last executing test programs: 5.996146815s ago: executing program 1 (id=1237): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x1d8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x9}], 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f00000006c0)=""/31, 0x1f}], 0x4, &(0x7f0000000740)=""/170, 0xaa}, 0x1}], 0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01002000000000000000000005000000f2ffff010256280000000000"], 0x0, 0x36, 0x0, 0x1, 0x9}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x14}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0x2, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x20, 0xfffffffd, 0x7, 0x17c, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x50, r7, 0xb512f000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000003e50100270900020073697a30000000000800410073697700140033007866726d300000000000000000000000a27d843af7deded99c36f275319e158f4a"], 0x38}, 0x1, 0x0, 0x0, 0x48d1}, 0x14) 5.699774053s ago: executing program 3 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d0110"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x441e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f0000000380)={&(0x7f0000000080)=@canfd={{0x0, 0x1}, 0x33, 0x1, 0x0, 0x0, "820b83e3d6ddf63dc3f371c103bb2d9c0bdb3203b3129277e3847e6a13d5182db04c65e0a7df7ea59b9def44e8285bd841d26d48655a4a521b7fc84b7444a74e"}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x81) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15, 0x44c04}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x9f}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x20048041) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d0110"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x441e, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) sendmsg$can_raw(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f0000000380)={&(0x7f0000000080)=@canfd={{0x0, 0x1}, 0x33, 0x1, 0x0, 0x0, "820b83e3d6ddf63dc3f371c103bb2d9c0bdb3203b3129277e3847e6a13d5182db04c65e0a7df7ea59b9def44e8285bd841d26d48655a4a521b7fc84b7444a74e"}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x81) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15, 0x44c04}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x9f}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x20048041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 5.692323767s ago: executing program 2 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0xc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x100) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x8}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r6, 0x29}, 0x8) epoll_create1(0x80000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "7b4864df90d0eee6", "ecf410db16c697ee206b7e6ad3af5eb4", "6c4fddb4", "1bd3d453e1412fd0"}, 0x28) 5.36174334s ago: executing program 3 (id=1245): socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xc0000008}) r2 = socket(0x27, 0x5, 0x0) sendmsg$nl_route(r2, 0x0, 0x400c89c) r3 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', r4, 0x80, 0x10, 0xb, 0x2746, {{0xe, 0x4, 0x1, 0x8, 0x38, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x7, 0x2}, {0x1, 0x7, "e1cb5a3366"}, {0x7, 0x12, "af168a14195d43c24a0f7e93128802a9"}]}, @noop]}}}}}) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800001400000000"], 0xa0}}, 0x0) unshare(0x8000000) r7 = socket$inet(0x2, 0x3, 0x2) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r6, r5, 0x4, r5}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fc"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$rds(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0x7}, 0x0, 0x0) 5.161798824s ago: executing program 2 (id=1247): r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x3, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000007000010000000000800000073119d000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.047712588s ago: executing program 2 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x8}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x4) 4.915064008s ago: executing program 1 (id=1250): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x80) unshare(0x40080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 4.656792253s ago: executing program 2 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="6e3aa8", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_generic(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0x20004040) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000843) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x9}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) 4.404392183s ago: executing program 4 (id=1253): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x701001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8880}, 0x0) (async) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r5, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfce) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000004fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000000000000400000004000000"], 0x50) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x80, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4c392ea2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x97}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0x80}}, 0xf371cc2a4cc195fb) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r10, 0x5421, &(0x7f00000000c0)=0x9732) 3.855048542s ago: executing program 3 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x4, 0x2, 0x7, 0x10, 0x1, 0x1000001}, 0x50) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x2b, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 3.8504733s ago: executing program 4 (id=1256): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) close(r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x20}}, 0x0) 3.675567934s ago: executing program 3 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x10ffc, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x0, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0xd, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x6, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fb, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x200400d1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x101, 0xbfd}) socketpair(0x27, 0x6, 0x2, &(0x7f0000000080)) 3.536389908s ago: executing program 3 (id=1258): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff7, 0x7fffbffe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x5, 0x1, 0x2, 0x2}]}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000561eaf7db0ff253ce0b95e64304721f2ddb1446c10a079ea59604eb6cee90033babc18d6510820bb15882c2eceae0bd253fde7a65a21ada6ece3a30b0f2e6197115e8cc2c0fab46d328d8b24afd708e2e87f194a496cf74abd3c5fb04a1876f2a25b23b1a4165e9b82ee60e25a62d09b0217fac9200edde54fafb7bb61f3079d22a2aeaaaf261020b5afa7bc615c98a38594b6ecc2ee41", @ANYRES16=r7, @ANYBLOB="000828bd7000fbdbdf251200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 3.508601692s ago: executing program 1 (id=1259): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x230}}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000000c0)={0x4, 0xe7, 0x3, 0x2}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884) 3.44513333s ago: executing program 2 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x100000000, 0x5, 0xf, [0x7fff, 0x5, 0x7f6, 0x51, 0x0, 0x4]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000300), 0x0}, 0x20) getsockopt$sock_int(r3, 0x1, 0x3c, 0x0, &(0x7f0000003980)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="88010000", @ANYRES16=r2, @ANYBLOB="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"], 0x188}}, 0x44004) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x8, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010017", 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000200)}, 0x50) getsockname$packet(r5, 0x0, &(0x7f00000001c0)=0x24) socket(0x10, 0x803, 0x0) 3.066552606s ago: executing program 1 (id=1261): syz_emit_ethernet(0x134b, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.851811886s ago: executing program 4 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c1ff182e8079f39240aaaa613e76c1"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80000000000000000000000000000f08000100", @ANYBLOB='#'], 0x64}}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c1ff182e8079f39240aaaa613e76c1"}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80000000000000000000000000000f08000100", @ANYBLOB='#'], 0x64}}, 0x24000000) (async) 2.828882126s ago: executing program 1 (id=1264): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000020000002e0000000c000500000078f5574423d5754bab13500b7129616596c082f2e9dd8c5e7e6c50ebd66879b3433c51ef5ae0e1b5f0cc9532aac5755f758bb5156b9e587f88fcf7c87e50943df53001c570d6b7632610d0ecc6c35900d507281f2b434521d0535e50d650b19f4c84183a6074fa30f12d4bd4964b80e1951981be2248680bb42397fa9cb39f62f0dbab2620609c58ea6416b91fdac649", @ANYRES32=r3, @ANYBLOB="05002b00000000000600060002000000"], 0x38}}, 0x40080) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) 2.521393577s ago: executing program 4 (id=1266): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x0, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13, 0x77}}], 0x70}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) (async) readv(r3, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="7977886cbd22f8", 0x7}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x200408d4) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x4000050) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100ffffffff00000000010000000400078008000100000000000c0002007f000000000000"], 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000002060103000000000000000000000000090002007379"], 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) (async) ioctl$SIOCSIFHWADDR(r13, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100767469002c0002800800060080000000080003000100ffffbafe02000300000008000100", @ANYRES32=r14, @ANYBLOB="080003000400000008000a00", @ANYRES32=r14, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x48095}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100767469002c0002800800060080000000080003000100ffffbafe02000300000008000100", @ANYRES32=r14, @ANYBLOB="080003000400000008000a00", @ANYRES32=r14, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x48095}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.450990868s ago: executing program 0 (id=1267): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x5) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x44000) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x8041) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x80000000, 0x66}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000040)=0x8) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x8, [{0x1000000, 0x8, 0x2b6}, {0x6, 0x7, 0x4e}, {0x3, 0x8, 0xd83}, {0x1, 0x1000, 0x5}, {0x1, 0x3, 0x2}, {0x7, 0xffff, 0x4}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61, 0x0, 0x60]}}, &(0x7f0000000f40)=""/4089, 0x8a, 0xff9, 0x8}, 0x28) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000003ac0), &(0x7f0000004b00)=0x8) 2.335861726s ago: executing program 0 (id=1268): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x40}], 0x15, 0x10040, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000005c0), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x40}], 0x15, 0x10040, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000005c0), 0x4) (async) 2.31445471s ago: executing program 0 (id=1269): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYRES16=r3], 0x3c}}, 0x810) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.264512551s ago: executing program 0 (id=1270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0xc44) 2.163100604s ago: executing program 0 (id=1271): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfa, {0xa}}, 0x14}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000ff020000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1, &(0x7f00000000c0)=""/1, 0x40e00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x609}, 0x94) sendmsg$nl_route(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e80)=@can_delroute={0x16c, 0x19, 0x1, 0x70bd2d, 0x1, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_MOD_AND={0x15, 0x1, {{{0x1}, 0x7, 0x3, 0x0, 0x0, "5aa1bec69cbaa511"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "d014aa3f045357bb"}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x45, 0x45, 0x67, 0x0, 0xf, "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", 0x3, "2a6450235e8ec9099d13a38dcef8c762f9882b51"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x8}]}) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 370.360437ms ago: executing program 0 (id=1272): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000140)={0x8, 0x13e}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r11, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)=""/4112, 0x1010}], 0x1}, 0xd}], 0x1, 0x10022, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x80c4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r12 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) 364.020242ms ago: executing program 2 (id=1273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) unshare(0x2040400) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect(r2, &(0x7f00000000c0)=@generic={0x8, "d382e523cc4c93588928efea163bc3a05c62e0d479873c5ebb6db958259139a2499e316e023d735eb3573549aab71b239bcdf89239627972120a8d22220283f89d514258ef3193f106c1084cc5dabb237955692ae2ad2a8e64a0ade474fdb28aceca71d1e311bb50a4ba497a0a6b9d145e39b523cdc19b44ab47541836c6"}, 0x80) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet(0x2b, 0x801, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb4}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xc, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000002c0)={0xe2b, 0xc, 0x5, 0x2, 0x6, 0x0, [{0x2, 0x6, 0x3ff, '\x00', 0x1208}, {0x0, 0x37, 0x1, '\x00', 0x2109}, {0x4f, 0x4, 0x1}, {0x7, 0x10001, 0x5, '\x00', 0x1405}, {0x7, 0x0, 0x6, '\x00', 0x2001}, {0x2, 0x9e9, 0x9, '\x00', 0x1000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x200448c0}, 0x4054) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 259.216895ms ago: executing program 1 (id=1274): syz_emit_ethernet(0x134b, &(0x7f0000002200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd62d370e913152f00fe800000000000000000000000000039fe80000000000000000000000000003a5c08010400000000fe8000000000000000000000000000bbfe880000000000000000000000000101fe8000000000000000000000000000bbfc0000000000000000000000000000010c21880b00ef00020005bbd7a78683c6ee1054b5bc748e6414d8cd890a5dd30e89713f93d257c35b15eddbe36a6b214d464a64f66a7ea8b701eaf58059b870f530b29269738e7c6c45e62b641af9157c4bb19f03ba4282e1e3606a19d34f87c48be3bbe45c9bf53ef0949314272a5f873454574b8cb720824772d26534fbdf017054ddb9d56832f022c53be34c7a2a992bf1bc2b66780f9504a4a4409648de7bc80c635afd2fe27dae9b3b9e00c9dbf5a32b6b1c972d832973973d24492e59534c7c9f3af0b96cb027e8e6a29fb9779d2ffccdee1b63bb73376a67e990d902bde44986306d3868bd3da440ee233e28fa2da2119402d60e70ea29480800080082f9fa1ffc62bc5ba049fd2468f66746c312a90a3796c7277c35b6454db98c33661fbaffd00a25ebbdf12c9d2df21d673ae67e9d64f00d465b1de4fbfa5a3138f9b0d7d84962417e4d81333cb615c35f88d81e1b8cc25ab33cfe151b1b8535e707a03a4c209b37adcbcb34edcb2f722c3ec06bb61dc6801cd6b6aa28d9fead461395cf1f4893f91f9992981255aa708bbf39e4bee195f7695ae9c603e890dce74ba5cd3fc6ca3973768343c0508ee6ec53143be89b6336e93a3d0ad568f73b8edb7277c7bbe39909ac7d6ef70f36361a01f1d655a20412cc03100491c824db5b29c20f9e80b82faf05d7f00ed86931aecd98bbd9890001d486f28c5defcf94777e4d4379c8b8c20537edaf6e17a1c9411f59d158a523a9721c1df09c0ee21e4851d8a72600a1a200ab339e9ee2c2fb4dba62eeb45253cf54d45b6a5c336cfd8b24ac867784ef02b51fd83ade45a90e69f0001976837d3546f3f9635c3067046ae50b9e0d2be1781728ca622af3e80f3f44dbaec3bd602f09058f264adba712dc975f0eb10182bcea9b7f6eab12ce7f06fe838b00d2dbfd6cae16ffdef9800e8a85d4b52f708199b1abddcaaa6453a9af37d36a582281ae950e6bc23355e4a20e16b39c6f3cf3afc3a05ac052483b5d6f89bb73e71c989c6f71df6e90bd4a1a82942c8a01465f2f784412a608356c6571a3073dd8abe3122ddfe8559ea914073178a98d5f05f41d9802091c00f42cf3dda5d8a18ff567f2b3bea49dd656fe4469fa97f700547211c5d5d890270776ccaf2254958b7087d2103814f1dc4223b01e8ce25d1c5663e8d12be2cb55867b18c1fb2e8ae353ad6123f00b5d19e29ae59063ea2016d840d9d58ff01dcc5298aec77d8f15d5a3f308f44cde10b0e37f1b755fffda7fcde24bedfa312d543cf80e4dc216fc72a20ec818087f7a6906440778b7d65bd46213594aede153b5f3bce09763a4ef41f1ca35d5b0c1f8e530993ab14f721f8af45a2f7a6042588d62c710e0cf8169b936bd0f857a4b839950f682710559dbbb7b15b836010af1c33b2dd6d9bb79ea6c963dc98a620b168f991254b017704703a2e45688b022a9a62d90005a46b39129c23cdd57d50cdf85f830bbcf501d9f5c728f709e302d9bac0c8c18465ad0ec9a05673e14d6d96a584ce2d1f57232f216449f36d7e82823c94574d17eb748bbe61d57386ec4b840bb251af3960f3ea7529c16b299119f7974bbacdb05ea3543c63981b2f5f2808c2cae71e100a025b6167646f3b428eb7df372decdd5d84eb32dd39d371f48658d60c1398433f9498d8162a4c4e7f1425dc01214aef779d14cdf5297594d43513e831df727c6a201b11b2369e25da013ebebce40d97f8dfe35dcea23643409878d343475a3a840dd336a3bf3a8aa05e9f79568cffd81f49059ad977881674c01e8ea4449b85bad71a95bed2fef74682db67ae243c18b8481c96a85517964f37356fe8acf9f170ee222ce1c72ff7eb2955f28c0569f458ac305bbf50ffee27d9fbd59f7270fad72e5d233fa35df83277de2a0c4b15475fcaf0a9df957cd16c03dc7cdde4da6492844a7c1db3af03a78e1b834e718f8986eb0cd9db98ec9713dae76d072ff15d59ce23697384b4787ce83a894a27b21035435b1269d48572cc819c7c01623fd59b8366a0990bc6e630214bb14dcdafb7f61832ce12ec4c8b4f34e5b405af7a511e299e725202b6de93d611d911ccbbfa455b7d7550f2b5e2e3cb1c3cf6be9b5397e687e03bf36105f6536dcc92d43c365be3d50d579040bb02a7f52fed96f48b4575065bbc1f0c36f489fb6dba725e01bff9db29b2523059f366013e7141df411fda40cbdc4b4cbdaa74c00b9c59bb06e99779b588b2bf87aca352eaf1e43c7a49e657f80d0ae4500ec6f63f986cd00cb265d516971c3c0428f3d0c7bb218626be544b3ad8150df7e3969e3f45edea8ecfcba6d6afdb991c5475866b065a2e848b50e0d402c2a2df99ed95b835c8a4670a6897d3bfe77601e6038dbf57674709336464bf5c6d4203f55ece30d34e8a1b4a1731c8761c82a331b42cfe02fcf700abe08d6c8f7e15dd9536dc217ec36fc9047255f21a7d221606aca8dcc03fdcb5fc90ccd4e9b03df861ab9a436ae38bf8e87329551a0f65559c4f3979e03b276bcae4cbeb2793decfcf2883f64138766c285a430b7531b3e07c08723d3d3ceeb831db0b9d6050881a5b3214ce127ee9d820f3381f7e128e8d4623481352f6844f04bcce2d74b34d6fd63c2ca967f1bc4bb35f71216f952159101d55aa7423e28ae3cd0b83f996038286f46b8efbe74a4e7edaeae38fefbb5d3f18f676ec4fdf6b6ce1f888adcfc38435ba680270604e7720cbbc9024f2b0daa995c3253aa6c38b95578bc7871defb879b43d9a0a6cae96d4341e4454c93eae07d1db9c15bdb32caf94934f8c25102a314d377b7f92868dfbb8ba59057c0529b88ca