last executing test programs: 10.341259359s ago: executing program 1 (id=9037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000004000000090000000000000032cfe772592003cff1f4a8508b05f650516364e9a7000b45c435b6cf88038acddffbc002e85a343a5024ee2cf1b4efd9328bfcd4e56708fe56d0790e592120a054b68937576f9234c0e84800c1dc863c371c381b727ccd85ad418678305e33eae0d061651511c1ab8dfebac37f017b0b0eb668dbc0068ace7775f83609df0244f6453c486f949f12a0fa025389d10733065838a3a0fe06683be60cac807a134e65a40f89b6ecd2605329b0d52453eb00e7dd12687ffe802199f6d775bcea070737d74a5b0cbdb8", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ppoll(&(0x7f0000000ac0)=[{r1, 0x200}], 0x1, &(0x7f0000000b00), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/21], 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000003680)=[{&(0x7f0000001400)="eb", 0x1}], 0x2000000000000138, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000380), &(0x7f0000000340)=r3}, 0x87) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000540)="80fd02000001", 0x6}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x60001}, 0x8) shutdown(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00399bf1", @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf25030000001c000180060005004e210000060001000200000008000300ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private1, 0x0}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002bbd7000fc06df25020000000800020008000a00000008000700", @ANYRES32=r8, @ANYBLOB="0800060002000000"], 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x10) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000340)}, 0x20) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e24, 0x3c11b116, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @loopback, 0x83}, 0xffffffffffffffff, {[0x1, 0x401, 0x1000, 0x2, 0x8, 0x10000, 0x6, 0x1]}}, 0x5c) r11 = socket(0x22, 0x3, 0xda) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000240), 0x3) 9.122949419s ago: executing program 1 (id=9047): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x20000890) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8.990766535s ago: executing program 1 (id=9050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="de", 0x1, 0x80, &(0x7f0000000140)={0xa, 0x4e21, 0x2400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c0006ee060000000345c3c4ced27c3f7824ad46535c37e4ca0e8a4339f600000008000500ffffffffcb"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000080)='\xba\x00', 0x2000, &(0x7f00000000c0)={@align=0xffffffff, {0x8000, 0x100, 0x7, 0x7fff}}, 0xf5f, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x2}, {[0x4, 0x9, 0x8, 0x4]}, 0x1, 0xec, &(0x7f0000000300)=""/236}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x37, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0xfff, 0x400, 0x5, 0x7, 0x0, 0x5, 0x0, 0x200, 0x1000}}}}]}, 0x58}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000800) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010080fffbff000000048005000300010000000500030080f2000005000300020000000800010003004000000000000000000000000000000000e2e529fbfb2c1ce092935fb9c0c5ecd2e19e6abb7ba8cdd77d6fb7b04fdf9d03b9d4d729aeed8842db28847cbc408dafc1a8bdd5abb633169f8d9379e6db89ac842f11b622eb9d1fe6be3e322a0ed139ec8c8619c84ba0a6ec2ec34e4a845d73d3e50600be68b5b3a23d780416a07159e2f41c29ba499f56e5fbe36ec90e769c25b77f257948786b8d976ad8a5d90023f313febb1ff2cb1a4d51003b1454"], 0x40}}, 0x4080) 8.747266852s ago: executing program 1 (id=9052): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000", 0x3) splice(r5, 0x0, r4, 0x0, 0x1100000000f336, 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d411"], 0x340a) 8.405954311s ago: executing program 1 (id=9054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0xcc9, 0x6fe, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r8, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r11, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r12, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee00, r14}}}, @cred={{0x1c, 0x1, 0x2, {r13}}}], 0x40, 0x4}}], 0x1, 0x0) sendmsg$netlink(r3, &(0x7f00000004c0)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200), 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r0, r6, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r14}}}], 0x70, 0x20000000}, 0x40) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r15, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00010000100001000000000000000000640101020000000000000000000000080000000000000000000000000000000000000000fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000001000000000020000000000000000000000000000000000000000000000000000000000000100008000000000feffffff0000000000000020fdffffff01000000020002063000000000000000080016"], 0x100}}, 0x20004000) 7.86666237s ago: executing program 1 (id=9058): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0xca35, 0x9, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x68, 0x0, 0x7, 0x0, 0x0, @local, @loopback, {[@rr={0x7, 0xf, 0x2c, [@broadcast, @rand_addr=0x64010102, @multicast1]}, @end]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f00000003c0)='\x11*-b\x00', 0x305342, &(0x7f0000000400)={@_ha_fsid={[0xd82, 0x7]}, {0x2f, 0x9, 0x4, 0x6}}, 0x1000, &(0x7f0000000440), &(0x7f0000000480)=0x5}, {[0x4, 0x5, 0x281, 0xf]}, 0xffffffc0, 0x41, &(0x7f00000004c0)=""/65}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@dev}]}]}}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r5, &(0x7f0000000940)="196e992f957e69601587bc7d7f59df4ac6283462e3af38cdc07d2646043f50740cc55f2880c3a423a19e870ad45dc13b3fee7bf28af43bccf2c690da0e", &(0x7f0000000980)=""/135, 0x4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000900)={0x0, 0x9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f0000000180)=@raw=[@ldst={0x3, 0x1, 0x6, 0x9, 0x12, 0xffffffffffffffff, 0x10}, @ldst={0x1, 0x2, 0x2, 0x7, 0x7, 0x1}, @generic={0x3, 0x1, 0x2, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00', 0x80000001, 0xa3, &(0x7f0000000240)=""/163, 0x41000, 0x1, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r3, r5, r6, 0x1], &(0x7f00000007c0)=[{0x1, 0x4, 0x4}, {0x2, 0x4, 0x1, 0x5}, {0x4, 0x1, 0xf, 0x5}, {0x4, 0x2, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x3}], 0x10, 0x7}, 0x94) 1.726954429s ago: executing program 2 (id=9111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000da2da579d3b1ba94702de78a6a6d6f707a81ba0d3e9e42ed8af551241000010000000000000000000200000a20000000020a05000000000000000000000000292600010073797a3010000000280000000e0a01010000000000000000010000030910810073797a300000000020000000080a01080000000000000000030000010900010073797a3000000000a930f63f0fb0c62525dad8"], 0x88}, 0x1, 0x0, 0x0, 0x2040}, 0x4000082) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000da2da579d3b1ba94702de78a6a6d6f707a81ba0d3e9e42ed8af551241000010000000000000000000200000a20000000020a05000000000000000000000000292600010073797a3010000000280000000e0a01010000000000000000010000030910810073797a300000000020000000080a01080000000000000000030000010900010073797a3000000000a930f63f0fb0c62525dad8"], 0x88}, 0x1, 0x0, 0x0, 0x2040}, 0x4000082) (async) 1.681528372s ago: executing program 2 (id=9112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r4 = socket$inet(0x2, 0x5, 0xa) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000580)=0x8, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x3, 0x4, 0x2, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x61, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x100, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r5, r7, r9, r10], &(0x7f0000000480)=[{0x4, 0x4, 0xf, 0xb}, {0x1, 0x3, 0x5, 0xc}, {0x3, 0x5, 0xb, 0xc}, {0x0, 0x1, 0x5, 0x8}], 0x10, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x30}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x48}}, 0x20000044) 1.675653585s ago: executing program 0 (id=9113): syz_emit_ethernet(0xaf, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x79, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0x1, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x5, 0x1, "fe906d26efe393"}]}}}}}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x4, {{0xa, 0x4e22, 0xfffffff9, @local, 0x2}}}, 0x88) syz_emit_ethernet(0xaf, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x79, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0x1, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x5, 0x1, "fe906d26efe393"}]}}}}}}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x4, {{0xa, 0x4e22, 0xfffffff9, @local, 0x2}}}, 0x88) (async) 1.641767105s ago: executing program 3 (id=9114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r0, 0xe3036000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) (async) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffe00001}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) (async) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x8050, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000001c0)=0x3, 0x4) (async) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) close(0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@polexpire={0xf4, 0x1b, 0x20, 0x70bd2a, 0x25dfdbff, {{{@in=@multicast1, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e20, 0xf9f, 0xa, 0x0, 0x20, 0x88, r5}, {0x0, 0x625, 0x8, 0x8, 0x3, 0xc0, 0x9, 0x7}, {0xffff, 0x8, 0x80, 0x9}, 0x5, 0x6e6bba, 0x0, 0x1, 0x3, 0x1}, 0x8}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in6=@mcast1, 0x0, 0x9f, 0x2}}, @mark={0xc, 0x15, {0x350759, 0x6}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000068b4378988ce43b4c67b3e4c4032c447add6a69455d311b03eda5852340c54cd52c6c1f3e8ad3584000d79f5416057917845bc070bf3fd979a8d5321e7d9206a7e9f5e5e725c5c641df01518c9f2493093fc098fb2115bd29af5ca8b17c1101dc00d1664cb9725e3b7909358adb3bc82360c4b3026a23c2390bedd3c4203efdf00ba1949f88432206c0fdf7ed8eff82538c34e8e4375cff9ebfdf9d72662e6b53311f819e8059d108d8205a0d98338625801507e0fb1047b906b88972c9529861081406a679c03cc853886b30f9224ac8ac667a8936daaa6d1f0b91ca07abed03de00694e665b1a4b64a2990651d0009e40cde0ef8a3018b2fc7d8937ff89d9ab058a13cd5e332f69e1c7aea96ad60f8ba1da134ca62fa5ac3448db9717c49cb83fd0ac876b6536bb1b87b5aedb7ed75256216e68eab08c7f93cdf4d8d733ef937304f1bda5dacdda5c5f6423809044bbb515a75", @ANYRES16=r10, @ANYBLOB="090026bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4049}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.510321378s ago: executing program 0 (id=9116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x1d, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1.318199817s ago: executing program 2 (id=9118): socket(0x200000000000011, 0x4, 0xd) (async) r0 = socket(0x200000000000011, 0x4, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.317965542s ago: executing program 3 (id=9119): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001480)={0x0, 0x400, 0xffffffff80000001, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001b80)={r1, 0x4, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 1.238964461s ago: executing program 4 (id=9120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}, 0x1563}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x73}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0xfffffffffffffffd, 0x40000}, 0x0) 1.214312602s ago: executing program 3 (id=9121): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0x5e, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc810}, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x40040) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0) (async) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000200), &(0x7f00000002c0)=0x8) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x65, 0x10}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 1.086833059s ago: executing program 4 (id=9122): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x290, 0x498, 0x290, 0x3a8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x101}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 1.009983751s ago: executing program 4 (id=9123): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/48}, 0x20) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r7, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x4b) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private=0xa010101, @in6=@local, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x4, r3}, {0x9, 0x7, 0x0, 0x0, 0x1939, 0xffff000000000000, 0x4, 0x10}, {0x7, 0x8, 0x6, 0x9}, 0x5, 0x6e6bb0, 0x2, 0x0, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3, 0x0, 0xff, 0x2, 0x5, 0x10001}}, 0xe8) 836.119081ms ago: executing program 2 (id=9124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x1f4, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x1e0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xdd}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xfffe}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000054}, 0x8080) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000240), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0x12}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r7, 0x2f, 0x6, 0x7, 0x5, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7800, 0x9}}) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000100)=0xd44, 0x4) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40312}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) r10 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x20040004) unshare(0x2020600) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000080)={0x88, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x4, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x6}, 0x94) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r12, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x300, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x0) 766.839257ms ago: executing program 3 (id=9125): r0 = socket$inet6(0xa, 0x4, 0x8001) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="a80002803800"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x8, r3, 0x9}, 0xc) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="187fb764adcfaeaf530e3b870200000000000000000000a061055037cbf64a", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000080)=0x84, 0x4) (async) r6 = socket(0x1e, 0xa, 0x0) connect$inet(r6, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000007a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) 756.158562ms ago: executing program 0 (id=9126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x4080) (fail_nth: 2) 680.522005ms ago: executing program 4 (id=9127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, 0x0, 0x8000000) socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) unshare(0x24060400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x80000000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r4, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x4080) 657.58066ms ago: executing program 0 (id=9128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@local, @initdev, 0x0}, &(0x7f0000000080)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x800, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x2efc553572e59a5}, 0x20004098) 426.903822ms ago: executing program 3 (id=9129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) 425.9638ms ago: executing program 0 (id=9130): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r3, 0x0, &(0x7f0000000080)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000002c0)={{r1, &(0x7f0000000040)='[$/(-*.\x95!\x00', 0xa0200, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x6]}, {0x1, 0x8, 0x1ff}}, 0x2b7d00, &(0x7f00000000c0), &(0x7f0000000140)=0x9}, {[0x2, 0x0, 0xfffffc01, 0x8]}, 0x7, 0xa9, &(0x7f0000000200)=""/169}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x170, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1e8, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @local, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x80000001, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa11}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xebe0ea6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x22044000}, 0x4004800) 425.460217ms ago: executing program 2 (id=9131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x4080) 318.510035ms ago: executing program 3 (id=9132): r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000000)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)="ce675ec9e897af697f038a599c1d1f48099525424c271186d08f87f9186d7b2b1a1164e2613808edc5671a519a1c72c6962006fa3110af929ab58cc068e63de90845af2f50ea37add7d3ed4b3cfcb116", 0x50}, {&(0x7f0000000180)="3eff14bc4e767dd032e8f5f2c94ae35a059ceff57a27a5b111b997faddb04f5cede963537d0fdcac992e6793f5640cf3f7b658b75ecdc4000ab7609d683dc14d4aa97090b48f7c4ee6def236419cbe272d1783079e09b8eee2c34333052922f0e0564fa6886de270c7558080ed56a6d830a2607b4950", 0x76}, {&(0x7f00000002c0)="34821c28df9af411fc95cb822e516410dfdff7cf912e869b9f11d41c7286620321625bbd1c6cc5097f5269252d975401d43a6ce8f07621ffb082a8cf3abda3cb192ed400036c3af0b54a76d949b17a73748b5afca23f4103f75ffd2aa8110d48f7d3cd2e797f33dc88f0976fd778a88f65a957f37ef83abc3ba9d96edf30b0f4b8e241077110a39bb37607ef4b0c3e2031", 0x91}, {&(0x7f0000000380)="abf9975bfe3d7d4bb7639a23ec4e1ad0868555b15cbf4146e6b51c141d816a5b1948b5a0f9bc616700139d1f5d3e54ff004aa642355805aad892250e2521f838903ecbae756939f46de31acce18d7c6bd5b36e24491f0f550b8f849319bff3925a9f8e4083d0eefe39badbead022a6d31ba7286b2eb5aa2f922ed6f4958ff3fd888a91b3863a08120ce3534196e8562a187121b44eaa0761f0fdf82144fbbdd7d2343b63077b32", 0xa7}, {&(0x7f0000000440)}, {&(0x7f0000000480)="195fc3138aa8a73780a46371d6d0d9029e4aa65105bf1119ec47b17077a88c0851fee09de21248501d4321a590baf7f2492ab0534a324ed8a112bfae8eb9e8e88f3ef28704a0ae8cd49f6e298af0ce70cc32106ed0d98b3363e086f3d566da3e5142fa3dd03be48310c44edb3e5c", 0x6e}, {&(0x7f00000006c0)="7934e2eb67b7ea65ac06ae0006b7319048017c2043e6b1a94ffc1c8dd305059a275d44b079f62c6c05dc7ec6dd610ad7370620077dcbc231b8af723e1503c1d357c74f2fb90b133e9937fbbca03e2a139ca3e1b78c77a4d64efddae5530a5164170ae00e9edfc4e6", 0x68}], 0x7, &(0x7f0000005e80)=[{0x10c0, 0x10f, 0x1, "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"/4266}, {0xe0, 0x110, 