last executing test programs: 7m11.987295533s ago: executing program 2 (id=12356): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 7m11.878964211s ago: executing program 2 (id=12360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24000005}, 0x8081) accept4$tipc(r1, 0x0, 0x0, 0x80800) 7m11.762159173s ago: executing program 2 (id=12364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0xa, 0x6, 0x8, 0x0, 0x4, 0x8, 0x0, 0x7, 0xa, 0x7, 0x4, 0x1, 0x8, 0xa, 0x1, 0xc], 0x1, [0x80, 0x0, 0x2, 0x3, 0xa, 0x2, 0x9c72, 0x8c, 0xfc6a, 0x6, 0x7, 0x0, 0x9f, 0x8001, 0x800, 0x7], [0xf001, 0x51db, 0x3, 0x4, 0x9f00, 0x4, 0xc80a, 0x0, 0x6, 0x4a6e, 0xfff, 0x5, 0x5, 0x4, 0x9, 0x6]}}}}]}, 0x88}}, 0x0) 7m11.613367534s ago: executing program 2 (id=12367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 7m11.356974279s ago: executing program 2 (id=12373): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) accept4(r1, 0x0, 0x0, 0x0) 7m11.025004602s ago: executing program 2 (id=12382): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d1}, 0x84) 7m10.782060419s ago: executing program 32 (id=12382): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d1}, 0x84) 5m6.010972678s ago: executing program 3 (id=14355): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x50) 5m5.929406102s ago: executing program 3 (id=14357): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = epoll_create1(0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 5m5.584512798s ago: executing program 3 (id=14363): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x444ce4f844034236, 0xffffffff, 0x2000039}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44006) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m5.425531326s ago: executing program 3 (id=14366): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 5m4.550636807s ago: executing program 3 (id=14383): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000095000000000000008ad890382b07616798e766063577488205375ba0d2d1acd3df0dab9d74e00f206e6dd735b0bb1e4cd98f04958185c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m4.408809847s ago: executing program 3 (id=14386): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 4m49.377910162s ago: executing program 33 (id=14386): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m32.997455491s ago: executing program 1 (id=16523): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2m32.869019704s ago: executing program 1 (id=16527): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x71, 0x307e, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x7, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x20006, 0x7, 0x8, 0x100, 0xc0000000, 0x9, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0xc, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0xffffffff, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0x20000ec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0xfc, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x3e, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x0, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x3, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x7, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0xc, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x2, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2m32.677241713s ago: executing program 1 (id=16528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x86c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xfd, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x44, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_RATE64={0xc, 0x4, 0x8c6b7b315072a248}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0xffff185c, 0xffff, 0xaec4, 0x3, 0x3, 0x5, 0xfe42, 0x2000, 0x1, 0x5, 0x0, 0x63000, 0x7, 0x9, 0x2, 0xa051, 0x3, 0x9, 0x6, 0x1000, 0xd92c, 0x6, 0x9, 0x101, 0x97, 0x5, 0x5, 0x80000001, 0x3ff, 0xfffffffd, 0x5, 0x7ff, 0x8, 0x3e4, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x200, 0x3e, 0x3, 0x4ba, 0x0, 0x9, 0x4, 0x9, 0x4, 0x1b, 0x3, 0x400, 0x5, 0xfffffff8, 0x7, 0x4, 0x3, 0x8, 0xbc, 0x0, 0xfffffffb, 0x2, 0x5, 0x1, 0x7, 0x10001, 0x401, 0x7, 0x428, 0x5, 0x8000, 0x4, 0x101, 0xf5, 0x200, 0x4, 0x8001, 0x2, 0x7, 0x4, 0xf576, 0x78e3, 0x2, 0x4, 0x2, 0x81, 0x8ede, 0xe39, 0x4, 0x7fff, 0x20000000, 0x6, 0x9, 0x200, 0x2, 0xff, 0x41fd, 0x5, 0x1, 0xaf5, 0x9, 0x3, 0x8001, 0xfb, 0x9, 0x10001, 0x80000000, 0x4, 0xfffffff7, 0x5, 0x6, 0x6, 0x75, 0x9, 0x73, 0x4, 0x5, 0x0, 0x400, 0x3, 0xfffffff7, 0x7cd, 0x7f, 0xf, 0xa9, 0xf, 0x10001, 0x1f5, 0x200, 0x200, 0x3, 0x4, 0x80, 0x2, 0x3, 0x7, 0x7, 0x7, 0x3fa7680a, 0x6eb, 0x3, 0x2, 0x6, 0x3, 0x6, 0x1, 0x4, 0x6, 0x40, 0x67463b4f, 0x8, 0xfffff2bf, 0xf, 0x0, 0x6, 0x0, 0x100, 0x7, 0xa1b8, 0x5, 0x2, 0x8001, 0x9, 0x6, 0x1, 0x90e, 0x3, 0x8001, 0x0, 0x80000001, 0x41ca, 0xc33, 0x8001, 0x81, 0x4, 0x80000001, 0xff, 0xe4, 0x2, 0x8, 0x0, 0x9, 0x1, 0xa8, 0x3, 0x8, 0x3, 0x3, 0x8, 0x8, 0x7f, 0x8000, 0x2, 0x4, 0x4, 0x1, 0x8, 0x9, 0xae16, 0x380000, 0x6, 0x10000, 0x10, 0x1ff, 0xda61, 0x9, 0x6, 0x400, 0x7, 0x7, 0x7, 0x6d60, 0x55, 0x4, 0x5, 0xaf0, 0x8, 0x9, 0x5, 0xffffffff, 0x7, 0x9, 0x2, 0xc2f, 0x1, 0x9, 0x9ac, 0x10000, 0x8, 0x7db1, 0x7ff, 0x6, 0x1000, 0x9b5, 0xfff, 0xa6, 0x6, 0x7f, 0x7, 0xe8, 0xfc28, 0x7fff, 0x4, 0x540, 0x10, 0xf, 0x4, 0x3, 0x6, 0x6, 0x1000, 0x80000001, 0x5, 0x7ff]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x2, 0x0, 0x81}, {0xf, 0x1, 0xa7a8, 0x9, 0xa, 0x5}, 0xfffffffd, 0x10000, 0x21f0}}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136", 0xd, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m32.494543086s ago: executing program 1 (id=16533): r0 = socket(0x2, 0x80805, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @netrom, @default, @remote, @null, @default, @default]}, &(0x7f0000000080)=0x48) recvfrom(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x10002, &(0x7f00000010c0)=@rc={0x1f, @any, 0x1}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000001340)={@default, @bcast}) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f00000009c0)="80b892e1309060fa23ef40c9e55ddbfe9727b5119c", 0x15}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000001140), &(0x7f0000001180)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ip6erspan0\x00', {0x3}, 0x6}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 2m32.30481978s ago: executing program 1 (id=16535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r2, 0x4c466994d56c53cd, 0x70bd28}, 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000900)={{}, "52fba54f2c73ba8006a1c8e2f5860e64abc071c02ada91092733cb14da556a4d634912ecc570f7e9720e4a06211b89f6e0a7347cc5dc3f739a0104fec6928a5f22e713428e6df77422c56d4e460a6e021d2c7ef041037a029a501b4edc48639092a4640ad6ce92cca2cb94968f04143a236386e0a2bbe0a0bd7ce33e4aca2e3d52720ca81f0909e15bfc1bb6168250d6cf1e32bebd97faf08d5f62b8965ccf13ca70be0acd80fb6f418d04cf3b93fe38a887f320c1522080b37e0018adf27451c37be34ce8bed011e46f1f5749ee278167dbc695d4e67f8824629d0eb10399b09237613af79e4784b8b4cb91b47fc130cb9c3cf0384866b2b1a44af99f253682262d9bc92f09b6c89e494bbceae6de97d1c0c17691abfff7aea0ee696df9ddb69801fffbf5b803227511f6e6cd457c246deff5c4c652bec883caf185fc309cd787a397b941161b53aef6796642f5fdbaff886b42744f444573bd019715336bd80d8baca6c3e016e638030c97a470b64b5d5f5d8d89247de09a4afbc9872dae493280f5e64a6ae0f3c682ab823fd115d4b04c097a1e470bc079754f32dcde8ed9f9035e57316b559d8da323a353ea4fb573122a931c80aae250526c1bf30709495e3f622be39874d485dc3a55249180c519145a2dfcd9e86ae3d9b8f7315dca6f5be2402e45007136690c6d0db47015da7035c99b6653858903f5be29bf3d9e6f4cf1614e20ca258c23aedd4e38c690c8d1a9b0eceaa0773088bb31327c7c9d30ba3922fc0eece50b163ecb88dbda902cfc5be8f2013c7cb7b267c86fa32f6587c47ba660b6cc6820bc777956603624aec5f266c48d2966453ec79b02be2cbe4fb5a4d798b52ecf4be63b9ff71d239817987f4cd78154ea3d190318e7ed0ebe19946f4c22fd810defefe4501ce511248ff066fcbac28add7bf4ca817215ca3138bcc48f97e816bb2e86e7c3953d4ae1ac0678f3a05aac6ef0eea9f100ebb67ae259d81c0062ae4c4daee4e9fb1f07412dade52005e6c3393150681a841f52cfd33726bc7a3705bb4466fe90cf7982349a8d8ea0fec640f0ff96cbc4046a8484df4a2f3f961b61c3c71707c4f9bdbe7547f7401123a0404ad80a23c78b41ad185344b4f598aabab15c9fa8127a21a4fd050b80cef6e38d750a6db34d7d8c758a22635d96df9148c0346c7df97dee64603023016bdfa81c7e19c40670197b97b84bdb61bc96cd44f2048f898386e89dc39010771b6844b5257decd4a50df0fbd93119977b419085765f4e10eae62c69332b0989331275bc4991b9e0694d4c81e8ac32871f3ed1dddd8c716e31c467128530c0280603e72c5b2feb877ed8c9a922ef37b21fb6817092a6f3fa409570a101d742b765a625df8ee798aaae7029ce5073ada2cb6b70c6b7ffb4fbeb5a5635267f1f41a1dac142c634b9b6316cad085b2e9dece6d26a1cde7ea2b96e17efba39f8f174c25c17c64413198322b701c707d487596bf4bc1414cfb44579eb1cc17232679fe2f27293259435589f44d8eb1359e74caf14f754c4df16dbc102eea14ffa582cf9fc3316d2c4292aa7b8ba8cd4ad21854f8ba9cea9a2c8a155a9df0b5f8af48c4da63645747ac0c0bc000286cd7dc932732a5529c03bbcb75d80e78127d68d018a7c7e0c3d28c6167f8e1591f1f8a6afeae9dfdddc06083236ca837130ae9f994bac6737231b530d70eff125623ad598c0bc31b678426b8b7e9bfc62c0ba6e8389a00b6baeaca90be12da42ebb96478eda632733ce7ecbe8c694824e5d41d9aa5d8ef54e42abca366d0025876de344afd889f07d714c1b7c4c6eb68fb561a6918c417ed80ccc2794b95ace6a9c93d00e75240a6414f2f8027f42bf42f4b5b9a75f52b8f5466538cfc9993deb94aa5823191af82ed78b93c52719c70d85a1e7884b7554e8535aaadae02b867281992998c3145ef6dee9cbed23657630d3cced33a9f0ccf3a6b4c58f2c9656f85fa43fea25f860e8a11323d33bdea4ff8bd9fd972956b7cb342eef0a34e9f571a38b3423e11bc53e40a9a6bf946ef276c214f9128f93065ef7a00c784cb1613cbc0c0f5b2f19f15a3cb2a5d793588db5b572b2f10105715734641710986f97d693da52eac51a2681cbfcbc94f10d97d75ac4207aa04f1f71c4885e353613166afa8fc9f9e92f6bd2dab319fbfad512aab82e0b4ab2bfb64cad5cd49a551517d97eec14c5480eb1107effc767292afccf42de4a36b59b04994bac9ca773a91010b6a2588413cf196ff5fb61232a20ce646bb4ebf9fedb5dbe639042c431d522223b238dcd5ab5913266f61419f2cfe6c06a730eecf4dadba20af86deea5252c7e045b2659286505e0c25bf93f7b4858c92ac74322dc978b857dd66cc21714c9b8597226acab20ab7baa4a0ab00c238b456cfcb72d201532970369d34e784ffac723e39a499e3861b000c04162212bbdc1c7b1985d01665e65d5fc7362d795de5b337fa4251b562e3193f11c749180f0beac21dcdc67432663aa92133c22079f88d000740a64802dfb77cdbb9400ba854618992914a650668fee2dc18aebebfa74e58ec6cc06e4762e8e18e752365277d894ed709e66537a60bd280ba895cd58b866896c2599dcced3171695633bf5f76e51904cb512081d5b1bbf31ce244fa73c48af64c482ef59ce0b7f0d8e33e864d784e1b51a0ed98d9eff8d8acd74c03982533b818411fe3eef9503faed3065672133bd0285abe05a4c46fb2ac3d8b934ed7382eb5d3cd4c66311119b93dcdf214f5940fb7122ff08fed65525eadc93950cdf95947b427e0c1180ce57f7b3ef7fce93111743396a2b0864c64f6ef878241d65069cbd55614fff79f8cfae407c956a343016ce7cd322626082fb515d87f29449e144bdf82c82660c5152a8aa157d619dc913039e6bde249c8446074661f6415328f4592e97aba241930554e279a1b0e7977fc7d1783bab93a52980c2cd280bb2e6d736b88cd5455c79bdfdb62ca5b27c86030d74b94e935b764ccb775160f2fd1a8935e47edbf70f35bb2ca437fa606a53fa1684383b072bdf1963a34ac1e2c499a7fe29c0ea0c9ec7f5b3f770907c619e71361f15988a9b32aa6e9641751dc38b421655c4505047a71e54e3a61e9fa25f7cea39999329f353d5cd69fe025c73e70e5526b4326ff5ea6f17bac253007fee8188551d211709edbcfd1ce06e8329b96a3fa83e4bee635e05cbb751414ee4a8287855e1e6cdd6e5bbe7c20a34eedd5bddc1ee274fccad6a330874e8cc5e90010e64d32bc385d0e0a0caf7a5dda1453712b13cff1bdfe4dde668330422bef3eb85f6bf8dfd809eb4f6ddeac1d4d42f8cbd9b1effaace9caf19ba00b28bd52c8ec33e7adeef80d770b6df0455b476b3f191688da2b5c661170b4c85fc98798c272f2f864b0dc925d0bfa7189eacdfee311f00fafb67ca1f13324fb51b2355d034370d51a320a735a9708a815028f605cdc30b13eee8b0a13196e5648eafc7ad1041551f72206c10797642a48be3664f0623fed992689ea801e108b5cdd5863e28021d2eb45232fc7fb8e4d8f445a63b00729387940db71a03daed638401a2412c3f1620038a91e98d21dd84eb3eb5d1d006644d1b44f8de727997c6e45a8e2fd8cc00c1f7262622d355109b0af5abf4247c50e3df3c435428d754ba767471b35c7b4c1b68077fa5344cdfe1582287c48fa9da570f8d76786e633659802c0905465a396f40620a5198007741f247d5b6714cbc6afd45fcd22a1861f482b6513fc6f530d36cc6514aa71e52ae7c3eeba181805ec731ee4f5d2a25a220b94f93776ef9f07936a6fa6f4993f41cdd26d53ca76bf09927e87d21f2a626b62703a57d09db38c561824426edfc0e37c581ade2374626d4fa6a2fa2cba51a799eec4dba491ca8371599937ec264855376b09920e5262bdd19c0f0f9f233b0546870a644ad3792a81f1fa9eac472712fd8a1c52e834294db7053d23808e20584a28be0144dba3ffee145374bb43fe296c840cd763d2ef2b5f4661b1091ea10d2ee0a749976add26e04f645311126f43428fa9e2a1d9b248a66576bddabff033022a60730ec08febb3edc635b345525418e6f0964e3074960be0d107584a075600e51d7d7c4d61fe72e8216dc72f50f06d124fc895277312fef4bab2f31105256d03a32d7277740ebc4b28d0453080f64f58d7e1f340a17f0230443a9890393a7a8b25364ffe6e5cf89a8c0edd7d1ab7c6a9eb7970f7169da7a28e45b313a820acf3e0dd41166cc72e1c48fff6273beb8257eda7fd94a17a39edfb9a6b01219a176cc80ce57f278cefec0f59a697cb5017d5f757408b84a8190d0c0da80aad600dea04fd56fd96107fbdd644bae4b86916709dbe6384c94d26680ee392dbcf4b06b4e7ef6785b5da70727639bc975c205179545750c0934677bbb10490bfe897836ca3bca6a34bb2715f740f8ff8884ee6ed878d73651561a0036bad5d4cb1b0a9c1d9fe130e3c94186e42fe3cb943b7f56ba45fc5415b9ff2471d73fb4c6af857a42d758049f939a376ff1e07b10f1aa7958ffc18001ce4f783a2afb678a629090fe92c4796d7958532d56dbaa014586ee7e69c4b1bb51e215867aea0638c62e33bcdd7d8d3f45d6a0cb728b7a83e8ff49bae08e556f2efe603122ba2404947708b9f54978cac34d4a984f0239a42ff7c74c08283a488ca0b77ce1e8419032dd0423dc7f4f407eac03d5f6aed68fe19b818c82861b96ad5c712a7f2ff1c8c5247db5c32403e183a96cfafeb19db3106a60056f631da4387667f82155ce79ca2b75bedaf2ad9fb1548724a5d5bc7d2d621afbf8bf0dff0f2c7be73049da050d277a4fedc692754f376037826e14b661e34a6a93dc0f2398bea7a2f5c1cedb672989ca54bba92784bef56aa3e865a8fbd87f196df5f42829f9f1a34c9ce07e4114518088ebca7fbd0d2cdb965e508dccf000996376ccc3ce386663a3db7b1f6253d7c6552e9ad1a37f652b62ede0153f98522f4530f5bf6f34214cfba49cccdab9397b920705955bf2b1ed3576c23469890586d8295490bbe6528d42d906cd4cd7aa1bb1070f1f171648786ab9b9ec0d9d7bbbbbebf1b91af8d4e83028e85999b1da8f6194ede8088f21012ae1a3af81eaa358359d6e1a85218926a1aec3b7548736e1d4c656967237365d938bd2847a488aeb32e2abf820422447ff2680937d0c0269d068986f060b09df32df9461967530553625122648b6b74f71b02b0866cd32c9600b386ccaa0e50b3dbe3791e07fbece4060c4de8fff7906b4afe6ef2131a2bbe3d829b0503ff1319b4c25646dafecca58be3d209abd44e6b16a2a6c97680d9f7b93599604551c96476e70b69fb80e1cc2a94353d0c7f13c6b17b48f9bbadb29874acf8859a7a4132d76b48d775411383d1209d4e4d32ddce99c0125c5fa88984b5297cde90f14a868edda4b543a5513df62c261022c9cc36370f2801a405a5939482a368fbbc44773aaacd158e36cbb1db6041be768c043bc4fe6372689a498a1ad673268cfbad828db53f2ae1cd33e0a0f0fe3362ab31845d41b05617f6b676a812229a524171bf5d6b5622eff9884efecfe46cc7836880f23a85986132bf379390796cfb4b1b5000e633c73c7d3a12d7eaf70e2329906610c3702bc563d99c1edff763216241fdb702c14523b2c9b7af1d739dccb26227b7651328be7ffd990ea348c57faf5c655c6218c4fe1d2a07c8ab7f254acf71157154ad7e0288362d86bd0c711c5329424d1bf"}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a6a26ba1f8babb2da8d4ed09a57e23af50e804d90c2ef85c5503f133a5b7862432e6a2f9f66842e31c1d74dfe9a3c29c6ed61690a6d7f28d39f126b3568bb7b55936de7cdcdb9287f4eae4dcea72f35f19eaa35f85d915f6ac7241225c52f9f01874b6e762701b79719531725c80c882333402472adbda39d15c4409a54f3e66047bad411b32ae6e110df1723cb764a2596db37c200000000"], 0x48}}, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f00000000c0)) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m32.224018712s ago: executing program 1 (id=16537): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m17.178643498s ago: executing program 34 (id=16537): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m43.214015396s ago: executing program 7 (id=16905): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @random="34becffbf925", {0x5, 0x6}}, 0x28, @val={0x8c, 0x18, {0x29d, "390d6d0077b6", @long="880d1e6f8c50b6718c78800434a1bf83"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x20080050) 1m43.015738897s ago: executing program 7 (id=16907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000300)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x3f, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de179561"}]}}}}}}}, 0x0) 1m42.74754107s ago: executing program 7 (id=16908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5}, 0x8) 1m42.484208111s ago: executing program 7 (id=16910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1m42.48370518s ago: executing program 0 (id=16911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x21}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x1c5}], 0x1}}], 0x1, 0x4000001) 1m42.160329472s ago: executing program 0 (id=16915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 1m41.879322146s ago: executing program 0 (id=16917): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='reno', 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f0000001b00)="28e8ea483ecb920d14", 0x9}, {0x0}, {0x0}], 0x4}}], 0x1, 0x20040001) 1m41.716976555s ago: executing program 0 (id=16919): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) 1m41.458009417s ago: executing program 7 (id=16920): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0e00cd00010000005900050003000000710033"], 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m41.453557973s ago: executing program 0 (id=16921): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x2}]}}]}, 0x44}}, 0x4008045) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.245130175s ago: executing program 0 (id=16922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 1m40.726180724s ago: executing program 35 (id=16922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 1m40.631353083s ago: executing program 7 (id=16923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m40.457062037s ago: executing program 36 (id=16923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 34.014821348s ago: executing program 6 (id=17153): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) 33.881454586s ago: executing program 6 (id=17154): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x40084) 31.239367387s ago: executing program 6 (id=17176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 30.836954541s ago: executing program 6 (id=17179): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.684684577s ago: executing program 6 (id=17195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000080)) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x8004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 27.414594964s ago: executing program 6 (id=17198): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x7e}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}]}]}, 0x58}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000fcffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 12.341303199s ago: executing program 37 (id=17198): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x7e}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}]}]}, 0x58}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000fcffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 10.116122312s ago: executing program 5 (id=17246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x99af}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x240048c0) 9.488925495s ago: executing program 5 (id=17250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r1, &(0x7f0000000300)="79cda3e6b1dc2adbc4e70e7318fe9b54df8c0639fc7a5bead0606ea40dc0f6c3d90c45", 0x23) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x10000, 0x44, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7}, 0x14) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.980527662s ago: executing program 4 (id=17257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200260b0a000200aaaaaaaaaabb000008000f00fb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000000c0)="12a918c82fa2b28ee240f2e9f78bd3507f0407dba4d8821d67d3a4b097bc971e3545cc1351cba818db91df27d618d1a24f9c30d1bc67be", &(0x7f00000001c0)=@buf="9dcc61d968541b4aefd888f37b7e249039da8ce1016db0d9ddfe8c6e993b86c5acf55d7d7af1658a269ce315fb0ff9fb8a26daf7a985a527f48c6f01e11c6f7605f4efeef4", 