70500060001000000050002000000000014000400f8ea760d8f0f09b5b00b48f9c64e6d4c14000400d502e7ad5b98b4f6e6220dec8896f693140004007e9defe3a2df1e7752f41a19f7c254340a00020025262f245d00000004000180280001800500020000000000140004002f2c33bc4e8dd79c89d8e4e3030c00c8080001000300000020000180140005004066a4d4ee584e293845dd6f95fda2a908000100ff0700000800230004000000e80012800800010076746900dc00028008000500ac1e01010800030004000000080006000600000008000200080000000800020004000000080006000100000008000100", @ANYRES32=r7, @ANYBLOB="0800020007000000080002000300000008000500ac1414bb0800030057f2000008000200eea5000008000400ac1414bb08000600ff7f000008000300d41d0000080006000080000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000500e000000208000200030000000800030002000000080003005a000000080003005795000008000200090000000800030006000000080002002600000008000400ac1414bb"], 0x24c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 4m28.022905758s ago: executing program 0 (id=4227): mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r1, &(0x7f0000005200)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000080)}}], 0x2, 0x4000) (async) pipe(&(0x7f0000002740)) (async) r2 = socket$inet(0xa, 0x801, 0x84) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8feef207d6f75a8094be35a21344596aa994b4bb4c632ca3b3871de988e2050083db174078a1f6d88e91117a7c83fbf7ecf58f7da7cf9ab4943eb8a17ebc41d8bf2849e3c46cf320c6d5d5c9580edf0e519da48d8cd297e3ce081050bd879bc3f3ca98949a4309754f6d0eb4f8ef7c447d0606d3b453916ab3785086d246fd1e057e5dd571264e41d075e20339f35605eca569503a7959b457201c12a1529d3f976df745ceea632cda43a9927efafb8891ac710eae10d2c37b7584", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = accept4(r2, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, 0x0) 4m28.011280752s ago: executing program 2 (id=4228): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000fcdbdf25090000000500330000000000080031000400000008"], 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x2000c001) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000040", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) 4m27.989320599s ago: executing program 3 (id=4229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3], 0x3c}}, 0x10) 4m27.931119737s ago: executing program 0 (id=4230): syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 4m27.869325205s ago: executing program 4 (id=4231): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4m27.70737148s ago: executing program 2 (id=4232): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) (fail_nth: 2) 4m27.605735689s ago: executing program 32 (id=4232): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) (fail_nth: 2) 4m27.598052588s ago: executing program 0 (id=4234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 4m27.597410925s ago: executing program 3 (id=4235): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 4m27.597039845s ago: executing program 4 (id=4236): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x2, 0x7}, &(0x7f0000000280)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000006800090300000000000000000a000000000000400400040014000600fe8000"/48], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) 4m27.287228925s ago: executing program 33 (id=4234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 4m27.243048506s ago: executing program 34 (id=4235): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 4m27.242957974s ago: executing program 35 (id=4236): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x2, 0x7}, &(0x7f0000000280)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000006800090300000000000000000a000000000000400400040014000600fe8000"/48], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) 5.063125427s ago: executing program 8 (id=8796): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x930, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0x93e) 4.873415758s ago: executing program 8 (id=8801): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="eb518f9a8dd1f5525713ee7bb732be6526ab53926d2d8d01bffa9df03db135b29b8b4858c65e9e9224764fdf4b3cc917876e932aca677600f6a89b5c1915d700606b4b24330655f3be65085fa7860a4dfcb76cda0a991cdbaf0b4405b846212a049f10d9874e4400af7511a8179f46d5b9a5fc41ec8856f4d0dfbab66d7ca2e253b46f9a"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 4.285958908s ago: executing program 8 (id=8808): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d0000ffffffffffffffea00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 4.074891174s ago: executing program 8 (id=8812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x4305}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x4305}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) (async) 3.858936848s ago: executing program 8 (id=8816): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@delsa={0x1f8, 0x11, 0x200, 0x70bd2b, 0x25dfdbfb, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2, 0x3c}, [@algo_crypt={0xa9, 0x2, {{'ctr-des3_ede-asm\x00'}, 0x308, "0c38acba8ec8f4fefbd6c2ffa820fcd242fb41e79f28c05266f9631bd20fa5dd655de8fc24fadb080df574d1f8d7e4f79b6fdc5e013215d4f6bb368813f91095999ba01e8ef81d4e9a34153bd99b40ed8a2a9b0015a17b2db3812c62a827f1c111"}}, @algo_comp={0x124, 0x3, {{'lzjh\x00'}, 0x6e0, "eaf559013399155cd8cda57e28d995dede075d76c8e4dee04a6d318ec78bff5b672ef4de2de63b8063def704ec7296d26969369714ee25371078288f794f72b50e80a1e25ad7498000d788fc2ad097f19435c7450c97e354eae55ff33ab42fe3dc61732279187488ae3fbd0f17537e6587e614a9d8b94351901d476fb75f016a54cc5865b673be8dae64b5370c016ecb158963f0a2ff28bc16fe627bf64d90dfeaf14ae4a374da61c9ec703a1cfe089251e379b259d9f63a055eed1126fde940f1d7db7a9f9bb0617d963ce089cbc5dcaf43ee6946c9a1e1dda0e546"}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd27, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000821) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ff", @ANYBLOB="00000000000000001c00128009"], 0x50}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r3) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8901, &(0x7f0000000040)={r4}) sendmsg$inet(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xb}]}]}}}]}, 0x68}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x1) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r12, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f6, 0x10, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20}, 0x4000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)="bc8b3cf388edf4821f8cdeddb75c6c2d38b3c118018ee11cdf181762198b61d1647f117b7c31d484b8473184b864f754117206e63bf29036a505c36cd63c7c7467a247795ce3875f23ddcc387520bd5ff38aa907a0227638ae726bcbdae59b142224f82e512e5c9d47868df09ecd194644c2e0", 0x73, 0x4000, &(0x7f0000000340)={0xa, 0x4e22, 0xfb7b, @private2, 0x8}, 0x1c) r13 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r13, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) ioctl$sock_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000000000)) 3.648558112s ago: executing program 8 (id=8820): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0xc020400) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f0000000080)=[{}], 0x1, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) 3.23692762s ago: executing program 5 (id=8826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}}, 0x20004084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x4024005) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg$alg(r5, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\bv', 0x2}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) close(0x4) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x70}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, 0x0, 0xffffffffffffff64, 0x800, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.28660752s ago: executing program 5 (id=8849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0xa, 0x9, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r5) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0xfffffffffffffff1, &(0x7f0000000680)={&(0x7f0000000280)={0x1, 0x600, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0xfc, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002f00)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.222533994s ago: executing program 6 (id=8851): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 37) 2.154967004s ago: executing program 1 (id=8852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000280)=[{r1, 0x80}], 0x1, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x2f4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x2e0, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ctinfo={0x160, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x9, 0x3d8f0354f00bfc16, 0x6, 0x7fff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0xf3, 0x6, "34788e5449c9329ce680aa60b8bd1e42c34b8ef5ab44ab1127c356ddbd9db89ff1bf63f022965cfe3008996b3db5cb01c01e74d741ebf175aead3b03bd3fa0b484784b9a600d9a73c0ccace4d1f01250f8554345e69aea7e16ad28b543698ac48e4382bd42cc37890e906ef2c75d0ca03f796aaf8916889bbd75e970e2f00cf76f34358ed30af12a7e29b018ef106cf32cee68e3707a65aa60b6ca9598fbfbadd38984bca4db6c22bfe9bd45e9fa97ac0d9a3344022553b0c3162f0edfd4dc4f3dab43b22557b9352c56b787f4c2356fda201c308caac08c04e68f1a59846aeb28aba707196c91db8a7ed457f5fe53"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_vlan={0x100, 0x20, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x80, 0x84, 0x20000000, 0x1, 0x101}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x67d}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc2f}]}, {0x86, 0x6, "354b359b40d4ecb4678e34f526adcb1a3c13351e51afabc27cf9d76e75effe1fe6e6e7d8c3231ecc3e588283a27afa671bdbfe037db25294e285a5ea167858ae9f586405914f19bbdf8de724dca427084c9099cd468e87e13e3f8816ee983662724a0babe50061d01605d84f7a72e175bd1b2253da7582cf846e8773cf97980922c0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x4c, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "ca0d7c3d18d66c14bb4eb79bcfece297956a5915dea245c3e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f0000000540)=0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300021100000000000000000000000500060002334d05d5cd532103020dc78f51a0000000000a000000000000000000000000000020000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000060000ff0100000000000000000002000800080000007f000000000000000100180010c30000b5c1d40fbf3a1f1f33405fae1421ffc7"], 0x88}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000100013070000000000000000fe880000000000000000000000000001fe8000000000000000000000000000414e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xb, 0x99, 0xee4, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x1, 0x3c11, 0x4, 0xc09}}) syz_emit_ethernet(0x5a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa2fbbbbbbbbbbbb81000100000d040000c02702000062689e2498fb8c877d059b91c17802f61f2669c67287fae3e7892b1b3d8c7ca50e892dc0c517000d6cc9fb8ae86484dc369c5e270f25cc3be03445181c430dd9"], 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="040028bd7000fddbdf250300000008000b00", @ANYRES32=r9, @ANYBLOB="050004000100000014000700fe8000000000000000000000000000bb14000900fe80000000000000000000000000003b06000a004e200000050002000200000008000600ac14140e060001004e24000014000900fe800000000000000028000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) sendfile(r7, r10, 0x0, 0x7feff000) 1.678741897s ago: executing program 6 (id=8855): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x6, 0x20, 0x6528, 0x7, 0x9, 0x81, 0x7, 0x8d3}}) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000080)="68a20aacaee319962b3518635fbae8a683cfbc3818ee56c232717d72dde9de3845213be5b5552f560f1f47bc42c0ccc5d0058490be0fff9817bb4695e5a621cd4cf00aa7563e1456ff48cf12a1a2bd59c397b98f09144142b43c05d6080929f96cf2c94df9e73e2f3eeaef51311ab75175b49195cf5d8d85cd99356863b0086a431a0a921d862260dd105eba016ae0aa3eaf1f5ac29af3294970a407f842d554260522", 0xa3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf9100000000000056080000000000008500000000000000b7ae966f9bf361cf1500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.652723545s ago: executing program 1 (id=8856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000600000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000010000000000"], 0xb8}}, 0x0) 1.616111594s ago: executing program 1 (id=8857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000100800000000000000aaff02000000000000000000000000000189"], 0xfce) 1.33057342s ago: executing program 5 (id=8858): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000050000000000000000000000000000000000000000000000ff7f0000e204000000000000040000000000002b0012823bbf763eeb10"], 0xc4}}, 0x4c050) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021009090a0000002abd7000fbdbdf2508ff1200040003000080000008000000060032000308000000000000000000000000000500000000000000000000000000000000000000000000ffffffffffff"], 0x50}}, 0x40010) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x10142) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) r12 = socket$key(0xf, 0x3, 0x2) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_VENDOR(r15, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r14, @ANYBLOB="00042cbd7000fedbdf251d00000008001e002400000008000100", @ANYRES32=r16, @ANYRES8, @ANYRESHEX=r4, @ANYRES16], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40008c3) sendmsg$NFC_CMD_GET_TARGET(r13, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, r14, 0x20, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x44851) sendmsg$key(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="bb37021005090a0000146ddf7ed9601a6a6f0a6cde002b9d7000fbdbdf2508001200040d00000000000008000000060032000308000000000000000000000a010100000000a96602e2baa026f8000020000086f9ba91ee7d4fcde2a3f0cd45566c1a4f470a67bd6b0acbf1f667ebe3ba8bb7dea604db44ecbb8ec3791d352ec0ab62484aebdc2f301dc5534bc9a2ea0249e68707ec4970fc0b6606435ba09298943905c7446216480c1ea16ebb89216666984a27e6cb8133fb7b881924d294b01079bcf7d20c5003e9f93da6d93655902e3dfacebe4aeb9bec760a1d4bb554b178b1351b1df869b2b2a85d96ee257e65357252142927f78bcc7e5770773fcf77ea0fccc89973453e6d015d1ba67262f24245c01e61f8e20472c39954385cc57e906d89f256625193f605"], 0x50}}, 0x40010) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r17, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000ffffff7f00020000ff00000000080400", @ANYRES32=0x1, @ANYBLOB="080000000000000000000000000000000000000086e65d0a6c44dd095750be8fd62ac8ee067e080448aeab0e7bfd422a4eb16f39aff92549eacf7a7cf5386c75bbe331dabc160fc42d659b436bc5e723bb0eb60761f2ea4aa02934234a4dff4f1126eebf50ff4a8fc652089ccd1f6efa13597dd1db0b55b5dff9399fda95a9f587d31748257511960a28ab4ed7213d495a047c61d11ed6ae32e71f293ccb53bb2318ef457b9e07b851a3c00e57faf276ba526eacd28d888c440e01e408337591defb2ecf8f0ba80be620031f5c918c24f3d2cd6802c9b846616d5eab5190a2a7b5e1c9db372db6dc44d0c29326de2c3d9829", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000010000000900"/28], 0x50) 1.328480934s ago: executing program 6 (id=8859): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) connect$netrom(r1, &(0x7f0000000180)={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000200), 0x4) 1.291170632s ago: executing program 6 (id=8860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffed, &(0x7f0000000300)}, 0x1a2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180010000000faf1d164e90000000000000000007a7d39295b05171a1beebf97135dabafcc50ade16c26f9fabc3b505d2d479c2ea0b44427fdb6984d", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) socket$packet(0x11, 0xa, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r9, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000003c0)={0x1008}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x20}}, 0x4004) 1.26906783s ago: executing program 1 (id=8861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xdc7d) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 975.034596ms ago: executing program 1 (id=8862): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x902, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0x910) 782.86708ms ago: executing program 7 (id=8864): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 38) 705.516059ms ago: executing program 7 (id=8865): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) 704.824515ms ago: executing program 7 (id=8866): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYBLOB="00000000000000000000000000040000000000005578364311a25d36352671293a0cedfd2a38d36e42c8b32a05b5898deefe0024b84bd5e9080270569379cd57b58f24bda150cab2424a3c1ab119f1bf35517358591dd72458b6b8e4e741563ea443", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 434.967971ms ago: executing program 1 (id=8867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)=r3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8) shutdown(r4, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x98, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_AF_SPEC={0x70, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x7}, {0x8, 0x3, 0x0, 0x0, 0x10000}, {0x8, 0x1f, 0x0, 0x0, 0x6}, {0x8, 0x8, 0x0, 0x0, 0x7}, {0x8, 0x19, 0x0, 0x0, 0x4}, {0x8, 0x1, 0x0, 0x0, 0xfffffffc}]}}]}]}, 0x98}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x3}}]}}]}, 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'bridge_slave_1\x00', @random="6654b27ab0e0"}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000001c0)={r2}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r11 = socket$inet6(0xa, 0xa, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r13, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, &(0x7f00000000c0)={0x100, 0x6, 0x5, 0x2, 0x1, 0x0, [{0x2, 0x4d20, 0x8, '\x00', 0x400}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r14, 0x5421, 0x110e22fff6) 434.651426ms ago: executing program 5 (id=8868): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x48004) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) 258.471426ms ago: executing program 6 (id=8869): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000011005f0414c5a5b0554038d64500000100010000950000000000000000000100", 0x85) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 257.741583ms ago: executing program 5 (id=8870): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000100037040000000000002fb01c637c4c", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370612e00000030000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012"], 0x64}}, 0x0) 255.092665ms ago: executing program 7 (id=8871): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) unshare(0x6060600) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4}, 0x20) (async) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}, 0x200ce0c0) (async) close(0x3) connect$can_bcm(r1, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1}, 0x20) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r9, 0x2, 0x10}, &(0x7f0000000240)=0xc) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={r9, @in={{0x2, 0x4e23, @empty}}, 0x1, 0x6}, 0x90) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB="0c00990001"], 