last executing test programs: 5.951969232s ago: executing program 4 (id=8787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ffffffeb0000000004000000850000002000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.freeze\x00', 0x0, 0x0) connect$rose(r2, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103c00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x2f11, 0x1, 0x1}, 0x8) 5.751395125s ago: executing program 4 (id=8788): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000020003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) 5.587672781s ago: executing program 4 (id=8790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r8, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x48800) sendmmsg$alg(r6, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0x901}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r4, r9, 0x0, 0x8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) close(r3) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x30}}, 0x40) close(0x4) connect$rose(r2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0xe, 0x2c, 0x100, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0x6}, @typed={0x0, 0x48, 0x0, 0x0, @u64=0x8}, @nested={0x0, 0x53, 0x0, 0x1, [@generic="d9a544d8fa40db5173bf14736342956c0643489fd31f8fa00db1ce4f5764188c0ca43968da1ee59ac3a0c1f6ce93d8b51a92ac634c40366ce1c3688b89dd8e9471b4ab859726e2a379d041178d13c2dc4eb7babd51c9dd33b157037a5cb3ddcd57538e55b53f20765245df55c1196780486ed51fe7b2a79de5be73a18dc823197fa2f2c25406c6202671e9a640ae896f0c1d767f7f55f63f8765e4fc5b6a8b0353a168d995510e55d879fdbe946c483f20d27d3ff359e9d9f7bc841454393c16fb04ead0fd68697419bf756c24ca0b8fcbf57b56805a7ed751fa63674e1a417bc74822e0c123e66c58671c2ec8805dd3e00aae1322"]}]}, @typed={0x0, 0x41, 0x0, 0x0, @ipv4=@multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) 5.518897594s ago: executing program 4 (id=8791): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0x40000d, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000)="0025ae", &(0x7f0000000100)=@tcp6, 0x2}, 0x20) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "ccf8088d", "3b8eda4d6920ba22"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0x20000000002) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000af00000000000000fdffffff85001c00a0000000000000086c000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000003c0)=""/234}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 4.357519723s ago: executing program 3 (id=8798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000022010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c0002800600028008000180fffffffc4900020073797a30000000000900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x6000}, 0x48000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a006da800000000000000001c0000001e"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x0, 0x25dfdbf8, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0xfd9, &(0x7f0000001e00)=""/4057, 0x0, 0x0, '\x00', r7}, 0x94) 4.303417891s ago: executing program 4 (id=8799): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000010029bd30000900000000000000", @ANYRES32=0x0, @ANYBLOB="33800400128801001c00128009000100626f6e64000000000c0002800800120000500090"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = getpid() (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00000020000100000000ef00000000020020000300000400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8f98}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) (async) r11 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) unshare(0x20020000) 4.167384951s ago: executing program 0 (id=8800): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x800000000000000}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x800000000000000}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x800) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) (async) 4.01178283s ago: executing program 3 (id=8802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000100000300000100200000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c00028006000500810000000a000100aaaaaaaaaaaa0000"], 0x48}}, 0x8000) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r3, 0x0, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000e40)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @multicast2, 0xff000000, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 'pimreg\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x6}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x34}, @local, 0xffffff00, 0xffffff00, 0x6, 0x8, {@mac=@multicast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff]}}, 0x2, 0x5, 0x797b, 0x78, 0x96a4, 0x7, 'veth0_to_team\x00', 'wlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa101000100000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000000c0)={0x4, 0x400, 0x6}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) 3.843254141s ago: executing program 3 (id=8803): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x70) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000014) write$tun(0xffffffffffffffff, 0x0, 0x3e) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) 3.756681283s ago: executing program 2 (id=8804): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001340), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xb, 0x4}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x1}, {0xd, 0x4}, {0x1}, {0xb, 0x3}, {0x6, 0x1}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x18, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r5, r2], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x1}, 0x94) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 2.712247637s ago: executing program 2 (id=8808): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) 2.446411264s ago: executing program 1 (id=8809): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000003a003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) 2.413123374s ago: executing program 4 (id=8810): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000004018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bind$packet(r1, &(0x7f0000000180)={0x11, 0xe6, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000020000c4000007008209", @ANYRES32], 0x38}}, 0x2000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2.346259326s ago: executing program 2 (id=8811): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000015) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "fcc8aa17e073ace3a465fb1f316b63346b3b0038030789464fe9b3026886b803a3ed9b20a4c7ab4d0333715e32dc340615c3c96d6e9f5026358f801200b66ff28fbf2054ba78a88d89e1bd985040b6ecae6ff2bc172498b5d0bc735b10ac6bc25ea6d58be52665570ff1ea5a7fcf2016215b2ec2827501f1048d41476a0180b1f148390c2e0fceae7a1eee6cfd295c91b0a7ef2330cb1ea5bc9aa4a3a26303639c1c64dc9121ee831b5307cf82770643e84b150a1e0ab0017a4c7a7ded5b19eca758fcb2f8dd6ab338c84b223b7bb066eef71a433f244abf5f9f7c15ebdd63e8ea36084744d1ac4a81fa1707afa656e2bdef94b8acee8de0caedc596b94b1d4c05cbd13cc762a552c4793f4b3d8f46d4b94fb5f53fe3e84b441c397afc8ab53436982a02b60bb95a93031ccf8f3e1a632fa1a3b920aeb46583327641c5e45e02354cd980deda497f7f1233cec52b1d7fea354dd2495b3c01eee8bc7cb1114a159963f6d9ca3cdb6b3c469b4ee202e4b774e6b67c6b357d26833f4a913af8cd97c68ed2fbc45c075940624e37dc9924be6783f5a969801af4b9f32a7dd7119710a68655e8f3b5f33041e639c1652f26880dbda819c040fcb12185d075c35d3825a15e1c51c0c92821e188cf53d4c4614aaab14e00bf9d4da4e785354b9c0bcd6702c093eb07f10b606e4385c55ef0b114e953050b54334874b6d683e9f528ed2267724571f156bcb48a142434d49ecd5865e164d8c920cbe666ae448a8ac4c4cc183c856dd2d69fff0197220e783d001a477efc50fcdc0d113614d09d5102ab90448ff1cfe7eaa0206fb2afb31309904aff75047b019791646bbc1896293dee1947954c2e46f63fe166ea08ede71546b5519a9bfae054832a55f04803d59b0688a40f075b4316838159f49e7d6d6ffee35b8ffb409b15833ce8c0754fee4b8bb37e87d8b021120da3d5778b7abe8efe467f99426d0d8c6bc4ecb542496ed1f2842fe2488e4026980ca30cdf4f44e4745980cf219ec6c1ba2caf23d0395454755292e3be7d108d4cc7c3d6f23374f99c7d0ef2e3c4b72596c7fa12e6272862544d314d2f972d43b663c8bda50660fb6bd56e7c7c647ba15837010491118fee8a74b162935db534d404afb1d17f063b2bb2c43380c5921d96fe9e7eac0decdb26eb5050c54021a8268f0c4d1b7f44a7e5697fd8489dbe74ca6a0e354868fe30559616d0b2cbdda7e955ddaa0755257012a768fd8b8c112e4283fda06405779d497c4d7b9d51059aae162d71bfd841effe362948c9280af87b06b3d0366361cb72332f350fd91be594034f1c8f3a7b0bca76e8cc5a220c5e13fc8b92f33c8c08a398a976720daae8f7a70a8804254c5288666be55eb4c3bd4d1b4ced9d1a47127b3be753cbe6fbce1bfa8ffd5aacd27813dcd6878d28fd2a8105baed54ca440c09430364dbd67aaa56d8ad34d44c574feb610bd967f0d72af4d8e99833686498200d348acd3d2da4c339bfd05765d5f1383526006252fa03d9bb89e5fd6d8bd3a32e72571f88b69d7d044223430bfd9df00f3f565c1974691ddd658f3711a831ca4cdbc44a39f47b29547f32691d06cb89bb777aa97ceca98e50042134921ae93c2ae4ee6a5d63b02e441a20aedd4278b791fa4acb992e13abe52afe0e10dbec8042c51b17b012aa19eab962834a6df21671a834b01171ad49ffbf68b2b9786924120c35faa0184b3f7ae6947fdb52d2bdf432457053612d124c97538bd9c052da2d767241a2ca463ea710ea6a0b8a46f5d6cae39466fb7e0b04ba044c48f75e2b9164ae37af3a0acd567c46681358435289dc45d1e863e56f428df07d421d4ad31a445467a817703797e4c9e8784dd9f1a1dc552894ffe7d0725c8f09acba4b43ca19e57d73e047ca9c927c1872662750b120551cd6ae4c657817294b6c6d51eb225d6fed895d2acde59b0a96970d140638c85828c6da4cb22a591043f80b91403a1d0bd85eb0c0ad3d02d5a13ace459c005e64b3fd7bf9afcdc2c72d9bb8696408e1bf8bed4255a2b733467e52b7c055ff1b0db9d625dc15271f02cb817bc3882c425bff8db85b0326aac7bdd8298a118d0f97c20bcf5ace3d1a4b99f7789b4f0b70cf9776ee104340bd562ccdc9be8804753f9a4b9b464cf277474eccd6fc79240bdabdaf4b90815a20493fc753c1d5145ebed0440d4d0759e87083f51bfcdbfcff4f537bd15a8c79ca9215c994a6b13e00a3082b65658b838581e3308ac814d9f4a73b23621ae1606fb63bdc24cd271a52a60d7a9d614c858ae7475c7e706b5316fc2c9681042513aceb75a3bb58b3f6fcc560c5b35103b67dce73fa2f2e213ac29695566a9e8571fbb17619e943c7663a805ed3628a7c3722ff432c0d71730f587ded6a9bf8fef1f106d32b39a979a45e3dd9ff575f3307476a582683820d31c46547ad514e309459891fd24d047e00a7ebd7ec3747ab0748de5ad8c265b5f67b7af526bcfd9ee95dc928dc70302c49563c69c58a99f66e3ecc6607b949014e1f8defadf6b4310655fb91bbbeed6e2258bbeb2e5c948f41c2d302b73178d4e14a585ee98f4dc8edee684bd5c7d9f10d4170a3b4a9e4a723cd566cd51c6fd327b14145d371a40c9c6def8d6e767f9fdebd880e37a26d1e9c64bcff323b505f8cc88a5648856ab8c9cbf3fa9f9fd1f94899e8e5907bf047b2032a2d93ed8e73f74a636d7735eae9e7806546c0d421d0fd90eb2b943d3b10e201055d31642d0ee04cb7f33e1a2c270eb43a72aa545d23946574539bb70071151a3c72407d24cbd6134bc7372a2444ce12de02653a8abad589ed2b22fa037989a59d812a648d3e9c0b7f4a88ace584aedde918291e5f66135b2f78701f6cca61b08a64e146d5380e09e129ab1b2c5129b5bd1f1ec70f491c5cd86315890bdc5108207c0c7e461ab07d5849a4895fbb390980ac2c414305e3790c642d435d8ae2388760c37116e561ddd9e791c5ec25657af9233694a57348664c8de11abe9784e3bbbb636aefa4aab97a385ac724c83fe6a38453f41064bd4a99ce63968cc4a1394ee8169b7bcdf998ec64b6ea086a114519f4c2399ecd739a528fd3dcc16e6e696396d089e8fbc5a5cc0f8daf1f9b80993ce181fe8c476087593191a066b1b2f5fb97f01ac0b13a91920ad59fdc141d0190e02d99301bc79c73107b882ddbc29d86d932945bc57d6c1f4395c07f75743b1cb66b6e2bf4791d6a52ac12281ca7ad2016269b926ebf90489914681e5ebb6783b59e8abf79964ce3e1800a4e3499940de3a2a0d5410e81a386b463baa035da27f2ca11fd47c19c554581eb3467031864596e91f73a815e6e32212be246e7ac6164d0f49d603b9d469e712bbb5b6432e100dd7f95f392d556f983954bc4ec7f74767a51d812fd66a5a895ef57658b13e95bb6cbc9f2af15a9825db05e7ab20a8523b0ef8c890e693ba10d9b922b3768b1ef10310cc67fb5e0260078e95ddb5ef6d10c5028c7b84db403b1fbcdbb003d986f1cd25d1810ebdda1b7fc59307da5f09b37c113084a23762286c5e68f17482f24cebc0d28652b09eb466671155b28e347ad536459556997b481d1d0627679984d1a987c0c413010a96cd93937d1e21fca6b84bf26d333e4e45014da3479f8dac432c256968ce2141a0ba54f1c477796731e2d5babcbfcadc580b8dc4446d35b525658509a5240e6ddf16670e244ed318d77cef80a95b0d6de528df644f7721142aba52cac6a1cc7f2ba9d7de4112151ffc8edc9b14f6b396b838f719ccc0cfc81f5c16b899056b04a31f5aa916f0cbf159df9d1ac6bbc79d6c6bb3b40b23a6a4994c6d5ee66e750cd66fac0f8a6308be783b5a4552dcb43c140be0f6d4096195a3cfcf5d38033860ecbd6c30da2a3c1ec642d371b62a9ba413743c0fb6acb8d0636b28e0ca137872d0d8e2ff8d4313cf25d6d8a81c3b8baddc807d4e07ebfbeb4d0954f29ff21782563a06c51fbb25b1a4ca7e0dd939a62a149d38beb2dcc7a10e42c35f9b8653eb9832d29f83509d9085e63de1e3200f38fa3388011bacd50c9087af3d917ea3f4285002d517f6289c7c0814dc9b7bd9393ef1a83189065045729093cb79bde4aea4770ebb1ab7b28afcd6a1ec2f94dfd47fc08d216791f04f4a09d2ed833f3f1edcf3d30a776f4fec692f3082c25e59b3136665caea9d3652ea79433520ad9ee9a02a80222ec139f3b3d3227108bad86c1f82156242a8731686719a9372b84c5c6578b82fbedb50d94ab150ef23926db1bfe223c4e208bff77b72d1fe6300b2b17f296bd7305efef3df6c33b9d76dcd895c99fba676085204c236a330936a3deba55b264af3e7591ca05f95d0877b3252a21315c6c8e942277eca9bff0c9713c199da30308901d68b1d2f8347f1c2f87c47f6abc4140642da7c46b8b43493cec39f6154edc3a9e15fe1d6cd34843af9fc1145662a3cb18b0a4603d8e8ef9c766006d295154fab03070dbe83010eb7fc29aff21a464aa853f5a722301aba50d6809ed4c25198e10932321fc48f9d4e0b971a6ac81767ad247551fe38d5b6d0cc28c98a649a19cda61ddfca09fc903e1b84128f8ecf995fe564ae069df912d539f405f750667457b87f95531caf8a264ef4856c8284f08e9360355179e9e48ea700d11a8b3ab5be0a09c7189d98ba2aae2f2d32dd770ad70388404cbb2a285c6a93f8f89976097eb6da402c8c060d579651f79641fa54658cfcdc6faccdd3bfdc2f000e43ffe10508086a524c5229983b3745c5e9e6ed41e249f646105d5b7a45d9452af6390727c568b144fec4efc0419b441caf5cc9cf852e5946c96d26abbd5026280a85d562632fc4b401a22295c69b0d3f8157f2174c1159c11e2e975293946c72819da6e848d9ebe504134ac989d0b426e5edfe7dfd99b9d14d660e414233f71d3fd01d9049a07d76cac441801a0b2a71cbeda07a0328ae639573aa74dcbffb213aa9874bdad23b5ff2cd8de2b9b9c49318c7f874a6f28978309feec9352bf8586709f4407b0c9f65e44c483e41ca6746e575d7ec00e4831a5dce4649145e59bd550c4844dab76b72bdc3e500c88a261e5aec2e8c954d4bdabffebe49a40bcaafc600d5a54ec7be2d5ed06031719c0133c335f8a0fc737b3c40af62dc59ba50a1ad1a45dc35c1a62a0fe7bb2903926340c16c41692c97af6475823f2dbbf6e66a57a33412dc358dff1750d8690e6f634bfed37f1799d1fa60a31e49365750753d701a69c8926930dd090ff18fdedb8b08469593f9b2b520a49948b7098d29320904a987dfcddf607715d191083d53796d377c8198aa8fa4565faa60b7f010ddbf970b98b37100e73174943ba69e7ca215778551eb4181f46b6abd1e6463588e96e4b1a901a6e9125e07ddddea504f86b07fdeb"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) recvmmsg$unix(r10, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000020000000009007400", @ANYRES32=0x0, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c000280080014000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.291833824s ago: executing program 1 (id=8812): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000010"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x100, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) close(0x4) 2.258606566s ago: executing program 0 (id=8813): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3244, @any, 0x4}, 0xe) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000300), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000004580)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000", 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000002000000000000000f0ac000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000080000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r9}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x2}, {0x8, 0x120, 0x0, 0x0, 0x7}]}}]}]}, 0x50}}, 0x40800) r12 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x1d, r4, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="04000000000000000000000001000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100000000000000840004", @ANYRESOCT=r4, @ANYRES16=r3, @ANYRESOCT=r3, @ANYRES8=r4, @ANYBLOB="16c255c50e597bc5c2006d6ec9f82c885f2ec03bf5446574d9f4d91fa48c42dc2257329b94165e87815e413d25529dc4ef65de8fd7f6a98cdd6623563a5f40f068b123ed379d25c0d1e7b391613088d1af4f45997f177e34c86bc0f2bb25549f898d288f3513540318ecc84720994e762f1a11bc06594cf8b8796d8297319c1ce71592fa7b37e31ad1b052373aecb4a7fa55574179b9d0e70b8000bc54efd31dcbadf79cb4dbb504eb0b08a13dbd374a77725365de5107bcf073bb38ea558f69c651140eae1f4f9e627cbbde2a32edeb445683280685f70a7277688e8ca8cefdd505b803c5d65973921e"], 0x48}, 0x1, 0x0, 0x0, 0x44810}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) close(0x3) 2.079430652s ago: executing program 3 (id=8814): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce28712829"], 0xe0}], 0x1}, 0x40040) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00bf06ed2a020000240012800c0001006d6163766c616e00140002800800580004000000080003001c1403fc"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 2.023398641s ago: executing program 0 (id=8815): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) 2.012428832s ago: executing program 1 (id=8816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000080)="e02742e8680d85009882762f86dd6cea8b94a42626f6eff90292fb7b0500ac5af69c7cb69c7ceaf0cb225285f4d665e1102b90d87e65", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2100, 0x840}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', 0x0}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000080)="e02742e8680d85009882762f86dd6cea8b94a42626f6eff90292fb7b0500ac5af69c7cb69c7ceaf0cb225285f4d665e1102b90d87e65", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2100, 0x840}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) (async) 1.947821031s ago: executing program 2 (id=8817): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x80, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1400000}, {0x6, 0x11, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x12}, 0x40000) close(0x3) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x40, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1.840210062s ago: executing program 0 (id=8819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 1.788149946s ago: executing program 1 (id=8820): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0x9, "f7979a9a53bd42c9f0"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x8, 0x7, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x65, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x23, 0x0, 0x4, [0x0, 0x10]}, @ssrr={0x89, 0x7, 0xa9, [@dev={0xac, 0x14, 0x14, 0x37}]}, @end, @timestamp={0x44, 0xc, 0xc5, 0x0, 0x1, [0x2, 0xfffff000]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000faffffff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0100"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000faffffff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0100"/28], 0x50) 1.579980988s ago: executing program 3 (id=8821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x40c00) unshare(0x20000400) bpf$PROG_LOAD(0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 1.579797417s ago: executing program 0 (id=8822): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000040003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) 