0x9, "2535d64d83632698396dff52cdc1020da23cf5169185cf48661b538d36badaa13427ce5fec85b3f200ce5feb06fba40d860d46bc9b5366ef9d93219bb0d21f5b0ddfcf10e8a57004a1a48df1c9865947fe12d6e9770bf5033eb618ea85d1418f60a806a2003bd4c11c02f7627a03157bdd61db7b296d4e0a1a234504bb29dd33e4639a4548755b85de09ca4a8054537aced9ed6a0df670b3e388138d4896b4e2ffbc0b52974467be2532e586d006def1750d82ac1b6340427c0508d0f6816a8243dda106dbb42dda92617ac83d"}, {0x58, 0x113, 0x6, "8aaa410afccd603e290778e752c5ba2acdfa903ed675725eaea922fcedee7d7f31e1fa5eefe0e62967a882e85293b845dd71284f3890a7bcd615501651d1b354f02a"}, {0xe0, 0x29, 0x6, "fd6c03a31c862f2ffa8cee9d4c15ec8afe9072fd8e05d7d150fae81168ac5dfe8431221c51e55585547d2beeba0c1e3f9c16dde050bae125f0e4dce857f02a64c3b3428d7010889e6d93d9c575e2875cba4b32e074d604d44e775d6e35f813d64dfd9b0b25bcb5f14bd62be87f67d5d95d479fc41782c172e4a263b3027a907b1c34e4dc3d150afedecaecee984d96e67dd68faee76e8f5a2005f85d4ffdd23ba9b7ceb2f352f1572a691b7c910a9abe34f744ad0969b12a5e7ffd896f75d2e45efe9209fbf04e1bb48ba59d427271"}, {0x108, 0x112, 0x74da, "03367d14575dfe4d0cc7f1845bbe8a51640b6a01a2d9c449bbe1c906db8aa945f7df3b006412a9c5393da4dcc22cf1476542281ebcd666aad5f934a5b80cc9960800c17a6ef91eae1065d6526f4cd9a68ec4ff3de15633164cb7786f595df813f0e36cc2003d751abdba33f2b1e6e98a94e640f549838bf38b6416d4276e7bf99cb1e74840fe24e04236f0db491c6bf5423ecf71a1638aa8b8de51a11ef686f55e36e5c103b7a466bb10b23b6bfbabb1145179f22729e81bf42ef584b00c7b4e415438e7b8aa50cbea66f2d4241b733ab0d84d651705d8cd1697f51354464f61f4a5df06a952c98b1334fcabb2d3775849623cf155"}, {0x98, 0x1, 0x1, "9dfe7dc34f8d7a36d4c3ea64fe0fe328720286e39977979f7a531497e805c541cd2e061146b6cfb457ab35aa06f73669e70cd8b3e84fa69c5407443a713c0055f8bf4d94eed8e6a3613b14d0a91817bb73b904edb0f8ee2b00a96f55b73999b38129771692f62634a43e9bef081716340e6407343d75552ea0074ee5283f8b9c054563e3adf9ec"}, {0xa8, 0x119, 0x1, "e627b077ba3e8c2ab81487ebc45b85185241c30094beb46ffd3d32cfcc0cb093149ed3fc9fe4075e47e100971753539cdc79142d35b499f9a4929b895d75815ed69d0e8319991f27d0beb5693292506c4d87264a00222a948207e3cc3e3cc5b636ce0326a66e694c4d85189e0f66d5f2e9c57f70d632ac5bf882e2a75039d8d534e5fb99df3c61a5641d0a69f76c322644"}, {0x50, 0x10c, 0x3, "010382564c68ed3a098a63d91e08d6932a0481a6deb9f137b17b59a28da322f9c517da42c8697896a8668877a83e691cd5e0150cbfaa3618450df63b37c89b"}], 0x1570}, 0x40041) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000018c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d67c5aaf41000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x1003, &(0x7f00000038c0)=""/4099, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000002460009d2d65acc204b6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002ec0)={0xffffffffffffffff, 0x20, &(0x7f0000002e80)={&(0x7f0000001e40)=""/31, 0x1f, 0x0, &(0x7f0000001e80)=""/4096, 0x1000}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002f80)={{r1, 0xffffffffffffffff}, &(0x7f0000002f00), &(0x7f0000002f40)='%-010d \x00'}, 0x20) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0x12) (async) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000003140)={{r0, &(0x7f0000002fc0)='([\x00', 0xc0000, &(0x7f0000003000)={@align=0xaba, {0x3, 0x3, 0x0, 0x4}}, 0x5, &(0x7f0000003040)={@_ha_fsid}, &(0x7f0000003080)=0x3}, {[0x1000, 0x5, 0x2, 0x8000]}, 0x7, 0x68, &(0x7f00000030c0)=""/104}) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r13, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r13, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r14, 0x0, 0xf3a, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x11, 0xe, &(0x7f0000001c40)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0xbe, &(0x7f0000001d00)=""/190, 0x40f00, 0x2, '\x00', r7, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001e00)={0x1, 0x0, 0x2, 0xdd7}, 0x10, r9, r1, 0x0, &(0x7f00000031c0)=[r10, r11, r12, r14], 0x0, 0x10, 0x4}, 0x94) 294.453271ms ago: executing program 4 (id=9133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd987b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095dff121cd761a6ee2039c581e2357d8a257fa5df147732e6f76fe4811bda27d9ad66226559a2c179bd9f9e3bc9dbcd753b89ca3567ae8de9041ddb9fba2408ec1ccd12b933810558204cedec3eedd523f1d25f464bf861a5e42ed27652c1bb7573a465bad4f99e20c26b85ce14cda4bae14549b7110e378086fc3106460eec84d4c74248184c339666afae177bc5f7e10b9bc972361108d3edbfa92317ac5d719f6f2c6e6fac92656dbf0c16c087b1ecf526ede15"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001006cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d300000000000001800168014000180100006"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) pread64(r4, &(0x7f00000008c0)=""/233, 0xe9, 0x2) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000300)=""/224, 0x63}], 0x2}, 0x2}], 0x1, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x28, 0x40, 0x107, 0x70bd2d, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="84000000c5380384fbce401d650848122e43a754f04d49468b1423460b2972569f4212768f0afc7e26e0fefed8f401691bf8ff6f462c0f29778daed76305cbc70fecf916494ff7d1d1a74194c3a097f34a07731a186bcab79b54a895e4e3b74fa7533ca836a33e4048bce972379c31ba81f146c3827c4d7abc3477823b92caeb0c7bb3f7cb87ede089f41ec3fe81612492761da8039812228509122164d61dd91237402bdf18fdb4e293ba569efb70655fd94f1c25f2ccc3a1680df960850753f4ddacef78", @ANYRES16=r8, @ANYBLOB="000027bd7000fcdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async, rerun: 32) sendmmsg(r6, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, &(0x7f0000000800)=ANY=[], 0x128}}], 0x1, 0x4000045) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) 259.333563ms ago: executing program 2 (id=9134): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0xf, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xa, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000400)={&(0x7f00000002c0)=0x4, 0x0, &(0x7f0000000680)=[{}, {}, {}], &(0x7f00000003c0)}) unshare(0x6a040000) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockname$packet(r7, &(0x7f0000000440), 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) 158.045439ms ago: executing program 0 (id=9135): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c00028008"], 0x38}, 0x1, 0x0, 0x0, 0x22004044}, 0x4048080) r8 = accept$inet(r7, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'vcan0\x00', 0x1}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$unix(r10, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6", 0x40}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x3, 0x0, 0xfffe, 0x0, {0xa, 0x4e20, 0x0, @local}}}, 0x32) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="8ec91c4149894cd35f108d0826ee9e7e363fc9bc57808a1a6f7d1466eb82540dbc289d4fe9e28112e3db19d028e29df296df2069e35cd8a1795edeb95e797d5ce24cce418bdf5754ee6b112ced364de1e22eb7ea89e2b64ee68ab149afd6e653b3c6cf76e7f91e767dea82415ebdb114f56902aa00136fa07aaac9562340cb274c94934dcd92906c8d5db6f17e1d348879b3896018ef229bf07caaacc2309542e2d65ebee2483eaddd77e76b9c46b489dbde6b2e1fda31d555b491af10fefd6a78d09d35a6ab936b47fbafb3f2c6611c1479", @ANYRES16=r13, @ANYBLOB="08002dbd7000fddbdf2506000000050006007f00000006000e000800000006001d000400000006001b004e20000014000800766972745f77696669300000000000000500060001000000140008006772657461703000000000000000000008000a0003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4812) 0s ago: executing program 4 (id=9136): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r0, 0x29, 0x1f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000001c0)=""/250, &(0x7f0000000040)=0xfa) r6 = socket$netlink(0x10, 0x3, 0x3) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r7 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendto$l2tp(r7, &(0x7f0000000100)="2f92b5028696816a15e4e3", 0xb, 0x41, 0x0, 0x0) kernel console output (not intermixed with test programs): ] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1172.237798][ T6207] wg1 speed is unknown, defaulting to 1000 [ 1172.333264][T15518] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1172.363316][ T6218] IPv6: NLM_F_CREATE should be specified when creating new route [ 1172.393774][ T6219] IPv6: NLM_F_CREATE should be specified when creating new route [ 1172.396731][ T6218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1172.407241][ T6224] syzkaller1: entered promiscuous mode [ 1172.408852][ T6218] IPv6: NLM_F_CREATE should be set when creating new route [ 1172.421614][ T6218] IPv6: NLM_F_CREATE should be set when creating new route [ 1172.428823][ T6218] IPv6: NLM_F_CREATE should be set when creating new route [ 1172.436197][ T6219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1172.444525][ T6224] syzkaller1: entered allmulticast mode [ 1172.482697][ T6224] netlink: 324 bytes leftover after parsing attributes in process `syz.3.8038'. [ 1172.656179][ T6231] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8039'. [ 1172.837845][ T6240] xt_hashlimit: max too large, truncated to 1048576 [ 1172.838397][ T6241] xt_hashlimit: max too large, truncated to 1048576 [ 1173.008448][ T6247] xt_nfacct: accounting object `syz0' does not exist [ 1173.035993][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.058097][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.084660][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.233448][ T6231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1173.259348][ T6231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1173.460236][T31199] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1173.562930][ T6256] lo speed is unknown, defaulting to 1000 [ 1173.602324][ T6256] wg1 speed is unknown, defaulting to 1000 [ 1173.863500][ T6277] batman_adv: batadv0: Removing interface: macvtap1 [ 1174.117348][ T6283] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1174.560347][T31199] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1174.584188][ T6305] validate_nla: 130 callbacks suppressed [ 1174.584210][ T6305] netlink: 'syz.2.8064': attribute type 5 has an invalid length. [ 1174.667255][ T6306] bond7: entered promiscuous mode [ 1174.672985][ T6306] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1174.789557][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1174.919148][ T6310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1174.947823][ T6310] bond8: entered promiscuous mode [ 1174.969600][ T6310] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1174.989571][T31194] net_ratelimit: 17 callbacks suppressed [ 1174.989593][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1175.119942][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1175.156479][ T6330] atomic_op ffff888035f47998 conn xmit_atomic 0000000000000000 [ 1175.166685][ T6332] atomic_op ffff888035f43198 conn xmit_atomic 0000000000000000 [ 1175.249925][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1175.344171][ T6341] __nla_validate_parse: 5 callbacks suppressed [ 1175.344192][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8074'. [ 1175.700075][T31192] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1175.727056][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8075'. [ 1175.740638][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8075'. [ 1176.078202][ T6339] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1176.120387][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1176.161418][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1176.311590][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1176.430606][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1176.560195][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1176.689597][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1176.723687][ T6380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8081'. [ 1176.810671][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1176.818895][T31192] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1176.846958][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8084'. [ 1176.887896][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8081'. [ 1177.048889][ T6395] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.8085'. [ 1177.061155][ T6395] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.8085'. [ 1177.197446][ T6392] udevd[6392]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1177.350299][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1177.380061][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8087'. [ 1177.402285][ T6408] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1177.787924][ T6395] ipvlan2: entered promiscuous mode [ 1177.960728][T31191] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1177.989349][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.998507][ C0] bridge0: topology change detected, propagating [ 1178.005849][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.013146][ C0] bridge0: topology change detected, propagating [ 1178.155799][ T6431] pimreg: entered allmulticast mode [ 1178.163409][ T6431] lo: left allmulticast mode [ 1178.216410][ T6430] pimreg: left allmulticast mode [ 1178.344673][ T6439] netlink: 'syz.4.8099': attribute type 9 has an invalid length. [ 1179.080665][T31185] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1179.156519][ T6481] lo speed is unknown, defaulting to 1000 [ 1179.223189][ T6481] wg1 speed is unknown, defaulting to 1000 [ 1179.468240][ T6507] xt_TCPMSS: Only works on TCP SYN packets [ 1179.499908][T31194] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 1180.010271][T31191] net_ratelimit: 19 callbacks suppressed [ 1180.010295][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1180.130307][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1180.167490][ T6496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1180.189620][T31191] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1180.410040][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1180.562332][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1180.701330][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1180.732310][ T6547] __nla_validate_parse: 14 callbacks suppressed [ 1180.732331][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8129'. [ 1180.829373][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1180.943699][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1180.953074][ T6557] netlink: 'syz.3.8131': attribute type 4 has an invalid length. [ 1180.965400][ T6557] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1181.079483][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1181.200402][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1181.309523][T31199] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1181.319492][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1181.439600][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1181.616418][ T6589] netlink: 276 bytes leftover after parsing attributes in process `syz.2.8137'. [ 1181.656471][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8137'. [ 1181.894013][ T6605] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1181.904785][ T6598] lo speed is unknown, defaulting to 1000 [ 1181.943027][ T6598] wg1 speed is unknown, defaulting to 1000 [ 1182.226580][ T6611] bridge0: port 2(vlan0) entered blocking state [ 1182.244878][ T6611] bridge0: port 2(vlan0) entered disabled state [ 1182.257887][ T6611] vlan0: entered allmulticast mode [ 1182.270292][ T6611] geneve0: entered allmulticast mode [ 1182.290291][ T6611] vlan0: entered promiscuous mode [ 1182.303162][ T6611] geneve0: entered promiscuous mode [ 1182.774014][T31185] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1182.904433][ T6612] tipc: Resetting bearer [ 1183.104499][ T6631] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1183.279100][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1183.337276][ T6637] bond6: entered allmulticast mode [ 1183.393596][ T6633] lo speed is unknown, defaulting to 1000 [ 1183.427690][ T6643] vxcan3: entered promiscuous mode [ 1183.439072][ T6643] vxcan3: entered allmulticast mode [ 1183.447980][ T6643] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1183.460788][ T6643] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1183.496785][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.602685][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.616843][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.775205][ T6645] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 1183.783721][ T6645] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 1183.792678][ T6645] geneve3: left promiscuous mode [ 1183.801728][ T6645] bond6: left promiscuous mode [ 1183.806701][ T6645] bond6: left allmulticast mode [ 1183.817759][ T6645] ip6tnl2: left allmulticast mode [ 1183.834921][ T6633] wg1 speed is unknown, defaulting to 1000 [ 1183.835437][ T6638] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1183.878941][T15518] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.903104][T15518] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1183.925850][T15518] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.939468][T15518] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1183.994808][T15518] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.015417][T15518] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1184.038978][T15518] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.069561][T15518] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1184.267121][ T6671] netlink: 'syz.4.8156': attribute type 10 has an invalid length. [ 1184.389702][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1184.637251][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8160'. [ 1185.032331][T15518] net_ratelimit: 14 callbacks suppressed [ 1185.032356][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1185.169727][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1185.203516][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1185.382041][ T6700] vlan2: entered allmulticast mode [ 1185.399123][ T6700] bridge6: entered allmulticast mode [ 1185.546680][ T6698] bridge6: port 1(bond7) entered blocking state [ 1185.554128][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8165'. [ 1185.564185][ T6698] bridge6: port 1(bond7) entered disabled state [ 1185.570947][ T6698] bond7: entered allmulticast mode [ 1185.579963][ T6698] bond7: entered promiscuous mode [ 