0x4}, 0x20) 5.785771034s ago: executing program 4 (id=17259): accept$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000080)=0x6e) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000440)=0x10, 0x80400) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f00000002c0)=@ethtool_regs={0x4, 0x2, 0x63, "876e0bbc2a776e747ffa13225153fbbf6fc56c2f33f88f4875a525ca3a37835c39d3a21d70861690f1cba55972742e9c5b669987bbe6608205b45922ba4ab229cd195bea32bfcfb48ee35ea9308d6131a42213d4d85a5a3c741ddccbcab1900169f01b"}}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/172, 0xac}, &(0x7f0000000240)}, 0x20) 5.285219064s ago: executing program 4 (id=17264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 9) 4.457035699s ago: executing program 4 (id=17267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000500140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x20000011, &(0x7f0000000640)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.063726216s ago: executing program 4 (id=17269): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.939300565s ago: executing program 5 (id=17271): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x25}, 0x0) 3.809951693s ago: executing program 5 (id=17273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318300000001000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x90f0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b1b, &(0x7f0000000040)) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 3.491843123s ago: executing program 5 (id=17276): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x40084) 3.041158023s ago: executing program 8 (id=17279): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 2.964812648s ago: executing program 9 (id=17280): syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.78800621s ago: executing program 9 (id=17281): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) (async) bind$inet(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.598978616s ago: executing program 8 (id=17282): writev(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20000050) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcff"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x7}, 0x94) listen(r0, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.516345966s ago: executing program 8 (id=17283): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x29}, 0x0) 2.393205173s ago: executing program 8 (id=17284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfff0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xb}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 2.353469344s ago: executing program 9 (id=17285): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.309865496s ago: executing program 8 (id=17286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={r8, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r8}, 0x8) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB="5cefa9e4e64cb9b59b0a35fe6256d32c7a187c657c948b47f4ac083575cd027049f11fc0d699ca6f91b95a85043ff90ddccafadf1cf21153eddf9b9c709c619151d7abc147c28fff95368c6de765661933657e887331b729a8b2ea27d246bde4136472771f0e1114c2242e3903cb030f6c60d79d837f8a0f68c24067be014d4b2f13ad8430b4a7a5e29ee72d6aef1448e61760dc7afb23c7a101c158dff382333b7a8db3de787d4f40970cc64a24deb4e0cac4e42993d067", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r11 = accept4(r1, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r11) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08000200250000000a003b0000000000000000000040000000000001000000000000"], 0x50}}, 0xc080) 2.172948567s ago: executing program 9 (id=17287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@private0, 0x9}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) r5 = socket(0x2d, 0x2, 0x0) recvmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000004c0)=""/145, 0x91}], 0x2, &(0x7f0000000580)=""/221, 0xdd}, 0x40012000) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000140)=0xc99, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 1.875481348s ago: executing program 9 (id=17288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x29, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='writeback_sb_inodes_requeue\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, r6, 0x0, 0x4, &(0x7f0000000240)='GPL\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, r6, 0x0, 0x4, &(0x7f0000000240)='GPL\x00'}, 0x30) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a000105befcffffffdbdf25000000000000000008000a00220000005a217e8b9e91e1d9aa12e021eec1e35c9a87916a45af751b09f6d84502a9ad4299dcf0de5dc914930d4c8c4a50a9bd1384b8c7dce53286b3c045292236ad3edb89a105e31ece66e6bab16311c4f436e836db43ab33ce07f2f70b28f4b9ab1eba307b579e5c5a18feeec10140199e7b29cb0a46dc32205ef7ae93035dc42a3addb284af7200353db3277082059b215012ee5275ecea87a18043a1a13ac030f67c3cdadc1635f00bc95a7afbb22242d82d98440b73e75c4137a47faf745d6489e4469b9a979565d2f5544ade2cc04e79a21c993f0b"], 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0xc0c4) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a000105befcffffffdbdf25000000000000000008000a00220000005a217e8b9e91e1d9aa12e021eec1e35c9a87916a45af751b09f6d84502a9ad4299dcf0de5dc914930d4c8c4a50a9bd1384b8c7dce53286b3c045292236ad3edb89a105e31ece66e6bab16311c4f436e836db43ab33ce07f2f70b28f4b9ab1eba307b579e5c5a18feeec10140199e7b29cb0a46dc32205ef7ae93035dc42a3addb284af7200353db3277082059b215012ee5275ecea87a18043a1a13ac030f67c3cdadc1635f00bc95a7afbb22242d82d98440b73e75c4137a47faf745d6489e4469b9a979565d2f5544ade2cc04e79a21c993f0b"], 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0xc0c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702001b14000000b703000000000000850000921a2b8e00bf0900000000000055090100000000009500000000000000038500000000000000b700000000009500"/94], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 1.80675624s ago: executing program 9 (id=17289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0xe256e000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff0200000000000000000000000000017f0000010000000000000000000000004e200000a286fa9f6aeebadf02000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b0000007f00000100000000000000000000000000000000000000000000000000000000020000000000000001000000000000000000001000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000200000000000070000000000000000000080000000000000040080030000e80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090001800000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x31, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d5, 0x2b}, @in6=@mcast1, {0x5a, 0xb400, 0x2, 0xa, 0x0, 0x60000, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000800000000000000000000100000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 1.381546797s ago: executing program 4 (id=17290): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000105fc94358007f9e940090800f4", @ANYRES32=r2, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500ebac25dc1169a1be26f4e2822cd91a4bd1775b60b6e01bd594cfba18ec28057ef4a458f147fc20", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) 1.311779414s ago: executing program 8 (id=17291): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 0s ago: executing program 5 (id=17292): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r1, &(0x7f0000000180)="cecea84bca856b85568aa4793d22ea28a270437b61238750e3b836d590b02b0f0fc7737ce370a83f3863ad980085e5c4870f34fa779823b5829a38f777b82d42569c7ce0c2af3cc666ed582b1bfcd49e05f6d09c33754505306a4df7fa302eebd5466e8cf65a3515f6955445d57ced8ddf89b97bc73959bb92fed2d476702392fe4f8400970e8657685cfbfbfc658253680a8c53e62644b4e95f50bd0adf69c5e846d941aa28829dadaab0e5197d44c1c662c8adcf18b13adcbcc8e615d2573219cd11d18f8632e8762c98a5", 0xcc, 0x24000000, &(0x7f00000000c0)={0xa, 0x4e23, 0xef, @mcast2, 0x2}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) kernel console output (not intermixed with test programs): a cause=failed comm="syz.6.15702" name="memory.events" dev="tmpfs" ino=1027 res=0 errno=0 [ 713.342992][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.362660][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.387171][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.398097][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.410578][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.419637][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.427987][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.436519][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.444933][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.453391][ T8939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.561470][ T8947] tipc: Enabling of bearer rejected, failed to enable media [ 714.048226][ T8974] syzkaller0: entered promiscuous mode [ 714.053948][ T8974] syzkaller0: entered allmulticast mode [ 714.357528][ T8983] syzkaller1: entered promiscuous mode [ 714.363155][ T8983] syzkaller1: entered allmulticast mode [ 714.566296][ T30] audit: type=1800 audit(1764032009.450:12): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15727" name="memory.events" dev="tmpfs" ino=15565 res=0 errno=0 [ 714.671420][ T8998] tipc: Enabling of bearer rejected, failed to enable media [ 714.968505][ T9011] syzkaller1: entered promiscuous mode [ 714.974057][ T9011] syzkaller1: entered allmulticast mode [ 715.218405][ T9024] vetè0_virt_wifi: renamed from lo (while UP) [ 715.370516][ T9030] netlink: 'syz.1.15743': attribute type 1 has an invalid length. [ 715.427799][ T9030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15743'. [ 715.562759][ T9048] tipc: Enabling of bearer rejected, already enabled [ 715.596768][ T9048] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 715.743630][ T9059] netlink: 'syz.1.15753': attribute type 12 has an invalid length. [ 715.752936][ T9059] netlink: 'syz.1.15753': attribute type 29 has an invalid length. [ 715.770921][ T9059] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15753'. [ 715.784490][ T9059] netlink: 'syz.1.15753': attribute type 2 has an invalid length. [ 715.796992][ T9059] netlink: 23 bytes leftover after parsing attributes in process `syz.1.15753'. [ 716.673414][ T9117] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.15773'. [ 716.729719][ T30] audit: type=1800 audit(1764032011.610:13): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15768" name="memory.events" dev="tmpfs" ino=16583 res=0 errno=0 [ 717.458570][ T9155] tipc: Enabling of bearer rejected, failed to enable media [ 717.693796][ T9180] netlink: 'syz.4.15792': attribute type 1 has an invalid length. [ 717.752371][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15792'. [ 718.099048][ T9204] netlink: 'syz.1.15799': attribute type 10 has an invalid length. [ 718.121424][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15801'. [ 718.132525][ T9205] syzkaller0: entered promiscuous mode [ 718.138737][ T9205] syzkaller0: entered allmulticast mode [ 718.463023][ T9229] netlink: 'syz.1.15807': attribute type 1 has an invalid length. [ 718.489952][ T9232] tipc: Enabling of bearer rejected, failed to enable media [ 718.629730][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15807'. [ 718.898277][ T3548] nci: nci_rsp_packet: unknown rsp opcode 0xc [ 718.907914][ T9254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.969405][ T9267] netlink: 'syz.5.15815': attribute type 29 has an invalid length. [ 718.979422][ T9267] netlink: 'syz.5.15815': attribute type 29 has an invalid length. [ 718.989122][ T9267] netlink: 500 bytes leftover after parsing attributes in process `syz.5.15815'. [ 719.047840][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15816'. [ 719.134026][ T9280] netlink: 27 bytes leftover after parsing attributes in process `syz.5.15817'. [ 719.259680][ T9286] netlink: 'syz.5.15821': attribute type 1 has an invalid length. [ 719.328828][ T9286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15821'. [ 719.619281][ T9311] tipc: Enabling of bearer rejected, failed to enable media [ 720.420156][ T9363] syzkaller0: entered promiscuous mode [ 720.428423][ T9363] syzkaller0: entered allmulticast mode [ 720.821282][ T9377] __nla_validate_parse: 2 callbacks suppressed [ 720.821300][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15851'. [ 720.891763][ T9385] IPv6: NLM_F_REPLACE set, but no existing node found! [ 721.116255][ T9399] net_ratelimit: 90 callbacks suppressed [ 721.116274][ T9399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.138218][ T9399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.150811][ T9399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.164769][ T9399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.176370][ T9399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.186016][ T9407] validate_nla: 1 callbacks suppressed [ 721.186032][ T9407] netlink: 'syz.6.15863': attribute type 1 has an invalid length. [ 721.187540][ T9398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.253895][ T9407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 721.281593][ T9411] bond3: (slave geneve2): making interface the new active one [ 721.292278][ T9411] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 721.301903][ T9412] syzkaller1: entered promiscuous mode [ 721.308163][ T9412] syzkaller1: entered allmulticast mode [ 721.459262][ T9422] netlink: 'syz.1.15868': attribute type 1 has an invalid length. [ 721.504661][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15868'. [ 721.819843][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15876'. [ 721.957727][ T9459] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15879'. [ 722.979072][ T9516] syzkaller0: entered promiscuous mode [ 722.984623][ T9516] syzkaller0: entered allmulticast mode [ 723.405143][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 723.532659][ T9539] syzkaller0: entered promiscuous mode [ 723.539277][ T9539] syzkaller0: entered allmulticast mode [ 723.831976][ T9557] netlink: 'syz.6.15911': attribute type 4 has an invalid length. [ 723.840777][ T9559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.841354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.882552][ T9557] netlink: 'syz.6.15911': attribute type 4 has an invalid length. [ 724.152004][ T9563] tipc: Enabling of bearer rejected, failed to enable media [ 724.812877][ T9617] syzkaller1: entered promiscuous mode [ 724.836072][ T9617] syzkaller1: entered allmulticast mode [ 725.107144][ T9636] tipc: New replicast peer: 255.255.255.255 [ 725.113642][ T9636] tipc: Enabled bearer , priority 10 [ 725.448404][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.470606][ T9662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.997448][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15957'. [ 726.191344][ T9695] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15960'. [ 726.609492][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15968'. [ 726.646045][ T9723] netlink: 'syz.5.15968': attribute type 7 has an invalid length. [ 726.677451][ T9723] netlink: 'syz.5.15968': attribute type 8 has an invalid length. [ 726.696662][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15968'. [ 726.743110][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15970'. [ 726.770017][ T9731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.777318][ T9731] IPv6: NLM_F_CREATE should be set when creating new route [ 727.178901][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15982'. [ 727.406929][ T9769] syzkaller0: entered promiscuous mode [ 727.412436][ T9769] syzkaller0: entered allmulticast mode [ 727.635563][ T9773] syzkaller0: entered promiscuous mode [ 727.641070][ T9773] syzkaller0: entered allmulticast mode [ 727.862109][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15994'. [ 728.031934][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15996'. [ 728.077486][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15997'. [ 728.458613][ T9809] tipc: New replicast peer: 255.255.255.255 [ 728.481392][ T9809] tipc: Enabled bearer , priority 10 [ 728.726271][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16007'. [ 728.744420][ T9821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 729.156808][ T9835] syzkaller0: entered promiscuous mode [ 729.162330][ T9835] syzkaller0: entered allmulticast mode [ 729.763676][ T9866] syzkaller0: entered promiscuous mode [ 729.789911][ T9866] syzkaller0: entered allmulticast mode [ 729.913818][ T9878] syzkaller0: entered promiscuous mode [ 729.920931][ T9878] syzkaller0: entered allmulticast mode [ 730.346154][ T3084] Bluetooth: hci5: command 0x0406 tx timeout [ 730.806646][ T9927] netlink: 'syz.1.16045': attribute type 29 has an invalid length. [ 730.822054][ T9927] netlink: 'syz.1.16045': attribute type 29 has an invalid length. [ 731.441475][ T9949] tipc: Enabled bearer , priority 0 [ 731.478122][ T9948] tipc: Disabling bearer [ 731.572802][ T9959] syzkaller0: entered promiscuous mode [ 731.596724][ T9959] syzkaller0: entered allmulticast mode [ 731.853033][ T9946] wlan0 speed is unknown, defaulting to 1000 [ 731.860929][ T9946] wg1 speed is unknown, defaulting to 1000 [ 731.982110][ T9975] syzkaller0: entered promiscuous mode [ 731.994604][ T9967] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 731.994697][ T9975] syzkaller0: entered allmulticast mode [ 732.346537][ T9991] __nla_validate_parse: 4 callbacks suppressed [ 732.346556][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16065'. [ 732.364223][ T9973] wlan0 speed is unknown, defaulting to 1000 [ 732.373002][ T9973] wg1 speed is unknown, defaulting to 1000 [ 732.423403][ T9991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.430723][ T9991] IPv6: NLM_F_CREATE should be set when creating new route [ 732.579930][ T9987] syzkaller1: entered promiscuous mode [ 732.604335][ T9987] syzkaller1: entered allmulticast mode [ 733.042190][T10012] syzkaller0: entered promiscuous mode [ 733.057185][T10012] syzkaller0: entered allmulticast mode [ 733.421328][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16077'. [ 733.616502][T10034] syzkaller0: entered promiscuous mode [ 733.623533][T10034] syzkaller0: entered allmulticast mode [ 733.654560][T10034] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 733.740673][T10040] tipc: Enabling of bearer rejected, already enabled [ 733.977514][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16090'. [ 735.071714][T10091] netlink: 'syz.0.16101': attribute type 4 has an invalid length. [ 735.089498][T10093] syzkaller0: entered promiscuous mode [ 735.095200][T10093] syzkaller0: entered allmulticast mode [ 736.791693][T10117] syzkaller0: entered promiscuous mode [ 736.798251][T10117] syzkaller0: entered allmulticast mode [ 736.921594][ T2310] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 300 seconds [ 736.933062][ T2310] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 300 seconds [ 736.954962][T10123] netlink: 'syz.1.16111': attribute type 12 has an invalid length. [ 737.244612][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16118'. [ 737.258216][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16118'. [ 737.267650][ T3548] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 737.285463][ T3548] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 737.293685][ T3548] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 737.306165][T10109] wlan0 speed is unknown, defaulting to 1000 [ 737.307161][ T3548] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 