last executing test programs: 5m18.792038858s ago: executing program 3 (id=1281): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d6974000000cb0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800a35b5b9d305941cbf5dc76ebbe731f9988952232bf99836da8b8442322"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5m18.563240153s ago: executing program 3 (id=1284): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="2c00000001010102000000f5ffffffffffffff05080015400000000308000340000014020800084000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$inet(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000000000000007000000861100000001020bc15c4a07f0c89d9f2d948d086a677d58dc79334d04a13d040000830200"], 0x28}, 0x4000008) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'macvtap0\x00', {0x3}, 0x3}) 5m17.9779516s ago: executing program 3 (id=1290): syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x24, r1, 0x301, 0x0, 0x25dfdbff, {{0x5}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="8580783288e1aaaa2cb8870a010102e0000001110100"/33], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x40, 0x100, 0xfffffffe, 0x0, {0xb, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0xd, 0x3, 0x0, 0x0, @binary="ad939630fec45455c2"}]}, @nested={0x4, 0x2}]}, 0xfffffffffffffe7c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) 5m17.633010589s ago: executing program 3 (id=1292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000080)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/101, 0x65}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f00000003c0)=""/169, 0xa9}], 0x4}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4060}, 0x20000881) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0xfd0, 0x0, 0xf, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0xa0}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES8=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x48844}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) preadv(r6, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/166, 0xa6}], 0x1, 0x1200000, 0x23) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x60}}, 0x0) 5m17.317652263s ago: executing program 3 (id=1294): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000001000080000000000200000400000000000000000200000000000000000000000200000000000000000000000000000100"/78], 0x0, 0x4e}, 0x20) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_newnexthop={0x44, 0x68, 0x100, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x1b}, [@NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) sendmmsg$unix(r2, &(0x7f000000c940)=[{{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000c53d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328562b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaeaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509afd15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4df92cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2571f67a7c7819b0889d7614ab5e25b468ab3102cab53f312f2e29075891bd21c2301f338b8a961a01fb282fd4e53d8c0a2ebb71ceaf7e3b34e4502b5fad975855ce0e4d4c163519fabd209c3d4302f46c90a19d8a0a03396e8949a91184e8d680f724d65700b9a18d28e22810be9fb37ce6cac86c45a03165c1af3152a3c21dc927f0697343abf80e3aae6149b14d08f188e61f900bbb0eae54b0566ad8489918ddc866871e06a5f50cf35b551f7b4c7ae0300838056a65d2e0058c9d8bf1c99d40fb3e2ecdbd68b5f79003c04266a43b8794a5d90b2348f4e81ed1d00000000000000000000e321e9aa37fc5cbee1f627e86e2f58a24ccd9c0376772b2bd5e99ab9d86b753de57a5f40714d11282d809bf6bf5f7009ff38db199273d029f5b65b573722b8131f473775031a7889a2e6b6e804b26429c839373dffd00347a65a2e8ca7d387857dddcea793ce7a08e92648dd663d25d5374ddf20e98e824b269a199210b7064fb6cda054ccef091d11"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000000)=0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x18, "4348817207000062d303000000f48df500006bad94490047"}}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x7, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r8, r8, 0x2f}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x0, 0x30, 0x0, &(0x7f0000000240)="6ebca58ce6ffffffffc9252388f74c818387fe2a8d4ca77531639bd6b80074fda1a93dea20ed52ab9b69dd560cd8d20c", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@private, @remote, 0x0}, &(0x7f0000000540)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r10, r11, 0x25, 0xf, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5m16.969541625s ago: executing program 3 (id=1298): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xb8, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0xfffff9d3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x1, @remote}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd88b}, @in6={0xa, 0x4e22, 0x100, @remote, 0x4d}, @in6={0xa, 0x4e21, 0x1, @remote, 0x10}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcd9}]}, &(0x7f00000004c0)=0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0xa, 0x922000000003, 0x11) close(r8) 