last executing test programs: 14.146623062s ago: executing program 1 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESOCT=r3], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r6, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r5) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x8, 0x0, 0xdc2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000004c0)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r4, @ANYBLOB="070000003000000000000000a3631741a799218fa461cf61f4", @ANYRES32=r11, @ANYRES64=r9], 0x20) 7.097613658s ago: executing program 2 (id=3141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 6.772620969s ago: executing program 2 (id=3145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b3", 0x1, 0x0, 0x0, 0x0) (async) recvmsg(r0, 0x0, 0x10122) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x57}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000000000000000390222c39009500000000000000197c0c521d65683fbbaa1e8ba780d646d7150296e4bd25e78008983d6cc117941670b6e6baa75d472d8009e9a6b791f93a77c966c4e9aaf6d24a25c7cbc000050000b4c5965033ce7ed2750cdaeca26aa272e879abc9c23b2c606b226ba2a4dcb2c73146c430976b8ea2b4ba3ebdeec614b460151c41c59fde01ab5df3003c85d6dfb9c4e1a6d4253b267474179b4000b27631a2a5115e9cbf6e3393445ba5f3472eeb7c091fbf2000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54, 0x0}}, 0x10) (async) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f00000058c0)={0x29, @rand_addr=0x64010101, 0x4e23, 0x0, 'nq\x00', 0x6, 0x0, 0x80}, 0x2c) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000100000000000000000000001b9dfc60cd8e1837fd010018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pwrite64(0xffffffffffffffff, 0x0, 0xff0f, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x5460, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x90) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 6.668525928s ago: executing program 2 (id=3146): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$key(0xf, 0x3, 0x2) sendfile(r1, r0, 0x0, 0x1) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2d, 0x9, 0x70bd2a, 0x0, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 5.254014902s ago: executing program 2 (id=3153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xb4, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xba2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xb4}}, 0x4001010) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000007b0b1b9a7b631000370400002400000000", @ANYRES32=0x0, @ANYBLOB="8b0605002400000020001280080001007369740014000280060008003e0000000500090029000000"], 0x40}}, 0x0) 5.121205754s ago: executing program 2 (id=3155): ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0x166}}, 0x6, 0x5, 0x1, 0x7, 0x0, 0x7, 0xf}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x1d) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000500)={0x0, 0x9}, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000540)={r0, 0x7}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000700)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x334, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x150, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffa}]}}}, {0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x200}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xe}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x732a322}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x150, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x66}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x74}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xa128}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xc363}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x334}, 0x1, 0x0, 0x0, 0x200008c5}, 0x1000) 4.720881765s ago: executing program 2 (id=3158): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xffffffffffffff7f, &(0x7f0000000740)=[{&(0x7f0000000100)=""/56}, {&(0x7f0000000a80)=""/51}, {&(0x7f0000000480)=""/68}, {&(0x7f0000000b40)=""/208, 0xffffffffffffff41}]}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0104000000000000000002000000200004801c0001800900010068617368000000000c00028008000740000400010900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00efa694d4e4388092b85665000128bd7000ffdbdf250a000000060009000100000008000300", @ANYRES32=r4, @ANYBLOB="0600090000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x30000044) (async) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/206, 0xce}], 0x1}, 0x2003ff}, {{&(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000680)=""/140, 0x8c}], 0x3, &(0x7f0000000880)=""/160, 0xa0}, 0x4}], 0x2, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 3.571579433s ago: executing program 3 (id=3162): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = accept(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x80) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000500d57521946e840600000000000000d9e02d98da05f4d3743ae9f8211af75df9ed", @ANYRES16=r3, @ANYBLOB="00042cbd7000fcdbdf257b00000008000300", @ANYRES32=r4, @ANYBLOB="1400fe0066d9d524790a33be0d284ed0839369d9"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r3, @ANYRES16=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40488d2) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0xfffd, 0xaaa1}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)="fe667a67a038ce76c19beed39055428adcb79f23e14c0a5a279c69699925a293e2450e061c1b2f81fd25ef92b8cb513c95f795db94bb336fe245aebb394621e6b4a0d6ff0f191afa42edb8ad01e56d1c00663a5a75c806226ca843b2641be760b19443c272f87bbe78e1758fb06eb6b2909bb2a01ab3e79066d7fe37e13478d4549e9da944d6d1f47e4aef2de2a40da46ffe1eb99b2a3a24277ac534199c72be8c9c4dae4f796aa80e8c23db598de841367348246a5598ba032f5d72c5bd19193c3305ec0696af1ba3d05534a4be5022fc41", 0xd2}], 0x1, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x160}, 0x804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="45e2", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg$qrtr(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000007c0)=""/245, 0xf5}, {&(0x7f0000002300)=""/256, 0x100}, {&(0x7f00000009c0)=""/140, 0x8c}, {&(0x7f0000000b40)=""/153, 0x99}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/147, 0x93}, {&(0x7f0000001d40)=""/227, 0xe3}, {&(0x7f0000001e40)=""/194, 0xc2}, {&(0x7f0000001f40)=""/129, 0x81}], 0x9, &(0x7f00000020c0)=[{0x50, 0x0, 0x0, ""/64}, {0xf0, 0x0, 0x0, ""/218}], 0x140, 0x12}, 0x38, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r13, 0x1, 0x1b, &(0x7f0000000200)=0x2, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r13, &(0x7f00000022c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x28, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_bt_hci(r6, 0x400448e2, &(0x7f0000002d80)="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") bind$inet6(r16, &(0x7f0000000680)={0xa, 0x4e21, 0xffff, @empty, 0x8000}, 0x1c) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r10], 0x7c}}, 0x20004080) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000000200000a50000000060a09040000000000000000020000002400048020000180070001007274000014000280080001400000000e08000240000000240900010073797a30000000000905fc55617943e07d02f4020073797a3200000000140000001100010000000000000000000000000a172bb9896ac7acc3df8a82b57b3ff186af6519077814db0dd606cc4fcc69ca9e8551a00b7687922ad1eed50fdf22bc687d9a265bc48d073fe78bcf79708d1ae0d4bbf7c42a"], 0x78}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r14, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 2.9259278s ago: executing program 0 (id=3165): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x301, 0x0, 0x1a14, {0x2, 0x0, 0x11}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20}}, 0x24000000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000b00)="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", &(0x7f00000000c0)=""/227}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r4, 0x801, 0x709d2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x301, 0x0, 0x1a14, {0x2, 0x0, 0x11}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20}}, 0x24000000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000b00)="b0020c4c5b6767e079a3d1bbe3f1d72cfb462a05f9689603484ba65b3b7465e9cd42c00c8dc192edef81379c337d4f9b5b1dbda232a5854518c674b865e300f96f621f766a280f2d8fee0ab0f41179a08ae791c4beed456e403eec3f43da80d042ecce9ee7bcdc2ac063f949dff9dfd1217adc695cffb0914864b4d9ba20311ed91bd6d49daed40ff7a66c03e93535a29d2e458d18b2085dc85358a911982a550189d1ecc0b04c9b65feb307c686cc36ae28d0896bd79d963de21d79c9f3e084f32fc2ef0735e3a3a0eb4e642d770d4e5a59462cfda7bacfba6c53a420a1cceec972c0e7bb8b848130a18648946e468c09456d3c7a829e8d00ab6f748c4853ac84938a4a21a9d83e81cece07f4fec97c14ba2979d1933cc696e5a060537602a8a2fc0e02ac0c4ab6286dc8b47dd348faa4043e11af67de244b1a9680b997299e63ff398b5a3fb69d89506c75044a3cb98c526a91094e55d0f54a83f309e266bfb53c76ae8c503fcdf69234d936a418c11a81c6e44dec013cc8e6013af6c26846e26aa2b17aa16dbdebe8c7c7d0b23755d819809f33a3d4a5ab769471f438a3f63d82341a7aea26538bedb27f1840adc8fdac4e2116b5630026f0f129c38da48650193c559046d03719512f501d8f4c81553a0ff0360b099503cfa1c0edf81c0b9b47b8d1f85058f88f7cee10a70fa9313075d70f886f9f508baa378fe8bd9e9f39ab0453b152401439dc4316f30ccbeed465a1cc3e3fe2ea31ff638aa7dbd385fa621fbfd55a29491742e8e13ab159b52d1bc4b31141abbe5dc77563a349f4f018b6e8d60cc71b4975cc59245a80733e2dfbe3a85747b1f7fc044d23be5fc2ecbb999fc6f9702ecf73c60566e5e00e6105df426f17235387199ded704e9c8de603db8e54a5dfdaf0beff8335b8455ec364a00cd556ffe786845fa02cabd1aca6b7f78feac843d16393b62788836dd92ddece46f208c0586691772cf6599810efb5cb4b35ddf2df24631f3ad023a35fc6002d83995440d8199bcd2aea714ead269c2b0fad9e0a1b013c6fd38af5229bba39e1d4d18301ae204ce825ffa9d265abbb026197bfd40b044e3fb1fe16b5f34cc809356f2b4fe87df657550c0ad391be1d9755a80121e383d680639002b5292ddf408f1d678f2ae3b56ae70883079f2228ed03803f96c2dc5fe30f0ad1e9d5fe3586f26358ab541cf5e541e66cad2cf7d1b8460451308632c5cb0b422287dbd7a7e41271593637c5b4142758dce889b15e14e1ee7b61d97bf5e1516a44969632ea41ec3ebb8304260b54803ccce2e4c2c39d2b67140d9c70d6f1d4a577e78a38f9218998391e13c6ad16a9316aea2d8e6a547dd243478e4ff8c650629a715a2b717bb09822df2fa70a645a30938bea4230a2dffd3ac2fec3016295fb9ca9a3863f1cca435173b0c678d0e1c8c39919d83c6dfc4fbbaa54390dfe673e3f569a63570923774c23d431f44069758bba3b4466045fc5b6fc8702ce26a8739c5655e6f92d888bb40bb7e653784150891ec0c5749712886ebf88ba60a47b8f182d38cf97fffd8befdfe74e869773f8c770890fa93adaa4b598bf8ef838fb35f2389b015d72858444341ab8322855b31df50cd63ac6a4e7cc827f4e079cf66109369db6cd23c7f330272036436b44f4b33986afe9d218f906d7cc79f36579dabc3f2012bda64683aec60499742414920439d446d199e7830867ed878db37d8f12794b326dacc494f596cfa7ece6379eff28585d0600cf5577fdcfeda78d991276f24e4ee23c7835fd22488222a28f40cc49505b7ece07938622d7437ca05865359cc7f7a68260040f1411e6b03af4c0d75046502fa33f016a2c4737512e118c19eb803b72e99db4068e1523d0f91019c14a7cf21108da2796cf0cf3562603377324d9faa64969958a1ce0d4a285a325617dd8f4d2f996bd5ffae3368d379589adbbbc5219dfaa05f49e15b6e54e45060984f6b999b21b86a627b8f13896b958684723ec17cae40b77f66635b9eea47968a858c5a4d0a3078af203801a537516de8937bc35dc3570a45af3c15e354be588e937f1cb04ab98b335f8ca648066371ae0117c2be40a40b9402ca19bb40b5a779b2aaa464e9a3ff6cf12c4883e517b35955b429ff33f8bd97b24da4128ca66f45bb411ec0ea38c429a921f73f747062856814a7c086640b19ae9845a26d1c34f632a314c2355a34c9d630aad019c8e32317bb8cbdf3b61e099d3529cab5fa418032db0de51e7d8760451168666f4adc365d0bc0fdc4b2b9a469685c338efc6d08dfc1568a3982440df56eed309c3e37bfce030fdf571e3e0342cd876f6ad2144e900235678a560017ba1e4dc8dc1e25d5e6aefe6223ed0925d0e0b6979e64276290c9883295252caffb1c6d9357dbca6a178f0c4a15c93e6714189178d4c3c866898e1f70f81ea0864e9ebfa5a6a3e1d23eb94645088efccceed2bf2ba33842d27b64b43cfccd6c3398f343d911614901552f8cd0e42cb661605562fcd3304b4bc444414b7ec4562a6f51740ba0387a6156d72b83291525247330744888a4b40fd9d53e3638b6fa89e217638d8b5e43c9b9597dd10b84a3a1b4550f0e4a09cb78a8f82b89b35b35fb0867be036bed697665210ed5687e4fabf8774b815a7c0f613c04f8a166fd14e728a13251c9d25639784a398c8a8a83851c50628c8ca9b34c24c10d33cf7db0f286b7d078883c60cc424720df42dacef169f71ddeda7822cda507cf7c149d5a09e5164326cb05a665024b3e1edbfdd6fabd4534c7d5adf3a7f954ae95b5fbb8ecaa7cec1ac17f9f743bab1c0a11475891e1ace393f6073c214dd85467fd72e1784bf25c1ac129ccb5013cd1627da43cd2a6e4922e10b7ebde9dbf6c87116ccbd6a9620a9a4e3118eeb797a214928919f5568544c8ba08b71dd06387663ca45874b119888aac0a52b5279c838eda444b0d53fbd2a43322d7f6745dce6784fae1a4ce0cd8e415fd53112cc2e75f7260e2f838bc8a3aa9db3314b783f1f91e3ca7e8ddffb6b001ccf17785d3c57f156216c37f7e43af6dfec888dc9d1c7ed6cf4469c5b7308c557fdccaf7a18ef0f9ed775e37a0829662d9bca3a7502c4f4cca4b1412d25d8d19a6ae8fd965f5943ede41c3624159c213381e763658c577a11ffbcc59aa85d1061d6db1baf93405b3e40efbaa21ec56fcd5be3f766112a660116f12a02f75bfb21bed12d03c3a7844f698c2590299fa8ee89c6d8e997f7697aa5437ef1487ea09eb22036d9a0982404fd3dfef3aeadf5e1697a26cd7089a23431f6894162aeb6cabeae5c716a88ff52971375770452bc2eedcce29ebc9704c4687e3f097d4e4058c343d15f13eb2843b6c41fa3109bc14614927657e1e6623c89b4259acb83a63143c89ebd3071b0e43511b2952384f64b5ccdb4cc41a0e261febf8dad2fbcf0db1b881e25a7e17f38a6108bec4b57a8610e875b3233b424c3fd87fc5e5b3fe73cc4021c4b62584bd9c76338b5e63a7f91917da84c2075c9153b56a64a49313a4696196c06fd55ff224a5082ccc27027ab9598282b83d037364e685b38a9a64836da20076a73055712f12d909bdfe4027d4e9822a9fb85f159ef08de89c295500355d9ea8cca84b646e95018d13dc5d97fd831b680c3fcf7e093c7e5cdb55bc5efd8ac35d88e119e18bd4f10577ba20f2a8dd38be2b7ea602e6a1cd39a38b06559fa3ee0b0b4e371479193ec882b5f5abf16ad1ec8288502f501215b404cb57ed3d4000bf0782b0ef3dcdf1d79e7562431a220ced734943cf56b81224a1dce449b77af467c042e452711d4ff4ad872ef1d5a83cdfa0c1f312e52f3f1597b8db77e9320548aa72adb33f28012c40205dc9a6d0f7b5b6af43c155754433421e6574fa909dbe5a412ccea81734d8b84401027ce24e23dceeac1f468e7acf5d488c724774512411a926e0fab31e3646110d3e40015950a2e67d1fbc3325ab574b17f6d664b2e81023f72d575262cf326e3c8d1eab83f77e34596b602afeac02e4e26af5af3e149c11e3a37d04d6a0493242820d2d0134603f413b409e75208b376c4cefbbad74f893c39c9ba8facfc3ae19eef1fd22877a71d5e168b0f843407cbfd0ce04c86bf614d89ff3200150aed4296e74efbcd7b7a1b5f3fea65207f289e21e3e0ff92396033e6d309e0f9269cd9fc32685a4d031408f2ada650dd7c9919cbb3612ce2e1e63563e8f2729601f43cd3cc100a7736710a6764e8171bdd48a8371f620ccdaccd1ad8722709e967b91832b41c5dd51c868773cbaa0e207c48741b2cafec4a891f4d236805f3d3f74d7dead5acd37745f53f566b96a8903ea3494d97e61d60f8637a40995ffce741f0f34210ea0e984ff7cc55ad2c1c707524612a5fea57bf3ccce367e107857bad3056f9bb47831e6419f95589a02b8614aadc5a0341da3b864b5a0704e19a8331ecb5f412661d64d3d47b9629d199196e918ae4f4c80a5ef3fc5d634867a3e1c2fae04bd63e96cc4abb582d1dc718ceca65b3326f9483d35c8c18331d8ffabd9c2238c8aeb66ce24a23c06150efdc7b31d60232f771480a01e78650844092d909dcf3d9e16080f50a66e82a65094eb2e3b67210a8cc1cfbf0617ffe4443059102346cdada4031e30140091044f349530735fdb3aa6363dad94bcbaf849fa959f9ef379276af7de756a9507b755bf64c4e8505fc7ef6005e1e70d07349eca96c93447fe4bba76279caec9f9098eda23109274842eb1ac6f43c61c4b6d6207aa7f4b53588f883cd948d278ed7d0c8b37a4f36f87a710059c439f7880801bb8390e8247ec05b18d6e46aee1d56cb363c50f7e26b225a5e959f671246500c4ffd8c40525a5ccfac08824238921366f752631010218fa5c91fe08e69f690fd6b311c61ef8ed40540a7c9d650a0cc3d04e1027012e706c4698dbc6b865d891ce09cd8b61375f152c999c0b11e459cdc94c5c7e0d5d900ba2de73f5658f0e85d661e59a0264d5a5ea39a97750bc1bfe8aa6485b9a05650bbdad26b433526dd1a25ec70f0e032301b04b066efe23e7955d57c26f312baebf3a2925ece8c0d396ee7f2f7418b58d10d886e37cf29d8355b600887b53c7b9e47c7750e47e5c511b7a1d709ea2159fc5f49efe37ac3d58f60e541f7ef69d16237e5cd56b4db4bf6dcc39cabc8cd20cd2645789fba794ef49fa94bc233327116a77879ce47e42fb7b5c81e7d41eb257c0d69f6e4973367f47d28c073b1a17db946266c444e259f731aeb72ff94660addd729e884fa87be7f3029f145c73d499215df7b2e153158a5aed78813ef2606f96ce2ce6090e71d865bb5f90b6a41f869ba5d288cbc0e828d047f7587c2c120b03e50fa32fbae850daf7534e9be5358bcefe177f6248d3ede4ee36800a7f269050627bc1d8f049777cdf6a01e46f31329a2640eb14d7533c2bae7af8502e6ec9c4c73979dc5b7b67243bd9ad6aeb39b009d29845e984f271d7961f20abc221656df78ab774e50f6090501f5de3fe8d4045fc224c92e45725a2e0a3f3be627fb4711b4cd24000557c052d210eb30cdc99ec427a397108aec97e04916df06b2162cbe09f144bbe675c7a558f927a4892e1196d45d32465be93e15f7cfb429e729763c14bbf96cdcfc6f3bce66c2358ce07bdd31ee227c828fc03ab4bada6a45fea4abebc4e61c338823dbea2880f65b49615802813573d73829d65842395ec49dc716c2df6bc54f22e88456e38597e351c67a5e31889bf13f8378e09196d84d275efd96ab4e47c4", &(0x7f00000000c0)=""/227}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r4, 0x801, 0x709d2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) (async) 2.829250549s ago: executing program 3 (id=3167): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) 2.74500519s ago: executing program 0 (id=3168): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100001f000100000000000000000006"], 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x4, 0x21e87592}, {0xd, 0xfffffffc}]}]}, {0x0, [0x0, 0x38e869a5bbd4abba, 0x2e, 0x5f]}}, 0x0, 0x3a}, 0x28) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r5, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) syz_emit_ethernet(0x132, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xfc, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, [], "8ef51555f8ccdca26955fec1925913f9eb052cc50b134cb52ad45826e1c763bf2fd828bbc549584c6b070eacee8ad66f630120bd9d178c3f24aeca1f89da610d747cd3fe1ef23079fa3c91ae5a1cdb53260f2f447c3c9b7baece675b4f9544a1ba742e971b3705d68c09691911402b4ce5507c5887b2f0a70a8196a7e9ec8fdfe4017d0c86c72ffefb81095eaf183bd11b3aae79bfa5901ca53c89453125dd4a1f90b0f5f400ad6b7b37fdeb39b65e3e73ec21d1168c623533bb177a860bd812ced92e7b40f8fa8551259737"}}}}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async, rerun: 64) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.536298011s ago: executing program 0 (id=3169): socket$packet(0x11, 0x3, 0x300) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000240)=@ctrl_frame=@ack={{}, {0x8}, @device_b}, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40804) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xcb47f0b37d3315eb) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r6, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000040)) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x1, @empty, 0x459}], 0x1c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.493581666s ago: executing program 4 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) (fail_nth: 3) 2.340482172s ago: executing program 4 (id=3171): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2f00020b, 0xe40, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140a, 0xc6419c42ff42077, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x7844301150353965}, 0x20000000) 2.138330145s ago: executing program 4 (id=3172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x1c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 1.960738316s ago: executing program 4 (id=3173): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x8}}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x62}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r0}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="d985c74235f9a0e3e080fc2e6bd0b0ef0e8c166d6969b8d9045700ee458699e77babe5647685ac", &(0x7f00000001c0)=""/66, &(0x7f0000000240)="94b99381dc45bb336a041db9c08e25470a80d01b957015671835049d189ca863df9855b4cf27f780866cbf97e68f36e8f9eccaeffb4770f6d4a1e46fee09bcfd2ab35c7167ad28c9b7fc1bac2aa4f21d2cc1110bcc8d372f8ef7739a8e26e21407d44723139b9d16de16ee823c17744b32666c8d22e3ee6940ad4821eef9280a5232d21645e465bd2fe0439fc612af8571fa8b915e8217ed648b", &(0x7f0000000300)="3513e70cb9f259cca9d559f82f13e9bfec5ffafc", 0x6, r0, 0x4}, 0x38) 1.786641369s ago: executing program 3 (id=3174): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x1) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2d, 0x9, 0x70bd2a, 0x0, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0x10}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x45}}]}, 0x2c}}, 0x4008000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x2, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 1.565843737s ago: executing program 4 (id=3175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0xffd, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x7, [{0x5, 0xfffffff8}, {0x7fff, 0xfff}, {0xffffffff, 0xae8}, {0xa, 0x4eb6}, {0xf, 0x20002}, {0x3, 0x7}, {0xb, 0x1}]}}) close(0x3) 1.500765427s ago: executing program 3 (id=3176): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae0000000800024039000001080001"], 0xb4}}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'team0\x00', {0x2, 0x0, @private}}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) 1.465715246s ago: executing program 3 (id=3177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x2000000000000087, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) sendmsg$inet(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(0x0, r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffae11e2eb1d0fe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8004) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000bc0)={0x110, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c3ee002}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59597f71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68804e19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e6a9dcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27cef371}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59408330}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x694812ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61934273}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38ada3a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d059f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57023378}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c6f9ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c8dd778}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fc6b4f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x850}, 0x4000001) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r10 = socket$inet(0x2, 0x3, 0x9c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000780)="018d490cafc50357d600eed7ad3e64f084e023fcc882ee9ac1aec402e60d16077f09a6ca3fb65aa62d38a7aede48ebcddb1cf044154cb6fb6642c3371df79ab4ec1ba897a389a835f465e81c304595726cc4099a4bc34553fe1b87038c3b68396ff719098fc4251959b789f4f859d528290843f6bc5da037fe521fa276ff5390b8cde091a75b3c90733745c88980612293ad3063e305e02a598776e192d6fcebddb78d2c617de299331cb587b028aad0635fcde8aab2934579e5d63a33d831325182503e", &(0x7f0000000300)=@udp=r10, 0x1}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r14, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r15 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r15, 0x1, 0x25, &(0x7f00000002c0), 0x8) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="f12f09000000000000bd79f448b6", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.415287676s ago: executing program 0 (id=3178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xd2e}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x19}, {0x8, 0xb, 0xaaa4}]}, 0x5c}}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async, rerun: 32) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x3}, 0x1c) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) (async) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6) 1.28835838s ago: executing program 1 (id=3113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000180)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, 0x7fffffff, 0x28, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 1.160832632s ago: executing program 1 (id=3179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf25210000000900000005002000000000000c0005000102aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.140098308s ago: executing program 0 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x70bd2a, 0x200, {0x0, 0x0, 0x0, 0x0, 0x215}}, 0x20}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x2, 0x401) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20000046, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008900}, 0x20040080) bind$rds(r3, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000040)) 1.13478645s ago: executing program 1 (id=3181): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 952.705726ms ago: executing program 3 (id=3182): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) 933.370078ms ago: executing program 1 (id=3183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4048804}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x8}}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000"], 0x0, 0x6e, 0x0, 0x1}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000400)='macsec0\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000480)="4ae772bdce1bff2fa3f8ed97c7ff6e94db0e8ec32f98991559987068d369cf0e8e9d1da2b5d705936c766fbc6713a334f040d4baf72183ce5a81cf1a15960d7480f7999ab72564e023bd23b50e7f172e2e4c87fe201f19a693a8cd7d43f6fa3029edbe59156636", 0x2000cc0, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x0, 0x0, 0xff7, 0x0, &(0x7f0000001700)=""/4087, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r8, &(0x7f00000001c0)="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", &(0x7f0000000040)=""/30}, 0x20) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100001045d0000000400000000000000", @ANYRES32=r13, @ANYBLOB="000000000014040028001280090001007665746800000000180002801400010000000000", @ANYRES32=r13, @ANYBLOB="0000000043030000"], 0x48}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 876.706053ms ago: executing program 0 (id=3184): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="edff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 600.096577ms ago: executing program 4 (id=3186): socket(0x400000000010, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 0s ago: executing program 1 (id=3187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x4e}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xfffffffe, 0x6, 0x1, r0, 0xa, '\x00', 0x0, r1, 0x0, 0x2, 0x3, 0xa}, 0x50) (async, rerun: 32) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r3, &(0x7f0000000200), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000030600"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340), 0x0}, 0x20) (rerun: 32) kernel console output (not intermixed with test programs): 40456][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.240473][T14270] RIP: 0033:0x7f963298ebe9 [ 404.240490][T14270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.240505][T14270] RSP: 002b:00007f963381c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.240533][T14270] RAX: ffffffffffffffda RBX: 00007f9632bb5fa0 RCX: 00007f963298ebe9 [ 404.240547][T14270] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 404.240558][T14270] RBP: 00007f963381c090 R08: 0000000000000000 R09: 0000000000000000 [ 404.240569][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.240580][T14270] R13: 00007f9632bb6038 R14: 00007f9632bb5fa0 R15: 00007ffead3950e8 [ 404.240611][T14270] [ 404.481467][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052f9ac00: rx timeout, send abort [ 404.489789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052f9a800: abort rx timeout. Force session deactivation [ 404.554571][ T5849] block nbd46: Receive control failed (result -32) [ 404.698312][T14282] __nla_validate_parse: 6 callbacks suppressed [ 404.698330][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 404.707139][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 404.940665][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 404.989797][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052f9ac00: abort rx timeout. Force session deactivation [ 405.012075][T14291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 405.148396][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 405.173138][T14303] FAULT_INJECTION: forcing a failure. [ 405.173138][T14303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.193983][T14291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 405.200641][T14303] CPU: 1 UID: 0 PID: 14303 Comm: syz.3.2367 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 405.200670][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.200682][T14303] Call Trace: [ 405.200689][T14303] [ 405.200697][T14303] dump_stack_lvl+0x189/0x250 [ 405.200720][T14303] ? __pfx____ratelimit+0x10/0x10 [ 405.200755][T14303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.200774][T14303] ? __pfx__printk+0x10/0x10 [ 405.200807][T14303] should_fail_ex+0x414/0x560 [ 405.200838][T14303] _copy_to_user+0x31/0xb0 [ 405.200864][T14303] bpf_test_finish+0x56f/0x700 [ 405.200894][T14303] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 405.200919][T14303] ? __pfx_bpf_test_finish+0x10/0x10 [ 405.200949][T14303] ? bpf_test_init+0x133/0x170 [ 405.200974][T14303] bpf_prog_test_run_xdp+0x79a/0x1000 [ 405.201015][T14303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 405.201044][T14303] ? __fget_files+0x2a/0x420 [ 405.201066][T14303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 405.201091][T14303] bpf_prog_test_run+0x2c4/0x340 [ 405.201120][T14303] __sys_bpf+0x581/0x870 [ 405.201145][T14303] ? __pfx___sys_bpf+0x10/0x10 [ 405.201180][T14303] ? ksys_write+0x22a/0x250 [ 405.201205][T14303] ? __pfx_ksys_write+0x10/0x10 [ 405.201225][T14303] ? rcu_is_watching+0x15/0xb0 [ 405.201257][T14303] __x64_sys_bpf+0x7c/0x90 [ 405.201278][T14303] do_syscall_64+0xfa/0x3b0 [ 405.201300][T14303] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.201321][T14303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.201338][T14303] ? clear_bhb_loop+0x60/0xb0 [ 405.201359][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.201375][T14303] RIP: 0033:0x7fcdac58ebe9 [ 405.201391][T14303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.201406][T14303] RSP: 002b:00007fcdad464038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.201426][T14303] RAX: ffffffffffffffda RBX: 00007fcdac7b5fa0 RCX: 00007fcdac58ebe9 [ 405.201439][T14303] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 405.201451][T14303] RBP: 00007fcdad464090 R08: 0000000000000000 R09: 0000000000000000 [ 405.201462][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.201472][T14303] R13: 00007fcdac7b6038 R14: 00007fcdac7b5fa0 R15: 00007ffdd86e7ab8 [ 405.201502][T14303] [ 405.495688][T14301] veth1_to_team: entered allmulticast mode [ 405.541060][T14311] tipc: Enabled bearer , priority 0 [ 405.612774][T14291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 405.648398][T14312] syzkaller0: entered promiscuous mode [ 405.654041][T14312] syzkaller0: entered allmulticast mode [ 405.685773][T14307] tipc: Resetting bearer [ 405.690715][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2369'. [ 405.742417][T14291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 405.804718][T14306] tipc: Resetting bearer [ 405.849640][T14324] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 405.851838][T14306] tipc: Disabling bearer [ 405.871287][T14325] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 405.914225][T14324] bond6: entered promiscuous mode [ 405.923769][T14324] 8021q: adding VLAN 0 to HW filter on device bond6 [ 406.002850][T14327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 406.015049][T14327] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 406.026189][T14327] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 406.053900][T14327] bond6: (slave wireguard1): making interface the new active one [ 406.062883][T14327] wireguard1: entered promiscuous mode [ 406.078693][T14327] bond6: (slave wireguard1): Enslaving as an active interface with an up link [ 406.142587][T14324] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address [ 406.154653][T14342] netlink: 'syz.1.2373': attribute type 8 has an invalid length. [ 406.183403][T14324] bond6: (slave wireguard2): Enslaving as a backup interface with an up link [ 406.214593][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 406.249598][ T3537] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 406.434619][ T3530] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 406.475373][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 406.534440][T14360] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 406.563875][T14360] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 406.680525][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 406.718442][ T1036] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 406.763914][ T6656] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 406.797924][T14372] veth0_to_team: entered promiscuous mode [ 407.229431][T14394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2383'. [ 407.292514][T14396] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 407.502520][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024484000: rx timeout, send abort [ 407.643851][T14407] net_ratelimit: 26 callbacks suppressed [ 407.643876][T14407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.718192][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 408.002671][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024484400: rx timeout, send abort [ 408.011280][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024484000: abort rx timeout. Force session deactivation [ 408.367589][T14420] veth0_to_team: left promiscuous mode [ 408.373444][T14420] veth1_to_team: left allmulticast mode [ 408.426037][T14420] tipc: Resetting bearer [ 408.442370][T14420] syzkaller0: left promiscuous mode [ 408.458448][T14420] syzkaller0: left allmulticast mode [ 408.484845][T11127] lo speed is unknown, defaulting to 1000 [ 408.497078][T11127] syz1: Port: 1 Link DOWN [ 408.510942][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024484400: abort rx timeout. Force session deactivation [ 408.521999][ T6656] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 408.543340][ T6656] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 408.552396][T14433] validate_nla: 1 callbacks suppressed [ 408.552415][T14433] netlink: 'syz.0.2394': attribute type 8 has an invalid length. [ 408.590554][ T6656] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 408.625425][ T6656] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 409.117722][T14472] block nbd47: server does not support multiple connections per device. [ 409.127085][T14472] block nbd47: shutting down sockets [ 409.188025][T14472] FAULT_INJECTION: forcing a failure. [ 409.188025][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.195767][T14485] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 409.207481][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.0.2403 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 409.207510][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.207520][T14472] Call Trace: [ 409.207528][T14472] [ 