0x34}}, 0x8080) 253.866237ms ago: executing program 6 (id=8872): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x0, 0x80, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x65, 0x0, 0xb, 0x4, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xad, 0x1, 0xa, [{@multicast2, 0xe35}, {@loopback}, {@remote, 0x6d398490}, {@local, 0x8}, {@loopback, 0x3743}, {@broadcast, 0xf}]}, @lsrr={0x83, 0x23, 0xa0, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102, @local, @broadcast, @rand_addr=0x64010100, @multicast1, @local]}, @timestamp_addr={0x44, 0xc, 0xee, 0x1, 0x6, [{@empty, 0x9}]}, @timestamp_addr={0x44, 0x3c, 0xeb, 0x1, 0xd, [{@broadcast}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xfffffffe}, {@local, 0x80000001}, {@empty, 0x4}, {@broadcast, 0x8}, {@multicast1, 0x9}, {@empty, 0x4}]}, @ssrr={0x89, 0x17, 0xcd, [@empty, @remote, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}}}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x5, 0x6, 0x62, @remote, @private1, 0x7, 0x0, 0x2, 0x1}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r1, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000c00)={0x180, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="afee876cb1e60eaa3fb5a4854b09400000001000", @ANYRES32=0x0, @ANYBLOB="000000000000000018001680140001801000060001000080000000000000000008001b0000000000"], 0x40}}, 0x0) r14 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32}, 0x20) write$6lowpan_enable(r14, &(0x7f0000001500)='0', 0x1) bind$l2tp(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 186.632244ms ago: executing program 7 (id=8873): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100f4ff0000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 185.582887ms ago: executing program 5 (id=8874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000040)={r3, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x16, 0x5, 0x800, {0xf, 0x0, 0x9, 0x0, 0x0, 0x8}, {0x8, 0x0, 0x1, 0x3, 0x7, 0x2}, 0x100, 0x6, 0xbd4}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 0s ago: executing program 7 (id=8875): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 39) kernel console output (not intermixed with test programs): 365][T26687] RBP: 00007f4663f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 417.083375][T26687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.083386][T26687] R13: 00007f46633b6038 R14: 00007f46633b5fa0 R15: 00007ffd6dfffc48 [ 417.083405][T26687] [ 417.443333][ T25] block nbd0: Possible stuck request ffff8880253e0000: control (read@0,1024B). Runtime 180 seconds [ 417.454149][ T25] block nbd0: Possible stuck request ffff8880253e01c0: control (read@1024,1024B). Runtime 180 seconds [ 417.465252][ T25] block nbd0: Possible stuck request ffff8880253e0380: control (read@2048,1024B). Runtime 180 seconds [ 417.471427][T26695] netlink: 'syz.7.7732': attribute type 4 has an invalid length. [ 417.478020][ T25] block nbd0: Possible stuck request ffff8880253e0540: control (read@3072,1024B). Runtime 180 seconds [ 417.509313][T26695] pim6reg: entered allmulticast mode [ 417.516821][T26695] pim6reg: left allmulticast mode [ 417.583378][T26701] dvmrp1: left allmulticast mode [ 418.119309][T26737] netlink: 'syz.1.7747': attribute type 11 has an invalid length. [ 418.189225][T26747] FAULT_INJECTION: forcing a failure. [ 418.189225][T26747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.227875][T26747] CPU: 1 UID: 0 PID: 26747 Comm: syz.8.7751 Not tainted syzkaller #0 PREEMPT(full) [ 418.227902][T26747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.227914][T26747] Call Trace: [ 418.227922][T26747] [ 418.227930][T26747] dump_stack_lvl+0x189/0x250 [ 418.227958][T26747] ? __pfx____ratelimit+0x10/0x10 [ 418.227982][T26747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.228010][T26747] ? __pfx__printk+0x10/0x10 [ 418.228029][T26747] ? __might_fault+0xb0/0x130 [ 418.228056][T26747] ? rcu_is_watching+0x15/0xb0 [ 418.228075][T26747] should_fail_ex+0x414/0x560 [ 418.228098][T26747] _copy_from_iter+0x1db/0x16f0 [ 418.228117][T26747] ? rcu_is_watching+0x15/0xb0 [ 418.228133][T26747] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 418.228156][T26747] ? __pfx__copy_from_iter+0x10/0x10 [ 418.228182][T26747] ? __build_skb_around+0x257/0x3e0 [ 418.228208][T26747] ? netlink_sendmsg+0x642/0xb30 [ 418.228370][T26747] ? skb_put+0x11b/0x210 [ 418.228391][T26747] netlink_sendmsg+0x6b2/0xb30 [ 418.228420][T26747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.228445][T26747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.228463][T26747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.228482][T26747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.228508][T26747] __sock_sendmsg+0x21c/0x270 [ 418.228532][T26747] ____sys_sendmsg+0x505/0x830 [ 418.228554][T26747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.228575][T26747] ? import_iovec+0x74/0xa0 [ 418.228598][T26747] ___sys_sendmsg+0x21f/0x2a0 [ 418.228619][T26747] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.228655][T26747] ? __fget_files+0x2a/0x420 [ 418.228681][T26747] ? __fget_files+0x3a0/0x420 [ 418.228711][T26747] __x64_sys_sendmsg+0x19b/0x260 [ 418.228731][T26747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.228756][T26747] ? __pfx_ksys_write+0x10/0x10 [ 418.228777][T26747] ? rcu_is_watching+0x15/0xb0 [ 418.228800][T26747] ? rcu_is_watching+0x15/0xb0 [ 418.228819][T26747] do_syscall_64+0xfa/0x3b0 [ 418.228844][T26747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.228946][T26747] ? clear_bhb_loop+0x60/0xb0 [ 418.228971][T26747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.229092][T26747] RIP: 0033:0x7f4330f8ebe9 [ 418.229113][T26747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.229129][T26747] RSP: 002b:00007f4331d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.229149][T26747] RAX: ffffffffffffffda RBX: 00007f43311b5fa0 RCX: 00007f4330f8ebe9 [ 418.229163][T26747] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005 [ 418.229174][T26747] RBP: 00007f4331d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.229185][T26747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.229196][T26747] R13: 00007f43311b6038 R14: 00007f43311b5fa0 R15: 00007fffd4448788 [ 418.229300][T26747] [ 418.558847][T26752] tipc: Enabling of bearer rejected, failed to enable media [ 418.978257][T26792] __nla_validate_parse: 13 callbacks suppressed [ 418.978275][T26792] netlink: 1036 bytes leftover after parsing attributes in process `syz.6.7764'. [ 419.009084][T26792] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 419.145578][T26807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7769'. [ 419.356665][T26819] netlink: 210476 bytes leftover after parsing attributes in process `syz.1.7775'. [ 419.742438][T26850] netlink: 'syz.8.7783': attribute type 1 has an invalid length. [ 419.758375][T20150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.805358][T26854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'. [ 419.842219][T20150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.903630][T20150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.003739][T20150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.361814][T20150] bond0 (unregistering): Released all slaves [ 420.371792][T20150] bond1 (unregistering): Released all slaves [ 420.382669][T20150] bond2 (unregistering): Released all slaves [ 420.394780][T20150] bond3 (unregistering): Released all slaves [ 420.412310][T20150] bond4 (unregistering): Released all slaves [ 420.433185][T26887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7795'. [ 420.473445][T20150] tipc: Left network mode [ 420.500366][T20150] IPVS: stopping master sync thread 16166 ... [ 420.820554][T20150] hsr_slave_0: left promiscuous mode [ 420.843858][T20150] hsr_slave_1: left promiscuous mode [ 420.868448][T20150] veth1_macvtap: left promiscuous mode [ 420.874179][T20150] veth0_macvtap: left promiscuous mode [ 420.880219][T20150] veth1_vlan: left promiscuous mode [ 420.889803][T20150] veth0_vlan: left promiscuous mode [ 420.999058][T26910] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7808'. [ 421.060775][T26913] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7808'. [ 421.287114][T26924] FAULT_INJECTION: forcing a failure. [ 421.287114][T26924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.303440][T26924] CPU: 0 UID: 0 PID: 26924 Comm: syz.6.7811 Not tainted syzkaller #0 PREEMPT(full) [ 421.303464][T26924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.303475][T26924] Call Trace: [ 421.303482][T26924] [ 421.303490][T26924] dump_stack_lvl+0x189/0x250 [ 421.303514][T26924] ? __pfx____ratelimit+0x10/0x10 [ 421.303536][T26924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.303552][T26924] ? __pfx__printk+0x10/0x10 [ 421.303571][T26924] ? __might_fault+0xb0/0x130 [ 421.303595][T26924] ? rcu_is_watching+0x15/0xb0 [ 421.303613][T26924] should_fail_ex+0x414/0x560 [ 421.303650][T26924] _copy_from_user+0x2d/0xb0 [ 421.303668][T26924] kstrtouint_from_user+0xc4/0x170 [ 421.303691][T26924] ? __might_fault+0xb0/0x130 [ 421.303712][T26924] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 421.303739][T26924] ? vfs_write+0x211/0xb30 [ 421.303758][T26924] ? rcu_is_watching+0x15/0xb0 [ 421.303775][T26924] proc_fail_nth_write+0x88/0x200 [ 421.303795][T26924] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.303813][T26924] ? security_file_permission+0x75/0x290 [ 421.303833][T26924] ? preempt_count_add+0x91/0x1a0 [ 421.303855][T26924] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.303873][T26924] vfs_write+0x27b/0xb30 [ 421.303898][T26924] ? __pfx_vfs_write+0x10/0x10 [ 421.303921][T26924] ? __fget_files+0x3a0/0x420 [ 421.303942][T26924] ? __fget_files+0x2a/0x420 [ 421.303969][T26924] ksys_write+0x145/0x250 [ 421.303992][T26924] ? __pfx_ksys_write+0x10/0x10 [ 421.304011][T26924] ? rcu_is_watching+0x15/0xb0 [ 421.304031][T26924] ? rcu_is_watching+0x15/0xb0 [ 421.304049][T26924] do_syscall_64+0xfa/0x3b0 [ 421.304073][T26924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.304089][T26924] ? clear_bhb_loop+0x60/0xb0 [ 421.304108][T26924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.304126][T26924] RIP: 0033:0x7f8aba78d69f [ 421.304143][T26924] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 421.304159][T26924] RSP: 002b:00007f8abb641030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 421.304179][T26924] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8aba78d69f [ 421.304191][T26924] RDX: 0000000000000001 RSI: 00007f8abb6410a0 RDI: 0000000000000006 [ 421.304202][T26924] RBP: 00007f8abb641090 R08: 0000000000000000 R09: 0000000000000000 [ 421.304213][T26924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 421.304223][T26924] R13: 00007f8aba9b6038 R14: 00007f8aba9b5fa0 R15: 00007fffb7cd7eb8 [ 421.304245][T26924] [ 421.349538][ T7028] IPVS: starting estimator thread 0... [ 421.383868][T26931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7814'. [ 421.466747][T26940] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 421.553451][T26932] IPVS: using max 42 ests per chain, 100800 per kthread [ 421.681534][T26945] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 422.311463][T26983] bridge0: entered promiscuous mode [ 422.324810][T26983] bridge0: entered allmulticast mode [ 422.348887][T26987] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7831'. [ 422.640864][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7839'. [ 422.656406][T27005] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 422.684277][T27005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.695839][T27005] bond0: (slave rose0): Enslaving as an active interface with an up link [ 422.938130][T27027] sctp: [Deprecated]: syz.1.7849 (pid 27027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.938130][T27027] Use struct sctp_sack_info instead [ 423.138741][T27041] netlink: 'syz.8.7853': attribute type 29 has an invalid length. [ 423.200979][T20150] netdevsim netdevsim6 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.231281][T20153] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.251321][T20153] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.263662][T20153] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.417066][T27065] netlink: 'syz.1.7861': attribute type 4 has an invalid length. [ 423.733701][T27085] netlink: 'syz.8.7870': attribute type 21 has an invalid length. [ 423.753151][T27085] netlink: 'syz.8.7870': attribute type 22 has an invalid length. [ 423.763410][T27085] netlink: 'syz.8.7870': attribute type 23 has an invalid length. [ 423.777179][T27085] netlink: 'syz.8.7870': attribute type 25 has an invalid length. [ 423.806343][T27085] netlink: 'syz.8.7870': attribute type 26 has an invalid length. [ 423.892023][T27094] Bluetooth: MGMT ver 1.23 [ 424.132607][T27115] __nla_validate_parse: 3 callbacks suppressed [ 424.132625][T27115] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7882'. [ 424.213974][T27124] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7884'. [ 424.261419][T27126] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 424.274606][T27126] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 424.598101][T27142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7892'. [ 424.607249][T27142] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7892'. [ 425.056363][T27155] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7896'. [ 425.199358][T18555] bond0 (unregistering): Released all slaves [ 425.212660][T18555] bond1 (unregistering): Released all slaves [ 425.223249][T18555] bond2 (unregistering): Released all slaves [ 425.235680][T18555] bond3 (unregistering): Released all slaves [ 425.246724][T18555] bond4 (unregistering): Released all slaves [ 425.349546][T18555] tipc: Disabling bearer [ 425.351854][T27167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.368097][T18555] tipc: Left network mode [ 425.452221][T27167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7901'. [ 425.591089][T27186] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7907'. [ 425.678350][T18555] hsr_slave_0: left promiscuous mode [ 425.700416][T18555] hsr_slave_1: left promiscuous mode [ 425.947620][T27200] openvswitch: netlink: Missing key (keys=40, expected=100) [ 425.964704][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7912'. [ 426.047501][T27206] TCP: TCP_TX_DELAY enabled [ 426.148888][T18555] IPVS: stop unused estimator thread 0... [ 426.220170][T27216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 426.236157][T27218] netlink: 'syz.8.7920': attribute type 33 has an invalid length. [ 426.246054][T27218] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7920'. [ 426.248938][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7918'. [ 426.321929][T27216] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 426.332132][T27216] gretap0: entered promiscuous mode [ 426.337752][T27216] gretap0: entered allmulticast mode [ 426.508618][T27227] syzkaller1: entered promiscuous mode [ 426.516832][T27227] syzkaller1: entered allmulticast mode [ 427.005955][T27269] smc: net device bond0 applied user defined pnetid SYZ2 [ 427.054177][T27271] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 427.068737][T27271] ip6tnl0: mtu less than device minimum [ 427.146098][T27279] syzkaller1: entered promiscuous mode [ 427.151605][T27279] syzkaller1: entered allmulticast mode [ 427.741649][T27320] syzkaller1: entered promiscuous mode [ 427.756842][T27320] syzkaller1: entered allmulticast mode [ 427.816836][T27330] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 427.829479][T27330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.931341][T27339] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 428.133210][T27357] ip6_vti0: mtu less than device minimum [ 428.184144][T27364] netlink: 'syz.7.7968': attribute type 11 has an invalid length. [ 428.283802][T27369] syzkaller1: entered promiscuous mode [ 428.291811][T27369] syzkaller1: entered allmulticast mode [ 428.371167][T27374] netdevsim netdevsim1 : renamed from netdevsim0 [ 428.622796][T27392] mac80211_hwsim hwsim35 ÿ: renamed from wlan1 [ 428.700627][T27399] syzkaller0: entered promiscuous mode [ 428.715820][T27399] syzkaller0: entered allmulticast mode [ 428.734158][T27398] tipc: Enabled bearer , priority 0 [ 428.763157][T27398] tipc: Resetting bearer [ 428.800250][T27398] tipc: Disabling bearer [ 429.497895][T27443] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.508717][T27443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.582925][T27449] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 429.595056][T27448] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 429.638724][T27451] __nla_validate_parse: 20 callbacks suppressed [ 429.638743][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8002'. [ 429.865862][T27473] netlink: 165 bytes leftover after parsing attributes in process `syz.7.8009'. [ 429.874620][T27475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8010'. [ 429.961434][T27483] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.8011'. [ 429.992715][T27477] geneve3: entered promiscuous mode [ 430.007482][T27477] geneve3: entered allmulticast mode [ 430.037902][T18555] netdevsim netdevsim6 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 19999 - 0 [ 430.092271][T18555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 430.112035][T27497] netlink: 165 bytes leftover after parsing attributes in process `syz.8.8017'. [ 430.129382][T18555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 430.151382][T18555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 430.161430][T27481] netlink: 'syz.1.8013': attribute type 13 has an invalid length. [ 430.173171][T27481] eql: remember to turn off Van-Jacobson compression on your slave devices [ 430.199805][T27499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8018'. [ 430.203751][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8019'. [ 430.243118][T27481] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 430.267139][T27477] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.280364][T27477] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 430.292582][T27502] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8019'. [ 430.302912][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8019'. [ 430.358036][T27477] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.379873][T27477] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 430.460390][T27477] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.477399][T27507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8020'. [ 430.490306][T27477] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 430.650924][T27477] netdevsim netdevsim6 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.663542][T27477] netdevsim netdevsim6 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 