5m1.940033814s ago: executing program 32 (id=1298): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xb8, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0xfffff9d3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x1, @remote}, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd88b}, @in6={0xa, 0x4e22, 0x100, @remote, 0x4d}, @in6={0xa, 0x4e21, 0x1, @remote, 0x10}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcd9}]}, &(0x7f00000004c0)=0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0xa, 0x922000000003, 0x11) close(r8) 3m16.642409052s ago: executing program 4 (id=2591): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0xe000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3m16.408931625s ago: executing program 4 (id=2595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x294}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e008d2a"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @remote, 0xffffff00, 0xffffff00, 0x4, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x80, 0x81, 0x0, 0xbd, 0x5, 'veth0_vlan\x00', 'caif0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x401}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8cc489da1088", @empty, @broadcast, @remote, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 3m16.28148063s ago: executing program 4 (id=2599): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/43, 0x2b}, 0x5}], 0x1, 0x40000003, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}}], 0xffffff80, 0x0) 3m16.145312218s ago: executing program 4 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2m28.703176718s ago: executing program 4 (id=2604): r0 = socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000100)={0x2, 'wg2\x00', {0x9}, 0x8}) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="013620190101060c0000000000000d0600000000000000ff00f508f903"], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 2m28.676376228s ago: executing program 4 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x78, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x78}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2a, 0xfffffffe, 0x7, 0x20200, r5, 0x4, '\x00', r10, r4, 0x2, 0x1, 0x0, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x0, 0x200, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x1, 0x40, 0xffffffff, 0xfffff127}}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000030c0)={'bond0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r11, 0x107, 0x10, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m13.383572348s ago: executing program 33 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x78, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x78}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2a, 0xfffffffe, 0x7, 0x20200, r5, 0x4, '\x00', r10, r4, 0x2, 0x1, 0x0, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x0, 0x200, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x1, 0x40, 0xffffffff, 0xfffff127}}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000030c0)={'bond0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r11, 0x107, 0x10, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 5.035620634s ago: executing program 6 (id=3869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00') r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/time\x00') mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x3, &(0x7f00000002c0)=0xfffff800, 0x4) ioctl$sock_inet_SIOCSARP(r5, 0x8917, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xdfd182dcd395e7a6}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007800800084000000078050014000100000069cf8ab8b3d2ee4b05f914b03fe1a4cc84d9ae245de6d2a59ad1bd808410aefb80f751db54e652866222454754397900414b1160acdb8e6dd79650053e15710c56ae4b22a57ba8f7a9a8c2cf361bf2be6624509f451483b1f5a3ab5601b9de7517afaf0efef44fba5815479eddc2974248564f4ae7dbd8f8637bafc770c04e88fe5ec9cef2b718ea806975d88012def84b9d2dd013a71eb6d82468eff54a81f6815351663139cd31cfe4cd4eecbed8beebc56246ab43"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r7, @ANYRESHEX], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 4.537362308s ago: executing program 6 (id=3873): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44084) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000500)={0x8, 0xf8a0, 0x3, 0x8000, 0x7fff, 0xf6, 0x800000, 0x51557e47, r5}, &(0x7f0000000540)=0x20) bind$unix(r4, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x70, 0x1, 0x1, 0x301, 0x0, 0x0, {0x6, 0x0, 0xd}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xfffffffffffffed7, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x70}}, 