409.207536][T14472] dump_stack_lvl+0x189/0x250 [ 409.207560][T14472] ? __pfx____ratelimit+0x10/0x10 [ 409.207584][T14472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.207602][T14472] ? __pfx__printk+0x10/0x10 [ 409.207623][T14472] ? __might_fault+0xb0/0x130 [ 409.207658][T14472] should_fail_ex+0x414/0x560 [ 409.207688][T14472] _copy_from_user+0x2d/0xb0 [ 409.207713][T14472] do_sock_getsockopt+0x17d/0x450 [ 409.207731][T14472] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.207756][T14472] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 409.207773][T14472] ? do_syscall_64+0x20/0x3b0 [ 409.207807][T14472] __x64_sys_getsockopt+0x1a5/0x250 [ 409.207824][T14472] ? do_syscall_64+0x20/0x3b0 [ 409.207848][T14472] ? do_syscall_64+0x20/0x3b0 [ 409.207875][T14472] do_syscall_64+0xfa/0x3b0 [ 409.207896][T14472] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.207917][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.207934][T14472] ? clear_bhb_loop+0x60/0xb0 [ 409.207955][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.207977][T14472] RIP: 0033:0x7f963298ebe9 [ 409.207993][T14472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.208009][T14472] RSP: 002b:00007f963381c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 409.208031][T14472] RAX: ffffffffffffffda RBX: 00007f9632bb5fa0 RCX: 00007f963298ebe9 [ 409.208044][T14472] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000004 [ 409.208055][T14472] RBP: 00007f963381c090 R08: 0000200000000180 R09: 0000000000000000 [ 409.208066][T14472] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 409.208080][T14472] R13: 00007f9632bb6038 R14: 00007f9632bb5fa0 R15: 00007ffead3950e8 [ 409.208109][T14472] [ 409.461613][T14485] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 409.745082][T14505] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 409.754802][T14505] __nla_validate_parse: 88 callbacks suppressed [ 409.754821][T14505] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2410'. [ 409.793093][T14504] tipc: Enabling of bearer rejected, already enabled [ 409.824775][T14505] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 409.839038][T14505] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2410'. [ 409.872882][T14509] tipc: Enabling of bearer rejected, already enabled [ 409.893823][T14510] netlink: 'syz.1.2412': attribute type 10 has an invalid length. [ 409.930500][T14510] team0: Port device 0! added [ 409.942483][T14510] netlink: 'syz.1.2412': attribute type 10 has an invalid length. [ 409.975708][T14510] team0: Port device 0! removed [ 410.136471][T14524] block nbd47: server does not support multiple connections per device. [ 410.153951][T14524] block nbd47: shutting down sockets [ 410.177236][T14531] netlink: 'syz.4.2419': attribute type 8 has an invalid length. [ 410.252872][T14526] FAULT_INJECTION: forcing a failure. [ 410.252872][T14526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.272757][T14526] CPU: 1 UID: 0 PID: 14526 Comm: syz.1.2418 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 410.272785][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.272796][T14526] Call Trace: [ 410.272803][T14526] [ 410.272812][T14526] dump_stack_lvl+0x189/0x250 [ 410.272836][T14526] ? __pfx____ratelimit+0x10/0x10 [ 410.272860][T14526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.272878][T14526] ? __pfx__printk+0x10/0x10 [ 410.272913][T14526] should_fail_ex+0x414/0x560 [ 410.272944][T14526] _copy_to_user+0x31/0xb0 [ 410.272970][T14526] xsk_getsockopt+0x7a8/0x870 [ 410.272999][T14526] ? __pfx_xsk_getsockopt+0x10/0x10 [ 410.273026][T14526] ? __lock_acquire+0xab9/0xd20 [ 410.273076][T14526] ? __might_fault+0xb0/0x130 [ 410.273118][T14526] ? __pfx_xsk_getsockopt+0x10/0x10 [ 410.273141][T14526] do_sock_getsockopt+0x372/0x450 [ 410.273162][T14526] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 410.273181][T14526] ? __fget_files+0x3a0/0x420 [ 410.273197][T14526] ? __fget_files+0x2a/0x420 [ 410.273220][T14526] __x64_sys_getsockopt+0x1a5/0x250 [ 410.273246][T14526] do_syscall_64+0xfa/0x3b0 [ 410.273269][T14526] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.273290][T14526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.273306][T14526] ? clear_bhb_loop+0x60/0xb0 [ 410.273335][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.273352][T14526] RIP: 0033:0x7f05ae58ebe9 [ 410.273368][T14526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.273381][T14526] RSP: 002b:00007f05af379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 410.273400][T14526] RAX: ffffffffffffffda RBX: 00007f05ae7b5fa0 RCX: 00007f05ae58ebe9 [ 410.273412][T14526] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000006 [ 410.273422][T14526] RBP: 00007f05af379090 R08: 0000200000000180 R09: 0000000000000000 [ 410.273433][T14526] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 410.273443][T14526] R13: 00007f05ae7b6038 R14: 00007f05ae7b5fa0 R15: 00007fffc12580c8 [ 410.273472][T14526] [ 410.526611][T14538] IPv6: sit3: Disabled Multicast RS [ 410.533337][T14538] sit3: entered allmulticast mode [ 410.716367][T14541] nbd47: detected capacity change from 0 to 127 [ 410.727652][ T5849] block nbd47: Receive control failed (result -32) [ 410.874992][ T30] audit: type=1800 audit(1754497420.583:7): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2426" name="memory.events" dev="tmpfs" ino=2529 res=0 errno=0 [ 411.116325][T14558] block nbd48: server does not support multiple connections per device. [ 411.125362][T14558] block nbd48: shutting down sockets [ 411.185773][T14563] lo speed is unknown, defaulting to 1000 [ 411.230880][T14563] lo speed is unknown, defaulting to 1000 [ 411.430166][T14590] vcan0: tx drop: invalid sa for name 0x0000000000000080 [ 411.522907][T14595] netlink: 'syz.3.2435': attribute type 10 has an invalid length. [ 411.586317][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'. [ 411.653704][T14599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'. [ 411.670239][T14595] team0: Device ipvlan1 failed to register rx_handler [ 411.743588][ T1036] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.763170][ T1036] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.847168][T14611] lo speed is unknown, defaulting to 1000 [ 411.854874][ T1036] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.865113][ T1036] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 411.876235][T14616] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002 [ 411.883630][T14611] lo speed is unknown, defaulting to 1000 [ 412.002771][T14615] syzkaller1: entered promiscuous mode [ 412.015709][T14615] syzkaller1: entered allmulticast mode [ 412.367946][T14636] netlink: 'syz.4.2443': attribute type 8 has an invalid length. [ 412.377255][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 412.738574][T14650] !: renamed from dummy0 [ 413.345455][T14673] syzkaller1: entered promiscuous mode [ 413.364312][T14673] syzkaller1: entered allmulticast mode [ 413.375063][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'. [ 413.404857][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 413.446372][T14686] netlink: 'syz.2.2455': attribute type 20 has an invalid length. [ 413.567426][T14669] lo speed is unknown, defaulting to 1000 [ 413.648761][T14669] lo speed is unknown, defaulting to 1000 [ 413.752937][T14700] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 413.977207][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2458'. [ 414.000369][T14700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.043676][T14706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.055564][T14706] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 414.087985][T14706] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 414.540950][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2463'. [ 414.691404][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'. [ 414.707732][T14745] netlink: 'syz.2.2466': attribute type 1 has an invalid length. [ 414.730855][T14745] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 414.771335][T14747] tipc: Enabled bearer , priority 0 [ 414.793516][T14747] syzkaller0: entered promiscuous mode [ 414.801600][T14747] syzkaller0: entered allmulticast mode [ 414.829108][T14749] __nla_validate_parse: 1 callbacks suppressed [ 414.829125][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 414.831030][T14747] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 414.910530][T14754] netlink: 'syz.2.2469': attribute type 10 has an invalid length. [ 414.920976][T14754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2469'. [ 414.978834][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2469'. [ 414.979768][T14755] tipc: Resetting bearer [ 415.009463][T14754] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 415.020975][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 415.061789][T14759] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2470'. [ 415.090967][T14757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 415.110548][T14746] tipc: Resetting bearer [ 415.142180][T14746] tipc: Disabling bearer [ 415.284889][T14768] netlink: 'syz.0.2473': attribute type 83 has an invalid length. [ 415.365748][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2474'. [ 415.479284][T14779] FAULT_INJECTION: forcing a failure. [ 415.479284][T14779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.515510][T14779] CPU: 0 UID: 0 PID: 14779 Comm: syz.0.2476 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 415.515539][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.515550][T14779] Call Trace: [ 415.515558][T14779] [ 415.515566][T14779] dump_stack_lvl+0x189/0x250 [ 415.515590][T14779] ? __pfx____ratelimit+0x10/0x10 [ 415.515614][T14779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.515632][T14779] ? __pfx__printk+0x10/0x10 [ 415.515653][T14779] ? __might_fault+0xb0/0x130 [ 415.515689][T14779] should_fail_ex+0x414/0x560 [ 415.515720][T14779] _copy_from_user+0x2d/0xb0 [ 415.515743][T14779] do_ipv6_setsockopt+0x23e/0x2eb0 [ 415.515778][T14779] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 415.515812][T14779] ? get_pid_task+0x20/0x1f0 [ 415.515829][T14779] ? aa_label_sk_perm+0x413/0x560 [ 415.515852][T14779] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 415.515883][T14779] ? vfs_write+0x8d8/0xa90 [ 415.515909][T14779] ? __pfx___might_resched+0x10/0x10 [ 415.515943][T14779] ? __lock_acquire+0xab9/0xd20 [ 415.515974][T14779] ipv6_setsockopt+0x59/0x170 [ 415.516007][T14779] rawv6_setsockopt+0x23b/0x5b0 [ 415.516033][T14779] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 415.516053][T14779] ? aa_sock_opt_perm+0x74/0x110 [ 415.516075][T14779] ? sock_common_setsockopt+0x36/0xc0 [ 415.516098][T14779] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 415.516123][T14779] do_sock_setsockopt+0x17c/0x1b0 [ 415.516146][T14779] __x64_sys_setsockopt+0x13f/0x1b0 [ 415.516169][T14779] do_syscall_64+0xfa/0x3b0 [ 415.516192][T14779] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.516215][T14779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.516232][T14779] ? clear_bhb_loop+0x60/0xb0 [ 415.516253][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.516269][T14779] RIP: 0033:0x7f963298ebe9 [ 415.516285][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.516299][T14779] RSP: 002b:00007f963381c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 415.516320][T14779] RAX: ffffffffffffffda RBX: 00007f9632bb5fa0 RCX: 00007f963298ebe9 [ 415.516333][T14779] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000003 [ 415.516344][T14779] RBP: 00007f963381c090 R08: 0000000000000004 R09: 0000000000000000 [ 415.516355][T14779] R10: 0000200000fcb000 R11: 0000000000000246 R12: 0000000000000001 [ 415.516367][T14779] R13: 00007f9632bb6038 R14: 00007f9632bb5fa0 R15: 00007ffead3950e8 [ 415.516397][T14779] [ 416.149646][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2479'. [ 416.311981][T14807] lo speed is unknown, defaulting to 1000 [ 416.374837][T14806] lo speed is unknown, defaulting to 1000 [ 416.386431][T14814] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2483'. [ 416.392444][T14807] lo speed is unknown, defaulting to 1000 [ 416.424885][T14806] lo speed is unknown, defaulting to 1000 [ 416.577855][T14826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2485'. [ 416.723046][T14816] lo speed is unknown, defaulting to 1000 [ 416.812930][T14829] block nbd48: shutting down sockets [ 416.883092][T14816] lo speed is unknown, defaulting to 1000 [ 417.100434][T14833] netlink: 'syz.1.2488': attribute type 8 has an invalid length. [ 417.108483][T14836] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2489'. [ 417.798631][T14871] geneve5: entered promiscuous mode [ 417.804164][T14871] geneve5: entered allmulticast mode [ 417.814444][ T6656] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 417.877010][T14870] block nbd48: server does not support multiple connections per device. [ 417.885653][ T6656] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 417.895288][ T6656] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 417.925022][T14870] block nbd48: shutting down sockets [ 417.930705][ T6656] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.008632][T14879] syz_tun: entered promiscuous mode [ 418.026785][T14879] macvtap1: entered promiscuous mode [ 418.040170][T14879] syz_tun: left promiscuous mode [ 418.151609][T14888] dvmrp1: entered allmulticast mode [ 418.169842][T14888] dvmrp1: left allmulticast mode [ 418.421280][T14904] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 418.509477][T14908] netlink: 'syz.2.2504': attribute type 2 has an invalid length. [ 418.548895][T14908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.797658][T14921] netlink: 'syz.1.2510': attribute type 15 has an invalid length. [ 418.808257][T14921] netlink: 'syz.1.2510': attribute type 18 has an invalid length. [ 419.032979][ T55] block nbd0: Possible stuck request ffff8880258ae000: control (read@0,4096B). Runtime 330 seconds [ 419.354996][T14952] 8021q: VLANs not supported on wg0 [ 419.364520][T14950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.372058][T14950] IPv6: NLM_F_CREATE should be set when creating new route [ 419.379576][T14950] IPv6: NLM_F_CREATE should be set when creating new route [ 419.614492][T14964] netlink: 'syz.3.2520': attribute type 30 has an invalid length. [ 419.724523][T14973] netlink: 'syz.0.2525': attribute type 2 has an invalid length. [ 419.755441][T14973] netlink: 'syz.0.2525': attribute type 8 has an invalid length. [ 419.992825][T14999] bond0: left promiscuous mode [ 420.031536][T14999] bridge3: left promiscuous mode [ 420.292509][T15025] __nla_validate_parse: 27 callbacks suppressed [ 420.292528][T15025] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2536'. [ 420.325344][T15030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2535'. [ 420.370730][T15030] netlink: 'syz.4.2535': attribute type 4 has an invalid length. [ 420.390338][T15025] geneve4: entered promiscuous mode [ 420.402281][ T1036] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.472058][ T1036] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.522439][T15004] block nbd48: server does not support multiple connections per device. [ 420.541082][ T1036] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.563873][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2538'. [ 420.573121][ T1036] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.585429][T15004] block nbd48: shutting down sockets [ 420.805643][T10620] hid-generic 0005:15C2:0000.0003: item fetching failed at offset 0/1 [ 420.843464][T15049] lo speed is unknown, defaulting to 1000 [ 420.846441][T10620] hid-generic 0005:15C2:0000.0003: probe with driver hid-generic failed with error -22 [ 420.851195][T15049] lo speed is unknown, defaulting to 1000 [ 420.871922][T15050] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2540'. [ 421.245464][T15051] lo speed is unknown, defaulting to 1000 [ 421.258223][T15051] lo speed is unknown, defaulting to 1000 [ 422.178595][T15086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2548'. [ 422.315101][T15086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2548'. [ 422.687475][T15105] block nbd48: server does not support multiple connections per device. [ 422.716369][T15105] block nbd48: shutting down sockets [ 422.772861][T15108] sctp: [Deprecated]: syz.1.2556 (pid 15108) Use of int in maxseg socket option. [ 422.772861][T15108] Use struct sctp_assoc_value instead [ 423.054381][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 423.102826][T15121] block nbd48: server does not support multiple connections per device. [ 423.179261][T15121] block nbd48: shutting down sockets [ 423.220302][T15130] netlink: 'syz.1.2560': attribute type 11 has an invalid length. [ 423.319202][T15121] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 423.339948][T15121] syzkaller1: linktype set to 778 [ 423.423997][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2564'. [ 423.622525][T15148] lo speed is unknown, defaulting to 1000 [ 423.644282][T15148] lo speed is unknown, defaulting to 1000 [ 423.683623][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 423.862131][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 423.892085][T15161] netlink: 'syz.3.2567': attribute type 8 has an invalid length. [ 424.314669][T15175] vlan2: entered promiscuous mode [ 424.350823][T15175] bridge0: entered promiscuous mode [ 424.424381][T15179] tipc: Failed to remove unknown binding: 66,1,1/3008234757:1807208245/1807208247 [ 424.579236][T15179] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 424.849957][T15188] lo speed is unknown, defaulting to 1000 [ 425.156034][T15188] lo speed is unknown, defaulting to 1000 [ 425.161366][T15203] bond0: (slave rose0): Enslaving as an active interface with an up link [ 425.171786][T15208] tipc: Enabling of bearer rejected, already enabled [ 425.861355][T15241] __nla_validate_parse: 1 callbacks suppressed [ 425.861372][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 425.974816][T15246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2590'. [ 426.146768][T15235] veth0_to_bond: left allmulticast mode [ 426.157798][T15235] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 426.165787][T15235] gtp0: left allmulticast mode [ 426.175326][T15256] netlink: zone id is out of range [ 426.192686][T15235] gtp1: left promiscuous mode [ 426.202330][T15256] netlink: zone id is out of range [ 426.222434][T15256] netlink: zone id is out of range [ 426.232571][T15256] netlink: zone id is out of range [ 426.250439][T15256] netlink: zone id is out of range [ 426.263506][T15256] netlink: zone id is out of range [ 426.269528][T15235] geneve4: left promiscuous mode [ 426.279268][T15233] tipc: Enabling of bearer rejected, already enabled [ 426.280226][T15256] netlink: zone id is out of range [ 426.308370][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 426.335370][T15256] netlink: zone id is out of range [ 426.348083][T15256] netlink: zone id is out of range [ 426.363778][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.395147][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 426.453604][T15256] netlink: zone id is out of range [ 426.510786][ T1036] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.531788][ T1036] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 426.559654][ T1036] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.569738][ T1036] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 426.588311][ T1036] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 426.609014][ T1036] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 426.632842][T15251] lo speed is unknown, defaulting to 1000 [ 426.640731][T15251] lo speed is unknown, defaulting to 1000 [ 426.898731][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2596'. [ 427.023942][T15272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 427.040314][T15275] macvlan3: entered promiscuous mode [ 427.046584][T15275] macvlan3: entered allmulticast mode [ 427.053548][T15275] bond0: entered allmulticast mode [ 427.059185][T15275] bridge3: entered allmulticast mode [ 427.064500][T15275] bond0: entered promiscuous mode [ 427.069900][T15275] bridge3: entered promiscuous mode [ 427.090741][T15275] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 427.117125][T15275] bond5: (slave macvlan3): Enslaving as an active interface with an up link [ 427.164677][T15272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2596'. [ 427.193871][T15275] ªªªªª»: renamed from vxcan1 [ 427.472536][T15295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 427.528720][T15303] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2606'. [ 427.667325][T15303] nbd48: detected capacity change from 0 to 875674160 [ 427.948597][T15294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.967335][ T5849] block nbd48: Receive control failed (result -32) [ 428.032868][T15318] netlink: 'syz.2.2607': attribute type 3 has an invalid length. [ 428.118149][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 428.171477][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 428.360576][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 428.414099][T15337] Unsupported ieee802154 address type: 0 [ 428.591552][T15349] netlink: 'syz.4.2616': attribute type 28 has an invalid length. [ 428.608550][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 429.390559][T15368] syzkaller0: entered promiscuous mode [ 429.397573][T15368] syzkaller0: entered allmulticast mode [ 429.470125][T15375] netlink: 'syz.0.2626': attribute type 4 has an invalid length. [ 429.742605][T15397] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 429.763385][T15397] syzkaller1: linktype set to 6 [ 430.022207][T15415] netlink: 'syz.2.2638': attribute type 1 has an invalid length. [ 430.067490][T15415] 8021q: adding VLAN 0 to HW filter on device bond6 [ 430.130846][T15419] lo speed is unknown, defaulting to 1000 [ 430.139908][T15419] lo speed is unknown, defaulting to 1000 [ 430.732025][T15428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 430.930742][T15441] syz.4.2645: vmalloc error: size 5758976, failed to allocated page array size 11248, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 430.963159][T15441] CPU: 0 UID: 0 PID: 15441 Comm: syz.4.2645 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 430.963186][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.963197][T15441] Call Trace: [ 430.963204][T15441] [ 430.963213][T15441] dump_stack_lvl+0x189/0x250 [ 430.963237][T15441] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 430.963261][T15441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.963279][T15441] ? __pfx__printk+0x10/0x10 [ 430.963300][T15441] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 430.963320][T15441] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 430.963347][T15441] warn_alloc+0x214/0x310 [ 430.963372][T15441] ? __pfx_warn_alloc+0x10/0x10 [ 430.963399][T15441] ? __get_vm_area_node+0x28f/0x300 [ 430.963425][T15441] ? bpf_check+0x1a5/0x1d2d0 [ 430.963449][T15441] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 430.963469][T15441] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 430.963509][T15441] ? __kasan_kmalloc_large+0x85/0xa0 [ 430.963536][T15441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 430.963552][T15441] ? rcu_is_watching+0x15/0xb0 [ 430.963575][T15441] ? bpf_check+0xf9/0x1d2d0 [ 430.963594][T15441] ? rcu_is_watching+0x15/0xb0 [ 430.963616][T15441] ? bpf_check+0xf9/0x1d2d0 [ 430.963634][T15441] ? bpf_check+0x1a5/0x1d2d0 [ 430.963653][T15441] vzalloc_noprof+0xb2/0xf0 [ 430.963670][T15441] ? bpf_check+0x1a5/0x1d2d0 [ 430.963691][T15441] bpf_check+0x1a5/0x1d2d0 [ 430.963709][T15441] ? page_table_check_set+0x18d/0x730 [ 430.963737][T15441] ? __handle_mm_fault+0x3cd2/0x5620 [ 430.963766][T15441] ? __handle_mm_fault+0x3ce3/0x5620 [ 430.963796][T15441] ? css_rstat_updated+0x1a5/0xca0 [ 430.963826][T15441] ? __pfx_css_rstat_updated+0x10/0x10 [ 430.963864][T15441] ? count_memcg_event_mm+0x21/0x260 [ 430.963890][T15441] ? __up_read+0x280/0x680 [ 430.963917][T15441] ? __lock_acquire+0xab9/0xd20 [ 430.963946][T15441] ? __pfx_bpf_check+0x10/0x10 [ 430.963966][T15441] ? ktime_get_with_offset+0x8c/0x2a0 [ 430.963994][T15441] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 430.964013][T15441] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.964036][T15441] ? ktime_get_with_offset+0x8c/0x2a0 [ 430.964053][T15441] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 430.964073][T15441] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 430.964103][T15441] ? __asan_memset+0x22/0x50 [ 430.964124][T15441] ? bpf_obj_name_cpy+0x194/0x1e0 [ 430.964140][T15441] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 430.964161][T15441] ? security_bpf_prog_load+0x7f/0x310 [ 430.964191][T15441] bpf_prog_load+0x1318/0x1930 [ 430.964227][T15441] ? __pfx_bpf_prog_load+0x10/0x10 [ 430.964275][T15441] ? bpf_lsm_bpf+0x9/0x20 [ 430.964295][T15441] ? security_bpf+0x7e/0x300 [ 430.964317][T15441] __sys_bpf+0x528/0x870 [ 430.964342][T15441] ? __pfx___sys_bpf+0x10/0x10 [ 430.964385][T15441] ? rcu_is_watching+0x15/0xb0 [ 430.964418][T15441] __x64_sys_bpf+0x7c/0x90 [ 430.964440][T15441] do_syscall_64+0xfa/0x3b0 [ 430.964462][T15441] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.964483][T15441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.964500][T15441] ? clear_bhb_loop+0x60/0xb0 [ 430.964521][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.964538][T15441] RIP: 0033:0x7f9768f8ebe9 [ 430.964554][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.964569][T15441] RSP: 002b:00007f9769e58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.964589][T15441] RAX: ffffffffffffffda RBX: 00007f97691b5fa0 RCX: 00007f9768f8ebe9 [ 430.964602][T15441] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 430.964613][T15441] RBP: 00007f9769011e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.964624][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.964635][T15441] R13: 00007f97691b6038 R14: 00007f97691b5fa0 R15: 00007ffedc7a61d8 [ 430.964666][T15441] [ 430.980828][T15445] pim6reg: entered allmulticast mode [ 430.988505][T15441] Mem-Info: [ 431.028203][T15445] pim6reg: left allmulticast mode [ 431.053217][T15441] active_anon:7791 inactive_anon:0 isolated_anon:0 [ 431.053217][T15441] active_file:2077 inactive_file:39956 isolated_file:0 [ 431.053217][T15441] unevictable:768 dirty:351 writeback:0 [ 431.053217][T15441] slab_reclaimable:12633 slab_unreclaimable:138356 [ 431.053217][T15441] mapped:29759 shmem:1358 pagetables:1018 [ 431.053217][T15441] sec_pagetables:0 bounce:0 [ 431.053217][T15441] kernel_misc_reclaimable:0 [ 431.053217][T15441] free:1281379 free_pcp:14113 free_cma:0 [ 431.419288][T15441] Node 0 active_anon:31164kB inactive_anon:0kB active_file:8308kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119036kB dirty:1404kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14188kB pagetables:3808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 431.453350][T15441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 431.486727][T15441] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.516777][T15441] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 431.522663][T15441] Node 0 DMA32 free:1175348kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31116kB inactive_anon:0kB active_file:8308kB inactive_file:157808kB unevictable:1536kB writepending:1404kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:43580kB local_pcp:18216kB free_cma:0kB [ 431.564428][T15441] lowmem_reserve[]: 0 0 1 1 1 [ 431.569750][T15441] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 431.599693][T15441] lowmem_reserve[]: 0 0 0 0 0 [ 431.604555][T15441] Node 1 Normal free:3902980kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16704kB local_pcp:8864kB free_cma:0kB [ 431.636807][T15441] lowmem_reserve[]: 0 0 0 0 0 [ 431.641555][T15441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 431.654665][T15441] Node 0 DMA32: 426*4kB (UME) 301*8kB (UME) 230*16kB (ME) 661*32kB (UME) 784*64kB (UME) 194*128kB (UME) 65*256kB (UME) 32*512kB (UM) 12*1024kB (UM) 5*2048kB (UM) 248*4096kB (UM) = 1175312kB [ 431.679929][T15455] tipc: Enabling of bearer rejected, failed to enable media [ 431.715877][T15447] lo speed is unknown, defaulting to 1000 [ 431.742433][T15447] lo speed is unknown, defaulting to 1000 [ 431.764768][T15441] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 431.821606][T15441] Node 1 Normal: 209*4kB (UME) 54*8kB (UME) 39*16kB (UME) 133*32kB (UME) 52*64kB (UME) 10*128kB (UME) 4*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3902980kB [ 431.871208][T15441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.927701][T15441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.937837][T15441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.947469][T15441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.958138][T15441] 43388 total pagecache pages [ 431.962952][T15441] 0 pages in swap cache [ 431.989739][T15441] Free swap = 124996kB [ 432.036843][T15441] Total swap = 124996kB [ 432.041147][T15441] 2097051 pages RAM [ 432.061023][T15441] 0 pages HighMem/MovableOnly [ 432.074648][T15441] 424872 pages reserved [ 432.097944][T15441] 0 pages cma reserved [ 432.109910][T15465] __nla_validate_parse: 6 callbacks suppressed [ 432.109928][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 432.160250][T15466] netlink: 'syz.0.2650': attribute type 12 has an invalid length. [ 432.176581][T15466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2650'. [ 432.198095][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 432.433626][T15474] lo speed is unknown, defaulting to 1000 [ 432.494340][T15474] lo speed is unknown, defaulting to 1000 [ 433.020534][T15490] netlink: 'syz.1.2657': attribute type 15 has an invalid length. [ 433.026439][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 433.028760][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2657'. [ 433.414396][T15507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2660'. [ 433.456419][T15505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.519542][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 433.985765][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2663'. [ 434.937818][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 434.986992][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 435.076434][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 435.145149][T15550] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.161179][T15550] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.344262][T15550] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.359875][T15550] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.461262][T15550] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.493710][T15550] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.572583][T15550] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.616779][T15550] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.701393][T15574] siw: device registration error -23 [ 435.711845][T15574] wg1: entered promiscuous mode [ 435.718380][T15574] wg1: entered allmulticast mode [ 435.781119][ T6651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.794872][ T6651] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 435.851647][ T6651] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.869208][T15581] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 435.881545][ T6651] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 435.922928][T15574] block nbd49: server does not support multiple connections per device. [ 435.954428][T15574] block nbd49: shutting down sockets [ 435.976882][ T6651] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.000972][ T6651] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 436.030280][T15588] syz.2.2679 uses old SIOCAX25GETINFO [ 436.053161][T15581] bond6: entered promiscuous mode [ 436.058760][T15581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 436.109746][T15583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.121455][T15583] bond6: (slave bond7): making interface the new active one [ 436.129477][T15583] bond7: entered promiscuous mode [ 436.135763][T15583] bond6: (slave bond7): Enslaving as an active interface with an up link [ 436.160240][ T6651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.183512][ T6651] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 436.328532][T15596] syzkaller1: entered promiscuous mode [ 436.339813][T15596] syzkaller1: entered allmulticast mode [ 436.350691][T15599] syzkaller0: Caught tx_queue_len zero misconfig [ 436.370138][T15599] tipc: Enabling of bearer rejected, already enabled [ 436.372553][T15597] GUP no longer grows the stack in syz.2.2681 (15597): 200000002000-20000000a000 (200000001000) [ 436.394198][T15597] CPU: 0 UID: 0 PID: 15597 Comm: syz.2.2681 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 436.394227][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.394238][T15597] Call Trace: [ 436.394246][T15597] [ 436.394254][T15597] dump_stack_lvl+0x189/0x250 [ 436.394283][T15597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.394303][T15597] ? __pfx__printk+0x10/0x10 [ 436.394322][T15597] ? find_vma+0xe7/0x160 [ 436.394359][T15597] __get_user_pages+0x2a60/0x30b0 [ 436.394418][T15597] ? __pfx___get_user_pages+0x10/0x10 [ 436.394452][T15597] __gup_longterm_locked+0xd66/0x15b0 [ 436.394482][T15597] ? try_grab_folio_fast+0x35b/0x4f0 [ 436.394512][T15597] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 436.394542][T15597] gup_fast_fallback+0x1cd4/0x2260 [ 436.394562][T15597] ? is_bpf_text_address+0x26/0x2b0 [ 436.394625][T15597] ? __pfx_gup_fast_fallback+0x10/0x10 [ 436.394645][T15597] ? stack_trace_save+0x9c/0xe0 [ 436.394667][T15597] ? stack_depot_save_flags+0x40/0x900 [ 436.394694][T15597] ? pin_user_pages_fast+0x4d/0xb0 [ 436.394718][T15597] iov_iter_extract_pages+0x35a/0x5e0 [ 436.394749][T15597] extract_iter_to_sg+0xe46/0x24e0 [ 436.394789][T15597] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 436.394826][T15597] ? __asan_memset+0x22/0x50 [ 436.394850][T15597] af_alg_get_rsgl+0x436/0x810 [ 436.394895][T15597] aead_recvmsg+0x4cc/0x13f0 [ 436.394913][T15597] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.394946][T15597] ? trace_sched_exit_tp+0x38/0x120 [ 436.394985][T15597] ? __pfx_aead_recvmsg+0x10/0x10 [ 436.395008][T15597] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 436.395030][T15597] ? __pfx_aead_recvmsg+0x10/0x10 [ 436.395050][T15597] sock_recvmsg_nosec+0x186/0x1c0 [ 436.395076][T15597] ____sys_recvmsg+0x3aa/0x460 [ 436.395106][T15597] ? __pfx_____sys_recvmsg+0x10/0x10 [ 436.395149][T15597] ? import_iovec+0x74/0xa0 [ 436.395177][T15597] ___sys_recvmsg+0x1b5/0x510 [ 436.395204][T15597] ? __pfx____sys_recvmsg+0x10/0x10 [ 436.395260][T15597] ? __might_fault+0xb0/0x130 [ 436.395289][T15597] do_recvmmsg+0x307/0x770 [ 436.395318][T15597] ? __pfx_do_recvmmsg+0x10/0x10 [ 436.395334][T15597] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 436.395373][T15597] ? __pfx_do_futex+0x10/0x10 [ 436.395412][T15597] __x64_sys_recvmmsg+0x190/0x240 [ 436.395436][T15597] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 436.395454][T15597] ? rcu_is_watching+0x15/0xb0 [ 436.395485][T15597] ? do_syscall_64+0xbe/0x3b0 [ 436.395514][T15597] do_syscall_64+0xfa/0x3b0 [ 436.395536][T15597] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.395559][T15597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.395576][T15597] ? clear_bhb_loop+0x60/0xb0 [ 436.395598][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.395614][T15597] RIP: 0033:0x7ffa14d8ebe9 [ 436.395632][T15597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.395647][T15597] RSP: 002b:00007ffa15b49038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 436.395667][T15597] RAX: ffffffffffffffda RBX: 00007ffa14fb5fa0 RCX: 00007ffa14d8ebe9 [ 436.395681][T15597] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000d [ 436.395693][T15597] RBP: 00007ffa14e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 436.395703][T15597] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 436.395714][T15597] R13: 00007ffa14fb6038 R14: 00007ffa14fb5fa0 R15: 00007fff4ea23638 [ 436.395744][T15597] [ 436.413210][ T30] audit: type=1804 audit(1754497446.123:8): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2681" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2962 res=1 errno=0 [ 436.766637][ T30] audit: type=1800 audit(1754497446.133:9): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2681" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2962 res=0 errno=0 [ 437.170881][T15630] __nla_validate_parse: 9 callbacks suppressed [ 437.170899][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 437.323032][T15636] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2692'. [ 437.388126][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'. [ 437.478702][T15643] netlink: 'syz.0.2694': attribute type 12 has an invalid length. [ 437.493394][T15643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2694'. [ 438.397760][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 438.498016][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 438.631856][T15689] veth0_virt_wifi: renamed from veth0_vlan [ 438.679614][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 438.922598][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 438.956704][T15707] bond0: entered promiscuous mode [ 438.962354][T15707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.976861][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2709'. [ 438.986794][T15707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2709'. [ 439.135692][T15720] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 439.221535][T15720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.234010][T15717] netlink: 'syz.1.2712': attribute type 13 has an invalid length. [ 439.242431][T15717] netlink: 'syz.1.2712': attribute type 17 has an invalid length. [ 439.278338][T15724] bond8: (slave bridge5): making interface the new active one [ 439.293662][T15724] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 439.461234][T15717] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.468810][T15717] tipc: Resetting bearer [ 439.475549][T15717] tipc: Resetting bearer [ 439.501093][T15717] net_ratelimit: 13 callbacks suppressed [ 439.501105][T15717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.562180][T15720] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 439.643987][T11127] lo speed is unknown, defaulting to 1000 [ 439.666653][T11127] syz1: Port: 1 Link ACTIVE [ 440.887979][T15770] block nbd49: server does not support multiple connections per device. [ 440.985975][T15770] block nbd49: shutting down sockets [ 441.074343][T15772] tc_dump_action: action bad kind [ 441.264316][T15787] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.322055][T15787] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.418030][T15787] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 441.728370][T15787] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.776408][T15787] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.812218][T15787] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 442.003342][T15800] lo speed is unknown, defaulting to 1000 [ 442.027990][T15800] lo speed is unknown, defaulting to 1000 [ 442.133018][T15787] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.198125][T15787] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.282497][T15787] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 442.479568][T15787] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.535164][T15787] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.591762][T15787] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 442.920611][T15825] __nla_validate_parse: 14 callbacks suppressed [ 442.920644][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 443.209051][T15821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2735'. [ 443.235691][T15826] batadv_slave_1: entered promiscuous mode [ 443.303205][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 443.679968][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.703063][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 443.728710][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 443.808902][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.823932][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2739'. [ 443.848323][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 443.877168][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 443.903761][T15836] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 443.957121][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.993238][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 444.032301][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.134293][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.183240][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 444.239385][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.511245][T15846] bond0: left allmulticast mode [ 444.546212][T15846] bridge3: left allmulticast mode [ 444.570108][T15846] bond0: left promiscuous mode [ 444.596242][T15846] bridge3: left promiscuous mode [ 444.858633][T15843] lo speed is unknown, defaulting to 1000 [ 444.928017][T15843] lo speed is unknown, defaulting to 1000 [ 445.197080][T15856] lo speed is unknown, defaulting to 1000 [ 445.204699][T15856] lo speed is unknown, defaulting to 1000 [ 445.472842][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 448.475734][T11126] sched: DL replenish lagged too much [ 449.045954][T15887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2746'. [ 449.143426][T15887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2746'. [ 449.195556][ T55] block nbd0: Possible stuck request ffff8880258ae000: control (read@0,4096B). Runtime 360 seconds [ 449.525636][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 450.219480][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 450.379880][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 450.906536][T15928] netlink: 'syz.1.2755': attribute type 21 has an invalid length. [ 451.027920][T15928] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2755'. [ 451.099703][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 451.366974][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2758'. [ 451.562526][T15946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.612446][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2758'. [ 451.851398][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2762'. [ 452.181473][T15966] netlink: 'syz.2.2765': attribute type 4 has an invalid length. [ 452.202168][T15966] netlink: 'syz.2.2765': attribute type 4 has an invalid length. [ 453.354994][T15989] syzkaller1: entered promiscuous mode [ 453.413491][T15989] syzkaller1: entered allmulticast mode [ 453.609223][T15998] bridge0: port 1(syz_tun) entered blocking state [ 453.651556][T15998] bridge0: port 1(syz_tun) entered disabled state [ 453.689495][T15998] syz_tun: entered promiscuous mode [ 454.224969][T16014] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 454.266295][T16017] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2778'. [ 454.352795][T16017] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 454.422443][T16017] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 454.723962][T16017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 455.020233][T16036] netlink: 'syz.1.2781': attribute type 3 has an invalid length. [ 455.106018][T16036] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2781'. [ 455.637596][T16051] lo speed is unknown, defaulting to 1000 [ 455.690944][T16057] bond0: Unable to set down delay as MII monitoring is disabled [ 455.751899][T16051] lo speed is unknown, defaulting to 1000 [ 456.235373][T16053] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 456.585748][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.601624][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.610422][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.618744][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.631835][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.683823][T16067] lo speed is unknown, defaulting to 1000 [ 456.691971][T16067] lo speed is unknown, defaulting to 1000 [ 457.829253][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 458.153034][ T5841] syz_tun (unregistering): left allmulticast mode [ 458.184988][ T5841] syz_tun (unregistering): left promiscuous mode [ 458.213403][ T5841] bridge0: port 1(syz_tun) entered disabled state [ 458.313170][T16087] kthread_run failed with err -4 [ 458.467124][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'. [ 458.524615][T16110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2800'. [ 458.706827][ T51] Bluetooth: hci5: command tx timeout [ 458.794726][T16067] chnl_net:caif_netlink_parms(): no params data found [ 459.407974][T16138] 8021q: VLANs not supported on sit0 [ 459.564032][T16144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2808'. [ 460.171889][ T3537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.321308][T16067] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.332677][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2813'. [ 460.376106][T16067] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.384464][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2813'. [ 460.400068][T16067] bridge_slave_0: entered allmulticast mode [ 460.431423][T16067] bridge_slave_0: entered promiscuous mode [ 460.477526][ T3537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.539262][ T3537] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.601866][T16158] pim6reg1: entered allmulticast mode [ 460.611381][T16067] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.635825][T16067] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.673760][T16067] bridge_slave_1: entered allmulticast mode [ 460.714165][T16067] bridge_slave_1: entered promiscuous mode [ 460.789270][ T51] Bluetooth: hci5: command tx timeout [ 460.885364][ T3537] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.255548][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.314790][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.662789][T16067] team0: Port device team_slave_0 added [ 461.673583][T16067] team0: Port device team_slave_1 added [ 461.720538][T16202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.891342][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.931339][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.013076][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.117118][T16215] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2822'. [ 462.194334][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.225088][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.270711][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.732912][T16067] hsr_slave_0: entered promiscuous mode [ 462.759282][T16067] hsr_slave_1: entered promiscuous mode [ 462.787701][T16067] debugfs: 'hsr0' already exists in 'hsr' [ 462.806405][T16067] Cannot create hsr debugfs directory [ 462.827971][T16222] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2825'. [ 462.876835][ T51] Bluetooth: hci5: command tx timeout [ 463.178211][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 463.332679][T16250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2827'. [ 463.846945][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'. [ 464.174776][T16067] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.202697][T16266] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2834'. [ 464.230629][T16067] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 464.280701][T16067] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 464.435066][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 464.537240][T16263] lo speed is unknown, defaulting to 1000 [ 464.544849][T16263] lo speed is unknown, defaulting to 1000 [ 464.652436][T16067] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.717242][T16067] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 464.741045][T16067] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 464.990108][ T51] Bluetooth: hci5: command tx timeout [ 465.066794][T16067] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.112789][T16067] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 465.169067][T16067] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 465.324875][T16278] lo speed is unknown, defaulting to 1000 [ 465.401179][T16278] lo speed is unknown, defaulting to 1000 [ 465.420800][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'. [ 465.563781][T16067] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.628470][T16067] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 465.681290][T16067] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 467.568415][T16308] syzkaller1: entered promiscuous mode [ 467.580745][T16308] syzkaller1: entered allmulticast mode [ 467.943579][T16067] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 468.023307][T16067] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.110501][T16067] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 468.323028][T16067] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.457192][T16350] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2850'. [ 469.865006][T16355] macvlan3: left promiscuous mode [ 470.091783][T16067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.282767][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.380422][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.387773][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.452094][T16365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2855'. [ 470.488372][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.495619][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.581739][T16368] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2855'. [ 470.661614][T16370] netlink: 'syz.0.2856': attribute type 1 has an invalid length. [ 470.868058][T16370] 8021q: adding VLAN 0 to HW filter on device bond9 [ 471.006763][T16371] 8021q: adding VLAN 0 to HW filter on device bond9 [ 471.027519][T16371] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 471.080916][T16371] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 471.323089][T16367] bond9: (slave bridge8): Enslaving as an active interface with a down link [ 471.335430][T16368] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 471.408601][T16379] netlink: 'syz.3.2857': attribute type 1 has an invalid length. [ 471.439893][T16379] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2857'. [ 471.477838][T16381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.496671][T16379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2857'. [ 471.655324][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'. [ 471.672110][T16067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.739637][T16381] 8021q: VLANs not supported on caif0 [ 471.850343][T16390] netlink: 'syz.2.2860': attribute type 4 has an invalid length. [ 472.116590][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 472.989049][T16410] tipc: Enabling of bearer rejected, already enabled [ 473.071825][T16405] sch_fq: defrate 257 ignored. [ 473.322159][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.344307][T16422] netlink: 'syz.3.2868': attribute type 4 has an invalid length. [ 473.395420][T16424] netlink: 'syz.2.2869': attribute type 4 has an invalid length. [ 473.648174][T16429] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.958562][T16467] pim6reg1: entered promiscuous mode [ 475.014487][T16467] pim6reg1: entered allmulticast mode [ 475.037115][T16463] 8021q: VLANs not supported on nlmon0 [ 475.538573][T16479] netlink: 'syz.1.2883': attribute type 10 has an invalid length. [ 475.549846][T16067] veth0_vlan: entered promiscuous mode [ 475.616461][T16481] netlink: zone id is out of range [ 