430.680682][T27511] tipc: Enabling of bearer rejected, already enabled [ 430.974851][ T5232] udevd[5232]: worker [8696] /devices/virtual/block/nbd0 timeout; kill it [ 430.989062][ T5232] udevd[5232]: seq 23199 '/devices/virtual/block/nbd0' killed [ 431.131562][ T60] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.152757][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.178649][T18555] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.192940][T18555] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.226785][T18555] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.238971][T18555] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.292652][ T60] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.316651][ T60] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 431.336517][T27527] tipc: Enabling of bearer rejected, failed to enable media [ 431.347481][T27527] netlink: 'syz.8.8027': attribute type 4 has an invalid length. [ 431.469053][T27544] netlink: 'syz.8.8031': attribute type 13 has an invalid length. [ 431.573191][T27544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.581944][T27544] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.662829][T27544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.821075][T27561] netlink: 'syz.6.8040': attribute type 19 has an invalid length. [ 432.271601][T20150] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 432.538179][T27628] bridge0: port 1(vlan3) entered blocking state [ 432.547291][T27628] bridge0: port 1(vlan3) entered disabled state [ 432.553977][T27628] vlan3: entered allmulticast mode [ 432.559590][T27628] bridge0: entered allmulticast mode [ 432.567389][T27628] vlan3: left allmulticast mode [ 432.572374][T27628] bridge0: left allmulticast mode [ 433.134132][T27637] bridge1: entered promiscuous mode [ 433.142173][T27637] bridge1: entered allmulticast mode [ 433.598094][T27678] 0ªî{X¹¦: entered promiscuous mode [ 433.616780][T27683] netlink: 'syz.1.8081': attribute type 1 has an invalid length. [ 433.620216][T27678] 0ªî{X¹¦: left allmulticast mode [ 433.702188][T27683] gretap1: entered promiscuous mode [ 433.712929][T27680] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 433.740342][T27683] bond8: (slave gretap1): making interface the new active one [ 433.754118][T27683] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 433.773406][T27683] macvlan3: entered promiscuous mode [ 433.781388][T27683] macvlan3: entered allmulticast mode [ 433.789903][T27683] bond8: entered promiscuous mode [ 433.797806][T27683] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 433.806609][T27683] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 433.827538][T27683] bond8: left promiscuous mode [ 433.912754][T27697] syzkaller1: entered promiscuous mode [ 433.922705][T27697] syzkaller1: entered allmulticast mode [ 434.211864][T27725] IPVS: Unknown mcast interface: nicvf0 [ 434.367517][T27728] bond8: (slave gretap1): Releasing active interface [ 434.539469][T27758] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 434.569288][T27728] syz.1.8095: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 434.600515][T27728] CPU: 1 UID: 0 PID: 27728 Comm: syz.1.8095 Not tainted syzkaller #0 PREEMPT(full) [ 434.600540][T27728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.600551][T27728] Call Trace: [ 434.600558][T27728] [ 434.600567][T27728] dump_stack_lvl+0x189/0x250 [ 434.600596][T27728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.600616][T27728] ? __pfx__printk+0x10/0x10 [ 434.600642][T27728] ? lock_release+0x4b/0x3e0 [ 434.600668][T27728] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 434.600690][T27728] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 434.600710][T27728] warn_alloc+0x214/0x310 [ 434.600736][T27728] ? __pfx_warn_alloc+0x10/0x10 [ 434.600762][T27728] ? __get_vm_area_node+0x28f/0x300 [ 434.600783][T27728] ? bpf_check+0x1a5/0x1d2d0 [ 434.600802][T27728] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 434.600825][T27728] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 434.600850][T27728] ? __kasan_kmalloc_large+0x85/0xa0 [ 434.600871][T27728] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 434.600893][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.600909][T27728] ? bpf_check+0xf9/0x1d2d0 [ 434.600926][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.600942][T27728] ? bpf_check+0xf9/0x1d2d0 [ 434.600959][T27728] ? bpf_check+0x1a5/0x1d2d0 [ 434.600977][T27728] vzalloc_noprof+0xb2/0xf0 [ 434.601000][T27728] ? bpf_check+0x1a5/0x1d2d0 [ 434.601018][T27728] bpf_check+0x1a5/0x1d2d0 [ 434.601037][T27728] ? rcu_read_lock_held+0xa/0x50 [ 434.601056][T27728] ? page_table_check_set+0x18d/0x730 [ 434.601081][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601105][T27728] ? lock_release+0x4b/0x3e0 [ 434.601128][T27728] ? do_raw_spin_unlock+0x122/0x240 [ 434.601150][T27728] ? __handle_mm_fault+0x3b08/0x5440 [ 434.601177][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601204][T27728] ? __up_read+0x104/0x680 [ 434.601223][T27728] ? kasan_check_range+0x80/0x2c0 [ 434.601250][T27728] ? count_memcg_events+0x10b/0x270 [ 434.601268][T27728] ? __up_read+0x280/0x680 [ 434.601286][T27728] ? __pfx___up_read+0x10/0x10 [ 434.601302][T27728] ? lock_release+0x4b/0x3e0 [ 434.601329][T27728] ? __pfx_bpf_check+0x10/0x10 [ 434.601345][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601360][T27728] ? ktime_get_with_offset+0x8c/0x2a0 [ 434.601379][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601393][T27728] ? ktime_get_with_offset+0x8c/0x2a0 [ 434.601413][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601428][T27728] ? ktime_get_with_offset+0x8c/0x2a0 [ 434.601445][T27728] ? ktime_get_with_offset+0x8c/0x2a0 [ 434.601461][T27728] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 434.601489][T27728] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 434.601509][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601524][T27728] ? lock_release+0x4b/0x3e0 [ 434.601544][T27728] ? __might_fault+0xb0/0x130 [ 434.601566][T27728] ? __asan_memset+0x22/0x50 [ 434.601583][T27728] ? bpf_obj_name_cpy+0x194/0x1e0 [ 434.601598][T27728] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 434.601619][T27728] ? security_bpf_prog_load+0x7f/0x310 [ 434.601644][T27728] bpf_prog_load+0x1318/0x1930 [ 434.601671][T27728] ? __pfx_bpf_prog_load+0x10/0x10 [ 434.601693][T27728] ? __might_fault+0xb0/0x130 [ 434.601719][T27728] ? lock_release+0x4b/0x3e0 [ 434.601738][T27761] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 434.601739][T27728] ? __might_fault+0xb0/0x130 [ 434.601759][T27728] ? __might_fault+0xcc/0x130 [ 434.601779][T27728] ? bpf_lsm_bpf+0x9/0x20 [ 434.601793][T27728] ? security_bpf+0x7e/0x300 [ 434.601813][T27728] __sys_bpf+0x528/0x870 [ 434.601833][T27728] ? __pfx___sys_bpf+0x10/0x10 [ 434.601865][T27728] ? rcu_is_watching+0x15/0xb0 [ 434.601885][T27728] __x64_sys_bpf+0x7c/0x90 [ 434.601905][T27728] do_syscall_64+0xfa/0x3b0 [ 434.601929][T27728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.601947][T27728] ? clear_bhb_loop+0x60/0xb0 [ 434.601966][T27728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.601983][T27728] RIP: 0033:0x7f4edc58ebe9 [ 434.601999][T27728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.602015][T27728] RSP: 002b:00007f4edd4c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.602034][T27728] RAX: ffffffffffffffda RBX: 00007f4edc7b5fa0 RCX: 00007f4edc58ebe9 [ 434.602048][T27728] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 434.602060][T27728] RBP: 00007f4edc611e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.602072][T27728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.602082][T27728] R13: 00007f4edc7b6038 R14: 00007f4edc7b5fa0 R15: 00007ffd6525e678 [ 434.602104][T27728] [ 434.602390][T27728] Mem-Info: [ 434.664079][T27764] __nla_validate_parse: 35 callbacks suppressed [ 434.664100][T27764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8103'. [ 434.680626][T27728] active_anon:4964 inactive_anon:0 isolated_anon:0 [ 434.680626][T27728] active_file:3702 inactive_file:40029 isolated_file:0 [ 434.680626][T27728] unevictable:768 dirty:171 writeback:0 [ 434.680626][T27728] slab_reclaimable:13785 slab_unreclaimable:196280 [ 434.680626][T27728] mapped:29730 shmem:1367 pagetables:1446 [ 434.680626][T27728] sec_pagetables:0 bounce:0 [ 434.680626][T27728] kernel_misc_reclaimable:0 [ 434.680626][T27728] free:1212868 free_pcp:15498 free_cma:0 [ 434.680681][T27728] Node 0 active_anon:19856kB inactive_anon:0kB active_file:14808kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118920kB dirty:684kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14796kB pagetables:5636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.820366][T27772] delete_channel: no stack [ 434.866577][T27728] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.082675][T27785] netlink: 112 bytes leftover after parsing attributes in process `syz.7.8109'. [ 435.139303][T27728] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.139374][T27728] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 435.139412][T27728] Node 0 DMA32 free:946396kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19956kB inactive_anon:0kB active_file:14808kB inactive_file:158332kB unevictable:1536kB writepending:804kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:42728kB local_pcp:17768kB free_cma:0kB [ 435.139461][T27728] lowmem_reserve[]: 0 0 1 1 1 [ 435.139493][T27728] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 435.139535][T27728] lowmem_reserve[]: 0 0 0 0 0 [ 435.139565][T27728] Node 1 Normal free:3889620kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18436kB local_pcp:6528kB free_cma:0kB [ 435.139617][T27728] lowmem_reserve[]: 0 0 0 0 0 [ 435.139653][T27728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.139776][T27728] Node 0 DMA32: 867*4kB (ME) 214*8kB (M) 4*16kB (M) 45*32kB (ME) 121*64kB (UME) 101*128kB (UME) 72*256kB (UM) 269*512kB (UM) 221*1024kB (UM) 6*2048kB (UM) 128*4096kB (M) = 946396kB [ 435.139938][T27728] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 435.140048][T27728] Node 1 Normal: 197*4kB (UME) 72*8kB (UME) 38*16kB (UME) 163*32kB (UME) 65*64kB (UME) 9*128kB (UME) 5*256kB (UM) 6*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3889620kB [ 435.140208][T27728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.140225][T27728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.140241][T27728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.140256][T27728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.140272][T27728] 45095 total pagecache pages [ 435.140287][T27728] 0 pages in swap cache [ 435.140296][T27728] Free swap = 124996kB [ 435.140304][T27728] Total swap = 124996kB [ 435.140313][T27728] 2097051 pages RAM [ 435.140321][T27728] 0 pages HighMem/MovableOnly [ 435.140360][T27728] 425660 pages reserved [ 435.140368][T27728] 0 pages cma reserved [ 435.611072][T27785] gre0: entered promiscuous mode [ 435.621267][T27785] gre0: entered allmulticast mode [ 435.631193][T27787] netlink: 244 bytes leftover after parsing attributes in process `syz.8.8110'. [ 435.648810][T27787] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.744301][T27797] openvswitch: netlink: Missing key (keys=40, expected=100) [ 435.905378][T27811] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 435.914040][T27811] A link change request failed with some changes committed already. Interface bond5 may have been left with an inconsistent configuration, please check. [ 435.982603][T27816] syzkaller1: entered promiscuous mode [ 435.989968][T27816] syzkaller1: entered allmulticast mode [ 436.031747][T27818] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8120'. [ 436.285991][T27840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.439878][T27846] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8132'. [ 436.456803][T27852] syzkaller1: entered promiscuous mode [ 436.462709][T27852] syzkaller1: entered allmulticast mode [ 436.471567][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8134'. [ 436.481641][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8132'. [ 436.491796][T27846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8132'. [ 436.532808][T27857] netlink: 'syz.7.8131': attribute type 1 has an invalid length. [ 437.412637][T27873] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8139'. [ 437.446916][T27873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8139'. [ 437.470083][T27873] netlink: 'syz.1.8139': attribute type 3 has an invalid length. [ 437.480899][T27873] netlink: 'syz.1.8139': attribute type 2 has an invalid length. [ 437.658123][T27893] syzkaller1: entered promiscuous mode [ 437.679994][T27893] syzkaller1: entered allmulticast mode [ 437.788233][T27906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.200751][T27938] netlink: 'syz.7.8161': attribute type 1 has an invalid length. [ 438.460675][T27940] block nbd3: Unsupported socket: shutdown callout must be supported. [ 438.551329][T27942] syzkaller1: entered promiscuous mode [ 438.573110][T27942] syzkaller1: entered allmulticast mode [ 438.652277][T27952] veth0_to_team: entered promiscuous mode [ 438.659830][T27952] veth0_to_team: entered allmulticast mode [ 438.820331][T27967] sctp: [Deprecated]: syz.7.8171 (pid 27967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.820331][T27967] Use struct sctp_sack_info instead [ 438.897329][T27970] openvswitch: netlink: IPv4 tun info is not correct [ 438.970966][T27974] netlink: 'syz.6.8175': attribute type 7 has an invalid length. [ 438.988309][T27976] netlink: 'syz.1.8177': attribute type 5 has an invalid length. [ 439.002666][T27976] geneve3: entered promiscuous mode [ 439.011986][T27976] geneve3: entered allmulticast mode [ 439.022078][ T60] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 256 - 0 [ 439.034111][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 439.043579][T27979] tipc: Enabled bearer , priority 0 [ 439.055344][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 439.077482][T27978] ip_vti0: entered promiscuous mode [ 439.082803][T27978] ip_vti0: entered allmulticast mode [ 439.098602][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 439.128719][T27978] tipc: Disabling bearer [ 439.500702][T28017] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 439.517323][T28017] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 439.699544][T28037] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 439.711010][T28037] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 439.809382][T28047] __nla_validate_parse: 83 callbacks suppressed [ 439.809401][T28047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8197'. [ 439.897829][T28054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8202'. [ 439.911241][T28054] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 439.920550][T28054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.977830][T28060] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8204'. [ 439.990757][T28060] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 440.002336][T28060] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 440.032347][T28060] netlink: 'syz.1.8204': attribute type 13 has an invalid length. [ 440.041197][T28060] netlink: 'syz.1.8204': attribute type 58 has an invalid length. [ 440.049773][T28060] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8204'. [ 440.180258][T28075] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8210'. [ 440.203960][T28075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.227778][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.616515][T28093] netlink: 'syz.7.8215': attribute type 7 has an invalid length. [ 440.624358][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8215'. [ 440.642486][T20157] bond0 (unregistering): Released all slaves [ 440.651373][T28087] tipc: Enabling of bearer rejected, already enabled [ 440.716557][T20157] : left promiscuous mode [ 440.742174][T28097] FAULT_INJECTION: forcing a failure. [ 440.742174][T28097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.760581][T28097] CPU: 1 UID: 0 PID: 28097 Comm: syz.6.8217 Not tainted syzkaller #0 PREEMPT(full) [ 440.760606][T28097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.760617][T28097] Call Trace: [ 440.760625][T28097] [ 440.760632][T28097] dump_stack_lvl+0x189/0x250 [ 440.760658][T28097] ? __pfx____ratelimit+0x10/0x10 [ 440.760679][T28097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.760697][T28097] ? __pfx__printk+0x10/0x10 [ 440.760721][T28097] ? __might_fault+0xb0/0x130 [ 440.760748][T28097] ? rcu_is_watching+0x15/0xb0 [ 440.760766][T28097] should_fail_ex+0x414/0x560 [ 440.760791][T28097] _copy_from_user+0x2d/0xb0 [ 440.760810][T28097] ___sys_sendmsg+0x158/0x2a0 [ 440.760830][T28097] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.760864][T28097] ? __fget_files+0x2a/0x420 [ 440.760898][T28097] ? __fget_files+0x3a0/0x420 [ 440.760927][T28097] __x64_sys_sendmsg+0x19b/0x260 [ 440.760946][T28097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.760970][T28097] ? __pfx_ksys_write+0x10/0x10 [ 440.760990][T28097] ? rcu_is_watching+0x15/0xb0 [ 440.761009][T28097] ? rcu_is_watching+0x15/0xb0 [ 440.761027][T28097] do_syscall_64+0xfa/0x3b0 [ 440.761051][T28097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.761069][T28097] ? clear_bhb_loop+0x60/0xb0 [ 440.761087][T28097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.761110][T28097] RIP: 0033:0x7f8aba78ebe9 [ 440.761126][T28097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.761141][T28097] RSP: 002b:00007f8abb641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.761161][T28097] RAX: ffffffffffffffda RBX: 00007f8aba9b5fa0 RCX: 00007f8aba78ebe9 [ 440.761175][T28097] RDX: 0000000000020800 RSI: 0000200000000c00 RDI: 0000000000000004 [ 440.761188][T28097] RBP: 00007f8abb641090 R08: 0000000000000000 R09: 0000000000000000 [ 440.761199][T28097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.761214][T28097] R13: 00007f8aba9b6038 R14: 00007f8aba9b5fa0 R15: 00007fffb7cd7eb8 [ 440.761236][T28097] [ 441.019900][T20157] tipc: Left network mode [ 441.342415][T20157] hsr_slave_0: left promiscuous mode [ 441.352483][T20157] hsr_slave_1: left promiscuous mode [ 441.363301][T20157] veth0_macvtap: left allmulticast mode [ 441.373987][T20157] veth1_macvtap: left promiscuous mode [ 441.391280][T20157] veth0_macvtap: left promiscuous mode [ 441.400248][T20157] veth1_vlan: left promiscuous mode [ 441.400794][T28126] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8230'. [ 441.410463][T20157] veth0_vlan: left promiscuous mode [ 441.431938][T28125] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8231'. [ 441.488547][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8233'. [ 441.694203][T28132] syzkaller1: entered promiscuous