0x40000) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001400030500008000b2277e4e021e20004d0e9721735dfa0156b2a881a50d921cabd3ba7fcfd3a19cbb901519b5b74a2bfe5588fcabbabc681a583915bfd9963efec6201e64b67c8b98ddea659ff81b6889efb9267741d8f0450bd6816e36780b33ad201459a93e6153a658860560fd97032c766b540848aa3fab21458b854f27d81d0c3c3866dfcada21036e16ffc35ef1394992f763c0af087426925d704171ae69436b13dd696c531c823d55ee9ea8ea0dde67cbdafa5fd2a06c672e7307dd5b84ee7c452c91bdfd55ebc594cbdc25ea53790f26bbab34ba4d123bf323d69378d890f263167ed0bdd7fae2f5b7b2bc1bdf62baf7ac38098d9f7e2201c2600a6b9edf0d25ec0d27bc3628544e3cfabd55a9cd13fce24bed18c4fd6c9ce4bbd345cf52ae22351485fe28e1480a18a300a592cdb3bb5208ce658516f071f908385437c69e442191a8ae93699901af24b1c16912b9c5430eea", @ANYRES32=r10, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 4.37386551s ago: executing program 0 (id=3878): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4.218363608s ago: executing program 0 (id=3882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078ef00000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.071685011s ago: executing program 0 (id=3885): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x103, 0x100006, 0xd, 0xff, 0x4, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x100, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x2000000, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0xffffffff, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x70, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x89d1, 0xfca, 0x399d, 0x9, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xef, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0xa, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x1, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x3, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x2004, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x325, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x101000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x8, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbe8, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r13, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) 3.3264835s ago: executing program 0 (id=3891): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 3.319784603s ago: executing program 6 (id=3892): socket$inet(0xa, 0x801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="962700000f7dbbf1443fd0accddc58f8c0d83975a59bb84359781200ab0661", @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="1020818a741f84586e0c001932d1c60a2d84c3df000000000d7fb703c76c489ea462f08664f980334e2fb1dcedba6f5a7c363b3de83b5b9d0c0f3d563e6117025780fcc95c87240d2b74293f566b1ba141db8df1aa72c43ee647da19548c525ad7aaf7feec6f3d821721da1a16c3fc67c49114b98e94cebc8110577c35a3a80bc3040d72d495fe23116c166c24b69307d36d5b910a4cea438ed4418e99e3dcd0487822fd2e1cfbce1fa0dfb2e1391db1c8b9427b95388c495daca3f07e6a93afae3a859393c7e369d1932426951e2cb017a9bcf0d736f183b4ec2b34bd2f54ee8495df9e7b975cd8141ee8618fec825be8b2c2b1c5"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6e402580cce0319f136956ad7762ad86df99201fa344e22486fac6120745b1a1bf5fb0819d9b67197a874ff4b0a83f34bc0afd7ed94b1ec7d34486748c9c6298b5c422b9a78e33bc57b7cf3818db9b8872b25fb1b5176ac02bc51e7612eff8d91d7aa55922c2c0bdd2be0ffc64effecb17f99a3654dd21d63bb103337866ac5df34b44c4fa59d8d62aed89a1b23d53f57d248f0448d0d46f6edc1686a09818dcc5794199d6b2f9ada3667ee2f1e986a8545e8e9f91154b3ba2b03f013d13fb68f", 0xc5}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="1bb7623b3a0d7e4e90b7daa46399968ad7e759462c27e392d8062beb103bb8fbae01de2cd0e2e2612a778c5b70b9baa4be2acd8f3b8b796c2c117e460727e10709ca0c18eba9e2e41a56977e24c19014abb007e31c808c931aaf", 0x5a}, {&(0x7f0000000500)="1df3000f4a6d6f87e0c14db02e70e1db8a57bffcfc088576775c155122f32b4a2d55c8030c3a09cbcb3a7a116702685f182f71e64fb50a34e73a2742c91941dfd233971efc9e566eb5cfd7e441b8d759cdc46d41e582ada971fa5ca275fa388c507eea1e0517096e8d5f26bf95e99e954cd8c6", 0x73}, {&(0x7f0000000640)="9226add5cac1e0a1d070a79be80e97fcf8ae411075720ff660bef17d62b3ff2684cb29a32650931e674dab6c1785899dd416559bff235df00b401667876df46553f9797c7dea33c43f09fc79389cf4b1752e2b63ccb8736dbb0475b9ebb3e068a2b0d3923fc95cda65b0d4cbffda", 0x6e}], 0x3}, 0x4000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0xc, &(0x7f0000000d00)=ANY=[@ANYRES8=r8, @ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x3b, 0x7fffffff, 0x12, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x25f, 0x7}}) sendmsg$nl_route_sched_retired(r11, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000a00)=@newtclass={0x2c8, 0x28, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x6, 0x8}, {0x9, 0xc}, {0xd, 0xfffe}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x40}}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x0, 0x400, 0x97c0, 0x8, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x7}, 0xfffffffe, 0x776}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x34, 0x0, 0x9, 0x2, 0x7, 0x65, 0x7, 0x2}}]}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x33, 0x3, "d7074dfa41ae69ba03e56f2c0e369487314040895d04069c8acae85a5ff2bedbbb62e448346dce84defaaa13e9ea43"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xe}}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x5, 0xb, 0x39, 0xfff, 