475.657391][T16481] netlink: zone id is out of range [ 475.668331][T16484] netlink: 'syz.1.2883': attribute type 10 has an invalid length. [ 475.705960][T16481] netlink: zone id is out of range [ 475.748426][T16481] netlink: zone id is out of range [ 475.757344][T16479] team0: Failed to send options change via netlink (err -105) [ 475.786330][T16481] netlink: zone id is out of range [ 475.808324][T16479] team0: Port device 0! added [ 475.834836][T16481] netlink: zone id is out of range [ 475.865480][T16067] veth1_vlan: entered promiscuous mode [ 475.905316][T16481] netlink: zone id is out of range [ 475.955702][T16484] team0: Failed to send port change of device 0! via netlink (err -105) [ 475.976745][T16481] netlink: zone id is out of range [ 476.018612][T16481] netlink: zone id is out of range [ 476.044040][T16484] team0: Failed to send options change via netlink (err -105) [ 476.062531][T16481] netlink: zone id is out of range [ 476.082203][T16484] team0: Failed to send port change of device 0! via netlink (err -105) [ 476.127331][T16484] team0: Port device 0! removed [ 476.166966][ T6656] tipc: Resetting bearer [ 476.415084][T16067] veth0_macvtap: entered promiscuous mode [ 476.498901][T16067] veth1_macvtap: entered promiscuous mode [ 476.613940][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.777217][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.897679][ T1036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.950673][ T1036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.142910][ T1036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.180473][ T1036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.240347][T16519] IPVS: Unknown mcast interface: rose0 [ 477.253826][T16518] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2893'. [ 477.720646][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2896'. [ 477.778534][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.840915][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.912220][T16535] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2897'. [ 478.147600][T16537] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 478.205223][T16537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2897'. [ 478.418070][T16549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2900'. [ 478.581450][T16528] nbd: socks must be embedded in a SOCK_ITEM attr [ 478.958893][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.012306][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.275182][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 479.287074][T16557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2902'. [ 479.592682][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 479.835597][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 479.845115][ T55] block nbd0: Possible stuck request ffff8880258ae000: control (read@0,4096B). Runtime 390 seconds [ 479.909046][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 480.120459][T16578] sctp: [Deprecated]: syz.4.2907 (pid 16578) Use of int in max_burst socket option deprecated. [ 480.120459][T16578] Use struct sctp_assoc_value instead [ 481.776438][T16602] tipc: Started in network mode [ 481.781439][T16602] tipc: Node identity ac1414aa, cluster identity 4711 [ 481.869154][T16602] tipc: Enabled bearer , priority 10 [ 482.422296][T16613] __nla_validate_parse: 2 callbacks suppressed [ 482.422313][T16613] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2917'. [ 482.685136][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.708381][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.717718][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.752447][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.762539][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.802596][ T5854] syz_tun (unregistering): left allmulticast mode [ 482.868967][T10620] tipc: Node number set to 2886997162 [ 482.906658][T16627] netlink: 'syz.4.2918': attribute type 4 has an invalid length. [ 482.939404][T16626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2919'. [ 482.979836][T16629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2919'. [ 483.153898][T16620] lo speed is unknown, defaulting to 1000 [ 483.197822][T16620] lo speed is unknown, defaulting to 1000 [ 483.754331][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 484.209798][T16620] chnl_net:caif_netlink_parms(): no params data found [ 484.865987][ T51] Bluetooth: hci2: command tx timeout [ 485.785183][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 486.313985][T16687] netlink: 'syz.0.2934': attribute type 2 has an invalid length. [ 486.672053][T16701] lo speed is unknown, defaulting to 1000 [ 486.679288][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.714747][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.732396][T16620] bridge_slave_0: entered allmulticast mode [ 486.758936][T16620] bridge_slave_0: entered promiscuous mode [ 486.794225][T16701] lo speed is unknown, defaulting to 1000 [ 486.801519][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.830501][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.859736][T16620] bridge_slave_1: entered allmulticast mode [ 486.893159][T16620] bridge_slave_1: entered promiscuous mode [ 486.953385][ T51] Bluetooth: hci2: command tx timeout [ 487.103726][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.172951][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.678015][T16620] team0: Port device team_slave_0 added [ 487.746876][T16620] team0: Port device team_slave_1 added [ 487.918502][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.925679][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.009989][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.164690][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.183002][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.231414][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.258908][T16735] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2949'. [ 488.280716][T16735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2949'. [ 488.452835][T16735] syz_tun: left allmulticast mode [ 488.502760][T16620] hsr_slave_0: entered promiscuous mode [ 488.520276][T16620] hsr_slave_1: entered promiscuous mode [ 488.553400][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 488.564658][T16620] Cannot create hsr debugfs directory [ 488.698635][T16735] lo speed is unknown, defaulting to 1000 [ 488.803955][T16737] tipc: Resetting bearer [ 488.833497][T16737] batadv_slave_1: left promiscuous mode [ 488.852650][T16737] syzkaller0: left promiscuous mode [ 488.877906][T16737] geneve5: left promiscuous mode [ 488.908036][T16737] bond0: left promiscuous mode [ 488.967412][T16735] lo speed is unknown, defaulting to 1000 [ 489.037363][ T51] Bluetooth: hci2: command tx timeout [ 489.095876][T16735] lo speed is unknown, defaulting to 1000 [ 489.296314][T16741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.326696][T16741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 489.851698][T16735] infiniband syz0: set active [ 489.858064][ T5958] lo speed is unknown, defaulting to 1000 [ 489.883809][T16735] infiniband syz0: added lo [ 489.893248][T16735] syz0: rxe_create_cq: returned err = -12 [ 489.909176][T16735] infiniband syz0: Couldn't create ib_mad CQ [ 489.915555][T16735] infiniband syz0: Couldn't open port 1 [ 489.963448][T16735] RDS/IB: syz0: added [ 489.971820][T16735] smc: adding ib device syz0 with port count 1 [ 489.982461][T16735] smc: ib device syz0 port 1 has pnetid [ 489.997171][ T5958] lo speed is unknown, defaulting to 1000 [ 490.021153][T16735] lo speed is unknown, defaulting to 1000 [ 490.481688][T16735] lo speed is unknown, defaulting to 1000 [ 490.899516][T16735] lo speed is unknown, defaulting to 1000 [ 491.113853][ T51] Bluetooth: hci2: command tx timeout [ 491.351680][T16735] lo speed is unknown, defaulting to 1000 [ 491.764060][T16735] lo speed is unknown, defaulting to 1000 [ 492.180377][T16735] lo speed is unknown, defaulting to 1000 [ 492.508718][T16741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.571208][T16741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.780124][T16741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.798852][T16741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.889088][T16735] lo speed is unknown, defaulting to 1000 [ 493.012069][T16741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.037140][T16741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.415389][T16735] lo speed is unknown, defaulting to 1000 [ 493.541201][ T3537] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.586227][ T3537] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.660053][ T6656] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.679997][ T6656] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.719562][ T6656] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.734575][ T6656] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.820049][ T6656] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.850724][ T6656] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 494.043369][T16620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 494.093975][T16620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 494.131350][T16620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 494.182979][T16620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.328078][T16735] lo speed is unknown, defaulting to 1000 [ 494.566954][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.674031][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.744980][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.752201][ T6651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.821172][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.828511][ T6651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.384522][T16743] lo speed is unknown, defaulting to 1000 [ 495.433508][T16743] lo speed is unknown, defaulting to 1000 [ 496.078514][T16777] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2959'. [ 496.245668][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2959'. [ 496.248772][T16781] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.2959'. [ 496.375107][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.598555][T16620] veth0_vlan: entered promiscuous mode [ 496.658157][T16620] veth1_vlan: entered promiscuous mode [ 496.803131][T16620] veth0_macvtap: entered promiscuous mode [ 496.843861][T16620] veth1_macvtap: entered promiscuous mode [ 496.933042][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.171959][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.205212][ T3530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.241493][ T3530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.290500][ T3530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.317064][ T3530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.427721][T16788] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 497.469048][T16787] netlink: 'syz.1.2961': attribute type 1 has an invalid length. [ 497.502879][T16787] netlink: 'syz.1.2961': attribute type 11 has an invalid length. [ 497.575004][T16787] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2961'. [ 497.676590][T16792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2961'. [ 497.735593][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2961'. [ 497.790744][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2961'. [ 497.849506][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2961'. [ 497.897351][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.966811][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.020616][T16787] bridge0: port 1(syz_tun) entered blocking state [ 498.033782][T16787] bridge0: port 1(syz_tun) entered disabled state [ 498.092769][T16787] syz_tun: entered allmulticast mode [ 498.112224][T16787] syz_tun: entered promiscuous mode [ 498.376285][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2966'. [ 498.458704][T16805] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2965'. [ 498.595596][T16801] dvmrp0: entered allmulticast mode [ 498.797607][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.898424][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.203497][T16823] netlink: 'syz.4.2969': attribute type 10 has an invalid length. [ 499.275132][T16818] lo speed is unknown, defaulting to 1000 [ 499.289857][T16823] veth0_vlan: entered allmulticast mode [ 499.348413][T16823] bridge0: port 3(veth0_vlan) entered blocking state [ 499.398298][T16823] bridge0: port 3(veth0_vlan) entered disabled state [ 499.457295][T16823] net_ratelimit: 77 callbacks suppressed [ 499.457314][T16823] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 499.559499][T16818] lo speed is unknown, defaulting to 1000 [ 499.612008][T16832] bond0: (slave wlan1): Releasing backup interface [ 499.701294][T16832] bond2: (slave bridge5): Releasing active interface [ 499.742862][T16832] bond5: (slave veth3): Releasing active interface [ 499.828336][T16832] bond6: (slave wireguard1): Releasing backup interface [ 499.869152][T16832] wireguard1: left promiscuous mode [ 499.874807][T16832] bond6: (slave wireguard2): making interface the new active one [ 499.935991][T16832] wireguard2: entered promiscuous mode [ 500.054228][T16832] bond6: (slave wireguard2): Releasing backup interface [ 500.076353][T16832] wireguard2: left promiscuous mode [ 500.130531][T16818] lo speed is unknown, defaulting to 1000 [ 500.286906][T16846] netlink: 'syz.4.2975': attribute type 4 has an invalid length. [ 501.250491][T16873] __nla_validate_parse: 2 callbacks suppressed [ 501.250508][T16873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2981'. [ 501.285435][T16874] netlink: 'syz.2.2980': attribute type 9 has an invalid length. [ 501.343073][T16874] netlink: 'syz.2.2980': attribute type 6 has an invalid length. [ 502.201976][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 502.296338][T16896] netlink: 'syz.2.2988': attribute type 12 has an invalid length. [ 502.727567][ T6656] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.736137][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 502.755695][T16896] netlink: 'syz.2.2988': attribute type 12 has an invalid length. [ 503.021258][ T6656] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.079934][ T6656] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.156211][ T6656] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.770066][T16924] lo speed is unknown, defaulting to 1000 [ 504.090713][T16937] netlink: 'syz.0.2998': attribute type 9 has an invalid length. [ 504.126280][T16937] netlink: 'syz.0.2998': attribute type 6 has an invalid length. [ 504.346573][T16924] lo speed is unknown, defaulting to 1000 [ 504.509418][T16924] lo speed is unknown, defaulting to 1000 [ 505.148040][T16951] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 505.627385][T16960] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3005'. [ 505.869926][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'. [ 506.041385][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 506.486494][T16976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3008'. [ 507.507157][ T51] Bluetooth: hci2: command tx timeout [ 507.633798][T16997] netlink: 'syz.1.3014': attribute type 1 has an invalid length. [ 508.151909][T17005] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 508.251432][T17006] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3016'. [ 508.380686][T16994] bond6 (unregistering): Released all slaves [ 508.537098][T17010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3016'. [ 508.889383][T17006] batadv2: entered promiscuous mode [ 508.914347][T17006] batadv2: entered allmulticast mode [ 508.960375][T17014] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 508.971719][T17014] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3017'. [ 509.021726][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.037799][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.048207][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.057943][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.067308][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.753903][T17017] lo speed is unknown, defaulting to 1000 [ 509.776939][T17014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.793836][T17017] lo speed is unknown, defaulting to 1000 [ 509.819955][T17017] lo speed is unknown, defaulting to 1000 [ 509.992058][ T55] block nbd0: Possible stuck request ffff8880258ae000: control (read@0,4096B). Runtime 420 seconds [ 510.371902][T17041] netlink: 'syz.2.3022': attribute type 4 has an invalid length. [ 511.110029][ T5849] Bluetooth: hci1: command tx timeout [ 511.609759][T17065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.739762][T17056] syzkaller1: entered promiscuous mode [ 511.752944][T17056] syzkaller1: entered allmulticast mode [ 512.199552][T17080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3031'. [ 512.244600][T17080] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3031'. [ 512.370040][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3032'. [ 512.399446][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3032'. [ 512.497466][T17086] netlink: 'syz.2.3033': attribute type 10 has an invalid length. [ 512.632347][T17091] netlink: 'syz.2.3033': attribute type 10 has an