mode [ 441.711203][T28132] syzkaller1: entered allmulticast mode [ 441.792935][T28141] netlink: 'syz.8.8235': attribute type 11 has an invalid length. [ 441.810615][T28141] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8235'. [ 442.009738][T28157] netlink: 'syz.1.8242': attribute type 6 has an invalid length. [ 442.021540][T28157] netlink: 'syz.1.8242': attribute type 1 has an invalid length. [ 442.038469][T20157] IPVS: stop unused estimator thread 0... [ 442.076943][T28162] syzkaller1: entered promiscuous mode [ 442.101562][T28162] syzkaller1: entered allmulticast mode [ 442.339218][T28189] netlink: 'syz.8.8252': attribute type 21 has an invalid length. [ 442.353785][T28189] netlink: 'syz.8.8252': attribute type 5 has an invalid length. [ 442.393848][T28194] netlink: 'syz.8.8252': attribute type 21 has an invalid length. [ 442.434043][T28194] netlink: 'syz.8.8252': attribute type 5 has an invalid length. [ 442.501661][T28205] netlink: 'syz.1.8258': attribute type 11 has an invalid length. [ 442.649619][T28212] syzkaller1: entered promiscuous mode [ 442.663439][T28212] syzkaller1: entered allmulticast mode [ 442.712363][T28218] netlink: 'syz.6.8261': attribute type 4 has an invalid length. [ 442.725406][T28218] netlink: 'syz.6.8261': attribute type 4 has an invalid length. [ 442.941347][T28232] lo speed is unknown, defaulting to 1000 [ 442.981329][T28237] IPVS: set_ctl: invalid protocol: 43 172.30.0.8:20000 [ 443.008567][T28237] sit0: entered promiscuous mode [ 443.022249][T28237] sit0: entered allmulticast mode [ 443.219025][T28247] netlink: 'syz.1.8272': attribute type 2 has an invalid length. [ 443.241807][T28247] nbd: must specify a device to reconfigure [ 443.350268][T28256] syzkaller1: entered promiscuous mode [ 443.357975][T28256] syzkaller1: entered allmulticast mode [ 443.597116][T28261] block nbd3: server does not support multiple connections per device. [ 443.616720][T28261] block nbd3: shutting down sockets [ 443.790702][T28279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.800732][T28279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.812161][T28279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.824660][T28279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.842655][T28282] IPVS: persistence engine module ip_vs_pe_7 not found [ 444.036371][ T11] block nbd2: Possible stuck request ffff888025840000: control (read@0,1024B). Runtime 30 seconds [ 444.049308][ T11] block nbd2: Possible stuck request ffff8880258401c0: control (read@1024,1024B). Runtime 30 seconds [ 444.067665][ T11] block nbd2: Possible stuck request ffff888025840380: control (read@2048,1024B). Runtime 30 seconds [ 444.081781][ T11] block nbd2: Possible stuck request ffff888025840540: control (read@3072,1024B). Runtime 30 seconds [ 444.299358][T28321] gretap0: entered promiscuous mode [ 444.335818][T28323] 0ªî{X¹¦: renamed from gretap0 [ 444.342708][T28323] 0ªî{X¹¦: left promiscuous mode [ 444.349132][T28323] 0ªî{X¹¦: entered allmulticast mode [ 444.357918][T28323] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 444.482528][T28339] lo speed is unknown, defaulting to 1000 [ 444.535987][T28335] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 444.561222][T28343] syzkaller1: entered promiscuous mode [ 444.571694][T28343] syzkaller1: entered allmulticast mode [ 444.933901][T28364] wlan1: mtu less than device minimum [ 444.940944][T28364] `: (slave wlan1): Error -22 calling dev_set_mtu [ 445.108177][T28371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.241151][T28383] syzkaller1: entered promiscuous mode [ 445.249122][T28383] syzkaller1: entered allmulticast mode [ 445.519247][T28388] __nla_validate_parse: 18 callbacks suppressed [ 445.519268][T28388] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8317'. [ 445.553497][T28389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8316'. [ 448.208444][ T25] block nbd0: Possible stuck request ffff8880253e0000: control (read@0,1024B). Runtime 210 seconds [ 448.220091][ T25] block nbd0: Possible stuck request ffff8880253e01c0: control (read@1024,1024B). Runtime 210 seconds [ 448.231392][ T25] block nbd0: Possible stuck request ffff8880253e0380: control (read@2048,1024B). Runtime 210 seconds [ 448.242571][ T25] block nbd0: Possible stuck request ffff8880253e0540: control (read@3072,1024B). Runtime 210 seconds [ 448.289501][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8318'. [ 448.388388][T28398] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 448.421387][T28398] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8321'. [ 448.439730][T28403] validate_nla: 6 callbacks suppressed [ 448.439748][T28403] netlink: 'syz.6.8322': attribute type 7 has an invalid length. [ 448.482044][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8322'. [ 448.512523][T28409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8324'. [ 448.589949][T28403] bond15 (unregistering): Released all slaves [ 448.675331][T28422] tipc: Enabled bearer , priority 0 [ 448.687822][T28420] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8327'. [ 448.702401][T28424] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8329'. [ 448.727525][T28421] tipc: Disabling bearer [ 448.738674][T28426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8330'. [ 448.763796][T28426] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8330'. [ 448.824196][T28430] syzkaller1: entered promiscuous mode [ 448.831007][T28430] syzkaller1: entered allmulticast mode [ 448.863210][T28432] netlink: 'syz.1.8332': attribute type 10 has an invalid length. [ 448.921275][T28436] netlink: 'syz.1.8334': attribute type 4 has an invalid length. [ 448.936027][T28438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.963726][T28438] "syz.6.8335" (28438) uses obsolete ecb(arc4) skcipher [ 448.990127][T28440] bond0: entered promiscuous mode [ 448.995582][T28440] bond_slave_0: entered promiscuous mode [ 449.001642][T28440] bond_slave_1: entered promiscuous mode [ 449.008521][T28440] mac80211_hwsim hwsim35 ÿ: entered promiscuous mode [ 449.016064][T28440] syz_tun: entered promiscuous mode [ 449.021509][T28440] bridge_slave_1: entered promiscuous mode [ 449.214312][T28459] ip6gre1: entered allmulticast mode [ 449.233160][T28461] netlink: 'syz.1.8344': attribute type 1 has an invalid length. [ 449.261201][T28461] 8021q: adding VLAN 0 to HW filter on device bond9 [ 449.292223][T28461] bond9: (slave gretap2): making interface the new active one [ 449.303118][T28461] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 449.538815][T28424] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 449.977027][T28500] tipc: Enabling of bearer rejected, already enabled [ 450.036946][T28505] netlink: 'syz.8.8361': attribute type 1 has an invalid length. [ 450.078061][T28505] bond7: (slave geneve2): making interface the new active one [ 450.086501][T28505] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 450.098495][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 450.108212][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 450.119682][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 450.129480][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 450.524029][T28537] netlink: 'syz.7.8369': attribute type 1 has an invalid length. [ 450.590707][T28540] netlink: 'syz.7.8369': attribute type 1 has an invalid length. [ 450.608990][T28542] netlink: 'syz.1.8370': attribute type 6 has an invalid length. [ 450.630976][T28540] netlink: 'syz.7.8369': attribute type 4 has an invalid length. [ 450.683053][T28540] __nla_validate_parse: 74 callbacks suppressed [ 450.683072][T28540] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.8369'. [ 450.739517][T28537] netlink: 'syz.7.8369': attribute type 4 has an invalid length. [ 450.747752][T28537] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.8369'. [ 451.053734][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.062886][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.073934][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.097017][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.107822][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 451.131028][T20150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.165609][T28554] lo speed is unknown, defaulting to 1000 [ 451.238839][T20150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.361663][T20150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.367761][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8379'. [ 451.402062][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8379'. [ 451.430304][T28573] gtp1: entered promiscuous mode [ 451.451708][T28573] gtp1: entered allmulticast mode [ 451.463276][T20150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.656683][T20150] bridge_slave_1: left allmulticast mode [ 451.664683][T20150] bridge_slave_1: left promiscuous mode [ 451.676372][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.687188][T20150] bridge_slave_0: left allmulticast mode [ 451.692960][T20150] bridge_slave_0: left promiscuous mode [ 451.702885][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.780727][T28598] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8387'. [ 451.890166][T20150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.900327][T20150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.911526][T20150] bond0 (unregistering): Released all slaves [ 451.957686][T28596] bond9: (slave gretap2): Releasing active interface [ 451.997584][T28612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8390'. [ 452.032120][T28590] lo speed is unknown, defaulting to 1000 [ 452.033511][T28554] chnl_net:caif_netlink_parms(): no params data found [ 452.091992][T28618] tipc: Enabling of bearer rejected, failed to enable media [ 452.151380][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8394'. [ 452.174102][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8394'. [ 452.228608][T28633] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8394'. [ 452.403184][T28554] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.422788][T28554] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.436519][T28554] bridge_slave_0: entered allmulticast mode [ 452.443667][T28554] bridge_slave_0: entered promiscuous mode [ 452.452488][T28554] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.461119][T28554] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.469545][T28554] bridge_slave_1: entered allmulticast mode [ 452.477841][T28554] bridge_slave_1: entered promiscuous mode [ 452.638628][T28655] siw: device registration error -23 [ 452.647751][T28554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.688634][T20150] hsr_slave_0: left promiscuous mode [ 452.700774][T20150] hsr_slave_1: left promiscuous mode [ 452.713881][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.721981][T28659] netlink: 140 bytes leftover after parsing attributes in process `syz.7.8404'. [ 452.722955][T20150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.739043][T20150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.746674][T20150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.758349][T20150] veth1_macvtap: left promiscuous mode [ 452.764299][T20150] veth0_macvtap: left promiscuous mode [ 452.770354][T20150] veth1_vlan: left promiscuous mode [ 452.781754][T20150] veth0_vlan: left promiscuous mode [ 452.933009][T20150] team0 (unregistering): Port device team_slave_1 removed [ 452.956504][T20150] team0 (unregistering): Port device team_slave_0 removed [ 453.037043][T28554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.125586][T28668] team0: Device veth0_vlan failed to register rx_handler [ 453.154661][ T51] Bluetooth: hci3: command tx timeout [ 453.184605][T28669] bond0: entered allmulticast mode [ 453.194491][T28669] bond_slave_0: entered allmulticast mode [ 453.212545][T28669] bond_slave_1: entered allmulticast mode [ 453.300486][T28554] team0: Port device team_slave_0 added [ 453.349810][T28554] team0: Port device team_slave_1 added [ 453.477138][T28554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.506532][T28554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.536790][T28554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.553369][T28681] syzkaller1: entered promiscuous mode [ 453.566665][T28681] syzkaller1: entered allmulticast mode [ 453.568961][T28687] block nbd3: Unsupported socket: shutdown callout must be supported. [ 453.583501][T28554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.591477][T28554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.627544][T28554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.749600][T28554] hsr_slave_0: entered promiscuous mode [ 453.758395][T28554] hsr_slave_1: entered promiscuous mode [ 453.766252][T28554] debugfs: 'hsr0' already exists in 'hsr' [ 453.777826][T28554] Cannot create hsr debugfs directory [ 454.134273][T28725] syzkaller1: entered promiscuous mode [ 454.143423][T28725] syzkaller1: entered allmulticast mode [ 454.270784][T28733] bridge0: port 3(batadv2) entered blocking state [ 454.278218][T28733] bridge0: port 3(batadv2) entered disabled state [ 454.288152][T28733] batadv2: entered allmulticast mode [ 454.298522][T28733] batadv2: entered promiscuous mode [ 454.342468][T28554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 454.363399][T28554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.385690][T28554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.398080][T28554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.468804][T28755] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 454.534367][T28554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.572416][T28554] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.591113][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.598288][T20150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.613596][T18555] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.620764][T18555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.766146][T18555] batman_adv: batadv2: IGMP Querier appeared [ 454.772254][T18555] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 454.868411][T28781] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 454.944371][T28786] vlan2: entered allmulticast mode [ 454.960909][T28786] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 454.988109][T28789] tipc: Enabling of bearer rejected, already enabled [ 455.009175][T28789] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 455.031704][T28789] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 455.059155][T28554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.073319][T28793] validate_nla: 1 callbacks suppressed [ 455.073339][T28793] netlink: 'syz.1.8445': attribute type 1 has an invalid length. [ 455.114240][T28793] netlink: 'syz.1.8445': attribute type 11 has an invalid length. [ 455.167582][T28803] IPv6: sit1: Disabled Multicast RS [ 455.173603][T28803] sit1: entered allmulticast mode [ 455.234834][ T51] Bluetooth: hci3: command tx timeout [ 455.312027][T28815] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 455.414011][T28823] netlink: 'syz.1.8455': attribute type 6 has an invalid length. [ 455.732341][T28554] veth0_vlan: entered promiscuous mode [ 455.772262][T28834] tipc: Enabling of bearer rejected, already enabled [ 455.798796][T28554] veth1_vlan: entered promiscuous mode [ 455.903404][T28853] delete_channel: no stack [ 455.915041][T28554] veth0_macvtap: entered promiscuous mode [ 455.937800][T28856] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 455.947598][T28554] veth1_macvtap: entered promiscuous mode [ 455.962200][T28856] __nla_validate_parse: 13 callbacks suppressed [ 455.962220][T28856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8464'. [ 455.986239][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8462'. [ 456.009967][T28858] netlink: 'syz.8.8465': attribute type 1 has an invalid length. [ 456.018152][T28858] netlink: 'syz.8.8465': attribute type 2 has an invalid length. [ 456.035262][T28554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.062225][T28554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.091544][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.113752][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.158860][T28858] netem: incorrect ge model size [ 456.176197][T28858] netem: change failed [ 456.189171][T20157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.203886][T20157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.244019][T28871] netlink: 'syz.6.8470': attribute type 21 has an invalid length. [ 456.255750][T28871] netlink: 'syz.6.8470': attribute type 22 has an invalid length. [ 456.263781][T28871] netlink: 'syz.6.8470': attribute type 23 has an invalid length. [ 456.276563][T28871] netlink: 'syz.6.8470': attribute type 25 has an invalid length. [ 456.316363][T28871] netlink: 'syz.6.8470': attribute type 26 has an invalid length. [ 456.334003][T28871] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8470'. [ 456.402465][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.433020][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.462285][T28880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.478719][T28881] tipc: Enabling of bearer rejected, failed to enable media [ 456.494342][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.510954][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.740454][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8478'. [ 456.978259][T28921] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8484'. [ 457.193573][T28933] netlink: 196 bytes leftover after parsing attributes in process `syz.5.8489'. [ 457.217449][T28935] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8490'. [ 457.267245][T28935] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8490'. [ 457.314739][ T51] Bluetooth: hci3: command tx timeout [ 457.349518][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8493'. [ 457.407590][T28944] tipc: Enabling of bearer rejected, already enabled [ 457.498582][T28947] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8495'. [ 457.572870][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.590455][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.600549][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.610590][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.621189][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.657076][T28950] lo speed is unknown, defaulting to 1000 [ 457.683946][T28963] smc: removing net device bond0 with user defined pnetid SYZ2 [ 457.738602][T28963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.751724][T28963] bond_slave_0: left allmulticast mode [ 457.769491][T28963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.779751][T28963] bond_slave_1: left allmulticast mode [ 457.796533][T28963] bond0 (unregistering): Released all