3d3417020c98737dbd986cee5aefe3135e304724011f957a326b97f330a8a0e17abb59ab9277c4f13c250e0e5a586e80087478ff31d740db2ded7641f1e04a4ec99a5bb899495b6cc950e2c0047b68dd183f9f9372403bf506c9016336bd5676f1b7cbdd271bea8e36402df2884e0b3efeae78f2ce022e9ba15bdc56e4007cb5c0a406c8cf1c0b9ab3d407bcc15e31b8b101cc235a284cef6bde629e006f88822dcc0db386a28bf96c72edc9d65c20f2492d0a746b8f2e6a7714b5d47602798a569e6acda986d88c3b9ab1942bfa1afc55b920ab375e16a7e22d3b31208bc5a8be8cb80936ceb1f7ee66952c122349611217a003c82f8467b332b1531749fb7a84dc5ae1701eeec8ccd2bb84baf074e34d9abf5d73b321f0b9bc10cc0cbb28bf08d5a4b7b83766e070f93fb833859483efaea4fb6034ebe1799dee3842759a3e613744e909f0e017a424ced41a454d0c65b5d15849e06ebb8e702303206f46f6a91c3d6af23c4c0843a2cce1ea5077fbac9ff08b6bae4e7fe0d637824c4d41a3dc0160eeae7d4fec4d1b98c853d789bc1ad42c6c8a55c03c5206ef45c381e5558c85d0b8a777d905c570e6e344b390d46355baaa3596d50cf04d9bd59e3891a12778964e65b65b1042c3488cd2dac54321d6ba2e89de7deba334ecc6262dcf74a498f74959742ecfe67b8e745990d27d987d015df0237d6030ec624aff03b3b1d0d61496ba974e0cf1902fe99772f07ba28ae142547dd9b7cb1bfdc82f534da737f706f716c82cde682a9a0c54a8fe015fafa08d25fb784b26bc8d2998b0a24e444a8ad6c5597d20d93ceff0dc564911f65a5facc9c57b86a7fce5216fa30f8a417db8def0bc5e2b54fa5f7df30482a526f0403e8a87b77f74db95fc898a32f1b6064b820330a08aa5eee591dabacd4918540192c6ef597cdac45c8aa89d255257768dc6b6e6c28a8c34c7f4c12c5ffe952b1843f8e26cdfcec7d41da19a2a828c2f32e2c620240c4d1d402323aa769050a06a64519452fd6c1e1a2d8d4f9085e8279e894b957930bfabf1ae2457e5817671bc5172a5639aae481a8fe3e112004aa53187ff7c1dead21db638a720f5fcdeda4b8026e801c621a765a5ec10fd461a0c588ac82d0914527cb029c2494fa26058a23e562d6f0e0ba45bbb971a50bd8e18b9d75cd7f266b1bbe89f4de212b465e54e520549c131528b8f073ad7d0cdee503cd0cbb78d485862809f12e3875c2400da2b9112ac17e765c76c381bc38b7bcba8f976f1682779b393c8821e0e22a05a02abb6ee111a289326270675f92e815c3e0a82a606fea1a89877d0f6a98b0829ced6a724a250fbaf38e8630822091ad2960a7f45ebb0819ba8be6e1895d7217cba9d90149f04e384a08c71654e5392b18e19e2a080a01804e76d04160caa59159429df0cd1cb37aff1b4300aac7106472963c94bab290a952b5e4274b675550450671dd4890d376ef2557039c21d747429b13681f8438a69333780b1541e1cd43be2694519ad493f43d65691bef33a58a1fbb285fd56899a19b44b6a97e93a8f75aafbda3722531306e8a30094e28b7a7c08e95356b2c1817427792a537258cf92914da46f5963552baff25f8bbe542bf8f1f4bdf0154182711c14371d223a1b58cef4ee3c8ee306dd2b79256c536d2a30c705340feb561784037e4f87ef89e00907cffe2daefa86ca071adf80eb08c007bf920550f64a5a2c2bece6ae48f95b11209236c55f8b16983149a10a4cdd6dfebdcd309f44f2c8167b463eae66a7934355083b1d5a64748f900a2a686321e6db4a0fa1975d00fea3b2e08f09419d1e8a2145352a7af0deb2ccf86df742a487e6178742e0d62b77921600e6c912bddfd97a45897f6462a496c08610373d45bb5e8677e376d8583aed682d3b133564f6aa13a1161fab9ea329fc965d6ae18e6b16742618c40a400a4bae0999fd73bdd6faa2f1eb1a77592627603876706d7fb05a5abf57b9c1d6137fedf94101ec16f66a4e1e64cbfcba9c3e093665f4ab3af3f2b5a5e755ed4acca62b0e8bd9d138bb7d3611c6666276e61ebeda4f1d753fc5b0d4be5d4785107a26dceba13ca5ebe3ec99d23f1c385b12c76547af712913a2548712fb5e3f121ede1a4f57c3aaa6df19b5acdf4ac7d819f01df0406d30c3e59dc6fc0e39bf03fdec5f86b4b5718defbd826eb2f1920d39e707bb0398231433290a6730e6ab15989d21e58e4418be5f24772b2746c35bcc04037b4e395bc34cf8bc1ac629976949129bd792bb9052d9e43d9348aeae8849ef1d72daad197c8d5a735f4c3f2a40ca016c714cd3bfe6dfd23449af26fc793260bbe7cbb671e8e6883124e92ea4e18c5ea8128d958d42bb92c3a0d804030019e9d57fb8353c44b8f21dd41bba5597d3518973ce4e2e3ab09ded90dd0aa90151b54a2ba36e654cb4c4678a677928e4eb0d98e92dc17544d257fe792db6aadb3b2a183b776090d1e4d4e157c3555ebacd2edc9d64d2ac446c7149764e894246f04a583fbcaa30d5d7a71eeabbcaa1df5c1c6f6d772ff610cded6dc529bc3346cd04073f079fbe3294af5088bfa93ced3a64d3ed694c927f2554bc402d9071c1adcae7c2efda2286bc1cf2a8cb6c398c71474a422ab5e1ee07a101f738218e0cf9d91dc540f6dc772d24f4df2aa6afad2bfcd0ad7b1b4a3706af9fa989c63009f396fad9688e7846cdf65a762a8652740b4960a2b0de7351c260cdbaa34e9049784de4b849cadb48a0410aa617b15d3eee81171092ed9933eecc9433f4c759f9c1d0e7e7ddb0dd9a5124c40654e74ab44cffbee328162b3c4657b552a4dfd24f0c4c460f5a9b41269e2d165633ef8cbe5a29235a3d6377873b32f34622c00ffbf8d66541910f0da036221731cc3cd40fec1b59e3198de3ec530eb8e5501e4187fe1af7be8aed6fbbc1a1abcb0cafcdae6caaf0a97bac8ba21e2d8190a5f7054fb49fac835f925f35d4ac66b79f6ca390a0c81a3e859a81029f72c8d1f29244537d8e388baf5a78c78cce9e1031f7248bf85860d27ab183cb35b092a6d0bcb3e89432b7d3459f2f7d611017d08f34dcc9a6147c891e814dd76b452281bceee11e780fc5afdc0ba1bf497e7b93e33ab8da5b13247773da1cb42dded55255c639a62d0cf4f1beab6a278d622be1731e0723fb2d4133bb9d97bc6c856e742c51607d1508e68a9a9afe11c4787b9f8149c15fadb45ed3a5e7ddfcb962cdee5a36f0a6a82fa8dc8f7aa72f7958070e017857e24d824a3390c04abd3e24b2f43b753d25c43647fc517eda98b1ba98205e000086dd67090b7d6f76008545e503b1d27e903c10550cd6cca61d23b441e1b293daf808d6e9b67059aabe5c849c9372a06fecfbb0baa56b45b4f994c7cd653df28f0098677239e3177b8538514f0daaed4d6820211fd81f55d21d51446001f68a938dd7d263976b905b84b513753fee64d96b64410709f45eedededf67a5265c351ef64befaa9614b76b3b57146b1b478d8646d505249d821bdfff9057364a2fdb9700d08e370d62c0bb4a7a427fbbaf507aac233e464b3c6fb98fa7ec56cc675ab97680debc07292321fed129239ac926ca79d80307d3ec309e59fb774df27c0403bc928ad96fc0e8cfbd65a7218b2346927e36d5a9b080088be000000041702ea070100000000000006080022eb000000032704d60202000000000000000001a104080065580000000103919753aecc5c05e544a67cbd30df803149f8e19d4e004add868678ff5ba7abdafd3f0a144a5315f01c87f96bc88ebcacee08975ad1fe0f3c864581eefd9be9846dce10367f262b0f0b50a9d548b886dc9c3e7b8b2587a20acd353eed26165aa6ecee4cd009e081b9345d5b13165fabd85ea2eb1cb1ffe733503af827ef0019de7d6d46f46824c57a2ac7204f7757593c043f920b0db40a118e7f986b058e87c19075c2d7ae4c459dbedf343c177185b9"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 257.427157ms ago: executing program 3 (id=1275): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000000000011, 0x3, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x93c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa91f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x36326772}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbf62}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x5) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4) 248.352937ms ago: executing program 4 (id=1276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280080001006873720024000280080002"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x33, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0x2, 0xffff, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa667}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 0s ago: executing program 4 (id=1277): r0 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) splice(r0, &(0x7f0000000180)=0x40000000796, r0, &(0x7f00000001c0)=0x6e4, 0x4, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x19}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x5}]}, 0x70}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000005}, 0x4084) kernel console output (not intermixed with test programs): performance. Setting the MTU to 1532 would solve the problem. [ 79.937133][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.016278][ T5623] hsr_slave_0: entered promiscuous mode [ 80.022651][ T5623] hsr_slave_1: entered promiscuous mode [ 80.028681][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 80.034482][ T5623] Cannot create hsr debugfs directory [ 80.081609][ T5622] hsr_slave_0: entered promiscuous mode [ 80.088122][ T5622] hsr_slave_1: entered promiscuous mode [ 80.094471][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 80.100208][ T5622] Cannot create hsr debugfs directory [ 80.190090][ T5620] hsr_slave_0: entered promiscuous mode [ 80.196436][ T5620] hsr_slave_1: entered promiscuous mode [ 80.202753][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.208515][ T5620] Cannot create hsr debugfs directory [ 80.455947][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.468359][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.503160][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.513165][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.521199][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.531776][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.567962][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.577080][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.657761][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.669296][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.681962][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.693080][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.700917][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.712207][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.720093][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.730734][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.803260][ T50] Bluetooth: hci4: command tx timeout [ 80.824531][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.835982][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.845155][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.855448][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.863872][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.873294][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.882531][ T50] Bluetooth: hci0: command tx timeout [ 80.890937][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.897995][ T50] Bluetooth: hci3: command tx timeout [ 80.900317][ T5630] Bluetooth: hci1: command tx timeout [ 80.903530][ T5624] Bluetooth: hci2: command tx timeout [ 80.918250][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.007194][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.035045][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.046595][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.056502][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.065951][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.074723][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.084304][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.091963][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.100976][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.171580][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.217279][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.224770][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.255092][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.262312][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.272210][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.285320][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.293926][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.303973][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.311752][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.321294][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.330436][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.339932][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.354233][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.418711][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.447820][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.454959][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.489637][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.496765][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.577662][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.633626][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.666304][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.688595][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.714855][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.722050][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.760521][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.804601][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.811773][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.829615][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.836749][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.856321][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.863497][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.879038][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.945729][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.952933][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.987329][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.994540][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.458567][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.637198][ T5632] veth0_vlan: entered promiscuous mode [ 82.686363][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.714455][ T5632] veth1_vlan: entered promiscuous mode [ 82.856195][ T5632] veth0_macvtap: entered promiscuous mode [ 82.882542][ T5630] Bluetooth: hci4: command tx timeout [ 82.909112][ T5621] veth0_vlan: entered promiscuous mode [ 82.921531][ T5632] veth1_macvtap: entered promiscuous mode [ 82.951313][ T5621] veth1_vlan: entered promiscuous mode [ 82.967917][ T5630] Bluetooth: hci1: command tx timeout [ 82.973492][ T50] Bluetooth: hci3: command tx timeout [ 82.978950][ T5624] Bluetooth: hci2: command tx timeout [ 82.978973][ T5640] Bluetooth: hci0: command tx timeout [ 83.050125][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.096141][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.109261][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.194107][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.223266][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.246108][ T5621] veth0_macvtap: entered promiscuous mode [ 83.274113][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.287483][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.331510][ T5621] veth1_macvtap: entered promiscuous mode [ 83.354257][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.365815][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.448250][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.497125][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.525780][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.535796][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.563949][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.573371][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.601071][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.610828][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.634701][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.643101][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.661533][ T5623] veth0_vlan: entered promiscuous mode [ 83.701689][ T5623] veth1_vlan: entered promiscuous mode [ 83.734020][ T5632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.781740][ T5620] veth0_vlan: entered promiscuous mode [ 83.840882][ T5620] veth1_vlan: entered promiscuous mode [ 83.861120][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.880099][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.904443][ T5817] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.941889][ T5622] veth0_vlan: entered promiscuous mode [ 83.976355][ T5623] veth0_macvtap: entered promiscuous mode [ 83.988489][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.003214][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.009049][ T5622] veth1_vlan: entered promiscuous mode [ 84.018864][ T5818] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 84.038133][ T5818] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.051883][ T5623] veth1_macvtap: entered promiscuous mode [ 84.059285][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.105316][ T5620] veth0_macvtap: entered promiscuous mode [ 84.147083][ T5620] veth1_macvtap: entered promiscuous mode [ 84.187314][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.198756][ T5821] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.256821][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.284855][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.311769][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.323714][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.340016][ T5622] veth0_macvtap: entered promiscuous mode [ 84.351181][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.368547][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.396939][ T5622] veth1_macvtap: entered promiscuous mode [ 84.427186][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.488057][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.515919][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.575158][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.584842][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.680569][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.777766][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.802133][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.820736][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.858767][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.878815][ T5850] gretap0: entered promiscuous mode [ 84.891287][ T5850] vlan2: entered promiscuous mode [ 84.935918][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959843][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.969255][ T5640] Bluetooth: hci4: command tx timeout [ 84.986068][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.004908][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.033145][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.046224][ T5640] Bluetooth: hci0: command tx timeout [ 85.047160][ T50] Bluetooth: hci3: command tx timeout [ 85.051729][ T5640] Bluetooth: hci2: command tx timeout [ 85.051750][ T5640] Bluetooth: hci1: command tx timeout [ 85.219038][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.219427][ T5862] syzkaller0: entered promiscuous mode [ 85.232621][ T5862] syzkaller0: entered allmulticast mode [ 85.244368][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.252132][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.269261][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.371956][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.397961][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.489531][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.532550][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.689025][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.770612][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.122444][ T5879] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16'. [ 86.389645][ T5748] IPVS: starting estimator thread 0... [ 86.403585][ T5889] IPVS: dh: FWM 3 0x00000003 - no destination available [ 86.512528][ T5893] IPVS: using max 37 ests per