last executing test programs: 8.404524508s ago: executing program 0 (id=936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES8=r1], 0x54}}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r5 = socket(0xa, 0x3, 0x3a) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'macvtap0\x00', {0x2, 0x4e22, @broadcast}}) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty, 0x40004}, 0x2, {[0x0, 0x7, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x3, 0x20]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0xe22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0xbab, 0x89f, 0x8, 0x1]}}, 0x5c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00000000000c001500"/196], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 8.13284624s ago: executing program 0 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000130001002dbd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="ecff0041096e000008000a00", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6.976793577s ago: executing program 0 (id=949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000017000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[], 0x20}], 0x1}, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f0000000080)=0x201) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r12, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000004200000020001280080001006774700014000280080002003d5e9b4816d2c94f39fc7fe7063d2405618d2c2608a1a0171bcd20bed554bc92eaf72fe2d8d275236debef747eae0547b15580c88a65542f34cacb126a0649919b051fdaa64994cfc1a7583af58ac9d7847be40b1e0d3e0f666a0cfce2c3", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) 6.838269885s ago: executing program 0 (id=951): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20002001}, 0x40) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11000000000000002900000043"], 0x18}, 0x40c0) syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20002001}, 0x40) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11000000000000002900000043"], 0x18}, 0x40c0) (async) syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0) (async) 6.684068513s ago: executing program 0 (id=953): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xf0}}, 0x0) r0 = socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f000027e000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/90, 0x2329000, 0x1000}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000200000000000000000203000000000000000000000d00"/54], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x3000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000017843c7c1c62b0ef1bc16eedb279255c5850ffd3afafa96afbb8461e048c6ede96f56c552fd328e95148dabcf02bcacdb0d33282a5821c3af468fcd392bf37c0a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x80010, r7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r7, 0xe, 0x1, 0xd, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) accept4$ax25(r6, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3.248323442s ago: executing program 2 (id=976): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.045178801s ago: executing program 2 (id=979): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5, 0x4, [0x6, 0x1, 0x2, 0x5]}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="050000000808"], 0x80}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004d18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}}, 0x20048000) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000ff6000"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00 '], 0x48}}, 0x0) socketpair(0x25, 0x3, 0x8001, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.141572171s ago: executing program 1 (id=991): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018"], 0x54}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r3, 0x7, 0xffffffffffffffff, 0x6}) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000900}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="700300000bd11b8ac21f5969625df1ecffce29b4e66367bfe8ac429faf719439c421892f1c155faa0c981deedadc8f838587bfcaf4e27747ff3f677cfd5613762c986ac35a86e05d2bd4d4522041176f15ead74acec723df8260d4d242a53eecc79083b7ae4f055689646e8003d72fcc7b04543d29be3f4b9f6f215150132e22c2e680d0dd1743f6e1954dad249db64f6bb4ab43d1ad4052f000c030d1f3ff9afa647139bdef8a0724ee462809e914f2f62addbe8ca72075b69ad834d61d37d4952e641fcc9fba", @ANYRES16=0x0, @ANYBLOB="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"], 0x370}}, 0x40080) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa408100000086dd60f53a0400383a00fe8000000000000000000000000000bbff0200000000000000000000000000010100907802000000670f0d2900073300fc010000000000000000000000000000ff0100000000000000000000000000012c0002a300000000c7b23707917f679eaffdf4f18834faacdca15b8b66674ceef018ed26acf53eb553820dd2047c40b9f01ca8f67d43243ebb8105"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018"], 0x54}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r3, 0x7, 0xffffffffffffffff, 0x6}) (async) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000900}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="700300000bd11b8ac21f5969625df1ecffce29b4e66367bfe8ac429faf719439c421892f1c155faa0c981deedadc8f838587bfcaf4e27747ff3f677cfd5613762c986ac35a86e05d2bd4d4522041176f15ead74acec723df8260d4d242a53eecc79083b7ae4f055689646e8003d72fcc7b04543d29be3f4b9f6f215150132e22c2e680d0dd1743f6e1954dad249db64f6bb4ab43d1ad4052f000c030d1f3ff9afa647139bdef8a0724ee462809e914f2f62addbe8ca72075b69ad834d61d37d4952e641fcc9fba", @ANYRES16=0x0, @ANYBLOB="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"], 0x370}}, 0x40080) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa408100000086dd60f53a0400383a00fe8000000000000000000000000000bbff0200000000000000000000000000010100907802000000670f0d2900073300fc010000000000000000000000000000ff0100000000000000000000000000012c0002a300000000c7b23707917f679eaffdf4f18834faacdca15b8b66674ceef018ed26acf53eb553820dd2047c40b9f01ca8f67d43243ebb8105"], 0x0) (async) 2.109382169s ago: executing program 2 (id=992): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0x134, 0x21, 0x200, 0x70bd2b, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e24, 0x101, 0xa, 0x0, 0x60, 0x2, r1, 0xee00}, 0x6e6bbb, 0x1}, [@sa={0xe4, 0x6, {{@in=@local, @in=@private=0xa010100, 0x4e23, 0xe4, 0x4e23, 0x7fff, 0x2, 0x80, 0x80, 0x1, 0x0, r3}, {@in=@empty, 0x4d2, 0x3c}, @in=@multicast2, {0x0, 0x0, 0x4, 0x8b3d, 0x8, 0x7, 0x1ff, 0x6}, {0x8001, 0x0, 0x9, 0x100000000}, {0x9, 0x401, 0x9}, 0x70bd26, 0x0, 0x2, 0x2, 0x8, 0x40}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4040840) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) (async) r6 = getpid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$nl_audit(0x10, 0x3, 0x9) close(r13) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}, @rights={{0x30, 0x1, 0x1, [r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff, r13, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4) (async, rerun: 32) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000e80)=0x0) (rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0), 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r8, @ANYRES16=r6, @ANYRESHEX, @ANYBLOB="5b48d44f8c6c10338e1b7d2456aede0c363384128cf7b1ecf97297e42ed9b86f8ce6aa76a026dcabc8f7de8162a256c7c92a1ce403c456c867b1fc6a2a1ba1b4001e7878fa227b34f77a4081fd256d050272564350d62fda5ae8427f2efb7a9fb76e07d9f8993f8a5e2b3108b9eabf9b4bac88c26b7942a6149c884e5a4cb86064f54e8ea6c3dbf8e15421f961ec4aff12ab5d8a3bd3fc53d269af9694b2e001a38aafccf569b5a637d7a20b0002095e866628629f483978740c0ee2ab8f3896bcf02ddecd744810a9983d27d54a38f49c000ebf1474660340d74c26ed02ab6c73bfef5a829c287e", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES32=r4, @ANYRESDEC=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16=r6, @ANYRESDEC, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r9, @ANYRESOCT=r3, @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x10004810}, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast2, 0x4e20, 0x1ff, 0x4e20, 0x800, 0xa, 0x90, 0x0, 0x2f, 0x0, r3}, {0xffffffffffffffff, 0x9, 0xc5d0, 0xa, 0x9, 0x4, 0x7, 0xd}, {0x8, 0x5, 0x0, 0x8001}, 0x3, 0x6e6bb7, 0x2, 0x1, 0x2}, {{@in=@broadcast, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x3, 0x3, 0x8, 0xffffffff, 0x0, 0x200}}, 0xe8) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xe64, 0x3f9c, 0x0, 0x10001}, 0x0, 0x0) 1.751484592s ago: executing program 4 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x7, 0x8001, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x7881, 0xfffffffa, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @private}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x6f, 0x9d12, 0x44, @remote, @loopback, 0x20, 0x8709, 0x60}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r11, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000800)='bridge0\x00', 0x10) connect$netrom(0xffffffffffffffff, &(0x7f0000000840)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null]}, 0x48) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r12, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x100, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000a40)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, @in={0x2, 0x4e21, @multicast2}], 0x6c) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r15, 0x107, 0x5, &(0x7f0000000b00)=@req={0x800, 0x10, 0x7ff, 0x4}, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), r14) sendmsg$FOU_CMD_GET(r16, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r17, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x44) socket$tipc(0x1e, 0x5, 0x0) write$cgroup_type(r14, &(0x7f0000000cc0), 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@cgroup=r14, 0xc, 0x1, 0x1c0, &(0x7f0000000d00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)={@cgroup=r14, r14, 0x38, 0x20, r14, @void, @void, @void, @value, r18}, 0x20) 1.704922364s ago: executing program 2 (id=997): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x400}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="27e5b3df1f8d67081a286a859ad309d185bc9a665d4996d4f83e5e4c53f10f7d8942a72d1d297fee9fec928af8a5c01937b62b72c809d52a22dafa6817986c26e66387b7e3e66452a59e0004b744521564c172dae117eb9313bb2c842eb03c16885ef7b8e68c695d9c464a1e376ee64b2296939948da4fd84013441c5697603228e43e8c53085987d52440318ed37c817894cd1cea00a35535cd34e65ecfc7385390f5ace5f86aaa8971625938de1df7ccc0775ccc2aaf9eb7764f13615a4985406307527383e3e5f2cbd794c9ab17a5a8ba6c1c", @ANYRESDEC, @ANYRESOCT=r5, @ANYRES64=r3, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r9 = accept$alg(r0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004100)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf170a0cd27c99482f8378cae752292bd667bda71457062f3643862b46a3fdbd08fdf88d29190d0d3b2169152152d200e10e5ad49d2128ee09fde9724fe910be868caf447520d9a4966303722e0c2d6b263aa9e1f0a2d0e49cfec999b07c3edcf0ef9ff9b97610a1e4412d1ceb10711e4319a9654f3706a3cde5736edf4f3a9df2220e0c360641e47005e95c79d8fb3ca617422afeb3db296bb43b877578df43055af0ce81ff56ef655dcd1f91234faa0095e640dae030805d40c0322b57e9ea91", 0xd0}], 0x1, &(0x7f0000000f80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) connect$netrom(r11, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r10, 0x1ad72f7) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000080)) 1.685569685s ago: executing program 1 (id=998): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000004c0)="8452467dc469445148741ff62a40033a20a28aeb05a77adf4fdcc1d09dde16b457fe8dee8fff0b1b114256ce82ef0a94c99061e6a3ac1785af0ae230f066b36e21017123ccc85ba7c4ab5f937e6119a20239da609ae098f85ee2e9d1", 0x5c) r1 = socket(0x2, 0x80805, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x6f, &(0x7f0000000240)="04652624faa98cc5a5cd65c6901562d0b2598230adb6331461c907d078ca6662bd8c719eca0140ddab83e6f49d505ef1edf785eeaa90551839699bb0182c609f4ae3fe405627e4687c818df03c58e33ad28967cf1490e57e05e8b6a31e1b788686f206599ada8d91a31376f1f0505c", 0xe7, 0x0, &(0x7f00000002c0)="112a46c0b4d5f9feeb38af56432124d3d90f3e0be907292d7e1f07281961d4bbffa69fa9fd104504d76c65837683439a6702a35e5be8b33a6b087799f69e0ae1b5a695c030f9cd78d88078a8de814aeb59c67f82c39a3695bd873114d021a5591030140526cddff6881d29fe2b366ad29fd6d73747d880ebf72d61d692355db30dff321e2270aa2b36f384879e8b36e5c3cf4f376f9c4b2785fe56c59d888d701aee08ba861fe07911e71a5b00febccf4c293885d6aedc27e91fc9d938d112582b37e443c91692795c1502599e61dcba3d932c89afa6d2385f3f626ba84cad11b41eb1d69c899a"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e1f, 0x8}}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000140)={@rand_addr=0x64010100, @private=0xa010100}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\r'], 0x10da) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000002000006"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x28) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010300}, 0x10, 0x0}}], 0x2, 0x0) 1.603608291s ago: executing program 4 (id=999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) getsockopt(r4, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x5e, 0x2000477d, &(0x7f0000e68000)={0x2, 0x4e26, @empty}, 0x10) (async, rerun: 32) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4) (async) unshare(0x62040200) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, 0x0, 0x0) (async) bind$inet(r10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) (async) setsockopt$sock_int(r10, 0x1, 0x8, 0x0, 0x0) (async, rerun: 64) sendto$inet(r10, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) (rerun: 64) socket$kcm(0x10, 0x2, 0x4) (async) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e36, 0x0, 'fo\x00', 0x38, 0x3, 0x8}, 0x2c) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.545117775s ago: executing program 3 (id=1000): socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) epoll_create1(0x80000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb62e1c3e4ffff01000000010000005600000025000000190001000000000007fd17e5ffff0800040000000000020000", 0x39}], 0x1) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @phonet={0x23, 0x2, 0x80, 0xf7}, @isdn={0x22, 0xfc, 0x6, 0x0, 0x2}, 0x1, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000000)='team0\x00', 0x2, 0xf, 0x8}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.322434755s ago: executing program 3 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="020300031900000000070000fbdbcf2502000100000004d608004f0d00000000030006000000000002004e20ac1414aa0000000000000000030005003200000002004e207f000001000000000000000001000900000000000400030018000000fc0100000000000007000000000000000000000000000c000800120000000200000000000100000006003c0007ff00000000000000000000e0000001000000000000000000000000e0000001000000000000000000000000020010"], 0xc8}, 0x1, 0x7}, 0x40) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2000000, 0x0, 0x1, 0x5, {0x9, 0x0, 0x401, 0xfffb, 0x8000}, {0x9, 0x0, 0x4, 0x2, 0x66f, 0x5}, 0x6, 0x4, 0x3c2}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x7c}}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) 1.133665404s ago: executing program 1 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="19", 0x3, 0x0, 0x81}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@private=0xa010102, @multicast1}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f00000001c0)={'team0\x00', @ifru_names='gre0\x00'}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1.029012752s