slaves [ 457.829129][T28968] veth0: entered promiscuous mode [ 457.903959][T28968] veth0: left promiscuous mode [ 458.001372][T28987] tipc: Enabling of bearer rejected, failed to enable media [ 458.017550][T28950] chnl_net:caif_netlink_parms(): no params data found [ 458.209714][T28950] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.240880][T28950] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.268257][T28950] bridge_slave_0: entered allmulticast mode [ 458.277416][T28950] bridge_slave_0: entered promiscuous mode [ 458.299648][T28950] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.309760][T28950] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.318124][T28950] bridge_slave_1: entered allmulticast mode [ 458.328029][T28950] bridge_slave_1: entered promiscuous mode [ 458.379033][T28950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.408538][T28950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.489047][T29025] tipc: Enabling of bearer rejected, failed to enable media [ 458.502608][T28950] team0: Port device team_slave_0 added [ 458.531536][T28950] team0: Port device team_slave_1 added [ 458.741492][T28950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.757687][T28950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.786648][T28950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.802946][T29048] tipc: Enabling of bearer rejected, already enabled [ 458.820197][T28950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.849025][T28950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.899496][T28950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.968785][T29049] lo speed is unknown, defaulting to 1000 [ 459.027289][T28950] hsr_slave_0: entered promiscuous mode [ 459.037474][T28950] hsr_slave_1: entered promiscuous mode [ 459.043982][T28950] debugfs: 'hsr0' already exists in 'hsr' [ 459.057647][T28950] Cannot create hsr debugfs directory [ 459.360028][T28950] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.398173][ T51] Bluetooth: hci3: command tx timeout [ 459.408212][T28950] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 459.456085][T29088] vlan2: entered allmulticast mode [ 459.461430][T29088] bridge0: entered allmulticast mode [ 459.470269][T29091] netlink: ct family unspecified [ 459.492771][T29091] openvswitch: netlink: Actions may not be safe on all matching packets [ 459.520248][T29054] 1ªî{X¹¦: left allmulticast mode [ 459.600052][T29054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.622452][T28950] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.633975][T28950] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 459.739046][ T51] Bluetooth: hci0: command tx timeout [ 459.750146][T28950] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.764065][T28950] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 459.789381][T29107] FAULT_INJECTION: forcing a failure. [ 459.789381][T29107] name failslab, interval 1, probability 0, space 0, times 0 [ 459.808118][T29107] CPU: 1 UID: 0 PID: 29107 Comm: syz.8.8541 Not tainted syzkaller #0 PREEMPT(full) [ 459.808143][T29107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.808155][T29107] Call Trace: [ 459.808161][T29107] [ 459.808169][T29107] dump_stack_lvl+0x189/0x250 [ 459.808195][T29107] ? __pfx____ratelimit+0x10/0x10 [ 459.808215][T29107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.808233][T29107] ? __pfx__printk+0x10/0x10 [ 459.808255][T29107] ? fs_reclaim_acquire+0x7d/0x100 [ 459.808279][T29107] ? rcu_is_watching+0x15/0xb0 [ 459.808294][T29107] ? __pfx___might_resched+0x10/0x10 [ 459.808309][T29107] ? lock_acquire+0x5f/0x360 [ 459.808339][T29107] should_fail_ex+0x414/0x560 [ 459.808362][T29107] should_failslab+0xa8/0x100 [ 459.808384][T29107] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 459.808407][T29107] ? __alloc_skb+0x112/0x2d0 [ 459.808432][T29107] __alloc_skb+0x112/0x2d0 [ 459.808457][T29107] netlink_sendmsg+0x5c6/0xb30 [ 459.808485][T29107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.808510][T29107] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.808527][T29107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.808546][T29107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.808569][T29107] __sock_sendmsg+0x21c/0x270 [ 459.808592][T29107] ____sys_sendmsg+0x505/0x830 [ 459.808613][T29107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.808637][T29107] ? import_iovec+0x74/0xa0 [ 459.808658][T29107] ___sys_sendmsg+0x21f/0x2a0 [ 459.808675][T29107] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.808711][T29107] ? __fget_files+0x2a/0x420 [ 459.808734][T29107] ? __fget_files+0x3a0/0x420 [ 459.808763][T29107] __x64_sys_sendmsg+0x19b/0x260 [ 459.808782][T29107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.808805][T29107] ? __pfx_ksys_write+0x10/0x10 [ 459.808827][T29107] ? rcu_is_watching+0x15/0xb0 [ 459.808846][T29107] ? rcu_is_watching+0x15/0xb0 [ 459.808865][T29107] do_syscall_64+0xfa/0x3b0 [ 459.808889][T29107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.808908][T29107] ? clear_bhb_loop+0x60/0xb0 [ 459.808928][T29107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.808945][T29107] RIP: 0033:0x7f4330f8ebe9 [ 459.808962][T29107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.808978][T29107] RSP: 002b:00007f4331d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.808998][T29107] RAX: ffffffffffffffda RBX: 00007f43311b5fa0 RCX: 00007f4330f8ebe9 [ 459.809013][T29107] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 459.809025][T29107] RBP: 00007f4331d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.809038][T29107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.809050][T29107] R13: 00007f43311b6038 R14: 00007f43311b5fa0 R15: 00007fffd4448788 [ 459.809071][T29107] [ 460.108586][T28950] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.129297][T28950] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 460.186399][T29115] tipc: Enabling of bearer rejected, failed to enable media [ 460.381139][T28950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.389952][T29125] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 460.405946][T28950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.423260][T28950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 460.448397][T28950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 460.646194][T28950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.702747][T28950] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.740667][T20155] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.747849][T20155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.799344][T20157] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.806502][T20157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.111573][T29173] __nla_validate_parse: 17 callbacks suppressed [ 461.111595][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8564'. [ 461.207899][T29177] netlink: 666 bytes leftover after parsing attributes in process `syz.7.8565'. [ 461.294103][T28950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.542414][T29193] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8569'. [ 461.637943][T29202] tipc: Enabling of bearer rejected, failed to enable media [ 461.702591][T28950] veth0_vlan: entered promiscuous mode [ 461.737605][T28950] veth1_vlan: entered promiscuous mode [ 461.796399][ T51] Bluetooth: hci0: command tx timeout [ 461.807799][T28950] veth0_macvtap: entered promiscuous mode [ 461.819229][T28950] veth1_macvtap: entered promiscuous mode [ 461.878758][T28950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.908709][T29223] validate_nla: 14 callbacks suppressed [ 461.908730][T29223] netlink: 'syz.1.8575': attribute type 10 has an invalid length. [ 461.948101][T29226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8576'. [ 461.951003][T28950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.973095][T29226] chnl_net:caif_netlink_parms(): no params data found [ 462.069526][T18555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.102595][T29236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8581'. [ 462.147197][T29238] syzkaller1: entered promiscuous mode [ 462.163276][T29238] syzkaller1: entered allmulticast mode [ 462.166594][T29242] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8582'. [ 462.176528][T29245] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.192191][T18555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.217668][T18555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.269174][T18555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.327213][T18555] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.351474][T18555] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.365015][T18555] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.383768][T18555] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.396601][T29250] tipc: Resetting bearer [ 462.665183][T29274] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8593'. [ 462.737243][T29274] macvlan2: entered promiscuous mode [ 462.742587][T29274] macvlan2: entered allmulticast mode [ 462.752511][T29274] bond9: entered promiscuous mode [ 462.761190][T29274] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 462.769938][T29274] bond9: left promiscuous mode [ 462.936077][T29295] sctp: [Deprecated]: syz.8.8599 (pid 29295) Use of int in max_burst socket option deprecated. [ 462.936077][T29295] Use struct sctp_assoc_value instead [ 463.008247][T29297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8602'. [ 463.018735][T29297] netlink: 'syz.1.8602': attribute type 1 has an invalid length. [ 463.029438][T29297] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8602'. [ 463.084358][T29305] netlink: 'syz.5.8605': attribute type 10 has an invalid length. [ 463.092382][T29307] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8606'. [ 463.110163][T29305] bond0: (slave wlan1): Opening slave failed [ 463.239384][T29317] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.246807][T29317] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.287274][T29316] syzkaller0: entered promiscuous mode [ 463.295759][T29316] syzkaller0: entered allmulticast mode [ 463.338814][ T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.580078][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.597866][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.607063][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.617885][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.626564][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.628190][T29328] FAULT_INJECTION: forcing a failure. [ 463.628190][T29328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.648009][T29328] CPU: 0 UID: 0 PID: 29328 Comm: syz.1.8614 Not tainted syzkaller #0 PREEMPT(full) [ 463.648031][T29328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.648041][T29328] Call Trace: [ 463.648049][T29328] [ 463.648056][T29328] dump_stack_lvl+0x189/0x250 [ 463.648082][T29328] ? __pfx____ratelimit+0x10/0x10 [ 463.648105][T29328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.648125][T29328] ? __pfx__printk+0x10/0x10 [ 463.648145][T29328] ? __might_fault+0xb0/0x130 [ 463.648172][T29328] ? rcu_is_watching+0x15/0xb0 [ 463.648191][T29328] should_fail_ex+0x414/0x560 [ 463.648216][T29328] _copy_from_iter+0x1db/0x16f0 [ 463.648236][T29328] ? rcu_is_watching+0x15/0xb0 [ 463.648253][T29328] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 463.648278][T29328] ? __pfx__copy_from_iter+0x10/0x10 [ 463.648296][T29328] ? __build_skb_around+0x257/0x3e0 [ 463.648322][T29328] ? netlink_sendmsg+0x642/0xb30 [ 463.648346][T29328] ? skb_put+0x11b/0x210 [ 463.648363][T29328] netlink_sendmsg+0x6b2/0xb30 [ 463.648392][T29328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.648417][T29328] ? aa_sock_msg_perm+0xf1/0x1d0 [ 463.648435][T29328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.648453][T29328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.648478][T29328] __sock_sendmsg+0x21c/0x270 [ 463.648501][T29328] ____sys_sendmsg+0x505/0x830 [ 463.648522][T29328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.648544][T29328] ? import_iovec+0x74/0xa0 [ 463.648565][T29328] ___sys_sendmsg+0x21f/0x2a0 [ 463.648581][T29328] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.648614][T29328] ? __fget_files+0x2a/0x420 [ 463.648637][T29328] ? __fget_files+0x3a0/0x420 [ 463.648665][T29328] __x64_sys_sendmsg+0x19b/0x260 [ 463.648688][T29328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.648718][T29328] ? __pfx_ksys_write+0x10/0x10 [ 463.648739][T29328] ? rcu_is_watching+0x15/0xb0 [ 463.648758][T29328] ? rcu_is_watching+0x15/0xb0 [ 463.648776][T29328] do_syscall_64+0xfa/0x3b0 [ 463.648800][T29328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.648817][T29328] ? clear_bhb_loop+0x60/0xb0 [ 463.648837][T29328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.648854][T29328] RIP: 0033:0x7f4edc58ebe9 [ 463.648870][T29328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.648887][T29328] RSP: 002b:00007f4edd4c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.648906][T29328] RAX: ffffffffffffffda RBX: 00007f4edc7b5fa0 RCX: 00007f4edc58ebe9 [ 463.648920][T29328] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 463.648933][T29328] RBP: 00007f4edd4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 463.648945][T29328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.648956][T29328] R13: 00007f4edc7b6038 R14: 00007f4edc7b5fa0 R15: 00007ffd6525e678 [ 463.648978][T29328] [ 463.673966][T29323] lo speed is unknown, defaulting to 1000 [ 464.070232][ T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.074063][T29344] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 464.139629][T29346] FAULT_INJECTION: forcing a failure. [ 464.139629][T29346] name failslab, interval 1, probability 0, space 0, times 0 [ 464.179824][T29346] CPU: 0 UID: 0 PID: 29346 Comm: syz.1.8620 Not tainted syzkaller #0 PREEMPT(full) [ 464.179850][T29346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.179861][T29346] Call Trace: [ 464.179869][T29346] [ 464.179877][T29346] dump_stack_lvl+0x189/0x250 [ 464.179903][T29346] ? __pfx____ratelimit+0x10/0x10 [ 464.179925][T29346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.179944][T29346] ? __pfx__printk+0x10/0x10 [ 464.179968][T29346] ? __pfx___might_resched+0x10/0x10 [ 464.179985][T29346] ? lock_acquire+0x5f/0x360 [ 464.180010][T29346] should_fail_ex+0x414/0x560 [ 464.180034][T29346] should_failslab+0xa8/0x100 [ 464.180057][T29346] __kmalloc_cache_noprof+0x70/0x3d0 [ 464.180078][T29346] ? rtnl_newlink+0xed/0x1c70 [ 464.180099][T29346] ? kasan_save_free_info+0x46/0x50 [ 464.180118][T29346] rtnl_newlink+0xed/0x1c70 [ 464.180139][T29346] ? netlink_sendmsg+0x805/0xb30 [ 464.180161][T29346] ? __sock_sendmsg+0x21c/0x270 [ 464.180180][T29346] ? ____sys_sendmsg+0x505/0x830 [ 464.180196][T29346] ? ___sys_sendmsg+0x21f/0x2a0 [ 464.180208][T29346] ? __x64_sys_sendmsg+0x19b/0x260 [ 464.180222][T29346] ? do_syscall_64+0xfa/0x3b0 [ 464.180245][T29346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.180265][T29346] ? __pfx_rtnl_newlink+0x10/0x10 [ 464.180298][T29346] ? rcu_is_watching+0x15/0xb0 [ 464.180320][T29346] ? nlmon_xmit+0xb0/0x100 [ 464.180336][T29346] ? kmem_cache_free+0x18f/0x400 [ 464.180361][T29346] ? rcu_is_watching+0x15/0xb0 [ 464.180377][T29346] ? __dev_queue_xmit+0x27b/0x3b50 [ 464.180398][T29346] ? __local_bh_enable_ip+0x12d/0x1c0 [ 464.180416][T29346] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 464.180432][T29346] ? __dev_queue_xmit+0x27b/0x3b50 [ 464.180451][T29346] ? lock_release+0x4b/0x3e0 [ 464.180474][T29346] ? __dev_queue_xmit+0x27b/0x3b50 [ 464.180491][T29346] ? __dev_queue_xmit+0x27b/0x3b50 [ 464.180509][T29346] ? __dev_queue_xmit+0x1d79/0x3b50 [ 464.180533][T29346] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 464.180554][T29346] ? rcu_is_watching+0x15/0xb0 [ 464.180569][T29346] ? lock_release+0x4b/0x3e0 [ 464.180589][T29346] ? bpf_lsm_capable+0x9/0x20 [ 464.180612][T29346] ? security_capable+0x7e/0x2e0 [ 464.180647][T29346] ? __pfx_rtnl_newlink+0x10/0x10 [ 464.180670][T29346] rtnetlink_rcv_msg+0x7cc/0xb70 [ 464.180695][T29346] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 464.180717][T29346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 464.180738][T29346] ? ref_tracker_free+0x63a/0x7d0 [ 464.180761][T29346] ? __asan_memcpy+0x40/0x70 [ 464.180778][T29346] ? __pfx_ref_tracker_free+0x10/0x10 [ 464.180806][T29346] netlink_rcv_skb+0x208/0x470 [ 464.180829][T29346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 464.180852][T29346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.180885][T29346] netlink_unicast+0x82c/0x9e0 [ 464.180910][T29346] ? __pfx_netlink_unicast+0x10/0x10 [ 464.180932][T29346] ? netlink_sendmsg+0x642/0xb30 [ 464.180954][T29346] ? skb_put+0x11b/0x210 [ 464.180972][T29346] netlink_sendmsg+0x805/0xb30 [ 464.181000][T29346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.181024][T29346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 464.181040][T29346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.181059][T29346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.181083][T29346] __sock_sendmsg+0x21c/0x270 [ 464.181104][T29346] ____sys_sendmsg+0x505/0x830 [ 464.181123][T29346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.181143][T29346] ? import_iovec+0x74/0xa0 [ 464.181163][T29346] ___sys_sendmsg+0x21f/0x2a0 [ 464.181180][T29346] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.181215][T29346] ? __fget_files+0x2a/0x420 [ 464.181237][T29346] ? __fget_files+0x3a0/0x420 [ 464.181263][T29346] __x64_sys_sendmsg+0x19b/0x260 [ 464.181281][T29346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.181301][T29346] ? __pfx_ksys_write+0x10/0x10 [ 464.181320][T29346] ? rcu_is_watching+0x15/0xb0 [ 464.181339][T29346] ? rcu_is_watching+0x15/0xb0 [ 464.181358][T29346] do_syscall_64+0xfa/0x3b0 [ 464.181382][T29346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.181400][T29346] ? clear_bhb_loop+0x60/0xb0 [ 464.181420][T29346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.181437][T29346] RIP: 0033:0x7f4edc58ebe9 [ 464.181453][T29346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.181469][T29346] RSP: 002b:00007f4edd4c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.181487][T29346] RAX: ffffffffffffffda RBX: 00007f4edc7b5fa0 RCX: 00007f4edc58ebe9 [ 464.181501][T29346] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 464.181511][T29346] RBP: 00007f4edd4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 464.181523][T29346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.181534][T29346] R13: 00007f4edc7b6038 R14: 00007f4edc7b5fa0 R15: 00007ffd6525e678 [ 464.181555][T29346] [ 464.673039][T29349] smc: adding net device bond0 with user defined pnetid SYZ2 [ 464.686937][T29358] tipc: Enabling of bearer rejected, failed to enable media [ 464.823861][T29367] FAULT_INJECTION: forcing a failure. [ 464.823861][T29367] name failslab, interval 1, probability 0, space 0, times 0 [ 464.878316][T29367] CPU: 0 UID: 0 PID: 29367 Comm: syz.7.8626 Not tainted syzkaller #0 PREEMPT(full) [ 464.878343][T29367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.878354][T29367] Call Trace: [ 464.878362][T29367] [ 464.878370][T29367] dump_stack_lvl+0x189/0x250 [ 464.878396][T29367] ? __pfx____ratelimit+0x10/0x10 [ 464.878419][T29367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.878439][T29367] ? __pfx__printk+0x10/0x10 [ 464.878466][T29367] should_fail_ex+0x414/0x560 [ 464.878489][T29367] should_failslab+0xa8/0x100 [ 464.878513][T29367] kmem_cache_alloc_noprof+0x73/0x3c0 [ 464.878533][T29367] ? skb_clone+0x212/0x3a0 [ 464.878552][T29367] skb_clone+0x212/0x3a0 [ 464.878569][T29367] __netlink_deliver_tap+0x404/0x850 [ 464.878598][T29367] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.878619][T29367] netlink_deliver_tap+0x19c/0x1b0 [ 464.878640][T29367] netlink_unicast+0x7fa/0x9e0 [ 464.878665][T29367] ? __pfx_netlink_unicast+0x10/0x10 [ 464.878686][T29367] ? netlink_sendmsg+0x642/0xb30 [ 464.878708][T29367] ? skb_put+0x11b/0x210 [ 464.878725][T29367] netlink_sendmsg+0x805/0xb30 [ 464.878752][T29367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.878776][T29367] ? aa_sock_msg_perm+0xf1/0x1d0 [ 464.878793][T29367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.878811][T29367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.878843][T29367] __sock_sendmsg+0x21c/0x270 [ 464.878866][T29367] ____sys_sendmsg+0x505/0x830 [ 464.878887][T29367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.878908][T29367] ? import_iovec+0x74/0xa0 [ 464.878929][T29367] ___sys_sendmsg+0x21f/0x2a0 [ 464.878949][T29367] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.878982][T29367] ? __fget_files+0x2a/0x420 [ 464.879005][T29367] ? __fget_files+0x3a0/0x420 [ 464.879034][T29367] __x64_sys_sendmsg+0x19b/0x260 [ 464.879053][T29367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.879076][T29367] ? __pfx_ksys_write+0x10/0x10 [ 464.879096][T29367] ? rcu_is_watching+0x15/0xb0 [ 464.879113][T29367] ? rcu_is_watching+0x15/0xb0 [ 464.879130][T29367] do_syscall_64+0xfa/0x3b0 [ 464.879154][T29367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.879173][T29367] ? clear_bhb_loop+0x60/0xb0 [ 464.879191][T29367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.879208][T29367] RIP: 0033:0x7f466318ebe9 [ 464.879224][T29367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.879240][T29367] RSP: 002b:00007f4663f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.879260][T29367] RAX: ffffffffffffffda RBX: 00007f46633b5fa0 RCX: 00007f466318ebe9 [ 464.879274][T29367] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 464.879286][T29367] RBP: 00007f4663f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 464.879297][T29367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.879308][T29367] R13: 00007f46633b6038 R14: 00007f46633b5fa0 R15: 00007ffd6dfffc48 [ 464.879335][T29367] [ 464.881205][ T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.204346][T29323] chnl_net:caif_netlink_parms(): no params data found [ 465.253190][T29386] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 465.279814][T29384] lo speed is unknown, defaulting to 1000 [ 465.332520][ T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.491864][T29323] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.511514][T29411] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 465.520739][T29323] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.520972][T29323] bridge_slave_0: entered allmulticast mode [ 465.523490][T29323] bridge_slave_0: entered promiscuous mode [ 465.567740][T29413] netlink: 'syz.7.8637': attribute type 23 has an invalid length. [ 465.570673][T29323] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.583557][T29323] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.591749][T29323] bridge_slave_1: entered allmulticast mode [ 465.600123][T29323] bridge_slave_1: entered promiscuous mode [ 465.673980][T29417] macvlan2: entered promiscuous mode [ 465.680565][T29417] macvlan2: entered allmulticast mode [ 465.686946][T29417] bond1: entered promiscuous mode [ 465.692474][T29417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.700710][T29417] bond1: left promiscuous mode [ 465.714892][ T51] Bluetooth: hci0: command tx timeout [ 465.745826][T29323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.783753][T29323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.898202][T29323] team0: Port device team_slave_0 added [ 465.914201][T29323] team0: Port device team_slave_1 added [ 465.927367][ T60] bridge_slave_1: left allmulticast mode [ 465.933158][ T60] bridge_slave_1: left promiscuous mode [ 465.941104][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.958047][ T60] bridge_slave_0: left allmulticast mode [ 465.963798][ T60] bridge_slave_0: left promiscuous mode [ 465.969910][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.081865][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.093488][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.107182][ T60] bond0 (unregistering): Released all slaves [ 466.119364][T29424] __nla_validate_parse: 13 callbacks suppressed [ 466.119385][T29424] netlink: 288 bytes leftover after parsing attributes in process `syz.5.8642'. [ 466.218045][T29323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.231011][T29323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.259682][T29445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8646'. [ 466.260000][T29323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.282094][T29323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.289156][T29323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.328405][T29323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.381675][T29452] netlink: 'syz.5.8649': attribute type 7 has an invalid length. [ 466.470300][T29454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8650'. [ 466.530536][T29323] hsr_slave_0: entered promiscuous mode [ 466.557383][T29323] hsr_slave_1: entered promiscuous mode [ 466.564235][T29323] debugfs: 'hsr0' already exists in 'hsr' [ 466.579671][T29323] Cannot create hsr debugfs directory [ 466.630735][ T60] hsr_slave_0: left promiscuous mode [ 466.646030][ T60] hsr_slave_1: left promiscuous mode [ 466.658894][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.666788][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.686420][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.693930][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.720441][ T60] veth1_macvtap: left promiscuous mode [ 466.728025][ T60] veth0_macvtap: left promiscuous mode [ 466.733737][ T60] veth1_vlan: left promiscuous mode [ 466.741838][T29484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8660'. [ 466.742675][ T60] veth0_vlan: left promiscuous mode [ 466.897724][ T60] team0 (unregistering): Port device team_slave_1 removed [ 466.913162][ T60] team0 (unregistering): Port device team_slave_0 removed [ 467.200605][T29504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8666'. [ 467.209212][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8667'. [ 467.222638][T29504] netlink: 'syz.5.8666': attribute type 10 has an invalid length. [ 467.234031][T29504] bond0: (slave wlan1): Opening slave failed [ 467.332140][T29510] macvlan3: entered promiscuous mode [ 467.373291][T29510] macvlan3: entered allmulticast mode [ 467.397903][T29510] bond11: entered promiscuous mode [ 467.420008][T29510] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 467.471303][T29510] bond11: left promiscuous mode [ 467.536977][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8676'. [ 467.550832][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8676'. [ 467.761029][T29550] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8681'. [ 467.795369][ T51] Bluetooth: hci0: command tx timeout [ 468.012823][T29579] sock: sock_set_timeout: `syz.7.8685' (pid 29579) tries to set negative timeout [ 468.036570][T29580] openvswitch: netlink: Message has 4 unknown bytes. [ 468.039989][T29576] openvswitch: netlink: Message has 4 unknown bytes. [ 468.051099][T29579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8685'. [ 468.101775][T29578] vlan1: entered allmulticast mode [ 468.111321][T29578] bridge0: entered allmulticast mode [ 468.121655][T29578] bridge5: port 1(vlan1) entered blocking state [ 468.141949][T29578] bridge5: port 1(vlan1) entered disabled state [ 468.149914][T29578] vlan1: entered promiscuous mode [ 468.287412][T29323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.300138][T29323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.335117][T29323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.362723][T29323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.477513][T29323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.496444][T29323] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.511711][T20157] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.518905][T20157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.546534][T20157] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.553710][T20157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.723055][T29625] tipc: Enabling of bearer rejected, already enabled [ 468.780907][T29627] macvlan3: entered promiscuous mode [ 468.787274][T29627] macvlan3: entered allmulticast mode [ 468.793653][T29627] bond12: entered promiscuous mode [ 468.802254][T29627] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 468.812938][T29627] bond12: left promiscuous mode [ 468.947707][T29323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.283713][T29323] veth0_vlan: entered promiscuous mode [ 469.302655][T29323] veth1_vlan: entered promiscuous mode [ 469.362729][T29323] veth0_macvtap: entered promiscuous mode [ 469.419676][T29323] veth1_macvtap: entered promiscuous mode [ 469.442096][T29675] macvlan2: entered promiscuous mode [ 469.457458][T29675] macvlan2: entered allmulticast mode [ 469.463755][T29675] bond10: entered promiscuous mode [ 469.473157][T29675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.483550][T29675] bond10: left promiscuous mode [ 469.591111][T29323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.626864][T29323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.646965][T20153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.687756][T20153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.740559][T20153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.750213][T20153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.876007][ T51] Bluetooth: hci0: command tx timeout [ 469.882838][T18555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.905224][T18555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.932862][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.947299][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.964995][ T51] Bluetooth: hci0: command tx timeout [ 474.135394][ T11] block nbd2: Possible stuck request ffff888025840000: control (read@0,1024B). Runtime 60 seconds [ 474.146668][ T11] block nbd2: Possible stuck request ffff8880258401c0: control (read@1024,1024B). Runtime 60 seconds [ 474.158553][ T11] block nbd2: Possible stuck request ffff888025840380: control (read@2048,1024B). Runtime 60 seconds [ 474.170218][ T11] block nbd2: Possible stuck request ffff888025840540: control (read@3072,1024B). Runtime 60 seconds [ 475.929101][ T5232] udevd[5232]: worker [24904] /devices/virtual/block/nbd2 is taking a long time [ 478.596846][ T25] block nbd0: Possible stuck request ffff8880253e0000: control (read@0,1024B). Runtime 240 seconds [ 478.607616][ T25] block nbd0: Possible stuck request ffff8880253e01c0: control (read@1024,1024B). Runtime 240 seconds [ 478.618831][ T25] block nbd0: Possible stuck request ffff8880253e0380: control (read@2048,1024B). Runtime 240 seconds [ 478.629935][ T25] block nbd0: Possible stuck request ffff8880253e0540: control (read@3072,1024B). Runtime 240 seconds [ 491.550789][T29710] __nla_validate_parse: 11 callbacks suppressed [ 491.550809][T29710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8730'. [ 491.661571][T29715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8731'. [ 491.684949][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.697174][T29716] syzkaller1: entered promiscuous mode [ 491.703360][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.710902][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.714182][T29716] syzkaller1: entered allmulticast mode [ 491.719749][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.733365][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.781132][T29717] lo speed is unknown, defaulting to 1000 [ 491.793515][T29722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8733'. [ 491.830083][T29722] macvlan2: entered promiscuous mode [ 491.848583][T29722] macvlan2: entered allmulticast mode [ 491.867644][T29724] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8734'. [ 492.049315][T29734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8737'. [ 492.064130][T29717] chnl_net:caif_netlink_parms(): no params data found [ 492.113889][T29736] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8738'. [ 492.145545][T29734] macvlan2: entered promiscuous mode [ 492.152177][T29734] macvlan2: entered allmulticast mode [ 492.159877][T29734] bond0: entered promiscuous mode [ 492.169724][T29734] bond_slave_0: entered promiscuous mode [ 492.177028][T29734] bond_slave_1: entered promiscuous mode [ 492.183486][T29734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.196226][T29734] bond0: left promiscuous mode [ 492.201305][T29734] bond_slave_0: left promiscuous mode [ 492.210268][T29734] bond_slave_1: left promiscuous mode [ 492.311739][T29743] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8741'. [ 492.322591][T29743] tipc: Invalid UDP bearer configuration [ 492.322628][T29743] tipc: Enabling of bearer rejected, failed to enable media [ 492.340042][T29752] nbd: couldn't find device at index 7 [ 492.346464][T29743] Bluetooth: MGMT ver 1.23 [ 492.366043][T29717] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.373418][T29717] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.382446][T29717] bridge_slave_0: entered allmulticast mode [ 492.391463][T29717] bridge_slave_0: entered promiscuous mode [ 492.404018][T29717] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.412701][T29717] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.421640][T29717] bridge_slave_1: entered allmulticast mode [ 492.430119][T29717] bridge_slave_1: entered promiscuous mode [ 492.506506][T29717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.519051][T29757] syzkaller1: entered promiscuous mode [ 492.527043][T29757] syzkaller1: entered allmulticast mode [ 492.541699][T29717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.598149][T29717] team0: Port device team_slave_0 added [ 492.609279][T29717] team0: Port device team_slave_1 added [ 492.670114][T29717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.681750][T29717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.693746][T29778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8746'. [ 492.713024][T29717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.752666][T29717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.760313][T29783] netlink: zone id is out of range [ 492.766988][T29783] netlink: zone id is out of range [ 492.770035][T29717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.772126][T29783] netlink: zone id is out of range [ 492.808190][T29783] netlink: zone id is out of range [ 492.813371][T29783] netlink: zone id is out of range [ 492.820263][T29783] netlink: zone id is out of range [ 492.826739][T29783] netlink: zone id is out of range [ 492.831882][T29783] netlink: zone id is out of range [ 492.839145][T29717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.854331][T29783] netlink: zone id is out of range [ 492.860513][T29783] netlink: zone id is out of range [ 492.877737][T29773] macvlan2: entered promiscuous mode [ 492.883083][T29773] macvlan2: entered allmulticast mode [ 492.894076][T29773] bond11: entered promiscuous mode [ 492.901190][T29773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.910480][T29773] bond11: left promiscuous mode [ 492.958384][T29790] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8753'. [ 492.989331][T29788] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8752'. [ 493.023359][T29717] hsr_slave_0: entered promiscuous mode [ 493.033555][T29717] hsr_slave_1: entered promiscuous mode [ 493.040503][T29717] debugfs: 'hsr0' already exists in 'hsr' [ 493.049840][T29717] Cannot create hsr debugfs directory [ 493.167345][T29804] syzkaller1: entered promiscuous mode [ 493.180650][T29804] syzkaller1: entered allmulticast mode [ 493.397530][T29717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 493.513809][T29717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 493.609446][T29829] vlan0 (unregistering): left allmulticast mode [ 493.617074][T29829] vlan0 (unregistering): left promiscuous mode [ 493.669772][T29717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 493.752933][T29717] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 493.794853][ T5863] Bluetooth: hci4: command tx timeout [ 493.819954][T29840] syzkaller1: entered promiscuous mode [ 493.830182][T29840] syzkaller1: entered allmulticast mode [ 493.840941][T29844] macvlan0: entered promiscuous mode [ 493.850959][T29844] macvlan0: entered allmulticast mode [ 493.863304][T29844] bond7: entered promiscuous mode [ 493.878086][T29844] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 494.049601][T29857] FAULT_INJECTION: forcing a failure. [ 494.049601][T29857] name failslab, interval 1, probability 0, space 0, times 0 [ 494.063904][T29857] CPU: 0 UID: 0 PID: 29857 Comm: syz.5.8778 Not tainted syzkaller #0 PREEMPT(full) [ 494.063930][T29857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.063942][T29857] Call Trace: [ 494.063950][T29857] [ 494.063958][T29857] dump_stack_lvl+0x189/0x250 [ 494.063994][T29857] ? __pfx____ratelimit+0x10/0x10 [ 494.064018][T29857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.064039][T29857] ? __pfx__printk+0x10/0x10 [ 494.064071][T29857] ? __pfx___might_resched+0x10/0x10 [ 494.064103][T29857] ? lock_acquire+0x5f/0x360 [ 494.064129][T29857] should_fail_ex+0x414/0x560 [ 494.064154][T29857] should_failslab+0xa8/0x100 [ 494.064180][T29857] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 494.064203][T29857] ? __alloc_skb+0x112/0x2d0 [ 494.064230][T29857] __alloc_skb+0x112/0x2d0 [ 494.064255][T29857] alloc_skb_with_frags+0xca/0x890 [ 