chain, 88800 per kthread [ 86.800347][ T11] cfg80211: failed to load regulatory.db [ 87.173228][ T5925] ipt_rpfilter: unknown options [ 87.453123][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 87.737265][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 87.931334][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 87.966041][ T5956] Zero length message leads to an empty skb [ 88.046706][ T5942] team0: Port device team_slave_0 removed [ 88.340857][ T5964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.364161][ T5972] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 89.156552][ T5991] netlink: 'syz.1.42': attribute type 21 has an invalid length. [ 89.341232][ T5994] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 89.365318][ T5988] Cannot find set identified by id 0 to match [ 89.451372][ T6001] __nla_validate_parse: 1 callbacks suppressed [ 89.451390][ T6001] netlink: 68 bytes leftover after parsing attributes in process `syz.4.44'. [ 89.534595][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 89.630512][ T6004] tipc: Started in network mode [ 89.658527][ T6004] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 89.704578][ T6004] tipc: Enabled bearer , priority 0 [ 89.870800][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 89.886699][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 89.897768][ T6019] netlink: 'syz.1.49': attribute type 25 has an invalid length. [ 89.919854][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 89.931625][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 89.963023][ T6023] tc action pedit 'at' offset 9 out of bounds [ 90.032927][ T5996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.060012][ T5996] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 90.151028][ T5996] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.158322][ T6030] bridge_slave_1: left allmulticast mode [ 90.163211][ T5996] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 90.180960][ T6030] bridge_slave_1: left promiscuous mode [ 90.207535][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.228397][ T5996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.239344][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 90.269349][ T5996] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 90.289395][ T6030] bridge_slave_0: left allmulticast mode [ 90.308723][ T6030] bridge_slave_0: left promiscuous mode [ 90.338723][ T5996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.340529][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.356348][ T5996] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 90.415448][ T5996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.437082][ T5996] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 90.545267][ T6050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.55'. [ 90.545653][ T6053] netlink: 6212 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.622185][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 90.653873][ T6053] netlink: 'syz.4.56': attribute type 4 has an invalid length. [ 90.704518][ T6063] netlink: 'syz.4.56': attribute type 4 has an invalid length. [ 90.705583][ T6060] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 90.781875][ T5727] tipc: Node number set to 11578026 [ 91.125085][ T6063] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 91.713543][ T6121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.772157][ T6121] Cannot find add_set index 0 as target [ 91.884374][ T6133] sctp: [Deprecated]: syz.3.67 (pid 6133) Use of int in max_burst socket option. [ 91.884374][ T6133] Use struct sctp_assoc_value instead [ 93.829351][ T6180] openvswitch: netlink: Message has 16 unknown bytes. [ 94.424512][ T6207] netlink: 'syz.1.79': attribute type 15 has an invalid length. [ 94.577445][ T6214] __nla_validate_parse: 57 callbacks suppressed [ 94.577475][ T6214] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.82'. [ 94.647463][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 94.656345][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 94.665754][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 94.678186][ T6223] netlink: 4424 bytes leftover after parsing attributes in process `syz.4.85'. [ 94.725850][ T6214] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 94.764129][ T6214] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 94.774383][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 94.837910][ T6224] netlink: 'syz.3.84': attribute type 5 has an invalid length. [ 94.871481][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 94.927293][ T6224] geneve2: entered promiscuous mode [ 94.939058][ T6207] sctp: [Deprecated]: syz.1.79 (pid 6207) Use of int in maxseg socket option. [ 94.939058][ T6207] Use struct sctp_assoc_value instead [ 94.967905][ T6224] geneve2: entered allmulticast mode [ 94.978540][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 95.007438][ T48] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 51051 - 0 [ 95.027848][ T48] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 51051 - 0 [ 95.176270][ T6235] netlink: 'syz.4.88': attribute type 14 has an invalid length. [ 95.201703][ T48] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 51051 - 0 [ 95.227302][ T48] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 51051 - 0 [ 95.357929][ T6242] syzkaller0: entered promiscuous mode [ 95.379267][ T6242] syzkaller0: entered allmulticast mode [ 95.786096][ T6264] bond2: entered promiscuous mode [ 95.821244][ T6264] bond2: entered allmulticast mode [ 95.855133][ T6264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.359093][ T6297] 8021q: VLANs not supported on ip6gre0 [ 96.457891][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 97.333180][ T6325] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.109'. [ 98.073285][ T6319] bond0: Unable to set down delay as MII monitoring is disabled [ 98.954306][ T29] audit: type=1800 audit(1782536927.804:2): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="blkio.bfq.time_recursive" dev="tmpfs" ino=152 res=0 errno=0 [ 98.997226][ T6375] syzkaller0: entered promiscuous mode [ 99.004257][ T6375] syzkaller0: entered allmulticast mode [ 100.219195][ T6396] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 100.408716][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.426116][ T6404] batadv_slave_1: entered promiscuous mode [ 101.110198][ T6441] IPv6: addrconf: prefix option has invalid lifetime [ 101.192118][ T6443] syzkaller1: entered promiscuous mode [ 101.202850][ T6443] syzkaller1: entered allmulticast mode [ 101.209411][ T6445] __nla_validate_parse: 4 callbacks suppressed [ 101.209429][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.144'. [ 101.235956][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 101.245739][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 101.940956][ T6474] netlink: 56 bytes leftover after parsing attributes in process `syz.0.152'. [ 101.977425][ T6474] bond1: option tlb_dynamic_lb: invalid value (64) [ 101.987024][ T6474] bond1 (unregistering): Released all slaves [ 102.009419][ T6477] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 102.022430][ T6477] netlink: 'syz.0.152': attribute type 2 has an invalid length. [ 104.314887][ T6447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.554801][ T6482] team_slave_1: entered allmulticast mode [ 104.765586][ T6497] syzkaller0: entered promiscuous mode [ 104.780545][ T6497] syzkaller0: entered allmulticast mode [ 104.812786][ T6503] TC_ACT_REPEAT abuse ? [ 104.871257][ T6497] Bluetooth: MGMT ver 1.23 [ 104.957318][ T6516] trusted_key: syz.1.164 sent an empty control message without MSG_MORE. [ 108.054365][ T6523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.290818][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 108.346853][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 108.473295][ T6581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 108.688057][ T6590] batman_adv: batadv0: Adding interface: dummy0 [ 108.688540][ T6585] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 108.705280][ T6590] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.761131][ T6590] batman_adv: batadv0: Interface activated: dummy0 [ 108.857366][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.864539][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 108.871555][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.903946][ T6601] netlink: 'syz.3.185': attribute type 12 has an invalid length. [ 108.957810][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.958038][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.967361][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.987781][ T6601] netlink: 'syz.3.185': attribute type 12 has an invalid length. [ 109.019071][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.058065][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.136809][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.179509][ T6620] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 109.187754][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 109.257174][ T6620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.266619][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 109.298965][ T6627] openvswitch: netlink: Tunnel attr 324 out of range max 16 [ 109.316235][ T6629] bond1: (slave veth0_to_bond): making interface the new active one [ 109.330442][ T6629] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 109.424971][ T6620] bond1: entered promiscuous mode [ 109.447416][ T6620] veth0_to_bond: entered promiscuous mode [ 109.466025][ T6620] bond1: entered allmulticast mode [ 109.486697][ T6620] veth0_to_bond: entered allmulticast mode [ 109.695888][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.727592][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.490171][ T6643] syz.4.191 (6643) used greatest stack depth: 18312 bytes left [ 110.933110][ T6692] warning: `syz.4.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.951924][ T6692] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 111.016201][ T6692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.048206][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.059986][ T6692] bond1: (slave team0): Enslaving as an active interface with an up link [ 111.083726][ T6692] bond1: entered promiscuous mode [ 111.089031][ T6692] team0: entered promiscuous mode [ 111.094428][ T6692] team_slave_0: entered promiscuous mode [ 111.100392][ T6692] team_slave_1: entered promiscuous mode [ 111.107017][ T6692] bond1: entered allmulticast mode [ 111.112563][ T6692] team0: entered allmulticast mode [ 111.118581][ T6692] team_slave_0: entered allmulticast mode [ 111.124870][ T6692] team_slave_1: entered allmulticast mode [ 111.355718][ T6713] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 113.473543][ T6678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.621190][ T6758] Cannot find add_set index 0 as target [ 113.719334][ T6761] x_tables: duplicate underflow at hook 1 [ 113.797381][ T6761] bond1 (unregistering): Released all slaves [ 113.869612][ T6776] __nla_validate_parse: 6 callbacks suppressed [ 113.869629][ T6776] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.228'. [ 113.928176][ T6780] netlink: 100 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.971726][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 114.005131][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 114.032595][ T6782] netlink: 'syz.0.229': attribute type 16 has an invalid length. [ 114.041601][ T6761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.413775][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.457337][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.606026][ T6802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 114.615944][ T6802] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 114.857274][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 115.833972][ T6834] bond2: Removing last ns target with arp_interval on [ 116.882800][ T12] wlan1: Trigger new scan to find an IBSS to join [ 117.517874][ T6797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.757631][ T6845] IPVS: set_ctl: invalid protocol: 81 172.30.1.3:20003 [ 118.020949][ T6859] syzkaller0: entered promiscuous mode [ 118.043833][ T6859] syzkaller0: entered allmulticast mode [ 118.144517][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 118.156249][ T6869] netlink: 'syz.1.251': attribute type 13 has an invalid length. [ 118.165739][ T6869] netlink: 'syz.1.251': attribute type 17 has an invalid length. [ 118.254037][ T6874] netlink: 'syz.3.252': attribute type 4 has an invalid length. [ 118.275560][ T6874] netlink: 17 bytes leftover after parsing attributes in process `syz.3.252'. [ 118.380200][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 119.144786][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.152307][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.442876][ T6865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.478102][ T6865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.842984][ T57] wlan1: Trigger new scan to find an IBSS to join [ 119.928211][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.936647][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.948448][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.970775][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.977981][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.988804][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.995923][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.013367][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.023159][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.045623][ T6869] veth1_vlan: left promiscuous mode [ 120.051840][ T6869] veth0_vlan: left promiscuous mode [ 120.059818][ T6869] veth0_vlan: entered promiscuous mode [ 120.068532][ T6869] veth1_vlan: entered promiscuous mode [ 120.078687][ T6869] veth1_macvtap: left promiscuous mode [ 120.085998][ T6869] veth0_macvtap: left promiscuous mode [ 120.093381][ T6869] veth0_macvtap: entered promiscuous mode [ 120.106771][ T6869] veth1_macvtap: entered promiscuous mode [ 120.117563][ T6869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.128930][ T6869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.140318][ T6869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.152391][ T6869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.211831][ T6879] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 120.232647][ T6879] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 120.253038][ T6879] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 120.268430][ T1160] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.289826][ T1160] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.327839][ T1160] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.352456][ T1160] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.956253][ T6888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.364186][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 122.423476][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 122.460480][ T6951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.266'. [ 122.473533][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 122.480916][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 122.507148][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 122.518118][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 122.678825][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 122.804431][ T14] wlan1: Trigger new scan to find an IBSS to join [ 123.099005][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 123.661747][ T7006] syzkaller0: entered promiscuous mode [ 123.668295][ T7006] syzkaller0: entered allmulticast mode [ 123.734883][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.814847][ T7014] tipc: Can't bind to reserved service type 1 [ 124.172300][ T29] audit: type=1804 audit(1782536953.014:3): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.283" name="/newroot/67/cgroup.controllers" dev="tmpfs" ino=356 res=1 errno=0 [ 124.194727][ T29] audit: type=1800 audit(1782536953.024:4): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.283" name="cgroup.controllers" dev="tmpfs" ino=356 res=0 errno=0 [ 125.250398][ T7029] netlink: 324 bytes leftover after parsing attributes in process `syz.3.286'. [ 126.224815][ T6980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.791099][ T7039] batadv0: entered promiscuous mode [ 126.809283][ T7039] macsec1: entered promiscuous mode [ 126.818518][ T7039] macsec1: entered allmulticast mode [ 126.824339][ T7039] batadv0: entered allmulticast mode [ 126.833688][ T7039] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 126.849268][ T7039] batadv0: left allmulticast mode [ 126.865346][ T7039] batadv0: left promiscuous mode [ 127.116633][ T7071] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 127.196692][ T7071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.205689][ T7076] bond0: (slave bond_slave_1): Releasing backup interface [ 127.247960][ T7078] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 127.304435][ T7086] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 127.304826][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.381089][ T7086] bridge2: port 1(vlan2) entered blocking state [ 127.403867][ T7086] bridge2: port 1(vlan2) entered disabled state [ 127.419755][ T7086] vlan2: entered allmulticast mode [ 127.446181][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.458933][ T7086] bridge2: entered allmulticast mode [ 127.474628][ T7086] vlan2: left allmulticast mode [ 127.498298][ T7086] bridge2: left allmulticast mode [ 127.508362][ T7082] nbd1: detected capacity change from 0 to 63 [ 127.559394][ T7087] block nbd1: NBD_DISCONNECT [ 127.569503][ T7087] block nbd1: Disconnected due to user request. [ 127.577194][ T7087] block nbd1: shutting down sockets [ 127.590911][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.600370][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 127.613431][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.622602][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 127.632270][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.641443][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 127.649273][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.658419][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 127.671477][ T1601] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.685871][ T1601] Buffer I/O error on