1185.660001][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1185.803419][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1185.917540][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1185.934068][ T6701] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1185.993862][ T6733] tipc: Failed to remove unknown binding: 66,0,0/985400555:1662780932/1662780934 [ 1186.046492][ T6733] tipc: Failed to remove unknown binding: 66,0,0/985400555:1662780932/1662780933 [ 1186.093159][ T6736] tipc: Failed to remove unknown binding: 66,0,0/985400555:1662780932/1662780934 [ 1186.102752][ T6736] tipc: Failed to remove unknown binding: 66,0,0/985400555:1662780932/1662780933 [ 1186.132063][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8172'. [ 1186.132186][ T6722] bond10: option ad_actor_sys_prio: invalid value (0) [ 1186.149869][ T6722] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1186.171850][ T6722] bond10 (unregistering): Released all slaves [ 1186.209177][ T6740] netlink: 'syz.0.8171': attribute type 39 has an invalid length. [ 1186.260117][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1186.369897][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1186.479834][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1186.544407][ T6751] netlink: 'syz.4.8178': attribute type 15 has an invalid length. [ 1186.572470][ T6751] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8178'. [ 1186.582482][ T6751] netlink: 'syz.4.8178': attribute type 1 has an invalid length. [ 1186.591199][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8178'. [ 1186.600494][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1186.720750][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1186.860944][ T6766] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 1186.885829][ T6766] bond10 (unregistering): Released all slaves [ 1187.240258][ T6788] tipc: Resetting bearer [ 1188.476924][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1188.515283][ T6833] netlink: 580 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1188.544437][ T6833] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1188.551775][ T6836] lo speed is unknown, defaulting to 1000 [ 1188.633199][ T6836] wg1 speed is unknown, defaulting to 1000 [ 1189.148910][ T6872] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 1189.222571][ T6878] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8220'. [ 1189.283992][ T6878] team0: Port device dummy0 removed [ 1189.690414][ T6897] netlink: 'syz.3.8226': attribute type 1 has an invalid length. [ 1189.768531][ T6899] geneve2: entered promiscuous mode [ 1189.892756][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8230'. [ 1189.947762][ T6897] bond8: entered promiscuous mode [ 1189.958503][ T6897] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1189.973780][ T6920] tipc: Failed to remove unknown binding: 66,0,0/3677955567:1693076600/1693076602 [ 1189.985768][ T6920] tipc: Failed to remove unknown binding: 66,0,0/3677955567:1693076600/1693076601 [ 1189.998250][ T6900] macvtap0: entered allmulticast mode [ 1190.004377][T31185] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.013186][T31185] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.033685][ T6906] bond8: (slave bridge7): making interface the new active one [ 1190.042661][ T6906] bridge7: entered promiscuous mode [ 1190.051468][ T6906] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 1190.061735][ T6912] macsec0: entered promiscuous mode [ 1190.068598][ T6912] macsec0: entered allmulticast mode [ 1190.110623][ T6914] bond7: option ad_actor_sys_prio: invalid value (0) [ 1190.124876][ T6914] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1190.135949][ T6914] bond7 (unregistering): Released all slaves [ 1190.156157][ T6924] netlink: 397 bytes leftover after parsing attributes in process `syz.1.8233'. [ 1190.179688][T31185] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.199441][T31185] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.249829][T31191] net_ratelimit: 22 callbacks suppressed [ 1190.249852][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1190.379982][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1190.499509][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1190.619869][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1190.741511][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1190.879955][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1190.906176][ T6964] netlink: 'syz.3.8247': attribute type 9 has an invalid length. [ 1190.954890][ T6968] netlink: 'syz.4.8249': attribute type 41 has an invalid length. [ 1190.981258][ T6972] netlink: 'syz.0.8246': attribute type 83 has an invalid length. [ 1191.030122][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1191.104862][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.166049][ T6979] __nla_validate_parse: 5 callbacks suppressed [ 1191.166070][ T6979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1191.296485][ T6978] xt_hashlimit: max too large, truncated to 1048576 [ 1191.314351][ T6978] xt_ecn: cannot match TCP bits for non-tcp packets [ 1191.357977][ T6982] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1191.434874][ T6983] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8252'. [ 1191.489470][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1191.610094][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1192.229203][ T7022] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1192.405950][ T7026] netlink: 'syz.0.8261': attribute type 2 has an invalid length. [ 1192.565344][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1192.590998][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1192.622356][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1192.667185][ T7030] vlan4: entered allmulticast mode [ 1192.676381][ T7030] bond0: entered allmulticast mode [ 1192.682499][ T7030] bond_slave_0: entered allmulticast mode [ 1192.688596][ T7030] bond_slave_1: entered allmulticast mode [ 1192.994138][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8265'. [ 1193.375669][ T7071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1193.568640][ T7084] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8277'. [ 1193.715379][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8280'. [ 1193.885576][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8279'. [ 1193.976301][ T7088] : entered promiscuous mode [ 1194.014820][ T7096] lo speed is unknown, defaulting to 1000 [ 1194.052752][ T7096] wg1 speed is unknown, defaulting to 1000 [ 1194.797698][ T7134] netlink: 'syz.0.8294': attribute type 7 has an invalid length. [ 1194.840393][ T7134] netlink: 'syz.0.8294': attribute type 8 has an invalid length. [ 1194.866311][ T7110] netlink: 'syz.1.8286': attribute type 1 has an invalid length. [ 1194.944178][ T7110] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1195.030057][ T7139] bond10: (slave veth15): Enslaving as an active interface with a down link [ 1195.145803][ T7110] bond10: (slave veth17): Enslaving as an active interface with a down link [ 1195.289896][T15518] net_ratelimit: 25 callbacks suppressed [ 1195.289921][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1195.419883][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1195.601484][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1195.720601][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1195.852307][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1195.962332][ T7190] vlan3: entered promiscuous mode [ 1195.967532][ T7190] team0: entered promiscuous mode [ 1196.049562][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1196.179979][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1196.212701][ T7201] lo speed is unknown, defaulting to 1000 [ 1196.255543][ T7201] wg1 speed is unknown, defaulting to 1000 [ 1196.262177][ T6498] IPVS: starting estimator thread 0... [ 1196.321924][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1196.380364][ T7206] IPVS: using max 30 ests per chain, 72000 per kthread [ 1196.439482][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1196.563357][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1196.568287][ T7217] __nla_validate_parse: 7 callbacks suppressed [ 1196.568306][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8316'. [ 1196.656316][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8316'. [ 1196.842642][ T7225] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8320'. [ 1196.934443][ T7232] netlink: 284 bytes leftover after parsing attributes in process `syz.4.8322'. [ 1197.013105][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8323'. [ 1197.041530][ T7237] netlink: 'syz.1.8323': attribute type 17 has an invalid length. [ 1197.254448][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8323'. [ 1197.358151][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8327'. [ 1197.384927][ T7256] netlink: 'syz.3.8327': attribute type 14 has an invalid length. [ 1197.406030][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8327'. [ 1197.461660][ T7260] netlink: 'syz.4.8330': attribute type 2 has an invalid length. [ 1197.481361][ T7260] netlink: 'syz.4.8330': attribute type 1 has an invalid length. [ 1197.584442][ T7263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8331'. [ 1197.895331][ T1642] Bluetooth: hci4: link tx timeout [ 1197.905394][ T1642] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1198.469639][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1198.543921][ T7318] lo speed is unknown, defaulting to 1000 [ 1198.554008][ T7318] wg1 speed is unknown, defaulting to 1000 [ 1198.754125][ T7325] netlink: 'syz.3.8351': attribute type 10 has an invalid length. [ 1198.764318][ T7325] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1198.920286][ T7329] netlink: 'syz.3.8353': attribute type 11 has an invalid length. [ 1198.934495][ T7327] xt_cgroup: invalid path, errno=-2 [ 1199.040651][ T7333] netem: incorrect gi model size [ 1199.048047][ T7333] netem: change failed [ 1199.403596][ T7341] netlink: 'syz.4.8357': attribute type 11 has an invalid length. [ 1199.989418][ T1642] Bluetooth: hci4: command 0x0405 tx timeout [ 1200.319662][T31192] net_ratelimit: 29 callbacks suppressed [ 1200.319686][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1200.345046][ T7389] netlink: 'syz.1.8372': attribute type 4 has an invalid length. [ 1200.459583][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1200.580073][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1200.689946][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1200.822882][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1200.939970][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1201.059833][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1201.136932][ T7405] geneve2: entered promiscuous mode [ 1201.152973][T31191] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1201.181738][T31191] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1201.205959][T31191] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1201.226755][T31191] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1201.260456][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1201.412265][ T7426] netlink: 'syz.4.8382': attribute type 3 has an invalid length. [ 1201.965787][ T7422] lo speed is unknown, defaulting to 1000 [ 1201.972269][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1202.027617][ T7422] lo speed is unknown, defaulting to 1000 [ 1202.053561][ T7422] lo speed is unknown, defaulting to 1000 [ 1202.119858][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1202.176474][ T7446] __nla_validate_parse: 13 callbacks suppressed [ 1202.176496][ T7446] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8386'. [ 1202.425739][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8387'. [ 1202.680350][ T7422] infiniband sqz0: set active [ 1202.685210][ T1017] lo speed is unknown, defaulting to 1000 [ 1202.696670][ T7422] infiniband sqz0: added lo [ 1202.707710][ T7422] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1202.713329][ T7422] infiniband sqz0: Couldn't open port 1 [ 1202.730904][ T7422] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1202.755176][ T7422] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1202.774200][ T7422] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1202.830044][ T7422] RDS/IB: sqz0: added [ 1202.841341][ T7422] smc: adding ib device sqz0 with port count 1 [ 1202.850993][ T7422] smc: ib device sqz0 port 1 has no pnetid [ 1202.871040][ T1017] lo speed is unknown, defaulting to 1000 [ 1202.877641][ T7422] lo speed is unknown, defaulting to 1000 [ 1202.928290][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1202.938466][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1202.948226][ T7487] netlink: 'syz.3.8396': attribute type 12 has an invalid length. [ 1202.964464][ T7487] netlink: 'syz.3.8396': attribute type 11 has an invalid length. [ 1202.972938][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a38c00: rx timeout, send abort [ 1203.403913][ T7422] lo speed is unknown, defaulting to 1000 [ 1203.471989][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8400'. [ 1203.473066][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a38c00: abort rx timeout. Force session deactivation [ 1203.486113][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8400'. [ 1203.595914][ T7509] netlink: 'syz.4.8402': attribute type 2 has an invalid length. [ 1203.614725][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8402'. [ 1203.861826][ T7513] block nbd7: server does not support multiple connections per device. [ 1203.873702][ T7513] block nbd7: shutting down sockets [ 1203.903705][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8407'. [ 1203.951951][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8407'. [ 1204.020447][ T7422] lo speed is unknown, defaulting to 1000 [ 1204.146471][ T7533] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8410'. [ 1204.302350][ T7543] erspan0: entered promiscuous mode [ 1204.339426][ T7543] erspan0: entered allmulticast mode [ 1204.566037][ T7545] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1204.608357][ T7545] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1204.691736][ T7556] geneve4: entered promiscuous mode [ 1204.711448][T31192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.741137][T31192] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.790426][T31192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.824302][ T7422] lo speed is unknown, defaulting to 1000 [ 1204.912096][ T7569] bond7: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1204.962737][ T7569] bond7 (unregistering): Released all slaves [ 1205.042401][T31192] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.162109][ T7578] netlink: 'syz.3.8424': attribute type 1 has an invalid length. [ 1205.369981][T31192] net_ratelimit: 21 callbacks suppressed [ 1205.370006][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1205.496806][ T1642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.512291][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1205.522351][ T1642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1205.541962][ T7422] lo speed is unknown, defaulting to 1000 [ 1205.547893][ T1642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1205.556408][ T1642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1205.568733][ T1642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1205.630017][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1205.740036][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1205.849679][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1205.970069][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1206.109843][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1206.234023][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1206.350591][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1206.365472][ T7422] lo speed is unknown, defaulting to 1000 [ 1206.471201][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1206.634594][ T7587] lo speed is unknown, defaulting to 1000 [ 1206.642504][ T7600] netlink: 'syz.3.8430': attribute type 1 has an invalid length. [ 1206.655151][ T7587] wg1 speed is unknown, defaulting to 1000 [ 1206.721885][ T7600] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1207.104147][ T7622] FAULT_INJECTION: forcing a failure. [ 1207.104147][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.123586][ T7422] lo speed is unknown, defaulting to 1000 [ 1207.131815][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.2.8435 Not tainted syzkaller #0 PREEMPT(full) [ 1207.131853][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.131865][ T7622] Call Trace: [ 1207.131873][ T7622] [ 1207.131883][ T7622] dump_stack_lvl+0xe8/0x150 [ 1207.131915][ T7622] should_fail_ex+0x412/0x560 [ 1207.131946][ T7622] _copy_from_user+0x2d/0xb0 [ 1207.131976][ T7622] ___sys_sendmsg+0x1c6/0x360 [ 1207.132003][ T7622] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.132030][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.132094][ T7622] ? __fget_files+0x2a/0x420 [ 1207.132118][ T7622] ? __fget_files+0x3a0/0x420 [ 1207.132154][ T7622] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1207.132184][ T7622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1207.132220][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 1207.132257][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.132281][ T7622] do_syscall_64+0x15f/0xf80 [ 1207.132305][ T7622] ? trace_irq_disable+0x3b/0x140 [ 1207.132336][ T7622] ? clear_bhb_loop+0x40/0x90 [ 1207.132363][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.132384][ T7622] RIP: 0033:0x7f5e4cb9cdd9 [ 1207.132404][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.132422][ T7622] RSP: 002b:00007f5e4d999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.132446][ T7622] RAX: ffffffffffffffda RBX: 00007f5e4ce15fa0 RCX: 00007f5e4cb9cdd9 [ 1207.132461][ T7622] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1207.132475][ T7622] RBP: 00007f5e4d999090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.132488][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.132501][ T7622] R13: 00007f5e4ce16038 R14: 00007f5e4ce15fa0 R15: 00007ffcc36aa328 [ 1207.132535][ T7622] [ 1207.468954][ T7632] __nla_validate_parse: 7 callbacks suppressed [ 1207.468976][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8438'. [ 1207.589184][ T7636] netlink: 'syz.4.8439': attribute type 6 has an invalid length. [ 1207.597331][ T1642] Bluetooth: hci0: command tx timeout [ 1207.601887][ T7636] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1207.646025][ T7635] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.8439'. [ 1207.726282][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8441'. [ 1207.782147][ T7587] lo speed is unknown, defaulting to 1000 [ 1207.891546][ T7645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8442'. [ 1208.113532][ T7422] lo speed is unknown, defaulting to 1000 [ 1208.768528][ T7422] lo speed is unknown, defaulting to 1000 [ 1208.788538][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8450'. [ 1208.826297][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.834184][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.875954][ T7587] bridge_slave_0: entered allmulticast mode [ 1208.885797][ T7587] bridge_slave_0: entered promiscuous mode [ 1208.896671][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.904171][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.911691][ T7587] bridge_slave_1: entered allmulticast mode [ 1208.920074][ T7587] bridge_slave_1: entered promiscuous mode [ 1209.013607][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.056232][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.168443][ T7587] team0: Port device team_slave_0 added [ 1209.209595][ T7587] team0: Port device team_slave_1 added [ 1209.307997][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.333832][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.429446][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.489668][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.519388][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.586488][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.669483][ T1642] Bluetooth: hci0: command tx timeout [ 1209.726313][ T7587] hsr_slave_0: entered promiscuous mode [ 1209.738601][ T7587] hsr_slave_1: entered promiscuous mode [ 1209.745265][ T7587] debugfs: 'hsr0' already exists in 'hsr' [ 1209.751233][ T7587] Cannot create hsr debugfs directory [ 1210.144436][ T7709] netlink: 'syz.4.8460': attribute type 21 has an invalid length. [ 1210.244180][ T7587] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1210.325817][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8462'. [ 1210.349997][ T7718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8462'. [ 1210.360901][ T7709] netlink: 'syz.4.8460': attribute type 6 has an invalid length. [ 1210.398398][ T7709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1210.434002][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8460'. [ 1210.551313][ T7587] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1210.695901][ T7587] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1210.729498][T31192] net_ratelimit: 32 callbacks suppressed [ 1210.729521][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1210.878856][ T7587] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1210.919122][ T7734] tipc: Enabling of bearer rejected, already enabled [ 1210.969596][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1211.101122][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1211.163872][ T7746] netlink: 'syz.4.8469': attribute type 1 has an invalid length. [ 1211.230936][ T7746] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1211.245023][ T7748] bond0: (slave dummy0): Releasing backup interface [ 1211.272516][ T7748] dummy0: left promiscuous mode [ 1211.279878][ T7748] dummy0: left allmulticast mode [ 1211.307820][ T7748] bond8: (slave dummy0): making interface the new active one [ 1211.330972][ T7748] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1211.368357][ T7746] bond8: (slave dummy0): Releasing active interface [ 1211.450039][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1211.569604][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1211.679618][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1211.749847][ T1642] Bluetooth: hci0: command tx timeout [ 1211.800163][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1211.912448][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1212.039713][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1212.159686][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1213.830325][ T1642] Bluetooth: hci0: command tx timeout [ 1213.846911][ T7735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1213.895146][ T7587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1213.958851][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1213.977322][ T7587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1214.030989][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.042710][ T7587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1214.087893][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.107350][ T7587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1214.163085][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.197036][ T7767] __nla_validate_parse: 4 callbacks suppressed [ 1214.197057][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8475'. [ 1214.261795][ T7767] bond9: entered promiscuous mode [ 1214.267601][ T7767] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1214.529855][ T7776] lo speed is unknown, defaulting to 1000 [ 1214.565591][ T7776] wg1 speed is unknown, defaulting to 1000 [ 1214.605334][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.656467][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.694825][T31194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.702217][T31194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.777751][T31194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.785047][T31194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.974143][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1214.997877][ T7795] x_tables: unsorted entry at hook 3 [ 1215.055560][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1215.389064][ T7807] FAULT_INJECTION: forcing a failure. [ 1215.389064][ T7807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.413666][ T7807] CPU: 1 UID: 0 PID: 7807 Comm: syz.3.8485 Not tainted syzkaller #0 PREEMPT(full) [ 1215.413697][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1215.413709][ T7807] Call Trace: [ 1215.413718][ T7807] [ 1215.413727][ T7807] dump_stack_lvl+0xe8/0x150 [ 1215.413764][ T7807] should_fail_ex+0x412/0x560 [ 1215.413795][ T7807] _copy_from_iter+0x1d3/0x1670 [ 1215.413827][ T7807] ? rcu_is_watching+0x15/0xb0 [ 1215.413860][ T7807] ? __pfx__copy_from_iter+0x10/0x10 [ 1215.413896][ T7807] ? netlink_sendmsg+0x650/0xb40 [ 1215.413932][ T7807] ? skb_put+0x11b/0x210 [ 1215.413962][ T7807] netlink_sendmsg+0x6c0/0xb40 [ 1215.413998][ T7807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.414027][ T7807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1215.414056][ T7807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1215.414089][ T7807] ____sys_sendmsg+0x972/0x9f0 [ 1215.414115][ T7807] ? __might_fault+0xaf/0x130 [ 1215.414150][ T7807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1215.414186][ T7807] ? import_iovec+0x73/0xa0 [ 1215.414218][ T7807] ___sys_sendmsg+0x2a5/0x360 [ 1215.414242][ T7807] ? __lock_acquire+0x6b5/0x2cf0 [ 1215.414270][ T7807] ? __pfx____sys_sendmsg+0x10/0x10 [ 1215.414335][ T7807] ? __fget_files+0x2a/0x420 [ 1215.414359][ T7807] ? __fget_files+0x3a0/0x420 [ 1215.414394][ T7807] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1215.414424][ T7807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1215.414472][ T7807] ? __pfx_ksys_write+0x10/0x10 [ 1215.414512][ T7807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.414535][ T7807] do_syscall_64+0x15f/0xf80 [ 1215.414560][ T7807] ? trace_irq_disable+0x3b/0x140 [ 1215.414589][ T7807] ? clear_bhb_loop+0x40/0x90 [ 1215.414614][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.414635][ T7807] RIP: 0033:0x7fe81af9cdd9 [ 1215.414656][ T7807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.414675][ T7807] RSP: 002b:00007fe81be69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1215.414698][ T7807] RAX: ffffffffffffffda RBX: 00007fe81b215fa0 RCX: 00007fe81af9cdd9 [ 1215.414714][ T7807] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1215.414727][ T7807] RBP: 00007fe81be69090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.414740][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.414753][ T7807] R13: 00007fe81b216038 R14: 00007fe81b215fa0 R15: 00007ffec15ee3d8 [ 1215.414788][ T7807] [ 1215.704077][ T7776] lo speed is unknown, defaulting to 1000 [ 1215.859879][T31199] net_ratelimit: 25 callbacks suppressed [ 1215.859901][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1215.980123][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1216.094754][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8488'. [ 1216.143288][ T7823] lo speed is unknown, defaulting to 1000 [ 1216.151212][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1216.172890][ T7825] netlink: 'syz.3.8488': attribute type 13 has an invalid length. [ 1216.208115][ T7825] netlink: 'syz.3.8488': attribute type 17 has an invalid length. [ 1216.217002][ T7823] wg1 speed is unknown, defaulting to 1000 [ 1216.386193][ T7825] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1216.425652][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8488'. [ 1216.540564][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1216.650186][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1216.671559][ T7587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.756695][ T7587] veth0_vlan: entered promiscuous mode [ 1216.780221][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1216.793084][ T7587] veth1_vlan: entered promiscuous mode [ 1216.851571][ T7587] veth0_macvtap: entered promiscuous mode [ 1216.868221][ T7587] veth1_macvtap: entered promiscuous mode [ 1216.904729][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.930590][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.948304][T15518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.959520][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1216.972738][T15518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.981751][T15518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.001020][T15518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.025961][ T7823] lo speed is unknown, defaulting to 1000 [ 1217.120394][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1217.245307][T31185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.249999][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1217.263723][T31185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.416103][T15518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.436118][T15518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.776556][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8491'. [ 1217.795821][ T7846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8491'. [ 1218.502434][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8495'. [ 1218.808244][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8499'. [ 1219.008311][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8502'. [ 1219.350404][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1219.370728][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1219.695220][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8510'. [ 1219.711447][ T7903] nbd: must specify a size in bytes for the device [ 1219.723400][ T7903] block nbd0: NBD_DISCONNECT [ 1219.731473][ T7903] block nbd0: Send disconnect failed -32 [ 1219.743741][ T7903] block nbd0: shutting down sockets [ 1219.776340][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8510'. [ 1220.008618][ T7908] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8512'. [ 1220.142349][ T7930] netlink: 'syz.4.8517': attribute type 3 has an invalid length. [ 1220.431763][ T7943] netlink: 'syz.3.8521': attribute type 15 has an invalid length. [ 1220.450114][ T7943] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1220.638999][ T7947] FAULT_INJECTION: forcing a failure. [ 1220.638999][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.676001][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.3.8522 Not tainted syzkaller #0 PREEMPT(full) [ 1220.676033][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.676047][ T7947] Call Trace: [ 1220.676057][ T7947] [ 1220.676066][ T7947] dump_stack_lvl+0xe8/0x150 [ 1220.676099][ T7947] should_fail_ex+0x412/0x560 [ 1220.676133][ T7947] should_failslab+0xa8/0x100 [ 1220.676167][ T7947] __kmalloc_cache_noprof+0x88/0x660 [ 1220.676198][ T7947] ? netlbl_cipsov4_add+0x244/0x22b0 [ 1220.676237][ T7947] netlbl_cipsov4_add+0x244/0x22b0 [ 1220.676267][ T7947] ? trace_kmalloc+0x2a/0xf0 [ 1220.676304][ T7947] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 1220.676339][ T7947] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1220.676371][ T7947] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1220.676413][ T7947] genl_family_rcv_msg_doit+0x22a/0x330 [ 1220.676463][ T7947] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1220.676511][ T7947] ? bpf_lsm_capable+0x9/0x20 [ 1220.676531][ T7947] ? security_capable+0x7e/0x2c0 [ 1220.676565][ T7947] genl_rcv_msg+0x61c/0x7a0 [ 1220.676605][ T7947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.676635][ T7947] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 1220.676683][ T7947] netlink_rcv_skb+0x232/0x4b0 [ 1220.676711][ T7947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1220.676744][ T7947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1220.676796][ T7947] ? down_read+0x270/0x2e0 [ 1220.676821][ T7947] ? genl_rcv+0xd/0x40 [ 1220.676853][ T7947] genl_rcv+0x28/0x40 [ 1220.676882][ T7947] netlink_unicast+0x75c/0x8e0 [ 1220.676919][ T7947] netlink_sendmsg+0x813/0xb40 [ 1220.676958][ T7947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.676988][ T7947] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1220.677016][ T7947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1220.677045][ T7947] ____sys_sendmsg+0x972/0x9f0 [ 1220.677071][ T7947] ? __might_fault+0xaf/0x130 [ 1220.677105][ T7947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.677142][ T7947] ? import_iovec+0x73/0xa0 [ 1220.677175][ T7947] ___sys_sendmsg+0x2a5/0x360 [ 1220.677198][ T7947] ? __lock_acquire+0x6b5/0x2cf0 [ 1220.677226][ T7947] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.677295][ T7947] ? __fget_files+0x2a/0x420 [ 1220.677318][ T7947] ? __fget_files+0x3a0/0x420 [ 1220.677354][ T7947] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1220.677384][ T7947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1220.677416][ T7947] ? __pfx_ksys_write+0x10/0x10 [ 1220.677459][ T7947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.677479][ T7947] do_syscall_64+0x15f/0xf80 [ 1220.677499][ T7947] ? trace_irq_disable+0x3b/0x140 [ 1220.677524][ T7947] ? clear_bhb_loop+0x40/0x90 [ 1220.677546][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.677563][ T7947] RIP: 0033:0x7fe81af9cdd9 [ 1220.677582][ T7947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.677597][ T7947] RSP: 002b:00007fe81be69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.677618][ T7947] RAX: ffffffffffffffda RBX: 00007fe81b215fa0 RCX: 00007fe81af9cdd9 [ 1220.677632][ T7947] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1220.677643][ T7947] RBP: 00007fe81be69090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.677654][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.677665][ T7947] R13: 00007fe81b216038 R14: 00007fe81b215fa0 R15: 00007ffec15ee3d8 [ 1220.677696][ T7947] [ 1221.341114][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8525'. [ 1221.526288][ T7963] FAULT_INJECTION: forcing a failure. [ 1221.526288][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.561042][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.2.8528 Not tainted syzkaller #0 PREEMPT(full) [ 1221.561073][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.561086][ T7963] Call Trace: [ 1221.561094][ T7963] [ 1221.561104][ T7963] dump_stack_lvl+0xe8/0x150 [ 1221.561135][ T7963] should_fail_ex+0x412/0x560 [ 1221.561168][ T7963] _copy_to_user+0x31/0xb0 [ 1221.561200][ T7963] simple_read_from_buffer+0xe1/0x170 [ 1221.561230][ T7963] proc_fail_nth_read+0x1bb/0x230 [ 1221.561261][ T7963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.561290][ T7963] ? rw_verify_area+0x2a6/0x4d0 [ 1221.561319][ T7963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.561345][ T7963] vfs_read+0x20c/0xa70 [ 1221.561390][ T7963] ? __pfx___mutex_lock+0x10/0x10 [ 1221.561418][ T7963] ? __pfx_vfs_read+0x10/0x10 [ 1221.561448][ T7963] ? __fget_files+0x2a/0x420 [ 1221.561478][ T7963] ? __fget_files+0x3a0/0x420 [ 1221.561501][ T7963] ? __fget_files+0x2a/0x420 [ 1221.561536][ T7963] ksys_read+0x150/0x270 [ 1221.561566][ T7963] ? __pfx_ksys_read+0x10/0x10 [ 1221.561605][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.561629][ T7963] do_syscall_64+0x15f/0xf80 [ 1221.561652][ T7963] ? trace_irq_disable+0x3b/0x140 [ 1221.561682][ T7963] ? clear_bhb_loop+0x40/0x90 [ 1221.561708][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.561729][ T7963] RIP: 0033:0x7f5e4cb5d60e [ 1221.561750][ T7963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1221.561768][ T7963] RSP: 002b:00007f5e4d998fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.561790][ T7963] RAX: ffffffffffffffda RBX: 00007f5e4d9996c0 RCX: 00007f5e4cb5d60e [ 1221.561812][ T7963] RDX: 000000000000000f RSI: 00007f5e4d9990a0 RDI: 0000000000000003 [ 1221.561825][ T7963] RBP: 00007f5e4d999090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.561838][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.561851][ T7963] R13: 00007f5e4ce16038 R14: 00007f5e4ce15fa0 R15: 