1.436170474s ago: executing program 0 (id=8823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) read(r7, &(0x7f0000000000)=""/149, 0xaa) sendmmsg$alg(r3, &(0x7f0000000080), 0x0, 0x24008040) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x8000000, 0xfffffffd, {}, [{0x4}]}, 0x18}}, 0x240400c0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a010200000000000000000700000408000240000000000900010073797a31ccf2370092c134840000000020000000020a01020000000000008000070000000900010073797a310000000014000000020a00001100010500000000000000000300000a"], 0x84}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000) 1.429492234s ago: executing program 1 (id=8824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x0, 0x4000009, 0xffffffff, {{0x25, 0x4, 0x3, 0x5, 0x94, 0x67, 0x0, 0xf7, 0x29, 0x0, @broadcast, @multicast2}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 1.375970039s ago: executing program 3 (id=8825): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}, {r1, 0x4}], 0x2, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) 937.617843ms ago: executing program 2 (id=8826): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000240)="94", 0x1) readv(r2, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) tee(r0, r3, 0x8f5, 0x100000000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30314}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xc}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}]}, 0x58}, 0x1, 0xba01, 0x0, 0x20040014}, 0x40080) 536.098133ms ago: executing program 1 (id=8827): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x2000401, 0x5, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000900020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0xfffffffd) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r13, 0x0, r12}, 0x94) (async) pipe(&(0x7f0000000100)) 0s ago: executing program 2 (id=8828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000002540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000) (fail_nth: 3) kernel console output (not intermixed with test programs): 54391][ T1350] ? __pfx_vfs_read+0x10/0x10 [ 861.754408][ T1350] ? __fget_files+0x2a/0x420 [ 861.754432][ T1350] ? __fget_files+0x3a0/0x420 [ 861.754451][ T1350] ? __fget_files+0x2a/0x420 [ 861.754480][ T1350] ksys_read+0x150/0x270 [ 861.754498][ T1350] ? __pfx_ksys_read+0x10/0x10 [ 861.754524][ T1350] do_syscall_64+0xe2/0xf80 [ 861.754549][ T1350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.754565][ T1350] ? trace_irq_disable+0x37/0x100 [ 861.754590][ T1350] ? clear_bhb_loop+0x60/0xb0 [ 861.754611][ T1350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.754628][ T1350] RIP: 0033:0x7f038b15b58e [ 861.754644][ T1350] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 861.754659][ T1350] RSP: 002b:00007f038c05efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 861.754677][ T1350] RAX: ffffffffffffffda RBX: 00007f038c05f6c0 RCX: 00007f038b15b58e [ 861.754690][ T1350] RDX: 000000000000000f RSI: 00007f038c05f0a0 RDI: 0000000000000003 [ 861.754701][ T1350] RBP: 00007f038c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 861.754711][ T1350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.754721][ T1350] R13: 00007f038b416038 R14: 00007f038b415fa0 R15: 00007ffc8c2d53b8 [ 861.754749][ T1350] [ 861.981129][ T8498] lec:lec_start_xmit: lec0:No lecd attached [ 862.248026][ T1360] netlink: 'syz.1.7251': attribute type 1 has an invalid length. [ 862.310163][ T1361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.237137][ T1381] __nla_validate_parse: 3 callbacks suppressed [ 863.237158][ T1381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7257'. [ 863.320326][ T1384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7258'. [ 863.351401][ T1384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7258'. [ 864.899492][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7278'. [ 864.932843][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7280'. [ 865.445747][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7287'. [ 865.457764][ T1476] netlink: 'syz.3.7287': attribute type 7 has an invalid length. [ 865.465675][ T1476] netlink: 'syz.3.7287': attribute type 5 has an invalid length. [ 865.474959][ T1476] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7287'. [ 865.488062][ T1476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7287'. [ 865.793108][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7292'. [ 866.243024][ T1498] : renamed from bond_slave_0 (while UP) [ 866.846233][ T1516] sctp: [Deprecated]: syz.1.7299 (pid 1516) Use of int in max_burst socket option. [ 866.846233][ T1516] Use struct sctp_assoc_value instead [ 866.991493][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 866.999609][ C1] lec:lec_tx_timeout: lec0 [ 867.031720][ T1518] vlan2: entered promiscuous mode [ 867.141438][ T1518] geneve1: entered promiscuous mode [ 867.147767][ T1518] vlan2: entered allmulticast mode [ 867.160400][ T1518] geneve1: entered allmulticast mode [ 867.693886][ T1537] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7304'. [ 868.359055][ T1557] xt_hashlimit: max too large, truncated to 1048576 [ 868.960801][ T1589] __nla_validate_parse: 2 callbacks suppressed [ 868.960830][ T1589] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7315'. [ 869.278322][ T1607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7323'. [ 869.306117][ T1608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7323'. [ 869.425428][ T1616] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7325'. [ 869.602550][ T1627] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7329'. [ 869.620455][ T1617] syzkaller0: entered promiscuous mode [ 869.641730][ T1628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7330'. [ 869.655892][ T1617] syzkaller0: entered allmulticast mode [ 870.045589][ T1642] x_tables: duplicate underflow at hook 3 [ 870.228001][ T1648] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7337'. [ 870.306017][ T1650] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7339'. [ 870.325727][ T1651] netlink: 'syz.0.7338': attribute type 10 has an invalid length. [ 870.335474][ T1650] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.365438][ T1651] netlink: 'syz.0.7338': attribute type 10 has an invalid length. [ 870.374022][ T1653] netlink: 'syz.1.7340': attribute type 1 has an invalid length. [ 870.529594][ T1662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7342'. [ 870.560650][ T1662] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7342'. [ 870.716991][ T1672] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.739401][ T1672] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 870.833408][ T1672] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.853574][ T1672] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 870.941122][ T1672] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.974729][ T1672] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 871.068871][ T1672] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.122987][ T1672] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 8192 - 0 [ 871.280779][T29702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 8192 - 0 [ 871.294455][T29702] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.347742][T29702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 8192 - 0 [ 871.367145][T29702] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.419188][ T6073] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 8192 - 0 [ 871.430993][ T6073] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 871.484374][ T3817] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 8192 - 0 [ 871.505281][ T3817] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 872.035375][ T1722] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 872.044281][ T1722] bridge3: entered allmulticast mode [ 872.473973][ T1737] openvswitch: netlink: Unknown key attributes 2 [ 874.289636][ T1804] ip6gre1: entered promiscuous mode [ 874.297246][ T1804] ip6gre1: entered allmulticast mode [ 874.319015][ T1801] tap0: tun_chr_ioctl cmd 2148553947 [ 874.385067][ T1807] __nla_validate_parse: 7 callbacks suppressed [ 874.385105][ T1807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7387'. [ 874.446086][ T1802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7387'. [ 874.451620][ T1807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.519640][ T1812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7390'. [ 874.541842][ T1807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.599092][ T1807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.620115][ T1807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.651347][ T1819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.002920][ T1824] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7392'. [ 875.166154][ T1837] batman_adv: batadv0: Adding interface: dummy0 [ 875.172910][ T1837] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.202300][ T1837] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 875.297587][ T1840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7398'. [ 875.314559][ T1840] syzkaller1: entered promiscuous mode [ 875.320231][ T1840] syzkaller1: entered allmulticast mode [ 875.329877][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 875.558492][ T1854] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7401'. [ 875.707593][ T1859] netlink: 'syz.0.7402': attribute type 15 has an invalid length. [ 875.882908][ T1875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7407'. [ 875.954893][ T1877] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 875.968455][ T1877] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 876.379776][ T1897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7413'. [ 876.748435][ T1917] FAULT_INJECTION: forcing a failure. [ 876.748435][ T1917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.801411][ T1917] CPU: 0 UID: 0 PID: 1917 Comm: syz.4.7418 Not tainted syzkaller #0 PREEMPT(full) [ 876.801449][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 876.801463][ T1917] Call Trace: [ 876.801472][ T1917] [ 876.801481][ T1917] dump_stack_lvl+0xe8/0x150 [ 876.801514][ T1917] should_fail_ex+0x412/0x560 [ 876.801549][ T1917] _copy_from_user+0x2d/0xb0 [ 876.801572][ T1917] ___sys_sendmsg+0x1c6/0x360 [ 876.801592][ T1917] ? __lock_acquire+0x6b5/0x2cf0 [ 876.801620][ T1917] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.801674][ T1917] ? __fget_files+0x2a/0x420 [ 876.801700][ T1917] ? __fget_files+0x3a0/0x420 [ 876.801737][ T1917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 876.801760][ T1917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.801789][ T1917] ? __pfx_ksys_write+0x10/0x10 [ 876.801821][ T1917] do_syscall_64+0xe2/0xf80 [ 876.801851][ T1917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.801872][ T1917] ? clear_bhb_loop+0x60/0xb0 [ 876.801897][ T1917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.801918][ T1917] RIP: 0033:0x7fed34f9acb9 [ 876.801936][ T1917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.801954][ T1917] RSP: 002b:00007fed35e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.801976][ T1917] RAX: ffffffffffffffda RBX: 00007fed35215fa0 RCX: 00007fed34f9acb9 [ 876.801992][ T1917] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 876.802005][ T1917] RBP: 00007fed35e22090 R08: 0000000000000000 R09: 0000000000000000 [ 876.802018][ T1917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.802030][ T1917] R13: 00007fed35216038 R14: 00007fed35215fa0 R15: 00007ffc020de3c8 [ 876.802061][ T1917] [ 877.150598][ T1929] netlink: 'syz.4.7422': attribute type 10 has an invalid length. [ 877.211041][ T1929] bond0: (slave team0): Enslaving as an active interface with an up link [ 877.244646][ T1932] netlink: 'syz.4.7422': attribute type 1 has an invalid length. [ 877.307884][ T1931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7420'. [ 877.688339][ T1950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7427'. [ 877.748865][ T1952] team1: entered promiscuous mode [ 877.757329][ T1952] team1: entered allmulticast mode [ 877.788469][ T1952] 8021q: adding VLAN 0 to HW filter on device team1 [ 877.865479][ T1950] team2: entered promiscuous mode [ 877.870585][ T1950] team2: entered allmulticast mode [ 877.895965][ T1950] 8021q: adding VLAN 0 to HW filter on device team2 [ 878.048347][ T1957] netlink: 'syz.3.7429': attribute type 1 has an invalid length. [ 878.077920][ T1957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.309444][ T1964] FAULT_INJECTION: forcing a failure. [ 878.309444][ T1964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.346525][ T1964] CPU: 1 UID: 0 PID: 1964 Comm: syz.1.7432 Not tainted syzkaller #0 PREEMPT(full) [ 878.346555][ T1964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 878.346569][ T1964] Call Trace: [ 878.346578][ T1964] [ 878.346588][ T1964] dump_stack_lvl+0xe8/0x150 [ 878.346622][ T1964] should_fail_ex+0x412/0x560 [ 878.346657][ T1964] _copy_from_user+0x2d/0xb0 [ 878.346681][ T1964] __copy_msghdr+0x3c5/0x5b0 [ 878.346708][ T1964] ___sys_sendmsg+0x213/0x360 [ 878.346728][ T1964] ? __lock_acquire+0x6b5/0x2cf0 [ 878.346756][ T1964] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.346816][ T1964] ? __fget_files+0x2a/0x420 [ 878.346843][ T1964] ? __fget_files+0x3a0/0x420 [ 878.346881][ T1964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 878.346907][ T1964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.346940][ T1964] ? __pfx_ksys_write+0x10/0x10 [ 878.346974][ T1964] do_syscall_64+0xe2/0xf80 [ 878.347007][ T1964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.347027][ T1964] ? trace_irq_disable+0x37/0x100 [ 878.347057][ T1964] ? clear_bhb_loop+0x60/0xb0 [ 878.347082][ T1964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.347102][ T1964] RIP: 0033:0x7f038b19acb9 [ 878.347121][ T1964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.347139][ T1964] RSP: 002b:00007f038c05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.347163][ T1964] RAX: ffffffffffffffda RBX: 00007f038b415fa0 RCX: 00007f038b19acb9 [ 878.347179][ T1964] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 878.347192][ T1964] RBP: 00007f038c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 878.347206][ T1964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.347218][ T1964] R13: 00007f038b416038 R14: 00007f038b415fa0 R15: 00007ffc8c2d53b8 [ 878.347252][ T1964] [ 878.685592][ T1972] netlink: 'syz.0.7433': attribute type 1 has an invalid length. [ 878.836516][ T1986] netlink: 'syz.2.7441': attribute type 32 has an invalid length. [ 878.972778][ T1994] netlink: 'syz.3.7442': attribute type 30 has an invalid length. [ 879.102688][ T2003] FAULT_INJECTION: forcing a failure. [ 879.102688][ T2003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.149074][ T2003] CPU: 0 UID: 0 PID: 2003 Comm: syz.2.7446 Not tainted syzkaller #0 PREEMPT(full) [ 879.149103][ T2003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 879.149116][ T2003] Call Trace: [ 879.149125][ T2003] [ 879.149135][ T2003] dump_stack_lvl+0xe8/0x150 [ 879.149168][ T2003] should_fail_ex+0x412/0x560 [ 879.149204][ T2003] _copy_from_user+0x2d/0xb0 [ 879.149229][ T2003] ____sys_sendmsg+0x2fd/0x810 [ 879.149260][ T2003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.149292][ T2003] ? import_iovec+0x73/0xa0 [ 879.149319][ T2003] ___sys_sendmsg+0x2a5/0x360 [ 879.149339][ T2003] ? __lock_acquire+0x6b5/0x2cf0 [ 879.149366][ T2003] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.149426][ T2003] ? __fget_files+0x2a/0x420 [ 879.149452][ T2003] ? __fget_files+0x3a0/0x420 [ 879.149491][ T2003] __x64_sys_sendmsg+0x1bd/0x2a0 [ 879.149516][ T2003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.149548][ T2003] ? __pfx_ksys_write+0x10/0x10 [ 879.149582][ T2003] do_syscall_64+0xe2/0xf80 [ 879.149614][ T2003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.149635][ T2003] ? trace_irq_disable+0x37/0x100 [ 879.149664][ T2003] ? clear_bhb_loop+0x60/0xb0 [ 879.149690][ T2003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.149711][ T2003] RIP: 0033:0x7f113039acb9 [ 879.149730][ T2003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.149749][ T2003] RSP: 002b:00007f113130b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.149771][ T2003] RAX: ffffffffffffffda RBX: 00007f1130615fa0 RCX: 00007f113039acb9 [ 879.149787][ T2003] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 879.149801][ T2003] RBP: 00007f113130b090 R08: 0000000000000000 R09: 0000000000000000 [ 879.149814][ T2003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.149827][ T2003] R13: 00007f1130616038 R14: 00007f1130615fa0 R15: 00007ffc2d655b58 [ 879.149862][ T2003] [ 879.485131][ T2016] __nla_validate_parse: 2 callbacks suppressed [ 879.485151][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7450'. [ 879.586047][ T2016] vlan3: entered allmulticast mode [ 879.699784][ T2027] xt_hashlimit: size too large, truncated to 1048576 [ 879.764925][ T2032] ipt_rpfilter: unknown options [ 880.421422][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 880.435163][ T2046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7456'. [ 880.803784][ T2037] veth0: entered promiscuous mode [ 880.808911][ T2037] veth0: entered allmulticast mode [ 880.901241][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 880.909327][ C1] lec:lec_tx_timeout: lec0 [ 881.022523][ T2058] FAULT_INJECTION: forcing a failure. [ 881.022523][ T2058] name failslab, interval 1, probability 0, space 0, times 0 [ 881.060361][ T2058] CPU: 1 UID: 0 PID: 2058 Comm: syz.3.7459 Not tainted syzkaller #0 PREEMPT(full) [ 881.060392][ T2058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 881.060406][ T2058] Call Trace: [ 881.060415][ T2058] [ 881.060425][ T2058] dump_stack_lvl+0xe8/0x150 [ 881.060460][ T2058] should_fail_ex+0x412/0x560 [ 881.060497][ T2058] should_failslab+0xa8/0x100 [ 881.060526][ T2058] kmem_cache_alloc_noprof+0x87/0x6e0 [ 881.060562][ T2058] ? dst_alloc+0x105/0x170 [ 881.060597][ T2058] ? is_bpf_text_address+0x26/0x2b0 [ 881.060633][ T2058] dst_alloc+0x105/0x170 [ 881.060662][ T2058] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 881.060693][ T2058] ? ip_route_output_key_hash+0xd8/0x2a0 [ 881.060716][ T2058] ip_route_output_key_hash+0x18d/0x2a0 [ 881.060736][ T2058] ? ns_capable+0x89/0xe0 [ 881.060759][ T2058] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 881.060797][ T2058] ip_route_output_flow+0x2a/0x150 [ 881.060826][ T2058] ? security_sk_classify_flow+0x6d/0x150 [ 881.060850][ T2058] udp_sendmsg+0x154a/0x22f0 [ 881.060899][ T2058] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 881.060924][ T2058] ? __pfx_udp_sendmsg+0x10/0x10 [ 881.060944][ T2058] ? tomoyo_write_log2+0x250/0x910 [ 881.060979][ T2058] ? tomoyo_supervisor+0x4cb/0x1570 [ 881.061033][ T2058] ? get_random_u32+0x497/0x8b0 [ 881.061053][ T2058] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.061081][ T2058] ? get_random_u32+0x13a/0x8b0 [ 881.061099][ T2058] ? get_random_u32+0x4ce/0x8b0 [ 881.061128][ T2058] udpv6_sendmsg+0xe5f/0x25a0 [ 881.061166][ T2058] ? __lock_acquire+0x6b5/0x2cf0 [ 881.061190][ T2058] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 881.061220][ T2058] ? ip6_datagram_release_cb+0x7c/0x550 [ 881.061268][ T2058] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.061296][ T2058] ? inet_send_prepare+0x1b9/0x270 [ 881.061318][ T2058] ? __local_bh_enable_ip+0xd0/0x130 [ 881.061339][ T2058] ? inet_send_prepare+0x1b9/0x270 [ 881.061366][ T2058] ? inet6_sendmsg+0xe4/0x120 [ 881.061396][ T2058] __sock_sendmsg+0xe5/0x270 [ 881.061423][ T2058] ____sys_sendmsg+0x4d7/0x810 [ 881.061452][ T2058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.061478][ T2058] ? import_iovec+0x73/0xa0 [ 881.061503][ T2058] ___sys_sendmsg+0x2a5/0x360 [ 881.061539][ T2058] ? __lock_acquire+0x6b5/0x2cf0 [ 881.061565][ T2058] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.061623][ T2058] ? __fget_files+0x2a/0x420 [ 881.061649][ T2058] ? __fget_files+0x3a0/0x420 [ 881.061686][ T2058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 881.061710][ T2058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 881.061743][ T2058] ? __pfx_ksys_write+0x10/0x10 [ 881.061777][ T2058] do_syscall_64+0xe2/0xf80 [ 881.061808][ T2058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.061829][ T2058] ? trace_irq_disable+0x37/0x100 [ 881.061867][ T2058] ? clear_bhb_loop+0x60/0xb0 [ 881.061894][ T2058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.061915][ T2058] RIP: 0033:0x7f6292d9acb9 [ 881.061935][ T2058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.061953][ T2058] RSP: 002b:00007f6293c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.061975][ T2058] RAX: ffffffffffffffda RBX: 00007f6293015fa0 RCX: 00007f6292d9acb9 [ 881.061992][ T2058] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 881.062017][ T2058] RBP: 00007f6293c72090 R08: 0000000000000000 R09: 0000000000000000 [ 881.062030][ T2058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.062042][ T2058] R13: 00007f6293016038 R14: 00007f6293015fa0 R15: 00007ffc75987c18 [ 881.062075][ T2058] [ 882.269014][ T2103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7472'. [ 882.327988][ T2104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7472'. [ 882.366699][ T2107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7471'. [ 882.512942][ T2110] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 883.184089][ T2121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 883.210484][ T2121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.227257][ T2121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 883.404004][ T2151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7482'. [ 883.458164][ T2121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 883.513992][ T2121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.543228][ T2121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 883.686632][ T2121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 883.711338][ T2121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.737303][ T2121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 883.841625][ T2165] FAULT_INJECTION: forcing a failure. [ 883.841625][ T2165] name failslab, interval 1, probability 0, space 0, times 0 [ 883.854824][ T2165] CPU: 0 UID: 0 PID: 2165 Comm: syz.1.7488 Not tainted syzkaller #0 PREEMPT(full) [ 883.854849][ T2165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 883.854862][ T2165] Call Trace: [ 883.854871][ T2165] [ 883.854880][ T2165] dump_stack_lvl+0xe8/0x150 [ 883.854917][ T2165] should_fail_ex+0x412/0x560 [ 883.854950][ T2165] should_failslab+0xa8/0x100 [ 883.854976][ T2165] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 883.855007][ T2165] ? __alloc_skb+0x186/0x7d0 [ 883.855035][ T2165] ? __alloc_skb+0x1d0/0x7d0 [ 883.855078][ T2165] ? __local_bh_enable_ip+0xd0/0x130 [ 883.855107][ T2165] __alloc_skb+0x1d0/0x7d0 [ 883.855145][ T2165] alloc_skb_with_frags+0xca/0x890 [ 883.855182][ T2165] sock_alloc_send_pskb+0x878/0x990 [ 883.855213][ T2165] ? kernel_text_address+0xa5/0xe0 [ 883.855258][ T2165] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 883.855284][ T2165] ? do_raw_spin_lock+0x12b/0x2f0 [ 883.855319][ T2165] ? __lock_acquire+0x6b5/0x2cf0 [ 883.855349][ T2165] __ip_append_data+0x2bc5/0x3f30 [ 883.855394][ T2165] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 883.855417][ T2165] ? ipv4_mtu+0x23/0x650 [ 883.855467][ T2165] ? __pfx___ip_append_data+0x10/0x10 [ 883.855487][ T2165] ? ipv4_mtu+0x53b/0x650 [ 883.855522][ T2165] ? ip_setup_cork+0x577/0x9a0 [ 883.855547][ T2165] ip_make_skb+0x22e/0x450 [ 883.855576][ T2165] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 883.855597][ T2165] ? __pfx_ip_make_skb+0x10/0x10 [ 883.855642][ T2165] udp_sendmsg+0x19fb/0x22f0 [ 883.855688][ T2165] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 883.855713][ T2165] ? __pfx_udp_sendmsg+0x10/0x10 [ 883.855736][ T2165] ? tomoyo_write_log2+0x250/0x910 [ 883.855774][ T2165] ? tomoyo_supervisor+0x4cb/0x1570 [ 883.855842][ T2165] ? get_random_u32+0x4ce/0x8b0 [ 883.855874][ T2165] udpv6_sendmsg+0xe5f/0x25a0 [ 883.855917][ T2165] ? __lock_acquire+0x6b5/0x2cf0 [ 883.855945][ T2165] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 883.855980][ T2165] ? ip6_datagram_release_cb+0x7c/0x550 [ 883.856034][ T2165] ? lockdep_hardirqs_on+0x7a/0x110 [ 883.856066][ T2165] ? inet_send_prepare+0x1b9/0x270 [ 883.856089][ T2165] ? __local_bh_enable_ip+0xd0/0x130 [ 883.856113][ T2165] ? inet_send_prepare+0x1b9/0x270 [ 883.856142][ T2165] ? inet6_sendmsg+0xe4/0x120 [ 883.856176][ T2165] __sock_sendmsg+0xe5/0x270 [ 883.856206][ T2165] ____sys_sendmsg+0x4d7/0x810 [ 883.856238][ T2165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 883.856269][ T2165] ? import_iovec+0x73/0xa0 [ 883.856306][ T2165] ___sys_sendmsg+0x2a5/0x360 [ 883.856324][ T2165] ? __lock_acquire+0x6b5/0x2cf0 [ 883.856349][ T2165] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.856405][ T2165] ? __fget_files+0x2a/0x420 [ 883.856430][ T2165] ? __fget_files+0x3a0/0x420 [ 883.856465][ T2165] __x64_sys_sendmsg+0x1bd/0x2a0 [ 883.856488][ T2165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 883.856517][ T2165] ? __pfx_ksys_write+0x10/0x10 [ 883.856549][ T2165] do_syscall_64+0xe2/0xf80 [ 883.856578][ T2165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.856597][ T2165] ? trace_irq_disable+0x37/0x100 [ 883.856624][ T2165] ? clear_bhb_loop+0x60/0xb0 [ 883.856648][ T2165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.856667][ T2165] RIP: 0033:0x7f038b19acb9 [ 883.856685][ T2165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.856703][ T2165] RSP: 002b:00007f038c05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.856724][ T2165] RAX: ffffffffffffffda RBX: 00007f038b415fa0 RCX: 00007f038b19acb9 [ 883.856739][ T2165] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 883.856752][ T2165] RBP: 00007f038c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 883.856764][ T2165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.856776][ T2165] R13: 00007f038b416038 R14: 00007f038b415fa0 R15: 00007ffc8c2d53b8 [ 883.856808][ T2165] [ 884.249507][ T2121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 884.260161][ T2121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.270791][ T2121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 884.296090][ T2169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7489'. [ 884.458947][ T6130] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 884.468922][ T6130] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 884.492367][ T6130] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 884.542510][ T2177] syzkaller0: entered promiscuous mode [ 884.572363][ T2177] syzkaller0: entered allmulticast mode [ 884.623376][ T2177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7491'. [ 884.634257][T29695] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 884.651918][T29695] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 884.694250][T29695] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 884.846129][T29695] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 884.861846][T29695] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 884.873806][ T2177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7491'. [ 884.891401][T29695] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 884.917940][ T2177] vlan2: entered allmulticast mode [ 884.943903][ T6073] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 884.954647][ T6073] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 884.981451][ T6073] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 887.581306][ T2272] sctp: [Deprecated]: syz.2.7517 (pid 2272) Use of int in max_burst socket option deprecated. [ 887.581306][ T2272] Use struct sctp_assoc_value instead [ 888.244411][ T2295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7524'. [ 888.398953][ T2295] netlink: 'syz.1.7524': attribute type 2 has an invalid length. [ 889.820684][ T2295] !©9: entered promiscuous mode [ 890.024380][ T2313] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7529'. [ 890.283212][ T2326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7535'. [ 890.401360][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7532'. [ 892.534668][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7542'. [ 892.792961][ T2372] pim6reg: entered allmulticast mode [ 892.834837][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7544'. [ 892.854835][ T2377] netlink: 'syz.2.7547': attribute type 21 has an invalid length. [ 892.864558][ T2369] pim6reg: left allmulticast mode [ 892.920378][ T2377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7547'. [ 892.930194][ T2377] netlink: 'syz.2.7547': attribute type 1 has an invalid length. [ 892.942203][ T2375] tipc: Enabled bearer , priority 0 [ 892.958117][ T2375] syzkaller0: entered promiscuous mode [ 892.980503][ T2375] syzkaller0: entered allmulticast mode [ 893.194360][ T2384] tipc: Resetting bearer [ 893.235938][ T2374] tipc: Resetting bearer [ 893.268710][ T2374] tipc: Disabling bearer [ 893.343660][ T2392] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7551'. [ 893.609607][ T2411] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7555'. [ 893.862892][ T30] audit: type=1800 audit(1769073084.384:19): pid=2432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7561" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1255 res=0 errno=0 [ 895.339211][ T2416] bond2: option packets_per_slave: invalid value (1048582) [ 895.346946][ T2416] bond2: option packets_per_slave: allowed values 0 - 65535 [ 895.359924][ T2416] bond2 (unregistering): Released all slaves [ 895.405187][ T2427] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 895.442694][ T2432] bond0: entered promiscuous mode [ 895.447800][ T2432] bond_slave_0: entered promiscuous mode [ 895.464373][ T2432] bond_slave_1: entered promiscuous mode [ 895.470277][ T2432] bond0: entered allmulticast mode [ 895.490830][ T2432] bond_slave_0: entered allmulticast mode [ 895.497248][ T2432] bond_slave_1: entered allmulticast mode [ 895.513273][ T2438] netlink: 'syz.0.7563': attribute type 1 has an invalid length. [ 895.614259][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7566'. [ 895.626660][ T2455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7566'. [ 895.656098][ T2455] netlink: 'syz.1.7566': attribute type 7 has an invalid length. [ 895.668574][ T2454] ip6tnl0: Caught tx_queue_len zero misconfig [ 895.890465][ T2474] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7570'. [ 896.087137][T29695] bond10 (unregistering): (slave ip6gretap2): Releasing backup interface [ 896.190797][T29695] bond6 (unregistering): (slave erspan0): Releasing active interface [ 896.434024][T29695] bond3 (unregistering): (slave geneve2): Releasing active interface [ 896.556624][T29695] team0: Port device geneve0 removed [ 897.049674][T29695] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 897.058507][T29695] bond0 (unregistering): Released all slaves [ 897.075546][T29695] bond1 (unregistering): Released all slaves [ 897.188660][T29695] bond2 (unregistering): Released all slaves [ 897.203286][T29695] bond3 (unregistering): Released all slaves [ 897.217137][T29695] bond4 (unregistering): Released all slaves [ 897.231547][T29695] bond5 (unregistering): Released all slaves [ 897.345229][T29695] bond6 (unregistering): (slave veth7): Releasing active interface [ 897.354088][T29695] bond6 (unregistering): Released all slaves [ 897.368724][T29695] bond7 (unregistering): Released all slaves [ 897.483698][T29695] bond8 (unregistering): Released all slaves [ 897.598583][T29695] bond9 (unregistering): Released all slaves [ 897.705783][T29695] bond10 (unregistering): Released all slaves [ 897.719721][T29695] bond11 (unregistering): Released all slaves [ 897.795806][ T2507] tipc: Enabled bearer , priority 0 [ 897.825488][ T2511] syzkaller0: entered promiscuous mode [ 897.831126][ T2511] syzkaller0: entered allmulticast mode [ 897.976118][ T2511] tipc: Resetting bearer [ 898.014357][ T2535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7574'. [ 898.108763][ T2511] tipc: Disabling bearer [ 898.317226][ T2547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7578'. [ 898.439952][ T2568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7581'. [ 898.825242][ T2597] netlink: 'syz.3.7586': attribute type 4 has an invalid length. [ 899.274126][ T2614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7587'. [ 900.535904][ T2626] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7590'. [ 900.612874][ T2626] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.638587][ T2634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7594'. [ 900.655131][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7592'. [ 900.657672][ T2634] delete_channel: no stack [ 900.710870][ T2639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7595'. [ 900.734870][ T2626] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.779775][ T2643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7597'. [ 900.788955][ T2639] ip6gre1: entered promiscuous mode [ 900.788978][ T2639] ip6gre1: entered allmulticast mode [ 900.809029][ T2639] sctp: [Deprecated]: syz.1.7595 (pid 2639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.809029][ T2639] Use struct sctp_sack_info instead [ 900.873682][T29695] tipc: Disabling bearer [ 900.893896][T29695] tipc: Left network mode [ 900.901067][ T2626] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.997909][ T2648] xfrm1: entered allmulticast mode [ 901.115842][ T2626] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.367318][ T2662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7602'. [ 901.379074][ T2662] openvswitch: netlink: Flow key attr not present in new flow. [ 901.402255][ T2662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7602'. [ 901.431791][ T2662] netlink: 'syz.3.7602': attribute type 30 has an invalid length. [ 901.486395][ T2662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7602'. [ 901.521473][ T2662] netlink: 'syz.3.7602': attribute type 30 has an invalid length. [ 901.539372][T29704] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.581482][T29704] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.625754][T29704] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.665845][T29704] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.614761][ T2714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7615'. [ 902.700925][ T2715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7615'. [ 902.804755][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7616'. [ 903.864019][T29704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.872529][T29704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.884248][T29695] hsr_slave_0: left promiscuous mode [ 903.890134][T29695] hsr_slave_1: left promiscuous mode [ 903.934236][T29695] pimreg (unregistering): left allmulticast mode [ 904.766286][ T2713] bond4 (unregistering): Released all slaves [ 904.811820][T29704] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.829104][T29704] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.889355][ T2735] macsec2: entered promiscuous mode [ 904.897290][ T2735] macsec2: entered allmulticast mode [ 905.097748][ T2753] netlink: 'syz.0.7624': attribute type 10 has an invalid length. [ 905.165720][ T2747] hsr0: entered promiscuous mode [ 905.171589][ T2747] macsec1: entered promiscuous mode [ 905.179488][ T2747] macsec1: entered allmulticast mode [ 905.199064][ T2747] hsr0: entered allmulticast mode [ 905.204967][ T2747] hsr_slave_0: entered allmulticast mode [ 905.210765][ T2747] hsr_slave_1: entered allmulticast mode [ 905.246549][ T2747] hsr0: left allmulticast mode [ 905.260374][ T2747] hsr_slave_0: left allmulticast mode [ 905.279959][ T2747] hsr_slave_1: left allmulticast mode [ 905.295368][ T2775] netlink: 'syz.2.7629': attribute type 10 has an invalid length. [ 906.443377][ T2819] __nla_validate_parse: 2 callbacks suppressed [ 906.443396][ T2819] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7636'. [ 907.249443][T29695] IPVS: stop unused estimator thread 0... [ 907.261922][ T2824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7638'. [ 907.658315][ T2835] tipc: Enabled bearer , priority 0 [ 907.678496][ T2835] syzkaller0: entered promiscuous mode [ 907.687334][ T2862] netlink: 'syz.2.7646': attribute type 30 has an invalid length. [ 907.698785][ T2835] syzkaller0: entered allmulticast mode [ 907.760033][ T2835] tipc: Resetting bearer [ 907.794373][ T2832] tipc: Resetting bearer [ 907.833443][ T2832] tipc: Disabling bearer [ 907.978044][ T2885] x_tables: duplicate underflow at hook 1 [ 907.985496][ T2885] No such timeout policy "syz1" [ 908.781476][ T2904] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7657'. [ 909.012923][ T2908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7659'. [ 910.724007][ T2927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7665'. [ 910.948643][ T2938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.988846][ T2934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.279788][ T2971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7674'. [ 913.113718][ T2980] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7677'. [ 