0x404}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x6}, 0x2, 0xcb}}]}}, @c_atm={{0x8}, {0xe8, 0x2, [@TCA_ATM_HDR={0x42, 0x3, "b409e4da6868d9b2baf03ea8db80c5e745a584d0180ee50d54344f57ed71c099ee02fc39dc96f20289badeb6d0cedb6625aa6a1f979f7e17d3d29ba67a63"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff1}}, @TCA_ATM_HDR={0x26, 0x3, "56d17bee84a35aab209fb9946f0e68bb414bc2585e109c3fe32d3b7041992c30244f"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x7}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x1e, 0x3, "0873ba853e6e0cf501ad2c435235448a74c320f46cf25f708ba2"}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xe}}, @TCA_ATM_HDR={0x2d, 0x3, "c49cce861281fd7d8b2d1771a565cc9856f21a3f2432d7e3c2e1c81958f4e46ac905b158028ec14f14"}]}}, @c_atm={{0x8}, {0x90, 0x2, [@TCA_ATM_HDR={0x31, 0x3, "74c8a96d5e23fdfbcf27585f57340a90969212e61e7a143270c2ca03e52d24b901548213b90db6976657853371"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x78af8dd3d8266b52, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x6}}, @TCA_ATM_HDR={0x37, 0x3, "e98949e4e35aa5fef1cebf9208e5a4c3ba2fee98bba766d9417386ab242397a7e69181dc2f52c4c8ae4922243f41547b220fe3"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff1}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40000}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c239f58ddf00000002d57686cb43337243", 0x11}, {&(0x7f0000000800)="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", 0xfe}], 0x2}}], 0x1, 0x480e0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.262128599s ago: executing program 1 (id=3893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800010026bd70c8ff5bdf2502001400fe02c80900080000060015000200000014001680100008800c"], 0x38}}, 0x40000) 3.206310548s ago: executing program 5 (id=3894): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$smc(0x0, r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x800, 0x8001, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x404e800) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000000000000000000000080005000a00"], 0x38}, 0x1, 0x2000, 0x0, 0x10}, 0x2400c890) 3.205833352s ago: executing program 0 (id=3895): unshare(0x28000600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000700000000000000070000000000000000000000050000000000000003000000000000000000000000000000000000000000000000000000000000000c000000050000000f00000000000000ff0700000000000002000000000000000600"/448]) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) 3.115554024s ago: executing program 5 (id=3896): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) (fail_nth: 9) 3.033927665s ago: executing program 1 (id=3897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.761842219s ago: executing program 5 (id=3898): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x1}, 0x10) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) ppoll(&(0x7f0000000040)=[{r2, 0x140}], 0x1, &(0x7f00000005c0)={0x0, 0x3938700}, 0x0, 0x0) 2.518373916s ago: executing program 5 (id=3901): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0x100000001, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@proto={0x5, 0x19, 0x32}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000540)={0x5a, @empty, 0x4e20, 0x0, 'wrr\x00', 0x0, 0x5, 0x8000005b}, 0x2c) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 2.389916917s ago: executing program 1 (id=3902): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="130000004f0039"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 2.365229871s ago: executing program 5 (id=3903): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000006c0)={r3, 0x87, "0200000000000000703fcd0993d4323725cdcfe5179e72e004f2eac79f99843adfb38749f0ca584723bd9698dcf09a8789ba093aa7610002512e8c4eb4eb76aa3f3069d1d5a66b2c75a2d59986feff48dc51b23de50b4ccb2630642b1348c700b558041310b170364b8780016ec3b597fae6ac116b5bd6c507000000e592103c2621e15e7a5d67"}, &(0x7f0000000040)=0x8f) 2.318495055s ago: executing program 6 (id=3904): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004600000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) 2.24309367s ago: executing program 5 (id=3905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7fee}, @TCA_FQ_CODEL_INTERVAL={0x3, 0x3, 0xfffffff8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x72}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r1}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000004c0)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff9) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000680)=ANY=[@ANYBLOB="05000000306b00000000000000000000479181eac555f41531d124b5b67b776fe9b121fba4368c2ee8ab0ff78dab91eb17be13f03c64d42495e9bf2a326400a803ff24ea1acb364d2dd9a1565b870c0e6ba7b0c843150989d4", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES8=r8, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$can_raw(0x1d, 0x3, 0x1) close(0x4) r10 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r10}, 0x8) 2.219777886s ago: executing program 