00007ffcc36aa328 [ 1221.561885][ T7963] [ 1222.110519][ T7976] netlink: 'syz.1.8526': attribute type 1 has an invalid length. [ 1222.183655][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1222.194083][ T7978] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1222.328647][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1225.307286][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.352313][ T7976] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1225.353443][ T7997] FAULT_INJECTION: forcing a failure. [ 1225.353443][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.376498][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.4.8535 Not tainted syzkaller #0 PREEMPT(full) [ 1225.376528][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1225.376540][ T7997] Call Trace: [ 1225.376549][ T7997] [ 1225.376567][ T7997] dump_stack_lvl+0xe8/0x150 [ 1225.376600][ T7997] should_fail_ex+0x412/0x560 [ 1225.376633][ T7997] should_failslab+0xa8/0x100 [ 1225.376667][ T7997] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1225.376698][ T7997] ? __alloc_skb+0x1d0/0x7d0 [ 1225.376720][ T7997] ? __local_bh_enable_ip+0xd0/0x130 [ 1225.376748][ T7997] __alloc_skb+0x1d0/0x7d0 [ 1225.376772][ T7997] ? netlink_ack_tlv_len+0x6c/0x210 [ 1225.376799][ T7997] netlink_ack+0x146/0xa50 [ 1225.376822][ T7997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.376872][ T7997] netlink_rcv_skb+0x2b6/0x4b0 [ 1225.376900][ T7997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1225.376933][ T7997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1225.376978][ T7997] ? down_read+0x270/0x2e0 [ 1225.377003][ T7997] ? genl_rcv+0xd/0x40 [ 1225.377035][ T7997] genl_rcv+0x28/0x40 [ 1225.377063][ T7997] netlink_unicast+0x75c/0x8e0 [ 1225.377097][ T7997] netlink_sendmsg+0x813/0xb40 [ 1225.377133][ T7997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.377161][ T7997] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1225.377189][ T7997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1225.377220][ T7997] ____sys_sendmsg+0x972/0x9f0 [ 1225.377247][ T7997] ? __might_fault+0xaf/0x130 [ 1225.377281][ T7997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.377317][ T7997] ? import_iovec+0x73/0xa0 [ 1225.377350][ T7997] ___sys_sendmsg+0x2a5/0x360 [ 1225.377376][ T7997] ? __lock_acquire+0x6b5/0x2cf0 [ 1225.377403][ T7997] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.377472][ T7997] ? __fget_files+0x2a/0x420 [ 1225.377495][ T7997] ? __fget_files+0x3a0/0x420 [ 1225.377532][ T7997] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1225.377570][ T7997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1225.377609][ T7997] ? __pfx_ksys_write+0x10/0x10 [ 1225.377647][ T7997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.377675][ T7997] do_syscall_64+0x15f/0xf80 [ 1225.377697][ T7997] ? trace_irq_disable+0x3b/0x140 [ 1225.377727][ T7997] ? clear_bhb_loop+0x40/0x90 [ 1225.377754][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.377774][ T7997] RIP: 0033:0x7f381ad9cdd9 [ 1225.377796][ T7997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.377813][ T7997] RSP: 002b:00007f381bbcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.377836][ T7997] RAX: ffffffffffffffda RBX: 00007f381b015fa0 RCX: 00007f381ad9cdd9 [ 1225.377851][ T7997] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1225.377865][ T7997] RBP: 00007f381bbcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.377878][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.377890][ T7997] R13: 00007f381b016038 R14: 00007f381b015fa0 R15: 00007ffc6dbaf998 [ 1225.377924][ T7997] [ 1225.406608][ T8000] netlink: 'syz.0.8536': attribute type 1 has an invalid length. [ 1225.754303][ T7987] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1225.770694][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1225.774279][ T7987] syzkaller1: Refused to change device type [ 1225.783148][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1225.818147][ T7992] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode [ 1225.826383][ T7992] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode [ 1225.847201][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1225.857930][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1225.970784][ T8000] bond1: entered promiscuous mode [ 1225.978680][ T8000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1225.990278][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1226.022490][T31185] net_ratelimit: 24 callbacks suppressed [ 1226.022514][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.067364][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1226.091851][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8538'. [ 1226.122220][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8540'. [ 1226.200500][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.260119][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1226.328611][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8544'. [ 1226.337979][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.431710][ T8023] hmac(sha224: entered promiscuous mode [ 1226.470880][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.567511][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8547'. [ 1226.593155][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.712924][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.839470][T31182] bond5: (slave bridge4): failed to get link speed/duplex [ 1226.960893][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1227.044710][ T5828] hsr0: entered promiscuous mode [ 1227.095364][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1227.305048][ T8082] IPv6: addrconf: prefix option has invalid lifetime [ 1227.493335][ T5630] lo speed is unknown, defaulting to 1000 [ 1227.543461][ T8087] hsr0: left promiscuous mode [ 1227.578956][ T8087] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1228.279534][ T8116] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1228.832782][ T8151] bond12: option ad_actor_sys_prio: invalid value (0) [ 1228.867152][ T8151] bond12: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1229.070276][ T8151] bond12 (unregistering): Released all slaves [ 1229.271264][ T1642] Bluetooth: hci0: command tx timeout [ 1229.655763][ T8174] netlink: 'syz.1.8588': attribute type 5 has an invalid length. [ 1229.808598][ T8176] lo speed is unknown, defaulting to 1000 [ 1229.855910][ T8176] wg1 speed is unknown, defaulting to 1000 [ 1230.144508][ T8203] bond12: option ad_actor_sys_prio: invalid value (0) [ 1230.171702][ T8203] bond12: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1230.193082][ T8210] tipc: Failed to remove unknown binding: 66,0,0/985400555:282431405/282431406 [ 1230.213524][ T8210] tipc: Failed to remove unknown binding: 66,0,0/985400555:282431405/282431406 [ 1230.244359][ T8203] bond12 (unregistering): Released all slaves [ 1230.404125][ T8216] netlink: 'syz.0.8601': attribute type 29 has an invalid length. [ 1230.464226][ T8176] lo speed is unknown, defaulting to 1000 [ 1230.698194][ T8224] lo speed is unknown, defaulting to 1000 [ 1230.722272][ T8224] wg1 speed is unknown, defaulting to 1000 [ 1231.200005][T15518] net_ratelimit: 22 callbacks suppressed [ 1231.200030][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1231.290907][ T8243] __nla_validate_parse: 16 callbacks suppressed [ 1231.290929][ T8243] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8609'. [ 1231.375832][ T8224] lo speed is unknown, defaulting to 1000 [ 1231.385444][ T8250] tipc: Enabled bearer , priority 0 [ 1231.450066][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1231.452748][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1231.569393][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1231.666652][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8614'. [ 1231.682471][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1231.780696][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8615'. [ 1231.810047][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1231.830335][ T5642] Bluetooth: hci0: command 0x0405 tx timeout [ 1231.939013][ T8262] bond12: option ad_actor_sys_prio: invalid value (0) [ 1231.977450][ T8262] bond12: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1232.028856][ T8262] bond12 (unregistering): Released all slaves [ 1232.412382][ T8282] netlink: 'syz.3.8620': attribute type 62 has an invalid length. [ 1232.533236][ T8284] ip6gre1: entered promiscuous mode [ 1232.554260][ T8284] ip6gre1: entered allmulticast mode [ 1232.580055][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1232.731501][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1232.850095][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1232.965424][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1233.102070][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1233.260792][ T8308] IPVS: length: 197 != 8 [ 1233.358991][ T8312] netlink: 'syz.3.8629': attribute type 2 has an invalid length. [ 1233.387291][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8629'. [ 1233.887467][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8633'. [ 1233.920897][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1234.047183][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1234.283083][ T8344] FAULT_INJECTION: forcing a failure. [ 1234.283083][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.297755][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.3.8641 Not tainted syzkaller #0 PREEMPT(full) [ 1234.297785][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.297797][ T8344] Call Trace: [ 1234.297806][ T8344] [ 1234.297815][ T8344] dump_stack_lvl+0xe8/0x150 [ 1234.297847][ T8344] should_fail_ex+0x412/0x560 [ 1234.297879][ T8344] should_failslab+0xa8/0x100 [ 1234.297910][ T8344] ? skb_clone+0x212/0x3a0 [ 1234.297939][ T8344] kmem_cache_alloc_noprof+0x87/0x650 [ 1234.297968][ T8344] ? __netlink_lookup+0xc6/0x8b0 [ 1234.298008][ T8344] skb_clone+0x212/0x3a0 [ 1234.298040][ T8344] __netlink_deliver_tap+0x404/0x850 [ 1234.298078][ T8344] ? netlink_deliver_tap+0x2e/0x1b0 [ 1234.298105][ T8344] netlink_deliver_tap+0x19c/0x1b0 [ 1234.298133][ T8344] netlink_unicast+0x730/0x8e0 [ 1234.298169][ T8344] netlink_sendmsg+0x813/0xb40 [ 1234.298206][ T8344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.298236][ T8344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1234.298266][ T8344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.298297][ T8344] ____sys_sendmsg+0x972/0x9f0 [ 1234.298323][ T8344] ? __might_fault+0xaf/0x130 [ 1234.298358][ T8344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.298395][ T8344] ? import_iovec+0x73/0xa0 [ 1234.298438][ T8344] ___sys_sendmsg+0x2a5/0x360 [ 1234.298462][ T8344] ? __lock_acquire+0x6b5/0x2cf0 [ 1234.298491][ T8344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.298559][ T8344] ? __fget_files+0x2a/0x420 [ 1234.298581][ T8344] ? __fget_files+0x3a0/0x420 [ 1234.298618][ T8344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1234.298650][ T8344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1234.298688][ T8344] ? __pfx_ksys_write+0x10/0x10 [ 1234.298727][ T8344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.298750][ T8344] do_syscall_64+0x15f/0xf80 [ 1234.298774][ T8344] ? trace_irq_disable+0x3b/0x140 [ 1234.298802][ T8344] ? clear_bhb_loop+0x40/0x90 [ 1234.298827][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.298845][ T8344] RIP: 0033:0x7fe81af9cdd9 [ 1234.298866][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.298883][ T8344] RSP: 002b:00007fe81be69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.298906][ T8344] RAX: ffffffffffffffda RBX: 00007fe81b215fa0 RCX: 00007fe81af9cdd9 [ 1234.298921][ T8344] RDX: 0000000000044890 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1234.298935][ T8344] RBP: 00007fe81be69090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.298948][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.298960][ T8344] R13: 00007fe81b216038 R14: 00007fe81b215fa0 R15: 00007ffec15ee3d8 [ 1234.298997][ T8344] [ 1234.618940][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1234.635830][ T8334] udevd[8334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1234.654890][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8642'. [ 1234.703393][ T8110] udevd[8110]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1234.723168][ T8349] vlan0: entered promiscuous mode [ 1234.787194][ T8354] IPv6: sit4: Disabled Multicast RS [ 1234.803692][ T8353] xt_CT: No such helper "snmp_trap" [ 1235.276207][ T8381] netlink: 'syz.1.8652': attribute type 9 has an invalid length. [ 1235.486232][ T8385] lo speed is unknown, defaulting to 1000 [ 1235.545664][ T8385] wg1 speed is unknown, defaulting to 1000 [ 1235.765826][ T8411] tipc: Enabling of bearer rejected, already enabled [ 1235.994401][ T8421] lo speed is unknown, defaulting to 1000 [ 1236.160108][ T8385] lo speed is unknown, defaulting to 1000 [ 1236.160727][ T8421] wg1 speed is unknown, defaulting to 1000 [ 1236.280292][T31194] net_ratelimit: 21 callbacks suppressed [ 1236.280316][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1236.400088][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1236.549821][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1236.648609][ T8421] lo speed is unknown, defaulting to 1000 [ 1236.670532][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1236.790307][T31182] bond5: (slave bridge4): failed to get link speed/duplex [ 1236.909439][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1236.931096][ T8435] netlink: 'syz.3.8668': attribute type 1 has an invalid length. [ 1237.041148][ T8435] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1237.180086][ T8443] bond11: (slave geneve3): making interface the new active one [ 1237.195029][ T8443] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 1237.204750][ T8435] hsr_slave_0: left promiscuous mode [ 1237.225868][ T8435] hsr_slave_1: left promiscuous mode [ 1237.325040][ T8445] __nla_validate_parse: 2 callbacks suppressed [ 1237.325062][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1237.425915][T31186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1237.450323][T31186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1237.541051][T31186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1237.561202][T31186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1237.600865][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8673'. [ 1237.725082][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8673'. [ 1237.752565][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1237.835223][ T5642] block nbd0: Receive control failed (result -32) [ 1237.912815][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1238.179132][ T8475] team0: entered promiscuous mode [ 1238.196054][ T8475] team_slave_0: entered promiscuous mode [ 1238.202848][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8679'. [ 1238.239824][ T8475] team_slave_1: entered promiscuous mode [ 1238.279931][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1238.402462][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1238.628521][ T8492] netlink: 408 bytes leftover after parsing attributes in process `syz.0.8681'. [ 1238.731361][ T8484] bond7: invalid ARP target 0.0.0.0 specified for addition [ 1238.759013][ T8484] bond7: option arp_ip_target: invalid value (0) [ 1238.784421][ T8484] bond7 (unregistering): Released all slaves [ 1238.865585][T31191] veth0_virt_wifi: left allmulticast mode [ 1238.876919][T31191] veth0_virt_wifi: left promiscuous mode [ 1238.890523][T31191] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1239.123226][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1239.318884][ T8518] x_tables: duplicate underflow at hook 1 [ 1240.328507][T31191] bond4 (unregistering): (slave bridge1): Releasing active interface [ 1240.543220][T31191] bond0 (unregistering): Released all slaves [ 1240.554535][T31191] bond1 (unregistering): Released all slaves [ 1240.569978][T31191] bond2 (unregistering): Released all slaves [ 1240.585521][T31191] bond3 (unregistering): Released all slaves [ 1240.607963][T31191] bond4 (unregistering): (slave veth11): Releasing active interface [ 1240.618703][T31191] bond4 (unregistering): (slave veth13): Releasing active interface [ 1240.627919][T31191] bond4 (unregistering): Released all slaves [ 1240.645783][T31191] bond5 (unregistering): Released all slaves [ 1240.661164][T31191] bond6 (unregistering): Released all slaves [ 1240.678352][T31191] bond7 (unregistering): (slave veth15): Releasing active interface [ 1240.697504][T31191] bond7 (unregistering): (slave veth17): Releasing active interface [ 1240.707250][T31191] bond7 (unregistering): Released all slaves [ 1240.726825][T31191] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1240.736308][T31191] bond8 (unregistering): Released all slaves [ 1240.752315][T31191] bond9 (unregistering): Released all slaves [ 1240.768703][T31191] bond10 (unregistering): Released all slaves [ 1240.790370][T31191] bond11 (unregistering): Released all slaves [ 1240.806000][T31191] bond12 (unregistering): Released all slaves [ 1240.821775][T31191] bond13 (unregistering): (slave veth19): Releasing active interface [ 1240.830852][T31191] bond13 (unregistering): Released all slaves [ 1240.857167][T31191] bond14 (unregistering): Released all slaves [ 1240.919902][ T8504] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1241.354300][ T8555] netlink: 'syz.1.8698': attribute type 10 has an invalid length. [ 1241.391798][ T8554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8697'. [ 1241.419141][T31191] : left promiscuous mode [ 1241.568132][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.605918][ T8555] bond0: (slave team0): Enslaving as an active interface with an up link [ 1241.633490][ T8549] lo speed is unknown, defaulting to 1000 [ 1241.641420][T31191] hmac(sha224): left promiscuous mode [ 1241.687403][ T8548] lo speed is unknown, defaulting to 1000 [ 1241.694558][ T8549] wg1 speed is unknown, defaulting to 1000 [ 1241.699516][T31194] net_ratelimit: 