913.128689][ T2985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7678'. [ 913.283643][ T2994] netlink: 'syz.3.7682': attribute type 15 has an invalid length. [ 913.284760][ T2996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7681'. [ 913.300802][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7682'. [ 913.349542][ T2994] netlink: 'syz.3.7682': attribute type 15 has an invalid length. [ 913.354906][ T6130] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 913.370008][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7682'. [ 913.413000][ T6130] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 913.441633][ T3009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7685'. [ 913.452493][ T6065] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 913.485710][ T6065] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 913.691801][ T3028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7689'. [ 913.803829][ T3033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7689'. [ 914.279338][ T3040] syzkaller0: entered promiscuous mode [ 914.307313][ T3040] syzkaller0: entered allmulticast mode [ 914.775215][ T3063] netlink: 'syz.3.7695': attribute type 1 has an invalid length. [ 914.800827][ T3063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.828376][ T3068] netlink: 'syz.3.7695': attribute type 1 has an invalid length. [ 914.867042][ T3068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.981705][ T3076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7696'. [ 915.125573][ T3081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7697'. [ 916.623279][ T3087] veth0: entered promiscuous mode [ 916.628504][ T3087] veth0: left promiscuous mode [ 916.770065][ T3090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.135752][ T3111] sctp: [Deprecated]: syz.3.7705 (pid 3111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 917.135752][ T3111] Use struct sctp_sack_info instead [ 917.336707][ T3122] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 917.652761][ T3133] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 917.658438][ T3133] dvmrp1: linktype set to 774 [ 917.773030][ T3140] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 918.004167][ T3153] netlink: 'syz.1.7718': attribute type 1 has an invalid length. [ 918.031602][ T3154] netlink: 'syz.1.7718': attribute type 1 has an invalid length. [ 918.075366][ T3157] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 918.255845][ T3168] __nla_validate_parse: 8 callbacks suppressed [ 918.255860][ T3168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7723'. [ 918.403183][ T3176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7727'. [ 918.449601][ T3176] dvmrp6: entered allmulticast mode [ 918.492696][ T3181] netlink: 'syz.0.7728': attribute type 12 has an invalid length. [ 918.559371][ T3180] tipc: Enabled bearer , priority 0 [ 918.621042][ T3195] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7731'. [ 918.633218][ T3195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7731'. [ 918.662207][ T3198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7729'. [ 918.673165][ T3180] syzkaller0: entered promiscuous mode [ 918.678668][ T3180] syzkaller0: entered allmulticast mode [ 918.685161][ T3180] tipc: Resetting bearer [ 918.772692][ T3196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7729'. [ 918.791843][ T6142] tipc: Resetting bearer [ 918.806113][ T3198] bridge2: entered promiscuous mode [ 918.944850][ T3206] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 918.996800][ T3212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7735'. [ 919.055126][ T3215] tipc: Enabling of bearer rejected, failed to enable media [ 919.116845][ T3219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7737'. [ 919.184775][ T3223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7738'. [ 919.200657][ T3171] tipc: Resetting bearer [ 919.252666][ T3229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7737'. [ 920.767401][ T3171] tipc: Disabling bearer [ 920.806073][ T3229] hsr_slave_1 (unregistering): left promiscuous mode [ 920.821936][T18832] tipc: Node number set to 1947177918 [ 921.073686][ T3262] netlink: 'syz.3.7745': attribute type 1 has an invalid length. [ 921.109016][ T3262] netlink: 'syz.3.7745': attribute type 7 has an invalid length. [ 921.139837][ T3266] batadv0: entered promiscuous mode [ 921.147091][ T3262] netlink: 'syz.3.7745': attribute type 8 has an invalid length. [ 921.171634][ T3262] NCSI netlink: No device for ifindex 65584 [ 922.516522][ T3317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 923.013336][ T3337] netlink: 'syz.1.7762': attribute type 1 has an invalid length. [ 923.472914][ T3360] sctp: [Deprecated]: syz.0.7769 (pid 3360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 923.472914][ T3360] Use struct sctp_sack_info instead [ 923.515421][ T3360] sctp: [Deprecated]: syz.0.7769 (pid 3360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 923.515421][ T3360] Use struct sctp_sack_info instead [ 923.515469][ T3363] __nla_validate_parse: 9 callbacks suppressed [ 923.515551][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7768'. [ 923.622761][ T3363] [†’Ì: entered promiscuous mode [ 924.166742][ T3385] netlink: 'syz.0.7776': attribute type 10 has an invalid length. [ 924.178255][ T3388] netlink: 'syz.0.7776': attribute type 10 has an invalid length. [ 924.545381][ T3407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7778'. [ 924.571232][ T3407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7778'. [ 924.609422][ T3411] netlink: 'syz.0.7779': attribute type 30 has an invalid length. [ 924.636939][ T3405] xt_CT: No such helper "snmp_trap" [ 924.645587][ T3411] FAULT_INJECTION: forcing a failure. [ 924.645587][ T3411] name failslab, interval 1, probability 0, space 0, times 0 [ 924.658969][ T3411] CPU: 0 UID: 0 PID: 3411 Comm: syz.0.7779 Not tainted syzkaller #0 PREEMPT(full) [ 924.658998][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 924.659014][ T3411] Call Trace: [ 924.659023][ T3411] [ 924.659033][ T3411] dump_stack_lvl+0xe8/0x150 [ 924.659069][ T3411] should_fail_ex+0x412/0x560 [ 924.659107][ T3411] should_failslab+0xa8/0x100 [ 924.659137][ T3411] kmem_cache_alloc_noprof+0x87/0x6e0 [ 924.659172][ T3411] ? skb_clone+0x212/0x3a0 [ 924.659201][ T3411] skb_clone+0x212/0x3a0 [ 924.659228][ T3411] __netlink_deliver_tap+0x404/0x850 [ 924.659269][ T3411] ? netlink_deliver_tap+0x2e/0x1b0 [ 924.659296][ T3411] netlink_deliver_tap+0x19c/0x1b0 [ 924.659323][ T3411] netlink_sendskb+0x68/0x140 [ 924.659348][ T3411] netlink_unicast+0x3a3/0x9b0 [ 924.659380][ T3411] ? __pfx_netlink_unicast+0x10/0x10 [ 924.659413][ T3411] netlink_rcv_skb+0x2b6/0x4b0 [ 924.659440][ T3411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 924.659497][ T3411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 924.659534][ T3411] ? netlink_deliver_tap+0x2e/0x1b0 [ 924.659569][ T3411] netlink_unicast+0x80f/0x9b0 [ 924.659607][ T3411] ? __pfx_netlink_unicast+0x10/0x10 [ 924.659633][ T3411] ? netlink_sendmsg+0x650/0xb40 [ 924.659656][ T3411] ? skb_put+0x11b/0x210 [ 924.659693][ T3411] netlink_sendmsg+0x813/0xb40 [ 924.659730][ T3411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.659760][ T3411] ? aa_file_perm+0x12d/0x1630 [ 924.659791][ T3411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 924.659824][ T3411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.659846][ T3411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.659874][ T3411] __sock_sendmsg+0x21c/0x270 [ 924.659905][ T3411] ____sys_sendmsg+0x4d7/0x810 [ 924.659928][ T3411] ? __might_fault+0xaf/0x130 [ 924.659970][ T3411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.660004][ T3411] ? import_iovec+0x73/0xa0 [ 924.660033][ T3411] ___sys_sendmsg+0x2a5/0x360 [ 924.660054][ T3411] ? __lock_acquire+0x6b5/0x2cf0 [ 924.660083][ T3411] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.660147][ T3411] ? __fget_files+0x2a/0x420 [ 924.660175][ T3411] ? __fget_files+0x3a0/0x420 [ 924.660228][ T3411] __x64_sys_sendmsg+0x1bd/0x2a0 [ 924.660253][ T3411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.660287][ T3411] ? __pfx_ksys_write+0x10/0x10 [ 924.660322][ T3411] do_syscall_64+0xe2/0xf80 [ 924.660354][ T3411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.660375][ T3411] ? trace_irq_disable+0x37/0x100 [ 924.660404][ T3411] ? clear_bhb_loop+0x60/0xb0 [ 924.660431][ T3411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.660453][ T3411] RIP: 0033:0x7ff93699acb9 [ 924.660473][ T3411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.660492][ T3411] RSP: 002b:00007ff9377a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.660515][ T3411] RAX: ffffffffffffffda RBX: 00007ff936c15fa0 RCX: 00007ff93699acb9 [ 924.660531][ T3411] RDX: 0000000020004090 RSI: 0000200000000040 RDI: 0000000000000003 [ 924.660545][ T3411] RBP: 00007ff9377a9090 R08: 0000000000000000 R09: 0000000000000000 [ 924.660558][ T3411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.660571][ T3411] R13: 00007ff936c16038 R14: 00007ff936c15fa0 R15: 00007ffc50f44cd8 [ 924.660613][ T3411] [ 925.057818][ T3417] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7781'. [ 925.074188][ T3417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7781'. [ 925.083653][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7781'. [ 925.250914][ T3424] netlink: 'syz.1.7783': attribute type 1 has an invalid length. [ 925.418248][ T3432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'. [ 925.429988][ T3432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'. [ 925.496473][ T3436] netlink: 'syz.0.7786': attribute type 1 has an invalid length. [ 925.509821][ T3436] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7786'. [ 925.655661][ T3441] syzkaller0: entered promiscuous mode [ 925.691309][ T3441] syzkaller0: entered allmulticast mode [ 926.045137][ T8498] lec:lec_start_xmit: lec0:No lecd attached [ 926.070697][ T3461] netlink: 'syz.0.7792': attribute type 30 has an invalid length. [ 926.256237][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7795'. [ 926.281509][ T3471] openvswitch: netlink: Invalid VLAN frame [ 926.763489][ T3502] gtp0: entered promiscuous mode [ 926.768622][ T3502] gtp0: entered allmulticast mode [ 926.899070][ T3508] bond0: entered promiscuous mode [ 926.904395][ T3508] bond_slave_0: entered promiscuous mode [ 926.910373][ T3508] bond_slave_1: entered promiscuous mode [ 926.922741][ T3508] bond0: left promiscuous mode [ 926.927596][ T3508] bond_slave_0: left promiscuous mode [ 926.941004][ T3508] bond_slave_1: left promiscuous mode [ 927.260238][ T3524] netlink: 'syz.2.7811': attribute type 30 has an invalid length. [ 928.316731][ T3592] vlan2: left promiscuous mode [ 928.326380][ T3592] geneve1: left promiscuous mode [ 928.332028][ T3592] vlan2: left allmulticast mode [ 928.337563][ T3592] geneve1: left allmulticast mode [ 928.380506][ T3592] team1: left promiscuous mode [ 928.403537][ T3592] team1: left allmulticast mode [ 928.430149][ T3592] team2: left promiscuous mode [ 928.436108][ T3592] team2: left allmulticast mode [ 928.454265][ T3592] vlan3: left allmulticast mode [ 928.578659][ T3602] syzkaller1: entered promiscuous mode [ 928.584575][ T3602] syzkaller1: entered allmulticast mode [ 928.592412][ T7210] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.609057][ T7210] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 928.618792][ T7210] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.627971][ T7210] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 928.665916][ T7210] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.675125][ T7210] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 928.693558][ T7210] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.721277][ T7210] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 928.795792][ T3618] bridge4: entered allmulticast mode [ 928.829588][ T3620] syzkaller1: entered promiscuous mode [ 928.835586][ T3620] syzkaller1: entered allmulticast mode [ 928.852569][ T3620] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 928.927501][ T3622] __nla_validate_parse: 9 callbacks suppressed [ 928.927520][ T3622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7836'. [ 929.189438][ T3629] @0Ù: renamed from dummy0 (while UP) [ 929.305695][ T3634] netlink: 'syz.1.7840': attribute type 10 has an invalid length. [ 929.400835][ T3634] veth0_vlan: left promiscuous mode [ 929.409386][ T3634] veth0_vlan: entered promiscuous mode [ 929.434414][ T3634] team0: Device veth0_vlan failed to register rx_handler [ 929.991497][ T3674] netlink: 'syz.3.7850': attribute type 1 has an invalid length. [ 930.014929][ T3669] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7848'. [ 930.025191][ T3669] netlink: 'syz.1.7848': attribute type 9 has an invalid length. [ 930.034235][ T3669] netlink: 'syz.1.7848': attribute type 10 has an invalid length. [ 930.095557][ T3675] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 930.106944][ T3675] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 930.152327][ T3674] bond3: (slave gretap2): making interface the new active one [ 930.160311][ T3674] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 930.170389][ T3673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7848'. [ 930.186606][ T3673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7848'. [ 930.196073][ T3673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7848'. [ 930.205834][ T3673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7848'. [ 930.235670][ T3679] macvlan2: entered promiscuous mode [ 930.241037][ T3679] macvlan2: entered allmulticast mode [ 930.247384][ T3679] bond3: entered promiscuous mode [ 930.252659][ T3679] gretap2: entered promiscuous mode [ 930.258603][ T3679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 930.270238][ T3679] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 930.282814][ T3679] bond3: left promiscuous mode [ 930.287602][ T3679] gretap2: left promiscuous mode [ 930.319621][ T3684] syz_tun: entered allmulticast mode [ 930.346960][ T3683] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004 [ 930.895335][ T3709] tipc: Enabled bearer , priority 0 [ 930.924417][ T3710] sch_fq: defrate 1 ignored. [ 930.930226][ T3709] sch_fq: defrate 1 ignored. [ 930.968916][ T3709] tipc: Resetting bearer [ 931.043941][ T3708] tipc: Disabling bearer [ 931.071400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 931.079518][ C1] lec:lec_tx_timeout: lec0 [ 931.170314][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7861'. [ 931.322836][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7863'. [ 931.372124][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7864'. [ 931.406213][ T3727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7863'. [ 931.448920][ T3729] netlink: 'syz.2.7865': attribute type 30 has an invalid length. [ 932.128789][ T3757] netlink: 'syz.4.7874': attribute type 1 has an invalid length. [ 932.369288][ T3770] ip6gretap1: entered promiscuous mode [ 932.451534][ T3772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 932.520897][ T3779] vti0: entered promiscuous mode [ 932.784505][ T3794] ip6erspan0: entered allmulticast mode [ 932.868264][ T3795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 932.875611][ T3795] IPv6: NLM_F_CREATE should be set when creating new route [ 933.235939][ T3819] netlink: 'syz.3.7896': attribute type 3 has an invalid length. [ 933.244325][ T3819] netlink: 'syz.3.7896': attribute type 3 has an invalid length. [ 933.355944][ T3830] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 933.393633][ T3830] CPU: 0 UID: 0 PID: 3830 Comm: syz.3.7896 Not tainted syzkaller #0 PREEMPT(full) [ 933.393663][ T3830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 933.393676][ T3830] Call Trace: [ 933.393684][ T3830] [ 933.393693][ T3830] dump_stack_lvl+0xe8/0x150 [ 933.393728][ T3830] sysfs_warn_dup+0x8e/0xa0 [ 933.393752][ T3830] sysfs_do_create_link_sd+0xc0/0x110 [ 933.393778][ T3830] device_add_class_symlinks+0x1cf/0x240 [ 933.393817][ T3830] device_add+0x475/0xb70 [ 933.393863][ T3830] wiphy_register+0x1d6c/0x2d50 [ 933.393928][ T3830] ? __pfx_wiphy_register+0x10/0x10 [ 933.393958][ T3830] ? __pfx_netdev_run_todo+0x10/0x10 [ 933.393986][ T3830] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 933.394018][ T3830] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 933.394064][ T3830] ieee80211_register_hw+0x34d2/0x4150 [ 933.394104][ T3830] ? ieee80211_register_hw+0x1491/0x4150 [ 933.394140][ T3830] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 933.394184][ T3830] ? __hrtimer_setup+0x181/0x200 [ 933.394213][ T3830] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 933.394242][ T3830] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 933.394315][ T3830] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 933.394349][ T3830] ? kstrndup+0xbf/0x160 [ 933.394384][ T3830] hwsim_new_radio_nl+0xf85/0x1c30 [ 933.394427][ T3830] ? __pfx___nla_validate_parse+0x10/0x10 [ 933.394465][ T3830] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 933.394510][ T3830] ? rcu_is_watching+0x15/0xb0 [ 933.394543][ T3830] ? __nla_parse+0x40/0x60 [ 933.394568][ T3830] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 933.394612][ T3830] genl_family_rcv_msg_doit+0x22a/0x330 [ 933.394652][ T3830] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 933.394700][ T3830] ? bpf_lsm_capable+0x9/0x20 [ 933.394725][ T3830] ? security_capable+0x7e/0x2c0 [ 933.394760][ T3830] genl_rcv_msg+0x61c/0x7a0 [ 933.394799][ T3830] ? __pfx_genl_rcv_msg+0x10/0x10 [ 933.394830][ T3830] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 933.394891][ T3830] netlink_rcv_skb+0x232/0x4b0 [ 933.394917][ T3830] ? __pfx_genl_rcv_msg+0x10/0x10 [ 933.394951][ T3830] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 933.394972][ T3830] ? genl_rcv+0x19/0x40 [ 933.395022][ T3830] ? down_read+0x272/0x2e0 [ 933.395047][ T3830] ? genl_rcv+0xd/0x40 [ 933.395098][ T3830] genl_rcv+0x28/0x40 [ 933.395128][ T3830] netlink_unicast+0x80f/0x9b0 [ 933.395161][ T3830] ? __pfx_netlink_unicast+0x10/0x10 [ 933.395186][ T3830] ? netlink_sendmsg+0x650/0xb40 [ 933.395210][ T3830] ? skb_put+0x11b/0x210 [ 933.395249][ T3830] netlink_sendmsg+0x813/0xb40 [ 933.395287][ T3830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.395318][ T3830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 933.395351][ T3830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.395373][ T3830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.395402][ T3830] __sock_sendmsg+0x21c/0x270 [ 933.395434][ T3830] ____sys_sendmsg+0x4d7/0x810 [ 933.395456][ T3830] ? __might_fault+0xaf/0x130 [ 933.395499][ T3830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.395533][ T3830] ? import_iovec+0x73/0xa0 [ 933.395563][ T3830] ___sys_sendmsg+0x2a5/0x360 [ 933.395584][ T3830] ? __lock_acquire+0x6b5/0x2cf0 [ 933.395614][ T3830] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.395647][ T3830] ? futex_wait+0x29a/0x380 [ 933.395710][ T3830] ? __fget_files+0x2a/0x420 [ 933.395738][ T3830] ? __fget_files+0x3a0/0x420 [ 933.395780][ T3830] __x64_sys_sendmsg+0x1bd/0x2a0 [ 933.395807][ T3830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.395869][ T3830] do_syscall_64+0xe2/0xf80 [ 933.395904][ T3830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.395927][ T3830] ? trace_irq_disable+0x37/0x100 [ 933.395958][ T3830] ? clear_bhb_loop+0x60/0xb0 [ 933.395987][ T3830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.396009][ T3830] RIP: 0033:0x7f6292d9acb9 [ 933.396031][ T3830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.396051][ T3830] RSP: 002b:00007f6293c51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.396077][ T3830] RAX: ffffffffffffffda RBX: 00007f6293016090 RCX: 00007f6292d9acb9 [ 933.396094][ T3830] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 933.396110][ T3830] RBP: 00007f6292e08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 933.396125][ T3830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.396139][ T3830] R13: 00007f6293016128 R14: 00007f6293016090 R15: 00007ffc75987c18 [ 933.396178][ T3830] [ 934.052769][ T3841] tipc: Enabled bearer , priority 0 [ 934.059869][ T3846] __nla_validate_parse: 9 callbacks suppressed [ 934.059889][ T3846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7902'. [ 934.078911][ T3841] syzkaller0: entered promiscuous mode [ 934.087768][ T3841] syzkaller0: entered allmulticast mode [ 934.261793][ T3841] tipc: Resetting bearer [ 934.327819][ T3840] tipc: Resetting bearer [ 934.407633][ T3840] tipc: Disabling bearer [ 934.702095][ T3885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7911'. [ 934.785140][ T3886] syzkaller0: entered promiscuous mode [ 934.791876][ T3886] syzkaller0: entered allmulticast mode [ 935.892567][ T3920] netlink: 'syz.2.7920': attribute type 6 has an invalid length. [ 936.751706][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 936.910736][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7927'. [ 936.943500][ T3941] netlink: 'syz.2.7928': attribute type 10 has an invalid length. [ 936.980669][ T3941] veth0_vlan: left promiscuous mode [ 936.987341][ T3941] veth0_vlan: entered promiscuous mode [ 936.999915][ T3941] team0: Device veth0_vlan failed to register rx_handler [ 937.040707][ T3950] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 937.201517][ T3956] block nbd4: server does not support multiple connections per device. [ 937.231587][ T3956] block nbd4: shutting down sockets [ 937.657923][ T3974] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 937.697797][ T3982] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 937.796622][ T3988] FAULT_INJECTION: forcing a failure. [ 937.796622][ T3988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.811931][ T3988] CPU: 1 UID: 0 PID: 3988 Comm: syz.2.7941 Not tainted syzkaller #0 PREEMPT(full) [ 937.811956][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 937.811969][ T3988] Call Trace: [ 937.811978][ T3988] [ 937.811986][ T3988] dump_stack_lvl+0xe8/0x150 [ 937.812018][ T3988] should_fail_ex+0x412/0x560 [ 937.812052][ T3988] _copy_to_user+0x31/0xb0 [ 937.812076][ T3988] simple_read_from_buffer+0xe1/0x170 [ 937.812105][ T3988] proc_fail_nth_read+0x1bb/0x230 [ 937.812130][ T3988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 937.812155][ T3988] ? rw_verify_area+0x2a6/0x4d0 [ 937.812186][ T3988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 937.812209][ T3988] vfs_read+0x20c/0xa70 [ 937.812226][ T3988] ? fdget_pos+0x246/0x320 [ 937.812254][ T3988] ? __pfx___mutex_lock+0x10/0x10 [ 937.812271][ T3988] ? __pfx_vfs_read+0x10/0x10 [ 937.812292][ T3988] ? __fget_files+0x2a/0x420 [ 937.812320][ T3988] ? __fget_files+0x3a0/0x420 [ 937.812344][ T3988] ? __fget_files+0x2a/0x420 [ 937.812377][ T3988] ksys_read+0x150/0x270 [ 937.812400][ T3988] ? __pfx_ksys_read+0x10/0x10 [ 937.812430][ T3988] do_syscall_64+0xe2/0xf80 [ 937.812461][ T3988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.812480][ T3988] ? trace_irq_disable+0x37/0x100 [ 937.812506][ T3988] ? clear_bhb_loop+0x60/0xb0 [ 937.812530][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.812550][ T3988] RIP: 0033:0x7f113035b58e [ 937.812568][ T3988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 937.812584][ T3988] RSP: 002b:00007f113130afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 937.812606][ T3988] RAX: ffffffffffffffda RBX: 00007f113130b6c0 RCX: 00007f113035b58e [ 937.812621][ T3988] RDX: 000000000000000f RSI: 00007f113130b0a0 RDI: 0000000000000004 [ 937.812634][ T3988] RBP: 00007f113130b090 R08: 0000000000000000 R09: 0000000000000000 [ 937.812648][ T3988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.812660][ T3988] R13: 00007f1130616038 R14: 00007f1130615fa0 R15: 00007ffc2d655b58 [ 937.812694][ T3988] [ 938.382726][ T3998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7942'. [ 938.498705][ T4001] netlink: 4764 bytes leftover after parsing attributes in process `syz.3.7945'. [ 938.674472][ T4008] tipc: Enabled bearer , priority 0 [ 938.821299][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 938.888261][ T4022] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 938.953035][ T4007] tipc: Disabling bearer [ 939.288849][ T4048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7953'. [ 939.386791][ T4054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7953'. [ 939.651685][ T4066] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:17956 [ 939.681420][ T4066] netlink: 'syz.4.7956': attribute type 3 has an invalid length. [ 939.818084][ T4077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7959'. [ 939.875857][ T4079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7959'. [ 940.092118][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7961'. [ 940.139414][ T4086] wg1: entered promiscuous mode [ 940.162221][ T4086] wg1: entered allmulticast mode [ 940.176157][ T4087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7961'. [ 940.187881][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7962'. [ 940.499118][ T4097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7966'. [ 940.508954][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7966'. [ 940.650603][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7968'. [ 940.856668][ T4112] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 941.686157][ T4157] netlink: 'syz.2.7985': attribute type 2 has an invalid length. [ 941.797564][ T4165] tipc: Enabled bearer , priority 0 [ 941.807224][ T4165] syzkaller0: entered promiscuous mode [ 941.814715][ T4165] syzkaller0: entered allmulticast mode [ 941.871553][ T4165] tipc: Resetting bearer [ 941.891521][ T4164] tipc: Resetting bearer [ 941.941225][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 941.949527][ C1] lec:lec_tx_timeout: lec0 [ 942.085842][ T4164] tipc: Disabling bearer [ 942.099178][ T4180] netlink: 'syz.1.7993': attribute type 1 has an invalid length. [ 942.252792][ T4183] netlink: 'syz.4.7997': attribute type 1 has an invalid length. [ 942.309347][ T4183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 942.384321][ T4183] vlan3: entered promiscuous mode [ 942.435635][ T4183] bond6: entered promiscuous mode [ 942.458487][ T4183] vlan3: entered allmulticast mode [ 942.476110][ T4183] bond6: entered allmulticast mode [ 942.599846][ T4196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.077437][ T4233] netlink: 'syz.4.8006': attribute type 1 has an invalid length. [ 943.177092][ T4233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 943.698460][ T4262] netlink: 'syz.4.8016': attribute type 7 has an invalid length. [ 943.837471][ T6142] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 943.871633][ T6142] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 943.880001][ T6142] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 943.986347][ T6142] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 944.365957][ T4274] syzkaller0: entered promiscuous mode [ 944.381470][ T4274] syzkaller0: entered allmulticast mode [ 944.505490][ T4302] __nla_validate_parse: 29 callbacks suppressed [ 944.505512][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8024'. [ 945.435149][ T4314] netlink: 'syz.1.8026': attribute type 1 has an invalid length. [ 946.446183][ T4315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8026'. [ 946.485229][ T4315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8026'. [ 946.511048][ T4315] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8026'. [ 946.550185][ T4319] netlink: 'syz.0.8028': attribute type 10 has an invalid length. [ 946.647064][ T4324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8030'. [ 946.928053][ T4340] netlink: 'syz.1.8036': attribute type 1 has an invalid length. [ 946.967332][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8036'. [ 947.003221][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8036'. [ 947.065801][ T4348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8037'. [ 947.077924][ T4348] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8037'. [ 947.108582][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8036'. [ 947.336663][ T4360] erspan0: entered promiscuous mode [ 947.377221][ T4359] syzkaller0: entered promiscuous mode [ 947.398749][ T4359] syzkaller0: entered allmulticast mode [ 947.694554][ T4374] tipc: Enabled bearer , priority 0 [ 947.702841][ T4374] syzkaller0: entered promiscuous mode [ 947.708426][ T4374] syzkaller0: entered allmulticast mode [ 947.763701][ T4374] tipc: Resetting bearer [ 947.888201][ T4373] tipc: Resetting bearer [ 947.920021][ T4373] tipc: Disabling bearer [ 947.930786][ T4386] netlink: 'syz.3.8051': attribute type 4 has an invalid length. [ 948.022761][ T4386] netlink: 'syz.3.8051': attribute type 4 has an invalid length. [ 948.410209][ T4409] x_tables: duplicate underflow at hook 2 [ 948.508578][ T4413] tipc: Enabling of bearer rejected, failed to enable media [ 948.749186][ T4421] lo speed is unknown, defaulting to 1000 [ 948.787180][ T4421] lo speed is unknown, defaulting to 1000 [ 948.837965][ T4421] lo speed is unknown, defaulting to 1000 [ 949.235624][ T4440] team0: Caught tx_queue_len zero misconfig [ 949.245878][ T4421] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 949.349132][ T4421] lo speed is unknown, defaulting to 1000 [ 949.410317][ T4421] lo speed is unknown, defaulting to 1000 [ 949.443752][ T4421] lo speed is unknown, defaulting to 1000 [ 949.495422][ T4421] lo speed is unknown, defaulting to 1000 [ 949.517931][ T4423] sctp: [Deprecated]: syz.4.8062 (pid 4423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 949.517931][ T4423] Use struct sctp_sack_info instead [ 949.556198][ T4423] __nla_validate_parse: 6 callbacks suppressed [ 949.556218][ T4423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8062'. [ 949.573278][ T4421] lo speed is unknown, defaulting to 1000 [ 949.584216][ T4421] lo speed is unknown, defaulting to 1000 [ 949.592864][ T4421] lo speed is unknown, defaulting to 1000 [ 949.671758][ T4445] 0ªî{X¹¦: left allmulticast mode [ 949.939864][ T4470] siw: device registration error -23 [ 950.137418][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8075'. [ 950.422844][ T4492] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8078'. [ 950.434283][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 950.483702][ T4494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 950.602612][ T4500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8082'. [ 950.621874][ T4500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8082'. [ 950.631660][ T4499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8081'. [ 950.664132][ T4500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.702360][ T4480] lo speed is unknown, defaulting to 1000 [ 950.968453][ T4484] lo speed is unknown, defaulting to 1000 [ 951.746735][ T4530] netlink: 'syz.2.8091': attribute type 11 has an invalid length. [ 951.894172][ T4516] lo speed is unknown, defaulting to 1000 [ 951.905574][ T4541] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004 [ 952.485570][ T4568] netlink: 33 bytes leftover after parsing attributes in process `syz.0.8099'. [ 952.712592][ T4580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8104'. [ 952.737458][ T4580] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8104'. [ 952.836378][ T4569] lo speed is unknown, defaulting to 1000 [ 952.883546][ T4583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8105'. [ 953.083427][ T4588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 954.032696][ T4635] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 954.050865][ T4635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 954.060992][ T4635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 954.077183][ T4640] SET target dimension over the limit! [ 954.362813][ T4651] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 954.380907][ T4651] netlink: 'syz.1.8122': attribute type 13 has an invalid length. [ 954.570676][ T4660] __nla_validate_parse: 3 callbacks suppressed [ 954.570696][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8127'. [ 954.675849][ T4666] bond0: left promiscuous mode [ 954.693067][ T4666] bond_slave_0: left promiscuous mode [ 954.698901][ T4666] bond_slave_1: left promiscuous mode [ 954.717012][ T4666] bond0: left allmulticast mode [ 954.724251][ T4666] bond_slave_0: left allmulticast mode [ 954.730252][ T4666] bond_slave_1: left allmulticast mode [ 954.738739][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.778721][ T4666] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8129'. [ 954.789026][ T4671] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 954.927962][ T4675] Cannot find set identified by id 3 to match [ 955.116040][ T4687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8133'. [ 955.201563][ T4687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8133'. [ 955.210659][ T4687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8133'. [ 955.321295][ T4687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8133'. [ 955.654770][ T4709] netlink: 532 bytes leftover after parsing attributes in process `syz.3.8138'. [ 956.049856][ T4734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8146'. [ 956.082828][ T4740] nbd: couldn't find device at index 3 [ 956.173255][ T4746] tipc: Enabling of bearer rejected, failed to enable media [ 957.056920][ T4784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8159'. [ 957.144274][ T4780] bond0: (slave team0): Releasing backup interface [ 957.167354][T29695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.182576][T29695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.550351][ T4793] dvmrp0: entered allmulticast mode [ 957.611237][ T4809] netlink: 'syz.4.8164': attribute type 11 has an invalid length. [ 957.619299][ T4809] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.8164'. [ 957.778077][ T4817] tipc: Enabled bearer , priority 0 [ 957.787569][ T4817] bond0: entered promiscuous mode [ 957.793605][ T4817] bond_slave_0: entered promiscuous mode [ 957.799587][ T4817] bond_slave_1: entered promiscuous mode [ 957.805809][ T4817] bond0: entered allmulticast mode [ 957.811085][ T4817] bond_slave_0: entered allmulticast mode [ 957.818819][ T4817] bond_slave_1: entered allmulticast mode [ 957.835558][ T4817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.863919][ T4817] tipc: Resetting bearer [ 957.919381][ T4816] tipc: Disabling bearer [ 957.958552][ T4826] netlink: 'syz.2.8171': attribute type 6 has an invalid length. [ 958.162420][ T4836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 958.621626][ T4839] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 958.672796][ T461] lo speed is unknown, defaulting to 1000 [ 958.707496][ T4845] lo speed is unknown, defaulting to 1000 [ 958.712236][ T461] syz2: Port: 1 Link ACTIVE [ 959.382524][ T4891] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 959.642409][ T4906] __nla_validate_parse: 5 callbacks suppressed [ 959.642429][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 959.707916][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 959.707929][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 959.755895][ T4875] lo speed is unknown, defaulting to 1000 [ 959.939304][ T4918] netlink: 'syz.2.8193': attribute type 6 has an invalid length. [ 960.029129][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8193'. [ 960.072267][ T4918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8193'. [ 960.277095][ T4928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8196'. [ 960.307901][ T4928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8196'. [ 960.607523][ T4945] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8199'. [ 961.073122][ T4960] block nbd4: Unsupported socket: should be TCP or UNIX. [ 961.224969][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8208'. [ 961.421669][ T4979] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 961.456835][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8210'. [ 961.476337][ T4929] lo speed is unknown, defaulting to 1000 [ 962.052694][ T5010] netlink: 'syz.1.8214': attribute type 1 has an invalid length. [ 962.290955][ T5010] veth5: entered promiscuous mode [ 962.364888][ T5017] erspan0: entered allmulticast mode [ 962.544207][ T5029] netlink: 'syz.4.8220': attribute type 33 has an invalid length. [ 962.579617][ T5029] netlink: 'syz.4.8220': attribute type 1 has an invalid length. [ 962.846146][ T5049] xt_hashlimit: size too large, truncated to 1048576 [ 964.127883][ T5121] tipc: Started in network mode [ 964.152036][ T5121] tipc: Node identity ee8cb704714, cluster identity 4711 [ 964.159358][ T5121] tipc: Enabled bearer , priority 0 [ 964.193578][ T5122] syzkaller0: entered promiscuous mode [ 964.199103][ T5122] syzkaller0: entered allmulticast mode [ 964.293463][ T5131] tipc: Resetting bearer [ 964.380378][ T5136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.402842][ T5131] tipc: Disabling bearer [ 964.482151][ T5151] sctp: [Deprecated]: syz.4.8245 (pid 5151) Use of int in max_burst socket option. [ 964.482151][ T5151] Use struct sctp_assoc_value instead [ 964.723034][ T5172] tipc: Enabled bearer , priority 0 [ 964.769480][ T5176] netlink: 'syz.3.8252': attribute type 2 has an invalid length. [ 964.787945][ T5172] tipc: Disabling