6 (id=3906): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e26}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.84232255s ago: executing program 1 (id=3907): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$smc(0x0, r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x800, 0x8001, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x404e800) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000000000000000000000080005000a00"], 0x38}, 0x1, 0x3d14, 0x0, 0x10}, 0x2400c890) 1.693024667s ago: executing program 1 (id=3908): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001280)=[0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0], 0x0, 0x7a, &(0x7f0000001300), 0x0, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xda, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00', 0x20005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x6d18c6f93767830f, 0x0, 0x0, 0x800, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x20000014) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc0200000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000071b28ec422f3f615dfbd10000000000000000000000000000000000000000000000000004000000000fe00000000005124fa33d809e45e280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000b46b6e00000000000000000000000007000000000a00100000000000000000000c001500000000d76693c600ace18ea58f743acd53ae0eaf123834dd8872f76cd956b8000000000000000000"], 0xd8}}, 0x0) 1.607639192s ago: executing program 2 (id=3909): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) (fail_nth: 10) 1.543727295s ago: executing program 1 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) syz_init_net_socket$ax25(0x3, 0x5, 0xa) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.178719677s ago: executing program 6 (id=3911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x7, 0x4, 0x1, 0x1ff, 0x4417, 0x8000, 0x1000, {0x0, @in6={{0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00', 0x60}}, 0x4, 0x8, 0x4, 0x8cf5, 0x4}}, &(0x7f0000000600)=0xb0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x45, 0xb, &(0x7f0000000340)="55a908a9a2a22508ea74aa6e89bdecc04d6299831c37103113e732636ba9b33f9c02e12c174716461ccf7dee5d04f2e1b0858baf6d8708416eccb1737fa81a07f629ff0bb6", &(0x7f0000000080)=""/11, 0x2f20, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'dummy0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1.046283889s ago: executing program 2 (id=3912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000006c00400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078ef00000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 904.943863ms ago: executing program 2 (id=3913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000440000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 788.160746ms ago: executing program 2 (id=3914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x840) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) recvmmsg(r2, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1}, 0xfffffff7}], 0x1, 0x40004023, 0x0) 607.524962ms ago: executing program 2 (id=3915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000006c0)={r3, 0x87, "0200000000000000703fcd0993d4323725cdcfe5179e72e004f2eac79f99843adfb38749f0ca584723bd9698dcf09a8789ba093aa7610002512e8c4eb4eb76aa3f3069d1d5a66b2c75a2d59986feff48dc51b23de50b4ccb2630642b1348c700b558041310b170364b8780016ec3b597fae6ac116b5bd6c507000000e592103c2621e15e7a5d67"}, &(0x7f0000000040)=0x8f) 568.692516ms ago: executing program 2 (id=3916): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000400)={0x1, 0x344, 0x6, {0x77359400}, {}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x1f, 0x2, 0x0, 0x0, "b585bbefda2fb330c85a0ad9a09c310b140f0ad33e4f09cfbf8fd7883af72b315dfd1f2cb78d4ca0d7bd9f002cc5bdc0e6b987cf659b098ea20d71bd8e18725c"}}, 0x80}, 0x1, 0x0, 0x0, 0x20048090}, 0x8000) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0016080000000000000030b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='J\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007680)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000854094fc219c3a7832190b726d006a320605552d59e577d25224631b6f0fb2386a6c8fa75fab60c754cf902e90244c0c95535b57f62cb635e7ef6ab8542722736c4eca6ca31297"], &(0x7f0000005b40)='syzkaller\x00', 0x3, 0x8e, &(0x7f00000075c0)=""/142, 0x40f00, 0xa, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005b80)={0x2, 0x8, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x14b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000008040)={&(0x7f0000000600)='afs_send_data\x00', r8, 0x0, 0x7f0b}, 0x18) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) listen(0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x7, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0xffffffcb, 0x4) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 0s ago: executing program 0 (id=3917): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f0000000040)=@assoc_value, 