737.347247][T10109] wg1 speed is unknown, defaulting to 1000 [ 737.448438][T10145] syzkaller0: entered promiscuous mode [ 737.453939][T10145] syzkaller0: entered allmulticast mode [ 737.748587][ T5942] hid-generic 0005:0002:5508.0001: item fetching failed at offset 2/3 [ 737.766077][ T5942] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 738.031514][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16127'. [ 738.429504][T10181] wlan0 speed is unknown, defaulting to 1000 [ 738.437960][T10181] wg1 speed is unknown, defaulting to 1000 [ 739.050273][T10193] wlan0 speed is unknown, defaulting to 1000 [ 739.184196][T10207] syzkaller0: entered promiscuous mode [ 739.190013][T10207] syzkaller0: entered allmulticast mode [ 739.202074][T10193] wg1 speed is unknown, defaulting to 1000 [ 739.431650][T10198] lec:lec_atm_close: lec0: Shut down! [ 741.197343][T10232] syzkaller0: entered promiscuous mode [ 741.210383][T10232] syzkaller0: entered allmulticast mode [ 741.312557][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16153'. [ 741.468497][T10242] netlink: 'syz.6.16153': attribute type 1 has an invalid length. [ 741.645195][T10255] syzkaller1: entered promiscuous mode [ 741.658901][T10255] syzkaller1: entered allmulticast mode [ 741.868764][T10266] syzkaller0: entered promiscuous mode [ 741.874409][T10266] syzkaller0: entered allmulticast mode [ 743.376779][T10271] syzkaller0: entered promiscuous mode [ 743.382283][T10271] syzkaller0: entered allmulticast mode [ 743.389355][T10272] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 743.412537][T10277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 743.552905][T10279] syzkaller0: entered promiscuous mode [ 743.558585][T10279] syzkaller0: entered allmulticast mode [ 743.566418][T10287] tipc: Enabled bearer , priority 0 [ 745.242544][T10275] tipc: Resetting bearer [ 745.263570][T10275] tipc: Disabling bearer [ 745.291899][T10322] syzkaller0: entered promiscuous mode [ 745.301423][T10322] syzkaller0: entered allmulticast mode [ 746.055133][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16188'. [ 746.232731][T10374] tipc: Enabling of bearer rejected, already enabled [ 746.267047][T10350] wlan0 speed is unknown, defaulting to 1000 [ 746.283078][T10350] wg1 speed is unknown, defaulting to 1000 [ 746.659544][T10397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16198'. [ 747.121898][T10383] lec:lec_atm_close: lec0: Shut down! [ 747.742275][T10406] wlan0 speed is unknown, defaulting to 1000 [ 747.797379][T10406] wg1 speed is unknown, defaulting to 1000 [ 748.055126][T10427] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 748.161892][T10424] syzkaller0: entered promiscuous mode [ 748.167607][T10424] syzkaller0: entered allmulticast mode [ 748.206324][T10440] tipc: Enabling of bearer rejected, already enabled [ 748.364903][T10443] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.16209'. [ 748.741482][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16218'. [ 748.817476][T10467] netlink: 'syz.0.16219': attribute type 4 has an invalid length. [ 749.152485][T10482] syzkaller0: entered promiscuous mode [ 749.164969][T10482] syzkaller0: entered allmulticast mode [ 749.423711][T10470] wlan0 speed is unknown, defaulting to 1000 [ 749.432405][T10470] wg1 speed is unknown, defaulting to 1000 [ 749.999488][T10519] tipc: Enabled bearer , priority 0 [ 750.118007][T10519] syzkaller0: entered promiscuous mode [ 750.130620][T10519] syzkaller0: entered allmulticast mode [ 750.138365][T10519] tipc: Resetting bearer [ 750.184011][T10499] wlan0 speed is unknown, defaulting to 1000 [ 750.190659][T10518] tipc: Resetting bearer [ 750.378418][T10514] lec:lec_atm_close: lec0: Shut down! [ 750.604077][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16237'. [ 750.719324][T10532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16237'. [ 751.822435][T10518] tipc: Disabling bearer [ 751.830989][T10499] wg1 speed is unknown, defaulting to 1000 [ 752.156528][T10548] tipc: Enabling of bearer rejected, failed to enable media [ 752.182078][T10548] syzkaller0: entered promiscuous mode [ 752.195958][T10548] syzkaller0: entered allmulticast mode [ 752.864291][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16250'. [ 752.887655][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16251'. [ 752.982196][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16252'. [ 752.998521][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16251'. [ 754.320920][T10571] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 754.517468][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16261'. [ 754.692755][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16265'. [ 754.715000][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803203f400: rx timeout, send abort [ 754.776621][T10616] netlink: 'syz.1.16267': attribute type 1 has an invalid length. [ 754.864165][T10616] 8021q: adding VLAN 0 to HW filter on device bond18 [ 754.902638][T10625] bond18: (slave veth21): Enslaving as an active interface with a down link [ 754.938383][T10616] veth0_to_bond: left allmulticast mode [ 754.951853][T10616] veth0_to_bond: left promiscuous mode [ 754.964540][T10616] bridge13: port 2(veth0_to_bond) entered disabled state [ 754.978390][T10616] bond18: (slave veth0_to_bond): making interface the new active one [ 754.988275][T10616] veth0_to_bond: entered promiscuous mode [ 754.994395][T10616] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 755.044087][T10625] bond18: (slave veth23): Enslaving as an active interface with a down link [ 755.157062][T10634] digital: digital_start_poll: Unknown protocol [ 755.215198][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803203fc00: rx timeout, send abort [ 755.223842][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803203f400: abort rx timeout. Force session deactivation [ 755.294687][T10640] net_ratelimit: 1022 callbacks suppressed [ 755.294707][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.402959][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.411669][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.469743][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.478670][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.492681][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.502597][T10640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.517544][T10639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.596680][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16280'. [ 755.739670][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803203fc00: abort rx timeout. Force session deactivation [ 756.538914][T10675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16284'. [ 756.625044][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16285'. [ 756.769220][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16287'. [ 757.174587][T10708] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 757.441258][T10722] syzkaller0: entered promiscuous mode [ 757.447113][T10722] syzkaller0: entered allmulticast mode [ 758.758252][T10735] syzkaller0: entered promiscuous mode [ 758.764037][T10735] syzkaller0: entered allmulticast mode [ 759.191915][T10766] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 759.201589][T10766] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 759.224635][T10770] syzkaller0: entered promiscuous mode [ 759.230863][T10770] syzkaller0: entered allmulticast mode [ 759.304395][T10774] __nla_validate_parse: 1 callbacks suppressed [ 759.304414][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16325'. [ 759.474638][T10782] netlink: 'syz.1.16328': attribute type 1 has an invalid length. [ 759.673060][T10797] bond19: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 759.688295][T10797] bond19: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 759.699264][T10797] bond19: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 759.780531][T10790] bond19: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 759.797472][T10790] bond19: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 759.854202][T10806] tipc: Enabling of bearer rejected, failed to enable media [ 759.887307][T10806] syzkaller0: entered promiscuous mode [ 759.892810][T10806] syzkaller0: entered allmulticast mode [ 760.022733][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16340'. [ 760.064720][T10814] syzkaller0: entered promiscuous mode [ 760.072644][T10814] syzkaller0: entered allmulticast mode [ 760.124481][T10814] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 760.268715][T10831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.277371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.307551][T10830] syzkaller0: entered promiscuous mode [ 760.313053][T10830] syzkaller0: entered allmulticast mode [ 760.615114][T10850] tipc: Enabling of bearer rejected, failed to enable media [ 760.656944][T10850] syzkaller0: entered promiscuous mode [ 760.666051][T10850] syzkaller0: entered allmulticast mode [ 760.879403][T10864] syzkaller0: entered promiscuous mode [ 760.885082][T10864] syzkaller0: entered allmulticast mode [ 760.896511][T10864] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 761.323357][T10884] syzkaller0: entered promiscuous mode [ 761.345586][T10884] syzkaller0: entered allmulticast mode [ 761.646708][T10889] tipc: Enabled bearer , priority 0 [ 761.737843][T10899] syzkaller0: entered promiscuous mode [ 761.746160][T10899] syzkaller0: entered allmulticast mode [ 761.764097][T10899] tipc: Resetting bearer [ 761.773527][T10905] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 761.793536][T10905] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 761.808099][T10885] tipc: Resetting bearer [ 762.511312][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.351455][T10885] tipc: Disabling bearer [ 763.571944][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16380'. [ 763.572824][T10941] syzkaller0: entered promiscuous mode [ 763.581089][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16380'. [ 763.608539][T10941] syzkaller0: entered allmulticast mode [ 763.648982][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16380'. [ 763.649461][T10944] tipc: Enabled bearer , priority 0 [ 763.658150][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16380'. [ 763.750738][T10949] syzkaller0: entered promiscuous mode [ 763.756686][T10949] syzkaller0: entered allmulticast mode [ 763.762834][T10949] tipc: Resetting bearer [ 763.800635][T10942] tipc: Resetting bearer [ 764.951397][T10979] netlink: 576 bytes leftover after parsing attributes in process `syz.6.16389'. [ 765.370628][T10942] tipc: Disabling bearer [ 765.628943][T10985] netlink: 'syz.6.16391': attribute type 8 has an invalid length. [ 765.629711][T10983] syzkaller0: entered promiscuous mode [ 765.642411][T10983] syzkaller0: entered allmulticast mode [ 765.645858][T10985] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16391'. [ 765.659836][T10985] nbd: couldn't find a device at index 0 [ 766.166824][ T1332] veth0_to_bond: left promiscuous mode [ 766.213110][T11022] batadv_slave_1: entered allmulticast mode [ 766.224484][T11022] dvmrp8: entered allmulticast mode [ 766.232367][T11021] batadv_slave_1: left allmulticast mode [ 766.294816][T11023] syzkaller0: entered promiscuous mode [ 766.300463][T11023] syzkaller0: entered allmulticast mode [ 766.307570][T11024] syzkaller0: entered promiscuous mode [ 766.313334][T11024] syzkaller0: entered allmulticast mode [ 766.328599][T11024] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 766.486319][T11030] syzkaller0: entered promiscuous mode [ 766.491943][T11030] syzkaller0: entered allmulticast mode [ 767.006347][ T2310] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 330 seconds [ 767.017872][ T2310] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 330 seconds [ 768.303382][T11044] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 768.515224][T11059] syzkaller0: entered promiscuous mode [ 768.529564][T11059] syzkaller0: entered allmulticast mode [ 768.679917][T11064] syzkaller0: entered promiscuous mode [ 768.706890][T11064] syzkaller0: entered allmulticast mode [ 768.729107][T11064] tipc: Enabled bearer , priority 0 [ 768.759347][T11062] tipc: Resetting bearer [ 768.796672][T11062] tipc: Disabling bearer [ 768.830649][T11066] syzkaller0: entered promiscuous mode [ 768.836716][T11066] syzkaller0: entered allmulticast mode [ 768.917801][T11054] wlan0 speed is unknown, defaulting to 1000 [ 768.929927][T11054] wg1 speed is unknown, defaulting to 1000 [ 769.189235][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16430'. [ 769.199296][T11090] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 769.292202][T11093] syzkaller0: entered promiscuous mode [ 769.300211][T11093] syzkaller0: entered allmulticast mode [ 769.778480][T11103] syzkaller0: entered promiscuous mode [ 769.783985][T11103] syzkaller0: entered allmulticast mode [ 769.808453][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16434'. [ 769.851949][T11107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 769.861505][T11113] syzkaller0: entered promiscuous mode [ 769.868174][T11113] syzkaller0: entered allmulticast mode [ 769.988534][T11119] tipc: Enabled bearer , priority 0 [ 770.000426][T11123] netlink: 'syz.1.16440': attribute type 1 has an invalid length. [ 770.001472][T11119] syzkaller0: entered promiscuous mode [ 770.013754][T11119] syzkaller0: entered allmulticast mode [ 770.037099][T11123] 8021q: adding VLAN 0 to HW filter on device bond20 [ 770.050364][T11121] tipc: Enabled bearer , priority 0 [ 770.099512][T11123] bond20: (slave veth25): Enslaving as an active interface with a down link [ 770.111751][T11121] syzkaller0: entered promiscuous mode [ 770.117504][T11121] syzkaller0: entered allmulticast mode [ 770.128014][T11119] tipc: Resetting bearer [ 770.146243][T11123] veth27: entered promiscuous mode [ 770.153882][T11123] bond20: (slave veth27): Enslaving as an active interface with a down link [ 770.166950][T11117] tipc: Resetting bearer [ 770.193601][ C0] syzkaller0: tun_net_xmit 134 [ 770.202501][T11117] tipc: Disabling bearer [ 770.217604][T11121] tipc: Resetting bearer [ 770.223524][T11121] syzkaller0: tun_net_xmit 134 [ 770.237412][T11123] vlan4: entered allmulticast mode [ 770.242664][T11123] bond20: entered allmulticast mode [ 770.250139][T11123] bond20: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 770.300760][T11120] tipc: Resetting bearer [ 770.307635][T11133] netlink: 'syz.6.16443': attribute type 1 has an invalid length. [ 770.327686][T11120] tipc: Disabling bearer [ 770.400606][T11133] bond5 (unregistering): Released all slaves [ 770.461088][T11129] syzkaller0: entered promiscuous mode [ 770.468622][T11129] syzkaller0: entered allmulticast mode [ 770.479777][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16444'. [ 770.488937][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16444'. [ 770.498825][T11136] ip6tnl1: entered promiscuous mode [ 770.504063][T11136] ip6tnl1: entered allmulticast mode [ 770.817099][T11157] syzkaller0: entered promiscuous mode [ 770.822692][T11157] syzkaller0: entered allmulticast mode [ 770.879528][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16449'. [ 770.891189][T11151] 8021q: adding VLAN 0 to HW filter on device bond21 [ 770.970945][T11159] tipc: Enabled bearer , priority 0 [ 770.978591][T11159] syzkaller0: entered promiscuous mode [ 770.984173][T11159] syzkaller0: entered allmulticast mode [ 771.008397][T11159] tipc: Resetting bearer [ 771.026602][T11158] tipc: Resetting bearer [ 771.060042][T11158] tipc: Disabling bearer [ 771.143053][T11165] syzkaller0: entered promiscuous mode [ 771.150119][T11165] syzkaller0: entered allmulticast mode [ 771.286461][T11168] syzkaller0: entered promiscuous mode [ 771.301562][T11168] syzkaller0: entered allmulticast mode [ 771.322110][T11169] syzkaller0: entered promiscuous mode [ 771.335850][T11169] syzkaller0: entered allmulticast mode [ 771.724615][T11182] tipc: Disabling bearer [ 771.825086][T11186] syzkaller0: entered promiscuous mode [ 771.835398][T11186] syzkaller0: entered allmulticast mode [ 771.883124][T11188] syzkaller0: entered promiscuous mode [ 771.888818][T11188] syzkaller0: entered allmulticast mode [ 771.901472][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16466'. [ 773.912781][T11232] vlan3: entered allmulticast mode [ 773.928099][T11232] bridge_slave_0: entered allmulticast mode [ 774.004386][T11238] syzkaller0: entered promiscuous mode [ 774.016004][T11238] syzkaller0: entered allmulticast mode [ 774.159691][T11251] syzkaller0: entered promiscuous mode [ 774.165633][T11251] syzkaller0: entered allmulticast mode [ 774.278548][T11259] syzkaller0: entered promiscuous mode [ 774.284158][T11259] syzkaller0: entered allmulticast mode [ 774.392634][T11265] syzkaller0: entered promiscuous mode [ 774.398698][T11265] syzkaller0: entered allmulticast mode [ 774.450255][T11267] syzkaller0: entered promiscuous mode [ 774.457951][T11267] syzkaller0: entered allmulticast mode [ 774.559204][T11257] wlan0 speed is unknown, defaulting to 1000 [ 774.566506][T11257] wg1 speed is unknown, defaulting to 1000 [ 774.787173][T11274] tipc: Enabled bearer , priority 0 [ 774.801873][T11274] syzkaller0: entered promiscuous mode [ 774.807806][T11274] syzkaller0: entered allmulticast mode [ 774.817705][T11274] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 774.847016][T11273] tipc: Enabled bearer , priority 0 [ 774.861413][T11274] tipc: Resetting bearer [ 774.879736][T11273] syzkaller0: entered promiscuous mode [ 774.886423][T11273] syzkaller0: entered allmulticast mode [ 774.900676][T11272] tipc: Resetting bearer [ 774.998531][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16494'. [ 775.061548][T11272] tipc: Disabling bearer [ 775.134295][T11281] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 775.178569][T11285] tipc: Resetting bearer [ 775.195184][T11271] tipc: Resetting bearer [ 775.233416][T11271] tipc: Disabling bearer [ 775.263769][T11289] syzkaller0: entered promiscuous mode [ 775.302029][T11289] syzkaller0: entered allmulticast mode [ 775.450065][T11300] tipc: Enabling of bearer rejected, already enabled [ 775.466687][T11298] syzkaller0: entered promiscuous mode [ 775.476991][T11298] syzkaller0: entered allmulticast mode [ 775.549302][T11306] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 775.855565][T11318] tipc: Enabling of bearer rejected, already enabled [ 776.018098][T11295] lec:lec_atm_close: lec0: Shut down! [ 776.057410][T11328] tipc: Enabling of bearer rejected, already enabled [ 776.156588][T11331] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 776.174024][T11331] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 776.241975][T11339] tipc: Enabled bearer , priority 0 [ 776.249806][T11339] syzkaller0: entered promiscuous mode [ 776.255517][T11339] syzkaller0: entered allmulticast mode [ 776.294891][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16511'. [ 776.296815][T11339] tipc: Resetting bearer [ 776.311893][T11341] 8021q: adding VLAN 0 to HW filter on device bond21 [ 776.319966][T11338] tipc: Resetting bearer [ 776.342311][T11338] tipc: Disabling bearer [ 776.500440][T11353] tipc: Enabled bearer , priority 0 [ 776.511663][T11353] syzkaller0: entered promiscuous mode [ 776.520864][T11353] syzkaller0: entered allmulticast mode [ 776.566539][T11353] tipc: Resetting bearer [ 776.576323][T11357] syzkaller0: entered promiscuous mode [ 776.581814][T11357] syzkaller0: entered allmulticast mode [ 776.591124][T11352] tipc: Resetting