bearer [ 964.959703][ T5191] syzkaller1: entered promiscuous mode [ 964.988367][ T5191] syzkaller1: entered allmulticast mode [ 965.089069][ T5194] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 965.736532][ T5225] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 965.753545][ T5224] netlink: 'syz.0.8264': attribute type 1 has an invalid length. [ 965.756373][ T5225] __nla_validate_parse: 11 callbacks suppressed [ 965.756424][ T5225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8266'. [ 965.812554][ T5230] netlink: 'syz.0.8264': attribute type 39 has an invalid length. [ 965.844173][ T5224] bond5: entered promiscuous mode [ 965.873818][ T5224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 966.012434][ T5232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 966.021005][ T5232] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 966.032625][ T5232] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 966.047529][ T5232] bond5: (slave wireguard0): making interface the new active one [ 966.056258][ T5232] wireguard0: entered promiscuous mode [ 966.064387][ T5232] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 966.083196][ T5224] bond5: entered allmulticast mode [ 966.088471][ T5224] wireguard0: entered allmulticast mode [ 966.447893][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8272'. [ 966.658979][ T5238] lo speed is unknown, defaulting to 1000 [ 966.755755][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8276'. [ 966.812358][ T5272] syzkaller0: entered promiscuous mode [ 966.820629][ T5272] syzkaller0: entered allmulticast mode [ 967.000912][ T5272] bond3: option miimon: invalid value (18446744073709551607) [ 967.009049][ T5272] bond3: option miimon: allowed values 0 - 2147483647 [ 967.023228][ T5272] bond3 (unregistering): Released all slaves [ 967.414580][ T5299] : renamed from bond_slave_0 (while UP) [ 967.580101][ T5305] vlan2: entered promiscuous mode [ 967.585796][ T5305] geneve1: entered promiscuous mode [ 967.591817][ T5305] vlan2: entered allmulticast mode [ 967.597134][ T5305] geneve1: entered allmulticast mode [ 967.642016][ T5278] lo speed is unknown, defaulting to 1000 [ 967.680841][ T5305] bond3: option arp_validate: invalid value (18446744073491447809) [ 967.702360][ T5305] bond3 (unregistering): Released all slaves [ 967.787525][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8292'. [ 967.812903][ T5314] 8021q: VLANs not supported on vxcan1 [ 968.106455][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8297'. [ 968.122211][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8297'. [ 968.162590][ T5332] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8298'. [ 968.191644][ T5332] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8298'. [ 968.207384][ T5338] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 969.194176][ T5365] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 970.055393][ T5373] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8309'. [ 970.093262][ T5376] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8309'. [ 970.569098][ T5408] dummy0: mtu less than device minimum [ 971.517423][ T5422] netlink: 'syz.0.8326': attribute type 21 has an invalid length. [ 972.151881][ T5410] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 972.162268][ T5410] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 972.172639][ T5410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 972.183069][ T5410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.207089][ T5385] lo speed is unknown, defaulting to 1000 [ 972.213347][ T5416] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 972.213877][ T5422] __nla_validate_parse: 2 callbacks suppressed [ 972.213893][ T5422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8326'. [ 972.286437][ T5410] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 972.321392][ T5410] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 972.333671][ T5410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 972.346563][ T5410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.428090][ T5410] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 972.438515][ T5410] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 972.448670][ T5410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 972.458883][ T5410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.570256][ T5410] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 972.624437][ T5410] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 972.652227][ T5410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 972.663427][ T5410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.804809][T29704] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.818200][T29704] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 972.831726][T29704] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 972.851452][T29704] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 972.879988][ T6142] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.901513][ T6142] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 972.909737][ T6142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 972.942073][ T6142] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 972.958723][T29703] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.974226][T29703] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 972.997288][T29703] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 973.016208][T29703] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 973.073100][T29703] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.083609][T29703] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 973.092379][T29703] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 973.100740][T29703] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 973.110299][ T5428] lo speed is unknown, defaulting to 1000 [ 975.087434][ T5456] lo speed is unknown, defaulting to 1000 [ 975.805849][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8344'. [ 975.932455][ T5474] lo speed is unknown, defaulting to 1000 [ 976.089975][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8347'. [ 976.109412][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8347'. [ 978.314801][ T5550] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8355'. [ 978.344040][ T5552] netlink: 'syz.3.8356': attribute type 8 has an invalid length. [ 978.585492][ T5541] lo speed is unknown, defaulting to 1000 [ 978.790603][ T5575] pim6reg: entered allmulticast mode [ 978.848535][ T5577] pim6reg: left allmulticast mode [ 979.042174][ T5588] tipc: New replicast peer: 255.255.255.255 [ 979.050088][ T5588] tipc: Enabled bearer , priority 10 [ 979.070796][ T5548] lo speed is unknown, defaulting to 1000 [ 979.071303][ T5591] netlink: 'syz.4.8364': attribute type 11 has an invalid length. [ 979.099027][ T5591] netlink: 'syz.4.8364': attribute type 11 has an invalid length. [ 979.124442][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8365'. [ 979.133814][ T5591] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8364'. [ 979.176823][ T5594] bridge_slave_0: left allmulticast mode [ 979.187478][ T5594] bridge_slave_0: left promiscuous mode [ 979.215471][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.322956][ T5600] openvswitch: netlink: Actions may not be safe on all matching packets [ 979.955201][ T5597] bridge11: entered promiscuous mode [ 979.960687][ T5597] bridge11: entered allmulticast mode [ 979.966672][ T5602] bond0: (slave erspan0): Error: Device type is different from other slaves [ 980.192505][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8368'. [ 980.202856][ T5620] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8370'. [ 980.272754][ T5620] syzkaller1: entered promiscuous mode [ 980.301386][ T5620] syzkaller1: entered allmulticast mode [ 980.337979][ T5626] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8368'. [ 980.373759][ T5618] veth1_macvtap: left promiscuous mode [ 980.535308][ T5618] veth0_virt_wifi: renamed from macsec0 [ 982.289517][ T5647] gretap0: entered promiscuous mode [ 982.301646][ T5647] vlan3: entered promiscuous mode [ 982.397294][ T5652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.410415][ T5654] sctp: [Deprecated]: syz.1.8374 (pid 5654) Use of int in max_burst socket option deprecated. [ 982.410415][ T5654] Use struct sctp_assoc_value instead [ 982.633064][ T5652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.753060][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8378'. [ 982.776268][ T5652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.803196][ T5649] lo speed is unknown, defaulting to 1000 [ 983.417025][ T5696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8384'. [ 983.451438][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8382'. [ 983.524571][ T5652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.659785][ T5701] netlink: 'syz.1.8386': attribute type 5 has an invalid length. [ 983.718014][ T5699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8385'. [ 983.791294][ T5701] ip6erspan0: entered promiscuous mode [ 983.950801][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8389'. [ 984.111477][T29703] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.130279][ T5721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8389'. [ 984.141595][ T5721] nbd: device at index 64 is going down [ 984.170542][ T5726] tipc: Trying to set illegal importance in message [ 984.179198][T29703] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.215485][T29703] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.255247][ T5491] veth1_macvtap: entered promiscuous mode [ 984.348504][ T6073] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.429744][ T5234] udevd[5234]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 984.477054][ T5612] udevd[5612]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 984.894517][ T5716] lo speed is unknown, defaulting to 1000 [ 985.067377][ T5759] syzkaller0: entered promiscuous mode [ 985.073098][ T5759] syzkaller0: entered allmulticast mode [ 985.255734][ T5778] FAULT_INJECTION: forcing a failure. [ 985.255734][ T5778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.272469][ T5778] CPU: 0 UID: 0 PID: 5778 Comm: syz.2.8402 Not tainted syzkaller #0 PREEMPT(full) [ 985.272496][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 985.272509][ T5778] Call Trace: [ 985.272517][ T5778] [ 985.272526][ T5778] dump_stack_lvl+0xe8/0x150 [ 985.272558][ T5778] should_fail_ex+0x412/0x560 [ 985.272592][ T5778] _copy_from_iter+0x1d3/0x1670 [ 985.272633][ T5778] ? rcu_is_watching+0x15/0xb0 [ 985.272659][ T5778] ? __pfx__copy_from_iter+0x10/0x10 [ 985.272687][ T5778] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 985.272728][ T5778] ? netlink_sendmsg+0x650/0xb40 [ 985.272766][ T5778] ? skb_put+0x11b/0x210 [ 985.272803][ T5778] netlink_sendmsg+0x6c0/0xb40 [ 985.272838][ T5778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.272866][ T5778] ? aa_file_perm+0x12d/0x1630 [ 985.272895][ T5778] ? aa_sock_msg_perm+0xf1/0x1b0 [ 985.272926][ T5778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 985.272947][ T5778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.272973][ T5778] __sock_sendmsg+0x21c/0x270 [ 985.273003][ T5778] ____sys_sendmsg+0x4d7/0x810 [ 985.273024][ T5778] ? __might_fault+0xaf/0x130 [ 985.273063][ T5778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 985.273095][ T5778] ? import_iovec+0x73/0xa0 [ 985.273128][ T5778] ___sys_sendmsg+0x2a5/0x360 [ 985.273148][ T5778] ? __lock_acquire+0x6b5/0x2cf0 [ 985.273176][ T5778] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.273237][ T5778] ? __fget_files+0x2a/0x420 [ 985.273263][ T5778] ? __fget_files+0x3a0/0x420 [ 985.273302][ T5778] __x64_sys_sendmsg+0x1bd/0x2a0 [ 985.273327][ T5778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 985.273359][ T5778] ? __pfx_ksys_write+0x10/0x10 [ 985.273394][ T5778] do_syscall_64+0xe2/0xf80 [ 985.273425][ T5778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.273446][ T5778] ? trace_irq_disable+0x37/0x100 [ 985.273474][ T5778] ? clear_bhb_loop+0x60/0xb0 [ 985.273500][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.273521][ T5778] RIP: 0033:0x7f113039acb9 [ 985.273540][ T5778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.273559][ T5778] RSP: 002b:00007f113130b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.273582][ T5778] RAX: ffffffffffffffda RBX: 00007f1130615fa0 RCX: 00007f113039acb9 [ 985.273597][ T5778] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 985.273611][ T5778] RBP: 00007f113130b090 R08: 0000000000000000 R09: 0000000000000000 [ 985.273624][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.273637][ T5778] R13: 00007f1130616038 R14: 00007f1130615fa0 R15: 00007ffc2d655b58 [ 985.273672][ T5778] [ 985.592583][ T5720] lo speed is unknown, defaulting to 1000 [ 986.794003][ T5819] netlink: 'syz.4.8413': attribute type 1 has an invalid length. [ 986.864652][ T5819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 986.936662][ T5823] IPVS: persistence engine module ip_vs_pe_ not found [ 986.961701][ T5829] bond8: entered allmulticast mode [ 987.052049][ T5819] veth3: entered promiscuous mode [ 987.060711][ T5819] bond8: (slave veth3): Enslaving as an active interface with a down link [ 987.209801][ T5816] lo speed is unknown, defaulting to 1000 [ 987.337694][ T5849] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.8418'. [ 987.385498][ T5849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8418'. [ 987.809064][ T5876] xt_hashlimit: max too large, truncated to 1048576 [ 987.915817][ T5869] lo speed is unknown, defaulting to 1000 [ 987.961863][ T5882] netlink: 'syz.1.8425': attribute type 1 has an invalid length. [ 988.015612][ T5884] netlink: 'syz.4.8426': attribute type 1 has an invalid length. [ 988.100697][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8427'. [ 988.854020][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8433'. [ 988.863397][ T5904] openvswitch: netlink: Flow actions attr not present in new flow. [ 988.874195][ T5904] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8433'. [ 988.884018][ T5904] openvswitch: netlink: Message has 4 unknown bytes. [ 988.966255][ T5906] netlink: 'syz.3.8434': attribute type 1 has an invalid length. [ 989.036055][ T5906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 989.070066][ T5914] bond4: (slave ip6gretap3): making interface the new active one [ 989.094734][ T5914] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link [ 989.310154][ T5906] veth3: entered promiscuous mode [ 989.365942][ T5906] bond4: (slave veth3): Enslaving as an active interface with a down link [ 989.423076][ T5914] erspan0: entered allmulticast mode [ 989.493490][ T5914] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 989.763308][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8441'. [ 989.791018][ T5919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.800232][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8441'. [ 990.084624][ T5919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.249224][ T5919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.347188][ T5919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.495495][T29697] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.533183][ T3817] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.572690][ T3817] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.582686][ T8498] lec:lec_start_xmit: lec0:No lecd attached [ 990.590457][ T5947] lo speed is unknown, defaulting to 1000 [ 990.596911][ T5974] netlink: 'syz.3.8448': attribute type 28 has an invalid length. [ 990.606310][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8448'. [ 990.628960][T29697] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.811645][ T5980] netlink: 'syz.3.8450': attribute type 1 has an invalid length. [ 990.819781][ T5978] xt_cgroup: path and classid specified [ 990.912141][ T5980] bond5: entered promiscuous mode [ 990.917328][ T5980] bond5: entered allmulticast mode [ 990.923153][ T5980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 991.008816][ T5982] erspan2: entered allmulticast mode [ 991.028845][ T5982] bond5: (slave erspan2): making interface the new active one [ 991.037973][ T5982] erspan2: entered promiscuous mode [ 991.046820][ T5982] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 991.058377][ T5944] lo speed is unknown, defaulting to 1000 [ 991.165148][ T5991] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8453'. [ 993.123733][ T6008] netlink: 'syz.3.8456': attribute type 2 has an invalid length. [ 993.246178][ T6013] netlink: 'syz.4.8459': attribute type 1 has an invalid length. [ 994.156502][ T6029] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 994.184666][ T6029] bond6 (unregistering): Released all slaves [ 994.251410][ T6038] netlink: 'syz.0.8462': attribute type 1 has an invalid length. [ 994.259519][ T6037] netlink: 'syz.0.8462': attribute type 1 has an invalid length. [ 994.276722][ T6038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8462'. [ 994.298993][ T6037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8462'. [ 994.444044][ T6052] netlink: 'syz.3.8466': attribute type 1 has an invalid length. [ 994.590819][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8467'. [ 994.613139][ T6052] bond6 (unregistering): Released all slaves [ 994.665362][ T6051] bridge0: port 2(vlan3) entered blocking state [ 994.673259][ T6051] bridge0: port 2(vlan3) entered disabled state [ 994.679779][ T6051] vlan3: entered allmulticast mode [ 994.685460][ T6051] syz_tun: entered allmulticast mode [ 994.693045][ T6051] vlan3: entered promiscuous mode [ 994.698247][ T6051] syz_tun: entered promiscuous mode [ 994.710264][ T6051] bridge0: port 2(vlan3) entered blocking state [ 994.716721][ T6051] bridge0: port 2(vlan3) entered forwarding state [ 995.037050][ T6078] geneve2: entered promiscuous mode [ 995.157323][ T6071] lo speed is unknown, defaulting to 1000 [ 995.432629][ T30] audit: type=1800 audit(1769073185.944:20): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8476" name="memory.events" dev="tmpfs" ino=2396 res=0 errno=0 [ 995.525555][ T6096] bond0: (slave batadv0): Releasing backup interface [ 995.541417][ T6096] bond0: (slave batadv0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 995.615461][ T6103] netlink: 'syz.4.8480': attribute type 10 has an invalid length. [ 995.637969][ T6096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 995.670540][ T6106] netlink: 'syz.0.8481': attribute type 7 has an invalid length. [ 995.684733][ T6106] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8481'. [ 