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc4c3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904020800000000000000fe50a10a000600014002020c60ad307e0e357b4dd80a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb79164815ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) kernel console output (not intermixed with test programs): renamed from eth0 [ 433.667839][T15987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.682555][T15987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.704595][T15987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.922804][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'. [ 434.011571][T16174] netlink: 'syz.2.2842': attribute type 33 has an invalid length. [ 434.020028][T16174] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2842'. [ 434.108108][T15987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.215839][T15987] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.249967][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.257243][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.337146][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.344481][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.642699][T16186] veth0: entered promiscuous mode [ 434.663459][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 434.747160][T16186] veth0 (unregistering): left promiscuous mode [ 434.751295][ T30] audit: type=1804 audit(1764682570.941:8): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2844" name="/newroot/14/memory.events" dev="tmpfs" ino=89 res=1 errno=0 [ 434.790647][ T30] audit: type=1800 audit(1764682570.971:9): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2844" name="memory.events" dev="tmpfs" ino=89 res=0 errno=0 [ 434.974460][T16193] tipc: Enabled bearer , priority 0 [ 435.005333][T16192] tipc: Disabling bearer [ 435.062606][T15987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.185409][T15987] veth0_vlan: entered promiscuous mode [ 435.219351][T15987] veth1_vlan: entered promiscuous mode [ 435.228480][T16205] syzkaller0: entered promiscuous mode [ 435.248483][T16205] syzkaller0: entered allmulticast mode [ 435.292602][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 435.336437][T15987] veth0_macvtap: entered promiscuous mode [ 435.353620][T15987] veth1_macvtap: entered promiscuous mode [ 435.399952][T15987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.417304][T15987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.436179][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.446509][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.456751][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.471265][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.754076][T16212] sit0: left promiscuous mode [ 435.777405][T16212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.791364][T16212] team0: left promiscuous mode [ 435.796169][T16212] team_slave_0: left promiscuous mode [ 435.804694][T16212] team_slave_1: left promiscuous mode [ 435.810253][T16212] team0: left allmulticast mode [ 435.817227][T16212] team_slave_0: left allmulticast mode [ 435.825279][T16212] team_slave_1: left allmulticast mode [ 435.831804][T16212] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.842487][T16212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.917302][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'. [ 435.935437][T16204] netlink: 'syz.1.2851': attribute type 5 has an invalid length. [ 436.073560][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.097481][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.182088][T16218] 8021q: adding VLAN 0 to HW filter on device bond8 [ 436.212183][T16219] 8021q: adding VLAN 0 to HW filter on device bond9 [ 436.344141][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.399211][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.178374][T16241] tipc: Enabling of bearer rejected, already enabled [ 437.426204][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.432638][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.439345][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.514754][T16258] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 437.567314][T16253] dvmrp0: entered allmulticast mode [ 437.864665][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.897004][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.909084][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.923763][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.940834][T16276] tipc: Failed to remove unknown binding: 66,1,1/1576437291:1084264156/1084264158 [ 437.953723][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.963043][T16276] tipc: Failed to remove unknown binding: 66,1,1/1576437291:1084264156/1084264158 [ 437.979509][T16258] wg1 speed is unknown, defaulting to 1000 [ 437.990648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.023319][T16258] wg1 speed is unknown, defaulting to 1000 [ 