bearer [ 776.608506][T11352] tipc: Disabling bearer [ 776.617175][T11356] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 776.624655][T11356] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 776.641053][T11357] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 776.871825][T11364] syzkaller0: entered promiscuous mode [ 776.878212][T11364] syzkaller0: entered allmulticast mode [ 776.895805][T11367] syzkaller0: entered promiscuous mode [ 776.901384][T11367] syzkaller0: entered allmulticast mode [ 776.926170][T11368] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 776.933313][T11368] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 776.941633][T11364] tipc: Enabled bearer , priority 0 [ 776.999269][T11363] tipc: Resetting bearer [ 777.017615][T11363] tipc: Disabling bearer [ 777.218369][T11373] syzkaller0: entered promiscuous mode [ 777.223878][T11373] syzkaller0: entered allmulticast mode [ 777.239098][T11378] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16524'. [ 777.264303][T11381] netlink: 'syz.5.16526': attribute type 1 has an invalid length. [ 777.281928][T11379] tipc: Enabled bearer , priority 0 [ 777.294600][T11378] TC_ACT_REPEAT abuse ? [ 777.307099][T11379] syzkaller0: entered promiscuous mode [ 777.312580][T11379] syzkaller0: entered allmulticast mode [ 777.374907][T11379] tipc: Resetting bearer [ 777.387762][T11376] tipc: Resetting bearer [ 777.436599][T11376] tipc: Disabling bearer [ 777.499562][T11387] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 777.507929][T11387] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 777.528672][T11387] tipc: Enabling of bearer rejected, already enabled [ 777.556863][T11390] syzkaller0: entered promiscuous mode [ 777.564391][T11390] syzkaller0: entered allmulticast mode [ 777.586942][T11390] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 777.612493][T11394] tipc: Enabled bearer , priority 0 [ 777.627833][T11397] syzkaller0: entered promiscuous mode [ 777.633318][T11397] syzkaller0: entered allmulticast mode [ 777.645963][T11401] syzkaller0: entered promiscuous mode [ 777.653136][T11401] syzkaller0: entered allmulticast mode [ 777.697092][T11400] siw: device registration error -23 [ 777.697115][T11394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 777.756685][T11394] tipc: Resetting bearer [ 777.766039][T11392] tipc: Resetting bearer [ 777.832034][T11392] tipc: Disabling bearer [ 777.844775][T11405] tipc: Enabling of bearer rejected, already enabled [ 777.884497][T11408] syzkaller0: entered promiscuous mode [ 777.891038][T11408] syzkaller0: entered allmulticast mode [ 777.900552][T11410] syzkaller0: entered promiscuous mode [ 777.907130][T11410] syzkaller0: entered allmulticast mode [ 777.934013][T11410] 0: reclassify loop, rule prio 0, protocol 800 [ 778.009583][T11417] 0: reclassify loop, rule prio 0, protocol 800 [ 778.137160][T11423] syzkaller0: entered promiscuous mode [ 778.142760][T11423] syzkaller0: entered allmulticast mode [ 778.235175][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16541'. [ 778.242746][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16542'. [ 778.636212][T11448] netlink: 'syz.5.16548': attribute type 1 has an invalid length. [ 778.705782][T11448] nbd6: detected capacity change from 0 to 127 [ 778.724426][T11453] netlink: 64 bytes leftover after parsing attributes in process `syz.5.16548'. [ 778.756376][T11453] nbd: couldn't find a device at index 0 [ 778.810349][ T3084] block nbd6: Receive control failed (result -32) [ 778.968799][T11463] syzkaller0: entered promiscuous mode [ 778.969676][T11465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16555'. [ 778.974487][T11463] syzkaller0: entered allmulticast mode [ 778.991655][T11461] syzkaller0: entered promiscuous mode [ 778.997498][T11461] syzkaller0: entered allmulticast mode [ 779.090132][T11468] syzkaller0: entered promiscuous mode [ 779.096250][T11468] syzkaller0: entered allmulticast mode [ 779.203161][T11475] tipc: Enabled bearer , priority 0 [ 779.211516][T11475] syzkaller0: entered promiscuous mode [ 779.223424][T11475] syzkaller0: entered allmulticast mode [ 779.251466][T11475] tipc: Resetting bearer [ 779.258070][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.266584][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.279356][T11474] tipc: Resetting bearer [ 779.306384][T11474] tipc: Disabling bearer [ 779.439444][T11490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16563'. [ 779.940973][T11506] syzkaller0: entered promiscuous mode [ 779.947536][T11506] syzkaller0: entered allmulticast mode [ 780.070042][T11513] syzkaller0: entered promiscuous mode [ 780.088176][T11515] nbd: nbd6 already in use [ 780.106391][T11513] syzkaller0: entered allmulticast mode [ 780.113846][T11515] block nbd6: NBD_DISCONNECT [ 780.119127][T11515] block nbd6: Send disconnect failed -32 [ 780.131977][T11515] block nbd6: shutting down sockets [ 780.223087][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16570'. [ 783.444209][T11559] syzkaller0: entered promiscuous mode [ 783.450316][T11559] syzkaller0: entered allmulticast mode [ 783.717637][T11575] syzkaller0: entered promiscuous mode [ 783.723143][T11575] syzkaller0: entered allmulticast mode [ 783.905148][T11588] tipc: Enabled bearer , priority 0 [ 783.914288][T11588] syzkaller0: entered promiscuous mode [ 783.920060][T11588] syzkaller0: entered allmulticast mode [ 783.932436][T11588] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 783.956636][T11588] tipc: Resetting bearer [ 783.971654][T11588] tipc: Resetting bearer [ 783.989026][T11588] tipc: Disabling bearer [ 784.506752][T11619] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16591'. [ 784.586858][T11625] tipc: Enabled bearer , priority 0 [ 784.594832][T11625] syzkaller0: entered promiscuous mode [ 784.603734][T11625] syzkaller0: entered allmulticast mode [ 784.614416][T11624] syzkaller0: entered promiscuous mode [ 784.620702][T11624] syzkaller0: entered allmulticast mode [ 784.672708][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16595'. [ 784.694883][T11625] tipc: Resetting bearer [ 784.767883][T11622] tipc: Resetting bearer [ 784.798174][T11622] tipc: Disabling bearer [ 784.823089][T11637] syzkaller1: entered promiscuous mode [ 784.831704][T11637] syzkaller1: entered allmulticast mode [ 784.890407][T11639] syzkaller0: entered promiscuous mode [ 784.896115][T11639] syzkaller0: entered allmulticast mode [ 784.957882][T11643] syzkaller0: entered promiscuous mode [ 784.963432][T11643] syzkaller0: entered allmulticast mode [ 785.784356][T11663] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16607'. [ 785.853967][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.861921][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.869918][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.877832][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.885712][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.893559][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.901469][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.909373][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.914219][T11669] syzkaller0: entered promiscuous mode [ 785.917254][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.917402][T11667] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 785.940792][T11669] syzkaller0: entered allmulticast mode [ 786.114253][T11677] syzkaller0: entered promiscuous mode [ 786.132710][T11677] syzkaller0: entered allmulticast mode [ 786.336209][T11690] netlink: 'syz.4.16621': attribute type 10 has an invalid length. [ 786.359476][T11693] netlink: 76 bytes leftover after parsing attributes in process `syz.6.16622'. [ 786.371621][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16621'. [ 786.594180][T11701] syzkaller0: entered promiscuous mode [ 786.602036][T11701] syzkaller0: entered allmulticast mode [ 788.036914][T11706] syzkaller0: entered promiscuous mode [ 788.042384][T11706] syzkaller0: entered allmulticast mode [ 788.059683][T11712] syzkaller0: entered promiscuous mode [ 788.065176][T11712] syzkaller0: entered allmulticast mode [ 788.193489][T11721] syzkaller0: entered promiscuous mode [ 788.215726][T11721] syzkaller0: entered allmulticast mode [ 788.611625][T11745] syzkaller0: entered promiscuous mode [ 788.618391][T11745] syzkaller0: entered allmulticast mode [ 790.108414][T11757] syzkaller0: entered promiscuous mode [ 790.135666][T11757] syzkaller0: entered allmulticast mode [ 790.677136][T11797] lo: entered allmulticast mode [ 790.697406][T11799] syzkaller0: entered promiscuous mode [ 790.702992][T11799] syzkaller0: entered allmulticast mode [ 790.743612][T11802] syzkaller0: entered promiscuous mode [ 790.749665][T11802] syzkaller0: entered allmulticast mode [ 790.915016][T11810] netlink: 'syz.0.16663': attribute type 27 has an invalid length. [ 790.951227][T11812] syzkaller0: entered promiscuous mode [ 790.959444][T11812] syzkaller0: entered allmulticast mode [ 790.980622][T11812] tipc: Enabled bearer , priority 0 [ 790.989492][T11811] tipc: Resetting bearer [ 791.016813][T11811] tipc: Disabling bearer [ 791.232022][T11826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16671'. [ 791.402153][T11838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 791.458936][T11841] syzkaller0: entered promiscuous mode [ 791.465191][T11841] syzkaller0: entered allmulticast mode [ 791.477721][T11841] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 791.593145][T11848] syzkaller0: entered promiscuous mode [ 791.598846][T11848] syzkaller0: entered allmulticast mode [ 791.655963][T11848] tipc: Enabled bearer , priority 0 [ 791.668009][T11846] tipc: Resetting bearer [ 791.730316][T11846] tipc: Disabling bearer [ 791.832752][T11860] syzkaller0: entered promiscuous mode [ 791.838855][T11860] syzkaller0: entered allmulticast mode [ 792.083912][T11876] syzkaller0: entered promiscuous mode [ 792.089632][T11876] syzkaller0: entered allmulticast mode [ 792.466271][T11899] syzkaller0: entered promiscuous mode [ 792.484627][T11899] syzkaller0: entered allmulticast mode [ 792.691799][T11912] syzkaller0: entered promiscuous mode [ 792.700592][T11912] syzkaller0: entered allmulticast mode [ 792.875767][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16708'. [ 793.147541][T11931] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 793.320911][ T5868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 793.324048][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16715'. [ 793.337632][ T5868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 793.346279][ T5868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 793.354770][ T5868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 793.365907][ T5868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 793.652191][T11948] syzkaller0: entered promiscuous mode [ 793.674020][T11948] syzkaller0: entered allmulticast mode [ 793.691243][T11937] wlan0 speed is unknown, defaulting to 1000 [ 793.707509][T11937] wg1 speed is unknown, defaulting to 1000 [ 793.738675][T11952] netlink: 388 bytes leftover after parsing attributes in process `syz.5.16720'. [ 794.134398][T11937] chnl_net:caif_netlink_parms(): no params data found [ 794.303497][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.314693][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.320250][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16730'. [ 794.322667][T11937] bridge_slave_0: entered allmulticast mode [ 794.338811][T11937] bridge_slave_0: entered promiscuous mode [ 794.348661][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.356036][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.363332][T11937] bridge_slave_1: entered allmulticast mode [ 794.374822][T11937] bridge_slave_1: entered promiscuous mode [ 794.503099][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.547976][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.742505][T11937] team0: Port device team_slave_0 added [ 794.764490][T11937] team0: Port device team_slave_1 added [ 794.928983][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.965396][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.064548][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.117356][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.140779][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.253219][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.406514][ T3084] Bluetooth: hci6: command tx timeout [ 795.694060][T11937] hsr_slave_0: entered promiscuous mode [ 795.732005][T11937] hsr_slave_1: entered promiscuous mode [ 795.763242][T11937] debugfs: 'hsr0' already exists in 'hsr' [ 795.790418][T11937] Cannot create hsr debugfs directory [ 797.103467][ T2310] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 360 seconds [ 797.126412][ T2310] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 360 seconds [ 797.481175][ T3084] Bluetooth: hci6: command tx timeout [ 798.345595][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 799.548502][ T5868] Bluetooth: hci6: command tx timeout [ 800.435462][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 800.514612][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16750'. [ 800.821072][T12067] syzkaller1: entered promiscuous mode [ 800.835835][T12067] syzkaller1: entered allmulticast mode [ 801.299333][T11937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 801.330040][T11937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 801.354607][T11937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 801.369224][T11937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 801.494109][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.523772][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.539539][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.546767][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.574068][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.581333][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.631817][ T3084] Bluetooth: hci6: command tx timeout [ 801.892841][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.599343][T11937] veth0_vlan: entered promiscuous mode [ 802.641026][T11937] veth1_vlan: entered promiscuous mode [ 802.757591][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16763'. [ 802.770416][T11937] veth0_macvtap: entered promiscuous mode [ 802.802406][T12112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16763'. [ 802.832797][T11937] veth1_macvtap: entered promiscuous mode [ 802.899763][T11937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.958772][T11937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.020522][ T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.057593][ T62] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.103452][ T62] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.144531][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.359163][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.379272][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.423911][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.435110][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.465089][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16775'. [ 804.494613][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16775'. [ 804.681812][T12147] syzkaller0: entered promiscuous mode [ 804.693109][T12147] syzkaller0: entered allmulticast mode [ 804.715025][T12147] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 813.750809][ T5040] svc: failed to register nfsdv3 RPC service (errno 512). [ 813.759973][ T5040] svc: failed to register nfsaclv3 RPC service (errno 512). [ 815.732304][T12185] syzkaller0: entered promiscuous mode [ 815.738447][T12185] syzkaller0: entered allmulticast mode [ 815.747076][T12189] tipc: Enabled bearer , priority 0 [ 815.763060][T12180] tipc: Resetting bearer [ 815.820138][T12180] tipc: Disabling bearer [ 818.170250][T12227] syzkaller0: entered promiscuous mode [ 818.189729][T12227] syzkaller0: entered allmulticast mode [ 818.206953][T12228] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16802'. [ 818.220596][T12231] netlink: 'syz.5.16803': attribute type 4 has an invalid length. [ 818.248305][T12225] syzkaller0: entered promiscuous mode [ 818.268552][T12225] syzkaller0: entered allmulticast mode [ 818.278877][T12230] netlink: 'syz.5.16803': attribute type 4 has an invalid length. [ 818.550326][T12242] netlink: 'syz.6.16804': attribute type 4 has an invalid length. [ 818.613330][T12243] netlink: 'syz.6.16804': attribute type 4 has an invalid length. [ 819.795237][T12240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.838138][T12240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.490613][T12263] tipc: Enabling of bearer rejected, failed to enable media [ 820.605703][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.646298][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.534393][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.543431][ T3548] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.837260][T12370] netlink: 76 bytes leftover after parsing attributes in process `syz.6.16817'. [ 822.971618][T12375] syzkaller0: entered promiscuous mode [ 822.996256][T12375] syzkaller0: entered allmulticast mode [ 823.100500][T12375] tipc: Enabled bearer , priority 0 [ 823.128949][T12373] tipc: Resetting bearer [ 823.202762][T12373] tipc: Disabling bearer [ 823.448139][T12401] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16829'. [ 823.510358][T12413] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16834'. [ 823.983351][T12442] tipc: Started in network mode [ 823.997776][T12442] tipc: Node identity e660ffbf4365, cluster identity 4711 [ 824.017830][T12442] tipc: Enabled bearer , priority 0 [ 824.034557][T12443] syzkaller0: entered promiscuous mode [ 824.046340][T12443] syzkaller0: entered allmulticast mode [ 824.085039][T12442] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 824.108387][T12442] tipc: Resetting bearer [ 824.135778][T12437] tipc: Resetting bearer [ 824.172455][T12453] netlink: 'syz.0.16850': attribute type 1 has an invalid length. [ 824.182194][T12437] tipc: Disabling bearer [ 824.256925][T12453] nbd6: detected capacity change from 0 to 127 [ 824.265428][T12458] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16850'. [ 824.284250][T12458] nbd: couldn't find a device at index 0 [ 824.311523][ T3084] block nbd6: Receive control failed (result -32) [ 824.877405][T12499] net_ratelimit: 44 callbacks suppressed [ 824.877424][T12499] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 824.877851][ T1811] IPVS: starting estimator thread 0... [ 824.898312][T12505] openvswitch: netlink: nsh attr 0 has unexpected len 46 expected 0 [ 824.911330][T12505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.005581][T12508] IPVS: using max 28 ests per chain, 67200 per kthread [ 825.186693][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16874'. [ 825.257347][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16877'. [ 825.346199][T12533] siw: device registration error -23 [ 825.630858][T12550] syzkaller0: entered promiscuous mode [ 825.636753][T12550] syzkaller0: entered allmulticast mode [ 826.824850][T12596] xt_hashlimit: size too large, truncated to 1048576 [ 827.216745][ T2310] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 390 seconds [ 827.239977][ T2310] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 390 seconds [ 828.036662][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16915'. [ 828.142422][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16915'. [ 