invalid length. [ 512.722055][T17086] team0: Port device dummy0 added [ 512.830071][T17091] team0: Port device dummy0 removed [ 512.895737][T17091] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 512.961342][T17017] chnl_net:caif_netlink_parms(): no params data found [ 513.200846][ T5849] Bluetooth: hci1: command tx timeout [ 513.269224][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3040'. [ 513.528648][T17115] syz.1.3038: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 513.551801][T17115] CPU: 0 UID: 0 PID: 17115 Comm: syz.1.3038 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 513.551829][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.551840][T17115] Call Trace: [ 513.551848][T17115] [ 513.551856][T17115] dump_stack_lvl+0x189/0x250 [ 513.551884][T17115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.551903][T17115] ? __pfx__printk+0x10/0x10 [ 513.551925][T17115] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 513.551945][T17115] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 513.551967][T17115] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 513.551990][T17115] warn_alloc+0x214/0x310 [ 513.552016][T17115] ? __pfx_warn_alloc+0x10/0x10 [ 513.552044][T17115] ? __get_vm_area_node+0x28f/0x300 [ 513.552071][T17115] ? xskq_create+0xbf/0x170 [ 513.552098][T17115] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 513.552148][T17115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 513.552173][T17115] ? __kasan_kmalloc+0x93/0xb0 [ 513.552201][T17115] vmalloc_user_noprof+0xad/0xf0 [ 513.552219][T17115] ? xskq_create+0xbf/0x170 [ 513.552241][T17115] xskq_create+0xbf/0x170 [ 513.552267][T17115] xsk_init_queue+0xb0/0x110 [ 513.552292][T17115] xsk_setsockopt+0x57b/0x8d0 [ 513.552320][T17115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.552351][T17115] ? __pfx_aa_sk_perm+0x10/0x10 [ 513.552375][T17115] ? __fget_files+0x2a/0x420 [ 513.552392][T17115] ? aa_sock_opt_perm+0x74/0x110 [ 513.552417][T17115] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 513.552436][T17115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.552459][T17115] do_sock_setsockopt+0x17c/0x1b0 [ 513.552483][T17115] __x64_sys_setsockopt+0x13f/0x1b0 [ 513.552507][T17115] do_syscall_64+0xfa/0x3b0 [ 513.552530][T17115] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.552553][T17115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.552570][T17115] ? clear_bhb_loop+0x60/0xb0 [ 513.552591][T17115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.552607][T17115] RIP: 0033:0x7f05ae58ebe9 [ 513.552625][T17115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.552640][T17115] RSP: 002b:00007f05af337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 513.552662][T17115] RAX: ffffffffffffffda RBX: 00007f05ae7b6180 RCX: 00007f05ae58ebe9 [ 513.552675][T17115] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 513.552686][T17115] RBP: 00007f05ae611e19 R08: 0000000000000004 R09: 0000000000000000 [ 513.552698][T17115] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 513.552709][T17115] R13: 00007f05ae7b6218 R14: 00007f05ae7b6180 R15: 00007fffc12580c8 [ 513.552741][T17115] [ 513.552822][T17115] Mem-Info: [ 513.842559][T17115] active_anon:7760 inactive_anon:0 isolated_anon:0 [ 513.842559][T17115] active_file:2094 inactive_file:39994 isolated_file:0 [ 513.842559][T17115] unevictable:768 dirty:114 writeback:0 [ 513.842559][T17115] slab_reclaimable:12364 slab_unreclaimable:153597 [ 513.842559][T17115] mapped:29702 shmem:1358 pagetables:1098 [ 513.842559][T17115] sec_pagetables:0 bounce:0 [ 513.842559][T17115] kernel_misc_reclaimable:0 [ 513.842559][T17115] free:1256974 free_pcp:24046 free_cma:0 [ 513.890506][T17115] Node 0 active_anon:31040kB inactive_anon:0kB active_file:8376kB inactive_file:159776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118808kB dirty:452kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14820kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 513.974778][T17115] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 514.009581][T17115] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.071823][T17115] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 514.085952][T17115] Node 0 DMA32 free:1112080kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31140kB inactive_anon:0kB active_file:8376kB inactive_file:157960kB unevictable:1536kB writepending:460kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:76620kB local_pcp:37468kB free_cma:0kB [ 514.168652][T17115] lowmem_reserve[]: 0 0 1 1 1 [ 514.178801][T17115] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 514.226607][T17115] lowmem_reserve[]: 0 0 0 0 0 [ 514.231588][T17115] Node 1 Normal free:3904032kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15616kB local_pcp:8032kB free_cma:0kB [ 514.263978][T17115] lowmem_reserve[]: 0 0 0 0 0 [ 514.271677][T17115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 514.285225][T17115] Node 0 DMA32: 675*4kB (UME) 328*8kB (UME) 221*16kB (UM) 91*32kB (UME) 83*64kB (ME) 129*128kB (UME) 117*256kB (UME) 40*512kB (UM) 15*1024kB (UM) 6*2048kB (UM) 244*4096kB (UM) = 1111100kB [ 514.306692][T17115] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 514.320488][T17115] Node 1 Normal: 208*4kB (UME) 54*8kB (UME) 39*16kB (UME) 158*32kB (UME) 56*64kB (UME) 10*128kB (UME) 4*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3904032kB [ 514.339871][T17115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.351856][T17115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.362456][T17115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.372720][T17115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.385198][T17115] 43443 total pagecache pages [ 514.390369][T17115] 0 pages in swap cache [ 514.394911][T17115] Free swap = 124996kB [ 514.399714][T17115] Total swap = 124996kB [ 514.405515][T17115] 2097051 pages RAM [ 514.409502][T17115] 0 pages HighMem/MovableOnly [ 514.414377][T17115] 424872 pages reserved [ 514.419278][T17115] 0 pages cma reserved [ 515.266488][ T5849] Bluetooth: hci1: command tx timeout [ 515.334925][T17146] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3046'. [ 515.407594][T17150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3046'. [ 515.486316][T17150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3046'. [ 515.692538][T17163] openvswitch: netlink: IP tunnel TTL not specified. [ 515.701261][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3049'. [ 515.747380][T17017] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.756452][T17169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3049'. [ 515.771850][T17168] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 515.799908][T17017] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.828091][T17017] bridge_slave_0: entered allmulticast mode [ 515.864838][T17017] bridge_slave_0: entered promiscuous mode [ 515.909861][T17156] lo speed is unknown, defaulting to 1000 [ 515.940441][T17017] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.980149][T17017] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.013856][T17017] bridge_slave_1: entered allmulticast mode [ 516.041831][T17017] bridge_slave_1: entered promiscuous mode [ 516.070293][T17156] lo speed is unknown, defaulting to 1000 [ 516.080804][T17156] lo speed is unknown, defaulting to 1000 [ 516.705742][T17179] gretap0: entered promiscuous mode [ 516.793497][T17179] batadv_slave_1: entered promiscuous mode [ 517.020741][T17017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.113247][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.362351][ T5849] Bluetooth: hci1: command tx timeout [ 517.511060][T17017] team0: Port device team_slave_0 added [ 517.546358][T17207] netlink: 'syz.2.3057': attribute type 11 has an invalid length. [ 517.576330][T17207] __nla_validate_parse: 7 callbacks suppressed [ 517.576348][T17207] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3057'. [ 517.721159][T17017] team0: Port device team_slave_1 added [ 517.829613][T17203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3058'. [ 518.215034][T17017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.265476][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.301657][T17017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.327809][T17218] veth1_to_bond: entered allmulticast mode [ 518.407669][T17017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.422951][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.514151][T17017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.582068][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 518.982361][T17218] bond0: (slave bond_slave_1): Releasing backup interface [ 519.488898][T17017] hsr_slave_0: entered promiscuous mode [ 519.522199][T17017] hsr_slave_1: entered promiscuous mode [ 519.547098][T17017] debugfs: 'hsr0' already exists in 'hsr' [ 519.575938][T17017] Cannot create hsr debugfs directory [ 519.635047][T17230] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 519.965018][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 520.704768][T17017] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 520.778268][T17017] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 521.114475][T17017] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 521.166769][T17017] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 521.323537][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3076'. [ 521.491058][T17017] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 521.541058][T17017] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 521.658116][T17278] macsec1: entered promiscuous mode [ 521.671500][T17278] team0: entered promiscuous mode [ 521.680611][T17278] macsec1: entered allmulticast mode [ 521.705965][T17278] team0: entered allmulticast mode [ 521.717461][T17278] team0: Device macsec1 is already an upper device of the team interface [ 521.756482][T17278] team0: left allmulticast mode [ 521.763386][T17278] team0: left promiscuous mode [ 521.861967][T17290] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 521.902711][T17017] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 521.936156][T17017] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 521.999509][T17291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3079'. [ 522.090273][T17294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3080'. [ 522.660132][T17017] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 522.750352][T17017] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.789399][T17017] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.888183][T17017] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.500286][T17017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.672031][T17017] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.848764][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 524.468513][T17348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3094'. [ 524.851969][T17357] netlink: 'syz.4.3095': attribute type 5 has an invalid length. [ 525.417504][T17365] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3096'. [ 525.440908][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.448131][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.478246][T17365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.547109][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.554980][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.701994][T17017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.754859][T17377] netlink: 'syz.2.3098': attribute type 8 has an invalid length. [ 525.818713][T17377] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3098'. [ 526.118956][T17382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 526.137237][T17017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.240479][T17017] veth0_vlan: entered promiscuous mode [ 526.246990][T17395] syzkaller0: entered promiscuous mode [ 526.288308][T17017] veth1_vlan: entered promiscuous mode [ 526.427729][T17017] veth0_macvtap: entered promiscuous mode [ 526.444893][T17017] veth1_macvtap: entered promiscuous mode [ 526.511932][T17017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.555377][T17017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.601726][ T3530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.633892][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.664575][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.702436][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.876991][T17413] sctp: [Deprecated]: syz.2.3108 (pid 17413) Use of int in maxseg socket option. [ 526.876991][T17413] Use struct sctp_assoc_value instead [ 526.896236][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.904086][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.991152][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.997820][T17420] ÿ: renamed from bond_slave_0 (while UP) [ 527.005628][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.023554][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3107'. [ 527.118082][T17424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3111'. [ 527.190368][T17428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3111'. [ 527.547986][T17437] lo speed is unknown, defaulting to 1000 [ 527.568832][T17437] lo speed is unknown, defaulting to 1000 [ 527.632267][T17440] syz_tun: entered promiscuous mode [ 527.639042][T17440] macvtap1: entered promiscuous mode [ 527.661694][T17440] syz_tun: left promiscuous mode [ 527.907350][T17437] lo speed is unknown, defaulting to 1000 [ 528.033808][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 528.253505][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.278961][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.288300][ T5840] syz_tun (unregistering): left allmulticast mode [ 528.294794][ T5840] syz_tun (unregistering): left promiscuous mode [ 528.301946][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.438037][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.457632][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.483515][T17461] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3121'. [ 528.489414][ T5840] bridge0: port 1(syz_tun) entered disabled state [ 528.932307][T17453] lo speed is unknown, defaulting to 1000 [ 528.967215][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'. [ 529.005328][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.168034][T17477] bridge_slave_1 (unregistering): left allmulticast mode [ 529.184696][T17477] bridge_slave_1 (unregistering): left promiscuous mode [ 529.192243][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.218285][T17453] lo speed is unknown, defaulting to 1000 [ 530.557562][ T51] Bluetooth: hci0: command tx timeout [ 531.482302][T17453] lo speed is unknown, defaulting to 1000 [ 531.734422][T17502] netlink: 'syz.0.3128': attribute type 4 has an invalid length. [ 532.084126][T17476] lo speed is unknown, defaulting to 1000 [ 532.129410][T17476] lo speed is unknown, defaulting to 1000 [ 532.137478][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 532.221807][T17476] lo speed is unknown, defaulting to 1000 [ 532.257446][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'. [ 532.266635][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 532.633895][ T51] Bluetooth: hci0: command tx timeout [ 533.060798][T17453] chnl_net:caif_netlink_parms(): no params data found [ 533.617675][T17453] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.633395][T17453] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.653545][T17453] bridge_slave_0: entered allmulticast mode [ 533.670644][T17453] bridge_slave_0: entered promiscuous mode [ 533.687663][T17453] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.695030][T17453] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.709726][T17453] bridge_slave_1: entered allmulticast mode [ 533.732270][T17453] bridge_slave_1: entered promiscuous mode [ 533.838613][T17453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.874665][T17453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.012362][T17453] team0: Port device team_slave_0 added [ 534.024144][T17453] team0: Port device team_slave_1 added [ 534.176443][T17453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.183425][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.236589][T17560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3142'. [ 534.245963][T17453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.290320][T17453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.297728][T17453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.324315][T17453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.474785][T17453] hsr_slave_0: entered promiscuous mode [ 534.481736][T17453] hsr_slave_1: entered promiscuous mode [ 534.489143][T17453] debugfs: 'hsr0' already exists in 'hsr' [ 534.494909][T17453] Cannot create hsr debugfs directory [ 534.502930][T17566] !: renamed from dummy0 (while UP) [ 534.622499][T17576] netlink: 'syz.0.3147': attribute type 10 has an invalid length. [ 534.687977][T17576] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.713188][ T51] Bluetooth: hci0: command tx timeout [ 534.726575][T17576] bond0: (slave team0): Enslaving as an active interface with an up link [ 535.096420][T17579] lo speed is unknown, defaulting to 1000 [ 535.121842][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 