438.079859][T16258] wg1 speed is unknown, defaulting to 1000 [ 438.345746][T16295] __nla_validate_parse: 2 callbacks suppressed [ 438.345766][T16295] netlink: 269 bytes leftover after parsing attributes in process `syz.5.2877'. [ 438.543941][T16306] xt_policy: neither incoming nor outgoing policy selected [ 438.604370][T16308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.651220][T16304] syzkaller1: entered promiscuous mode [ 438.657595][T16304] syzkaller1: entered allmulticast mode [ 438.887268][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 439.020503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.105415][T16333] FAULT_INJECTION: forcing a failure. [ 439.105415][T16333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.153224][T16331] team_slave_0: entered promiscuous mode [ 439.159241][T16331] team_slave_1: entered promiscuous mode [ 439.173304][T16333] CPU: 1 UID: 0 PID: 16333 Comm: syz.1.2892 Not tainted syzkaller #0 PREEMPT(full) [ 439.173330][T16333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.173344][T16333] Call Trace: [ 439.173352][T16333] [ 439.173360][T16333] dump_stack_lvl+0x189/0x250 [ 439.173390][T16333] ? __pfx____ratelimit+0x10/0x10 [ 439.173412][T16333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.173436][T16333] ? __pfx__printk+0x10/0x10 [ 439.173455][T16333] ? __might_fault+0xb0/0x130 [ 439.173491][T16333] should_fail_ex+0x414/0x560 [ 439.173518][T16333] _copy_from_user+0x2d/0xb0 [ 439.173537][T16333] ___sys_sendmsg+0x158/0x2a0 [ 439.173562][T16333] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.173622][T16333] ? __fget_files+0x2a/0x420 [ 439.173638][T16333] ? __fget_files+0x3a0/0x420 [ 439.173666][T16333] __x64_sys_sendmsg+0x19b/0x260 [ 439.173690][T16333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.173722][T16333] ? __pfx_ksys_write+0x10/0x10 [ 439.173748][T16333] ? do_syscall_64+0xbe/0xfa0 [ 439.173773][T16333] do_syscall_64+0xfa/0xfa0 [ 439.173793][T16333] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.173814][T16333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.173830][T16333] ? clear_bhb_loop+0x60/0xb0 [ 439.173851][T16333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.173872][T16333] RIP: 0033:0x7fdc37d8f749 [ 439.173887][T16333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.173903][T16333] RSP: 002b:00007fdc38bc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.173922][T16333] RAX: ffffffffffffffda RBX: 00007fdc37fe5fa0 RCX: 00007fdc37d8f749 [ 439.173936][T16333] RDX: 0000000008000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 439.173947][T16333] RBP: 00007fdc38bc5090 R08: 0000000000000000 R09: 0000000000000000 [ 439.173958][T16333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.173968][T16333] R13: 00007fdc37fe6038 R14: 00007fdc37fe5fa0 R15: 00007ffe79aa23c8 [ 439.174000][T16333] [ 439.390057][T16331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.750898][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2893'. [ 440.060476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.230220][T16360] tipc: Failed to remove unknown binding: 66,1,1/0:3867362914/3867362916 [ 440.261241][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290645][T16360] tipc: Failed to remove unknown binding: 66,1,1/0:3867362914/3867362916 [ 440.668311][T16347] wg1 speed is unknown, defaulting to 1000 [ 441.100567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.397754][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.426944][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.429278][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.449125][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.457456][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.466341][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.475288][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.512183][T16365] wg1 speed is unknown, defaulting to 1000 [ 441.668270][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.700339][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.859183][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.889893][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.937737][T16382] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2903'. [ 442.022576][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.041098][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.128680][T16382] bond8: option updelay: invalid value (18446744073709551615) [ 442.138007][T16382] bond8: option updelay: allowed values 0 - 2147483647 [ 442.150958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.164842][T16382] bond8 (unregistering): Released all slaves [ 443.180483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.273263][T16402] Bluetooth: MGMT ver 1.23 [ 443.511063][ T5833] Bluetooth: hci2: command tx timeout [ 444.112969][ T13] bond0 (unregistering): Released all slaves [ 444.126685][ T13] bond1 (unregistering): Released all slaves [ 