828.160477][T12631] nbd: device at index 64 is going down [ 829.541509][T12275] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.200599][T12275] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.246759][T12658] netlink: 'syz.6.16928': attribute type 1 has an invalid length. [ 830.336274][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16928'. [ 830.677558][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 830.688430][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 830.698716][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 830.709361][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 830.718093][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 830.812187][ T3084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 830.821895][ T3084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 830.832972][ T3084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 830.842578][ T3084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 830.853336][ T3084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 832.745624][ T3084] Bluetooth: hci0: command tx timeout [ 832.907324][ T3084] Bluetooth: hci6: command tx timeout [ 834.826853][ T5868] Bluetooth: hci0: command tx timeout [ 834.985537][ T3084] Bluetooth: hci6: command tx timeout [ 836.905498][ T3084] Bluetooth: hci0: command tx timeout [ 837.066296][ T3084] Bluetooth: hci6: command tx timeout [ 838.986725][ T3084] Bluetooth: hci0: command tx timeout [ 839.145557][ T3084] Bluetooth: hci6: command tx timeout [ 840.178356][T12661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 840.279486][T12275] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.319511][T12275] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.629819][T12269] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.800748][T12269] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.971568][T12269] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.010394][T12269] netdevsim netdevsim7 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.089517][T12275] bridge_slave_1: left allmulticast mode [ 842.104029][T12275] bridge_slave_1: left promiscuous mode [ 842.118969][T12275] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.161933][T12275] bridge_slave_0: left allmulticast mode [ 842.168285][T12275] bridge_slave_0: left promiscuous mode [ 842.174238][T12275] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.191339][T12275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.211376][T12275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.224160][T12275] bond0 (unregistering): Released all slaves [ 844.252681][T12668] wlan0 speed is unknown, defaulting to 1000 [ 844.541543][T12668] wg1 speed is unknown, defaulting to 1000 [ 844.548161][T12666] wlan0 speed is unknown, defaulting to 1000 [ 844.558648][T12666] wg1 speed is unknown, defaulting to 1000 [ 844.970499][T12668] chnl_net:caif_netlink_parms(): no params data found [ 845.099206][T12666] chnl_net:caif_netlink_parms(): no params data found [ 845.229390][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.237505][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.244708][T12668] bridge_slave_0: entered allmulticast mode [ 845.253452][T12668] bridge_slave_0: entered promiscuous mode [ 845.271536][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.279663][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.294531][T12668] bridge_slave_1: entered allmulticast mode [ 845.303577][T12668] bridge_slave_1: entered promiscuous mode [ 845.489404][T12666] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.496865][T12666] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.512320][T12666] bridge_slave_0: entered allmulticast mode [ 845.520460][T12666] bridge_slave_0: entered promiscuous mode [ 845.531701][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.554013][T12666] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.562543][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.570402][T12666] bridge_slave_1: entered allmulticast mode [ 845.579354][T12666] bridge_slave_1: entered promiscuous mode [ 845.591021][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.711744][T12666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.727802][T12668] team0: Port device team_slave_0 added [ 845.741451][T12666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.777925][T12668] team0: Port device team_slave_1 added [ 845.831632][T12666] team0: Port device team_slave_0 added [ 845.918058][T12275] tipc: Left network mode [ 845.924643][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.932127][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.962512][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.977282][T12666] team0: Port device team_slave_1 added [ 845.985195][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.995674][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.027581][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.245489][T12666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.252455][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.280050][T12666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.324331][T12666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.332486][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.362885][T12666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.383769][T12668] hsr_slave_0: entered promiscuous mode [ 846.391278][T12668] hsr_slave_1: entered promiscuous mode [ 846.400130][T12668] debugfs: 'hsr0' already exists in 'hsr' [ 846.407897][T12668] Cannot create hsr debugfs directory [ 846.622097][T12666] hsr_slave_0: entered promiscuous mode [ 846.635070][T12666] hsr_slave_1: entered promiscuous mode [ 846.642342][T12666] debugfs: 'hsr0' already exists in 'hsr' [ 846.649407][T12666] Cannot create hsr debugfs directory [ 847.031279][T12668] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 847.082088][T12668] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 847.117399][T12668] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 847.133743][T12668] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 847.200963][T12666] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 847.233543][T12666] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 847.258942][T12666] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 847.282323][T12666] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 847.590485][T12759] syzkaller0: entered promiscuous mode [ 847.619758][T12759] syzkaller0: entered allmulticast mode [ 848.079707][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.205072][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.252636][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.689762][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.988781][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.995967][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.006419][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.013555][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.104876][T12666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.116466][T12666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.342336][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.349569][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.418365][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.425567][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.205771][T12275] hsr_slave_0: left promiscuous mode [ 851.257602][T12275] hsr_slave_1: left promiscuous mode [ 851.264207][T12275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.271851][T12275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.291293][T12275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.315963][T12275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.392573][T12275] veth1_macvtap: left promiscuous mode [ 851.398692][T12275] veth0_macvtap: left promiscuous mode [ 851.405016][T12275] veth1_vlan: left promiscuous mode [ 851.410927][T12275] veth0_vlan: left promiscuous mode [ 851.870319][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16953'. [ 851.924423][T12817] netlink: 44 bytes leftover after parsing attributes in process `syz.5.16953'. [ 852.551102][T12275] team0 (unregistering): Port device team_slave_1 removed [ 852.624112][T12275] team0 (unregistering): Port device team_slave_0 removed [ 853.688708][T12825] ip6t_rpfilter: unknown options [ 854.027065][T12824] tipc: Enabled bearer , priority 0 [ 854.172366][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.212972][T12820] tipc: Resetting bearer [ 854.310272][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.428094][T12818] tipc: Disabling bearer [ 854.761519][T12844] syzkaller0: entered promiscuous mode [ 854.772487][T12844] syzkaller0: entered allmulticast mode [ 856.761453][T12862] FAULT_INJECTION: forcing a failure. [ 856.761453][T12862] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 856.782589][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.4.16960 Not tainted syzkaller #0 PREEMPT(full) [ 856.782615][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 856.782628][T12862] Call Trace: [ 856.782636][T12862] [ 856.782644][T12862] dump_stack_lvl+0x189/0x250 [ 856.782694][T12862] ? __pfx____ratelimit+0x10/0x10 [ 856.782722][T12862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.782747][T12862] ? __pfx__printk+0x10/0x10 [ 856.782779][T12862] should_fail_ex+0x414/0x560 [ 856.782822][T12862] _copy_to_user+0x31/0xb0 [ 856.782850][T12862] simple_read_from_buffer+0xe1/0x170 [ 856.782886][T12862] proc_fail_nth_read+0x1b3/0x220 [ 856.782913][T12862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 856.782941][T12862] ? rw_verify_area+0x2a6/0x4d0 [ 856.782965][T12862] ? __lock_acquire+0xab9/0xd20 [ 856.782983][T12862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 856.783009][T12862] vfs_read+0x200/0xa30 [ 856.783034][T12862] ? fdget_pos+0x247/0x320 [ 856.783057][T12862] ? __pfx___mutex_lock+0x10/0x10 [ 856.783087][T12862] ? __pfx_vfs_read+0x10/0x10 [ 856.783115][T12862] ? __fget_files+0x2a/0x420 [ 856.783138][T12862] ? __fget_files+0x3a0/0x420 [ 856.783154][T12862] ? __fget_files+0x2a/0x420 [ 856.783183][T12862] ksys_read+0x145/0x250 [ 856.783212][T12862] ? __pfx_ksys_read+0x10/0x10 [ 856.783243][T12862] ? do_syscall_64+0xbe/0xfa0 [ 856.783274][T12862] do_syscall_64+0xfa/0xfa0 [ 856.783300][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 856.783326][T12862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.783345][T12862] ? clear_bhb_loop+0x60/0xb0 [ 856.783369][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.783387][T12862] RIP: 0033:0x7f936178e15c [ 856.783405][T12862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 856.783423][T12862] RSP: 002b:00007f936260c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 856.783443][T12862] RAX: ffffffffffffffda RBX: 00007f93619e5fa0 RCX: 00007f936178e15c [ 856.783458][T12862] RDX: 000000000000000f RSI: 00007f936260c0a0 RDI: 0000000000000003 [ 856.783470][T12862] RBP: 00007f936260c090 R08: 0000000000000000 R09: 0000000000000000 [ 856.783482][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.783493][T12862] R13: 00007f93619e6038 R14: 00007f93619e5fa0 R15: 00007ffe988172f8 [ 856.783528][T12862] [ 857.164349][T12864] FAULT_INJECTION: forcing a failure. [ 857.164349][T12864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.179361][T12864] CPU: 1 UID: 0 PID: 12864 Comm: syz.4.16961 Not tainted syzkaller #0 PREEMPT(full) [ 857.179387][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.179399][T12864] Call Trace: [ 857.179407][T12864] [ 857.179415][T12864] dump_stack_lvl+0x189/0x250 [ 857.179445][T12864] ? __pfx____ratelimit+0x10/0x10 [ 857.179473][T12864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.179499][T12864] ? __pfx__printk+0x10/0x10 [ 857.179533][T12864] should_fail_ex+0x414/0x560 [ 857.179567][T12864] _copy_to_user+0x31/0xb0 [ 857.179594][T12864] simple_read_from_buffer+0xe1/0x170 [ 857.179629][T12864] proc_fail_nth_read+0x1b3/0x220 [ 857.179657][T12864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.179686][T12864] ? rw_verify_area+0x2a6/0x4d0 [ 857.179710][T12864] ? __lock_acquire+0xab9/0xd20 [ 857.179728][T12864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.179752][T12864] vfs_read+0x200/0xa30 [ 857.179778][T12864] ? fdget_pos+0x247/0x320 [ 857.179801][T12864] ? __pfx___mutex_lock+0x10/0x10 [ 857.179830][T12864] ? __pfx_vfs_read+0x10/0x10 [ 857.179858][T12864] ? __fget_files+0x2a/0x420 [ 857.179882][T12864] ? __fget_files+0x3a0/0x420 [ 857.179898][T12864] ? __fget_files+0x2a/0x420 [ 857.179926][T12864] ksys_read+0x145/0x250 [ 857.179955][T12864] ? __pfx_ksys_read+0x10/0x10 [ 857.179985][T12864] ? do_syscall_64+0xbe/0xfa0 [ 857.180025][T12864] do_syscall_64+0xfa/0xfa0 [ 857.180050][T12864] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.180078][T12864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.180097][T12864] ? clear_bhb_loop+0x60/0xb0 [ 857.180120][T12864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.180139][T12864] RIP: 0033:0x7f936178e15c [ 857.180156][T12864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 857.180174][T12864] RSP: 002b:00007f936260c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.180194][T12864] RAX: ffffffffffffffda RBX: 00007f93619e5fa0 RCX: 00007f936178e15c [ 857.180209][T12864] RDX: 000000000000000f RSI: 00007f936260c0a0 RDI: 0000000000000004 [ 857.180221][T12864] RBP: 00007f936260c090 R08: 0000000000000000 R09: 0000000000000000 [ 857.180233][T12864] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 857.180245][T12864] R13: 00007f93619e6038 R14: 00007f93619e5fa0 R15: 00007ffe988172f8 [ 857.180280][T12864] [ 857.880171][ T2310] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 420 seconds [ 857.891167][ T2310] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 420 seconds [ 859.092145][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.100893][T12856] team0: Cannot enslave team device to itself [ 859.467156][T12668] veth0_vlan: entered promiscuous mode [ 859.499583][T12668] veth1_vlan: entered promiscuous mode [ 859.615108][T12666] veth0_vlan: entered promiscuous mode [ 859.705072][T12668] veth0_macvtap: entered promiscuous mode [ 859.732516][T12666] veth1_vlan: entered promiscuous mode [ 859.756564][T12668] veth1_macvtap: entered promiscuous mode [ 859.857089][T12668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.874317][T12666] veth0_macvtap: entered promiscuous mode [ 859.895148][T12668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.920438][T12666] veth1_macvtap: entered promiscuous mode [ 859.941019][T31377] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.953763][T31377] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.007515][T31377] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.029651][T12890] syzkaller0: entered promiscuous mode [ 860.035140][T12890] syzkaller0: entered allmulticast mode [ 860.062154][T12666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.072456][T31377] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.084828][T12890] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 860.141238][T12666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.601928][T12896] FAULT_INJECTION: forcing a failure. [ 860.601928][T12896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.618323][T12896] CPU: 1 UID: 0 PID: 12896 Comm: syz.4.16969 Not tainted syzkaller #0 PREEMPT(full) [ 860.618350][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.618362][T12896] Call Trace: [ 860.618370][T12896] [ 860.618378][T12896] dump_stack_lvl+0x189/0x250 [ 860.618409][T12896] ? __pfx____ratelimit+0x10/0x10 [ 860.618436][T12896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.618463][T12896] ? __pfx__printk+0x10/0x10 [ 860.618483][T12896] ? __might_fault+0xb0/0x130 [ 860.618521][T12896] should_fail_ex+0x414/0x560 [ 860.618556][T12896] _copy_from_iter+0x1de/0x1790 [ 860.618586][T12896] ? rcu_is_watching+0x15/0xb0 [ 860.618611][T12896] ? __alloc_skb+0x142/0x2d0 [ 860.618630][T12896] ? __pfx__copy_from_iter+0x10/0x10 [ 860.618654][T12896] ? __build_skb_around+0x262/0x3f0 [ 860.618676][T12896] ? netlink_sendmsg+0x642/0xb30 [ 860.618694][T12896] ? skb_put+0x11b/0x210 [ 860.618717][T12896] netlink_sendmsg+0x6b2/0xb30 [ 860.618754][T12896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.618778][T12896] ? aa_sock_msg_perm+0xf1/0x1d0 [ 860.618808][T12896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.618827][T12896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.618848][T12896] __sock_sendmsg+0x21c/0x270 [ 860.618877][T12896] ____sys_sendmsg+0x505/0x830 [ 860.618905][T12896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.618936][T12896] ? import_iovec+0x74/0xa0 [ 860.618963][T12896] ___sys_sendmsg+0x21f/0x2a0 [ 860.618984][T12896] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.619039][T12896] ? __fget_files+0x2a/0x420 [ 860.619057][T12896] ? __fget_files+0x3a0/0x420 [ 860.619086][T12896] __x64_sys_sendmsg+0x19b/0x260 [ 860.619108][T12896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.619139][T12896] ? __pfx_ksys_write+0x10/0x10 [ 860.619170][T12896] ? do_syscall_64+0xbe/0xfa0 [ 860.619202][T12896] do_syscall_64+0xfa/0xfa0 [ 860.619228][T12896] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.619255][T12896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.619275][T12896] ? clear_bhb_loop+0x60/0xb0 [ 860.619299][T12896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.619318][T12896] RIP: 0033:0x7f936178f749 [ 860.619335][T12896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.619352][T12896] RSP: 002b:00007f936260c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.619373][T12896] RAX: ffffffffffffffda RBX: 00007f93619e5fa0 RCX: 00007f936178f749 [ 860.619388][T12896] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 860.619401][T12896] RBP: 00007f936260c090 R08: 0000000000000000 R09: 0000000000000000 [ 860.619413][T12896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.619424][T12896] R13: 00007f93619e6038 R14: 00007f93619e5fa0 R15: 00007ffe988172f8 [ 860.619459][T12896] [ 861.472476][T12915] netlink: 294 bytes leftover after parsing attributes in process `syz.4.16972'. [ 861.482806][T12915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.596515][T12904] syzkaller0: entered promiscuous mode [ 861.612900][T12904] syzkaller0: entered allmulticast mode [ 861.664552][T12269] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.673582][T12269] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.696144][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.713346][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.725841][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16973'. [ 861.774829][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16973'. [ 861.931991][T12269] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.008259][T12269] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.051248][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.080356][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.385819][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.427386][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.460524][T12927] FAULT_INJECTION: forcing a failure. [ 862.460524][T12927] name failslab, interval 1, probability 0, space 0, times 0 [ 862.517395][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.4.16975 Not tainted syzkaller #0 PREEMPT(full) [ 862.517421][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.517433][T12927] Call Trace: [ 862.517441][T12927] [ 