535.156468][T17579] lo speed is unknown, defaulting to 1000 [ 535.242833][T17453] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.276247][T17453] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 535.356588][T17579] lo speed is unknown, defaulting to 1000 [ 535.501021][T17453] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.514700][T17604] FAULT_INJECTION: forcing a failure. [ 535.514700][T17604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.537632][T17604] CPU: 0 UID: 0 PID: 17604 Comm: syz.0.3150 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 535.537661][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.537672][T17604] Call Trace: [ 535.537680][T17604] [ 535.537688][T17604] dump_stack_lvl+0x189/0x250 [ 535.537711][T17604] ? __pfx____ratelimit+0x10/0x10 [ 535.537734][T17604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.537753][T17604] ? __pfx__printk+0x10/0x10 [ 535.537774][T17604] ? __might_fault+0xb0/0x130 [ 535.537808][T17604] should_fail_ex+0x414/0x560 [ 535.537839][T17604] _copy_from_user+0x2d/0xb0 [ 535.537863][T17604] ___sys_sendmsg+0x158/0x2a0 [ 535.537886][T17604] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.537941][T17604] ? __fget_files+0x2a/0x420 [ 535.537958][T17604] ? __fget_files+0x3a0/0x420 [ 535.537991][T17604] __x64_sys_sendmsg+0x19b/0x260 [ 535.538013][T17604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.538042][T17604] ? __pfx_ksys_write+0x10/0x10 [ 535.538063][T17604] ? rcu_is_watching+0x15/0xb0 [ 535.538093][T17604] ? do_syscall_64+0xbe/0x3b0 [ 535.538120][T17604] do_syscall_64+0xfa/0x3b0 [ 535.538142][T17604] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.538164][T17604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.538181][T17604] ? clear_bhb_loop+0x60/0xb0 [ 535.538203][T17604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.538220][T17604] RIP: 0033:0x7f173e58ebe9 [ 535.538237][T17604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.538252][T17604] RSP: 002b:00007f173f359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.538274][T17604] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 535.538288][T17604] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 535.538299][T17604] RBP: 00007f173f359090 R08: 0000000000000000 R09: 0000000000000000 [ 535.538311][T17604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.538321][T17604] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffef4036638 [ 535.538352][T17604] [ 535.545954][T17453] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 535.800318][T17610] netlink: 'syz.0.3151': attribute type 9 has an invalid length. [ 535.816005][T17610] netlink: 'syz.0.3151': attribute type 6 has an invalid length. [ 535.949504][T17453] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.960396][T17453] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 536.152032][T17453] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.166644][T17453] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 536.760829][T17453] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.775273][T17453] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.798090][ T51] Bluetooth: hci0: command tx timeout [ 536.837223][T17453] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.875618][T17453] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.114072][T17648] FAULT_INJECTION: forcing a failure. [ 537.114072][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 537.143160][T17648] CPU: 0 UID: 0 PID: 17648 Comm: syz.0.3160 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 537.143186][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.143196][T17648] Call Trace: [ 537.143202][T17648] [ 537.143209][T17648] dump_stack_lvl+0x189/0x250 [ 537.143227][T17648] ? __pfx____ratelimit+0x10/0x10 [ 537.143296][T17648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.143314][T17648] ? __pfx__printk+0x10/0x10 [ 537.143341][T17648] ? __pfx___might_resched+0x10/0x10 [ 537.143368][T17648] should_fail_ex+0x414/0x560 [ 537.143400][T17648] should_failslab+0xa8/0x100 [ 537.143419][T17648] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 537.143443][T17648] ? __alloc_skb+0x112/0x2d0 [ 537.143471][T17648] __alloc_skb+0x112/0x2d0 [ 537.143498][T17648] netlink_sendmsg+0x5c6/0xb30 [ 537.143531][T17648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.143575][T17648] ? aa_sock_msg_perm+0x94/0x160 [ 537.143606][T17648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.143623][T17648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.143646][T17648] __sock_sendmsg+0x219/0x270 [ 537.143666][T17648] ____sys_sendmsg+0x505/0x830 [ 537.143686][T17648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.143714][T17648] ? import_iovec+0x74/0xa0 [ 537.143740][T17648] ___sys_sendmsg+0x21f/0x2a0 [ 537.143760][T17648] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.143816][T17648] ? __fget_files+0x2a/0x420 [ 537.143831][T17648] ? __fget_files+0x3a0/0x420 [ 537.143859][T17648] __x64_sys_sendmsg+0x19b/0x260 [ 537.143880][T17648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.143908][T17648] ? __pfx_ksys_write+0x10/0x10 [ 537.143928][T17648] ? rcu_is_watching+0x15/0xb0 [ 537.143958][T17648] ? do_syscall_64+0xbe/0x3b0 [ 537.143986][T17648] do_syscall_64+0xfa/0x3b0 [ 537.144008][T17648] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.144030][T17648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.144047][T17648] ? clear_bhb_loop+0x60/0xb0 [ 537.144067][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.144084][T17648] RIP: 0033:0x7f173e58ebe9 [ 537.144100][T17648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.144115][T17648] RSP: 002b:00007f173f359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.144136][T17648] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 537.144149][T17648] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 537.144159][T17648] RBP: 00007f173f359090 R08: 0000000000000000 R09: 0000000000000000 [ 537.144173][T17648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.144182][T17648] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffef4036638 [ 537.144211][T17648] [ 537.491699][T17453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.520392][T17453] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.554784][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.562150][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.581139][T17650] openvswitch: netlink: IP tunnel dst address not specified [ 537.619260][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.626461][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.742841][T17655] FAULT_INJECTION: forcing a failure. [ 537.742841][T17655] name failslab, interval 1, probability 0, space 0, times 0 [ 537.768613][T17453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.799432][T17655] CPU: 0 UID: 0 PID: 17655 Comm: syz.0.3163 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 537.799460][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.799471][T17655] Call Trace: [ 537.799478][T17655] [ 537.799485][T17655] dump_stack_lvl+0x189/0x250 [ 537.799508][T17655] ? __pfx____ratelimit+0x10/0x10 [ 537.799532][T17655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.799562][T17655] ? __pfx__printk+0x10/0x10 [ 537.799590][T17655] ? __pfx___might_resched+0x10/0x10 [ 537.799614][T17655] ? fs_reclaim_acquire+0x7d/0x100 [ 537.799637][T17655] should_fail_ex+0x414/0x560 [ 537.799668][T17655] should_failslab+0xa8/0x100 [ 537.799687][T17655] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 537.799711][T17655] ? __alloc_skb+0x112/0x2d0 [ 537.799740][T17655] __alloc_skb+0x112/0x2d0 [ 537.799769][T17655] netlink_ack+0x146/0xa50 [ 537.799791][T17655] ? __up_read+0x280/0x680 [ 537.799811][T17655] ? __pfx___up_read+0x10/0x10 [ 537.799838][T17655] rdma_nl_rcv+0x3c8/0x980 [ 537.799869][T17655] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 537.799885][T17655] ? __lock_acquire+0xab9/0xd20 [ 537.799929][T17655] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.799961][T17655] netlink_unicast+0x82c/0x9e0 [ 537.799992][T17655] ? __pfx_netlink_unicast+0x10/0x10 [ 537.800016][T17655] ? netlink_sendmsg+0x642/0xb30 [ 537.800037][T17655] ? skb_put+0x11b/0x210 [ 537.800057][T17655] netlink_sendmsg+0x805/0xb30 [ 537.800091][T17655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.800118][T17655] ? aa_sock_msg_perm+0x94/0x160 [ 537.800143][T17655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.800162][T17655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.800188][T17655] __sock_sendmsg+0x219/0x270 [ 537.800223][T17655] ____sys_sendmsg+0x505/0x830 [ 537.800250][T17655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.800278][T17655] ? import_iovec+0x74/0xa0 [ 537.800305][T17655] ___sys_sendmsg+0x21f/0x2a0 [ 537.800326][T17655] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.800382][T17655] ? __fget_files+0x2a/0x420 [ 537.800399][T17655] ? __fget_files+0x3a0/0x420 [ 537.800427][T17655] __x64_sys_sendmsg+0x19b/0x260 [ 537.800448][T17655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.800478][T17655] ? __pfx_ksys_write+0x10/0x10 [ 537.800499][T17655] ? rcu_is_watching+0x15/0xb0 [ 537.800530][T17655] ? do_syscall_64+0xbe/0x3b0 [ 537.800564][T17655] do_syscall_64+0xfa/0x3b0 [ 537.800587][T17655] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.800609][T17655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.800627][T17655] ? clear_bhb_loop+0x60/0xb0 [ 537.800648][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.800664][T17655] RIP: 0033:0x7f173e58ebe9 [ 537.800681][T17655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.800696][T17655] RSP: 002b:00007f173f359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.800717][T17655] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 537.800730][T17655] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 537.800742][T17655] RBP: 00007f173f359090 R08: 0000000000000000 R09: 0000000000000000 [ 537.800760][T17655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.800771][T17655] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffef4036638 [ 537.800802][T17655] [ 538.212572][T17666] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 538.224677][T17666] netlink: 11560 bytes leftover after parsing attributes in process `syz.4.3164'. [ 538.530187][T17682] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3168'. [ 538.728014][T17689] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 538.761490][T17453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.810118][T17689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.978507][T17689] bond1: (slave veth3): Enslaving as an active interface with a down link [ 539.148886][T17453] veth0_vlan: entered promiscuous mode [ 539.161396][T17688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.189941][T17453] veth1_vlan: entered promiscuous mode [ 539.298850][T17453] veth0_macvtap: entered promiscuous mode [ 539.335283][T17453] veth1_macvtap: entered promiscuous mode [ 539.388438][T17453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.415613][T17453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.474224][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.492591][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.534279][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.550597][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.735227][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.757563][T17710] netlink: 'syz.4.3175': attribute type 9 has an invalid length. [ 539.761173][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.811293][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.821508][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.939262][T17723] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3113'. [ 539.950997][T17723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3113'. [ 540.253107][T17732] ip6gre2: entered allmulticast mode [ 540.330799][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.350552][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.360377][T17736] !: renamed from dummy0 (while UP) [ 540.366769][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.405542][T17739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.436773][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.515564][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.606121][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 540.630685][ T55] block nbd0: Possible stuck request ffff8880258ae000: control (read@0,4096B). Runtime 450 seconds [ 541.019019][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 541.037538][T17744] lo speed is unknown, defaulting to 1000 [ 541.095123][T17744] lo speed is unknown, defaulting to 1000 [ 541.174067][T17744] lo speed is unknown, defaulting to 1000 [ 541.464645][T10063] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 541.476927][T10063] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 541.485365][T10063] CPU: 1 UID: 0 PID: 10063 Comm: kbnepd bnep0 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 541.497349][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.507509][T10063] RIP: 0010:klist_del+0x49/0x110 [ 541.512514][T10063] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65 [ 541.532750][T10063] RSP: 0018:ffffc9000bb97768 EFLAGS: 00010202 [ 541.538817][T10063] RAX: 000000000000000b RBX: ffff888059af9060 RCX: ffff88802d711e00 [ 541.546784][T10063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 541.554828][T10063] RBP: ffffc9000bb97890 R08: ffff88805a261b43 R09: 1ffff1100b44c368 [ 541.562878][T10063] R10: dffffc0000000000 R11: ffffed100b44c369 R12: dffffc0000000000 [ 541.570838][T10063] R13: 1ffff1100b35f20c R14: 0000000000000000 R15: ffff888028f6e750 [ 541.578889][T10063] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 541.587935][T10063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.594510][T10063] CR2: 00007fe30722ef3c CR3: 000000005eaae000 CR4: 00000000003526f0 [ 541.602495][T10063] Call Trace: [ 541.605773][T10063] [ 541.608695][T10063] device_del+0x280/0x8e0 [ 541.613016][T10063] ? _raw_spin_unlock_irq+0x2e/0x50 [ 541.618301][T10063] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 541.624386][T10063] ? __pfx_device_del+0x10/0x10 [ 541.629224][T10063] ? netdev_unregister_kobject+0x344/0x450 [ 541.635286][T10063] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 541.641698][T10063] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 541.648545][T10063] ? rtnl_net_dev_lock+0x257/0x2f0 [ 541.653671][T10063] unregister_netdevice_queue+0x33c/0x380 [ 541.659387][T10063] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 541.665751][T10063] ? rtnl_net_dev_lock+0x36/0x2f0 [ 541.670778][T10063] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 541.675911][T10063] unregister_netdev+0x1f/0x60 [ 541.680676][T10063] bnep_session+0x294d/0x2b40 [ 541.685550][T10063] ? __schedule+0x1755/0x4d30 [ 541.690308][T10063] ? __lock_acquire+0xab9/0xd20 [ 541.695181][T10063] ? __pfx_bnep_session+0x10/0x10 [ 541.700225][T10063] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 541.706221][T10063] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 541.712684][T10063] ? __pfx_woken_wake_function+0x10/0x10 [ 541.718577][T10063] ? __kthread_parkme+0x7b/0x200 [ 541.723548][T10063] ? __kthread_parkme+0x1a1/0x200 [ 541.728616][T10063] kthread+0x70e/0x8a0 [ 541.732683][T10063] ? __pfx_bnep_session+0x10/0x10 [ 541.737797][T10063] ? __pfx_kthread+0x10/0x10 [ 541.742579][T10063] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.748134][T10063] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.753420][T10063] ? __pfx_kthread+0x10/0x10 [ 541.758175][T10063] ret_from_fork+0x3fc/0x770 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 541.762859][T10063] ? __pfx_ret_from_fork+0x10/0x10 [ 541.767977][T10063] ? __switch_to_asm+0x39/0x70 [ 541.772758][T10063] ? __switch_to_asm+0x33/0x70 [ 541.777983][T10063] ? __pfx_kthread+0x10/0x10 [ 541.782755][T10063] ret_from_fork_asm+0x1a/0x30 [ 541.787552][T10063] [ 541.790587][T10063] Modules linked in: [ 541.796140][T10063] ---[ end trace 0000000000000000 ]--- [ 541.803259][T10063] RIP: 0010:klist_del+0x49/0x110 [ 541.808704][T10063] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65 [ 541.829685][T10063] RSP: 0018:ffffc9000bb97768 EFLAGS: 00010202 [ 541.836149][T10063] RAX: 000000000000000b RBX: ffff888059af9060 RCX: ffff88802d711e00 [ 541.844847][T10063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 541.857155][T10063] RBP: ffffc9000bb97890 R08: ffff88805a261b43 R09: 1ffff1100b44c368 [ 541.865422][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 541.873085][T10063] R10: dffffc0000000000 R11: ffffed100b44c369 R12: dffffc0000000000 [ 541.881633][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 541.888836][T10063] R13: 1ffff1100b35f20c R14: 0000000000000000 R15: ffff888028f6e750 [ 541.897472][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 541.905091][T10063] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 541.915655][T10063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.922487][T10063] CR2: 00007fe30722ef3c CR3: 0000000074c42000 CR4: 00000000003526f0 [ 541.931172][T10063] Kernel panic - not syncing: Fatal exception [ 541.945581][T10063] Kernel Offset: disabled [ 541.950012][T10063] Rebooting in 86400 seconds..