dev nbd1, logical block 0, async page read [ 127.693873][ T1601] Buffer I/O error on dev nbd1, logical block 1, async page read [ 127.704075][ T1601] Buffer I/O error on dev nbd1, logical block 2, async page read [ 127.712455][ T1601] Buffer I/O error on dev nbd1, logical block 3, async page read [ 127.721891][ T1601] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.731340][ T1601] Buffer I/O error on dev nbd1, logical block 0, async page read [ 127.739567][ T1601] Buffer I/O error on dev nbd1, logical block 1, async page read [ 127.747972][ T1601] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.757557][ T1601] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.765754][ T7094] __nla_validate_parse: 6 callbacks suppressed [ 127.765770][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 127.767227][ T1601] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.791787][ T1601] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 127.801765][ T5637] ldm_validate_partition_table(): Disk read failed. [ 127.812517][ T5637] Dev nbd1: unable to read RDB block 0 [ 127.821441][ T5637] nbd1: unable to read partition table [ 127.831719][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 127.847923][ T5637] ldm_validate_partition_table(): Disk read failed. [ 127.857132][ T5637] Dev nbd1: unable to read RDB block 0 [ 127.867110][ T5637] nbd1: unable to read partition table [ 128.148404][ T7116] netlink: 'syz.3.309': attribute type 22 has an invalid length. [ 128.434135][ T7134] syzkaller0: entered promiscuous mode [ 128.457235][ T7134] syzkaller0: entered allmulticast mode [ 128.491745][ T7134] tipc: Started in network mode [ 128.505997][ T7134] tipc: Node identity a2a9f279830c, cluster identity 4711 [ 128.519925][ T7134] tipc: Enabled bearer , priority 0 [ 128.547620][ T7131] tipc: Resetting bearer [ 128.601667][ T7131] tipc: Disabling bearer [ 128.823928][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.320'. [ 129.322780][ T7169] netlink: 140 bytes leftover after parsing attributes in process `syz.1.325'. [ 129.509442][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.326'. [ 129.590548][ T7175] syzkaller0: entered promiscuous mode [ 129.613994][ T7175] syzkaller0: entered allmulticast mode [ 129.866578][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 131.793432][ T7151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.113391][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 132.209700][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.218628][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.219942][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 132.266610][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.334'. [ 132.558172][ T7211] batadv_slave_1: entered promiscuous mode [ 132.712865][ T7218] netlink: 'syz.3.339': attribute type 11 has an invalid length. [ 132.806430][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814682][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.626269][ T7210] batadv_slave_1: left promiscuous mode [ 133.830805][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 133.930772][ T7250] syzkaller0: entered promiscuous mode [ 133.945118][ T7250] syzkaller0: entered allmulticast mode [ 134.846088][ T7295] syzkaller1: entered promiscuous mode [ 134.865213][ T7295] syzkaller1: entered allmulticast mode [ 135.139725][ T7322] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.148396][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 137.075474][ T7355] xt_hashlimit: size too large, truncated to 1048576 [ 137.183900][ T7368] netlink: 'syz.2.364': attribute type 4 has an invalid length. [ 137.427706][ T7375] netlink: 'syz.0.367': attribute type 7 has an invalid length. [ 137.691280][ T7382] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 137.720117][ T7385] netlink: 224 bytes leftover after parsing attributes in process `syz.2.371'. [ 137.747664][ T7382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.771683][ T7388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.779139][ T7388] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 137.790585][ T7388] bond2: (slave gre1): Error -95 calling set_mac_address [ 137.914732][ T7382] gretap1: entered promiscuous mode [ 137.961870][ T7382] bond2: (slave gretap1): making interface the new active one [ 137.969984][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 138.000992][ T7382] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 138.093629][ T7388] macvlan2: entered promiscuous mode [ 138.109300][ T7388] macvlan2: entered allmulticast mode [ 138.121271][ T7388] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 138.486825][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 138.504936][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 138.777814][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 138.793842][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.845555][ T7417] syzkaller0: entered promiscuous mode [ 138.879780][ T7417] syzkaller0: entered allmulticast mode [ 138.908691][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 139.138397][ T7434] netlink: 76 bytes leftover after parsing attributes in process `syz.3.383'. [ 139.314956][ T7441] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 139.325382][ T7441] syzkaller1: linktype set to 780 [ 139.379025][ T7427] tipc: Enabled bearer , priority 0 [ 139.917946][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 139.947432][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 139.986407][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 140.039944][ T7471] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 140.057255][ T7471] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 140.191385][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.245394][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.311979][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.395741][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.442346][ T7473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.624897][ T7491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.920995][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.928458][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.483441][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.519111][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.804559][ T7486] syzkaller0: renamed from batadv_slave_1 [ 141.815784][ T5741] tipc: Node number set to 564523641 [ 141.867423][ T1160] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.898771][ T1160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.926086][ T1160] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.947439][ T1160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.024172][ T1160] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.050253][ T7519] syz.3.405: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.051610][ T1160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.096307][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.3.405 Not tainted syzkaller #0 PREEMPT(full) [ 142.096334][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.096350][ T7519] Call Trace: [ 142.096357][ T7519] [ 142.096365][ T7519] dump_stack_lvl+0xe8/0x150 [ 142.096391][ T7519] warn_alloc+0x24c/0x270 [ 142.096418][ T7519] ? stack_depot_save_flags+0x33/0x800 [ 142.096441][ T7519] ? __pfx_warn_alloc+0x10/0x10 [ 142.096465][ T7519] ? kasan_save_track+0x3e/0x80 [ 142.096478][ T7519] ? __kasan_kmalloc+0x93/0xb0 [ 142.096493][ T7519] ? xsk_setsockopt+0x52a/0x960 [ 142.096513][ T7519] ? do_sock_setsockopt+0x17c/0x1b0 [ 142.096528][ T7519] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 142.096542][ T7519] ? do_syscall_64+0x174/0x580 [ 142.096556][ T7519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.096581][ T7519] __vmalloc_node_range_noprof+0x12c/0x1730 [ 142.096631][ T7519] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.096659][ T7519] ? __kasan_kmalloc+0x93/0xb0 [ 142.096675][ T7519] ? __kmalloc_cache_noprof+0x32d/0x660 [ 142.096698][ T7519] ? __kmalloc_cache_noprof+0x150/0x660 [ 142.096722][ T7519] vmalloc_user_noprof+0xad/0xe0 [ 142.096744][ T7519] ? xskq_create+0xbf/0x170 [ 142.096766][ T7519] xskq_create+0xbf/0x170 [ 142.096790][ T7519] xsk_init_queue+0x8a/0xe0 [ 142.096812][ T7519] xsk_setsockopt+0x52a/0x960 [ 142.096835][ T7519] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.096856][ T7519] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.096878][ T7519] ? aa_sock_opt_perm+0xff/0x1a0 [ 142.096900][ T7519] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 142.096922][ T7519] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.096945][ T7519] do_sock_setsockopt+0x17c/0x1b0 [ 142.096967][ T7519] __x64_sys_setsockopt+0x13d/0x1b0 [ 142.096988][ T7519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.097007][ T7519] do_syscall_64+0x174/0x580 [ 142.097033][ T7519] ? trace_irq_disable+0x3b/0x140 [ 142.097050][ T7519] ? clear_bhb_loop+0x40/0x90 [ 142.097073][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.097090][ T7519] RIP: 0033:0x7f500eb9ce59 [ 142.097114][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.097128][ T7519] RSP: 002b:00007f500f9ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.097145][ T7519] RAX: ffffffffffffffda RBX: 00007f500ee15fa0 RCX: 00007f500eb9ce59 [ 142.097157][ T7519] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 142.097169][ T7519] RBP: 00007f500ec32e6f R08: 0000000000000004 R09: 0000000000000000 [ 142.097180][ T7519] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.097191][ T7519] R13: 00007f500ee16038 R14: 00007f500ee15fa0 R15: 00007ffce42de8c8 [ 142.097217][ T7519] [ 142.097240][ T7519] Mem-Info: [ 142.100455][ T1160] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.154144][ T7519] active_anon:6400 inactive_anon:0 isolated_anon:0 [ 142.154144][ T7519] active_file:1 inactive_file:42821 isolated_file:0 [ 142.154144][ T7519] unevictable:778 dirty:71 writeback:0 [ 142.154144][ T7519] slab_reclaimable:10216 slab_unreclaimable:136936 [ 142.154144][ T7519] mapped:29327 shmem:1860 pagetables:1237 [ 142.154144][ T7519] sec_pagetables:0 bounce:0 [ 142.154144][ T7519] kernel_misc_reclaimable:0 [ 142.154144][ T7519] free:1282777 free_pcp:14421 free_cma:0 [ 142.186128][ T1160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.470737][ T7519] Node 0 active_anon:23500kB inactive_anon:0kB active_file:4kB inactive_file:171080kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:121508kB dirty:284kB writeback:0kB shmem:3704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12964kB pagetables:5196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 142.510110][ T7519] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 142.547930][ T7519] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.583935][ T7519] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 142.589877][ T7519] Node 0 DMA32 free:1168872kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23500kB inactive_anon:0kB active_file:4kB inactive_file:171080kB unevictable:1576kB writepending:284kB zspages:0kB present:3129332kB managed:2551444kB mlocked:40kB bounce:0kB free_pcp:57324kB local_pcp:46008kB free_cma:0kB [ 142.623562][ T7519] lowmem_reserve[]: 0 0 0 0 0 [ 142.628430][ T7519] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.662729][ T7519] lowmem_reserve[]: 0 0 0 0 0 [ 142.668477][ T7519] Node 1 Normal free:3946876kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.700780][ T7519] lowmem_reserve[]: 0 0 0 0 0 [ 142.705908][ T7519] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.719121][ T7519] Node 0 DMA32: 1988*4kB (UME) 974*8kB (UME) 460*16kB (UME) 524*32kB (UME) 117*64kB (UME) 55*128kB (UME) 28*256kB (UME) 5*512kB (UM) 7*1024kB (UM) 8*2048kB (UME) 264*4096kB (UM) = 1169024kB [ 142.740114][ T7519] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 142.792980][ T1112] bond3: (slave dummy0): link status up again after 0 ms [ 142.803120][ T7519] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 5*16kB (UM) 8*32kB (UM) 10*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946876kB [ 142.822405][ T1112] bond3: (slave dummy0): link status up again after 0 ms [ 142.850622][ T7519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.864679][ T1112] bond3: (slave dummy0): link status up again after 0 ms [ 142.903381][ T1112] bond3: (slave dummy0): link status up again after 0 ms [ 142.918548][ T7519] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.953182][ T1112] bond3: (slave dummy0): link status up again after 0 ms [ 142.965785][ T7519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.983048][ T1112] bond3: (slave dummy0): failed to get link speed/duplex [ 143.006032][ T7519] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.019848][ T7519] 44109 total pagecache pages [ 143.030589][ T7519] 0 pages in swap cache [ 143.035130][ T7519] Free swap = 124996kB [ 143.039437][ T7519] Total swap = 124996kB [ 143.048567][ T7519] 2097051 pages RAM [ 143.053889][ T7519] 0 pages HighMem/MovableOnly [ 143.068188][ T7519] 427419 pages reserved [ 143.102735][ T57] bond3: (slave dummy0): failed to get link speed/duplex [ 143.113710][ T7519] 0 pages cma reserved [ 143.294898][ T7559] xt_hashlimit: size too large, truncated to 1048576 [ 143.323282][ T100] bond3: (slave dummy0): failed to get link speed/duplex [ 143.359280][ T7555] block nbd4: not configured, cannot reconfigure [ 143.464962][ T100] bond3: (slave dummy0): failed to get link speed/duplex [ 144.040136][ T7585] __nla_validate_parse: 150 callbacks suppressed [ 144.040157][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 144.089926][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 144.174063][ T7585] bond1: (slave team0): Releasing backup interface [ 144.181660][ T7604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'. [ 144.204687][ T7585] team0 (unregistering): left promiscuous mode [ 144.221094][ T7585] team_slave_0: left promiscuous mode [ 144.234305][ T7585] team_slave_1: left promiscuous mode [ 144.253697][ T7585] team0 (unregistering): left allmulticast mode [ 144.272460][ T7585] team_slave_0: left allmulticast mode [ 144.278725][ T7585] team_slave_1: left allmulticast mode [ 144.295864][ T7611] Bluetooth: MGMT ver 1.23 [ 144.297436][ T7585] team0 (unregistering): Port device team_slave_0 removed [ 144.327675][ T7585] team0 (unregistering): Port device team_slave_1 removed [ 144.354362][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 144.709324][ T7639] netlink: 4424 bytes leftover after parsing attributes in process `syz.4.437'. [ 144.780732][ T7643] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 144.803522][ T7645] netlink: 'syz.3.438': attribute type 11 has an invalid length. [ 144.843777][ T7645] netlink: 224 bytes leftover after parsing attributes in process `syz.3.438'. [ 144.873722][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 144.885201][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 144.885426][ T7651] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 144.902697][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 144.902718][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 144.902742][ T7652] netlink: 'syz.0.440': attribute type 12 has an invalid length. [ 144.934185][ T7652] netlink: 'syz.0.440': attribute type 13 has an invalid length. [ 145.228887][ T7668] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 145.288064][ T7668] bond1: entered promiscuous mode [ 145.293800][ T7668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.329283][ T7668] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.343959][ T7668] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.355044][ T7668] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 145.787743][ T12] net_ratelimit: 15 callbacks suppressed [ 145.787759][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 145.972409][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 146.183781][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 146.314045][ T1112] bond3: (slave dummy0): failed to get link speed/duplex [ 146.454661][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 146.514433][ T7731] pim6reg: entered allmulticast mode [ 146.572350][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 146.669207][ T7743] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 146.742605][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 146.950055][ T7731] pim6reg: left allmulticast mode [ 146.992773][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 147.124687][ T7764] pim6reg: entered allmulticast mode [ 147.132414][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 147.262688][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 147.295218][ T7772] FAULT_INJECTION: forcing a failure. [ 147.295218][ T7772] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.346451][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.0.477 Not tainted syzkaller #0 PREEMPT(full) [ 147.346477][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.346487][ T7772] Call Trace: [ 147.346494][ T7772] [ 147.346501][ T7772] dump_stack_lvl+0xe8/0x150 [ 147.346530][ T7772] should_fail_ex+0x40c/0x560 [ 147.346560][ T7772] _copy_from_user+0x2d/0xb0 [ 147.346581][ T7772] ___sys_sendmsg+0x1c6/0x360 [ 147.346601][ T7772] ? __lock_acquire+0x683/0x2cf0 [ 147.346624][ T7772] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.346673][ T7772] ? __fget_files+0x2a/0x420 [ 147.346691][ T7772] ? __fget_files+0x3a2/0x420 [ 147.346716][ T7772] __x64_sys_sendmsg+0x1b1/0x290 [ 147.346737][ T7772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.346769][ T7772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.346787][ T7772] do_syscall_64+0x174/0x580 [ 147.346802][ T7772] ? trace_irq_disable+0x3b/0x140 [ 147.346818][ T7772] ? clear_bhb_loop+0x40/0x90 [ 147.346847][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.346865][ T7772] RIP: 0033:0x7f7a4239ce59 [ 147.346883][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.346897][ T7772] RSP: 002b:00007f7a431de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.346916][ T7772] RAX: ffffffffffffffda RBX: 00007f7a42615fa0 RCX: 00007f7a4239ce59 [ 147.346929][ T7772] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 147.346941][ T7772] RBP: 00007f7a431de090 R08: 0000000000000000 R09: 0000000000000000 [ 147.346952][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.346963][ T7772] R13: 00007f7a42616038 R14: 00007f7a42615fa0 R15: 00007ffd5443a198 [ 147.346993][ T7772] [ 147.593170][ T7783] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 