862.517449][T12927] dump_stack_lvl+0x189/0x250 [ 862.517481][T12927] ? __pfx____ratelimit+0x10/0x10 [ 862.517516][T12927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.517543][T12927] ? __pfx__printk+0x10/0x10 [ 862.517569][T12927] ? __pfx___might_resched+0x10/0x10 [ 862.517589][T12927] ? fs_reclaim_acquire+0x7d/0x100 [ 862.517624][T12927] should_fail_ex+0x414/0x560 [ 862.517658][T12927] should_failslab+0xa8/0x100 [ 862.517680][T12927] __kmalloc_noprof+0xcb/0x7f0 [ 862.517706][T12927] ? ima_alloc_init_template+0x172/0x6f0 [ 862.517737][T12927] ima_alloc_init_template+0x172/0x6f0 [ 862.517770][T12927] ima_store_measurement+0x1b7/0x640 [ 862.517803][T12927] ? __pfx_ima_store_measurement+0x10/0x10 [ 862.517824][T12927] ? ima_d_path+0x189/0x250 [ 862.517856][T12927] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 862.517897][T12927] process_measurement+0x11eb/0x1a40 [ 862.517939][T12927] ? __pfx_process_measurement+0x10/0x10 [ 862.518004][T12927] ? rcu_read_lock_any_held+0xb3/0x120 [ 862.518043][T12927] ima_file_mmap+0x1a2/0x1f0 [ 862.518064][T12927] ? __pfx_ima_file_mmap+0x10/0x10 [ 862.518089][T12927] ? common_file_perm+0x1b5/0x230 [ 862.518123][T12927] security_mmap_file+0x7a4/0xa60 [ 862.518150][T12927] vm_mmap_pgoff+0x129/0x4d0 [ 862.518180][T12927] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 862.518205][T12927] ? __fget_files+0x2a/0x420 [ 862.518226][T12927] ? __fget_files+0x2a/0x420 [ 862.518244][T12927] ? __fget_files+0x2a/0x420 [ 862.518267][T12927] ksys_mmap_pgoff+0x51f/0x760 [ 862.518301][T12927] do_syscall_64+0xfa/0xfa0 [ 862.518327][T12927] ? lockdep_hardirqs_on+0x9c/0x150 [ 862.518355][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.518374][T12927] ? clear_bhb_loop+0x60/0xb0 [ 862.518398][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.518420][T12927] RIP: 0033:0x7f936178f749 [ 862.518437][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.518454][T12927] RSP: 002b:00007f936260c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 862.518475][T12927] RAX: ffffffffffffffda RBX: 00007f93619e5fa0 RCX: 00007f936178f749 [ 862.518496][T12927] RDX: 0000000000000007 RSI: 0000000000400000 RDI: 0000200000000000 [ 862.518509][T12927] RBP: 00007f936260c090 R08: 0000000000000003 R09: 0000000000000000 [ 862.518522][T12927] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 862.518534][T12927] R13: 00007f93619e6038 R14: 00007f93619e5fa0 R15: 00007ffe988172f8 [ 862.518569][T12927] [ 862.524113][ T30] audit: type=1804 audit(1764032157.400:14): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.16975" name="/newroot/3331/cpuacct.usage_sys" dev="tmpfs" ino=16776 res=0 errno=0 [ 862.894914][T27032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.913555][T27032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.053899][T12932] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 863.152054][T12937] netlink: 'syz.9.16978': attribute type 1 has an invalid length. [ 863.173769][T12937] 8021q: VLANs not supported on ip6_vti0 [ 863.663033][T12945] syzkaller0: entered promiscuous mode [ 863.669947][T12945] syzkaller0: entered allmulticast mode [ 864.182356][T12958] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 864.365150][T12960] team0: Device geneve3 is up. Set it down before adding it as a team port [ 865.789152][T13002] syzkaller0: entered promiscuous mode [ 865.795184][T13002] syzkaller0: entered allmulticast mode [ 866.449215][T13017] FAULT_INJECTION: forcing a failure. [ 866.449215][T13017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.572089][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz.9.16998 Not tainted syzkaller #0 PREEMPT(full) [ 866.572123][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.572135][T13017] Call Trace: [ 866.572143][T13017] [ 866.572151][T13017] dump_stack_lvl+0x189/0x250 [ 866.572184][T13017] ? __pfx____ratelimit+0x10/0x10 [ 866.572211][T13017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.572236][T13017] ? __pfx__printk+0x10/0x10 [ 866.572269][T13017] should_fail_ex+0x414/0x560 [ 866.572305][T13017] _copy_to_user+0x31/0xb0 [ 866.572332][T13017] simple_read_from_buffer+0xe1/0x170 [ 866.572367][T13017] proc_fail_nth_read+0x1b3/0x220 [ 866.572396][T13017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 866.572424][T13017] ? rw_verify_area+0x2a6/0x4d0 [ 866.572449][T13017] ? __lock_acquire+0xab9/0xd20 [ 866.572466][T13017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 866.572493][T13017] vfs_read+0x200/0xa30 [ 866.572518][T13017] ? fdget_pos+0x247/0x320 [ 866.572542][T13017] ? __pfx___mutex_lock+0x10/0x10 [ 866.572572][T13017] ? __pfx_vfs_read+0x10/0x10 [ 866.572600][T13017] ? __fget_files+0x2a/0x420 [ 866.572624][T13017] ? __fget_files+0x3a0/0x420 [ 866.572641][T13017] ? __fget_files+0x2a/0x420 [ 866.572669][T13017] ksys_read+0x145/0x250 [ 866.572698][T13017] ? __pfx_ksys_read+0x10/0x10 [ 866.572729][T13017] ? do_syscall_64+0xbe/0xfa0 [ 866.572761][T13017] do_syscall_64+0xfa/0xfa0 [ 866.572786][T13017] ? lockdep_hardirqs_on+0x9c/0x150 [ 866.572813][T13017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.572832][T13017] ? clear_bhb_loop+0x60/0xb0 [ 866.572855][T13017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.572873][T13017] RIP: 0033:0x7f147938e15c [ 866.572890][T13017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 866.572908][T13017] RSP: 002b:00007f14775ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 866.572929][T13017] RAX: ffffffffffffffda RBX: 00007f14795e5fa0 RCX: 00007f147938e15c [ 866.572943][T13017] RDX: 000000000000000f RSI: 00007f14775ee0a0 RDI: 0000000000000004 [ 866.572955][T13017] RBP: 00007f14775ee090 R08: 0000000000000000 R09: 0000000000000000 [ 866.572967][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.572979][T13017] R13: 00007f14795e6038 R14: 00007f14795e5fa0 R15: 00007fff13eac6b8 [ 866.573014][T13017] [ 866.842700][T13021] netlink: 76 bytes leftover after parsing attributes in process `syz.6.17000'. [ 867.257733][T13029] FAULT_INJECTION: forcing a failure. [ 867.257733][T13029] name failslab, interval 1, probability 0, space 0, times 0 [ 867.298240][T13029] CPU: 1 UID: 0 PID: 13029 Comm: syz.9.17003 Not tainted syzkaller #0 PREEMPT(full) [ 867.298268][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.298280][T13029] Call Trace: [ 867.298288][T13029] [ 867.298297][T13029] dump_stack_lvl+0x189/0x250 [ 867.298328][T13029] ? __pfx____ratelimit+0x10/0x10 [ 867.298355][T13029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.298380][T13029] ? __pfx__printk+0x10/0x10 [ 867.298406][T13029] ? __pfx___might_resched+0x10/0x10 [ 867.298426][T13029] ? fs_reclaim_acquire+0x7d/0x100 [ 867.298461][T13029] should_fail_ex+0x414/0x560 [ 867.298496][T13029] should_failslab+0xa8/0x100 [ 867.298518][T13029] __kmalloc_cache_noprof+0x6f/0x6f0 [ 867.298546][T13029] ? ima_add_digest_entry+0x56/0x350 [ 867.298573][T13029] ima_add_digest_entry+0x56/0x350 [ 867.298591][T13029] ? ima_add_template_entry+0x1f5/0x810 [ 867.298616][T13029] ima_add_template_entry+0x5e1/0x810 [ 867.298637][T13029] ? ima_add_template_entry+0x1f5/0x810 [ 867.298659][T13029] ? ima_alloc_init_template+0x172/0x6f0 [ 867.298683][T13029] ? __pfx_ima_add_template_entry+0x10/0x10 [ 867.298707][T13029] ? ima_calc_field_array_hash+0x408/0x470 [ 867.298738][T13029] ima_store_measurement+0x29e/0x640 [ 867.298773][T13029] ? __pfx_ima_store_measurement+0x10/0x10 [ 867.298792][T13029] ? ima_d_path+0x189/0x250 [ 867.298825][T13029] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 867.298865][T13029] process_measurement+0x11eb/0x1a40 [ 867.298909][T13029] ? __pfx_process_measurement+0x10/0x10 [ 867.298974][T13029] ? rcu_read_lock_any_held+0xb3/0x120 [ 867.299014][T13029] ima_file_mmap+0x1a2/0x1f0 [ 867.299042][T13029] ? __pfx_ima_file_mmap+0x10/0x10 [ 867.299068][T13029] ? common_file_perm+0x1b5/0x230 [ 867.299103][T13029] security_mmap_file+0x7a4/0xa60 [ 867.299130][T13029] vm_mmap_pgoff+0x129/0x4d0 [ 867.299161][T13029] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 867.299185][T13029] ? __fget_files+0x2a/0x420 [ 867.299207][T13029] ? __fget_files+0x2a/0x420 [ 867.299226][T13029] ? __fget_files+0x2a/0x420 [ 867.299250][T13029] ksys_mmap_pgoff+0x51f/0x760 [ 867.299283][T13029] do_syscall_64+0xfa/0xfa0 [ 867.299309][T13029] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.299337][T13029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.299356][T13029] ? clear_bhb_loop+0x60/0xb0 [ 867.299380][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.299398][T13029] RIP: 0033:0x7f147938f749 [ 867.299415][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.299433][T13029] RSP: 002b:00007f14775ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 867.299453][T13029] RAX: ffffffffffffffda RBX: 00007f14795e5fa0 RCX: 00007f147938f749 [ 867.299468][T13029] RDX: 0000000000000007 RSI: 0000000000400000 RDI: 0000200000000000 [ 867.299481][T13029] RBP: 00007f14775ee090 R08: 0000000000000003 R09: 0000000000000000 [ 867.299493][T13029] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 867.299504][T13029] R13: 00007f14795e6038 R14: 00007f14795e5fa0 R15: 00007fff13eac6b8 [ 867.299539][T13029] [ 867.300730][T13029] ima: OUT OF MEMORY ERROR creating queue entry [ 867.824749][ T30] audit: type=1804 audit(1764032162.700:15): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.9.17003" name="/newroot/4/cpuacct.usage_sys" dev="tmpfs" ino=38 res=0 errno=0 [ 868.046506][T13040] netlink: 'syz.9.17007': attribute type 39 has an invalid length. [ 871.282610][T12275] IPVS: stop unused estimator thread 0... [ 871.491652][T13054] netlink: 'syz.4.17014': attribute type 1 has an invalid length. [ 871.964529][T13070] syzkaller0: entered promiscuous mode [ 871.972257][T13070] syzkaller0: entered allmulticast mode [ 871.993644][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17017'. [ 872.756986][T13073] netlink: 'syz.6.17020': attribute type 1 has an invalid length. [ 873.256094][T13091] syzkaller0: entered promiscuous mode [ 873.261664][T13091] syzkaller0: entered allmulticast mode [ 873.463718][T13097] sctp: [Deprecated]: syz.6.17029 (pid 13097) Use of int in max_burst socket option. [ 873.463718][T13097] Use struct sctp_assoc_value instead [ 873.554290][T13099] netlink: 76 bytes leftover after parsing attributes in process `syz.6.17030'. [ 874.544858][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17033'. [ 876.224575][T13111] netlink: 'syz.8.17035': attribute type 39 has an invalid length. [ 877.471343][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17036'. [ 877.774012][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17041'. [ 877.925999][T13128] tipc: Enabled bearer , priority 0 [ 877.934080][T13128] syzkaller0: entered promiscuous mode [ 877.941053][T13128] syzkaller0: entered allmulticast mode [ 877.956903][T13128] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 877.990715][T13128] tipc: Resetting bearer [ 877.998721][T13129] syzkaller0: entered promiscuous mode [ 878.006441][T13129] syzkaller0: entered allmulticast mode [ 878.023851][T13126] tipc: Resetting bearer [ 878.088370][T13126] tipc: Disabling bearer [ 879.698062][T13133] syzkaller0: entered promiscuous mode [ 879.745370][T13133] syzkaller0: entered allmulticast mode [ 880.192014][T13150] syzkaller0: entered promiscuous mode [ 880.198364][T13150] syzkaller0: entered allmulticast mode [ 881.058614][T13169] SET target dimension over the limit! [ 881.066781][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17054'. [ 881.082083][T13170] Bluetooth: MGMT ver 1.23 [ 881.155146][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17056'. [ 881.210028][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17055'. [ 881.219767][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17055'. [ 881.527250][T13180] netlink: 'syz.5.17059': attribute type 29 has an invalid length. [ 882.522602][T13191] set match dimension is over the limit! [ 883.243573][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17068'. [ 883.294435][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17067'. [ 883.531041][T13219] Bluetooth: MGMT ver 1.23 [ 883.562978][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17070'. [ 883.573487][T13221] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 883.595025][T13219] netlink: 'syz.8.17070': attribute type 30 has an invalid length. [ 883.633714][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17070'. [ 883.809727][T13231] Cannot find map_set index 0 as target [ 884.180857][T13245] syzkaller0: entered promiscuous mode [ 884.194465][T13245] syzkaller0: entered allmulticast mode [ 884.319752][T13247] syzkaller0: entered promiscuous mode [ 884.325822][T13247] syzkaller0: entered allmulticast mode [ 884.708447][T13250] sit0: entered promiscuous mode [ 884.729631][T13250] netlink: 'syz.4.17080': attribute type 1 has an invalid length. [ 884.756408][T13250] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17080'. [ 885.294221][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17083'. [ 885.418145][T13266] netlink: 'syz.5.17085': attribute type 1 has an invalid length. [ 885.426166][T13266] netlink: 228 bytes leftover after parsing attributes in process `syz.5.17085'. [ 885.475122][T13266] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 885.625759][ T3084] Bluetooth: hci0: command tx timeout [ 885.915014][T13283] FAULT_INJECTION: forcing a failure. [ 885.915014][T13283] name failslab, interval 1, probability 0, space 0, times 0 [ 885.929435][T13283] CPU: 1 UID: 0 PID: 13283 Comm: syz.4.17088 Not tainted syzkaller #0 PREEMPT(full) [ 885.929464][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.929477][T13283] Call Trace: [ 885.929484][T13283] [ 885.929493][T13283] dump_stack_lvl+0x189/0x250 [ 885.929524][T13283] ? __pfx____ratelimit+0x10/0x10 [ 885.929551][T13283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.929578][T13283] ? __pfx__printk+0x10/0x10 [ 885.929604][T13283] ? __pfx___might_resched+0x10/0x10 [ 885.929623][T13283] ? fs_reclaim_acquire+0x7d/0x100 [ 885.929658][T13283] should_fail_ex+0x414/0x560 [ 885.929693][T13283] should_failslab+0xa8/0x100 [ 885.929714][T13283] __kvmalloc_node_noprof+0x158/0x910 [ 885.929742][T13283] ? do_ip6t_set_ctl+0x88a/0xce0 [ 885.929769][T13283] ? nf_setsockopt+0x26f/0x290 [ 885.929793][T13283] ? translate_table+0x19b/0x2040 [ 885.929818][T13283] ? do_syscall_64+0xfa/0xfa0 [ 885.929851][T13283] translate_table+0x19b/0x2040 [ 885.929894][T13283] ? __lock_acquire+0xab9/0xd20 [ 885.929919][T13283] ? __pfx_translate_table+0x10/0x10 [ 885.929950][T13283] ? __might_fault+0xb0/0x130 [ 885.929997][T13283] ? _copy_from_user+0x94/0xb0 [ 885.930027][T13283] do_ip6t_set_ctl+0x970/0xce0 [ 885.930070][T13283] ? rcu_is_watching+0x15/0xb0 [ 885.930094][T13283] ? trace_contention_end+0x39/0x120 [ 885.930117][T13283] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 885.930169][T13283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 885.930211][T13283] ? __pfx_aa_sk_perm+0x10/0x10 [ 885.930243][T13283] nf_setsockopt+0x26f/0x290 [ 885.930269][T13283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 885.930300][T13283] do_sock_setsockopt+0x17c/0x1b0 [ 885.930325][T13283] __x64_sys_setsockopt+0x13f/0x1b0 [ 885.930352][T13283] do_syscall_64+0xfa/0xfa0 [ 885.930377][T13283] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.930404][T13283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.930422][T13283] ? clear_bhb_loop+0x60/0xb0 [ 885.930446][T13283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.930465][T13283] RIP: 0033:0x7f936178f749 [ 885.930482][T13283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.930499][T13283] RSP: 002b:00007f936260c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 885.930519][T13283] RAX: ffffffffffffffda RBX: 00007f93619e5fa0 RCX: 00007f936178f749 [ 885.930534][T13283] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 885.930546][T13283] RBP: 00007f936260c090 R08: 0000000000000570 R09: 0000000000000000 [ 885.930558][T13283] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 885.930570][T13283] R13: 00007f93619e6038 R14: 00007f93619e5fa0 R15: 00007ffe988172f8 [ 885.930603][T13283] [ 887.150805][T13300] dvmrp0: entered allmulticast mode [ 887.678845][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17097'. [ 887.745447][ T30] audit: type=1107 audit(1764032182.600:16): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 887.771715][T13314] Cannot find map_set index 0 as target [ 887.891405][T13314] FAULT_INJECTION: forcing a failure. [ 887.891405][T13314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.909350][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.6.17099 Not tainted syzkaller #0 PREEMPT(full) [ 887.909374][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.909387][T13314] Call Trace: [ 887.909395][T13314] [ 887.909403][T13314] dump_stack_lvl+0x189/0x250 [ 887.909434][T13314] ? __pfx____ratelimit+0x10/0x10 [ 887.909461][T13314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.909487][T13314] ? __pfx__printk+0x10/0x10 [ 887.909520][T13314] should_fail_ex+0x414/0x560 [ 887.909555][T13314] _copy_to_user+0x31/0xb0 [ 887.909582][T13314] simple_read_from_buffer+0xe1/0x170 [ 887.909625][T13314] proc_fail_nth_read+0x1b3/0x220 [ 887.909653][T13314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.909682][T13314] ? rw_verify_area+0x2a6/0x4d0 [ 887.909706][T13314] ? __lock_acquire+0xab9/0xd20 [ 887.909723][T13314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.909749][T13314] vfs_read+0x200/0xa30 [ 887.909774][T13314] ? fdget_pos+0x247/0x320 [ 887.909797][T13314] ? __pfx___mutex_lock+0x10/0x10 [ 887.909827][T13314] ? __pfx_vfs_read+0x10/0x10 [ 887.909855][T13314] ? __fget_files+0x2a/0x420 [ 887.909877][T13314] ? __fget_files+0x3a0/0x420 [ 887.909894][T13314] ? __fget_files+0x2a/0x420 [ 887.909922][T13314] ksys_read+0x145/0x250 [ 887.909951][T13314] ? __pfx_ksys_read+0x10/0x10 [ 887.909981][T13314] ? do_syscall_64+0xbe/0xfa0 [ 887.910014][T13314] do_syscall_64+0xfa/0xfa0 [ 887.910039][T13314] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.910066][T13314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.910085][T13314] ? clear_bhb_loop+0x60/0xb0 [ 887.910109][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.910127][T13314] RIP: 0033:0x7fa91238e15c [ 887.910144][T13314] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 887.910162][T13314] RSP: 002b:00007fa913272030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.910182][T13314] RAX: ffffffffffffffda RBX: 00007fa9125e5fa0 RCX: 00007fa91238e15c [ 887.910197][T13314] RDX: 000000000000000f RSI: 00007fa9132720a0 RDI: 0000000000000005 [ 887.910210][T13314] RBP: 00007fa913272090 R08: 0000000000000000 R09: 0000000000000000 [ 887.910221][T13314] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 887.910233][T13314] R13: 00007fa9125e6038 R14: 00007fa9125e5fa0 R15: 00007fff732e1788 [ 887.910269][T13314] [ 888.220039][T13317] wg1: entered promiscuous mode [ 888.224945][T13317] wg1: entered allmulticast mode [ 888.362592][T13321] syzkaller0: entered promiscuous mode [ 888.368214][T13321] syzkaller0: entered allmulticast mode [ 888.498095][T13328] FAULT_INJECTION: forcing a failure. [ 888.498095][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.541080][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.8.17105 Not tainted syzkaller #0 PREEMPT(full) [ 888.541107][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 888.541119][T13328] Call Trace: [ 888.541127][T13328] [ 888.541136][T13328] dump_stack_lvl+0x189/0x250 [ 888.541166][T13328] ? __pfx____ratelimit+0x10/0x10 [ 888.541193][T13328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.541218][T13328] ? __pfx__printk+0x10/0x10 [ 888.541252][T13328] should_fail_ex+0x414/0x560 [ 888.541288][T13328] _copy_to_user+0x31/0xb0 [ 888.541314][T13328] simple_read_from_buffer+0xe1/0x170 [ 888.541349][T13328] proc_fail_nth_read+0x1b3/0x220 [ 888.541377][T13328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 888.541406][T13328] ? rw_verify_area+0x2a6/0x4d0 [ 888.541430][T13328] ? __lock_acquire+0xab9/0xd20 [ 888.541447][T13328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 888.541473][T13328] vfs_read+0x200/0xa30 [ 888.541499][T13328] ? fdget_pos+0x247/0x320 [ 888.541522][T13328] ? __pfx___mutex_lock+0x10/0x10 [ 888.541551][T13328] ? __pfx_vfs_read+0x10/0x10 [ 888.541579][T13328] ? __fget_files+0x2a/0x420 [ 888.541603][T13328] ? __fget_files+0x3a0/0x420 [ 888.541620][T13328] ? __fget_files+0x2a/0x420 [ 888.541649][T13328] ksys_read+0x145/0x250 [ 888.541679][T13328] ? __pfx_ksys_read+0x10/0x10 [ 888.541709][T13328] ? do_syscall_64+0xbe/0xfa0 [ 888.541742][T13328] do_syscall_64+0xfa/0xfa0 [ 888.541768][T13328] ? lockdep_hardirqs_on+0x9c/0x150 [ 888.541801][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.541821][T13328] ? clear_bhb_loop+0x60/0xb0 [ 888.541845][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.541863][T13328] RIP: 0033:0x7ff8b338e15c [ 888.541881][T13328] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 888.541898][T13328] RSP: 002b:00007ff8b423a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.541918][T13328] RAX: ffffffffffffffda RBX: 00007ff8b35e5fa0 RCX: 00007ff8b338e15c [ 888.541933][T13328] RDX: 000000000000000f RSI: 00007ff8b423a0a0 RDI: 0000000000000003 [ 888.541946][T13328] RBP: 00007ff8b423a090 R08: 0000000000000000 R09: 0000000000000000 [ 888.541957][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.541969][T13328] R13: 00007ff8b35e6038 R14: 00007ff8b35e5fa0 R15: 00007ffc2ef2f968 [ 888.542006][T13328] [ 888.998264][ T2310] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 450 seconds [ 889.025734][ T2310] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 450 seconds [ 889.116517][T13331] tipc: Enabling of bearer rejected, failed to enable media [ 889.586155][T13352] netlink: 76 bytes leftover after parsing attributes in process `syz.6.17109'. [ 889.648493][T13355] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 889.793689][T13357] syzkaller0: entered promiscuous mode [ 889.806064][T13357] syzkaller0: entered allmulticast mode [ 889.900194][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17113'. [ 892.159984][T13388] tipc: Enabled bearer , priority 0 [ 892.174876][T13388] syzkaller0: entered promiscuous mode [ 892.182562][T13388] syzkaller0: entered allmulticast mode [ 892.190915][T13390] syzkaller0: entered promiscuous mode [ 892.198364][T13390] syzkaller0: entered allmulticast mode [ 892.217680][T13388] tipc: Resetting bearer [ 892.360481][T13386] tipc: Resetting bearer [ 892.456682][T13386] tipc: Disabling bearer [ 892.623285][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17130'. [ 892.781285][T12120] hid-generic 0005:0002:5508.0002: item fetching failed at offset 2/3 [ 892.790507][T12120] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22 [ 892.866015][T13405] netlink: 'syz.6.17133': attribute type 4 has an invalid length. [ 892.872626][T13406] netlink: 'syz.6.17133': attribute type 4 has an invalid length. [ 892.958313][T13410] netlink: 'syz.6.17134': attribute type 1 has an invalid length. [ 893.010221][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17134'. [ 893.019818][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17134'. [ 893.039267][T13410] 8021q: adding VLAN 0 to HW filter on device bond7 [ 893.549613][T13417] wlan0 speed is unknown, defaulting to 1000 [ 893.558195][T13417] wg1 speed is unknown, defaulting to 1000 [ 893.927640][T13428] netlink: 'syz.9.17141': attribute type 1 has an invalid length. [ 894.049186][T13428] bond1 (unregistering): Released all slaves [ 895.282908][T13436] tipc: Started in network mode [ 895.294781][T13436] tipc: Node identity 4a139bbb332e, cluster identity 4711 [ 895.316908][T13436] tipc: Enabled bearer , priority 0 [ 895.339066][T13440] syzkaller0: entered promiscuous mode [ 895.344556][T13440] syzkaller0: entered allmulticast mode [ 895.727457][T13443] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 895.759352][T13444] tipc: Resetting bearer [ 895.771563][T13448] netlink: 'syz.5.17147': attribute type 3 has an invalid length. [ 895.781604][T13448] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17147'. [ 895.862158][T13432] tipc: Resetting bearer [ 895.998036][T13432] tipc: Disabling bearer [ 896.057405][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17152'. [ 896.203191][T13467] syzkaller0: entered promiscuous mode [ 896.214891][T13467] syzkaller0: entered allmulticast mode [ 896.981140][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17158'. [ 897.272918][T13486] IPVS: length: 140 != 8 [ 897.292024][T13488] tipc: Failed to remove unknown binding: 66,1,1/0:2927125390/2927125392 [ 897.300783][T13488] tipc: Failed to remove unknown binding: 66,1,1/0:2927125390/2927125392 [ 897.317719][T13488] netlink: 48 bytes leftover after parsing attributes in process `syz.9.17163'. [ 897.438516][T13490] netlink: 'syz.9.17164': attribute type 1 has an invalid length. [ 897.481478][T13490] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17164'. [ 897.494969][T13490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 897.519767][T13493] FAULT_INJECTION: forcing a failure. [ 897.519767][T13493] name failslab, interval 1, probability 0, space 0, times 0 [ 897.552780][T13493] CPU: 1 UID: 0 PID: 13493 Comm: syz.5.17165 Not tainted syzkaller #0 PREEMPT(full) [ 897.552806][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 897.552818][T13493] Call Trace: [ 897.552826][T13493] [ 897.552835][T13493] dump_stack_lvl+0x189/0x250 [ 897.552865][T13493] ? __pfx____ratelimit+0x10/0x10 [ 897.552892][T13493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.552918][T13493] ? __pfx__printk+0x10/0x10 [ 897.552942][T13493] ? __pfx___might_resched+0x10/0x10 [ 897.552964][T13493] ? fs_reclaim_acquire+0x7d/0x100 [ 897.552998][T13493] should_fail_ex+0x414/0x560 [ 897.553032][T13493] should_failslab+0xa8/0x100 [ 897.553053][T13493] __kmalloc_noprof+0xcb/0x7f0 [ 897.553079][T13493] ? rcu_is_watching+0x15/0xb0 [ 897.553099][T13493] ? security_sk_alloc+0x52/0x390 [ 897.553121][T13493] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 897.553149][T13493] security_sk_alloc+0x52/0x390 [ 897.553174][T13493] sk_prot_alloc+0x101/0x220 [ 897.553200][T13493] sk_alloc+0x3a/0x370 [ 897.553224][T13493] inet_create+0x7a0/0x1000 [ 897.553245][T13493] ? inet_create+0x9c/0x1000 [ 897.553270][T13493] __sock_create+0x4b3/0x9f0 [ 897.553308][T13493] mptcp_subflow_create_socket+0xf0/0x7d0 [ 897.553331][T13493] ? register_lock_class+0x51/0x320 [ 897.553350][T13493] ? mptcp_sendmsg+0x11a/0x1980 [ 897.553378][T13493] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 897.553396][T13493] ? preempt_schedule_common+0x83/0xd0 [ 897.553424][T13493] ? preempt_schedule+0xae/0xc0 [ 897.553449][T13493] ? __pfx_preempt_schedule+0x10/0x10 [ 897.553480][T13493] __mptcp_nmpc_sk+0x148/0x760 [ 897.553503][T13493] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 897.553529][T13493] ? __local_bh_enable_ip+0x13e/0x1c0 [ 897.553554][T13493] mptcp_sendmsg_fastopen+0xd4/0x580 [ 897.553593][T13493] mptcp_sendmsg+0x1774/0x1980 [ 897.553621][T13493] ? __pfx___might_resched+0x10/0x10 [ 897.553659][T13493] ? aa_sk_perm+0x81e/0x950 [ 897.553699][T13493] ? __pfx_aa_sk_perm+0x10/0x10 [ 897.553725][T13493] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 897.553754][T13493] ? sock_rps_record_flow+0x19/0x410 [ 897.553775][T13493] ? inet_sendmsg+0x2f4/0x370 [ 897.553798][T13493] __sock_sendmsg+0x19c/0x270 [ 897.553827][T13493] __sys_sendto+0x3bd/0x520 [ 897.553848][T13493] ? __pfx___sys_sendto+0x10/0x10 [ 897.553864][T13493] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 897.553907][T13493] ? __fget_files+0x3a0/0x420 [ 897.553938][T13493] ? ksys_write+0x22a/0x250 [ 897.553968][T13493] ? __pfx_ksys_write+0x10/0x10 [ 897.553999][T13493] __x64_sys_sendto+0xde/0x100 [ 897.554022][T13493] do_syscall_64+0xfa/0xfa0 [ 897.554049][T13493] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.554076][T13493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.554095][T13493] ? clear_bhb_loop+0x60/0xb0 [ 897.554120][T13493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.554139][T13493] RIP: 0033:0x7f7b14f8f749 [ 897.554157][T13493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.554173][T13493] RSP: 002b:00007f7b15ef2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 897.554195][T13493] RAX: ffffffffffffffda RBX: 00007f7b151e5fa0 RCX: 00007f7b14f8f749 [ 897.554210][T13493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 897.554221][T13493] RBP: 00007f7b15ef2090 R08: 00002000000001c0 R09: 0000000000000010 [ 897.554234][T13493] R10: 0000000020008800 R11: 0000000000000246 R12: 0000000000000001 [ 897.554246][T13493] R13: 00007f7b151e6038 R14: 00007f7b151e5fa0 R15: 00007ffcb33639e8 [ 897.554282][T13493] [ 897.966473][T13499] netlink: 256 bytes leftover after parsing attributes in process `syz.9.17167'. [ 898.031079][T13501] syzkaller0: entered promiscuous mode [ 898.037985][T13501] syzkaller0: entered allmulticast mode [ 898.097619][T13501] netlink: 'syz.5.17168': attribute type 4 has an invalid length. [ 898.685846][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17175'. [ 898.934571][T13522] netlink: 'syz.6.17176': attribute type 1 has an invalid length. [ 899.014196][T13523] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17176'. [ 899.184398][T13523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 899.317984][T13526] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 899.613323][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17178'. [ 899.794446][T13533] netlink: 'syz.9.17181': attribute type 11 has an invalid length. [ 900.653076][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.8.17185'. [ 900.782664][T13546] syzkaller0: entered promiscuous mode [ 900.794188][T13546] syzkaller0: entered allmulticast mode [ 901.330355][T13558] netlink: 'syz.8.17189': attribute type 1 has an invalid length. [ 901.381703][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17189'. [ 901.396659][T13558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.658087][T13569] netlink: 76 bytes leftover after parsing attributes in process `syz.8.17191'. [ 902.822559][T13596] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 902.921736][T13596] netlink: 'syz.6.17198': attribute type 39 has an invalid length. [ 903.369602][T13612] netlink: 'syz.4.17204': attribute type 1 has an invalid length. [ 903.422667][T13613] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17204'. [ 903.475185][T13616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17204'. [ 905.867074][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 912.899324][T13603] vlan3: entered promiscuous mode [ 912.904939][T13603] bridge0: entered promiscuous mode [ 912.926246][T13612] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 913.113726][T13650] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17207'. [ 913.150622][T13650] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 913.421305][T13655] syzkaller0: entered promiscuous mode [ 913.429535][T13655] syzkaller0: entered allmulticast mode [ 913.800194][T13666] syzkaller0: entered promiscuous mode [ 913.806318][T13666] syzkaller0: entered allmulticast mode [ 915.723487][T13670] netlink: 'syz.9.17218': attribute type 1 has an invalid length. [ 915.759899][T13670] netlink: 52 bytes leftover after parsing attributes in process `syz.9.17218'. [ 915.769560][T13670] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17218'. [ 915.783614][T13670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 915.974649][T13674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17220'. [ 917.378304][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17230'. [ 918.422636][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17237'. [ 918.428238][T13738] netlink: 'syz.4.17236': attribute type 21 has an invalid length. [ 918.462422][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17237'. [ 918.561540][T13744] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 918.616606][T13744] netlink: 148 bytes leftover after parsing attributes in process `syz.9.17237'. [ 918.655466][T13743] netlink: 148 bytes leftover after parsing attributes in process `syz.9.17237'. [ 918.771487][T13749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 918.781254][T13749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 918.792115][T13749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 918.800526][T13749] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 918.808824][T13749] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 919.374316][T13760] netlink: 'syz.4.17241': attribute type 1 has an invalid length. [ 919.417984][T13340] block nbd2: Possible stuck request ffff888024f2e000: control (read@0,1024B). Runtime 480 seconds [ 919.447045][T13340] block nbd2: Possible stuck request ffff888024f2e1c0: control (read@1024,1024B). Runtime 480 seconds [ 919.461358][T13760] 8021q: adding VLAN 0 to HW filter on device bond22 [ 919.462013][T13748] wlan0 speed is unknown, defaulting to 1000 [ 919.463872][T13748] wg1 speed is unknown, defaulting to 1000 [ 919.496171][T13762] vlan0: entered allmulticast mode [ 919.496192][T13762] bond22: entered allmulticast mode [ 919.973504][T13767] can: request_module (can-proto-0) failed. [ 920.055181][T13777] netlink: 312 bytes leftover after parsing attributes in process `syz.5.17246'. [ 920.420291][T13748] chnl_net:caif_netlink_parms(): no params data found [ 920.776361][T13797] netlink: 'syz.5.17250': attribute type 1 has an invalid length. [ 920.906004][ T3084] Bluetooth: hci7: command tx timeout [ 920.974882][T13797] bond12: entered promiscuous mode [ 920.981425][T13797] 8021q: adding VLAN 0 to HW filter on device bond12 [ 921.003697][T13808] netlink: 'syz.9.17252': attribute type 1 has an invalid length. [ 921.014304][T13806] netlink: 'syz.4.17251': attribute type 1 has an invalid length. [ 921.196569][T13812] Cannot find set identified by id 65534 to match [ 921.480404][T13808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 921.502203][T13811] vlan2: entered allmulticast mode [ 921.507533][T13811] bond3: entered allmulticast mode [ 921.531477][T13807] bond12: (slave bridge13): making interface the new active one [ 921.544906][T13807] bridge13: entered promiscuous mode [ 921.563855][T13807] bridge13: left promiscuous mode [ 922.985498][ T3084] Bluetooth: hci7: command tx timeout [ 923.932315][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.953828][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.971149][T13748] bridge_slave_0: entered allmulticast mode [ 923.988090][T13748] bridge_slave_0: entered promiscuous mode [ 924.048786][T13822] tipc: Enabling of bearer rejected, failed to enable media [ 924.092422][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.134989][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.148246][T13748] bridge_slave_1: entered allmulticast mode [ 924.154653][T13837] xt_limit: Overflow, try lower: 604147548/4200216962 [ 924.164232][T13748] bridge_slave_1: entered promiscuous mode [ 924.318256][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.351387][T13841] netlink: 68 bytes leftover after parsing attributes in process `syz.9.17258'. [ 924.386784][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.774689][T13748] team0: Port device team_slave_0 added [ 924.812919][T13748] team0: Port device team_slave_1 added [ 924.882296][T13854] FAULT_INJECTION: forcing a failure. [ 924.882296][T13854] name failslab, interval 1, probability 0, space 0, times 0 [ 924.900777][T13854] CPU: 0 UID: 0 PID: 13854 Comm: syz.4.17264 Not tainted syzkaller #0 PREEMPT(full) [ 924.900802][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.900814][T13854] Call Trace: [ 924.900822][T13854] [ 924.900830][T13854] dump_stack_lvl+0x189/0x250 [ 924.900862][T13854] ? __pfx____ratelimit+0x10/0x10 [ 924.900890][T13854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.900916][T13854] ? __pfx__printk+0x10/0x10 [ 924.900940][T13854] ? __pfx___might_resched+0x10/0x10 [ 924.900962][T13854] ? fs_reclaim_acquire+0x7d/0x100 [ 924.900998][T13854] should_fail_ex+0x414/0x560 [ 924.901040][T13854] ? __pfx_sock_alloc_inode+0x10/0x10 [ 924.901065][T13854] should_failslab+0xa8/0x100 [ 924.901083][T13854] ? __pfx_sock_alloc_inode+0x10/0x10 [ 924.901105][T13854] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 924.901132][T13854] ? sock_alloc_inode+0x28/0xc0 [ 924.901163][T13854] ? __pfx_sock_alloc_inode+0x10/0x10 [ 924.901187][T13854] sock_alloc_inode+0x28/0xc0 [ 924.901213][T13854] alloc_inode+0x6a/0x1b0 [ 924.901244][T13854] __sock_create+0x12d/0x9f0 [ 924.901284][T13854] udp_sock_create6+0xcb/0x690 [ 924.901320][T13854] ? __pfx_udp_sock_create6+0x10/0x10 [ 924.901353][T13854] ? __ipv6_chk_addr_and_flags+0x686/0x7e0 [ 924.901374][T13854] ? __ipv6_chk_addr_and_flags+0x187/0x7e0 [ 924.901400][T13854] ? tipc_udp_enable+0x64d/0xb30 [ 924.901425][T13854] tipc_udp_enable+0x86d/0xb30 [ 924.901452][T13854] ? __pfx_tipc_udp_enable+0x10/0x10 [ 924.901470][T13854] ? genl_family_rcv_msg_doit+0x215/0x300 [ 924.901550][T13854] ? __kasan_kmalloc+0x93/0xb0 [ 924.901581][T13854] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 924.901618][T13854] __tipc_nl_bearer_enable+0xc21/0x13f0 [ 924.901651][T13854] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 924.901668][T13854] ? __mutex_lock+0xd3b/0x1350 [ 924.901713][T13854] ? tipc_nl_bearer_enable+0x17/0x40 [ 924.901736][T13854] ? __pfx___mutex_lock+0x10/0x10 [ 924.901768][T13854] ? rcu_is_watching+0x15/0xb0 [ 924.901794][T13854] ? __nla_parse+0x40/0x60 [ 924.901820][T13854] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 924.901844][T13854] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 924.901876][T13854] tipc_nl_bearer_enable+0x22/0x40 [ 924.901895][T13854] genl_family_rcv_msg_doit+0x215/0x300 [ 924.901929][T13854] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 924.901981][T13854] genl_rcv_msg+0x60e/0x790 [ 924.902014][T13854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 924.902044][T13854] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 924.902067][T13854] ? __asan_memcpy+0x40/0x70 [ 924.902092][T13854] ? __pfx_ref_tracker_free+0x10/0x10 [ 924.902120][T13854] netlink_rcv_skb+0x208/0x470 [ 924.902137][T13854] ? __lock_acquire+0xab9/0xd20 [ 924.902157][T13854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 924.902184][T13854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 924.902225][T13854] ? down_read+0x1ad/0x2e0 [ 924.902247][T13854] genl_rcv+0x28/0x40 [ 924.902269][T13854] netlink_unicast+0x82f/0x9e0 [ 924.902308][T13854] ? __pfx_netlink_unicast+0x10/0x10 [ 924.902338][T13854] ? netlink_sendmsg+0x642/0xb30 [ 924.902355][T13854] ? skb_put+0x11b/0x210 [ 924.902380][T13854] netlink_sendmsg+0x805/0xb30 [ 924.902411][T13854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.902435][T13854] ? aa_sock_msg_perm+0xf1/0x1d0 [ 924.902466][T13854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.902485][T13854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.902505][T13854] __sock_sendmsg+0x21c/0x270 [ 