494.064275][T29857] ? unwind_next_frame+0xa5/0x2390 [ 494.064293][T29857] ? rcu_is_watching+0x15/0xb0 [ 494.064312][T29857] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 494.064335][T29857] ? is_bpf_text_address+0x26/0x2b0 [ 494.064361][T29857] sock_alloc_send_pskb+0x857/0x990 [ 494.064383][T29857] ? rcu_is_watching+0x15/0xb0 [ 494.064405][T29857] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 494.064423][T29857] ? lock_release+0x4b/0x3e0 [ 494.064446][T29857] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.064470][T29857] ? aa_sk_perm+0x81e/0x950 [ 494.064494][T29857] hci_sock_sendmsg+0x207/0xef0 [ 494.064515][T29857] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 494.064532][T29857] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.064549][T29857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.064568][T29857] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 494.064585][T29857] __sock_sendmsg+0x21c/0x270 [ 494.064608][T29857] sock_write_iter+0x258/0x330 [ 494.064630][T29857] ? __pfx_sock_write_iter+0x10/0x10 [ 494.064656][T29857] ? bpf_lsm_file_permission+0x9/0x20 [ 494.064676][T29857] ? security_file_permission+0x75/0x290 [ 494.064704][T29857] vfs_write+0x5c9/0xb30 [ 494.064728][T29857] ? __pfx_sock_write_iter+0x10/0x10 [ 494.064748][T29857] ? __pfx_vfs_write+0x10/0x10 [ 494.064775][T29857] ? __fget_files+0x2a/0x420 [ 494.064810][T29857] ksys_write+0x145/0x250 [ 494.064843][T29857] ? __pfx_ksys_write+0x10/0x10 [ 494.064863][T29857] ? rcu_is_watching+0x15/0xb0 [ 494.064883][T29857] ? rcu_is_watching+0x15/0xb0 [ 494.064902][T29857] do_syscall_64+0xfa/0x3b0 [ 494.064926][T29857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.064943][T29857] ? clear_bhb_loop+0x60/0xb0 [ 494.064963][T29857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.064987][T29857] RIP: 0033:0x7fb92978ebe9 [ 494.065004][T29857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.065021][T29857] RSP: 002b:00007fb92a562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.065041][T29857] RAX: ffffffffffffffda RBX: 00007fb9299b5fa0 RCX: 00007fb92978ebe9 [ 494.065055][T29857] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 494.065066][T29857] RBP: 00007fb92a562090 R08: 0000000000000000 R09: 0000000000000000 [ 494.065078][T29857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.065089][T29857] R13: 00007fb9299b6038 R14: 00007fb9299b5fa0 R15: 00007ffdf0996d78 [ 494.065112][T29857] [ 494.390130][T29844] bond7: left promiscuous mode [ 494.583457][T29717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 494.642676][T29869] FAULT_INJECTION: forcing a failure. [ 494.642676][T29869] name failslab, interval 1, probability 0, space 0, times 0 [ 494.657345][T29869] CPU: 0 UID: 0 PID: 29869 Comm: syz.5.8783 Not tainted syzkaller #0 PREEMPT(full) [ 494.657372][T29869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.657383][T29869] Call Trace: [ 494.657391][T29869] [ 494.657400][T29869] dump_stack_lvl+0x189/0x250 [ 494.657426][T29869] ? __pfx____ratelimit+0x10/0x10 [ 494.657451][T29869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.657472][T29869] ? __pfx__printk+0x10/0x10 [ 494.657496][T29869] ? fs_reclaim_acquire+0x7d/0x100 [ 494.657521][T29869] ? rcu_is_watching+0x15/0xb0 [ 494.657539][T29869] ? __pfx___might_resched+0x10/0x10 [ 494.657555][T29869] ? lock_acquire+0x5f/0x360 [ 494.657581][T29869] should_fail_ex+0x414/0x560 [ 494.657606][T29869] should_failslab+0xa8/0x100 [ 494.657631][T29869] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 494.657655][T29869] ? __alloc_skb+0x112/0x2d0 [ 494.657677][T29869] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.657699][T29869] __alloc_skb+0x112/0x2d0 [ 494.657725][T29869] __ip_append_data+0x2dae/0x40c0 [ 494.657756][T29869] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.657787][T29869] ? __pfx___ip_append_data+0x10/0x10 [ 494.657809][T29869] ? rcu_is_watching+0x15/0xb0 [ 494.657829][T29869] ip_append_data+0x10e/0x190 [ 494.657851][T29869] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.657871][T29869] udp_sendmsg+0x541/0x2170 [ 494.657896][T29869] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 494.657935][T29869] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.657954][T29869] ? _parse_integer_limit+0x1ae/0x1f0 [ 494.657979][T29869] ? __pfx_udp_sendmsg+0x10/0x10 [ 494.658008][T29869] ? get_pid_task+0x20/0x1f0 [ 494.658027][T29869] ? rcu_is_watching+0x15/0xb0 [ 494.658052][T29869] ? __pfx_aa_sk_perm+0x10/0x10 [ 494.658074][T29869] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 494.658095][T29869] ? rcu_is_watching+0x15/0xb0 [ 494.658111][T29869] ? sock_rps_record_flow+0x19/0x410 [ 494.658134][T29869] ? inet_sendmsg+0x29c/0x370 [ 494.658154][T29869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.658175][T29869] __sock_sendmsg+0x19c/0x270 [ 494.658199][T29869] __sys_sendto+0x3bd/0x520 [ 494.658225][T29869] ? __pfx___sys_sendto+0x10/0x10 [ 494.658248][T29869] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 494.658279][T29869] ? __fget_files+0x3a0/0x420 [ 494.658309][T29869] ? ksys_write+0x22a/0x250 [ 494.658333][T29869] ? __pfx_ksys_write+0x10/0x10 [ 494.658353][T29869] ? rcu_is_watching+0x15/0xb0 [ 494.658373][T29869] __x64_sys_sendto+0xde/0x100 [ 494.658399][T29869] do_syscall_64+0xfa/0x3b0 [ 494.658425][T29869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.658443][T29869] ? clear_bhb_loop+0x60/0xb0 [ 494.658463][T29869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.658481][T29869] RIP: 0033:0x7fb92978ebe9 [ 494.658498][T29869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.658515][T29869] RSP: 002b:00007fb92a562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.658536][T29869] RAX: ffffffffffffffda RBX: 00007fb9299b5fa0 RCX: 00007fb92978ebe9 [ 494.658550][T29869] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003 [ 494.658563][T29869] RBP: 00007fb92a562090 R08: 0000000000000000 R09: 0000000011000a00 [ 494.658576][T29869] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002 [ 494.658588][T29869] R13: 00007fb9299b6038 R14: 00007fb9299b5fa0 R15: 00007ffdf0996d78 [ 494.658611][T29869] [ 495.598689][T29717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.622308][T29717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.666440][T29717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.702896][T29882] delete_channel: no stack [ 495.787527][T29896] netlink: 'syz.5.8788': attribute type 1 has an invalid length. [ 495.822014][T29896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.853197][T29897] netlink: 'syz.7.8790': attribute type 1 has an invalid length. [ 495.864079][T29897] netlink: 'syz.7.8790': attribute type 1 has an invalid length. [ 495.872521][T29897] netlink: 'syz.7.8790': attribute type 2 has an invalid length. [ 495.873459][T29896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.889178][ T5863] Bluetooth: hci4: command tx timeout [ 495.896777][T29896] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 495.909683][T29896] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 495.950892][T29901] veth3: entered promiscuous mode [ 495.984113][T29901] bond2: (slave veth3): Enslaving as an active interface with a down link [ 496.071494][T29908] vlan2: entered allmulticast mode [ 496.092521][T29908] bond2: entered allmulticast mode [ 496.169407][T29917] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 496.180121][T29919] syzkaller1: entered promiscuous mode [ 496.190245][T29919] syzkaller1: entered allmulticast mode [ 496.252930][T29717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.288024][T29717] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.321711][T20157] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.328871][T20157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.338401][T20157] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.345557][T20157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.433865][T29932] bond0: (slave syz_tun): Releasing backup interface [ 496.461531][T29932] syz_tun: left promiscuous mode [ 496.503668][T29932] team0: left allmulticast mode [ 496.513388][T29932] team_slave_0: left allmulticast mode [ 496.522086][T29932] team_slave_1: left allmulticast mode [ 496.530444][T29932] team0: left promiscuous mode [ 496.537262][T29932] team_slave_0: left promiscuous mode [ 496.546253][T29932] team_slave_1: left promiscuous mode [ 496.556855][T29932] bridge0: port 2(team0) entered disabled state [ 496.571187][T29932] bridge_slave_0: left allmulticast mode [ 496.582269][T29932] bridge_slave_0: left promiscuous mode [ 496.591934][T29932] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.616233][T29932] bond0: (slave bridge_slave_1): Releasing backup interface [ 496.631159][T29932] bridge_slave_1: left promiscuous mode [ 496.639968][T29932] bond0: (slave bond_slave_0): Releasing backup interface [ 496.649587][T29932] bond_slave_0: left promiscuous mode [ 496.667762][T29932] bond0: (slave bond_slave_1): Releasing backup interface [ 496.677851][T29932] bond_slave_1: left promiscuous mode [ 496.692941][T29932] team0: Port device team_slave_0 removed [ 496.703439][T29932] team0: Port device team_slave_1 removed [ 496.712416][T29932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.721559][T29932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.737186][T29932] bond0: (slave ÿ): Releasing backup interface [ 496.738082][T29948] __nla_validate_parse: 13 callbacks suppressed [ 496.738098][T29948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8805'. [ 496.760515][T29932] mac80211_hwsim hwsim35 ÿ: left promiscuous mode [ 496.769965][T29932] bond2: (slave gretap1): Releasing active interface [ 496.783425][T29932] bond4: (slave veth9): Releasing active interface [ 496.790116][T29932] bond4: (slave veth9): the permanent HWaddr of slave - 6a:a6:13:a0:e3:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 496.811386][T29932] bond4: (slave veth11): Releasing active interface [ 496.827424][T29932] bond7: (slave geneve2): Releasing active interface [ 496.837382][T29932] batadv2: left allmulticast mode [ 496.842442][T29932] batadv2: left promiscuous mode [ 496.852465][T29932] bridge0: port 3(batadv2) entered disabled state [ 496.861866][T29932] vlan1: left promiscuous mode [ 496.867708][T29932] bridge5: port 1(vlan1) entered disabled state [ 496.878135][T29942] team0: Mode changed to "broadcast" [ 496.883914][T29950] netlink: 'syz.6.8806': attribute type 3 has an invalid length. [ 496.907487][T29950] netlink: 248 bytes leftover after parsing attributes in process `syz.6.8806'. [ 496.937588][T20153] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 496.984551][T20153] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 497.012439][T20153] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 497.040423][T20153] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 497.079008][T29968] syzkaller1: entered promiscuous mode [ 497.090203][T29970] netlink: 'syz.6.8811': attribute type 1 has an invalid length. [ 497.095545][T29968] syzkaller1: entered allmulticast mode [ 497.098533][T29970] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8811'. [ 497.130460][T29717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.218808][T29717] veth0_vlan: entered promiscuous mode [ 497.298876][T29717] veth1_vlan: entered promiscuous mode [ 497.339143][T29717] veth0_macvtap: entered promiscuous mode [ 497.367610][T29717] veth1_macvtap: entered promiscuous mode [ 497.387287][T29987] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.8816'. [ 497.440521][T29717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.478197][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8816'. [ 497.491687][T29717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.500760][T29994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8818'. [ 497.525102][T29987] netem: incorrect gi model size [ 497.541475][T29987] netem: change failed [ 497.617464][T29999] netlink: 232 bytes leftover after parsing attributes in process `syz.7.8819'. [ 497.662371][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.686476][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.736280][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.746551][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.782464][T30011] syzkaller1: entered promiscuous mode [ 497.792039][T30011] syzkaller1: entered allmulticast mode [ 497.838018][T30007] netlink: 'syz.8.8820': attribute type 11 has an invalid length. [ 497.872457][T30007] netdevsim netdevsim8: Direct firmware load for ..€ failed with error -2 [ 497.886331][T30007] netdevsim netdevsim8: Falling back to sysfs fallback for: ..€ [ 497.917336][T20153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.931804][T20153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.954765][ T5863] Bluetooth: hci4: command tx timeout [ 497.958546][T30018] tipc: Enabled bearer , priority 0 [ 497.973613][T20150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.983351][T20150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.983987][T30018] syzkaller0: entered promiscuous mode [ 497.996871][T30018] syzkaller0: entered allmulticast mode [ 498.054065][T30018] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 498.071784][T30018] tipc: Resetting bearer [ 498.081449][T30017] tipc: Resetting bearer [ 498.096892][T30017] tipc: Disabling bearer [ 498.270142][T30035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8832'. [ 498.378975][T30042] syzkaller1: entered promiscuous mode [ 498.392500][T30042] syzkaller1: entered allmulticast mode [ 498.406383][T30045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8835'. [ 498.731118][T30069] tipc: Started in network mode [ 498.745455][T30069] tipc: Node identity f28c4816b805, cluster identity 4711 [ 498.771004][T30069] tipc: Enabled bearer , priority 0 [ 498.791996][T30071] syzkaller0: entered promiscuous mode [ 498.812322][T30071] syzkaller0: entered allmulticast mode [ 498.850582][T30069] net_ratelimit: 15 callbacks suppressed [ 498.850601][T30069] syzkaller0: mtu less than device minimum [ 498.886307][T30073] syzkaller1: entered promiscuous mode [ 498.891821][T30073] syzkaller1: entered allmulticast mode [ 498.906215][T30068] tipc: Resetting bearer [ 498.939572][T30068] tipc: Disabling bearer [ 499.012184][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.026754][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.035578][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.049259][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.057087][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 499.058543][T30084] FAULT_INJECTION: forcing a failure. [ 499.058543][T30084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.090924][T30078] tipc: Started in network mode [ 499.113764][T30078] tipc: Node identity 4243021a8a4, cluster identity 4711 [ 499.123753][T30087] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8853'. [ 499.142757][T30084] CPU: 1 UID: 0 PID: 30084 Comm: syz.6.8851 Not tainted syzkaller #0 PREEMPT(full) [ 499.142781][T30084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.142792][T30084] Call Trace: [ 499.142798][T30084] [ 499.142807][T30084] dump_stack_lvl+0x189/0x250 [ 499.142832][T30084] ? __pfx____ratelimit+0x10/0x10 [ 499.142854][T30084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.142873][T30084] ? __pfx__printk+0x10/0x10 [ 499.142892][T30084] ? __might_fault+0xb0/0x130 [ 499.142916][T30084] ? kasan_save_track+0x3e/0x80 [ 499.142935][T30084] ? __kasan_kmalloc+0x93/0xb0 [ 499.142957][T30084] ? rcu_is_watching+0x15/0xb0 [ 499.142976][T30084] should_fail_ex+0x414/0x560 [ 499.143001][T30084] _copy_from_user+0x2d/0xb0 [ 499.143020][T30084] csum_and_copy_from_iter_full+0x1e1/0x1eb0 [ 499.143051][T30084] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 499.143077][T30084] ? trace_kmalloc+0x1f/0xd0 [ 499.143099][T30084] ip_generic_getfrag+0x12f/0x2b0 [ 499.143121][T30084] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 499.143142][T30084] ? skb_put+0x11b/0x210 [ 499.143159][T30084] __ip_append_data+0x3260/0x40c0 [ 499.143190][T30084] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 499.143219][T30084] ? __pfx___ip_append_data+0x10/0x10 [ 499.143240][T30084] ? rcu_is_watching+0x15/0xb0 [ 499.143260][T30084] ip_append_data+0x10e/0x190 [ 499.143285][T30084] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 499.143306][T30084] udp_sendmsg+0x541/0x2170 [ 499.143329][T30084] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 499.143357][T30084] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 499.143376][T30084] ? _parse_integer_limit+0x1ae/0x1f0 [ 499.143400][T30084] ? __pfx_udp_sendmsg+0x10/0x10 [ 499.143428][T30084] ? get_pid_task+0x20/0x1f0 [ 499.143447][T30084] ? rcu_is_watching+0x15/0xb0 [ 499.143471][T30084] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.143500][T30084] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 499.143520][T30084] ? rcu_is_watching+0x15/0xb0 [ 499.143536][T30084] ? sock_rps_record_flow+0x19/0x410 [ 499.143558][T30084] ? inet_sendmsg+0x29c/0x370 [ 499.143577][T30084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.143598][T30084] __sock_sendmsg+0x19c/0x270 [ 499.143627][T30084] __sys_sendto+0x3bd/0x520 [ 499.143659][T30084] ? __pfx___sys_sendto+0x10/0x10 [ 499.143679][T30084] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 499.143704][T30084] ? __fget_files+0x3a0/0x420 [ 499.143727][T30084] ? ksys_write+0x22a/0x250 [ 499.143746][T30084] ? __pfx_ksys_write+0x10/0x10 [ 499.143761][T30084] ? rcu_is_watching+0x15/0xb0 [ 499.143776][T30084] __x64_sys_sendto+0xde/0x100 [ 499.143797][T30084] do_syscall_64+0xfa/0x3b0 [ 499.143817][T30084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.143830][T30084] ? clear_bhb_loop+0x60/0xb0 [ 499.143845][T30084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.143858][T30084] RIP: 0033:0x7fd41af8ebe9 [ 499.143872][T30084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.143885][T30084] RSP: 002b:00007fd41beb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.143901][T30084] RAX: ffffffffffffffda RBX: 00007fd41b1b5fa0 RCX: 00007fd41af8ebe9 [ 499.143912][T30084] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003 [ 499.143922][T30084] RBP: 00007fd41beb5090 R08: 0000000000000000 R09: 0000000011000a00 [ 499.143931][T30084] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002 [ 499.143940][T30084] R13: 00007fd41b1b6038 R14: 00007fd41b1b5fa0 R15: 00007ffe1880f828 [ 499.143958][T30084] [ 499.491598][T30078] tipc: Enabled bearer , priority 0 [ 499.517616][T30089] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 499.520431][T30089] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 499.544878][T30089] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 499.571512][T30078] syzkaller0: entered promiscuous mode [ 499.581592][T30078] syzkaller0: entered allmulticast mode [ 499.613335][T30078] tipc: Resetting bearer [ 499.639532][T20150] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.664324][T30095] IPv6: sit1: Disabled Multicast RS [ 499.672012][T30095] sit1: entered allmulticast mode [ 499.689646][T30077] tipc: Resetting bearer [ 499.702915][T30077] tipc: Disabling bearer [ 499.734752][T30080] lo speed is unknown, defaulting to 1000 [ 499.741649][T20150] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.849200][T20150] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.913015][T20150] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.018676][T30114] unsupported nlmsg_type 40 [ 500.035223][ T51] Bluetooth: hci4: command tx timeout [ 500.470712][T20150] bond0 (unregistering): Released all slaves [ 500.491299][T20150] bond1 (unregistering): Released all slaves [ 500.509117][T20150] bond2 (unregistering): Released all slaves [ 500.530577][T20150] bond3 (unregistering): Released all slaves [ 500.548993][T20150] bond4 (unregistering): Released all slaves [ 500.560849][T20150] bond5 (unregistering): Released all slaves [ 500.570523][T20150] bond6 (unregistering): Released all slaves [ 500.581424][T20150] bond7 (unregistering): Released all slaves [ 500.593449][T20150] bond8 (unregistering): Released all slaves [ 500.605298][T20150] bond9 (unregistering): Released all slaves [ 500.616360][T20150] bond10 (unregistering): Released all slaves [ 500.629485][T20150] bond11 (unregistering): Released all slaves [ 500.643381][T30119] syzkaller1: entered promiscuous mode [ 500.652151][T30119] syzkaller1: entered allmulticast mode [ 500.682683][T30080] chnl_net:caif_netlink_parms(): no params data found [ 500.755249][T20150] : left promiscuous mode [ 500.835354][T20150] tipc: Disabling bearer [ 500.858161][T20150] tipc: Left network mode [ 500.926597][T30080] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.933949][T30080] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.941734][T30080] bridge_slave_0: entered allmulticast mode [ 500.949549][T30080] bridge_slave_0: entered promiscuous mode [ 500.984103][T30080] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.995552][T30080] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.002954][T30080] bridge_slave_1: entered allmulticast mode [ 501.012386][T30080] bridge_slave_1: entered promiscuous mode [ 501.111123][T30165] netlink: 'syz.6.8872': attribute type 16 has an invalid length. [ 501.137861][T30165] netlink: 'syz.6.8872': attribute type 17 has an invalid length. [ 501.155908][ T51] Bluetooth: hci5: command tx timeout [ 501.207221][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.216989][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.228162][T30158] ------------[ cut here ]------------ [ 501.233692][T30158] WARNING: CPU: 1 PID: 30158 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 501.243680][T30158] Modules linked in: [ 501.247633][T30158] CPU: 1 UID: 0 PID: 30158 Comm: syz.6.8872 Not tainted syzkaller #0 PREEMPT(full) [ 501.257071][T30158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.267317][T30158] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 501.273593][T30158] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01 [ 501.293265][T30158] RSP: 0018:ffffc90002f36540 EFLAGS: 00010246 [ 501.299392][T30158] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: 0000000000080000 [ 501.307427][T30158] RDX: ffffc9000cd9c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 501.315447][T30158] RBP: dffffc0000000000 R08: ffff888036f1bc00 R09: 0000000000000003 [ 501.323433][T30158] R10: 0000000000000006 R11: 0000000000000002 R12: ffff888055bf08de [ 501.331547][T30158] R13: ffff888028cf6090 R14: 0000000000000000 R15: 1ffff1100519ec12 [ 501.339657][T30158] FS: 00007fd41be946c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 501.348636][T30158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.355266][T30158] CR2: 00007fb92a541d58 CR3: 000000005dda8000 CR4: 00000000003526f0 [ 501.363257][T30158] Call Trace: [ 501.366587][T30158] [ 501.369537][T30158] fib6_ifdown+0x2fe/0x4c0 [ 501.373973][T30158] ? __pfx_fib6_ifdown+0x10/0x10 [ 501.379012][T30158] fib6_clean_node+0x24d/0x590 [ 501.383805][T30158] ? __pfx_fib6_clean_node+0x10/0x10 [ 501.389233][T30158] ? stack_depot_save_flags+0x40/0x860 [ 501.394749][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.399532][T30158] fib6_walk_continue+0x678/0x910 [ 501.404712][T30158] fib6_walk+0x149/0x290 [ 501.409001][T30158] __fib6_clean_all+0x234/0x380 [ 501.413877][T30158] ? __fib6_clean_all+0x9b/0x380 [ 501.418890][T30158] ? __pfx_fib6_ifdown+0x10/0x10 [ 501.423855][T30158] ? __pfx___fib6_clean_all+0x10/0x10 [ 501.429308][T30158] ? __pfx_fib6_clean_node+0x10/0x10 [ 501.434647][T30158] ? __pfx_fib6_ifdown+0x10/0x10 [ 501.439604][T30158] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 501.445285][T30158] rt6_sync_down_dev+0xf9/0x150 [ 501.450164][T30158] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 501.455702][T30158] ? net_generic+0x1e/0x240 [ 501.460231][T30158] ? addrconf_link_ready+0x119/0x170 [ 501.465555][T30158] addrconf_notify+0x929/0x1010 [ 501.470422][T30158] notifier_call_chain+0x1b3/0x3e0 [ 501.475590][T30158] netif_state_change+0x284/0x3a0 [ 501.480641][T30158] ? __pfx_netif_state_change+0x10/0x10 [ 501.486269][T30158] ? __dev_change_flags+0x4cc/0x6d0 [ 501.491509][T30158] set_operstate+0x2cc/0x3a0 [ 501.496154][T30158] ? __pfx_netif_state_change+0x10/0x10 [ 501.501757][T30158] ? __pfx_set_operstate+0x10/0x10 [ 501.506918][T30158] ? netif_change_flags+0xe8/0x1a0 [ 501.512049][T30158] do_setlink+0x12bc/0x41c0 [ 501.516612][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.521395][T30158] ? __schedule+0x17ae/0x4cc0 [ 501.526116][T30158] ? __pfx_do_setlink+0x10/0x10 [ 501.530975][T30158] ? do_raw_spin_lock+0x121/0x290 [ 501.536061][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.540842][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.545651][T30158] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 501.551572][T30158] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 501.557965][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.562746][T30158] ? __mutex_lock+0xd3b/0x1350 [ 501.567581][T30158] ? __mutex_lock+0x5bb/0x1350 [ 501.572361][T30158] ? rtnl_newlink+0x8db/0x1c70 [ 501.577187][T30158] ? __pfx___mutex_lock+0x10/0x10 [ 501.582249][T30158] ? ns_capable+0x8a/0xf0 [ 501.586642][T30158] ? rtnl_link_get_net_capable+0x16a/0x350 [ 501.592470][T30158] rtnl_newlink+0x149f/0x1c70 [ 501.597284][T30158] ? netlink_sendmsg+0x805/0xb30 [ 501.602241][T30158] ? __pfx_rtnl_newlink+0x10/0x10 [ 501.607323][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.612098][T30158] ? nlmon_xmit+0xb0/0x100 [ 501.616554][T30158] ? kmem_cache_free+0x18f/0x400 [ 501.621513][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.626313][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 501.631526][T30158] ? __local_bh_enable_ip+0x12d/0x1c0 [ 501.636943][T30158] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 501.642682][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 501.647836][T30158] ? lock_release+0x4b/0x3e0 [ 501.652510][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 501.657669][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 501.662803][T30158] ? __dev_queue_xmit+0x1d79/0x3b50 [ 501.668067][T30158] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 501.673210][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.678038][T30158] ? lock_release+0x4b/0x3e0 [ 501.682648][T30158] ? bpf_lsm_capable+0x9/0x20 [ 501.687475][T30158] ? security_capable+0x7e/0x2e0 [ 501.692432][T30158] ? __pfx_rtnl_newlink+0x10/0x10 [ 501.697507][T30158] rtnetlink_rcv_msg+0x7cc/0xb70 [ 501.702472][T30158] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 501.707628][T30158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 501.713110][T30158] ? ref_tracker_free+0x63a/0x7d0 [ 501.718188][T30158] ? __asan_memcpy+0x40/0x70 [ 501.722798][T30158] ? __pfx_ref_tracker_free+0x10/0x10 [ 501.728220][T30158] netlink_rcv_skb+0x208/0x470 [ 501.732987][T30158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 501.738534][T30158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.743882][T30158] netlink_unicast+0x82c/0x9e0 [ 501.748691][T30158] ? __pfx_netlink_unicast+0x10/0x10 [ 501.754025][T30158] ? netlink_sendmsg+0x642/0xb30 [ 501.759356][T30158] ? skb_put+0x11b/0x210 [ 501.763605][T30158] netlink_sendmsg+0x805/0xb30 [ 501.768429][T30158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.773750][T30158] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.778749][T30158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.784060][T30158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.789392][T30158] __sock_sendmsg+0x21c/0x270 [ 501.794094][T30158] ____sys_sendmsg+0x505/0x830 [ 501.798921][T30158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.804239][T30158] ? import_iovec+0x74/0xa0 [ 501.808814][T30158] ___sys_sendmsg+0x21f/0x2a0 [ 501.813537][T30158] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.818803][T30158] ? futex_wake+0x4b2/0x560 [ 501.823344][T30158] ? __fget_files+0x2a/0x420 [ 501.828009][T30158] ? __fget_files+0x3a0/0x420 [ 501.832725][T30158] __x64_sys_sendmsg+0x19b/0x260 [ 501.837736][T30158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.843325][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.848167][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.852965][T30158] do_syscall_64+0xfa/0x3b0 [ 501.857550][T30158] ? rcu_is_watching+0x15/0xb0 [ 501.862337][T30158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.868584][T30158] ? clear_bhb_loop+0x60/0xb0 [ 501.873286][T30158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.879255][T30158] RIP: 0033:0x7fd41af8ebe9 [ 501.883706][T30158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.903526][T30158] RSP: 002b:00007fd41be94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.911984][T30158] RAX: ffffffffffffffda RBX: 00007fd41b1b6090 RCX: 00007fd41af8ebe9 [ 501.920035][T30158] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 501.928067][T30158] RBP: 00007fd41b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 501.936110][T30158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.944186][T30158] R13: 00007fd41b1b6128 R14: 00007fd41b1b6090 R15: 00007ffe1880f828 [ 501.952224][T30158] [ 501.955297][T30158] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 501.962582][T30158] CPU: 1 UID: 0 PID: 30158 Comm: syz.6.8872 Not tainted syzkaller #0 PREEMPT(full) [ 501.971951][T30158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.982018][T30158] Call Trace: [ 501.985307][T30158] [ 501.988250][T30158] dump_stack_lvl+0x99/0x250 [ 501.992857][T30158] ? __asan_memcpy+0x40/0x70 [ 501.997649][T30158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.003143][T30158] ? __pfx__printk+0x10/0x10 [ 502.007789][T30158] vpanic+0x281/0x750 [ 502.011786][T30158] ? __pfx__printk+0x10/0x10 [ 502.016377][T30158] ? __pfx_vpanic+0x10/0x10 [ 502.020882][T30158] ? is_bpf_text_address+0x26/0x2b0 [ 502.026089][T30158] panic+0xb9/0xc0 [ 502.029860][T30158] ? __pfx_panic+0x10/0x10 [ 502.034335][T30158] __warn+0x31b/0x4b0 [ 502.038336][T30158] ? rt6_multipath_rebalance+0x455/0x8b0 [ 502.043982][T30158] ? rt6_multipath_rebalance+0x455/0x8b0 [ 502.049638][T30158] report_bug+0x2be/0x4f0 [ 502.053975][T30158] ? rt6_multipath_rebalance+0x455/0x8b0 [ 502.059624][T30158] ? rt6_multipath_rebalance+0x455/0x8b0 [ 502.065368][T30158] ? rt6_multipath_rebalance+0x457/0x8b0 [ 502.071209][T30158] handle_bug+0x84/0x160 [ 502.075474][T30158] exc_invalid_op+0x1a/0x50 [ 502.080017][T30158] asm_exc_invalid_op+0x1a/0x20 [ 502.084887][T30158] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 502.091135][T30158] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01 [ 502.110921][T30158] RSP: 0018:ffffc90002f36540 EFLAGS: 00010246 [ 502.117094][T30158] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: 0000000000080000 [ 502.125066][T30158] RDX: ffffc9000cd9c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 502.133042][T30158] RBP: dffffc0000000000 R08: ffff888036f1bc00 R09: 0000000000000003 [ 502.141017][T30158] R10: 0000000000000006 R11: 0000000000000002 R12: ffff888055bf08de [ 502.149094][T30158] R13: ffff888028cf6090 R14: 0000000000000000 R15: 1ffff1100519ec12 [ 502.157074][T30158] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 502.162814][T30158] fib6_ifdown+0x2fe/0x4c0 [ 502.167242][T30158] ? __pfx_fib6_ifdown+0x10/0x10 [ 502.172193][T30158] fib6_clean_node+0x24d/0x590 [ 502.176959][T30158] ? __pfx_fib6_clean_node+0x10/0x10 [ 502.182257][T30158] ? stack_depot_save_flags+0x40/0x860 [ 502.187831][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.192624][T30158] fib6_walk_continue+0x678/0x910 [ 502.197676][T30158] fib6_walk+0x149/0x290 [ 502.202013][T30158] __fib6_clean_all+0x234/0x380 [ 502.206863][T30158] ? __fib6_clean_all+0x9b/0x380 [ 502.211801][T30158] ? __pfx_fib6_ifdown+0x10/0x10 [ 502.216856][T30158] ? __pfx___fib6_clean_all+0x10/0x10 [ 502.222250][T30158] ? __pfx_fib6_clean_node+0x10/0x10 [ 502.227548][T30158] ? __pfx_fib6_ifdown+0x10/0x10 [ 502.232488][T30158] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 502.238155][T30158] rt6_sync_down_dev+0xf9/0x150 [ 502.243014][T30158] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 502.248637][T30158] ? net_generic+0x1e/0x240 [ 502.253135][T30158] ? addrconf_link_ready+0x119/0x170 [ 502.258415][T30158] addrconf_notify+0x929/0x1010 [ 502.263266][T30158] notifier_call_chain+0x1b3/0x3e0 [ 502.268380][T30158] netif_state_change+0x284/0x3a0 [ 502.273401][T30158] ? __pfx_netif_state_change+0x10/0x10 [ 502.278953][T30158] ? __dev_change_flags+0x4cc/0x6d0 [ 502.284158][T30158] set_operstate+0x2cc/0x3a0 [ 502.288755][T30158] ? __pfx_netif_state_change+0x10/0x10 [ 502.294322][T30158] ? __pfx_set_operstate+0x10/0x10 [ 502.299528][T30158] ? netif_change_flags+0xe8/0x1a0 [ 502.304660][T30158] do_setlink+0x12bc/0x41c0 [ 502.309193][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.313958][T30158] ? __schedule+0x17ae/0x4cc0 [ 502.318632][T30158] ? __pfx_do_setlink+0x10/0x10 [ 502.323477][T30158] ? do_raw_spin_lock+0x121/0x290 [ 502.328497][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.333250][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.338002][T30158] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.343886][T30158] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 502.350225][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.354997][T30158] ? __mutex_lock+0xd3b/0x1350 [ 502.359786][T30158] ? __mutex_lock+0x5bb/0x1350 [ 502.364570][T30158] ? rtnl_newlink+0x8db/0x1c70 [ 502.369377][T30158] ? __pfx___mutex_lock+0x10/0x10 [ 502.374412][T30158] ? ns_capable+0x8a/0xf0 [ 502.378743][T30158] ? rtnl_link_get_net_capable+0x16a/0x350 [ 502.384635][T30158] rtnl_newlink+0x149f/0x1c70 [ 502.389329][T30158] ? netlink_sendmsg+0x805/0xb30 [ 502.394275][T30158] ? __pfx_rtnl_newlink+0x10/0x10 [ 502.399307][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.404066][T30158] ? nlmon_xmit+0xb0/0x100 [ 502.408554][T30158] ? kmem_cache_free+0x18f/0x400 [ 502.413496][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.418285][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 502.423484][T30158] ? __local_bh_enable_ip+0x12d/0x1c0 [ 502.428868][T30158] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 502.434584][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 502.439701][T30158] ? lock_release+0x4b/0x3e0 [ 502.444300][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 502.449412][T30158] ? __dev_queue_xmit+0x27b/0x3b50 [ 502.454525][T30158] ? __dev_queue_xmit+0x1d79/0x3b50 [ 502.459731][T30158] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 502.464850][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.469612][T30158] ? lock_release+0x4b/0x3e0 [ 502.474287][T30158] ? bpf_lsm_capable+0x9/0x20 [ 502.478963][T30158] ? security_capable+0x7e/0x2e0 [ 502.483907][T30158] ? __pfx_rtnl_newlink+0x10/0x10 [ 502.488929][T30158] rtnetlink_rcv_msg+0x7cc/0xb70 [ 502.493903][T30158] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 502.499018][T30158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.504476][T30158] ? ref_tracker_free+0x63a/0x7d0 [ 502.509508][T30158] ? __asan_memcpy+0x40/0x70 [ 502.514097][T30158] ? __pfx_ref_tracker_free+0x10/0x10 [ 502.519653][T30158] netlink_rcv_skb+0x208/0x470 [ 502.524441][T30158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.530029][T30158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.535338][T30158] netlink_unicast+0x82c/0x9e0 [ 502.540105][T30158] ? __pfx_netlink_unicast+0x10/0x10 [ 502.545384][T30158] ? netlink_sendmsg+0x642/0xb30 [ 502.550325][T30158] ? skb_put+0x11b/0x210 [ 502.554573][T30158] netlink_sendmsg+0x805/0xb30 [ 502.559352][T30158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.564636][T30158] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.569573][T30158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.574940][T30158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.580307][T30158] __sock_sendmsg+0x21c/0x270 [ 502.584997][T30158] ____sys_sendmsg+0x505/0x830 [ 502.589774][T30158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.595064][T30158] ? import_iovec+0x74/0xa0 [ 502.599665][T30158] ___sys_sendmsg+0x21f/0x2a0 [ 502.604344][T30158] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.609538][T30158] ? futex_wake+0x4b2/0x560 [ 502.614053][T30158] ? __fget_files+0x2a/0x420 [ 502.618638][T30158] ? __fget_files+0x3a0/0x420 [ 502.623311][T30158] __x64_sys_sendmsg+0x19b/0x260 [ 502.628241][T30158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.633699][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.638454][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.643209][T30158] do_syscall_64+0xfa/0x3b0 [ 502.647742][T30158] ? rcu_is_watching+0x15/0xb0 [ 502.652500][T30158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.658556][T30158] ? clear_bhb_loop+0x60/0xb0 [ 502.663229][T30158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.669115][T30158] RIP: 0033:0x7fd41af8ebe9 [ 502.673528][T30158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.693133][T30158] RSP: 002b:00007fd41be94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.701552][T30158] RAX: ffffffffffffffda RBX: 00007fd41b1b6090 RCX: 00007fd41af8ebe9 [ 502.709525][T30158] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 502.717496][T30158] RBP: 00007fd41b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 502.725465][T30158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.733428][T30158] R13: 00007fd41b1b6128 R14: 00007fd41b1b6090 R15: 00007ffe1880f828 [ 502.741496][T30158] [ 502.744818][T30158] Kernel Offset: disabled [ 502.749143][T30158] Rebooting in 86400 seconds..