147.824530][ T7796] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 147.957812][ T7796] bond4: entered promiscuous mode [ 147.969588][ T7796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.017461][ T7808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.030459][ T7808] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 148.061438][ T7808] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 148.089041][ T7808] bond4: (slave xfrm1): making interface the new active one [ 148.096654][ T7808] xfrm1: entered promiscuous mode [ 148.105482][ T7808] xfrm1: left promiscuous mode [ 148.127944][ T7796] veth0: entered promiscuous mode [ 148.138227][ T7825] bond0: entered promiscuous mode [ 148.143846][ T7825] bond_slave_0: entered promiscuous mode [ 148.150179][ T7825] bond_slave_1: entered promiscuous mode [ 148.465464][ T7840] macvtap1: entered promiscuous mode [ 148.470965][ T7840] vlan0: entered promiscuous mode [ 148.481438][ T7840] vlan0: left promiscuous mode [ 148.571665][ T7793] bond0: left promiscuous mode [ 148.577588][ T7793] bond_slave_0: left promiscuous mode [ 148.579204][ T7844] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 148.584503][ T7793] bond_slave_1: left promiscuous mode [ 148.600016][ T7845] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 148.615124][ T7793] veth0: left promiscuous mode [ 148.791632][ T7807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.135306][ T7879] FAULT_INJECTION: forcing a failure. [ 149.135306][ T7879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.224915][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.4.504 Not tainted syzkaller #0 PREEMPT(full) [ 149.224938][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.224948][ T7879] Call Trace: [ 149.224955][ T7879] [ 149.224962][ T7879] dump_stack_lvl+0xe8/0x150 [ 149.224989][ T7879] should_fail_ex+0x40c/0x560 [ 149.225019][ T7879] _copy_from_iter+0x1d3/0x1660 [ 149.225043][ T7879] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 149.225069][ T7879] ? rcu_is_watching+0x15/0xb0 [ 149.225091][ T7879] ? trace_kmem_cache_alloc+0x29/0xe0 [ 149.225116][ T7879] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 149.225141][ T7879] ? __pfx__copy_from_iter+0x10/0x10 [ 149.225166][ T7879] ? __alloc_skb+0x276/0x7a0 [ 149.225181][ T7879] ? __alloc_skb+0x276/0x7a0 [ 149.225203][ T7879] ? netlink_sendmsg+0x650/0xb40 [ 149.225223][ T7879] ? skb_put+0x112/0x210 [ 149.225244][ T7879] netlink_sendmsg+0x6c0/0xb40 [ 149.225274][ T7879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.225299][ T7879] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.225327][ T7879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.225347][ T7879] sock_sendmsg_nosec+0x13a/0x180 [ 149.225374][ T7879] ____sys_sendmsg+0x54e/0x850 [ 149.225398][ T7879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.225427][ T7879] ? import_iovec+0x73/0xa0 [ 149.225448][ T7879] ___sys_sendmsg+0x2a5/0x360 [ 149.225470][ T7879] ? __lock_acquire+0x683/0x2cf0 [ 149.225494][ T7879] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.225547][ T7879] ? __fget_files+0x2a/0x420 [ 149.225564][ T7879] ? __fget_files+0x3a2/0x420 [ 149.225600][ T7879] __x64_sys_sendmsg+0x1b1/0x290 [ 149.225623][ T7879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.225661][ T7879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.225681][ T7879] do_syscall_64+0x174/0x580 [ 149.225698][ T7879] ? trace_irq_disable+0x3b/0x140 [ 149.225715][ T7879] ? clear_bhb_loop+0x40/0x90 [ 149.225737][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.225755][ T7879] RIP: 0033:0x7fda06b9ce59 [ 149.225772][ T7879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.225787][ T7879] RSP: 002b:00007fda0797e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.225807][ T7879] RAX: ffffffffffffffda RBX: 00007fda06e15fa0 RCX: 00007fda06b9ce59 [ 149.225820][ T7879] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.225831][ T7879] RBP: 00007fda0797e090 R08: 0000000000000000 R09: 0000000000000000 [ 149.225843][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.225853][ T7879] R13: 00007fda06e16038 R14: 00007fda06e15fa0 R15: 00007ffe54eb1e18 [ 149.225883][ T7879] [ 149.445925][ T7888] x_tables: duplicate underflow at hook 2 [ 149.649559][ T7897] __nla_validate_parse: 17 callbacks suppressed [ 149.649578][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.508'. [ 149.867870][ T7905] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.512'. [ 150.046870][ T7905] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.634404][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 150.736749][ T7921] tipc: Enabled bearer , priority 0 [ 150.829260][ T7911] tipc: Disabling bearer [ 150.942515][ T33] net_ratelimit: 18 callbacks suppressed [ 150.942534][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 151.125663][ T7948] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.200982][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 151.238118][ T7968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.255584][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 151.340092][ T7965] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20004 [ 151.527746][ T7948] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.875373][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 152.159950][ T7948] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.262700][ T8014] bond3: (slave dummy0): failed to get link speed/duplex [ 152.299943][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 152.394606][ T8033] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 152.429416][ T7948] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.499100][ T8043] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 152.511361][ T8043] netlink: 224 bytes leftover after parsing attributes in process `syz.1.531'. [ 152.531747][ T8033] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 152.542701][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 152.709633][ T8006] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.740248][ T8006] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.823185][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.830684][ T8056] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 152.840729][ T8014] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.856890][ T8056] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 152.901434][ T8009] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.963921][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 153.079324][ T8072] tipc: Enabling of bearer rejected, already enabled [ 153.112308][ T57] bond3: (slave dummy0): failed to get link speed/duplex [ 153.242426][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 153.372360][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 153.411567][ T8065] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.492491][ T8014] bond3: (slave dummy0): failed to get link speed/duplex [ 153.655391][ T8083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.539'. [ 156.062452][ T8016] net_ratelimit: 22 callbacks suppressed [ 156.062469][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 156.265397][ T8113] veth1_macvtap: left promiscuous mode [ 156.373148][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 156.513763][ T8009] bond3: (slave dummy0): failed to get link speed/duplex [ 156.643052][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 156.719326][ T8140] netlink: 56 bytes leftover after parsing attributes in process `syz.0.555'. [ 156.730663][ T8131] xt_CT: No such helper "syz1" [ 156.792403][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 156.902521][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 157.015770][ T8153] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 157.038493][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 157.252373][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 157.254668][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 157.289411][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 157.382329][ T8009] bond3: (slave dummy0): failed to get link speed/duplex [ 157.522704][ T8009] bond3: (slave dummy0): failed to get link speed/duplex [ 157.888483][ T8187] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 158.085392][ T5286] veth1_macvtap: entered promiscuous mode [ 158.091400][ T8192] netlink: 'syz.1.569': attribute type 26 has an invalid length. [ 158.317354][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 158.458280][ T8201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.811482][ T8222] netlink: 96 bytes leftover after parsing attributes in process `syz.4.573'. [ 159.099768][ T8240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.578'. [ 159.109353][ T8240] netlink: 48 bytes leftover after parsing attributes in process `syz.4.578'. [ 159.308410][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 159.326717][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 159.423049][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.581'. [ 160.117781][ T8285] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 160.347658][ T8293] gretap1: entered allmulticast mode [ 161.145069][ T8341] net_ratelimit: 29 callbacks suppressed [ 161.145088][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 161.302335][ T8021] bond3: (slave dummy0): failed to get link speed/duplex [ 161.535597][ T8368] tipc: Started in network mode [ 161.565479][ T8368] tipc: Node identity 6ad1a07f57bb, cluster identity 4711 [ 161.589810][ T8368] tipc: Enabled bearer , priority 0 [ 161.730210][ T8369] syzkaller0: entered promiscuous mode [ 161.739984][ T8369] syzkaller0: entered allmulticast mode [ 161.761092][ T8368] tipc: Resetting bearer [ 161.787066][ T8375] syzkaller0: entered allmulticast mode [ 161.798741][ T8375] batman_adv: batadv0: Interface activated: syzkaller0 [ 161.812377][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 161.894575][ T8368] tipc: Resetting bearer [ 161.933230][ T8368] tipc: Disabling bearer [ 161.942072][ T8371] __nla_validate_parse: 6 callbacks suppressed [ 161.942089][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 161.966529][ T8371] netlink: 5 bytes leftover after parsing attributes in process `syz.2.606'. [ 161.981893][ T8379] netlink: 76 bytes leftover after parsing attributes in process `syz.1.607'. [ 162.057298][ T8371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.109696][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 162.129195][ T8021] bond3: (slave dummy0): failed to get link speed/duplex [ 162.247578][ T8021] bond3: (slave dummy0): failed to get link speed/duplex [ 162.333589][ T8398] xt_TCPMSS: Only works on TCP SYN packets [ 162.371654][ T8394] xt_hashlimit: size too large, truncated to 1048576 [ 162.393610][ T8021] bond3: (slave dummy0): failed to get link speed/duplex [ 162.648049][ T8408] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.667314][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.618'. [ 162.694769][ T8414] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.619'. [ 162.704108][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 162.801754][ T8418] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 162.822917][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 162.952394][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 163.418046][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 163.478449][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 163.778539][ T8467] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 163.814544][ T8467] netlink: 228 bytes leftover after parsing attributes in process `syz.3.632'. [ 164.360847][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.636'. [ 165.200291][ T8501] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 165.648024][ T8501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.695351][ T8503] bond2: (slave geneve2): making interface the new active one [ 165.706677][ T8503] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 165.716175][ T8510] C: renamed from veth1_to_team (while UP) [ 165.731934][ T8510] netlink: 'syz.3.645': attribute type 3 has an invalid length. [ 166.014958][ T8525] x_tables: ip6_tables: REJECT target: only valid in filter table, not B [ 166.156142][ T8341] net_ratelimit: 19 callbacks suppressed [ 166.156160][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 166.303156][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 166.425030][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 166.552412][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 166.596608][ T5794] IPVS: starting estimator thread 0... [ 166.702388][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 166.723664][ T8550] IPVS: using max 29 ests per chain, 69600 per kthread [ 166.845012][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 167.123652][ T8006] bond3: (slave dummy0): failed to get link speed/duplex [ 167.315361][ T8409] bond3: (slave dummy0): failed to get link speed/duplex [ 167.376880][ T8583] syzkaller0: entered promiscuous mode [ 167.396740][ T8583] syzkaller0: entered allmulticast mode [ 167.419460][ T8579] tipc: Started in network mode [ 167.428104][ T8594] __nla_validate_parse: 8 callbacks suppressed [ 167.428149][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.662'. [ 167.432603][ T8579] tipc: Node identity de63edd3f6c2, cluster identity 4711 [ 167.484179][ T8579] tipc: Enabled bearer , priority 0 [ 167.553129][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 167.581721][ T8596] geneve2: entered promiscuous mode [ 167.598347][ T8579] IPVS: Error connecting to the multicast addr [ 167.768494][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 167.785733][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.4.664'. [ 167.853964][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 167.866331][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 167.974318][ T8609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.666'. [ 168.046960][ T8577] tipc: Resetting bearer [ 168.113781][ T8577] tipc: Disabling bearer [ 168.210851][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 168.211792][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 168.657155][ T8628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 168.694827][ T8628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 168.861893][ T8634] netlink: 324 bytes leftover after parsing attributes in process `syz.4.672'. [ 168.921927][ T8631] sctp: [Deprecated]: syz.0.673 (pid 8631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.921927][ T8631] Use struct sctp_sack_info instead [ 168.975523][ T8638] netlink: 'syz.1.674': attribute type 12 has an invalid length. [ 169.019717][ T8638] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 169.795121][ T8676] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 169.905825][ T8682] netlink: 'syz.2.684': attribute type 7 has an invalid length. [ 169.929712][ T8676] netlink: 'syz.0.685': attribute type 14 has an invalid length. [ 170.324193][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.358789][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.859156][ T7495] IPVS: starting estimator thread 0... [ 170.929786][ T8739] xt_hashlimit: size too large, truncated to 1048576 [ 170.983454][ T8732] IPVS: using max 30 ests per chain, 72000 per kthread [ 171.012156][ T8735] netlink: 'syz.4.698': attribute type 12 has an invalid length. [ 171.057715][ T8742] bridge_slave_0 (unregistering): left allmulticast mode [ 171.109428][ T8747] netlink: 'syz.1.696': attribute type 11 has an invalid length. [ 171.179869][ T8742] bridge_slave_0 (unregistering): left promiscuous mode [ 171.237546][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.514052][ T8767] netlink: 'syz.0.702': attribute type 6 has an invalid length. [ 171.525447][ T8007] net_ratelimit: 16 callbacks suppressed [ 171.525466][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 171.558053][ T8767] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.648305][ T8757] team0 (unregistering): Port device team_slave_0 removed [ 171.674164][ T8757] team0 (unregistering): Port device team_slave_1 removed [ 171.763402][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 171.893497][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 171.987869][ T8779] syzkaller0: entered promiscuous mode [ 172.009515][ T8779] syzkaller0: entered allmulticast mode [ 172.017155][ T8778] netlink: 'syz.3.705': attribute type 7 has an invalid length. [ 172.048380][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 172.154984][ T8782] Unsupported ieee802154 address type: 0 [ 172.445051][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 172.604937][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 172.620842][ T8804] netlink: 'syz.2.711': attribute type 9 has an invalid length. [ 172.621548][ T8803] __nla_validate_parse: 10 callbacks suppressed [ 172.621576][ T8803] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.710'. [ 172.654879][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 172.776387][ T33] bond3: (slave dummy0): failed to get link speed/duplex [ 172.932407][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 173.071734][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 173.074004][ T8818] netlink: 784 bytes leftover after parsing attributes in process `syz.2.713'. [ 173.140983][ T8818] netlink: 136 bytes leftover after parsing attributes in process `syz.2.713'. [ 173.213489][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 173.807224][ T8854] syzkaller0: entered promiscuous mode [ 173.834100][ T8854] syzkaller0: entered allmulticast mode [ 174.121547][ T8865] netlink: 'syz.3.725': attribute type 3 has an invalid length. [ 174.150091][ T8865] netlink: 'syz.3.725': attribute type 3 has an invalid length. [ 174.182372][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 174.727767][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 174.781567][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 174.997954][ T8890] geneve0: entered promiscuous mode [ 175.026797][ T8890] macvlan2: entered promiscuous mode [ 175.574997][ T8910] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.734'. [ 176.034267][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 176.151650][ T8928] sctp: [Deprecated]: syz.0.737 (pid 8928) Use of int in max_burst socket option deprecated. [ 176.151650][ T8928] Use struct sctp_assoc_value instead [ 176.807622][ T8937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.740'. [ 