995.941262][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 995.949329][ C1] lec:lec_tx_timeout: lec0 [ 996.015915][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8483'. [ 996.062314][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8483'. [ 996.310119][ T6128] pim6reg: left allmulticast mode [ 996.415316][ T6131] netlink: 'syz.3.8487': attribute type 29 has an invalid length. [ 996.446754][ T6144] netlink: 'syz.3.8487': attribute type 29 has an invalid length. [ 996.461419][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8489'. [ 996.489388][ T6131] netlink: 500 bytes leftover after parsing attributes in process `syz.3.8487'. [ 996.537456][ T6122] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.627320][ T6122] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.725826][ T6122] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.772845][ T6162] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8491'. [ 996.819681][ T6122] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.022785][ T6171] netlink: 'syz.1.8493': attribute type 1 has an invalid length. [ 997.030586][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'. [ 997.116558][ T6130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.203538][T29697] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.291014][T29697] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.311798][ T6159] lo speed is unknown, defaulting to 1000 [ 997.355350][ T6142] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.365255][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.553999][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.606649][ T6195] dvmrp0: left allmulticast mode [ 998.195189][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 999.565389][ T6303] __nla_validate_parse: 10 callbacks suppressed [ 999.565410][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8525'. [ 999.659187][ T6290] lo speed is unknown, defaulting to 1000 [ 1000.052191][ T6314] tap0: tun_chr_ioctl cmd 1074025673 [ 1000.058466][ T6316] tap0: tun_chr_ioctl cmd 2148553947 [ 1000.064382][ T6315] tap0: tun_chr_ioctl cmd 2148553947 [ 1000.070280][ T6314] tap0: tun_chr_ioctl cmd 2147767521 [ 1000.077859][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8529'. [ 1000.243292][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1000.308829][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.380829][ T6321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.499066][ T6320] lo speed is unknown, defaulting to 1000 [ 1000.746784][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8535'. [ 1001.003116][ T6343] lo speed is unknown, defaulting to 1000 [ 1001.453794][ T6365] tipc: Enabled bearer , priority 0 [ 1001.471658][ T6365] syzkaller0: entered promiscuous mode [ 1001.477190][ T6365] syzkaller0: entered allmulticast mode [ 1001.624138][ T6365] tipc: Resetting bearer [ 1001.704146][ T6353] lo speed is unknown, defaulting to 1000 [ 1001.896224][ T6363] tipc: Resetting bearer [ 1001.944850][ T6363] tipc: Disabling bearer [ 1002.238398][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8545'. [ 1002.391583][ T6395] netlink: 'syz.4.8547': attribute type 89 has an invalid length. [ 1002.628986][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.115336][ T30] audit: type=1800 audit(1769073193.634:21): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8552" name="memory.events" dev="tmpfs" ino=2746 res=0 errno=0 [ 1003.204260][ T6397] lo speed is unknown, defaulting to 1000 [ 1003.951211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1003.959280][ C1] lec:lec_tx_timeout: lec0 [ 1006.822456][ T6370] Set syz1 is full, maxelem 65536 reached [ 1006.964791][ T6454] : entered promiscuous mode [ 1007.679144][ T6485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1007.741364][ T6485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1008.364950][ T6533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1008.380252][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1008.399626][ T6533] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1008.452748][ T6492] lo speed is unknown, defaulting to 1000 [ 1008.463668][ T6533] smc: net device hsr0 erased user defined pnetid SYZ2 [ 1008.769431][ T6528] lo speed is unknown, defaulting to 1000 [ 1009.259877][ T6551] bond3: option packets_per_slave: invalid value (1048582) [ 1009.281275][ T6551] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1009.323402][ T6551] bond3 (unregistering): Released all slaves [ 1009.532152][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8584'. [ 1009.559898][ T6567] netlink: 'syz.2.8588': attribute type 8 has an invalid length. [ 1009.568151][ T6568] netlink: 'syz.2.8588': attribute type 8 has an invalid length. [ 1009.587102][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8588'. [ 1009.637757][ T6565] bridge0: port 2(syz_tun) entered blocking state [ 1009.644613][ T6565] bridge0: port 2(syz_tun) entered disabled state [ 1009.652210][ T6565] syz_tun: entered allmulticast mode [ 1009.659542][ T6565] syz_tun: entered promiscuous mode [ 1009.676287][ T6565] bridge0: port 2(syz_tun) entered blocking state [ 1009.682900][ T6565] bridge0: port 2(syz_tun) entered forwarding state [ 1009.704150][ T6569] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1009.780994][ T6581] netlink: 'syz.4.8592': attribute type 1 has an invalid length. [ 1009.802000][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1009.816215][ T6578] veth0: left promiscuous mode [ 1009.830462][ T6569] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8587'. [ 1009.895008][ T6581] bond9: entered promiscuous mode [ 1009.900740][ T6581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1009.994236][ T6586] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1010.023889][ T6586] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1010.092612][ T6586] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1010.120291][ T6586] bond9: (slave wireguard0): making interface the new active one [ 1010.158039][ T6586] wireguard0: entered promiscuous mode [ 1010.179946][ T6586] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 1010.297289][ T6590] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1010.307350][ T6590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.327224][ T6599] netlink: 'syz.3.8595': attribute type 2 has an invalid length. [ 1010.359209][ T6600] netlink: 'syz.2.8596': attribute type 15 has an invalid length. [ 1010.378617][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8596'. [ 1010.494097][ T6605] syz_tun: left allmulticast mode [ 1010.505393][ T6605] syz_tun: left promiscuous mode [ 1010.517363][ T6605] bridge0: port 2(syz_tun) entered disabled state [ 1010.542953][ T6605] bridge_slave_0: left allmulticast mode [ 1010.560402][ T6605] bridge_slave_0: left promiscuous mode [ 1010.580172][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.322948][ T6592] lo speed is unknown, defaulting to 1000 [ 1011.342284][ T6624] tipc: New replicast peer: 255.255.255.255 [ 1011.357777][ T6624] tipc: Enabled bearer , priority 10 [ 1011.377556][ T6625] netlink: 'syz.3.8602': attribute type 11 has an invalid length. [ 1011.397950][ T6625] netlink: 'syz.3.8602': attribute type 11 has an invalid length. [ 1011.606728][ T6636] : renamed from veth0_to_bond (while UP) [ 1011.630270][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.717927][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.782327][ T6639] erspan0: left allmulticast mode [ 1011.903203][ T6652] syzkaller0: entered promiscuous mode [ 1011.909225][ T6652] syzkaller0: entered allmulticast mode [ 1011.925435][ T6652] TC_ACT_REPEAT abuse ? [ 1012.116210][ T6659] veth0: entered promiscuous mode [ 1012.128952][ T6657] veth0: left promiscuous mode [ 1012.709549][ T6692] __nla_validate_parse: 7 callbacks suppressed [ 1012.709571][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8620'. [ 1013.413260][ T6688] lo speed is unknown, defaulting to 1000 [ 1013.492057][ T6727] netlink: 'syz.1.8625': attribute type 3 has an invalid length. [ 1013.880510][ T6740] pimreg: entered allmulticast mode [ 1014.067977][ T6732] lo speed is unknown, defaulting to 1000 [ 1014.068877][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8635'. [ 1014.132673][ T6754] netlink: 'syz.2.8635': attribute type 15 has an invalid length. [ 1014.470820][ T6765] netlink: 'syz.1.8639': attribute type 1 has an invalid length. [ 1014.565393][ T6777] netlink: 'syz.1.8643': attribute type 1 has an invalid length. [ 1014.617789][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8644'. [ 1014.627347][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8644'. [ 1014.776601][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8644'. [ 1014.788113][ T6777] bond2: entered promiscuous mode [ 1014.795357][ T6777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1014.959129][ T6798] syzkaller0: entered promiscuous mode [ 1014.981414][ T6798] syzkaller0: entered allmulticast mode [ 1015.008552][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1015.041572][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1015.107061][ T6806] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 1015.128619][ T6806] mac80211_hwsim hwsim86 wlan0: entered allmulticast mode [ 1015.179110][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1015.200751][ T6809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1015.474286][ T6782] lo speed is unknown, defaulting to 1000 [ 1015.476445][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8647'. [ 1015.642982][ T6826] sock: sock_set_timeout: `syz.2.8653' (pid 6826) tries to set negative timeout [ 1015.744510][ T6130] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.766918][ T6130] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1015.981337][ T6130] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.014375][ T6821] lo speed is unknown, defaulting to 1000 [ 1016.019775][ T6130] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1016.227680][ T6847] netlink: 'syz.4.8657': attribute type 3 has an invalid length. [ 1016.315384][ T6850] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1016.331932][ T6841] veth0: left allmulticast mode [ 1016.390044][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.493920][ T6841] batadv1: left promiscuous mode [ 1016.505295][ T6841] hsr1: left allmulticast mode [ 1016.510210][ T6841] dummy0: left allmulticast mode [ 1016.515395][ T6841] bond0: left allmulticast mode [ 1016.520358][ T6841] : left allmulticast mode [ 1016.525895][ T6841] bond_slave_1: left allmulticast mode [ 1016.531526][ T6841] bridge_slave_1: left allmulticast mode [ 1016.539287][ T6841] geneve2: left promiscuous mode [ 1016.544991][ T6841] geneve2: left allmulticast mode [ 1016.588998][ T6841] xfrm1: left allmulticast mode [ 1016.595519][ T6841] bridge2: left promiscuous mode [ 1016.600978][ T6855] netlink: 'syz.3.8660': attribute type 2 has an invalid length. [ 1016.608455][ T6841] gtp0: left promiscuous mode [ 1016.614008][ T6855] netlink: 'syz.3.8660': attribute type 8 has an invalid length. [ 1016.623055][ T6841] gtp0: left allmulticast mode [ 1016.634294][ T6841] ip6gretap1: left promiscuous mode [ 1016.645260][ T6841] vlan2: left promiscuous mode [ 1016.650257][ T6841] geneve1: left promiscuous mode [ 1016.657042][ T6841] vlan2: left allmulticast mode [ 1016.662378][ T6841] geneve1: left allmulticast mode [ 1016.699372][ T6130] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.709639][ T6130] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 8192 - 0 [ 1016.720806][ T6130] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1016.772100][ T6130] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.790870][ T6130] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 8192 - 0 [ 1016.808471][ T6130] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1016.835324][ T6130] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.844100][ T6130] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 8192 - 0 [ 1016.853158][ T6130] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1016.863796][ T6130] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.894142][ T6130] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 8192 - 0 [ 1016.917541][ T6130] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1017.326466][ T6877] netlink: 'syz.4.8666': attribute type 1 has an invalid length. [ 1017.409987][ T6891] netlink: 'syz.3.8670': attribute type 4 has an invalid length. [ 1017.455520][ T6891] netlink: 'syz.3.8670': attribute type 4 has an invalid length. [ 1017.785344][ T6911] __nla_validate_parse: 6 callbacks suppressed [ 1017.785368][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1017.828678][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1017.990192][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8679'. [ 1017.999292][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8679'. [ 1018.025571][ T6915] netlink: 'syz.3.8678': attribute type 12 has an invalid length. [ 1018.033832][ T6915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1018.067781][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1018.135689][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1018.194488][ T6889] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1018.364144][ T6933] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1018.554811][ T6915] lo speed is unknown, defaulting to 1000 [ 1018.711799][ T30] audit: type=1800 audit(1769073209.224:22): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8686" name="memory.events" dev="tmpfs" ino=2289 res=0 errno=0 [ 1018.978671][ T6938] lo speed is unknown, defaulting to 1000 [ 1019.448611][ T6965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8691'. [ 1020.563522][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8701'. [ 1020.592290][ T6997] veth0: entered promiscuous mode [ 1020.605029][ T6997] veth0: left promiscuous mode [ 1021.040837][ T7013] netlink: 'syz.0.8706': attribute type 5 has an invalid length. [ 1021.359159][ T7000] lo speed is unknown, defaulting to 1000 [ 1022.245685][ T7050] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 1023.030139][ T7047] lo speed is unknown, defaulting to 1000 [ 1023.927902][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8723'. [ 1024.090377][ T7061] lo speed is unknown, defaulting to 1000 [ 1025.616862][ T7107] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8732'. [ 1025.820162][ T7093] lo speed is unknown, defaulting to 1000 [ 1026.080087][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1026.313429][ T7133] geneve3: entered promiscuous mode [ 1026.352649][ T7140] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1026.749820][ T7144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1027.422469][ T7168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8750'. [ 1027.634989][ T7173] Can't find ip_set type hash:i‘,port,ip [ 1027.682822][ T7162] lo speed is unknown, defaulting to 1000 [ 1028.101413][ T7190] vlan4: entered promiscuous mode [ 1028.108398][ T7190] bond0: entered promiscuous mode [ 1028.143859][ T7190] mac80211_hwsim hwsim76 wlan1: entered promiscuous mode [ 1028.287207][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8760'. [ 1028.290953][ T7200] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8759'. [ 1028.503598][ T7203] netlink: 'syz.4.8761': attribute type 3 has an invalid length. [ 1028.527352][ T7203] netlink: 'syz.4.8761': attribute type 1 has an invalid length. [ 1028.545682][ T7203] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8761'. [ 1028.570662][ T7203] NCSI netlink: No device for ifindex 813332851 [ 1029.026545][ T7229] tipc: Enabled bearer , priority 0 [ 1029.077203][ T7227] syzkaller0: entered promiscuous mode [ 1029.101240][ T7227] syzkaller0: entered allmulticast mode [ 1029.232036][ T7227] tipc: Resetting bearer [ 1029.321374][ T7227] tipc: Disabling bearer [ 1029.427669][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8764'. [ 1029.498744][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8772'. [ 1030.154786][ T7245] lo speed is unknown, defaulting to 1000 [ 1030.549079][ T7264] netlink: 'syz.0.8780': attribute type 12 has an invalid length. [ 1030.576974][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8780'. [ 1030.621422][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8782'. [ 1030.863228][ T7277] netlink: 'syz.1.8785': attribute type 10 has an invalid length. [ 1030.905896][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8785'. [ 1030.990922][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8785'. [ 1031.356701][ T7296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8789'. [ 1031.395630][ T7298] sock: sock_set_timeout: `syz.4.8790' (pid 7298) tries to set negative timeout [ 1031.596854][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1031.638179][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1031.696590][ T7304] netlink: 'syz.4.8791': attribute type 18 has an invalid length. [ 1032.510752][ T7316] IPv6: sit2: Disabled Multicast RS [ 1032.896021][ T7332] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.036282][ T7335] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.047789][ T7335] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1033.091314][ T7335] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1033.122441][ T7335] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1033.198024][ T7332] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.240602][ T7335] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.270435][ T7335] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1033.306390][ T7335] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1033.318438][ T7335] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1033.404860][ T7332] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.442564][ T7335] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.471320][ T7335] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1033.491566][ T7335] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1033.521635][ T7335] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1033.573894][ T7332] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.708932][ T7335] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.728092][ T7335] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1033.759103][ T7335] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1033.780563][ T7335] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1034.069317][T29697] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.097270][T29697] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1034.121072][T29697] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1034.139528][T29697] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1034.148625][T29697] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.225140][ T7210] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.244104][ T7210] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1034.255134][ T7210] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1034.293852][ T7210] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1034.338573][ T6130] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.396766][ T6130] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.421664][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8808'. [ 1034.449243][ T6130] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.458090][ T6130] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1034.467555][ T6130] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1034.477024][ T6130] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1034.495696][ T6130] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.523599][ T6130] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1034.540692][ T6130] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1034.559987][ T6130] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1034.610569][ T6130] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.803720][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8812'. [ 1035.057020][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1035.512361][ T6086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1035.522248][ T6086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1035.531975][ T6086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1035.540038][ T6086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1035.548797][ T6086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1035.741669][ T7423] syzkaller1: entered promiscuous mode [ 1035.759869][ T7423] syzkaller1: entered allmulticast mode [ 1035.772358][ T30] audit: type=1107 audit(1769073226.294:23): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1035.930012][ T7430] netlink: 'syz.3.8825': attribute type 10 has an invalid length. [ 1035.938419][ T7430] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1036.273186][ T7430] team0: Port device bond0 removed [ 1036.280855][ T7430] bridge0: port 3(bond0) entered blocking state [ 1036.288764][ T7430] bridge0: port 3(bond0) entered disabled state [ 1036.459351][T28252] syz_tun (unregistering): left allmulticast mode [ 1036.762417][ T7432] ip6gre1: entered promiscuous mode [ 1036.767874][ T7432] ip6gre1: entered allmulticast mode [ 1036.977856][ T6073] [ 1036.980243][ T6073] ============================================ [ 1036.986420][ T6073] WARNING: possible recursive locking detected [ 1036.992616][ T6073] syzkaller #0 Not tainted [ 1036.997053][ T6073] -------------------------------------------- [ 1037.003267][ T6073] kworker/u8:14/6073 is trying to acquire lock: [ 1037.009559][ T6073] ffff88807ec88d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1037.020157][ T6073] [ 1037.020157][ T6073] but task is already holding lock: [ 1037.027555][ T6073] ffff88807ea5a558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1037.037450][ T6073] [ 1037.037450][ T6073] other info that might help us debug this: [ 1037.045537][ T6073] Possible unsafe locking scenario: [ 1037.045537][ T6073] [ 1037.053011][ T6073] CPU0 [ 1037.056354][ T6073] ---- [ 1037.059654][ T6073] lock(&qdisc_xmit_lock_key#3); [ 1037.064724][ T6073] lock(&qdisc_xmit_lock_key#3); [ 1037.069769][ T6073] [ 1037.069769][ T6073] *** DEADLOCK *** [ 1037.069769][ T6073] [ 1037.077920][ T6073] May be due to missing lock nesting notation [ 1037.077920][ T6073] [ 1037.086346][ T6073] 11 locks held by kworker/u8:14/6073: [ 1037.091827][ T6073] #0: ffff888049909948 ((wq_completion)bond5#3){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1037.102910][ T6073] #1: ffffc90004d1fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1037.115806][ T6073] #2: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1037.125416][ T6073] #3: ffffffff8e35a380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2a7/0x32b0 [ 1037.135365][ T6073] #4: ffff88807c1f3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0xf23/0x32b0 [ 1037.147919][ T6073] #5: ffff88807ea5a558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1037.158302][ T6073] #6: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1037.167298][ T6073] #7: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0xff0 [ 1037.176981][ T6073] #8: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1037.185799][ T6073] #9: ffffffff8e35a380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2a7/0x32b0 [ 1037.195760][ T6073] #10: ffff888066e75228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0xf23/0x32b0 [ 1037.208430][ T6073] [ 1037.208430][ T6073] stack backtrace: [ 1037.214344][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 1037.214367][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1037.214380][ T6073] Workqueue: bond5 bond_alb_monitor [ 1037.214406][ T6073] Call Trace: [ 1037.214416][ T6073] [ 1037.214425][ T6073] dump_stack_lvl+0xe8/0x150 [ 1037.214449][ T6073] print_deadlock_bug+0x279/0x290 [ 1037.214472][ T6073] __lock_acquire+0x253f/0x2cf0 [ 1037.214491][ T6073] ? unwind_next_frame+0xa5/0x23c0 [ 1037.214514][ T6073] ? __pfx_netif_skb_features+0x10/0x10 [ 1037.214539][ T6073] ? sch_direct_xmit+0x15f/0x4c0 [ 1037.214562][ T6073] lock_acquire+0x106/0x330 [ 1037.214579][ T6073] ? sch_direct_xmit+0x15f/0x4c0 [ 1037.214609][ T6073] _raw_spin_lock+0x2e/0x40 [ 1037.214631][ T6073] ? sch_direct_xmit+0x15f/0x4c0 [ 1037.214654][ T6073] sch_direct_xmit+0x15f/0x4c0 [ 1037.214681][ T6073] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1037.214704][ T6073] ? kasan_save_track+0x4f/0x80 [ 1037.214721][ T6073] ? kmem_cache_alloc_node_noprof+0x3c0/0x6f0 [ 1037.214765][ T6073] ? __alloc_skb+0x27d/0x7d0 [ 1037.214793][ T6073] __dev_queue_xmit+0x13c4/0x32b0 [ 1037.214816][ T6073] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1037.214841][ T6073] ? arpt_do_table+0x261/0x1ec0 [ 1037.214860][ T6073] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1037.214884][ T6073] ? __pfx_arpt_do_table+0x10/0x10 [ 1037.214910][ T6073] ? NF_HOOK+0xa2/0x3c0 [ 1037.214930][ T6073] NF_HOOK+0x33a/0x3c0 [ 1037.214948][ T6073] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1037.214967][ T6073] ? NF_HOOK+0xa2/0x3c0 [ 1037.214984][ T6073] ? __pfx_NF_HOOK+0x10/0x10 [ 1037.215000][ T6073] ? lock_acquire+0x106/0x330 [ 1037.215018][ T6073] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1037.215042][ T6073] arp_xmit+0x16c/0x270 [ 1037.215064][ T6073] ? arp_xmit+0x23/0x270 [ 1037.215083][ T6073] arp_solicit+0xbe0/0xe40 [ 1037.215106][ T6073] ? arp_solicit+0x119/0xe40 [ 1037.215125][ T6073] ? __pfx_arp_solicit+0x10/0x10 [ 1037.215147][ T6073] ? __neigh_event_send+0xe9d/0x14a0 [ 1037.215173][ T6073] ? __pfx_arp_solicit+0x10/0x10 [ 1037.215191][ T6073] __neigh_event_send+0xf05/0x14a0 [ 1037.215222][ T6073] neigh_resolve_output+0x198/0x750 [ 1037.215249][ T6073] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1037.215271][ T6073] ip_finish_output2+0xbb6/0xff0 [ 1037.215289][ T6073] ? ip_skb_dst_mtu+0x917/0xb70 [ 1037.215305][ T6073] ? ip_finish_output2+0x3d0/0xff0 [ 1037.215322][ T6073] ? ip_finish_output+0x33a/0x3f0 [ 1037.215350][ T6073] ip_output+0x29f/0x450 [ 1037.215377][ T6073] ? ip_output+0x5b/0x450 [ 1037.215403][ T6073] iptunnel_xmit+0x59f/0xa00 [ 1037.215433][ T6073] ip_tunnel_xmit+0x1cea/0x2430 [ 1037.215454][ T6073] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1037.215488][ T6073] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1037.215506][ T6073] ? gre_build_header+0x31f/0xa40 [ 1037.215528][ T6073] ? __pfx_gre_build_header+0x10/0x10 [ 1037.215547][ T6073] ? skb_network_protocol+0x528/0x790 [ 1037.215568][ T6073] __gre_xmit+0x19e/0x240 [ 1037.215604][ T6073] ? __pfx___gre_xmit+0x10/0x10 [ 1037.215619][ T6073] ? unwind_next_frame+0xa5/0x23c0 [ 1037.215641][ T6073] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1037.215668][ T6073] erspan_xmit+0xa87/0x1440 [ 1037.215687][ T6073] ? __lock_acquire+0x6b5/0x2cf0 [ 1037.215710][ T6073] ? ret_from_fork_asm+0x1a/0x30 [ 1037.215735][ T6073] ? __pfx_erspan_xmit+0x10/0x10 [ 1037.215758][ T6073] dev_hard_start_xmit+0x2cd/0x7f0 [ 1037.215784][ T6073] sch_direct_xmit+0x251/0x4c0 [ 1037.215813][ T6073] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1037.215837][ T6073] ? alb_send_lp_vid+0x122/0x550 [ 1037.215861][ T6073] ? process_scheduled_works+0xa80/0x17a0 [ 1037.215879][ T6073] ? worker_thread+0x89f/0xd90 [ 1037.215901][ T6073] __dev_queue_xmit+0x13c4/0x32b0 [ 1037.215922][ T6073] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1037.215949][ T6073] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1037.215973][ T6073] ? rcu_is_watching+0x15/0xb0 [ 1037.215994][ T6073] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1037.216020][ T6073] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1037.216054][ T6073] ? alb_send_lp_vid+0x14e/0x550 [ 1037.216086][ T6073] alb_send_lp_vid+0x348/0x550 [ 1037.216113][ T6073] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1037.216140][ T6073] ? trace_sched_exit_tp+0x36/0xf0 [ 1037.216166][ T6073] ? __schedule+0x1505/0x4fb0 [ 1037.216193][ T6073] alb_send_learning_packets+0x12c/0x300 [ 1037.216218][ T6073] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1037.216242][ T6073] ? bond_alb_monitor+0xf8/0x17e0 [ 1037.216269][ T6073] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1037.216297][ T6073] bond_alb_monitor+0x3d5/0x17e0 [ 1037.216323][ T6073] ? bond_alb_monitor+0xf8/0x17e0 [ 1037.216347][ T6073] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1037.216370][ T6073] ? preempt_schedule_thunk+0x16/0x30 [ 1037.216386][ T6073] ? process_scheduled_works+0xa0f/0x17a0 [ 1037.216404][ T6073] ? process_scheduled_works+0xa0f/0x17a0 [ 1037.216422][ T6073] process_scheduled_works+0xaec/0x17a0 [ 1037.216453][ T6073] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.216470][ T6073] ? do_raw_spin_lock+0x12b/0x2f0 [ 1037.216498][ T6073] ? assign_work+0x3d3/0x440 [ 1037.216518][ T6073] worker_thread+0x89f/0xd90 [ 1037.216542][ T6073] ? __kthread_parkme+0x7a/0x1f0 [ 1037.216579][ T6073] kthread+0x726/0x8b0 [ 1037.216602][ T6073] ? __pfx_worker_thread+0x10/0x10 [ 1037.216620][ T6073] ? __pfx_kthread+0x10/0x10 [ 1037.216643][ T6073] ? _raw_spin_unlock_irq+0x23/0x50 [ 1037.216665][ T6073] ? __pfx_kthread+0x10/0x10 [ 1037.216687][ T6073] ret_from_fork+0x51b/0xa40 [ 1037.216706][ T6073] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.216722][ T6073] ? __switch_to+0xc82/0x1410 [ 1037.216748][ T6073] ? __pfx_kthread+0x10/0x10 [ 1037.216770][ T6073] ret_from_fork_asm+0x1a/0x30 [ 1037.216800][ T6073] [ 1037.772835][ T6086] Bluetooth: hci2: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1037.966567][ T7418] lo speed is unknown, defaulting to 1000 [ 1038.506306][T30189] bridge0: port 2(vlan3) entered disabled state [ 1038.584172][T30189] vlan3 (unregistering): left allmulticast mode [ 1038.590476][T30189] syz_tun (unregistering): left allmulticast mode [ 1038.597720][T30189] vlan3 (unregistering): left promiscuous mode [ 1038.604484][T30189] syz_tun (unregistering): left promiscuous mode [ 1038.618025][T30189] bridge0: port 2(vlan3) entered disabled state [ 1038.888823][T29703] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.898983][T29703] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1038.909301][T29703] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1038.920557][T29703] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1038.984088][T29703] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.994006][T29703] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1039.003843][T29703] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1039.013766][T29703] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1039.053861][T29703] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.063925][T29703] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1039.074029][T29703] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1039.083951][T29703] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1039.141324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1039.153147][T29703] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.163333][T29703] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1039.173290][T29703] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1039.184664][T29703] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1039.250848][ T6073] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.274704][ T6073] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.296480][ T6073] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.314813][ T6073] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.513666][T19731] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.540422][T19731] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.567099][ T3817] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.589359][ T3817] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.795901][ T3817] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.841054][ T3817] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.849576][ T3817] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 20000 - 0 [ 1039.876264][T29703] bridge0: port 3(bond0) entered disabled state [ 1039.886294][T29703] bridge_slave_1: left allmulticast mode [ 1039.892452][T29703] bridge_slave_1: left promiscuous mode [ 1039.898164][T29703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.908586][T29703] bridge_slave_0: left allmulticast mode [ 1039.916109][T29703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.820487][T29703] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1040.829141][T29703] mac80211_hwsim hwsim76 wlan1: left promiscuous mode [ 1040.836526][T29703] bond0 (unregistering): Released all slaves [ 1040.845476][T29703] bond1 (unregistering): Released all slaves [ 1040.946685][T29703] bond2 (unregistering): Released all slaves [ 1040.956422][T29703] bond3 (unregistering): Released all slaves [ 1040.966151][T29703] bond4 (unregistering): Released all slaves [ 1041.067262][T29703] bond5 (unregistering): Released all slaves [ 1041.170491][T29703] bond6 (unregistering): Released all slaves [ 1041.267884][T29703] bond7 (unregistering): Released all slaves [ 1041.367212][T29703] bond8 (unregistering): (slave veth3): Releasing active interface [ 1041.376396][T29703] bond8 (unregistering): Released all slaves [ 1041.477187][T29703] bond9 (unregistering): (slave wireguard0): Releasing backup interface [ 1041.485645][T29703] wireguard0: left promiscuous mode [ 1041.492156][T29703] bond9 (unregistering): Released all slaves [ 1041.534778][T29703] bond4 (unregistering): (slave ip6gretap3): Releasing active interface [ 1041.545528][T29703] bond4 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - d6:95:8e:13:33:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1041.565067][T29703] bond4 (unregistering): (slave erspan0): making interface the new active one [ 1041.625713][T29703] bond4 (unregistering): (slave erspan0): Releasing active interface [ 1041.638006][T29703] bond5 (unregistering): (slave erspan2): Releasing active interface [ 1041.646314][T29703] erspan2 (unregistering): left promiscuous mode [ 1041.677839][T29703] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1041.714592][T29703] dvmrp6 (unregistering): left allmulticast mode [ 1042.027612][T29703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.036488][T29703] bond_slave_0: left promiscuous mode [ 1042.042121][T29703] bond_slave_0: left allmulticast mode [ 1042.048418][T29703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.058130][T29703] bond_slave_1: left promiscuous mode [ 1042.064275][T29703] bond_slave_1: left allmulticast mode [ 1042.070034][T29703] bond0 (unregistering): Released all slaves [ 1042.167663][T29703] bond1 (unregistering): Released all slaves [ 1042.266860][T29703] bond2 (unregistering): Released all slaves [ 1042.276445][T29703] bond3 (unregistering): Released all slaves [ 1042.377302][T29703] bond4 (unregistering): (slave veth3): Releasing active interface [ 1042.386337][T29703] bond4 (unregistering): Released all slaves [ 1042.398284][T29703] bond5 (unregistering): Released all slaves [ 1042.790305][T29703] bond0 (unregistering): left promiscuous mode [ 1042.796557][T29703] : left promiscuous mode [ 1042.801267][T29703] bond_slave_1: left promiscuous mode [ 1042.806764][T29703] bridge_slave_1: left promiscuous mode [ 1042.814531][T29703] bond0 (unregistering): (slave 30): Releasing backup interface [ 1042.823777][T29703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.833554][T29703] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1042.843476][T29703] bond0 (unregistering): Released all slaves [ 1042.851913][T29703] bond1 (unregistering): Released all slaves [ 1042.984703][T29703] bond2 (unregistering): Released all slaves [ 1042.997726][ T3817] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 20000 - 0 [ 1043.139276][T29703] [†’Ì: left promiscuous mode [ 1043.175682][T29703] tipc: Disabling bearer [ 1043.190379][T29703] tipc: Left network mode [ 1043.196186][T29703] tipc: Disabling bearer [ 1043.205501][T29703] tipc: Left network mode [ 1043.224578][T29703] tipc: Left network mode [ 1044.293761][T29703] hsr_slave_0: left promiscuous mode [ 1044.299749][T29703] hsr_slave_1: left promiscuous mode [ 1044.314771][T29703] hsr_slave_0: left promiscuous mode [ 1044.324834][T29703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.332650][T29703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.342275][T29703] batman_adv: batadv0: Removing interface: dummy0 [ 1044.350938][T29703] dummy0: left promiscuous mode [ 1044.365341][T29703] hsr_slave_0: left promiscuous mode [ 1044.372205][T29703] hsr_slave_1: left promiscuous mode [ 1044.378036][T29703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.413166][T29703] veth1_vlan: left promiscuous mode [ 1044.418529][T29703] veth0_vlan: left promiscuous mode [ 1044.479525][T29703] pimreg (unregistering): left allmulticast mode [ 1045.105085][T29703] team0 (unregistering): Port device batadv1 removed [ 1045.120857][T29703] pim6reg (unregistering): left allmulticast mode [ 1045.414410][T29703] team0 (unregistering): Port device team_slave_1 removed [ 1045.448395][T29703] team0 (unregistering): Port device team_slave_0 removed [ 1046.062253][T29703] team0 (unregistering): Port device team_slave_1 removed [ 1046.098725][T29703] team0 (unregistering): Port device team_slave_0 removed [ 1046.161001][ T6073] smc: removing ib device syû