ago: executing program 4 (id=1003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x480, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 928.054451ms ago: executing program 3 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0xfffffffe}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfff}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x45}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000ec000600000088480000"], 0x28}}, 0x8000) 882.352871ms ago: executing program 4 (id=1005): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x100000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x100000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x87f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x18}, 0x24000804) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x7, @loopback, 0x6830879b}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1400}, @in6={0xa, 0x4e23, 0xc796, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0xff000000, @remote, 0x800}], 0x80) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x7, @loopback, 0x6830879b}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1400}, @in6={0xa, 0x4e23, 0xc796, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0xff000000, @remote, 0x800}], 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010000009356f70f00000a0000000000000000000000140005"], 0x30}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3) r10 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r9}, 0x2) sendmsg$inet6(r10, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) (async) sendmsg$inet6(r10, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', r2, 0x0}, 0x50) 788.954402ms ago: executing program 1 (id=1006): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x800) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000", 0x4) 732.442852ms ago: executing program 3 (id=1007): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') unshare(0x24020400) pread64(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0) 665.126726ms ago: executing program 1 (id=1008): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000621"], 0x54}}, 0x20000000) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "7d5dc311829eb423f3c4cb082e71546851d518ce434381782135c4ad12c6e88d", 0x8, 0x39d, 0x2, 0x101}, 0x3c) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x18}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) epoll_create1(0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x485f93ab1f67ad23}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20049855}, 0x4000080) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @initdev}, &(0x7f0000000200)=0xc) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00'}) 517.042232ms ago: executing program 4 (id=1009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x4000, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x2}, {@in=@remote, 0x0, 0x6c}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x4, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @tfcpad={0x8, 0x16, 0x49}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$kcm(0x29, 0x0, 0x0) 377.995471ms ago: executing program 3 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) bind$inet6(r0, 0xfffffffffffffffe, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r9}, 0x18) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x22, 0x2, 0x23) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)=0x7) (async) socket(0x11, 0x3, 0x6) 277.912893ms ago: executing program 1 (id=1011): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00', 0x7, 0xfffffff8}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r8, 0x80) accept$netrom(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(0x3) r9 = accept$netrom(r8, &(0x7f00000001c0)={{0x3, @default}, [@rose, @default, @default, @rose, @null, @default, @rose]}, &(0x7f0000000280)=0x48) ioctl$sock_netrom_SIOCDELRT(r9, 0x890c, &(0x7f00000003c0)={0x1, @bcast, @bpq0, 0x206f, 'syz0\x00', @default, 0x3, 0x2, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) 140.659046ms ago: executing program 2 (id=1012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/14, 0xe}], 0x1}, 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0xb, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710427000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 103.867377ms ago: executing program 0 (id=1013): socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$kcm(0x21, 0x2, 0xa) r1 = socket(0x10, 0x3, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x7, 0x3d867021, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 84.591333ms ago: executing program 4 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000500)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r0, 0xf, 0x0, 0x80, &(0x7f0000000040)=[0x0, 0x0], 0x400000000000012c, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="139000002b9201002400128009000100626f6e64000000001400028008000380070000000800070081000000", @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4004000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000700)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r5, @ANYRESDEC=r8], 0x27) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="1d0000002a000000", @ANYRES32=r0, @ANYBLOB="2e55bd8e2cea2f10334a00219c25a380a0c8b6e5f0e55e541b3eccfcd3523c02b6b68b261ff513a638d2687de7b2d6d434c45e280000000000", @ANYRES32=r5, @ANYRES64=r2], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r12 = socket(0x2b, 0x80c, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r15, @ANYBLOB="14005a800c00e8263e3507000200000004000380"], 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x5f, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r17, {0x4, 0x8}, {}, {0xf, 0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8888}, 0x4884) write$cgroup_int(r9, &(0x7f0000000100)=0x8, 0x12) 1.058334ms ago: executing program 3 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x8004, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 0s ago: executing program 2 (id=1016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@null, 0x101, 'veth0_macvtap\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 83.125354][ T5827] cgroup: Unknown subsys name 'net' [ 83.256507][ T5827] cgroup: Unknown subsys name 'cpuset' [ 83.265417][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.988679][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.751320][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.763263][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.772640][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.785873][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.810425][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.843325][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.876618][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.885608][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.893333][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.902039][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.902502][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.910472][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.918679][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.925419][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.958287][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.966278][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.974535][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.984996][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.000417][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.014349][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.100034][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.109751][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.122513][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.134431][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.142681][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.650681][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.774129][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.888343][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.047735][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.055858][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.064988][ T5837] bridge_slave_0: entered allmulticast mode [ 89.075567][ T5837] bridge_slave_0: entered promiscuous mode [ 89.125553][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.133074][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.140319][ T5837] bridge_slave_1: entered allmulticast mode [ 89.149637][ T5837] bridge_slave_1: entered promiscuous mode [ 89.216523][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.224594][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.231801][ T5846] bridge_slave_0: entered allmulticast mode [ 89.239876][ T5846] bridge_slave_0: entered promiscuous mode [ 89.288947][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.301286][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.309282][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.317359][ T5846] bridge_slave_1: entered allmulticast mode [ 89.325347][ T5846] bridge_slave_1: entered promiscuous mode [ 89.352399][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.359792][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.367185][ T5841] bridge_slave_0: entered allmulticast mode [ 89.374873][ T5841] bridge_slave_0: entered promiscuous mode [ 89.387946][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.432016][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 89.445385][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.452679][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.460710][ T5841] bridge_slave_1: entered allmulticast mode [ 89.469680][ T5841] bridge_slave_1: entered promiscuous mode [ 89.494615][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.516165][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.581264][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.619935][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.633921][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.708877][ T5837] team0: Port device team_slave_0 added [ 89.729835][ T5846] team0: Port device team_slave_0 added [ 89.751051][ T5841] team0: Port device team_slave_0 added [ 89.761012][ T5837] team0: Port device team_slave_1 added [ 89.801223][ T5846] team0: Port device team_slave_1 added [ 89.809428][ T5841] team0: Port device team_slave_1 added [ 89.846169][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.853880][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.861376][ T5844] bridge_slave_0: entered allmulticast mode [ 89.870366][ T5844] bridge_slave_0: entered promiscuous mode [ 89.880585][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.887866][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.895915][ T5844] bridge_slave_1: entered allmulticast mode [ 89.904639][ T5844] bridge_slave_1: entered promiscuous mode [ 90.000776][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.008501][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.036831][ T5843] Bluetooth: hci0: command tx timeout [ 90.036838][ T5845] Bluetooth: hci1: command tx timeout [ 90.037816][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.061296][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.068868][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.095351][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.106219][ T5845] Bluetooth: hci3: command tx timeout [ 90.112121][ T5843] Bluetooth: hci2: command tx timeout [ 90.137887][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.145244][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.172300][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.185300][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.192811][ T5843] Bluetooth: hci4: command tx timeout [ 90.196087][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.224787][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.236875][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.244206][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.271250][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.294338][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.307836][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.317723][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.325803][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.333182][ T5854] bridge_slave_0: entered allmulticast mode [ 90.340793][ T5854] bridge_slave_0: entered promiscuous mode [ 90.349312][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.356487][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.383336][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.456069][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.463404][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.470687][ T5854] bridge_slave_1: entered allmulticast mode [ 90.478531][ T5854] bridge_slave_1: entered promiscuous mode [ 90.523104][ T5844] team0: Port device team_slave_0 added [ 90.578011][ T5841] hsr_slave_0: entered promiscuous mode [ 90.585639][ T5841] hsr_slave_1: entered promiscuous mode [ 90.594970][ T5844] team0: Port device team_slave_1 added [ 90.607639][ T5837] hsr_slave_0: entered promiscuous mode [ 90.614576][ T5837] hsr_slave_1: entered promiscuous mode [ 90.620863][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.627677][ T5837] Cannot create hsr debugfs directory [ 90.654001][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.667623][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.818070][ T5846] hsr_slave_0: entered promiscuous mode [ 90.824729][ T5846] hsr_slave_1: entered promiscuous mode [ 90.831131][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.837215][ T5846] Cannot create hsr debugfs directory [ 90.845020][ T5854] team0: Port device team_slave_0 added [ 90.860679][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.868109][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.896073][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.932883][ T5854] team0: Port device team_slave_1 added [ 90.953029][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.960514][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.988033][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.134338][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.141310][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.168564][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.231423][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.239266][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.273860][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.348299][ T5844] hsr_slave_0: entered promiscuous mode [ 91.355650][ T5844] hsr_slave_1: entered promiscuous mode [ 91.361878][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 91.367792][ T5844] Cannot create hsr debugfs directory [ 91.559480][ T5854] hsr_slave_0: entered promiscuous mode [ 91.565985][ T5854] hsr_slave_1: entered promiscuous mode [ 91.572156][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 91.578546][ T5854] Cannot create hsr debugfs directory [ 