3 callbacks suppressed [ 1241.699535][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1241.717671][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8700'. [ 1241.813266][T31191] tipc: Left network mode [ 1241.820131][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1241.963741][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1242.094905][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8703'. [ 1242.105284][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1242.230080][ T1642] block nbd7: Receive control failed (result -32) [ 1242.232248][ T5642] block nbd7: Receive control failed (result -32) [ 1242.241058][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1242.383648][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1242.403014][ T8549] lo speed is unknown, defaulting to 1000 [ 1242.403047][ T8548] wg1 speed is unknown, defaulting to 1000 [ 1242.511641][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1242.564638][ T8591] nbd: must specify at least one socket [ 1242.588157][ T8591] tipc: Enabling of bearer rejected, already enabled [ 1242.665168][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1242.669771][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1242.935175][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1243.070017][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1243.100432][ T8606] tipc: Enabled bearer , priority 10 [ 1243.142060][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8708'. [ 1243.181545][ T8606] netlink: 'syz.2.8708': attribute type 6 has an invalid length. [ 1243.384061][ T8610] pim6reg1: entered promiscuous mode [ 1243.409011][ T8610] pim6reg1: entered allmulticast mode [ 1243.445643][ T8548] lo speed is unknown, defaulting to 1000 [ 1243.759339][ T8628] netlink: 'syz.1.8714': attribute type 21 has an invalid length. [ 1243.769822][ T8628] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1243.825299][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1243.857791][ T8626] netlink: 'syz.2.8716': attribute type 1 has an invalid length. [ 1243.874601][ T8626] netlink: 'syz.2.8716': attribute type 2 has an invalid length. [ 1243.900060][ T8628] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1244.645236][ T8640] netlink: 'syz.4.8719': attribute type 1 has an invalid length. [ 1244.860475][ T8640] bond10: entered promiscuous mode [ 1244.877683][ T8640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1244.989927][ T8641] bond10: (slave bridge6): making interface the new active one [ 1245.014059][ T8641] bridge6: entered promiscuous mode [ 1245.042074][ T8641] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1245.094203][ T8642] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1245.150428][ T8642] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1245.200298][ T8655] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1245.215578][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1245.309654][ T8644] veth1_vlan: left promiscuous mode [ 1245.319006][ T8644] vlan0: left promiscuous mode [ 1245.326677][ T8644] veth1_vlan: entered promiscuous mode [ 1245.341193][ T8644] veth1_macvtap: left promiscuous mode [ 1245.352201][ T8644] veth0_macvtap: left promiscuous mode [ 1245.359816][ T8644] veth0_macvtap: entered promiscuous mode [ 1245.372799][ T8644] veth1_macvtap: entered promiscuous mode [ 1245.372834][ T8656] xt_hashlimit: size too large, truncated to 1048576 [ 1245.378630][ T8644] veth1_macvtap: entered allmulticast mode [ 1245.395953][ T8644] macsec0: left promiscuous mode [ 1245.424711][ T8644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1245.443324][ T8644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1245.465330][ T8644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1245.487254][ T8644] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1245.521280][ T8644] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1245.542377][ T8644] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1245.566685][ T8644] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1245.612657][ T8644] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1245.624219][ T8644] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1245.640478][ T8644] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1245.653452][ T8644] bond7: left promiscuous mode [ 1245.658601][ T8644] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1245.674452][ T8644] bond8: left promiscuous mode [ 1245.681105][ T8644] bridge7: left promiscuous mode [ 1245.687007][ T8644] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1245.698534][ T8644] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1245.706091][ T8644] geneve2: left promiscuous mode [ 1245.724037][ T8644] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1245.926982][T31191] hsr_slave_0: left promiscuous mode [ 1245.960918][T31191] hsr_slave_1: left promiscuous mode [ 1246.043918][ T8674] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8726'. [ 1246.437099][T31207] smc: removing ib device syz0 [ 1246.492692][T31207] smbdirect: ib_dev[syz0] removed [ 1246.724701][T31194] smbdirect: ib_dev[syz2] removed [ 1246.733106][T31192] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1246.743931][T31192] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.028133][T31192] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.052516][T31192] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1247.116482][T31185] net_ratelimit: 7 callbacks suppressed [ 1247.116507][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1247.158241][T31192] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1247.174574][T31192] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1247.182770][ T6498] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1247.288993][T31186] bond10: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1247.342878][T31186] bond10: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 1247.352777][T31186] bond10: (slave veth15): making interface the new active one [ 1247.398017][T31186] bond10: active interface up! [ 1247.476955][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1247.515727][ T6498] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1247.839864][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1247.912774][ T6499] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1247.949793][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.079914][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.104936][ T8711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8735'. [ 1248.209481][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.317817][ T8722] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1248.349456][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.481826][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8737'. [ 1248.500599][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.573067][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8737'. [ 1248.619690][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.696671][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1248.725241][ T8730] netlink: 'syz.1.8739': attribute type 1 has an invalid length. [ 1248.741049][ T8730] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1248.762711][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1248.920999][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1248.941807][ T8740] netlink: 'syz.0.8742': attribute type 3 has an invalid length. [ 1248.951519][ T8740] netlink: 'syz.0.8742': attribute type 3 has an invalid length. [ 1248.961531][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1249.113628][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1249.164711][ T8744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8743'. [ 1249.794487][ T8746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.054411][ T8746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.185850][ T8767] mac80211_hwsim hwsim99 syzkaller0: entered promiscuous mode [ 1250.196048][ T8767] mac80211_hwsim hwsim99 syzkaller0: entered allmulticast mode [ 1250.266732][ T8746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.498123][ T8746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.866161][T31186] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.949810][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1250.993083][T31186] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.119114][T31185] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.186129][T31187] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.444265][T31191] IPVS: stop unused estimator thread 0... [ 1251.979802][ T8788] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1252.198055][ T8805] bond11: option ad_actor_sys_prio: invalid value (0) [ 1252.206144][ T8805] bond11: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1252.216960][ T8805] bond11 (unregistering): Released all slaves [ 1252.281007][T31185] net_ratelimit: 12 callbacks suppressed [ 1252.281028][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1252.405392][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1252.432698][ T8817] lo speed is unknown, defaulting to 1000 [ 1252.519867][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1252.650167][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1252.723618][ T8830] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1252.770311][ T8830] netlink: 'syz.3.8764': attribute type 3 has an invalid length. [ 1252.780533][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1252.844368][ T8833] pim6reg99999991: entered allmulticast mode [ 1252.910762][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1253.050031][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1253.168928][ T8842] __nla_validate_parse: 12 callbacks suppressed [ 1253.168960][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8769'. [ 1253.197432][ T8842] veth1_macvtap: left allmulticast mode [ 1253.205757][ T8842] veth1_macvtap: left promiscuous mode [ 1253.269976][ T1642] Bluetooth: hci0: command 0x0405 tx timeout [ 1253.313355][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1253.512261][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1253.801166][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8775'. [ 1253.906548][ T8871] bond7: option ad_actor_sys_prio: invalid value (0) [ 1253.917641][ T8871] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1253.921241][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1254.002674][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8778'. [ 1254.203310][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8780'. [ 1254.214534][ T8871] bond7 (unregistering): Released all slaves [ 1254.244473][ T8885] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8780'. [ 1254.250875][ T8870] lo speed is unknown, defaulting to 1000 [ 1254.262947][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8780'. [ 1254.527029][ T8889] netlink: 'syz.4.8782': attribute type 1 has an invalid length. [ 1254.580864][ T8889] bond11: entered promiscuous mode [ 1254.586573][ T8889] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1254.714729][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8785'. [ 1254.741139][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8785'. [ 1254.823726][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1254.880523][ T8895] nbd: must specify a size in bytes for the device [ 1255.007199][ T8908] netlink: 'syz.3.8786': attribute type 1 has an invalid length. [ 1255.029458][ T8908] netlink: 'syz.3.8786': attribute type 2 has an invalid length. [ 1255.049962][ T8908] netlink: 'syz.3.8786': attribute type 2 has an invalid length. [ 1255.067595][ T8908] netlink: 'syz.3.8786': attribute type 2 has an invalid length. [ 1255.095090][ T8908] netlink: 'syz.3.8786': attribute type 1 has an invalid length. [ 1255.107844][ T8908] netlink: 'syz.3.8786': attribute type 2 has an invalid length. [ 1255.373559][ T8930] netlink: 'syz.3.8794': attribute type 27 has an invalid length. [ 1256.554204][ T8930] mac80211_hwsim hwsim108 syzkaller0: left promiscuous mode [ 1256.563508][ T8930] mac80211_hwsim hwsim108 syzkaller0: left allmulticast mode [ 1256.579108][ T8930] vlan1: left promiscuous mode [ 1256.585871][ T8930] bond_slave_1: left promiscuous mode [ 1256.597616][ T8930] vlan2: left allmulticast mode [ 1256.605436][ T8930] bridge6: left allmulticast mode [ 1256.612469][ T8930] bond8: left promiscuous mode [ 1256.623984][ T8930] bridge7: left promiscuous mode [ 1256.645849][ T8930] macvtap0: left allmulticast mode [ 1256.841274][ T8963] netlink: 'syz.4.8799': attribute type 5 has an invalid length. [ 1256.928092][T31186] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1256.976057][T31186] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1257.000288][T31186] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1257.023890][ T8945] lo speed is unknown, defaulting to 1000 [ 1257.030416][T31186] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1257.213055][ T8979] FAULT_INJECTION: forcing a failure. [ 1257.213055][ T8979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.244886][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.2.8805 Not tainted syzkaller #0 PREEMPT(full) [ 1257.244916][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1257.244939][ T8979] Call Trace: [ 1257.244948][ T8979] [ 1257.244957][ T8979] dump_stack_lvl+0xe8/0x150 [ 1257.244987][ T8979] should_fail_ex+0x412/0x560 [ 1257.245017][ T8979] _copy_from_iter+0x1d3/0x1670 [ 1257.245049][ T8979] ? rcu_is_watching+0x15/0xb0 [ 1257.245081][ T8979] ? __pfx__copy_from_iter+0x10/0x10 [ 1257.245116][ T8979] ? netlink_sendmsg+0x650/0xb40 [ 1257.245140][ T8979] ? skb_put+0x11b/0x210 [ 1257.245168][ T8979] netlink_sendmsg+0x6c0/0xb40 [ 1257.245204][ T8979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1257.245233][ T8979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1257.245260][ T8979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1257.245291][ T8979] ____sys_sendmsg+0x972/0x9f0 [ 1257.245317][ T8979] ? __might_fault+0xaf/0x130 [ 1257.245351][ T8979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1257.245387][ T8979] ? import_iovec+0x73/0xa0 [ 1257.245420][ T8979] ___sys_sendmsg+0x2a5/0x360 [ 1257.245445][ T8979] ? __lock_acquire+0x6b5/0x2cf0 [ 1257.245472][ T8979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.245537][ T8979] ? __fget_files+0x2a/0x420 [ 1257.245562][ T8979] ? __fget_files+0x3a0/0x420 [ 1257.245598][ T8979] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1257.245628][ T8979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1257.245666][ T8979] ? __pfx_ksys_write+0x10/0x10 [ 1257.245704][ T8979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.245727][ T8979] do_syscall_64+0x15f/0xf80 [ 1257.245751][ T8979] ? trace_irq_disable+0x3b/0x140 [ 1257.245780][ T8979] ? clear_bhb_loop+0x40/0x90 [ 1257.245803][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.245823][ T8979] RIP: 0033:0x7f5e4cb9cdd9 [ 1257.245850][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.245868][ T8979] RSP: 002b:00007f5e4d999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1257.245890][ T8979] RAX: ffffffffffffffda RBX: 00007f5e4ce15fa0 RCX: 00007f5e4cb9cdd9 [ 1257.245906][ T8979] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1257.245928][ T8979] RBP: 00007f5e4d999090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.245940][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.245953][ T8979] R13: 00007f5e4ce16038 R14: 00007f5e4ce15fa0 R15: 00007ffcc36aa328 [ 1257.245987][ T8979] [ 1257.494479][T31191] net_ratelimit: 14 callbacks suppressed [ 1257.494502][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1257.609655][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1257.969928][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.119556][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.239635][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.359709][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.629446][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1258.649345][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.701302][T31186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.726245][T31186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.767314][ T9018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.781374][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.909431][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1258.958454][ T9024] xt_hashlimit: size too large, truncated to 1048576 [ 1259.044589][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1259.388223][ T9044] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 1259.411064][ T9044] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 1260.206504][ T9060] netlink: 'syz.1.8829': attribute type 1 has an invalid length. [ 1260.244351][ T9060] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1260.320136][ T9060] bond13: (slave veth19): Enslaving as an active interface with an up link [ 1260.462819][ T9062] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1260.474664][ T9062] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 1260.613672][ T9064] __nla_validate_parse: 9 callbacks suppressed [ 1260.613687][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8830'. [ 1262.012663][ T9033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.036793][ T9060] netlink: 'syz.1.8829': attribute type 1 has an invalid length. [ 1262.335849][ T9087] FAULT_INJECTION: forcing a failure. [ 1262.335849][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.388434][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.0.8836 Not tainted syzkaller #0 PREEMPT(full) [ 1262.388465][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1262.388478][ T9087] Call Trace: [ 1262.388487][ T9087] [ 1262.388497][ T9087] dump_stack_lvl+0xe8/0x150 [ 1262.388528][ T9087] should_fail_ex+0x412/0x560 [ 1262.388561][ T9087] should_failslab+0xa8/0x100 [ 1262.388595][ T9087] __kmalloc_cache_noprof+0x88/0x660 [ 1262.388624][ T9087] ? netlbl_cipsov4_add+0x244/0x22b0 [ 1262.388662][ T9087] netlbl_cipsov4_add+0x244/0x22b0 [ 1262.388692][ T9087] ? trace_kmalloc+0x2a/0xf0 [ 1262.388728][ T9087] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 1262.388763][ T9087] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1262.388795][ T9087] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1262.388846][ T9087] genl_family_rcv_msg_doit+0x22a/0x330 [ 1262.388886][ T9087] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1262.388933][ T9087] ? bpf_lsm_capable+0x9/0x20 [ 1262.388953][ T9087] ? security_capable+0x7e/0x2c0 [ 1262.388985][ T9087] genl_rcv_msg+0x61c/0x7a0 [ 1262.389024][ T9087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1262.389055][ T9087] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 1262.389101][ T9087] netlink_rcv_skb+0x232/0x4b0 [ 1262.389133][ T9087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1262.389166][ T9087] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1262.389209][ T9087] ? down_read+0x270/0x2e0 [ 1262.389234][ T9087] ? genl_rcv+0xd/0x40 [ 1262.389265][ T9087] genl_rcv+0x28/0x40 [ 1262.389293][ T9087] netlink_unicast+0x75c/0x8e0 [ 1262.389330][ T9087] netlink_sendmsg+0x813/0xb40 [ 1262.389369][ T9087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1262.389401][ T9087] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1262.389430][ T9087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1262.389461][ T9087] ____sys_sendmsg+0x972/0x9f0 [ 1262.389488][ T9087] ? __might_fault+0xaf/0x130 [ 1262.389523][ T9087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1262.389560][ T9087] ? import_iovec+0x73/0xa0 [ 1262.389595][ T9087] ___sys_sendmsg+0x2a5/0x360 [ 1262.389621][ T9087] ? __lock_acquire+0x6b5/0x2cf0 [ 1262.389649][ T9087] ? __pfx____sys_sendmsg+0x10/0x10 [ 1262.389717][ T9087] ? __fget_files+0x2a/0x420 [ 1262.389741][ T9087] ? __fget_files+0x3a0/0x420 [ 1262.389777][ T9087] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1262.389809][ T9087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1262.389857][ T9087] ? __pfx_ksys_write+0x10/0x10 [ 1262.389896][ T9087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.389921][ T9087] do_syscall_64+0x15f/0xf80 [ 1262.389945][ T9087] ? trace_irq_disable+0x3b/0x140 [ 1262.389976][ T9087] ? clear_bhb_loop+0x40/0x90 [ 1262.390003][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.390023][ T9087] RIP: 0033:0x7f4ec099cdd9 [ 1262.390045][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.390063][ T9087] RSP: 002b:00007f4ebebf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.390087][ T9087] RAX: ffffffffffffffda RBX: 00007f4ec0c15fa0 RCX: 00007f4ec099cdd9 [ 1262.390102][ T9087] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1262.390116][ T9087] RBP: 00007f4ebebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.390129][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.390141][ T9087] R13: 00007f4ec0c16038 R14: 00007f4ec0c15fa0 R15: 00007ffe6e0fc308 [ 1262.390177][ T9087] [ 1262.480523][ T9089] lo speed is unknown, defaulting to 1000 [ 1262.591237][T31194] net_ratelimit: 27 callbacks suppressed [ 1262.591258][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1262.911451][ T9110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.977777][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8842'. [ 1262.990221][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1263.220376][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1263.359364][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1263.479433][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1263.539957][ T9133] netlink: 'syz.1.8846': attribute type 3 has an invalid length. [ 1263.769413][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1263.970438][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8847'. [ 1264.000267][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1264.044602][ T1642] Bluetooth: hci0: link tx timeout [ 1264.056387][ T1642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1264.064624][ T9150] FAULT_INJECTION: forcing a failure. [ 1264.064624][ T9150] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.082582][ T1642] Bluetooth: hci0: link tx timeout [ 1264.098239][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.2.8850 Not tainted syzkaller #0 PREEMPT(full) [ 1264.098269][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1264.098281][ T9150] Call Trace: [ 1264.098290][ T9150] [ 1264.098300][ T9150] dump_stack_lvl+0xe8/0x150 [ 1264.098331][ T9150] should_fail_ex+0x412/0x560 [ 1264.098364][ T9150] should_failslab+0xa8/0x100 [ 1264.098398][ T9150] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1264.098430][ T9150] ? __alloc_skb+0x1d0/0x7d0 [ 1264.098451][ T9150] ? __local_bh_enable_ip+0xd0/0x130 [ 1264.098477][ T9150] __alloc_skb+0x1d0/0x7d0 [ 1264.098500][ T9150] ? netlink_ack_tlv_len+0x6c/0x210 [ 1264.098527][ T9150] netlink_ack+0x146/0xa50 [ 1264.098548][ T9150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1264.098597][ T9150] netlink_rcv_skb+0x2b6/0x4b0 [ 1264.098616][ T1642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1264.098624][ T9150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1264.098656][ T9150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1264.098693][ T9150] ? down_read+0x270/0x2e0 [ 1264.098717][ T9150] ? genl_rcv+0xd/0x40 [ 1264.098745][ T9150] genl_rcv+0x28/0x40 [ 1264.098770][ T9150] netlink_unicast+0x75c/0x8e0 [ 1264.098802][ T9150] netlink_sendmsg+0x813/0xb40 [ 1264.098836][ T9150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.098862][ T9150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1264.098888][ T9150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1264.098917][ T9150] ____sys_sendmsg+0x972/0x9f0 [ 1264.098942][ T9150] ? __might_fault+0xaf/0x130 [ 1264.098971][ T9150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1264.099004][ T9150] ? import_iovec+0x73/0xa0 [ 1264.099034][ T9150] ___sys_sendmsg+0x2a5/0x360 [ 1264.099057][ T9150] ? __lock_acquire+0x6b5/0x2cf0 [ 1264.099088][ T9150] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.099157][ T9150] ? __fget_files+0x2a/0x420 [ 1264.099178][ T9150] ? __fget_files+0x3a0/0x420 [ 1264.099211][ T9150] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1264.099244][ T9150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1264.099278][ T9150] ? __pfx_ksys_write+0x10/0x10 [ 1264.099313][ T9150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.099334][ T9150] do_syscall_64+0x15f/0xf80 [ 1264.099355][ T9150] ? trace_irq_disable+0x3b/0x140 [ 1264.099381][ T9150] ? clear_bhb_loop+0x40/0x90 [ 1264.099404][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.099423][ T9150] RIP: 0033:0x7f5e4cb9cdd9 [ 1264.099441][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.099457][ T9150] RSP: 002b:00007f5e4d999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.099479][ T9150] RAX: ffffffffffffffda RBX: 00007f5e4ce15fa0 RCX: 00007f5e4cb9cdd9 [ 1264.099493][ T9150] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1264.099505][ T9150] RBP: 00007f5e4d999090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.099517][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.099528][ T9150] R13: 00007f5e4ce16038 R14: 00007f5e4ce15fa0 R15: 00007ffcc36aa328 [ 1264.099561][ T9150] [ 1264.160490][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1264.426892][ T9156] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8851'. [ 1264.544223][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1264.617986][ T9163] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1264.653407][ T9162] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1264.674836][ T1642] Bluetooth: hci0: link tx timeout [ 1264.681422][ T1642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1264.691806][ T1642] Bluetooth: hci0: link tx timeout [ 1264.702448][ T1642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1265.025235][ T9178] netlink: 964 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1265.082727][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8855'. [ 1265.449099][ T1642] Bluetooth: hci0: link tx timeout [ 1265.454892][ T1642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1265.510338][ T1642] Bluetooth: hci0: link tx timeout [ 1265.515542][ T1642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1265.722017][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8862'. [ 1265.762980][ T9207] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8861'. [ 1266.057349][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.066832][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.084684][ T1642] Bluetooth: hci0: command 0x0405 tx timeout [ 1266.231845][ T9216] x_tables: duplicate underflow at hook 1 [ 1266.360774][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8866'. [ 1266.434421][ T9205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.455836][ T9205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.833500][T31186] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.852545][T31186] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.876669][T31186] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.899262][T31186] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.230631][ T9255] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1267.260324][ T9255] netlink: 'syz.0.8878': attribute type 1 has an invalid length. [ 1267.553229][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8884'. [ 1267.619699][T31192] net_ratelimit: 15 callbacks suppressed [ 1267.619724][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1267.661179][ T9273] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8885'. [ 1267.726030][ T9275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1267.760868][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1267.778241][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1267.861100][ T9275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1267.893669][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1267.905929][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1267.959469][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1268.089875][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1268.471957][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1268.633012][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1268.668762][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.809594][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1268.960145][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1269.159537][ T9330] IPVS: Scheduler module ip_vs_ not found [ 1269.272390][ T9347] netlink: 'syz.2.8904': attribute type 5 has an invalid length. [ 1269.285987][ T9348] netlink: 'syz.3.8903': attribute type 1 has an invalid length. [ 1269.300396][ T9349] netlink: 'syz.2.8904': attribute type 5 has an invalid length. [ 1269.443757][ T9351] xt_hashlimit: size too large, truncated to 1048576 [ 1269.551710][ T9359] xt_hashlimit: size too large, truncated to 1048576 [ 1269.657413][ T9353] vxcan2: entered allmulticast mode [ 1269.985349][ T9367] netlink: 'syz.1.8908': attribute type 1 has an invalid length. [ 1270.088662][ T9370] mac80211_hwsim hwsim108 syzkaller0: entered promiscuous mode [ 1270.104271][ T9370] mac80211_hwsim hwsim108 syzkaller0: entered allmulticast mode [ 1270.313594][ T9384] ip6gre3: entered promiscuous mode [ 1270.319034][ T9384] ip6gre3: entered allmulticast mode [ 1270.697364][ T9407] netlink: 'syz.0.8918': attribute type 10 has an invalid length. [ 1270.798671][ T9401] __nla_validate_parse: 9 callbacks suppressed [ 1270.798694][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8918'. [ 1271.135463][ T9423] netlink: 356 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1271.156448][ T9423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1271.221037][ T9425] bond4: entered promiscuous mode [ 1271.230697][ T9425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1271.238583][ T9425] bridge0: port 3(bond4) entered blocking state [ 1271.242617][ T9432] nbd: nbd3 already in use [ 1271.245490][ T9425] bridge0: port 3(bond4) entered disabled state [ 1271.256449][ T9425] bond4: entered allmulticast mode [ 1271.266171][ T9425] bridge0: port 3(bond4) entered blocking state [ 1271.272696][ T9425] bridge0: port 3(bond4) entered forwarding state [ 1271.323523][ T9432] netlink: 'syz.3.8926': attribute type 4 has an invalid length. [ 1271.358301][ T9434] netlink: 'syz.3.8926': attribute type 4 has an invalid length. [ 1271.397452][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1271.476032][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1271.535048][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1271.756925][ T9444] ip6tnl4: entered allmulticast mode [ 1271.807171][ T9434] lo speed is unknown, defaulting to 1000 [ 1271.818724][T31185] bridge0: port 3(bond4) entered disabled state [ 1272.305506][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1272.342550][ T9468] lo speed is unknown, defaulting to 1000 [ 1272.387096][ T9487] netlink: 'syz.2.8939': attribute type 13 has an invalid length. [ 1272.480172][ T9478] mac80211_hwsim hwsim101 d: renamed from syzkaller0 [ 1272.493409][ T9478] tipc: Disabling bearer [ 1272.506528][ T9494] mac80211_hwsim hwsim128 syzkaller0: entered promiscuous mode [ 1272.532300][ T9494] mac80211_hwsim hwsim128 syzkaller0: entered allmulticast mode [ 1272.713178][T31191] net_ratelimit: 23 callbacks suppressed [ 1272.713204][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1272.859428][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1273.020493][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1273.363473][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1273.370372][ T9536] FAULT_INJECTION: forcing a failure. [ 1273.370372][ T9536] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.400508][ T9536] CPU: 0 UID: 0 PID: 9536 Comm: syz.2.8951 Not tainted syzkaller #0 PREEMPT(full) [ 1273.400540][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1273.400553][ T9536] Call Trace: [ 1273.400562][ T9536] [ 1273.400571][ T9536] dump_stack_lvl+0xe8/0x150 [ 1273.400602][ T9536] should_fail_ex+0x412/0x560 [ 1273.400635][ T9536] should_failslab+0xa8/0x100 [ 1273.400669][ T9536] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1273.400708][ T9536] ? __alloc_skb+0x186/0x7d0 [ 1273.400732][ T9536] ? __alloc_skb+0x1d0/0x7d0 [ 1273.400753][ T9536] ? __local_bh_enable_ip+0xd0/0x130 [ 1273.400781][ T9536] __alloc_skb+0x1d0/0x7d0 [ 1273.400811][ T9536] netlink_sendmsg+0x5d4/0xb40 [ 1273.400848][ T9536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.400879][ T9536] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1273.400909][ T9536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1273.400939][ T9536] ____sys_sendmsg+0x972/0x9f0 [ 1273.400965][ T9536] ? __might_fault+0xaf/0x130 [ 1273.400999][ T9536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1273.401037][ T9536] ? import_iovec+0x73/0xa0 [ 1273.401070][ T9536] ___sys_sendmsg+0x2a5/0x360 [ 1273.401094][ T9536] ? __lock_acquire+0x6b5/0x2cf0 [ 1273.401123][ T9536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.401189][ T9536] ? __fget_files+0x2a/0x420 [ 1273.401212][ T9536] ? __fget_files+0x3a0/0x420 [ 1273.401247][ T9536] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1273.401282][ T9536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1273.401321][ T9536] ? __pfx_ksys_write+0x10/0x10 [ 1273.401359][ T9536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.401382][ T9536] do_syscall_64+0x15f/0xf80 [ 1273.401406][ T9536] ? trace_irq_disable+0x3b/0x140 [ 1273.401435][ T9536] ? clear_bhb_loop+0x40/0x90 [ 1273.401461][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.401482][ T9536] RIP: 0033:0x7f5e4cb9cdd9 [ 1273.401503][ T9536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.401520][ T9536] RSP: 002b:00007f5e4d999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.401544][ T9536] RAX: ffffffffffffffda RBX: 00007f5e4ce15fa0 RCX: 00007f5e4cb9cdd9 [ 1273.401560][ T9536] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1273.401573][ T9536] RBP: 00007f5e4d999090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.401586][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.401599][ T9536] R13: 00007f5e4ce16038 R14: 00007f5e4ce15fa0 R15: 00007ffcc36aa328 [ 1273.401634][ T9536] [ 1273.648999][T31186] bond5: (slave bridge4): failed to get link speed/duplex [ 1273.870581][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1273.980211][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1274.089412][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1274.101816][ T9552] FAULT_INJECTION: forcing a failure. [ 1274.101816][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.148799][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.1.8956 Not tainted syzkaller #0 PREEMPT(full) [ 1274.148836][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1274.148849][ T9552] Call Trace: [ 1274.148858][ T9552] [ 1274.148868][ T9552] dump_stack_lvl+0xe8/0x150 [ 1274.148899][ T9552] should_fail_ex+0x412/0x560 [ 1274.148931][ T9552] _copy_from_user+0x2d/0xb0 [ 1274.148962][ T9552] ___sys_sendmsg+0x1c6/0x360 [ 1274.148989][ T9552] ? __lock_acquire+0x6b5/0x2cf0 [ 1274.149017][ T9552] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.149084][ T9552] ? __fget_files+0x2a/0x420 [ 1274.149109][ T9552] ? __fget_files+0x3a0/0x420 [ 1274.149145][ T9552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1274.149176][ T9552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.149212][ T9552] ? __pfx_ksys_write+0x10/0x10 [ 1274.149251][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.149272][ T9552] do_syscall_64+0x15f/0xf80 [ 1274.149296][ T9552] ? trace_irq_disable+0x3b/0x140 [ 1274.149326][ T9552] ? clear_bhb_loop+0x40/0x90 [ 1274.149352][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.149373][ T9552] RIP: 0033:0x7fc9ec19cdd9 [ 1274.149393][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.149411][ T9552] RSP: 002b:00007fc9ed0ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.149435][ T9552] RAX: ffffffffffffffda RBX: 00007fc9ec415fa0 RCX: 00007fc9ec19cdd9 [ 1274.149450][ T9552] RDX: 0000000000004080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1274.149464][ T9552] RBP: 00007fc9ed0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.149478][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.149490][ T9552] R13: 00007fc9ec416038 R14: 00007fc9ec415fa0 R15: 00007ffec6df45a8 [ 1274.149525][ T9552] [ 1274.337040][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1274.357107][ T9554] x_tables: unsorted entry at hook 2 [ 1274.374121][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8958'. [ 1274.509714][ T9561] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1274.521064][ T9561] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1274.534392][ T9561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1274.576227][ T9566] tipc: Failed to remove unknown binding: 66,0,0/134353152:2911727160/2911727162 [ 1274.586834][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1274.609566][ T9566] tipc: Failed to remove unknown binding: 66,0,0/134353152:2911727160/2911727161 [ 1274.622120][ T9566] tipc: Failed to remove unknown binding: 66,0,0/134353152:2911727160/2911727162 [ 1274.645157][ T9566] tipc: Failed to remove unknown binding: 66,0,0/134353152:2911727160/2911727161 [ 1274.696279][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8963'. [ 1274.706303][T31185] bond5: (slave bridge4): failed to get link speed/duplex [ 1274.877359][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8967'. [ 1274.923521][ T9578] team0: Port device team_slave_0 removed [ 1275.096413][ T1642] block nbd8: Receive control failed (result -32) [ 1275.103418][ T5642] block nbd8: Receive control failed (result -32) [ 1275.634385][ T9607] lo speed is unknown, defaulting to 1000 [ 1275.827281][ T9622] __nla_validate_parse: 4 callbacks suppressed [ 1275.827306][ T9622] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1276.060074][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8982'. [ 1276.192315][ T9631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.222230][ T9632] netlink: 'syz.2.8983': attribute type 1 has an invalid length. [ 1276.352629][ T9631] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.454158][ T9637] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1276.528454][ T9631] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.722122][ T5642] block nbd9: Receive control failed (result -32) [ 1276.759933][ T8677] block nbd9: NBD_DISCONNECT [ 1276.768921][ T8677] block nbd9: Send disconnect failed -32 [ 1276.783404][ T8677] block nbd9: shutting down sockets [ 1277.210573][ T8677] udevd[8677]: inotify_add_watch(7, /dev/nbd9, 10) failed: No such file or directory [ 1277.228349][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8991'. [ 1277.228561][ T9631] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.263818][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1277.366787][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.374590][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.471750][ T9665] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8991'. [ 1277.614871][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.811012][T31192] net_ratelimit: 13 callbacks suppressed [ 1277.811035][T31192] bond5: (slave bridge4): failed to get link speed/duplex [ 1277.895646][T31192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.983335][T31192] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.068456][T15518] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.108524][ T9698] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8998'. [ 1278.137194][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8997'. [ 1278.174817][T15518] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.214507][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1278.236214][ T9683] xt_hashlimit: invalid rate [ 1278.349856][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1278.480815][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1278.621196][T31187] bond5: (slave bridge4): failed to get link speed/duplex [ 1278.722791][ T9715] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.9003'. [ 1278.739404][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1278.915729][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9006'. [ 1279.029789][T31187] bond5: (slave bridge4): failed to get link speed/duplex [ 1279.154625][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1279.279899][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1279.364505][ T9751] netlink: 'syz.1.9011': attribute type 1 has an invalid length. [ 1279.416849][ T9748] gretap1: entered allmulticast mode [ 1279.459357][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1280.401002][ T9785] netlink: 'syz.2.9022': attribute type 3 has an invalid length. [ 1281.155271][ T9816] __nla_validate_parse: 2 callbacks suppressed [ 1281.155291][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1281.196068][ T9816] netlink: 'syz.1.9031': attribute type 30 has an invalid length. [ 1281.301150][ T9821] netlink: 'syz.4.9032': attribute type 10 has an invalid length. [ 1281.714706][ T9846] x_tables: duplicate entry at hook 3 [ 1281.747228][ T9849] x_tables: duplicate entry at hook 3 [ 1282.881758][ T9880] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9046'. [ 1282.909132][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9047'. [ 1282.923423][T31199] net_ratelimit: 29 callbacks suppressed [ 1282.923446][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1282.985125][ T9885] netlink: 'syz.3.9048': attribute type 2 has an invalid length. [ 1283.010384][ T9887] Bluetooth: MGMT ver 1.23 [ 1283.042626][ T9893] netlink: 'syz.3.9048': attribute type 2 has an invalid length. [ 1283.069504][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1283.141990][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9050'. [ 1283.190502][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1283.340972][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1283.470467][ T9911] dvmrp0: entered allmulticast mode [ 1283.500909][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1283.619848][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1283.656752][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9055'. [ 1283.673031][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9055'. [ 1283.678795][ T9916] tipc: New replicast peer: 255.255.255.255 [ 1283.690759][ T9916] tipc: Enabled bearer , priority 10 [ 1283.700015][ T9919] netlink: 'syz.3.9055': attribute type 14 has an invalid length. [ 1283.706238][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9054'. [ 1283.740558][T31194] bond5: (slave bridge4): failed to get link speed/duplex [ 1283.894945][T31178] bond5: (slave bridge4): failed to get link speed/duplex [ 1284.066471][T31207] bond5: (slave bridge4): failed to get link speed/duplex [ 1284.199755][T31191] bond5: (slave bridge4): failed to get link speed/duplex [ 1284.271656][ T9945] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1284.869864][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1284.965786][ T9963] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1284.985325][ T9963] block nbd10: shutting down sockets [ 1285.260561][ T9972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9066'. [ 1285.754977][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9076'. [ 1285.818535][ T1642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1285.836071][ T1642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1285.847356][ T1642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1285.868633][ T1642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1285.877130][ T1642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1285.970960][ T9993] bond12: entered promiscuous mode [ 1285.987051][ T9993] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1286.201095][T10021] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9080'. [ 1286.254098][T10025] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 1286.294666][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1286.315223][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1286.340197][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1286.377240][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1286.479137][T10024] macsec2: entered promiscuous mode [ 1286.493054][T10024] team0: entered promiscuous mode [ 1286.506648][T10024] team_slave_1: entered promiscuous mode [ 1286.516643][T10024] macsec2: entered allmulticast mode [ 1286.522512][T10024] team0: entered allmulticast mode [ 1286.528223][T10024] team_slave_1: entered allmulticast mode [ 1286.535169][T10024] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1286.585909][T10014] lo speed is unknown, defaulting to 1000 [ 1286.852487][T10041] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9083'. [ 1286.968292][T10049] netlink: 'syz.0.9086': attribute type 1 has an invalid length. [ 1287.053397][T10049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1287.083133][T10049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9086'. [ 1287.094432][T10053] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1287.123864][ T9995] lo speed is unknown, defaulting to 1000 [ 1287.123928][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9088'. [ 1287.910256][ T1642] Bluetooth: hci3: command tx timeout [ 1287.999401][T31187] net_ratelimit: 18 callbacks suppressed [ 1287.999423][T31187] bond5: (slave bridge4): failed to get link speed/duplex [ 1288.025418][T10066] ip6t_srh: unknown srh match flags 4000 [ 1288.258424][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1288.417829][T10085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9096'. [ 1288.437612][T10085] netlink: 47 bytes leftover after parsing attributes in process `syz.2.9096'. [ 1288.492655][T10085] netlink: 'syz.2.9096': attribute type 6 has an invalid length. [ 1288.510115][T10085] netlink: 'syz.2.9096': attribute type 6 has an invalid length. [ 1288.533052][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1288.671521][T15518] bond5: (slave bridge4): failed to get link speed/duplex [ 1288.790860][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1289.020332][ T9995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.027756][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.036020][ T9995] bridge_slave_0: entered allmulticast mode [ 1289.046078][ T9995] bridge_slave_0: entered promiscuous mode [ 1289.055560][ T9995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.063223][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.070853][ T9995] bridge_slave_1: entered allmulticast mode [ 1289.078870][ T9995] bridge_slave_1: entered promiscuous mode [ 1289.128827][ T9995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.140044][T31178] bond5: (slave bridge4): failed to get link speed/duplex [ 1289.152348][ T9995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.201792][ T9995] team0: Port device team_slave_0 added [ 1289.211736][ T9995] team0: Port device team_slave_1 added [ 1289.288522][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.301397][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.344763][ T9995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.346124][T10108] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1289.361024][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.376514][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.403212][ T9995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.490998][ T9995] hsr_slave_0: entered promiscuous mode [ 1289.497520][ T9995] hsr_slave_1: entered promiscuous mode [ 1289.504457][ T9995] debugfs: 'hsr0' already exists in 'hsr' [ 1289.510789][ T9995] Cannot create hsr debugfs directory [ 1289.928837][ T9995] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1289.953414][ T9995] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.992127][T31178] bond5: (slave bridge4): failed to get link speed/duplex [ 1290.002386][ T1642] Bluetooth: hci3: command tx timeout [ 1290.185339][ T9995] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.217139][ T9995] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.330146][T31178] bond5: (slave bridge4): failed to get link speed/duplex [ 1290.447650][ T9995] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.474702][ T9995] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.551276][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1290.644287][ T9995] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1290.679921][ T9995] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.102252][T31199] bond5: (slave bridge4): failed to get link speed/duplex [ 1291.344806][T10179] __nla_validate_parse: 7 callbacks suppressed [ 1291.344829][T10179] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1291.356815][T10174] IPVS: Scheduler module ip_vs_ not found [ 1291.415465][T10188] netlink: 'syz.0.9128': attribute type 2 has an invalid length. [ 1291.846254][ T9995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1291.860992][T10201] netlink: 'syz.4.9133': attribute type 3 has an invalid length. [ 1291.887806][T10201] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1291.904387][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1292.070276][ T1642] Bluetooth: hci3: command tx timeout [ 1292.144815][T10213] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1292.156770][T10213] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1292.165221][T10213] CPU: 1 UID: 0 PID: 10213 Comm: syz.0.9135 Not tainted syzkaller #0 PREEMPT(full) [ 1292.174630][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1292.184730][T10213] RIP: 0010:klist_remove+0x156/0x340 [ 1292.190066][T10213] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 6b 92 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 6b 92 f6 49 8b 44 24 58 48 89 44 24 08 [ 1292.209712][T10213] RSP: 0018:ffffc900061cf960 EFLAGS: 00010202 [ 1292.215824][T10213] RAX: 000000000000000b RBX: ffff88804d238000 RCX: 0000000000000000 [ 1292.223923][T10213] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1292.231916][T10213] RBP: ffffc900061cfa60 R08: ffffffff901713c3 R09: 1ffffffff202e278 [ 1292.239898][T10213] R10: dffffc0000000000 R11: fffffbfff202e279 R12: 0000000000000000 [ 1292.247879][T10213] R13: 1ffff1101646278c R14: ffff8880b2313c60 R15: dffffc0000000000 [ 1292.255863][T10213] FS: 00007f4ebebf66c0(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1292.264805][T10213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1292.271400][T10213] CR2: 00002000000ed000 CR3: 0000000028708000 CR4: 00000000003526f0 [ 1292.279388][T10213] Call Trace: [ 1292.282686][T10213] [ 1292.285629][T10213] ? __pfx_klist_remove+0x10/0x10 [ 1292.290698][T10213] ? kobject_move+0x5de/0x720 [ 1292.295393][T10213] ? __pfx_kobject_move+0x10/0x10 [ 1292.300423][T10213] ? do_raw_spin_unlock+0xf5/0x210 [ 1292.305554][T10213] ? get_device_parent+0x366/0x3a0 [ 1292.310673][T10213] device_move+0x193/0x730 [ 1292.315108][T10213] hci_conn_del_sysfs+0xb8/0x1a0 [ 1292.320061][T10213] hci_conn_del+0xc36/0x1230 [ 1292.324658][T10213] hci_conn_hash_flush+0x191/0x260 [ 1292.329782][T10213] hci_dev_close_sync+0x821/0x10e0 [ 1292.334900][T10213] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1292.340452][T10213] ? lockdep_hardirqs_on+0x7a/0x110 [ 1292.345655][T10213] ? enable_work+0x1fd/0x230 [ 1292.350261][T10213] hci_dev_close+0x108/0x260 [ 1292.354860][T10213] sock_do_ioctl+0x101/0x320 [ 1292.359469][T10213] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1292.364601][T10213] ? do_futex+0x333/0x420 [ 1292.369030][T10213] sock_ioctl+0x5c6/0x7f0 [ 1292.373384][T10213] ? __pfx_sock_ioctl+0x10/0x10 [ 1292.378248][T10213] ? __fget_files+0x2a/0x420 [ 1292.382846][T10213] ? __fget_files+0x3a0/0x420 [ 1292.387531][T10213] ? __fget_files+0x2a/0x420 [ 1292.392128][T10213] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1292.397080][T10213] ? __pfx_sock_ioctl+0x10/0x10 [ 1292.401939][T10213] __se_sys_ioctl+0xfc/0x170 [ 1292.406543][T10213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.412612][T10213] do_syscall_64+0x15f/0xf80 [ 1292.417209][T10213] ? trace_irq_disable+0x3b/0x140 [ 1292.422251][T10213] ? clear_bhb_loop+0x40/0x90 [ 1292.426938][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.432837][T10213] RIP: 0033:0x7f4ec099cdd9 [ 1292.437259][T10213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.456878][T10213] RSP: 002b:00007f4ebebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.465311][T10213] RAX: ffffffffffffffda RBX: 00007f4ec0c15fa0 RCX: 00007f4ec099cdd9 [ 1292.473322][T10213] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 1292.481305][T10213] RBP: 00007f4ec0a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1292.489282][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.497278][T10213] R13: 00007f4ec0c16038 R14: 00007f4ec0c15fa0 R15: 00007ffe6e0fc308 [ 1292.505266][T10213] [ 1292.508286][T10213] Modules linked in: [ 1292.513313][T10213] ---[ end trace 0000000000000000 ]--- [ 1292.573729][T10213] RIP: 0010:klist_remove+0x156/0x340 [ 1292.614782][T10213] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 2d 6b 92 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 0e 6b 92 f6 49 8b 44 24 58 48 89 44 24 08 [ 1292.690956][T10213] RSP: 0018:ffffc900061cf960 EFLAGS: 00010202 [ 1292.735699][T10213] RAX: 000000000000000b RBX: ffff88804d238000 RCX: 0000000000000000 [ 1292.792812][T10213] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1292.837470][T10213] RBP: ffffc900061cfa60 R08: ffffffff901713c3 R09: 1ffffffff202e278 [ 1292.881980][T10213] R10: dffffc0000000000 R11: fffffbfff202e279 R12: 0000000000000000 [ 1292.919778][T10213] R13: 1ffff1101646278c R14: ffff8880b2313c60 R15: dffffc0000000000 [ 1292.958504][T10213] FS: 00007f4ebebf66c0(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1292.977724][T10213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1292.984893][T10213] CR2: 00002000009e5000 CR3: 0000000028708000 CR4: 00000000003526f0 [ 1292.995804][T10213] Kernel panic - not syncing: Fatal exception [ 1293.002269][T10213] Kernel Offset: disabled [ 1293.006593][T10213] Rebooting in 86400 seconds..