924.902535][T13854] ____sys_sendmsg+0x505/0x830 [ 924.902563][T13854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.902596][T13854] ? import_iovec+0x74/0xa0 [ 924.902625][T13854] ___sys_sendmsg+0x21f/0x2a0 [ 924.902650][T13854] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.902715][T13854] ? __fget_files+0x2a/0x420 [ 924.902733][T13854] ? __fget_files+0x3a0/0x420 [ 924.902764][T13854] __x64_sys_sendmsg+0x19b/0x260 [ 924.902789][T13854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.902822][T13854] ? __pfx_ksys_write+0x10/0x10 [ 924.902854][T13854] ? do_syscall_64+0xbe/0xfa0 [ 924.902886][T13854] do_syscall_64+0xfa/0xfa0 [ 924.902911][T13854] ? lockdep_hardirqs_on+0x9c/0x150 [ 924.902939][T13854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.902958][T13854] ? clear_bhb_loop+0x60/0xb0 [ 924.902982][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.903000][T13854] RIP: 0033:0x7f936178f749 [ 924.903018][T13854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.903042][T13854] RSP: 002b:00007f936260c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.903063][T13854] RAX: ffffffffffffffda RBX: 00007f93619e5fa0 RCX: 00007f936178f749 [ 924.903077][T13854] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000003 [ 924.903089][T13854] RBP: 00007f936260c090 R08: 0000000000000000 R09: 0000000000000000 [ 924.903101][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.903112][T13854] R13: 00007f93619e6038 R14: 00007f93619e5fa0 R15: 00007ffe988172f8 [ 924.903148][T13854] [ 924.904220][T13854] socket: no more sockets [ 925.406382][T13860] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 925.425356][ T3084] Bluetooth: hci7: command tx timeout [ 925.443775][T13854] tipc: Enabling of bearer rejected, failed to enable media [ 925.614884][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.642267][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.713394][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.804266][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.818241][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.907381][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.112846][T13748] hsr_slave_0: entered promiscuous mode [ 926.217301][T13748] hsr_slave_1: entered promiscuous mode [ 926.300603][T13748] debugfs: 'hsr0' already exists in 'hsr' [ 926.326536][T13748] Cannot create hsr debugfs directory [ 926.342442][T13876] tipc: Enabled bearer , priority 0 [ 926.367963][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17273'. [ 926.476562][T13873] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 926.489614][T13873] tipc: Resetting bearer [ 926.703051][T13870] tipc: Disabling bearer [ 926.756387][T13890] tipc: Enabled bearer , priority 10 [ 927.364580][T13914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.410464][T13913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.466245][ T3084] Bluetooth: hci7: command tx timeout [ 927.712509][T13748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.875363][T12305] tipc: Node number set to 2034080699 [ 927.992123][T13929] netlink: 64 bytes leftover after parsing attributes in process `syz.9.17287'. [ 928.058952][T13930] netlink: 'syz.9.17287': attribute type 24 has an invalid length. [ 928.342928][T13935] syzkaller0: entered promiscuous mode [ 928.349869][T13935] syzkaller0: entered allmulticast mode [ 928.391102][T13935] tipc: Started in network mode [ 928.402106][T13935] tipc: Node identity 00000000008000000000000000000001, cluster identity 4711 [ 928.412082][T13935] tipc: Enabling of bearer rejected, failed to enable media [ 928.766849][T13937] netlink: 7 bytes leftover after parsing attributes in process `syz.4.17290'. [ 930.185628][ T31] INFO: task syz.1.16537:11412 blocked for more than 143 seconds. [ 930.194255][ T31] Not tainted syzkaller #0 [ 930.203292][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 930.212735][ T31] task:syz.1.16537 state:D stack:25256 pid:11412 tgid:11411 ppid:5870 task_flags:0x400140 flags:0x00080002 [ 930.225807][ T31] Call Trace: [ 930.229158][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 930.232245][ T31] __schedule+0x1798/0x4cc0 [ 930.246092][ T31] ? __lock_acquire+0xab9/0xd20 [ 930.254700][ T31] ? __lock_acquire+0xab9/0xd20 [ 930.266349][ T31] ? __pfx___schedule+0x10/0x10 [ 930.325805][ T31] ? schedule+0x91/0x360 [ 930.350599][ T31] schedule+0x165/0x360 [ 930.380849][ T31] schedule_preempt_disabled+0x13/0x30 [ 930.445355][ T31] __mutex_lock+0x7e6/0x1350 [ 930.484292][ T31] ? __mutex_lock+0x5bb/0x1350 [ 930.507767][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 930.513526][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 930.541049][ T31] ? net_generic+0x1e/0x240 [ 930.547810][ T31] ? net_generic+0x1e/0x240 [ 930.552338][ T31] ? net_generic+0x1e/0x240 [ 930.557277][ T31] ? net_generic+0x1e/0x240 [ 930.561804][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 930.568176][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 930.573754][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 930.581242][ T31] ? bpf_lsm_capable+0x9/0x20 [ 930.595490][ T31] ? security_capable+0x7e/0x2e0 [ 930.600469][ T31] genl_rcv_msg+0x60e/0x790 [ 930.604995][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 930.614830][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 930.623428][ T31] netlink_rcv_skb+0x208/0x470 [ 930.628640][ T31] ? __lock_acquire+0xab9/0xd20 [ 930.633867][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 930.639303][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 930.644628][ T31] ? down_read+0x1ad/0x2e0 [ 930.649602][ T31] genl_rcv+0x28/0x40 [ 930.653635][ T31] netlink_unicast+0x82f/0x9e0 [ 930.659673][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 930.664989][ T31] ? netlink_sendmsg+0x642/0xb30 [ 930.679533][ T31] ? skb_put+0x11b/0x210 [ 930.683805][ T31] netlink_sendmsg+0x805/0xb30 [ 930.689428][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.694839][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 930.700379][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 930.706189][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.711494][ T31] __sock_sendmsg+0x21c/0x270 [ 930.721083][ T31] ____sys_sendmsg+0x505/0x830 [ 930.728361][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.733684][ T31] ? import_iovec+0x74/0xa0 [ 930.739527][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 930.744227][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.752073][ T31] ? __fget_files+0x2a/0x420 [ 930.756935][ T31] ? __fget_files+0x3a0/0x420 [ 930.761634][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 930.767102][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 930.772595][ T31] ? do_syscall_64+0xbe/0xfa0 [ 930.779003][ T31] do_syscall_64+0xfa/0xfa0 [ 930.783590][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.789415][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.796030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 930.800725][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.807158][ T31] RIP: 0033:0x7fcf8d18f749 [ 930.811588][ T31] RSP: 002b:00007fcf8e016038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.821119][ T31] RAX: ffffffffffffffda RBX: 00007fcf8d3e5fa0 RCX: 00007fcf8d18f749 [ 930.843422][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 930.854641][ T31] RBP: 00007fcf8d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 930.863054][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.871502][ T31] R13: 00007fcf8d3e6038 R14: 00007fcf8d3e5fa0 R15: 00007ffd84358098 [ 930.879763][ T31] [ 930.883148][ T31] [ 930.883148][ T31] Showing all locks held in the system: [ 930.896371][ T31] 1 lock held by khungtaskd/31: [ 930.901237][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 930.912294][ T31] 2 locks held by getty/5587: [ 930.917270][ T31] #0: ffff888033e840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 930.927738][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 930.939766][ T31] 3 locks held by kworker/u8:3/27032: [ 930.945143][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 930.962512][ T31] #1: ffffc90000bb7ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 930.974003][ T31] #2: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 930.983519][ T31] 1 lock held by udevd/28363: [ 930.990158][ T31] #0: ffff888024df5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 930.999773][ T31] 5 locks held by kworker/1:1/1811: [ 931.004979][ T31] 2 locks held by syz.3.14386/5040: [ 931.012182][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 931.021097][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 931.066180][ T31] 2 locks held by syz.1.16537/11412: [ 931.071497][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 931.080151][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 931.090702][ T31] 7 locks held by syz-executor/13748: [ 931.097019][ T31] #0: ffff88807b832420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 931.107081][ T31] #1: ffff888043bc8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 931.117152][ T31] #2: ffff888144b385a8 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 931.127895][ T31] #3: ffffffff8eb636c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 931.138632][ T31] #4: ffff88802c51d0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 931.153360][ T31] #5: ffff88807b1d8250 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 931.163528][ T31] #6: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 931.180620][ T31] 2 locks held by syz.9.17289/13934: [ 931.186336][ T31] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 931.195624][ T31] #1: ffffffff8ddd5550 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0xc56/0x2390 [ 931.208598][ T31] 2 locks held by syz.4.17290/13937: [ 931.213889][ T31] #0: ffffffff8f7d2e20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 931.223961][ T31] #1: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 931.233838][ T31] 1 lock held by syz.8.17291/13940: [ 931.239554][ T31] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 931.249428][ T31] 3 locks held by syz.5.17292/13942: [ 931.254726][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 931.264125][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 931.273610][ T31] #2: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_create+0x7c7/0xbd0 [ 931.284220][ T31] [ 931.291581][ T31] ============================================= [ 931.291581][ T31] [ 931.300543][ T31] NMI backtrace for cpu 0 [ 931.300558][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 931.300579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.300591][ T31] Call Trace: [ 931.300598][ T31] [ 931.300607][ T31] dump_stack_lvl+0x189/0x250 [ 931.300640][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.300666][ T31] ? __pfx__printk+0x10/0x10 [ 931.300699][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 931.300726][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 931.300751][ T31] ? __pfx__printk+0x10/0x10 [ 931.300776][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 931.300809][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 931.300835][ T31] watchdog+0xf60/0xfa0 [ 931.300860][ T31] ? watchdog+0x1e2/0xfa0 [ 931.300887][ T31] kthread+0x711/0x8a0 [ 931.300917][ T31] ? __pfx_watchdog+0x10/0x10 [ 931.300935][ T31] ? __pfx_kthread+0x10/0x10 [ 931.300962][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.300987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.301010][ T31] ? __pfx_kthread+0x10/0x10 [ 931.301035][ T31] ret_from_fork+0x4bc/0x870 [ 931.301056][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 931.301082][ T31] ? __switch_to_asm+0x39/0x70 [ 931.301096][ T31] ? __switch_to_asm+0x33/0x70 [ 931.301109][ T31] ? __pfx_kthread+0x10/0x10 [ 931.301134][ T31] ret_from_fork_asm+0x1a/0x30 [ 931.301168][ T31] [ 931.301176][ T31] Sending NMI from CPU 0 to CPUs 1: [ 931.449223][ C1] NMI backtrace for cpu 1 [ 931.449251][ C1] CPU: 1 UID: 0 PID: 1811 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 931.449270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.449282][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 931.449312][ C1] RIP: 0010:__lock_acquire+0x4fc/0xd20 [ 931.449331][ C1] Code: 00 eb 1d 44 89 e0 48 ff c3 48 63 8f 28 0b 00 00 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 <41> 8b 07 25 ff 1f 00 00 48 0f a3 05 64 c9 d8 11 73 10 48 69 c0 c8 [ 931.449346][ C1] RSP: 0018:ffffc90000a07c08 EFLAGS: 00000087 [ 931.449360][ C1] RAX: 000000000000000a RBX: 0000000000000002 RCX: 0000000000062690 [ 931.449370][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: ffff8880784e0000 [ 931.449381][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81738c45 [ 931.449391][ C1] R10: ffffc90000a07e58 R11: ffffffff81ac2e10 R12: 0000000000000003 [ 931.449403][ C1] R13: 0000000000000001 R14: ffff8880784e0bd0 R15: ffff8880784e0ba0 [ 931.449414][ C1] FS: 0000000000000000(0000) GS:ffff888126239000(0000) knlGS:0000000000000000 [ 931.449428][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.449440][ C1] CR2: 00007ff8b4218f98 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 931.449456][ C1] Call Trace: [ 931.449462][ C1] [ 931.449474][ C1] ? unwind_next_frame+0xa5/0x2390 [ 931.449494][ C1] lock_acquire+0x120/0x360 [ 931.449509][ C1] ? unwind_next_frame+0xa5/0x2390 [ 931.449532][ C1] ? unwind_next_frame+0xa5/0x2390 [ 931.449550][ C1] ? __napi_poll+0xc7/0x360 [ 931.449573][ C1] ? unwind_next_frame+0xa5/0x2390 [ 931.449591][ C1] unwind_next_frame+0xc2/0x2390 [ 931.449609][ C1] ? unwind_next_frame+0xa5/0x2390 [ 931.449630][ C1] ? unwind_next_frame+0xa5/0x2390 [ 931.449649][ C1] ? process_backlog+0x60e/0x14f0 [ 931.449675][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 931.449698][ C1] arch_stack_walk+0x11c/0x150 [ 931.449720][ C1] ? __napi_poll+0xc7/0x360 [ 931.449743][ C1] stack_trace_save+0x9c/0xe0 [ 931.449764][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 931.449789][ C1] ? __lock_acquire+0xab9/0xd20 [ 931.449805][ C1] kasan_save_track+0x3e/0x80 [ 931.449827][ C1] ? kasan_save_track+0x3e/0x80 [ 931.449848][ C1] ? __kasan_save_free_info+0x46/0x50 [ 931.449867][ C1] ? __kasan_slab_free+0x5c/0x80 [ 931.449890][ C1] ? kmem_cache_free+0x19b/0x690 [ 931.449913][ C1] ? skb_release_data+0x62d/0x7c0 [ 931.449929][ C1] ? consume_skb+0x9e/0xf0 [ 931.449944][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 931.449965][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 931.449986][ C1] ? nft_do_chain+0x40c/0x1920 [ 931.450005][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 931.450025][ C1] ? nf_hook_slow+0xc5/0x220 [ 931.450041][ C1] ? NF_HOOK+0x206/0x3a0 [ 931.450057][ C1] ? NF_HOOK+0x30c/0x3a0 [ 931.450072][ C1] ? __netif_receive_skb+0x143/0x380 [ 931.450098][ C1] ? process_backlog+0x60e/0x14f0 [ 931.450125][ C1] ? __napi_poll+0xc7/0x360 [ 931.450164][ C1] ? skb_release_data+0x62d/0x7c0 [ 931.450181][ C1] __kasan_save_free_info+0x46/0x50 [ 931.450200][ C1] __kasan_slab_free+0x5c/0x80 [ 931.450224][ C1] kmem_cache_free+0x19b/0x690 [ 931.450250][ C1] skb_release_data+0x62d/0x7c0 [ 931.450272][ C1] consume_skb+0x9e/0xf0 [ 931.450288][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 931.450312][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 931.450335][ C1] ? nf_ip_checksum+0x13c/0x510 [ 931.450358][ C1] nft_synproxy_do_eval+0x345/0x570 [ 931.450382][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 931.450403][ C1] ? nft_trace_init+0x283/0x4a0 [ 931.450423][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 931.450446][ C1] ? ip_vs_conn_out_get+0xa16/0xa70 [ 931.450473][ C1] nft_do_chain+0x40c/0x1920 [ 931.450500][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 931.450534][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 931.450558][ C1] nft_do_chain_inet+0x25d/0x340 [ 931.450578][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 931.450602][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 931.450629][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 931.450650][ C1] nf_hook_slow+0xc5/0x220 [ 931.450669][ C1] NF_HOOK+0x206/0x3a0 [ 931.450686][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 931.450704][ C1] ? NF_HOOK+0x9a/0x3a0 [ 931.450720][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 931.450735][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 931.450754][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 931.450773][ C1] ? skb_dst+0x4f/0xd0 [ 931.450789][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 931.450808][ C1] NF_HOOK+0x30c/0x3a0 [ 931.450825][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 931.450841][ C1] ? NF_HOOK+0x9a/0x3a0 [ 931.450857][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 931.450872][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 931.450889][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 931.450910][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 931.450926][ C1] __netif_receive_skb+0x143/0x380 [ 931.450949][ C1] ? process_backlog+0x2d5/0x14f0 [ 931.450974][ C1] process_backlog+0x60e/0x14f0 [ 931.451005][ C1] ? __pfx_process_backlog+0x10/0x10 [ 931.451033][ C1] __napi_poll+0xc7/0x360 [ 931.451054][ C1] ? skb_defer_free_flush+0x229/0x250 [ 931.451078][ C1] net_rx_action+0x5f7/0xdf0 [ 931.451113][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 931.451152][ C1] handle_softirqs+0x286/0x870 [ 931.451172][ C1] ? do_softirq+0xec/0x180 [ 931.451191][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 931.451211][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 931.451235][ C1] do_softirq+0xec/0x180 [ 931.451251][ C1] [ 931.451257][ C1] [ 931.451264][ C1] ? __pfx_do_softirq+0x10/0x10 [ 931.451280][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 931.451302][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.451327][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 931.451343][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 931.451361][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 931.451379][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 931.451403][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 931.451428][ C1] neigh_periodic_work+0xc28/0xe50 [ 931.451455][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 931.451474][ C1] process_scheduled_works+0xae1/0x17b0 [ 931.451504][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 931.451529][ C1] worker_thread+0x8a0/0xda0 [ 931.451548][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 931.451574][ C1] ? __kthread_parkme+0x7b/0x200 [ 931.451597][ C1] kthread+0x711/0x8a0 [ 931.451620][ C1] ? __pfx_worker_thread+0x10/0x10 [ 931.451637][ C1] ? __pfx_kthread+0x10/0x10 [ 931.451659][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.451679][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.451701][ C1] ? __pfx_kthread+0x10/0x10 [ 931.451727][ C1] ret_from_fork+0x4bc/0x870 [ 931.451745][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 931.451764][ C1] ? __switch_to_asm+0x39/0x70 [ 931.451779][ C1] ? __switch_to_asm+0x33/0x70 [ 931.451796][ C1] ? __pfx_kthread+0x10/0x10 [ 931.451817][ C1] ret_from_fork_asm+0x1a/0x30 [ 931.451839][ C1] [ 932.974357][T13748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.718455][T13748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.882480][T27032] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.295217][ C1] sched: DL replenish lagged too much [ 939.342531][T13748] batman_adv: batadv0: Removing interface: netdevsim0 [ 939.359851][T13748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0