91.791095][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.826126][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.861785][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.915745][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.001575][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.025645][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.039299][ T10] cfg80211: failed to load regulatory.db [ 92.092893][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.102708][ T5843] Bluetooth: hci1: command tx timeout [ 92.108215][ T5843] Bluetooth: hci0: command tx timeout [ 92.122057][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.182554][ T5845] Bluetooth: hci3: command tx timeout [ 92.188141][ T5843] Bluetooth: hci2: command tx timeout [ 92.223942][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.243513][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.257400][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.264644][ T5843] Bluetooth: hci4: command tx timeout [ 92.274687][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.384807][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.397466][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.408335][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.420691][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.616052][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.627495][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.641154][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.659465][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.682937][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.763884][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.804841][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.812306][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.854500][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.861694][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.878725][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.902991][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.952087][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.991540][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.006926][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.033734][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.040997][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.081839][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.100579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.107922][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.130714][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.154968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.162389][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.174417][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.182224][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.213313][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.220576][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.263521][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.270727][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.333382][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.445212][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.498735][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.505936][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.562013][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.569541][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.714780][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.891275][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.193409][ T5843] Bluetooth: hci0: command tx timeout [ 94.198903][ T5843] Bluetooth: hci1: command tx timeout [ 94.203724][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.272650][ T5843] Bluetooth: hci2: command tx timeout [ 94.278210][ T5843] Bluetooth: hci3: command tx timeout [ 94.297725][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.342875][ T5843] Bluetooth: hci4: command tx timeout [ 94.503464][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.539548][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.559890][ T5854] veth0_vlan: entered promiscuous mode [ 94.602854][ T5841] veth0_vlan: entered promiscuous mode [ 94.626889][ T5854] veth1_vlan: entered promiscuous mode [ 94.644998][ T5841] veth1_vlan: entered promiscuous mode [ 94.708114][ T5846] veth0_vlan: entered promiscuous mode [ 94.733297][ T5837] veth0_vlan: entered promiscuous mode [ 94.768346][ T5846] veth1_vlan: entered promiscuous mode [ 94.777435][ T5854] veth0_macvtap: entered promiscuous mode [ 94.801032][ T5854] veth1_macvtap: entered promiscuous mode [ 94.819000][ T5841] veth0_macvtap: entered promiscuous mode [ 94.831518][ T5837] veth1_vlan: entered promiscuous mode [ 94.861106][ T5844] veth0_vlan: entered promiscuous mode [ 94.880325][ T5841] veth1_macvtap: entered promiscuous mode [ 94.917673][ T5844] veth1_vlan: entered promiscuous mode [ 94.946224][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.964857][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.988754][ T5846] veth0_macvtap: entered promiscuous mode [ 94.999403][ T5837] veth0_macvtap: entered promiscuous mode [ 95.016664][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.027905][ T5846] veth1_macvtap: entered promiscuous mode [ 95.049034][ T1323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.059700][ T1323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.078857][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.089274][ T5837] veth1_macvtap: entered promiscuous mode [ 95.101474][ T1323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.110914][ T1323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.147482][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.173560][ T1323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.187177][ T1323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.214748][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.231068][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.241488][ T1323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.250790][ T1323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.275149][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.294068][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.306116][ T5844] veth0_macvtap: entered promiscuous mode [ 95.335305][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.344647][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.359955][ T5844] veth1_macvtap: entered promiscuous mode [ 95.377729][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.389826][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.433037][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.498518][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.510730][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.574952][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.592033][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.615480][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.636315][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.687460][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.696523][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.705777][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.717810][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.739755][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.740457][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.756531][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.782105][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814549][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.827640][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.887281][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.897752][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.945479][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.955717][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.998160][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.092217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.116237][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.161093][ T5959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.253279][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.255235][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.261183][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.271514][ T5843] Bluetooth: hci1: command tx timeout [ 96.283948][ T5845] Bluetooth: hci0: command tx timeout [ 96.305539][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.332299][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.343442][ T5965] netlink: 4660 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.343470][ T5843] Bluetooth: hci3: command tx timeout [ 96.358016][ T5845] Bluetooth: hci2: command tx timeout [ 96.423786][ T5843] Bluetooth: hci4: command tx timeout [ 96.801197][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.846614][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.977781][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 97.000367][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6'. [ 97.140770][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.443818][ T5993] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 97.539086][ T5990] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.666163][ T5993] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.717715][ T5995] netlink: 'syz.3.7': attribute type 3 has an invalid length. [ 97.742950][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.152133][ T5990] syz.0.1 (5990) used greatest stack depth: 17864 bytes left [ 98.175427][ T6006] netlink: 'syz.4.10': attribute type 4 has an invalid length. [ 98.200008][ T6006] netlink: 'syz.4.10': attribute type 17 has an invalid length. [ 98.372969][ T6010] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.190348][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 99.760842][ T6051] Zero length message leads to an empty skb [ 100.211323][ T5940] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.243448][ T6057] veth1: entered promiscuous mode [ 100.327468][ T6057] veth1: left promiscuous mode [ 100.648907][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 100.992700][ T6077] syzkaller1: entered promiscuous mode [ 101.008741][ T6077] syzkaller1: entered allmulticast mode [ 101.101108][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 101.428762][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.578423][ T6093] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.894378][ T6110] __nla_validate_parse: 1 callbacks suppressed [ 101.894401][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 102.955390][ T6148] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 103.110306][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 103.128670][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 103.154150][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 103.228389][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 103.401720][ T6176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'. [ 103.447437][ T6177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'. [ 103.518236][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 103.536985][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 103.888197][ T6197] netlink: 1 bytes leftover after parsing attributes in process `syz.4.63'. [ 104.255768][ T30] audit: type=1800 audit(1754452928.024:2): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="cgroup.controllers" dev="tmpfs" ino=83 res=0 errno=0 [ 104.495892][ T6218] veth2: entered promiscuous mode [ 104.538804][ T6218] veth2: entered allmulticast mode [ 104.775964][ T6237] netlink: 'syz.0.72': attribute type 12 has an invalid length. [ 105.173152][ T6248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.878350][ T6264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.244070][ T6292] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 106.276240][ T6292] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 106.331397][ T6294] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 106.390544][ T6304] ip6gre1: entered promiscuous mode [ 106.443401][ T6309] netlink: 'syz.4.86': attribute type 5 has an invalid length. [ 106.564559][ T6309] geneve2: entered promiscuous mode [ 106.570887][ T6309] geneve2: entered allmulticast mode [ 106.626866][ T1038] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 106.639435][ T1038] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 106.782382][ T1038] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 106.830054][ T6318] 0·: renamed from hsr0 (while UP) [ 106.868218][ T6328] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 106.934112][ T6318] 0·: entered allmulticast mode [ 106.941025][ T6318] hsr_slave_0: entered allmulticast mode [ 106.947174][ T6318] hsr_slave_1: entered allmulticast mode [ 106.956866][ T6318] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 106.991076][ T6325] pimreg: entered allmulticast mode [ 106.997958][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 107.009152][ T6320] pimreg: left allmulticast mode [ 107.389698][ T6348] __nla_validate_parse: 8 callbacks suppressed [ 107.389719][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 107.906839][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.104'. [ 109.315941][ T6407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.379632][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'. [ 109.695631][ T6418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.914339][ T6430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.016269][ T6429] vxlan0: entered promiscuous mode [ 110.024183][ T6429] vxlan0: entered allmulticast mode [ 110.058808][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.078677][ T6438] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 110.107227][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.188936][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.236423][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.706786][ T6460] netlink: 2 bytes leftover after parsing attributes in process `syz.3.125'. [ 111.487921][ T6492] netlink: 72 bytes leftover after parsing attributes in process `syz.3.132'. [ 111.697954][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 111.773271][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 111.784261][ T6501] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 112.159717][ T6511] syzkaller1: entered promiscuous mode [ 112.182932][ T6511] syzkaller1: entered allmulticast mode [ 112.323347][ T6529] sctp: [Deprecated]: syz.2.141 (pid 6529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.323347][ T6529] Use struct sctp_sack_info instead [ 112.453282][ T6531] tipc: Started in network mode [ 112.458572][ T6531] tipc: Node identity 860035e45c2f, cluster identity 4711 [ 112.548079][ T6531] tipc: Enabled bearer , priority 0 [ 112.610436][ T6535] syzkaller0: entered promiscuous mode [ 112.634572][ T6535] syzkaller0: entered allmulticast mode [ 112.764150][ T6531] tipc: Resetting bearer [ 112.793739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.805909][ T6531] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 112.888330][ T6535] tipc: Resetting bearer [ 113.012988][ T6553] IPv6: addrconf: prefix option has invalid lifetime [ 113.019822][ T6553] IPv6: addrconf: prefix option has invalid lifetime [ 113.026778][ T6553] IPv6: addrconf: prefix option has invalid lifetime [ 113.158235][ T6535] tipc: Disabling bearer [ 113.362655][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 113.665548][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.151'. [ 113.706848][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.151'. [ 113.810599][ T6582] bridge0: entered promiscuous mode [ 113.822554][ T6582] macsec0: entered promiscuous mode [ 113.835283][ T6582] bridge0: port 3(macsec0) entered blocking state [ 113.887761][ T6582] bridge0: port 3(macsec0) entered disabled state [ 113.906333][ T6597] netlink: 72 bytes leftover after parsing attributes in process `syz.1.154'. [ 113.910068][ T6582] macsec0: entered allmulticast mode [ 113.928754][ T6582] bridge0: entered allmulticast mode [ 113.977956][ T6582] macsec0: left allmulticast mode [ 113.986329][ T6582] bridge0: left allmulticast mode [ 113.998052][ T6582] bridge0: left promiscuous mode [ 114.696529][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 114.745938][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 114.824639][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 114.840061][ T6633] netlink: 248 bytes leftover after parsing attributes in process `syz.3.162'. [ 114.854018][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 114.865747][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 114.936085][ T6629] lo speed is unknown, defaulting to 1000 [ 115.064685][ T6633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.108192][ T6629] lo speed is unknown, defaulting to 1000 [ 115.237315][ T6644] syzkaller1: entered promiscuous mode [ 115.238430][ T6642] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 115.245673][ T6644] syzkaller1: entered allmulticast mode [ 115.259698][ T6629] lo speed is unknown, defaulting to 1000 [ 115.956510][ T6658] syzkaller1: entered promiscuous mode [ 115.977409][ T6658] syzkaller1: entered allmulticast mode [ 116.249548][ T6629] infiniband syz0: set active [ 116.259053][ T43] lo speed is unknown, defaulting to 1000 [ 116.285358][ T6629] infiniband syz0: added lo [ 116.292944][ T6629] syz0: rxe_create_cq: returned err = -12 [ 116.301407][ T6629] infiniband syz0: Couldn't create ib_mad CQ [ 116.392560][ T6629] infiniband syz0: Couldn't open port 1 [ 116.476258][ T6680] GUP no longer grows the stack in syz.1.176 (6680): 200000006000-20000000a000 (200000005000) [ 116.499846][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.1.176 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 116.499887][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.499899][ T6680] Call Trace: [ 116.499907][ T6680] [ 116.499917][ T6680] dump_stack_lvl+0x189/0x250 [ 116.499950][ T6680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.499972][ T6680] ? __pfx__printk+0x10/0x10 [ 116.499994][ T6680] ? find_vma+0xe7/0x160 [ 116.500041][ T6680] __get_user_pages+0x2a60/0x30b0 [ 116.500116][ T6680] ? __pfx___get_user_pages+0x10/0x10 [ 116.500142][ T6680] ? __gup_longterm_locked+0xbf7/0x15b0 [ 116.500168][ T6680] ? down_read_killable+0x1d1/0x350 [ 116.500187][ T6680] ? try_get_folio+0x633/0x660 [ 116.500221][ T6680] __gup_longterm_locked+0xd66/0x15b0 [ 116.500256][ T6680] ? try_grab_folio_fast+0x1be/0x4f0 [ 116.500310][ T6680] ? gup_fast_fallback+0x1afc/0x2260 [ 116.500343][ T6680] gup_fast_fallback+0x1cd4/0x2260 [ 116.500417][ T6680] ? __pfx_gup_fast_fallback+0x10/0x10 [ 116.500442][ T6680] ? __mutex_lock+0x335/0x1340 [ 116.500482][ T6680] ? is_valid_gup_args+0x11f/0x200 [ 116.500512][ T6680] ? get_user_pages_fast+0x4d/0xb0 [ 116.500542][ T6680] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 116.500579][ T6680] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 116.500599][ T6680] ? wait_for_space+0x24d/0x2d0 [ 116.500632][ T6680] iov_iter_get_pages2+0x5e/0xa0 [ 116.500672][ T6680] __se_sys_vmsplice+0x548/0x10d0 [ 116.500704][ T6680] ? futex_private_hash_put+0x4b/0x280 [ 116.500735][ T6680] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 116.500771][ T6680] ? __pfx_futex_wake+0x10/0x10 [ 116.500810][ T6680] ? __lock_acquire+0xab9/0xd20 [ 116.500892][ T6680] ? rcu_is_watching+0x15/0xb0 [ 116.500930][ T6680] ? do_syscall_64+0xbe/0x3b0 [ 116.500964][ T6680] do_syscall_64+0xfa/0x3b0 [ 116.500989][ T6680] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.501015][ T6680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.501035][ T6680] ? clear_bhb_loop+0x60/0xb0 [ 116.501061][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.501079][ T6680] RIP: 0033:0x7fd68938eb69 [ 116.501099][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.501115][ T6680] RSP: 002b:00007fd68a2b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 116.501136][ T6680] RAX: ffffffffffffffda RBX: 00007fd6895b5fa0 RCX: 00007fd68938eb69 [ 116.501151][ T6680] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 116.501163][ T6680] RBP: 00007fd689411df1 R08: 0000000000000000 R09: 0000000000000000 [ 116.501175][ T6680] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 116.501187][ T6680] R13: 0000000000000000 R14: 00007fd6895b5fa0 R15: 00007fff0efa81a8 [ 116.501222][ T6680] [ 116.570941][ T6629] RDS/IB: syz0: added [ 116.872892][ T6629] smc: adding ib device syz0 with port count 1 [ 116.879335][ T6629] smc: ib device syz0 port 1 has pnetid [ 116.908020][ T43] lo speed is unknown, defaulting to 1000 [ 116.919826][ T6629] lo speed is unknown, defaulting to 1000 [ 118.072679][ T6728] netem: unknown loss type 13 [ 118.077604][ T6728] netem: change failed [ 118.127432][ T6731] Bluetooth: MGMT ver 1.23 [ 118.280324][ T6629] lo speed is unknown, defaulting to 1000 [ 118.434838][ T6744] __nla_validate_parse: 12 callbacks suppressed [ 118.434860][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 118.490168][ T6740] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.194'. [ 118.536775][ T6749] netlink: 324 bytes leftover after parsing attributes in process `syz.4.196'. [ 118.764241][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 118.796324][ T5843] block nbd0: Receive control failed (result -107) [ 118.848103][ T6751] bridge_slave_0: left allmulticast mode [ 118.854337][ T6751] bridge_slave_0: left promiscuous mode [ 118.868551][ T6757] nbd0: detected capacity change from 0 to 32 [ 118.876576][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.900791][ T6034] block nbd0: Dead connection, failed to find a fallback [ 118.930457][ T6034] block nbd0: shutting down sockets [ 118.942512][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.977859][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.978041][ T6751] bridge_slave_1: left allmulticast mode [ 118.992598][ T6751] bridge_slave_1: left promiscuous mode [ 119.000175][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.021964][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.061855][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.093733][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.130233][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.153181][ T6751] bond0: (slave bond_slave_0): Releasing backup interface [ 119.191168][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.220213][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.253007][ T6751] bond0: (slave bond_slave_1): Releasing backup interface [ 119.258580][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.298762][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.310406][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.337219][ T6751] team0: Port device team_slave_0 removed [ 119.343503][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.343771][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.343799][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.344588][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.438272][ T6751] team0: Port device team_slave_1 removed [ 119.452452][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.478015][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.481047][ T6034] ldm_validate_partition_table(): Disk read failed. [ 119.516003][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.522517][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.538187][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.540046][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.573978][ T6751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.586494][ T6034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.614370][ T6034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.635023][ T6763] bridge0: port 3(erspan0) entered blocking state [ 119.643358][ T6763] bridge0: port 3(erspan0) entered disabled state [ 119.654547][ T6763] erspan0: entered allmulticast mode [ 119.665414][ T6763] erspan0: entered promiscuous mode [ 119.671932][ T6763] bridge0: port 3(erspan0) entered blocking state [ 119.678921][ T6763] bridge0: port 3(erspan0) entered forwarding state [ 119.692980][ T6034] Dev nbd0: unable to read RDB block 0 [ 119.701749][ T6034] nbd0: unable to read partition table [ 119.764535][ T6034] ldm_validate_partition_table(): Disk read failed. [ 119.779058][ T6034] Dev nbd0: unable to read RDB block 0 [ 119.796384][ T6034] nbd0: unable to read partition table [ 119.873610][ T6629] lo speed is unknown, defaulting to 1000 [ 120.566948][ T6795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.665051][ T6795] team0: Port device bond1 added [ 120.926236][ T6629] lo speed is unknown, defaulting to 1000 [ 121.360524][ T6823] netlink: 'syz.0.209': attribute type 39 has an invalid length. [ 121.388937][ T6826] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 121.444376][ T6824] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 121.580223][ T6826] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.852191][ T6780] lo speed is unknown, defaulting to 1000 [ 122.151513][ T6845] bridge_slave_0: left allmulticast mode [ 122.180429][ T6848] netlink: 'syz.0.213': attribute type 10 has an invalid length. [ 122.242452][ T6845] bridge_slave_0: left promiscuous mode [ 122.250090][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.278834][ T6849] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 122.304530][ T6845] bridge_slave_1: left allmulticast mode [ 122.317137][ T6845] bridge_slave_1: left promiscuous mode [ 122.325121][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.369082][ T6845] bond0: (slave bond_slave_0): Releasing backup interface [ 122.406781][ T6845] bond0: (slave bond_slave_1): Releasing backup interface [ 122.478409][ T6845] team0: Port device team_slave_0 removed [ 122.516079][ T6845] team0: Port device team_slave_1 removed [ 122.531822][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.558633][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.571288][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.595665][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.679814][ T6848] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.691941][ T6849] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 122.772034][ T6629] lo speed is unknown, defaulting to 1000 [ 123.503745][ T6880] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 123.701778][ T6886] netlink: 'syz.0.221': attribute type 21 has an invalid length. [ 124.181167][ T6894] netlink: 96 bytes leftover after parsing attributes in process `syz.0.224'. [ 124.222186][ T6894] netlink: 80 bytes leftover after parsing attributes in process `syz.0.224'. [ 124.294155][ T6894] netlink: 96 bytes leftover after parsing attributes in process `syz.0.224'. [ 124.334467][ T6894] netlink: 80 bytes leftover after parsing attributes in process `syz.0.224'. [ 124.576592][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.3.226'. [ 124.741220][ T6906] lo speed is unknown, defaulting to 1000 [ 126.008301][ T6942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.019214][ T6942] delete_channel: no stack [ 126.936073][ T6951] lo speed is unknown, defaulting to 1000 [ 127.245501][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 127.249836][ T6035] lo speed is unknown, defaulting to 1000 [ 127.268005][ T6035] syz0: Port: 1 Link DOWN [ 127.281835][ T6957] netlink: 'syz.1.239': attribute type 20 has an invalid length. [ 127.284240][ T1226] lo speed is unknown, defaulting to 1000 [ 127.350172][ T6957] netlink: 'syz.1.239': attribute type 21 has an invalid length. [ 127.367057][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 127.386365][ T6959] bridge_slave_1: left allmulticast mode [ 127.405713][ T6959] bridge_slave_1: left promiscuous mode [ 127.426190][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.555250][ T6962] Unsupported ieee802154 address type: 0 [ 128.144421][ T6959] bridge_slave_0: left allmulticast mode [ 128.191888][ T6959] bridge_slave_0: left promiscuous mode [ 128.238614][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.440093][ T6975] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.243'. [ 128.565660][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 128.628782][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 128.691232][ T6984] netlink: 'syz.4.247': attribute type 2 has an invalid length. [ 128.791468][ T6984] pim6reg1: entered promiscuous mode [ 128.802201][ T6984] pim6reg1: entered allmulticast mode [ 129.630397][ T6034] udevd[6034]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.677226][ T7003] __nla_validate_parse: 4 callbacks suppressed [ 129.677250][ T7003] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.252'. [ 129.690588][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 129.721738][ T7005] netlink: 312 bytes leftover after parsing attributes in process `syz.1.253'. [ 129.739046][ T6034] udevd[6034]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.751589][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 129.935284][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 130.064300][ T7016] tipc: Started in network mode [ 130.102086][ T7016] tipc: Node identity 9e5f1db24a13, cluster identity 4711 [ 130.121179][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 130.132554][ T7016] tipc: Enabled bearer , priority 0 [ 130.153517][ T7020] openvswitch: netlink: Flow actions attr not present in new flow. [ 130.175518][ T7023] syzkaller0: entered promiscuous mode [ 130.181225][ T7023] syzkaller0: entered allmulticast mode [ 130.334945][ T7012] tipc: Resetting bearer [ 130.401810][ T7012] tipc: Disabling bearer [ 130.667834][ T7042] lo speed is unknown, defaulting to 1000 [ 130.764326][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.264'. [ 130.827776][ T7050] netlink: 140 bytes leftover after parsing attributes in process `syz.3.263'. [ 130.865334][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.347696][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 131.656114][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.664541][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.031698][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.067186][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.119737][ T7064] 0·: left allmulticast mode [ 132.124767][ T7064] hsr_slave_0: left allmulticast mode [ 132.133495][ T7064] hsr_slave_1: left allmulticast mode [ 132.154089][ T7087] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 132.218536][ T7089] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 132.290925][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 132.325474][ T7087] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.326923][ T1038] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.378534][ T1038] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.423518][ T7089] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.423759][ T1038] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.469331][ T7095] sctp: [Deprecated]: syz.0.274 (pid 7095) Use of int in max_burst socket option deprecated. [ 132.469331][ T7095] Use struct sctp_assoc_value instead [ 132.490245][ T1038] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.638440][ T7103] netlink: 'syz.2.276': attribute type 11 has an invalid length. [ 132.668736][ T5920] IPVS: starting estimator thread 0... [ 132.773702][ T7104] IPVS: using max 27 ests per chain, 64800 per kthread [ 132.899280][ T7097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.001320][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254269][ T7098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.383026][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 133.600018][ T7116] IPVS: Scheduler module ip_vs_sip not found [ 134.659759][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.675350][ T7157] bond0: (slave rose0): Enslaving as an active interface with an up link [ 136.002916][ T7182] __nla_validate_parse: 6 callbacks suppressed [ 136.002938][ T7182] netlink: 176 bytes leftover after parsing attributes in process `syz.0.292'. [ 136.266130][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 136.283915][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 136.910822][ T7214] geneve2: entered promiscuous mode [ 137.730391][ T1226] IPVS: starting estimator thread 0... [ 137.865020][ T7241] IPVS: using max 23 ests per chain, 55200 per kthread [ 138.258674][ T7225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.272433][ T7244] netlink: 64 bytes leftover after parsing attributes in process `syz.3.303'. [ 138.317735][ T7244] syzkaller0: entered promiscuous mode [ 138.323391][ T7244] syzkaller0: entered allmulticast mode [ 138.524901][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.578050][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.601441][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.611518][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.723526][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.761634][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 139.570956][ T7290] tipc: Enabling of bearer rejected, failed to enable media [ 188.764537][ T7342] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 188.765575][ T7338] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 188.781209][ T7340] tipc: Enabled bearer , priority 0 [ 188.827290][ T7338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.841868][ T7340] syzkaller0: entered promiscuous mode [ 188.857251][ T7340] syzkaller0: entered allmulticast mode [ 189.050381][ T7338] vlan2: entered promiscuous mode [ 189.088108][ T7338] bond2: entered promiscuous mode [ 189.102721][ T7338] vlan2: entered allmulticast mode [ 189.119445][ T7338] bond2: entered allmulticast mode [ 189.221202][ T7346] bond2: (slave gretap1): making interface the new active one [ 189.229292][ T7346] gretap1: entered promiscuous mode [ 189.235540][ T7346] gretap1: entered allmulticast mode [ 189.254054][ T7346] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 189.369240][ T7365] __nla_validate_parse: 127 callbacks suppressed [ 189.369264][ T7365] netlink: 92 bytes leftover after parsing attributes in process `syz.1.317'. [ 189.437327][ T7335] tipc: Resetting bearer [ 189.521715][ T7335] tipc: Disabling bearer [ 189.772440][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'. [ 189.994363][ T7380] syzkaller1: entered promiscuous mode [ 190.020392][ T7380] syzkaller1: entered allmulticast mode [ 190.306403][ T7398] tipc: Enabled bearer , priority 0 [ 190.336179][ T7398] syzkaller0: entered promiscuous mode [ 190.370985][ T7402] netlink: 844 bytes leftover after parsing attributes in process `syz.2.328'. [ 190.380806][ T7398] syzkaller0: entered allmulticast mode [ 190.464206][ T7398] tipc: Resetting bearer [ 190.594001][ T7396] tipc: Resetting bearer [ 190.707683][ T7396] tipc: Disabling bearer [ 191.205444][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 191.240878][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 191.628933][ T7446] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.338'. [ 192.334151][ T7476] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 192.359742][ T7476] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 192.671103][ T7481] lo speed is unknown, defaulting to 1000 [ 192.915669][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.928000][ T7496] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 192.970926][ T7496] macvtap1: entered allmulticast mode [ 192.980536][ T7496] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 193.038322][ T7496] batman_adv: batadv0: Adding interface: macvtap1 [ 193.072429][ T7496] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.142755][ T7496] batman_adv: batadv0: Interface activated: macvtap1 [ 193.384230][ T7506] TCP: TCP_TX_DELAY enabled [ 194.433284][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473795][ T7527] tipc: Enabling of bearer rejected, failed to enable media [ 195.134665][ T7557] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 195.252612][ T7557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.360'. [ 195.945543][ T7578] tipc: Started in network mode [ 195.950484][ T7578] tipc: Node identity b23355f698b7, cluster identity 4711 [ 196.016239][ T7578] tipc: Enabled bearer , priority 0 [ 196.062883][ T7585] syzkaller0: entered promiscuous mode [ 196.081451][ T7585] syzkaller0: entered allmulticast mode [ 196.145818][ T7585] tipc: Resetting bearer [ 196.174106][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 196.212749][ T7577] tipc: Resetting bearer [ 196.249968][ T7577] tipc: Disabling bearer [ 196.520278][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.369'. [ 197.085354][ T7618] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.374'. [ 197.212661][ T7618] netpci0: tun_chr_ioctl cmd 1074025681 [ 197.378135][ T7627] netlink: 'syz.1.377': attribute type 15 has an invalid length. [ 197.491741][ T7638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 197.541825][ T7634] netlink: 'syz.3.379': attribute type 11 has an invalid length. [ 197.629624][ T7634] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.379'. [ 197.687015][ T7646] netlink: 'syz.0.380': attribute type 21 has an invalid length. [ 197.720941][ T7646] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.746565][ T7646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.754866][ T7646] IPv6: NLM_F_CREATE should be set when creating new route [ 197.762421][ T7646] IPv6: NLM_F_CREATE should be set when creating new route [ 197.769777][ T7646] IPv6: NLM_F_CREATE should be set when creating new route [ 197.818994][ T7634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.837638][ T5843] Bluetooth: hci4: link tx timeout [ 197.843835][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.846853][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 198.427381][ T7682] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 199.027085][ T7708] syzkaller0: entered promiscuous mode [ 199.032830][ T7708] syzkaller0: entered allmulticast mode [ 199.114635][ T7708] macsec0: entered promiscuous mode [ 199.253929][ T7720] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 199.293525][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 199.531741][ T7730] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 199.781649][ T7738] netlink: 256 bytes leftover after parsing attributes in process `syz.3.401'. [ 199.952794][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 200.236864][ T7758] netlink: 48 bytes leftover after parsing attributes in process `syz.4.407'. [ 200.471949][ T7758] macsec1: entered promiscuous mode [ 200.491097][ T7758] macvlan1: entered promiscuous mode [ 200.512844][ T7758] macsec1: entered allmulticast mode [ 200.530128][ T7758] macvlan1: entered allmulticast mode [ 200.550537][ T7758] veth1_vlan: entered allmulticast mode [ 200.561032][ T7758] macvlan1: left allmulticast mode [ 200.573235][ T7758] veth1_vlan: left allmulticast mode [ 200.578672][ T7758] macvlan1: left promiscuous mode [ 200.619496][ T7765] netlink: 88 bytes leftover after parsing attributes in process `syz.2.409'. [ 200.708085][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 200.763597][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 200.845452][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.412'. [ 201.019220][ T7783] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 201.324475][ T7786] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 201.491734][ T7787] veth3: entered promiscuous mode [ 201.534075][ T7787] bond0: (slave veth3): Enslaving as an active interface with an up link [ 201.630816][ T7788] bond0: (slave bond_slave_0): Releasing backup interface [ 201.680511][ T7788] bond0: (slave bond_slave_1): Releasing backup interface [ 201.751640][ T7788] team0: Port device team_slave_0 removed [ 201.805970][ T7788] team0: Port device team_slave_1 removed [ 201.820466][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.828467][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.870985][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.910196][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.973702][ T7788] bond0: (slave ip6gretap1): Releasing backup interface [ 201.990167][ T7788] bond0: (slave veth3): Releasing backup interface [ 202.297354][ T7821] netlink: 248 bytes leftover after parsing attributes in process `syz.4.425'. [ 202.398345][ T7818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.451263][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 202.483171][ T7822] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.506840][ T7822] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 203.014408][ T7849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.082006][ T7890] lo speed is unknown, defaulting to 1000 [ 204.256169][ T7896] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 204.269733][ T7898] netlink: 136 bytes leftover after parsing attributes in process `syz.2.440'. [ 204.292976][ T7896] bridge0: port 3(erspan0) entered disabled state [ 204.299746][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.308205][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.378426][ T7903] IPv6: NLM_F_REPLACE set, but no existing node found! [ 204.399844][ T7896] bridge0: port 3(erspan0) entered blocking state [ 204.407088][ T7896] bridge0: port 3(erspan0) entered forwarding state [ 204.414196][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.421628][ T7896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.429336][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.436674][ T7896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.477765][ T7896] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 204.518065][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 205.366632][ T7928] netlink: 44 bytes leftover after parsing attributes in process `syz.1.447'. [ 205.512426][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 205.768719][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 207.682448][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 208.070099][ T8002] vlan0: entered promiscuous mode [ 208.079944][ T8002] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 208.088673][ T8002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.468'. [ 208.237722][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 208.498212][ T8009] bond0: (slave wlan1): Releasing backup interface [ 208.769220][ T8019] netlink: 'syz.2.473': attribute type 21 has an invalid length. [ 208.926916][ T8023] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 208.945885][ T8029] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.475'. [ 209.455586][ T8047] !: renamed from dummy0 (while UP) [ 209.589354][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 209.653672][ T8055] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 209.686753][ T8055] netlink: 112 bytes leftover after parsing attributes in process `syz.4.484'. [ 209.773967][ T8061] openvswitch: netlink: IP tunnel dst address not specified [ 210.272296][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 210.450756][ T8057] lo speed is unknown, defaulting to 1000 [ 210.469224][ T8073] tipc: Enabled bearer , priority 0 [ 210.679082][ T8073] syzkaller0: entered promiscuous mode [ 210.689317][ T8073] syzkaller0: entered allmulticast mode [ 210.776435][ T8086] tipc: Resetting bearer [ 210.906605][ T8091] FAULT_INJECTION: forcing a failure. [ 210.906605][ T8091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 210.947191][ T8091] CPU: 1 UID: 0 PID: 8091 Comm: syz.2.492 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 210.947220][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.947231][ T8091] Call Trace: [ 210.947239][ T8091] [ 210.947248][ T8091] dump_stack_lvl+0x189/0x250 [ 210.947276][ T8091] ? __pfx____ratelimit+0x10/0x10 [ 210.947305][ T8091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.947327][ T8091] ? __pfx__printk+0x10/0x10 [ 210.947352][ T8091] ? __might_fault+0xb0/0x130 [ 210.947404][ T8091] should_fail_ex+0x414/0x560 [ 210.947441][ T8091] _copy_from_user+0x2d/0xb0 [ 210.947470][ T8091] __sys_bind+0x199/0x3e0 [ 210.947500][ T8091] ? __pfx___sys_bind+0x10/0x10 [ 210.947542][ T8091] ? __pfx_ksys_write+0x10/0x10 [ 210.947567][ T8091] ? rcu_is_watching+0x15/0xb0 [ 210.947607][ T8091] __x64_sys_bind+0x7a/0x90 [ 210.947637][ T8091] do_syscall_64+0xfa/0x3b0 [ 210.947664][ T8091] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.947691][ T8091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.947712][ T8091] ? clear_bhb_loop+0x60/0xb0 [ 210.947737][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.947756][ T8091] RIP: 0033:0x7fd638b8eb69 [ 210.947783][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.947800][ T8091] RSP: 002b:00007fd63991d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 210.947822][ T8091] RAX: ffffffffffffffda RBX: 00007fd638db5fa0 RCX: 00007fd638b8eb69 [ 210.947837][ T8091] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 210.947850][ T8091] RBP: 00007fd63991d090 R08: 0000000000000000 R09: 0000000000000000 [ 210.947862][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.947873][ T8091] R13: 0000000000000000 R14: 00007fd638db5fa0 R15: 00007fffdd39e4e8 [ 210.947906][ T8091] [ 211.368124][ T8071] tipc: Resetting bearer [ 211.530045][ T1216] tipc: Node number set to 713315830 [ 211.779267][ T8071] tipc: Disabling bearer [ 211.862871][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.870029][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.876574][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 213.112602][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.128337][ T8143] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 213.192803][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.242461][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.278131][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.303700][ T8148] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 213.362943][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.365443][ T8148] netlink: 2 bytes leftover after parsing attributes in process `syz.2.500'. [ 213.431332][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.509429][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.576744][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.619672][ T8142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 213.767544][ T8143] batman_adv: batadv0: Adding interface: team0 [ 213.788491][ T8143] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.825964][ T8143] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 213.851554][ T8148] team0: entered promiscuous mode [ 213.858547][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.871380][ T8148] batman_adv: batadv0: Interface activated: team0 [ 213.878303][ T8148] batman_adv: batadv0: Interface deactivated: team0 [ 213.886620][ T8148] batman_adv: batadv0: Removing interface: team0 [ 214.637366][ T8190] vlan0: entered promiscuous mode [ 214.665206][ T8190] gretap0: entered promiscuous mode [ 214.850667][ T8196] lo speed is unknown, defaulting to 1000 [ 215.724866][ T8212] bridge0: entered promiscuous mode [ 216.711186][ T8240] tipc: Enabled bearer , priority 0 [ 216.751364][ T8240] syzkaller0: MTU too low for tipc bearer [ 216.761851][ T8240] tipc: Disabling bearer [ 217.237556][ T8247] sctp: [Deprecated]: syz.2.523 (pid 8247) Use of int in max_burst socket option. [ 217.237556][ T8247] Use struct sctp_assoc_value instead [ 217.717438][ T8257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.928292][ T8267] unsupported nlmsg_type 40 [ 218.199623][ T8271] netlink: 'syz.0.531': attribute type 4 has an invalid length. [ 218.226288][ T8271] __nla_validate_parse: 25 callbacks suppressed [ 218.226309][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'. [ 218.494942][ T8281] netlink: 'syz.2.535': attribute type 11 has an invalid length. [ 218.525756][ T8275] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 218.776874][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 218.873262][ T8290] netlink: 'syz.2.537': attribute type 6 has an invalid length. [ 218.916517][ T8288] netlink: 140 bytes leftover after parsing attributes in process `syz.0.536'. [ 218.964083][ T8288] sch_tbf: burst 3298 is lower than device lo mtu (65499) ! [ 219.103341][ T8294] pimreg: entered allmulticast mode [ 219.123854][ T8294] pimreg: left allmulticast mode [ 219.219111][ T8298] lo speed is unknown, defaulting to 1000 [ 219.241309][ T8299] tipc: Started in network mode [ 219.279050][ T8299] tipc: Node identity 26ea487d2b03, cluster identity 4711 [ 219.324183][ T8299] tipc: Enabled bearer , priority 0 [ 219.362797][ T8302] syzkaller0: entered promiscuous mode [ 219.372840][ T8302] syzkaller0: entered allmulticast mode [ 219.397571][ T8301] tipc: Enabled bearer , priority 0 [ 219.419025][ T8301] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 219.439952][ T8301] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 219.483762][ T8299] tipc: Resetting bearer [ 219.538175][ T8301] tipc: Resetting bearer [ 219.973496][ T8296] tipc: Resetting bearer [ 220.107046][ T8296] tipc: Disabling bearer [ 220.879603][ T8345] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 220.905382][ T8345] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 220.921813][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 221.189309][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 221.349614][ T8356] IPVS: set_ctl: invalid protocol: 117 224.0.0.1:20004 [ 221.626865][ T8367] netlink: 132 bytes leftover after parsing attributes in process `syz.4.560'. [ 221.769827][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 221.857032][ T8367] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 222.345626][ T1226] IPVS: starting estimator thread 0... [ 222.360617][ T8398] tipc: Enabled bearer , priority 0 [ 222.420769][ T8397] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 222.440568][ T8398] tipc: Resetting bearer [ 222.472325][ T8399] IPVS: using max 26 ests per chain, 62400 per kthread [ 222.578496][ T8409] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 222.643775][ T8391] tipc: Disabling bearer [ 222.949366][ T8422] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 223.198943][ T8422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.301564][ T8431] veth5: entered promiscuous mode [ 223.331355][ T8434] erspan0: entered allmulticast mode [ 223.529931][ T8448] netlink: 'syz.3.581': attribute type 178 has an invalid length. [ 223.559195][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 223.856208][ T8456] !: renamed from dummy0 (while UP) [ 224.788228][ T8496] netlink: 'syz.3.591': attribute type 3 has an invalid length. [ 224.847555][ T8506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.593'. [ 225.175511][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'. [ 225.846098][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.605'. [ 225.994782][ T8550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.605'. [ 226.056459][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 226.175627][ T8559] syzkaller1: entered promiscuous mode [ 226.194646][ T8559] syzkaller1: entered allmulticast mode [ 226.315224][ T8559] macsec0: entered promiscuous mode [ 226.318333][ T8567] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 226.342896][ T8559] macsec0: entered allmulticast mode [ 226.825207][ T8584] veth0_to_bond: entered allmulticast mode [ 226.831954][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 226.883364][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 227.021773][ T8592] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 227.031378][ T8592] syz_tun: entered promiscuous mode [ 227.081144][ T8596] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 227.085817][ T8592] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 227.148705][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.184801][ T8596] team0: Port device bond0 added [ 227.419693][ T8609] netlink: 410 bytes leftover after parsing attributes in process `syz.1.624'. [ 227.427639][ T8611] netlink: 64 bytes leftover after parsing attributes in process `syz.0.625'. [ 227.446020][ T8604] lo speed is unknown, defaulting to 1000 [ 227.634979][ T8614] vlan2: entered promiscuous mode [ 227.650510][ T8614] bridge0: entered promiscuous mode [ 228.223059][ T8636] openvswitch: netlink: Message has 1 unknown bytes. [ 228.230021][ T8636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.764232][ T8651] Bluetooth: MGMT ver 1.23 [ 229.023284][ T8663] sctp: [Deprecated]: syz.0.641 (pid 8663) Use of int in max_burst socket option. [ 229.023284][ T8663] Use struct sctp_assoc_value instead [ 229.591877][ T8674] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 229.665548][ T8674] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 229.691678][ T8674] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.780906][ T8635] infiniband syz2: set down [ 229.804125][ T8635] infiniband syz2: added batadv_slave_0 [ 229.815716][ T8635] syz2: rxe_create_cq: returned err = -12 [ 229.821972][ T8635] infiniband syz2: Couldn't create ib_mad CQ [ 229.837752][ T8635] infiniband syz2: Couldn't open port 1 [ 229.878654][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 229.978868][ T8635] RDS/IB: syz2: added [ 229.989117][ T8635] smc: adding ib device syz2 with port count 1 [ 230.013084][ T8635] smc: ib device syz2 port 1 has pnetid [ 230.021416][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 230.206488][ T8693] netlink: 'syz.3.650': attribute type 21 has an invalid length. [ 230.331750][ T8693] __nla_validate_parse: 33 callbacks suppressed [ 230.331771][ T8693] netlink: 156 bytes leftover after parsing attributes in process `syz.3.650'. [ 230.362400][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 230.461544][ T8708] veth0_to_bond: entered allmulticast mode [ 230.493532][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 230.645973][ T8714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.658'. [ 230.670049][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 230.701268][ T8714] netlink: 43 bytes leftover after parsing attributes in process `syz.2.658'. [ 230.758787][ T8714] netlink: 'syz.2.658': attribute type 5 has an invalid length. [ 230.802702][ T8714] netlink: 43 bytes leftover after parsing attributes in process `syz.2.658'. [ 230.813576][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 230.922334][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.071659][ T8734] tc_dump_action: action bad kind [ 231.173364][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'. [ 231.403835][ T1038] net_ratelimit: 2 callbacks suppressed [ 231.403856][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.555496][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.601151][ T8751] veth0_to_bond: entered allmulticast mode [ 231.693966][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.851473][ T8759] sctp: [Deprecated]: syz.3.673 (pid 8759) Use of int in maxseg socket option. [ 231.851473][ T8759] Use struct sctp_assoc_value instead [ 231.883416][ T8756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.923934][ T8763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.673'. [ 232.035910][ T8756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.062702][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 232.159879][ T8756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.222551][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 232.384195][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 232.501234][ T8777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.508756][ T8777] IPv6: NLM_F_CREATE should be set when creating new route [ 232.523001][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 232.562010][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.571776][ T8777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.645543][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.756813][ T8484] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.780686][ T8484] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.808260][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 232.850431][ T8786] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 232.933397][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 233.073320][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 233.581863][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 233.597487][ T8824] netlink: 'syz.3.689': attribute type 7 has an invalid length. [ 233.619656][ T8824] netlink: 'syz.3.689': attribute type 8 has an invalid length. [ 233.643794][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 234.184320][ T5158] Bluetooth: hci4: command 0x0405 tx timeout [ 234.603627][ T8855] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 234.725312][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'. [ 234.739383][ T8861] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 234.768229][ T8861] syz_tun: entered promiscuous mode [ 234.800325][ T8862] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 234.818636][ T8861] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 234.827992][ T8865] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 234.861949][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.877881][ T8865] team0: Port device bond0 added [ 234.943222][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 235.235233][ T8885] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 235.281034][ T8885] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 235.284916][ T30] audit: type=1804 audit(1754453059.064:3): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.707" name="/newroot/129/cgroup.controllers" dev="tmpfs" ino=679 res=1 errno=0 [ 235.326813][ T8885] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 235.330218][ T8889] ¾x9ÿ: renamed from bridge_slave_0 [ 235.415118][ T30] audit: type=1800 audit(1754453059.094:4): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.707" name="cgroup.controllers" dev="tmpfs" ino=679 res=0 errno=0 [ 235.559838][ T8904] netlink: 'syz.0.712': attribute type 21 has an invalid length. [ 235.643631][ T8914] __nla_validate_parse: 1 callbacks suppressed [ 235.643653][ T8914] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.710'. [ 235.646126][ T8913] netlink: 'syz.1.713': attribute type 9 has an invalid length. [ 235.662946][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 235.716610][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 235.750723][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 235.790769][ T8912] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 236.011302][ T8924] netlink: 248 bytes leftover after parsing attributes in process `syz.1.715'. [ 236.229294][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 236.240115][ T8928] netlink: 'syz.4.716': attribute type 4 has an invalid length. [ 236.249759][ T8928] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.716'. [ 236.468734][ T1038] net_ratelimit: 26 callbacks suppressed [ 236.468756][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 236.488315][ T8935] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.719'. [ 236.519170][ T8938] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 236.546538][ T8939] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 236.624249][ T8939] syzkaller0: entered promiscuous mode [ 236.630007][ T8939] syzkaller0: entered allmulticast mode [ 236.923281][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.046234][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.109085][ T8963] sctp: [Deprecated]: syz.2.725 (pid 8963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.109085][ T8963] Use struct sctp_sack_info instead [ 237.129129][ T8966] batadv_slave_0: entered promiscuous mode [ 237.169900][ T8964] batadv_slave_0: left promiscuous mode [ 237.180734][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 237.292782][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.407146][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.588301][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 237.598172][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.622863][ T8992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.753309][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.865381][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.032586][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.148675][ T9005] lo speed is unknown, defaulting to 1000 [ 238.645842][ T9033] sit0: entered allmulticast mode [ 238.666346][ T9033] macvlan0: entered allmulticast mode [ 238.725137][ T9037] netlink: 'syz.2.747': attribute type 12 has an invalid length. [ 238.768556][ T9033] macvlan0 (unregistering): left allmulticast mode [ 238.845453][ T9041] veth0_to_bond: entered allmulticast mode [ 239.314608][ T9055] tipc: Started in network mode [ 239.328530][ T9055] tipc: Node identity 1aabc402fe8, cluster identity 4711 [ 239.355936][ T9055] tipc: Enabled bearer , priority 0 [ 239.376069][ T9058] syzkaller0: entered promiscuous mode [ 239.389483][ T9058] syzkaller0: entered allmulticast mode [ 239.447507][ T9055] tipc: Resetting bearer [ 239.468116][ T9053] tipc: Resetting bearer [ 239.546952][ T9053] tipc: Disabling bearer [ 239.877369][ T9070] netlink: 'syz.2.757': attribute type 3 has an invalid length. [ 240.386016][ T9085] veth0_to_bond: entered allmulticast mode [ 240.640152][ T9089] sctp: [Deprecated]: syz.1.763 (pid 9089) Use of int in max_burst socket option. [ 240.640152][ T9089] Use struct sctp_assoc_value instead [ 240.972488][ T9100] __nla_validate_parse: 10 callbacks suppressed [ 240.972510][ T9100] netlink: 88 bytes leftover after parsing attributes in process `syz.1.766'. [ 241.182370][ T9105] lo speed is unknown, defaulting to 1000 [ 241.286262][ T9107] netlink: 'syz.4.767': attribute type 2 has an invalid length. [ 241.307675][ T9107] netlink: 164 bytes leftover after parsing attributes in process `syz.4.767'. [ 241.351975][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 241.371496][ T9117] netlink: 'syz.4.767': attribute type 3 has an invalid length. [ 241.395069][ T9111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.599478][ T9111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.736348][ T9111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.780971][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'. [ 241.813337][ T8484] net_ratelimit: 22 callbacks suppressed [ 241.813360][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 241.920358][ T9111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.003450][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 242.051774][ T9130] netlink: 'syz.4.774': attribute type 64 has an invalid length. [ 242.103721][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 242.376655][ T9136] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 242.391012][ T9136] netlink: 228 bytes leftover after parsing attributes in process `syz.3.775'. [ 242.779713][ T5948] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.188045][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.261858][ T64] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.305770][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.349745][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.653201][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.746457][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'. [ 243.762621][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.952565][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.982877][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'. [ 244.003572][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.782'. [ 244.065205][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.343600][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.473910][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.624840][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.796621][ T9183] netlink: 'syz.3.787': attribute type 21 has an invalid length. [ 244.896674][ T9187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.790'. [ 245.281504][ T9187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.294741][ T9187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.305209][ T9187] bond0 (unregistering): Released all slaves [ 246.260697][ T9227] __nla_validate_parse: 1 callbacks suppressed [ 246.260720][ T9227] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.800'. [ 246.807562][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.853224][ T49] net_ratelimit: 13 callbacks suppressed [ 246.853248][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 247.014933][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 247.154134][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 247.302523][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 247.453252][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 247.780460][ T9273] netlink: 'syz.0.812': attribute type 10 has an invalid length. [ 247.821608][ T9267] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 247.914190][ T9268] bond0: (slave syz_tun): Releasing backup interface [ 248.074459][ T9268] team0: Port device bond0 removed [ 248.255418][ T9273] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 248.271248][ T9273] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 248.306704][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.448712][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.489583][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'. [ 248.659273][ T9283] syzkaller0: entered promiscuous mode [ 248.666363][ T9283] syzkaller0: entered allmulticast mode [ 248.675687][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.689999][ T9278] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 249.600052][ T9133] Set syz1 is full, maxelem 65536 reached [ 249.720929][ T9302] netlink: 128 bytes leftover after parsing attributes in process `syz.4.819'. [ 249.866673][ T9307] openvswitch: netlink: IP tunnel dst address not specified [ 251.138871][ T9316] tipc: Enabled bearer , priority 0 [ 251.177981][ T9316] syzkaller0: entered promiscuous mode [ 251.196941][ T9316] syzkaller0: entered allmulticast mode [ 251.245157][ T9319] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 251.257236][ T9326] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.827'. [ 251.279812][ T9326] netlink: 5 bytes leftover after parsing attributes in process `syz.0.827'. [ 251.324938][ T9316] tipc: Resetting bearer [ 251.357804][ T9328] tipc: Enabled bearer , priority 0 [ 251.379570][ T9328] syzkaller0: entered promiscuous mode [ 251.394903][ T9328] syzkaller0: entered allmulticast mode [ 251.418415][ T9314] tipc: Resetting bearer [ 251.470362][ T9314] tipc: Disabling bearer [ 251.511365][ T9328] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 251.558311][ T9328] tipc: Resetting bearer [ 251.589637][ T9327] tipc: Resetting bearer [ 251.624810][ T9327] tipc: Disabling bearer [ 251.649186][ T9340] netlink: 256 bytes leftover after parsing attributes in process `syz.2.832'. [ 251.659642][ T9340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.832'. [ 251.682695][ T9340] lo speed is unknown, defaulting to 1000 [ 251.690567][ T9340] lo speed is unknown, defaulting to 1000 [ 251.698358][ T9340] lo speed is unknown, defaulting to 1000 [ 251.759529][ T9343] erspan0: left allmulticast mode [ 251.839927][ T9343] team0: left promiscuous mode [ 251.910961][ T9343] net_ratelimit: 4 callbacks suppressed [ 251.910973][ T9343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.032917][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.202685][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.252666][ T9367] gretap0: entered allmulticast mode [ 252.343234][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.484015][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.550515][ T9372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.623281][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.641630][ T9376] netlink: 'syz.4.843': attribute type 10 has an invalid length. [ 252.650617][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 252.690533][ T9376] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.695617][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 252.721708][ T9376] bond0: (slave team0): Enslaving as an active interface with an up link [ 252.748364][ T9374] openvswitch: netlink: Multiple metadata blocks provided [ 252.758887][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 252.767910][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.786017][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 252.800430][ T9375] delete_channel: no stack [ 252.873219][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 252.932906][ T9340] infiniband syz0: set active [ 252.937766][ T9340] infiniband syz0: added lo [ 252.944545][ T10] lo speed is unknown, defaulting to 1000 [ 252.993284][ T9340] syz0: rxe_create_cq: returned err = -12 [ 252.999994][ T9340] infiniband syz0: Couldn't create ib_mad CQ [ 253.002060][ T9386] : entered promiscuous mode [ 253.009516][ T9340] infiniband syz0: Couldn't open port 1 [ 253.048775][ T9388] syzkaller1: entered allmulticast mode [ 253.120642][ T9340] RDS/IB: syz0: added [ 253.135138][ T9340] smc: adding ib device syz0 with port count 1 [ 253.170234][ T9340] smc: ib device syz0 port 1 has pnetid [ 253.194124][ T9388] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 253.236274][ T977] lo speed is unknown, defaulting to 1000 [ 253.242426][ T9340] lo speed is unknown, defaulting to 1000 [ 253.521409][ T9404] lo speed is unknown, defaulting to 1000 [ 254.259746][ T9433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.857'. [ 254.308785][ T9438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.860'. [ 254.350260][ T9438] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 254.359778][ T43] IPVS: starting estimator thread 0... [ 254.380831][ T9438] netlink: 92 bytes leftover after parsing attributes in process `syz.4.860'. [ 254.426380][ T9340] lo speed is unknown, defaulting to 1000 [ 254.462514][ T9440] IPVS: using max 22 ests per chain, 52800 per kthread [ 254.628169][ T9446] gtp0: entered promiscuous mode [ 254.656204][ T9446] gtp0: entered allmulticast mode [ 255.425355][ T9340] lo speed is unknown, defaulting to 1000 [ 255.961123][ T9481] netlink: 'syz.1.872': attribute type 39 has an invalid length. [ 256.006366][ T9404] lo speed is unknown, defaulting to 1000 [ 256.025945][ T9483] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 256.138319][ T9484] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 256.153610][ T9483] bond0: (slave wlan1): Releasing backup interface [ 256.196471][ T9484] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 256.219849][ T9484] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.381841][ T9484] syzkaller0: entered promiscuous mode [ 256.391721][ T9484] syzkaller0: entered allmulticast mode [ 256.566092][ T9495] netlink: 'syz.4.876': attribute type 3 has an invalid length. [ 256.576129][ T9496] __nla_validate_parse: 2 callbacks suppressed [ 256.576146][ T9496] netlink: 268 bytes leftover after parsing attributes in process `syz.4.876'. [ 258.054340][ T9340] lo speed is unknown, defaulting to 1000 [ 258.073131][ T36] net_ratelimit: 27 callbacks suppressed [ 258.073150][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.251838][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 258.390974][ T9515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.879'. [ 258.413156][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.626012][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.701410][ T9528] netlink: 100 bytes leftover after parsing attributes in process `syz.1.883'. [ 258.753252][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.795035][ T9340] lo speed is unknown, defaulting to 1000 [ 258.882412][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.895112][ T9531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.903046][ T9531] IPv6: NLM_F_CREATE should be set when creating new route [ 258.910317][ T9531] IPv6: NLM_F_CREATE should be set when creating new route [ 258.996852][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.132624][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.253219][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.372500][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.626855][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.889'. [ 259.665817][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.857501][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 260.619584][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 260.646669][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.276277][ T9595] lo speed is unknown, defaulting to 1000 [ 261.287837][ T9601] netlink: 87 bytes leftover after parsing attributes in process `syz.3.902'. [ 261.889605][ T9621] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 261.978668][ T9624] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 262.002313][ T9624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.911'. [ 262.011318][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 262.072752][ T9630] netlink: 'syz.3.912': attribute type 30 has an invalid length. [ 262.167372][ T9634] netlink: 148 bytes leftover after parsing attributes in process `syz.1.913'. [ 262.205676][ T9637] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 262.491800][ T9640] bond1: (slave gretap1): making interface the new active one [ 262.491980][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 262.513972][ T9640] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 262.670002][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 262.985440][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.924'. [ 263.001169][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.924'. [ 263.115616][ T8484] net_ratelimit: 25 callbacks suppressed [ 263.115638][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.192150][ T9680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.927'. [ 263.246684][ T9595] lo speed is unknown, defaulting to 1000 [ 263.253991][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.389947][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.512439][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.617953][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 263.643253][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.957999][ T9692] bond0: (slave syz_tun): Releasing backup interface [ 264.102434][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 264.183172][ T9697] ip6tnl0: entered promiscuous mode [ 264.188543][ T9697] ip6tnl0: entered allmulticast mode [ 264.492982][ T8484] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.689142][ T9716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.825362][ T1216] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 264.837437][ T1216] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 264.854998][ T8484] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 264.862070][ T8134] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 264.877326][ T8134] wlan1: authentication with 08:02:11:00:00:00 timed out [ 264.965869][ T9726] tipc: Enabling of bearer rejected, failed to enable media [ 264.987793][ T9716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.993272][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.033190][ T9735] macvlan0: entered allmulticast mode [ 265.051009][ T9735] veth1_vlan: entered allmulticast mode [ 265.119758][ T9735] team0: Port device macvlan0 added [ 265.132836][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.227532][ T9740] tipc: Enabled bearer , priority 0 [ 265.254116][ T9740] syzkaller0: entered promiscuous mode [ 265.270143][ T9740] syzkaller0: entered allmulticast mode [ 265.335210][ T5948] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.372584][ T9740] tipc: Resetting bearer [ 265.487119][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.520250][ T9740] lo speed is unknown, defaulting to 1000 [ 266.010268][ T9738] tipc: Resetting bearer [ 266.133660][ T9738] tipc: Disabling bearer [ 266.532556][ T9776] nbd2: detected capacity change from 0 to 127 [ 266.753611][ T9783] FAULT_INJECTION: forcing a failure. [ 266.753611][ T9783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.775078][ T5158] block nbd2: Receive control failed (result -104) [ 266.792701][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.955 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 266.792731][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.792751][ T9783] Call Trace: [ 266.792759][ T9783] [ 266.792768][ T9783] dump_stack_lvl+0x189/0x250 [ 266.792796][ T9783] ? __pfx____ratelimit+0x10/0x10 [ 266.792824][ T9783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.792844][ T9783] ? __pfx__printk+0x10/0x10 [ 266.792868][ T9783] ? __might_fault+0xb0/0x130 [ 266.792910][ T9783] should_fail_ex+0x414/0x560 [ 266.792953][ T9783] _copy_from_user+0x2d/0xb0 [ 266.792981][ T9783] ___sys_sendmsg+0x158/0x2a0 [ 266.793007][ T9783] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.793073][ T9783] ? __fget_files+0x2a/0x420 [ 266.793091][ T9783] ? __fget_files+0x3a0/0x420 [ 266.793123][ T9783] __x64_sys_sendmsg+0x19b/0x260 [ 266.793147][ T9783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.793180][ T9783] ? __pfx_ksys_write+0x10/0x10 [ 266.793204][ T9783] ? rcu_is_watching+0x15/0xb0 [ 266.793239][ T9783] ? do_syscall_64+0xbe/0x3b0 [ 266.793273][ T9783] do_syscall_64+0xfa/0x3b0 [ 266.793299][ T9783] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.793326][ T9783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.793346][ T9783] ? clear_bhb_loop+0x60/0xb0 [ 266.793370][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.793389][ T9783] RIP: 0033:0x7fd68938eb69 [ 266.793408][ T9783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.793424][ T9783] RSP: 002b:00007fd68a2b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.793446][ T9783] RAX: ffffffffffffffda RBX: 00007fd6895b5fa0 RCX: 00007fd68938eb69 [ 266.793461][ T9783] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 266.793473][ T9783] RBP: 00007fd68a2b4090 R08: 0000000000000000 R09: 0000000000000000 [ 266.793485][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.793496][ T9783] R13: 0000000000000000 R14: 00007fd6895b5fa0 R15: 00007fff0efa81a8 [ 266.793530][ T9783] [ 267.089653][ T9786] __nla_validate_parse: 9 callbacks suppressed [ 267.089673][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 267.131859][ T9740] lo speed is unknown, defaulting to 1000 [ 267.482604][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 267.599295][ T9797] netlink: 104 bytes leftover after parsing attributes in process `syz.2.959'. [ 268.025812][ T9807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.962'. [ 268.061070][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 268.071027][ T9811] netlink: 'syz.4.964': attribute type 5 has an invalid length. [ 268.138071][ T9817] pim6reg: entered allmulticast mode [ 268.148465][ T9811] gretap0: left allmulticast mode [ 268.165787][ T9811] pim6reg: left allmulticast mode [ 268.282674][ T8134] net_ratelimit: 16 callbacks suppressed [ 268.282696][ T8134] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.475417][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.522935][ T9830] FAULT_INJECTION: forcing a failure. [ 268.522935][ T9830] name failslab, interval 1, probability 0, space 0, times 1 [ 268.596810][ T9830] CPU: 0 UID: 0 PID: 9830 Comm: syz.4.969 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 268.596841][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.596853][ T9830] Call Trace: [ 268.596862][ T9830] [ 268.596870][ T9830] dump_stack_lvl+0x189/0x250 [ 268.596897][ T9830] ? __pfx____ratelimit+0x10/0x10 [ 268.596926][ T9830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.596947][ T9830] ? __pfx__printk+0x10/0x10 [ 268.596978][ T9830] ? __pfx___might_resched+0x10/0x10 [ 268.597013][ T9830] should_fail_ex+0x414/0x560 [ 268.597050][ T9830] should_failslab+0xa8/0x100 [ 268.597071][ T9830] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 268.597101][ T9830] ? __alloc_skb+0x112/0x2d0 [ 268.597135][ T9830] __alloc_skb+0x112/0x2d0 [ 268.597167][ T9830] netlink_sendmsg+0x5c6/0xb30 [ 268.597207][ T9830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.597240][ T9830] ? aa_sock_msg_perm+0x94/0x160 [ 268.597268][ T9830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.597290][ T9830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.597319][ T9830] __sock_sendmsg+0x219/0x270 [ 268.597349][ T9830] ____sys_sendmsg+0x505/0x830 [ 268.597376][ T9830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.597408][ T9830] ? import_iovec+0x74/0xa0 [ 268.597440][ T9830] ___sys_sendmsg+0x21f/0x2a0 [ 268.597463][ T9830] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.597532][ T9830] ? __fget_files+0x2a/0x420 [ 268.597551][ T9830] ? __fget_files+0x3a0/0x420 [ 268.597581][ T9830] __x64_sys_sendmsg+0x19b/0x260 [ 268.597606][ T9830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.597638][ T9830] ? __pfx_ksys_write+0x10/0x10 [ 268.597671][ T9830] ? do_syscall_64+0xbe/0x3b0 [ 268.597704][ T9830] do_syscall_64+0xfa/0x3b0 [ 268.597733][ T9830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.597756][ T9830] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.597774][ T9830] ? clear_bhb_loop+0x60/0xb0 [ 268.597798][ T9830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.597816][ T9830] RIP: 0033:0x7f4aee38eb69 [ 268.597834][ T9830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.597850][ T9830] RSP: 002b:00007f4aef24a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.597872][ T9830] RAX: ffffffffffffffda RBX: 00007f4aee5b5fa0 RCX: 00007f4aee38eb69 [ 268.597885][ T9830] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 268.597897][ T9830] RBP: 00007f4aef24a090 R08: 0000000000000000 R09: 0000000000000000 [ 268.597909][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.597921][ T9830] R13: 0000000000000000 R14: 00007f4aee5b5fa0 R15: 00007ffdab8c7518 [ 268.597954][ T9830] [ 268.615082][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.272623][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.318307][ T9848] netlink: 134820 bytes leftover after parsing attributes in process `syz.4.974'. [ 269.373439][ T9850] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 269.382749][ T64] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.492788][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.603544][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.621339][ T9854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.975'. [ 269.644141][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.978'. [ 269.689143][ T9857] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 269.754555][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.872747][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 269.892328][ T1038] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.933089][ T9866] erspan0: left allmulticast mode [ 269.938197][ T9866] erspan0: left promiscuous mode [ 269.954162][ T9866] bridge0: port 3(erspan0) entered disabled state [ 270.011089][ T9866] bridge_slave_1: left allmulticast mode [ 270.047193][ T9866] bridge_slave_1: left promiscuous mode [ 270.082659][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.111871][ T9866] bridge_slave_0: left allmulticast mode [ 270.122495][ T9866] bridge_slave_0: left promiscuous mode [ 270.138653][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.247904][ T9866] bond0: (slave bridge0): Releasing backup interface [ 270.363732][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.774706][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 271.182537][ T9929] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 271.296312][ T9933] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 271.454963][ T9933] team0: Port device dummy0 added [ 272.167228][ T9962] ip6tnl1: entered promiscuous mode [ 272.204109][ T9967] __nla_validate_parse: 1 callbacks suppressed [ 272.204128][ T9967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1008'. [ 272.219667][ T9962] ip6tnl1: entered allmulticast mode [ 272.633073][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 272.707463][ T5948] ------------[ cut here ]------------ [ 272.715249][ T5948] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 272.729071][ T5948] WARNING: CPU: 1 PID: 5948 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 272.739818][ T5948] Modules linked in: [ 272.744898][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 272.756863][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.767529][ T5948] Workqueue: bond0 bond_mii_monitor [ 272.773226][ T5948] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 272.779288][ T5948] Code: 7c fe ff ff e8 de d8 5d f8 c6 05 d7 a6 28 06 01 90 48 c7 c7 e0 11 92 8c 48 c7 c6 d2 0c 9c 8d ba 48 00 00 00 e8 6e 7c 21 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 272.799140][ T5948] RSP: 0018:ffffc90004baf670 EFLAGS: 00010246 [ 272.806105][ T5948] RAX: cc28363edf401c00 RBX: ffff888032230000 RCX: ffff88803028bc00 [ 272.814386][ T5948] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 272.822752][ T5948] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 272.830863][ T5948] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: 1ffff1100644605d [ 272.839108][ T5948] R13: dffffc0000000000 R14: ffffffff8c1cb028 R15: 0000000000000000 [ 272.847184][ T5948] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 272.856228][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.862925][ T5948] CR2: 000055557ea50808 CR3: 00000000322c8000 CR4: 00000000003526f0 [ 272.871678][ T5948] Call Trace: [ 272.875293][ T5948] [ 272.878262][ T5948] ? ethtool_op_get_link+0xd/0x70 [ 272.883471][ T5948] ethtool_op_get_link+0x15/0x70 [ 272.888449][ T5948] bond_check_dev_link+0x447/0x6c0 [ 272.893847][ T5948] ? __pfx_bond_check_dev_link+0x10/0x10 [ 272.899548][ T5948] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 272.908478][ T5948] bond_mii_monitor+0x428/0x2e00 [ 272.911896][ T9993] tipc: Enabled bearer , priority 0 [ 272.913562][ T5948] ? bond_mii_monitor+0x153/0x2e00 [ 272.913637][ T5948] ? __pfx_bond_mii_monitor+0x10/0x10 [ 272.913679][ T5948] ? __lock_acquire+0xab9/0xd20 [ 272.913724][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 272.913764][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.913791][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 272.913819][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 272.913852][ T5948] process_scheduled_works+0xae1/0x17b0 [ 272.913919][ T5948] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.913973][ T5948] worker_thread+0x8a0/0xda0 [ 272.914009][ T5948] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 272.914047][ T5948] ? __kthread_parkme+0x7b/0x200 [ 272.914081][ T5948] kthread+0x70e/0x8a0 [ 272.914111][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 272.914143][ T5948] ? __pfx_kthread+0x10/0x10 [ 272.914171][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.914198][ T5948] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.914224][ T5948] ? __pfx_kthread+0x10/0x10 [ 272.914260][ T5948] ret_from_fork+0x3fc/0x770 [ 272.966026][ T9996] syzkaller0: entered promiscuous mode [ 272.970766][ T5948] ? __pfx_ret_from_fork+0x10/0x10 [ 273.031206][ T5948] ? __switch_to_asm+0x39/0x70 [ 273.036731][ T5948] ? __switch_to_asm+0x33/0x70 [ 273.041547][ T5948] ? __pfx_kthread+0x10/0x10 [ 273.046355][ T5948] ret_from_fork_asm+0x1a/0x30 [ 273.051201][ T5948] [ 273.054314][ T5948] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.061795][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 273.073807][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.083893][ T5948] Workqueue: bond0 bond_mii_monitor [ 273.089149][ T5948] Call Trace: [ 273.092493][ T5948] [ 273.095438][ T5948] dump_stack_lvl+0x99/0x250 [ 273.100064][ T5948] ? __asan_memcpy+0x40/0x70 [ 273.104786][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.110113][ T5948] ? __pfx__printk+0x10/0x10 [ 273.114748][ T5948] panic+0x2db/0x790 [ 273.118661][ T5948] ? __pfx_panic+0x10/0x10 [ 273.123100][ T5948] ? ret_from_fork_asm+0x1a/0x30 [ 273.128053][ T5948] __warn+0x31b/0x4b0 [ 273.132037][ T5948] ? __linkwatch_sync_dev+0x303/0x350 [ 273.137418][ T5948] ? __linkwatch_sync_dev+0x303/0x350 [ 273.142972][ T5948] report_bug+0x2be/0x4f0 [ 273.147763][ T5948] ? __linkwatch_sync_dev+0x303/0x350 [ 273.153135][ T5948] ? __linkwatch_sync_dev+0x303/0x350 [ 273.158511][ T5948] ? __linkwatch_sync_dev+0x305/0x350 [ 273.164149][ T5948] handle_bug+0x84/0x160 [ 273.168399][ T5948] exc_invalid_op+0x1a/0x50 [ 273.172908][ T5948] asm_exc_invalid_op+0x1a/0x20 [ 273.177764][ T5948] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 273.183753][ T5948] Code: 7c fe ff ff e8 de d8 5d f8 c6 05 d7 a6 28 06 01 90 48 c7 c7 e0 11 92 8c 48 c7 c6 d2 0c 9c 8d ba 48 00 00 00 e8 6e 7c 21 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 273.203459][ T5948] RSP: 0018:ffffc90004baf670 EFLAGS: 00010246 [ 273.209542][ T5948] RAX: cc28363edf401c00 RBX: ffff888032230000 RCX: ffff88803028bc00 [ 273.217614][ T5948] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 273.225587][ T5948] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 273.233557][ T5948] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: 1ffff1100644605d [ 273.241708][ T5948] R13: dffffc0000000000 R14: ffffffff8c1cb028 R15: 0000000000000000 [ 273.249700][ T5948] ? ethtool_op_get_link+0xd/0x70 [ 273.254733][ T5948] ethtool_op_get_link+0x15/0x70 [ 273.259699][ T5948] bond_check_dev_link+0x447/0x6c0 [ 273.264829][ T5948] ? __pfx_bond_check_dev_link+0x10/0x10 [ 273.270493][ T5948] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 273.276921][ T5948] bond_mii_monitor+0x428/0x2e00 [ 273.281982][ T5948] ? bond_mii_monitor+0x153/0x2e00 [ 273.287115][ T5948] ? __pfx_bond_mii_monitor+0x10/0x10 [ 273.292507][ T5948] ? __lock_acquire+0xab9/0xd20 [ 273.297382][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 273.303128][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.308334][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 273.314159][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 273.320849][ T5948] process_scheduled_works+0xae1/0x17b0 [ 273.326435][ T5948] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.332476][ T5948] worker_thread+0x8a0/0xda0 [ 273.337085][ T5948] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.343425][ T5948] ? __kthread_parkme+0x7b/0x200 [ 273.348474][ T5948] kthread+0x70e/0x8a0 [ 273.352723][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 273.357845][ T5948] ? __pfx_kthread+0x10/0x10 [ 273.362444][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.367663][ T5948] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.372958][ T5948] ? __pfx_kthread+0x10/0x10 [ 273.377667][ T5948] ret_from_fork+0x3fc/0x770 [ 273.382324][ T5948] ? __pfx_ret_from_fork+0x10/0x10 [ 273.387500][ T5948] ? __switch_to_asm+0x39/0x70 [ 273.392273][ T5948] ? __switch_to_asm+0x33/0x70 [ 273.397048][ T5948] ? __pfx_kthread+0x10/0x10 [ 273.401728][ T5948] ret_from_fork_asm+0x1a/0x30 [ 273.406832][ T5948] [ 273.410197][ T5948] Kernel Offset: disabled [ 273.414535][ T5948] Rebooting in 86400 seconds..