177.096455][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.151549][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.798740][ T8905] tipc: Resetting bearer [ 177.846694][ T8922] dummy0: entered allmulticast mode [ 177.872522][ T8922] dummy0: left allmulticast mode [ 177.894153][ T5286] veth0_macvtap: left promiscuous mode [ 177.975740][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 178.020020][ T8007] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.049016][ T8007] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.064713][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 178.077627][ T8007] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 51051 - 0 [ 178.115794][ T8007] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.147743][ T8007] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.158381][ T8007] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 51051 - 0 [ 178.178867][ T8007] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.194074][ T8007] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.241751][ T8007] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 51051 - 0 [ 178.251351][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 178.325430][ T8951] gtp0: entered promiscuous mode [ 178.337866][ T8951] gtp0: entered allmulticast mode [ 178.423811][ T8962] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 178.429126][ T8007] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.478516][ T8007] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.490470][ T8007] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 51051 - 0 [ 178.517775][ T8007] net_ratelimit: 12 callbacks suppressed [ 178.517809][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 178.683229][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 178.843086][ T8983] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 178.885680][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 178.917683][ T8979] netlink: 76 bytes leftover after parsing attributes in process `syz.0.749'. [ 179.135430][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'. [ 179.146510][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'. [ 179.205983][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 179.362458][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 179.482359][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 179.626411][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 179.638850][ T9005] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.753'. [ 179.666840][ T9006] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.753'. [ 179.804251][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 179.944171][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 180.072407][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 180.324987][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.758'. [ 180.938325][ T6099] IPVS: starting estimator thread 0... [ 181.053272][ T9057] IPVS: using max 28 ests per chain, 67200 per kthread [ 181.247593][ T9062] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 181.492311][ T9062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.701420][ T9066] bond5: (slave veth5): Enslaving as an active interface with a down link [ 181.816238][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.850929][ T9068] bond5: (slave batadv0): making interface the new active one [ 181.896092][ T9068] batadv0: entered promiscuous mode [ 181.921159][ T9068] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 181.993238][ T9072] bond5 (unregistering): (slave veth5): Releasing active interface [ 182.053021][ T9072] bond5 (unregistering): (slave batadv0): Releasing active interface [ 182.098856][ T9072] bond5 (unregistering): Released all slaves [ 182.196670][ T9079] bond0: (slave wlan0): Opening slave failed [ 182.215949][ T9081] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 182.225608][ T9088] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.769'. [ 182.463043][ T9095] netlink: 'syz.4.772': attribute type 12 has an invalid length. [ 183.342410][ T8003] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 183.537396][ T9118] bond5: Removing last ns target with arp_interval on [ 183.583372][ T8341] net_ratelimit: 20 callbacks suppressed [ 183.583432][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 183.716959][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 183.721433][ T9133] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.781'. [ 183.845191][ T8341] bond3: (slave dummy0): failed to get link speed/duplex [ 183.972510][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 184.085050][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 184.212753][ T8016] bond3: (slave dummy0): failed to get link speed/duplex [ 184.322540][ T8007] bond3: (slave dummy0): failed to get link speed/duplex [ 184.432932][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 184.552740][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 184.662745][ T48] bond3: (slave dummy0): failed to get link speed/duplex [ 186.128147][ T9114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.346034][ T9164] bond3: (slave dummy0): Removing an active aggregator [ 186.396870][ T9164] bond3: (slave dummy0): Releasing backup interface [ 186.477356][ T9171] netlink: 9 bytes leftover after parsing attributes in process `syz.2.789'. [ 186.487328][ T9164] batman_adv: batadv0: Adding interface: dummy0 [ 186.506295][ T9175] netlink: 4424 bytes leftover after parsing attributes in process `syz.4.793'. [ 186.508972][ T9164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.548965][ T9164] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 186.574432][ T9171] gretap0: entered promiscuous mode [ 186.930748][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 186.940145][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.795'. [ 186.949480][ T9195] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 186.969250][ T9195] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 186.992144][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 187.175855][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 187.248832][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 187.359998][ T9205] macvtap1: entered promiscuous mode [ 187.381362][ T9205] bond0: entered promiscuous mode [ 187.393259][ T9205] bond_slave_0: entered promiscuous mode [ 187.410162][ T9205] bond_slave_1: entered promiscuous mode [ 187.418297][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 187.435908][ T9205] macvtap1: entered allmulticast mode [ 187.450626][ T9205] bond0: entered allmulticast mode [ 187.469143][ T9205] bond_slave_0: entered allmulticast mode [ 187.488281][ T9205] bond_slave_1: entered allmulticast mode [ 187.517833][ T9205] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 187.551967][ T9208] bond0: left allmulticast mode [ 187.570847][ T9208] bond_slave_0: left allmulticast mode [ 187.588828][ T9208] bond_slave_1: left allmulticast mode [ 187.614011][ T9208] bond0: left promiscuous mode [ 187.614814][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 187.636438][ T9208] macvtap1: left promiscuous mode [ 187.642209][ T9208] macvtap1: left allmulticast mode [ 187.669227][ T6099] bond_slave_0: left promiscuous mode [ 187.676672][ T6099] bond_slave_1: left promiscuous mode [ 188.145798][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.152074][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.301313][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.347116][ T9228] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 188.382726][ T9228] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 188.401575][ T9228] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 188.451411][ T9228] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.491870][ T9228] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.636820][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.659355][ T9250] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.704935][ T9250] team_slave_1: entered promiscuous mode [ 188.748966][ T9250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.767451][ T9250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.809146][ T9250] net_ratelimit: 16 callbacks suppressed [ 188.809165][ T9250] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 188.857995][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.863335][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.871427][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.905118][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.922086][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.944409][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 188.965739][ T9228] xfrm0 speed is unknown, defaulting to 1000 [ 189.234537][ T9262] tc action pedit offset -8192 out of bounds [ 189.241440][ T9262] tc action pedit offset -8192 out of bounds [ 189.247529][ T9262] tc action pedit offset -8192 out of bounds [ 189.253568][ T9262] tc action pedit offset -8192 out of bounds [ 189.259560][ T9262] tc action pedit offset -8192 out of bounds [ 189.265620][ T9262] tc action pedit offset -8192 out of bounds [ 189.271626][ T9262] tc action pedit offset -8192 out of bounds [ 189.277668][ T9262] tc action pedit offset -8192 out of bounds [ 189.283698][ T9262] tc action pedit offset -8192 out of bounds [ 189.289692][ T9262] tc action pedit offset -8192 out of bounds [ 189.295760][ T9262] 0: reclassify loop, rule prio 0, protocol 800 [ 189.389583][ T9271] __nla_validate_parse: 3 callbacks suppressed [ 189.389614][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.815'. [ 189.391148][ T9264] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 189.441138][ T9264] bond6 (unregistering): Released all slaves [ 189.910177][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 189.925668][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.819'. [ 190.013798][ T9293] netlink: 'syz.1.820': attribute type 13 has an invalid length. [ 190.026461][ T9293] netlink: 'syz.1.820': attribute type 17 has an invalid length. [ 190.183978][ T9300] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 190.340170][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.422206][ T9288] team_slave_1: left promiscuous mode [ 190.506866][ T9309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.828526][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.819'. [ 190.978936][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 190.984082][ T9293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.014961][ T9293] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.016023][ T9313] unsupported nla_type 216 [ 191.078299][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.085534][ T9293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.130433][ T9293] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.275663][ T9304] xfrm0 speed is unknown, defaulting to 1000 [ 191.494469][ T9326] netlink: 4424 bytes leftover after parsing attributes in process `syz.4.828'. [ 192.047024][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.832'. [ 192.301032][ T9361] xt_hashlimit: size too large, truncated to 1048576 [ 192.340705][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.841'. [ 192.620866][ T9383] netlink: 4424 bytes leftover after parsing attributes in process `syz.3.842'. [ 192.911510][ T9389] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 193.901768][ T9430] netlink: 'syz.4.851': attribute type 12 has an invalid length. [ 194.009699][ T9426] xfrm0 speed is unknown, defaulting to 1000 [ 194.255890][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.264710][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.307038][ T9447] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.854'. [ 195.134634][ T9475] netlink: 14 bytes leftover after parsing attributes in process `syz.2.858'. [ 195.358974][ T9475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.422640][ T9475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.469790][ T9475] bond0 (unregistering): Released all slaves [ 195.613749][ T9484] netlink: 'syz.3.862': attribute type 8 has an invalid length. [ 195.694909][ T9484] netlink: 'syz.3.862': attribute type 21 has an invalid length. [ 195.727030][ T9484] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.753338][ T9484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.763008][ T9484] IPv6: NLM_F_CREATE should be set when creating new route [ 195.771097][ T9484] IPv6: NLM_F_CREATE should be set when creating new route [ 195.779846][ T9484] IPv6: NLM_F_CREATE should be set when creating new route [ 195.984826][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 196.014453][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 196.069354][ T9504] bond3: option ad_actor_sys_prio: invalid value (0) [ 196.076776][ T9504] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 196.080566][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 196.100204][ T9504] bond3 (unregistering): Released all slaves [ 196.290526][ T9503] bond3: option ad_actor_sys_prio: invalid value (0) [ 196.299463][ T9503] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 196.415802][ T9503] bond3 (unregistering): Released all slaves [ 196.776615][ T9533] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 196.837482][ T9539] netlink: 56 bytes leftover after parsing attributes in process `syz.4.875'. [ 196.846162][ T9533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.077312][ T9547] macsec1: entered allmulticast mode [ 197.083935][ T9547] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 197.207289][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.880'. [ 197.336437][ T9564] nft_compat: unsupported protocol 0 [ 197.493185][ T9569] netlink: 72 bytes leftover after parsing attributes in process `syz.0.882'. [ 199.070667][ T9511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.270111][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 199.340094][ T9576] syzkaller0: entered promiscuous mode [ 199.359233][ T9576] syzkaller0: entered allmulticast mode [ 199.423452][ T9583] TC_ACT_REPEAT abuse ? [ 199.479805][ T9576] netlink: 88 bytes leftover after parsing attributes in process `syz.1.884'. [ 199.515682][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.886'. [ 199.621688][ T9589] netlink: 'syz.3.889': attribute type 3 has an invalid length. [ 199.894160][ T9600] netlink: 'syz.3.893': attribute type 1 has an invalid length. [ 199.909264][ T9607] netlink: 'syz.1.892': attribute type 39 has an invalid length. [ 199.994184][ T9600] bond3: entered promiscuous mode [ 199.999734][ T9600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.159191][ T9617] __nla_validate_parse: 3 callbacks suppressed [ 200.159206][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 200.184500][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 200.194312][ T9614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.201588][ T9614] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 200.212011][ T9614] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 200.225951][ T9614] bond3: (slave gre1): making interface the new active one [ 200.233397][ T9614] gre1: entered promiscuous mode [ 200.240856][ T9614] bond3: (slave gre1): Enslaving as an active interface with an up link [ 200.788400][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 200.817420][ T9632] ip6gre2: entered promiscuous mode [ 200.824216][ T9632] ip6gre2: entered allmulticast mode [ 200.897488][ T9638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.914705][ T9638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.234533][ T9645] tipc: Resetting bearer [ 201.294802][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.904'. [ 201.377617][ T9654] netlink: 'syz.3.904': attribute type 21 has an invalid length. [ 202.424190][ T9585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.646529][ T9664] netlink: 'syz.3.905': attribute type 12 has an invalid length. [ 202.852125][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 203.248571][ T9692] FAULT_INJECTION: forcing a failure. [ 203.248571][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.284860][ T9692] CPU: 0 UID: 0 PID: 9692 Comm: syz.1.913 Not tainted syzkaller #0 PREEMPT(full) [ 203.284888][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.284899][ T9692] Call Trace: [ 203.284906][ T9692] [ 203.284914][ T9692] dump_stack_lvl+0xe8/0x150 [ 203.284942][ T9692] should_fail_ex+0x40c/0x560 [ 203.284972][ T9692] _copy_from_user+0x2d/0xb0 [ 203.284993][ T9692] ___sys_sendmsg+0x1c6/0x360 [ 203.285013][ T9692] ? __lock_acquire+0x683/0x2cf0 [ 203.285038][ T9692] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.285092][ T9692] ? __fget_files+0x2a/0x420 [ 203.285110][ T9692] ? __fget_files+0x3a2/0x420 [ 203.285137][ T9692] __x64_sys_sendmsg+0x1b1/0x290 [ 203.285160][ T9692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.285197][ T9692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.285216][ T9692] do_syscall_64+0x174/0x580 [ 203.285235][ T9692] ? clear_bhb_loop+0x40/0x90 [ 203.285258][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.285276][ T9692] RIP: 0033:0x7fb0db19ce59 [ 203.285294][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.285308][ T9692] RSP: 002b:00007fb0dc022028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.285328][ T9692] RAX: ffffffffffffffda RBX: 00007fb0db416090 RCX: 00007fb0db19ce59 [ 203.285341][ T9692] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 000000000000000a [ 203.285353][ T9692] RBP: 00007fb0dc022090 R08: 0000000000000000 R09: 0000000000000000 [ 203.285364][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.285374][ T9692] R13: 00007fb0db416128 R14: 00007fb0db416090 R15: 00007ffec7c53948 [ 203.285402][ T9692] [ 203.466116][ T9689] netlink: 324 bytes leftover after parsing attributes in process `syz.1.913'. [ 203.598688][ T9701] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 203.677612][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'. [ 203.790130][ T9705] netlink: 'syz.4.917': attribute type 4 has an invalid length. [ 203.873630][ T9709] netlink: 'syz.4.917': attribute type 4 has an invalid length. [ 206.572547][ T9727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.922'. [ 206.590944][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 206.632445][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 206.951625][ T9751] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 207.033371][ T9751] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 207.086119][ T9751] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 207.276389][ T9770] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 207.332924][ T9773] netlink: 'syz.2.936': attribute type 62 has an invalid length. [ 207.485084][ T9770] bond6: entered promiscuous mode [ 207.491162][ T9770] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.576203][ T9774] bond6: (slave bridge1): making interface the new active one [ 207.583979][ T9774] bridge1: entered promiscuous mode [ 207.590682][ T9774] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 207.600079][ T29] audit: type=1804 audit(1782537036.434:5): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.937" name="/newroot/211/memory.events" dev="tmpfs" ino=1097 res=1 errno=0 [ 207.918867][ T9793] tipc: Resetting bearer [ 207.943671][ T9795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 207.979385][ T9798] netlink: 112 bytes leftover after parsing attributes in process `syz.1.941'. [ 208.111815][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 208.276231][ T9809] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 208.309615][ T9815] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 208.389316][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 208.579811][ T9821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.949'. [ 209.118747][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.126326][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.233576][ T9848] netlink: 37 bytes leftover after parsing attributes in process `syz.1.954'. [ 209.278584][ T9815] tipc: Resetting bearer [ 209.319737][ T9815] batman_adv: batadv0: Interface deactivated: dummy0 [ 209.998776][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.047775][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.345820][ T9797] xfrm0 speed is unknown, defaulting to 1000 [ 210.391458][ T9835] gretap0: left promiscuous mode [ 210.477895][ T9861] Cannot find add_set index 0 as target [ 210.507163][ T9835] team_slave_1: left allmulticast mode [ 210.520845][ T9835] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 210.528872][ T9835] syzkaller0: left promiscuous mode [ 210.535954][ T9835] syzkaller0: left allmulticast mode [ 210.626429][ T9835] bond1: left promiscuous mode [ 210.631261][ T9835] veth0_to_bond: left promiscuous mode [ 210.637090][ T9835] bond1: left allmulticast mode [ 210.641979][ T9835] veth0_to_bond: left allmulticast mode [ 210.661823][ T9835] ip6gre2: left promiscuous mode [ 210.667006][ T9835] ip6gre2: left allmulticast mode [ 210.716450][ T174] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.726192][ T174] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.755378][ T9803] xfrm0 speed is unknown, defaulting to 1000 [ 210.761723][ T174] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.927460][ T174] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.976508][ T174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.159750][ T174] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.194673][ T174] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.254910][ T9883] netlink: 'syz.4.956': attribute type 4 has an invalid length. [ 211.345505][ T9871] netlink: 'syz.4.956': attribute type 4 has an invalid length. [ 211.927797][ T9882] xfrm0 speed is unknown, defaulting to 1000 [ 212.171699][ T9904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.964'. [ 212.198744][ T9902] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 212.448454][ T9918] netlink: 'syz.1.968': attribute type 2 has an invalid length. [ 212.737900][ T9911] bond4 (unregistering): Released all slaves [ 213.059465][ T9941] tipc: Resetting bearer [ 213.459950][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'. [ 213.558894][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 213.686794][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 213.696323][ T9953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.740481][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 213.763833][ T9956] bond4: entered promiscuous mode [ 213.782310][ T9956] bond4: entered allmulticast mode [ 213.813586][ T9960] batman_adv: batadv0: Removing interface: dummy0 [ 213.857203][ T9960] dummy0: entered promiscuous mode [ 213.879355][ T9960] dummy0: entered allmulticast mode [ 213.898953][ T9960] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 214.038327][ T8009] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.079004][ T8009] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.131832][ T8009] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.200344][ T8009] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.342081][ T9985] xt_hashlimit: size too large, truncated to 1048576 [ 214.579481][ T9985] Cannot find add_set index 4 as target [ 214.751776][ T9993] syzkaller0: entered promiscuous mode [ 214.760487][ T9993] syzkaller0: entered allmulticast mode [ 214.786779][ T9993] netlink: 5 bytes leftover after parsing attributes in process `syz.4.980'. [ 214.830780][ T9993] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 214.862839][ T9993] 0ªî{X¹¦: entered allmulticast mode [ 214.890621][ T9993] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 214.957721][T10010] netlink: 180 bytes leftover after parsing attributes in process `syz.3.984'. [ 215.145182][T10012] syzkaller0: entered promiscuous mode [ 215.164607][T10012] syzkaller0: entered allmulticast mode [ 215.192513][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.985'. [ 215.417681][T10025] bond0: (slave ip6tnl0): refused to change device type [ 215.551510][T10028] ip6erspan0: entered allmulticast mode [ 215.757458][T10037] bond0: (slave ip6tnl0): refused to change device type [ 215.845971][T10025] ip6erspan0: entered allmulticast mode [ 215.940175][ T50] block nbd0: Receive control failed (result -32) [ 216.003223][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 216.204787][T10065] netlink: 324 bytes leftover after parsing attributes in process `syz.4.993'. [ 216.230302][T10064] Cannot find del_set index 0 as target [ 216.589766][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.607910][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.948065][T10079] ip6tnl3: entered allmulticast mode [ 217.161959][T10086] bond0: entered promiscuous mode [ 217.173276][T10086] bond_slave_0: entered promiscuous mode [ 217.216674][T10086] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 217.230357][T10086] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 217.309222][T10096] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 217.328407][T10096] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 217.433549][T10107] syzkaller0: entered promiscuous mode [ 217.442937][T10107] syzkaller0: entered allmulticast mode [ 217.458539][T10107] batman_adv: batadv0: Interface activated: syzkaller0 [ 217.496264][T10112] __nla_validate_parse: 3 callbacks suppressed [ 217.496310][T10112] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1003'. [ 217.703916][T10117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.715654][T10117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.844426][ T8018] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 217.881739][ T6101] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 217.892795][ T8018] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 218.015700][T10130] xfrm0 speed is unknown, defaulting to 1000 [ 218.247483][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'. [ 218.511960][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 218.624369][T10140] veth3: entered allmulticast mode [ 218.638600][T10140] bond7: (slave veth3): Enslaving as an active interface with an up link [ 218.648715][ T6101] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 218.663960][T10140] bond7 (unregistering): (slave veth3): Releasing backup interface [ 218.677277][T10140] bond7 (unregistering): Released all slaves [ 218.859960][T10146] bridge_slave_0: left allmulticast mode [ 218.865887][T10146] bridge_slave_0: left promiscuous mode [ 218.873933][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.883759][ T5734] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 218.898117][T10146] bridge_slave_1: left allmulticast mode [ 218.904949][T10146] bridge_slave_1: left promiscuous mode [ 218.910772][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.925395][T10146] bond0: (slave bond_slave_0): Releasing backup interface [ 218.937825][T10146] bond0: (slave bond_slave_1): Releasing backup interface [ 218.955724][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.964672][T10146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.974728][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.983194][T10146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.998150][T10146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.025782][ T188] xfrm0 speed is unknown, defaulting to 1000 [ 219.039392][ T188] syz0: Port: 1 Link DOWN [ 219.044376][ T5865] xfrm0 speed is unknown, defaulting to 1000 [ 219.125591][T10153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1018'. [ 219.138890][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1018'. [ 219.350587][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 220.081929][T10098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.264822][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 220.307051][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 220.427640][T10171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.829056][T10195] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1031'. [ 220.897048][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 221.009531][T10199] C: renamed from veth1_to_team [ 221.030969][T10199] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 221.049754][T10199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 221.829031][T10234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.019525][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 222.131444][T10245] ipvlan1: entered promiscuous mode [ 222.157714][T10245] ipvlan1: left promiscuous mode [ 223.393421][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.408651][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.430936][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.441589][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.451242][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.466567][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.476432][T10293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.476465][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.499302][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.509202][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.521254][T10292] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 223.789893][T10302] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 224.298304][T10317] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 224.388228][T10317] __nla_validate_parse: 3 callbacks suppressed [ 224.388256][T10317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1059'. [ 224.671077][T10323] syzkaller0: entered promiscuous mode [ 224.704328][T10323] syzkaller0: entered allmulticast mode [ 224.868943][T10323] syzkaller1: entered promiscuous mode [ 224.888151][T10323] syzkaller1: entered allmulticast mode [ 224.944736][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 224.985606][T10345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'. [ 225.039710][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 225.109476][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 225.806998][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 227.638049][T10351] bridge0: port 1(batadv1) entered blocking state [ 227.644930][T10351] bridge0: port 1(batadv1) entered disabled state [ 227.651547][T10351] batadv1: entered allmulticast mode [ 227.659853][T10351] batadv1: entered promiscuous mode [ 227.718879][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1072'. [ 227.877129][T10389] netlink: 'syz.1.1075': attribute type 6 has an invalid length. [ 228.135179][ T1160] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 228.144922][ T1160] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 228.408987][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 228.441353][T10408] netlink: 'syz.3.1082': attribute type 5 has an invalid length. [ 228.472433][T10408] netlink: 'syz.3.1082': attribute type 8 has an invalid length. [ 228.502531][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 228.638146][T10408] geneve3: entered promiscuous mode [ 228.662143][T10408] geneve3: entered allmulticast mode [ 228.694689][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 37162 - 0 [ 228.728560][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 37162 - 0 [ 228.779867][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 37162 - 0 [ 228.790841][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 228.818053][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 37162 - 0 [ 228.858570][T10430] netlink: 'syz.2.1085': attribute type 4 has an invalid length. [ 228.901454][T10426] netlink: 'syz.2.1085': attribute type 4 has an invalid length. [ 230.050205][T10459] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.723016][ C1] ip6_tnl_xmit_ctl: 37 callbacks suppressed [ 230.723030][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 231.640920][T10417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.715113][T10462] __nla_validate_parse: 4 callbacks suppressed [ 231.715131][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 232.060746][T10479] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1099'. [ 232.208241][T10487] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 232.429883][T10487] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1101'. [ 232.545567][T10497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.556983][T10497] bond4: (slave bond5): making interface the new active one [ 232.565624][T10497] bond4: (slave bond5): Enslaving as an active interface with an up link [ 232.727091][T10509] bridge_slave_1: invalid flags given to default FDB implementation [ 232.774173][T10511] netlink: 'syz.2.1106': attribute type 11 has an invalid length. [ 233.149976][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.202018][T10518] batman_adv: batadv0: Interface activated: dummy0 [ 233.249331][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.298752][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'. [ 233.326195][T10518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.336886][T10518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.357767][T10518] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 233.428790][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.436006][ T8014] bridge0: port 1(bridge_slave_0) entered listening state [ 233.450537][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.457729][ T8014] bridge0: port 2(bridge_slave_1) entered listening state [ 233.464604][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1112'. [ 233.579647][T10543] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 233.610943][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 233.651014][T10523] xfrm0 speed is unknown, defaulting to 1000 [ 233.678547][T10552] xt_hashlimit: size too large, truncated to 1048576 [ 234.200725][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 234.335484][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 234.489512][T10576] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 234.695759][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 234.757936][T10583] netlink: 'syz.1.1122': attribute type 3 has an invalid length. [ 235.274975][T10594] bond0: option arp_validate: invalid value (55553) [ 235.961065][T10618] xfrm0 speed is unknown, defaulting to 1000 [ 236.154323][T10633] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 236.657397][T10651] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1138'. [ 237.081484][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 237.679931][T10702] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 238.631262][T10706] bond5: (slave bridge3): making interface the new active one [ 238.704664][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 238.848609][T10706] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 238.881000][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 238.929165][T10747] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1150'. [ 238.963737][T10708] team0: entered promiscuous mode [ 238.977173][T10708] team_slave_0: entered promiscuous mode [ 239.056830][T10708] team_slave_1: entered promiscuous mode [ 239.070539][T10708] team0: entered allmulticast mode [ 239.077411][T10708] team_slave_0: entered allmulticast mode [ 239.085616][T10708] team_slave_1: entered allmulticast mode [ 239.096157][T10708] tipc: Resetting bearer [ 239.106885][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.116849][T10708] tipc: Resetting bearer [ 239.133740][T10708] bond5: (slave team0): Enslaving as an active interface with a down link [ 239.651228][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 239.754718][T10780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.280264][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 240.390992][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 240.399296][T10810] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 240.557862][T10810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.657311][T10813] vlan2: entered promiscuous mode [ 240.671922][T10813] bond7: entered promiscuous mode [ 240.686780][T10813] vlan2: entered allmulticast mode [ 240.701032][T10813] bond7: entered allmulticast mode [ 240.888982][T10823] bond7: (slave bridge3): making interface the new active one [ 240.899536][T10823] bridge3: entered promiscuous mode [ 240.918940][T10823] bridge3: entered allmulticast mode [ 240.937842][T10823] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 241.078578][T10840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1173'. [ 241.109688][T10845] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.1175'. [ 241.845976][ T8018] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.860307][ T8018] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.880693][ T8018] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.894595][ T8018] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.688453][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 242.777143][T10904] netlink: 4424 bytes leftover after parsing attributes in process `syz.4.1188'. [ 242.915734][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 243.090673][T10917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1193'. [ 243.277418][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 244.325491][T10856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.614516][T10945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 244.637159][T10945] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1200'. [ 244.692050][T10950] 0ªî{X¹¦: left allmulticast mode [ 244.881718][T10950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 244.955415][ T5734] xfrm0 speed is unknown, defaulting to 1000 [ 244.967671][ T5734] syz0: Port: 1 Link ACTIVE [ 245.118912][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 245.129439][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 245.391617][T10979] netlink: 'syz.3.1211': attribute type 2 has an invalid length. [ 245.411758][T10979] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 245.429143][T10979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1211'. [ 245.522368][T10981] xt_TCPMSS: Only works on TCP SYN packets [ 245.618571][T10984] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 246.645774][T11014] netlink: 'syz.0.1220': attribute type 3 has an invalid length. [ 247.395586][T11044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.002467][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 248.913614][T11046] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 249.066462][T11059] __nla_validate_parse: 4 callbacks suppressed [ 249.066479][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 249.142030][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1236'. [ 249.159907][T11059] batadv0: entered promiscuous mode [ 249.178538][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 249.196933][T11059] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 249.235807][T11059] batadv0: left promiscuous mode [ 249.288226][T11074] xt_connbytes: Forcing CT accounting to be enabled [ 249.320348][T11074] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 249.357151][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 249.430851][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1240'. [ 249.582034][T11098] netlink: 4424 bytes leftover after parsing attributes in process `syz.0.1243'. [ 249.611989][T11084] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.627751][T11088] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1240'. [ 249.728552][T11102] bond8: entered promiscuous mode [ 249.734962][T11102] bond8: entered allmulticast mode [ 249.749659][T11084] bond8 (unregistering): Released all slaves [ 249.880760][T11106] xfrm0 speed is unknown, defaulting to 1000 [ 250.274247][T11121] bond0 (unregistering): Released all slaves [ 250.567776][T11126] xfrm0 speed is unknown, defaulting to 1000 [ 251.428513][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 251.546964][T11160] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1254'. [ 251.724639][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 252.386017][T11195] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 252.414523][T11191] ip6tnl2: entered allmulticast mode [ 252.493501][T11195] 8021q: adding VLAN 0 to HW filter on device bond8 [ 252.700403][T11209] unsupported nlmsg_type 40 [ 254.669658][T11163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.971456][T11238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.192231][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 360.199307][ C1] rcu: 0-...!: (1 GPs behind) idle=142c/1/0x4000000000000000 softirq=44274/44274 fqs=0 [ 360.210062][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5622/1:b..l [ 360.217984][ C1] rcu: (detected by 1, t=10503 jiffies, g=46797, q=322 ncpus=2) [ 360.225711][ C1] Sending NMI from CPU 1 to CPUs 0: [ 360.225749][ C0] NMI backtrace for cpu 0 [ 360.225836][ C0] CPU: 0 UID: 0 PID: 11237 Comm: syz.0.1272 Not tainted syzkaller #0 PREEMPT(full) [ 360.225857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.225897][ C0] RIP: 0010:lock_release+0x111/0x3c0 [ 360.225947][ C0] Code: 24 83 f8 32 0f 83 2a 02 00 00 4a 8d 1c ad 00 00 00 00 4c 01 eb 48 8d 6c dd 00 48 89 ef 4c 89 f6 e8 44 55 11 0a 44 89 64 24 14 <45> 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d [ 360.225970][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000046 [ 360.225984][ C0] RAX: 0000000000000001 RBX: 000000000000000a RCX: 0000000000010203 [ 360.225995][ C0] RDX: 0000000000010000 RSI: ffff8880b86281d8 RDI: ffff88807bdd8bf0 [ 360.226007][ C0] RBP: ffff88807bdd8bf0 R08: ffff88802a155327 R09: 0000000000000000 [ 360.226019][ C0] R10: ffff88802a155318 R11: ffffed100542aa65 R12: 0000000000000002 [ 360.226031][ C0] R13: 0000000000000002 R14: ffff8880b86281d8 R15: ffff88807bdd8000 [ 360.226042][ C0] FS: 00007f7a431bd6c0(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 360.226057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.226069][ C0] CR2: 000000110c37b870 CR3: 0000000028df8000 CR4: 00000000003526f0 [ 360.226105][ C0] Call Trace: [ 360.226114][ C0] [ 360.226123][ C0] ? __hrtimer_run_queues+0x2bf/0xa10 [ 360.226148][ C0] ? __pfx_advance_sched+0x10/0x10 [ 360.226170][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 360.226195][ C0] __hrtimer_run_queues+0x2bf/0xa10 [ 360.226222][ C0] hrtimer_interrupt+0x448/0x910 [ 360.226254][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 360.226277][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 360.226302][ C0] [ 360.226307][ C0] [ 360.226313][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.226332][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 360.226355][ C0] Code: f7 e8 2d 6c ec f5 f7 c3 00 02 00 00 74 05 e8 f0 50 18 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 82 dd f5 65 8b 05 4d 43 89 07 85 c0 74 18 5b 41 5e c3 cc cc [ 360.226369][ C0] RSP: 0018:ffffc9000664eee8 EFLAGS: 00000206 [ 360.226383][ C0] RAX: 0000000000000012 RBX: 0000000000000282 RCX: 0000000000000202 [ 360.226393][ C0] RDX: 0000000000000002 RSI: ffffffff8dfe0307 RDI: 0000000000000001 [ 360.226404][ C0] RBP: ffffc9000664f1d0 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 360.226416][ C0] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: ffff88802a1552a8 [ 360.226428][ C0] R13: dffffc0000000000 R14: ffff88802a1552a8 R15: ffff88802a1552f8 [ 360.226448][ C0] taprio_change+0x34f3/0x4640 [ 360.226503][ C0] ? __pfx_taprio_change+0x10/0x10 [ 360.226527][ C0] ? tc_modify_qdisc+0x17af/0x2390 [ 360.226564][ C0] taprio_init+0x994/0xc00 [ 360.226581][ C0] ? netlink_rcv_skb+0x226/0x4a0 [ 360.226599][ C0] ? netlink_unicast+0x7bb/0x940 [ 360.226613][ C0] ? netlink_sendmsg+0x813/0xb40 [ 360.226636][ C0] ? __pfx_taprio_init+0x10/0x10 [ 360.226658][ C0] ? __pfx_taprio_init+0x10/0x10 [ 360.226675][ C0] qdisc_create+0x7b5/0xf00 [ 360.226724][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 360.226747][ C0] tc_modify_qdisc+0x17af/0x2390 [ 360.226774][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 360.226809][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 360.226830][ C0] rtnetlink_rcv_msg+0x7b9/0xc00 [ 360.226877][ C0] ? netlink_sendmsg+0x5d4/0xb40 [ 360.226899][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 360.226923][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 360.226948][ C0] ? __lock_acquire+0x683/0x2cf0 [ 360.226975][ C0] netlink_rcv_skb+0x226/0x4a0 [ 360.227014][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 360.227041][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.227064][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.227082][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.227101][ C0] netlink_unicast+0x7bb/0x940 [ 360.227121][ C0] netlink_sendmsg+0x813/0xb40 [ 360.227142][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.227162][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.227184][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.227203][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 360.227248][ C0] ____sys_sendmsg+0x54e/0x850 [ 360.227269][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.227290][ C0] ? import_iovec+0x73/0xa0 [ 360.227308][ C0] ___sys_sendmsg+0x2a5/0x360 [ 360.227324][ C0] ? __lock_acquire+0x683/0x2cf0 [ 360.227342][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.227361][ C0] ? futex_wait+0x2a2/0x390 [ 360.227395][ C0] ? __fget_files+0x2a/0x420 [ 360.227411][ C0] ? __fget_files+0x3a2/0x420 [ 360.227430][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 360.227448][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.227473][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.227490][ C0] do_syscall_64+0x174/0x580 [ 360.227505][ C0] ? trace_irq_disable+0x3b/0x140 [ 360.227520][ C0] ? clear_bhb_loop+0x40/0x90 [ 360.227538][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.227555][ C0] RIP: 0033:0x7f7a4239ce59 [ 360.227570][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.227585][ C0] RSP: 002b:00007f7a431bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.227601][ C0] RAX: ffffffffffffffda RBX: 00007f7a42616090 RCX: 00007f7a4239ce59 [ 360.227613][ C0] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 000000000000000a [ 360.227624][ C0] RBP: 00007f7a42432e6f R08: 0000000000000000 R09: 0000000000000000 [ 360.227635][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.227645][ C0] R13: 00007f7a42616128 R14: 00007f7a42616090 R15: 00007ffd5443a198 [ 360.227664][ C0] [ 360.227743][ C1] task:syz-executor state:R running task stack:22376 pid:5622 tgid:5622 ppid:5619 task_flags:0x400140 flags:0x00080000 [ 360.796072][ C1] Call Trace: [ 360.799347][ C1] [ 360.802278][ C1] __schedule+0x17d9/0x56c0 [ 360.806807][ C1] ? irqentry_exit+0x218/0x8f0 [ 360.811592][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.816622][ C1] ? __pfx___schedule+0x10/0x10 [ 360.821487][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 360.826867][ C1] preempt_schedule_common+0x82/0xd0 [ 360.832159][ C1] ? copy_pmd_range+0x4dd7/0x5880 [ 360.837193][ C1] preempt_schedule_thunk+0x16/0x40 [ 360.842404][ C1] _raw_spin_unlock+0x3f/0x50 [ 360.847086][ C1] copy_pmd_range+0x4e08/0x5880 [ 360.851944][ C1] ? stack_depot_save_flags+0x33/0x800 [ 360.857425][ C1] ? __lock_acquire+0x683/0x2cf0 [ 360.862388][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 360.867606][ C1] ? percpu_ref_get_many+0x19/0x140 [ 360.872833][ C1] ? copy_page_range+0x2a0/0x1250 [ 360.877893][ C1] copy_page_range+0xc26/0x1250 [ 360.882767][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 360.888077][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 360.894874][ C1] dup_mmap+0xf21/0x1d90 [ 360.899172][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 360.903887][ C1] ? irqentry_exit+0x218/0x8f0 [ 360.908671][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.913897][ C1] ? copy_mm+0x10f/0x480 [ 360.918155][ C1] ? copy_mm+0x10f/0x480 [ 360.922422][ C1] copy_mm+0x11a/0x480 [ 360.926511][ C1] ? copy_process+0xd3c/0x43f0 [ 360.931280][ C1] copy_process+0x1e99/0x43f0 [ 360.935978][ C1] ? copy_process+0xd3c/0x43f0 [ 360.940769][ C1] ? __pfx_copy_process+0x10/0x10 [ 360.945813][ C1] kernel_clone+0x2d7/0x940 [ 360.950329][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 360.955395][ C1] __x64_sys_clone+0x1b6/0x230 [ 360.960161][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 360.965462][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.971536][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.977602][ C1] do_syscall_64+0x174/0x580 [ 360.982277][ C1] ? trace_irq_disable+0x3b/0x140 [ 360.987299][ C1] ? clear_bhb_loop+0x40/0x90 [ 360.991988][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.997884][ C1] RIP: 0033:0x7fda06bc58d2 [ 361.002302][ C1] RSP: 002b:00007ffe54eb2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 361.010717][ C1] RAX: ffffffffffffffda RBX: 00007ffe54eb2030 RCX: 00007fda06bc58d2 [ 361.018688][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 361.026667][ C1] RBP: 00007ffe54eb21bc R08: 0000000000000000 R09: 0000000000000001 [ 361.034638][ C1] R10: 0000555580b6e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 361.042604][ C1] R13: 00000000000927c0 R14: 000000000003e406 R15: 00007ffe54eb2210 [ 361.050588][ C1] [ 361.053607][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g46797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 361.064809][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 361.074788][ C1] rcu: RCU grace-period kthread stack dump: [ 361.080669][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 361.094167][ C1] Call Trace: [ 361.097442][ C1] [ 361.100380][ C1] __schedule+0x17d9/0x56c0 [ 361.104900][ C1] ? __lock_acquire+0x683/0x2cf0 [ 361.109865][ C1] ? __pfx___schedule+0x10/0x10 [ 361.114730][ C1] ? schedule+0x90/0x2b0 [ 361.118992][ C1] schedule+0x164/0x2b0 [ 361.123176][ C1] schedule_timeout+0x152/0x2c0 [ 361.128041][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 361.133424][ C1] ? __pfx_process_timeout+0x10/0x10 [ 361.138725][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.144538][ C1] ? prepare_to_swait_event+0x322/0x350 [ 361.150096][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 361.154948][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.160152][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.165973][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 361.171257][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 361.176469][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.182287][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 361.186878][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.192074][ C1] ? __kthread_parkme+0x71/0x1f0 [ 361.197019][ C1] ? __kthread_parkme+0x196/0x1f0 [ 361.202060][ C1] kthread+0x388/0x470 [ 361.206129][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.211324][ C1] ? __pfx_kthread+0x10/0x10 [ 361.215924][ C1] ret_from_fork+0x514/0xb70 [ 361.220522][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 361.225634][ C1] ? __switch_to+0xc89/0x1420 [ 361.230320][ C1] ? __pfx_kthread+0x10/0x10 [ 361.234916][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.239706][ C1] [ 361.242723][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 361.249042][ C1] CPU: 1 UID: 0 PID: 11235 Comm: syz.3.1275 Not tainted syzkaller #0 PREEMPT(full) [ 361.258405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.268456][ C1] RIP: 0010:handle_softirqs+0x15b/0x840 [ 361.274014][ C1] Code: 89 6c 24 20 0f b7 db 48 c7 c7 60 30 cb 8b e8 bc d1 2b 0a 65 66 c7 05 ca ae b7 11 00 00 e8 3d bc 46 00 fb 48 c7 c5 c0 a0 60 8e ff ff ff ff 0f bc c3 41 89 c4 41 ff c4 0f 84 09 04 00 00 89 5c [ 361.293613][ C1] RSP: 0018:ffffc90000a08f30 EFLAGS: 00000202 [ 361.299679][ C1] RAX: 000000000182746e RBX: 0000000000000004 RCX: 0000000000000102 [ 361.307650][ C1] RDX: 0000000000000002 RSI: ffffffff8dfe0307 RDI: ffffffff8c2a9f80 [ 361.315620][ C1] RBP: ffffffff8e60a0c0 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 361.323587][ C1] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: 0000000000000000 [ 361.331564][ C1] R13: 0000000000000000 R14: ffff88801f789f00 R15: dffffc0000000000 [ 361.339530][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 361.348459][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.355043][ C1] CR2: 00007fda079456b8 CR3: 00000000728d4000 CR4: 00000000003526f0 [ 361.363013][ C1] Call Trace: [ 361.366291][ C1] [ 361.369139][ C1] ? __irq_exit_rcu+0xca/0x220 [ 361.373924][ C1] __irq_exit_rcu+0xca/0x220 [ 361.378525][ C1] irq_exit_rcu+0x9/0x30 [ 361.382772][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 361.388413][ C1] [ 361.391344][ C1] [ 361.394268][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.400249][ C1] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 361.407013][ C1] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1a 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1a 0c [ 361.426701][ C1] RSP: 0018:ffffc9000662f5a0 EFLAGS: 00000293 [ 361.432767][ C1] RAX: ffffffff81ba5717 RBX: dffffc0000000000 RCX: ffff88801f789f00 [ 361.440735][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 361.448698][ C1] RBP: ffffc9000662f6c8 R08: ffff88807c757ec7 R09: 1ffff1100f8eafd8 [ 361.456666][ C1] R10: dffffc0000000000 R11: ffffed100f8eafd9 R12: 1ffff110170c85fd [ 361.464633][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 361.472610][ C1] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 361.478772][ C1] ? smp_call_function_many_cond+0x8b1/0x14b0 [ 361.484841][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 361.490058][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 361.496393][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 361.501598][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 361.506712][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 361.511835][ C1] tlb_flush_mmu+0x1af/0xa30 [ 361.516432][ C1] tlb_finish_mmu+0xf4/0x220 [ 361.521020][ C1] exit_mmap+0x4b2/0x9f0 [ 361.525271][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 361.530071][ C1] ? __pfx_exit_aio+0x10/0x10 [ 361.534753][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 361.540390][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 361.545599][ C1] __mmput+0x118/0x420 [ 361.549677][ C1] exit_mm+0x221/0x2d0 [ 361.553747][ C1] do_exit+0x6cd/0x2360 [ 361.557914][ C1] ? __pfx_do_exit+0x10/0x10 [ 361.562546][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.567590][ C1] do_group_exit+0x22d/0x2f0 [ 361.572182][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.577387][ C1] get_signal+0x121b/0x12c0 [ 361.581916][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 361.587474][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.593659][ C1] exit_to_user_mode_loop+0x104/0x730 [ 361.599027][ C1] ? rcu_is_watching+0x15/0xb0 [ 361.603804][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.609864][ C1] do_syscall_64+0x353/0x580 [ 361.614450][ C1] ? trace_irq_disable+0x3b/0x140 [ 361.619472][ C1] ? clear_bhb_loop+0x40/0x90 [ 361.624153][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.630046][ C1] RIP: 0033:0x7f500eb9ce59 [ 361.634460][ C1] Code: Unable to access opcode bytes at 0x7f500eb9ce2f. [ 361.641469][ C1] RSP: 002b:00007f500f9ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.649879][ C1] RAX: fffffffffffffe00 RBX: 00007f500ee15fa8 RCX: 00007f500eb9ce59 [ 361.657851][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f500ee15fa8 [ 361.665818][ C1] RBP: 00007f500ee15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 361.673873][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.681842][ C1] R13: 00007f500ee16038 R14: 00007ffce42de7e0 R15: 00007ffce42de8c8 [ 361.689829][ C1]