444.220580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.274264][ T13] bond2 (unregistering): Released all slaves [ 444.386424][ T13] bond3 (unregistering): Released all slaves [ 444.399741][ T13] bond4 (unregistering): (slave veth5): Releasing active interface [ 444.410233][ T13] bond4 (unregistering): Released all slaves [ 444.517938][ T13] bond5 (unregistering): (slave veth7): Releasing active interface [ 444.528610][ T13] bond5 (unregistering): Released all slaves [ 444.636989][ T13] bond6 (unregistering): Released all slaves [ 444.745962][ T13] bond7 (unregistering): Released all slaves [ 444.852996][ T13] bond8 (unregistering): Released all slaves [ 444.954719][ T13] bond9 (unregistering): Released all slaves [ 444.967897][T16376] wg1 speed is unknown, defaulting to 1000 [ 444.978339][T16401] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2908'. [ 445.205091][ T13] !: left promiscuous mode [ 445.260482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.445664][ T13] tipc: Left network mode [ 445.560013][T16431] tipc: Failed to remove unknown binding: 66,1,1/0:1937063947/1937063949 [ 445.572459][T16431] tipc: Failed to remove unknown binding: 66,1,1/0:1937063947/1937063949 [ 445.581581][ T5833] Bluetooth: hci2: command tx timeout [ 445.654230][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'. [ 445.911419][T16435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 445.958537][T16376] chnl_net:caif_netlink_parms(): no params data found [ 446.015296][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 446.032003][T16442] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2918'. [ 446.300466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.767142][T16376] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.793069][T16376] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.817439][T16376] bridge_slave_0: entered allmulticast mode [ 446.836574][T16376] bridge_slave_0: entered promiscuous mode [ 446.935384][T16450] wg1 speed is unknown, defaulting to 1000 [ 446.940282][T16376] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.969557][T16376] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.978638][T16376] bridge_slave_1: entered allmulticast mode [ 446.987012][T16376] bridge_slave_1: entered promiscuous mode [ 447.074946][T16472] tipc: Failed to remove unknown binding: 66,1,1/1500693543:1694734390/1694734392 [ 447.089318][T16468] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 447.114185][T16472] tipc: Failed to remove unknown binding: 66,1,1/1500693543:1694734390/1694734392 [ 447.132910][T16376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.179664][T16376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.340533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.412736][T16376] team0: Port device team_slave_0 added [ 447.445259][T16376] team0: Port device team_slave_1 added [ 447.448783][T16482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.503867][ T13] hsr_slave_0: left promiscuous mode [ 447.570266][ T13] batadv0: left promiscuous mode [ 447.588911][ T13] veth1_macvtap: left promiscuous mode [ 447.613403][ T13] veth0_macvtap: left promiscuous mode [ 447.661807][ T5833] Bluetooth: hci2: command tx timeout [ 447.714263][T16505] xt_nat: multiple ranges no longer supported [ 448.380598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.599651][T16376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.607355][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.644153][T16376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.772396][T16376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.793080][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.833652][T16376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.854714][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 448.904124][T16515] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 448.926102][T16513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2935'. [ 449.225369][T16521] tipc: Failed to remove unknown binding: 66,1,1/1576437291:3381926980/3381926982 [ 449.254333][T16521] tipc: Failed to remove unknown binding: 66,1,1/1576437291:3381926980/3381926982 [ 449.339722][T16376] hsr_slave_0: entered promiscuous mode [ 449.372916][T16376] hsr_slave_1: entered promiscuous mode [ 449.387507][T16376] debugfs: 'hsr0' already exists in 'hsr' [ 449.400698][T16376] Cannot create hsr debugfs directory [ 449.420530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.552655][ T13] IPVS: stop unused estimator thread 0... [ 449.654683][T16523] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.703603][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'. [ 449.726337][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 449.740905][ T5833] Bluetooth: hci2: command tx timeout [ 449.760268][T16523] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.856448][T16523] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.943525][T16523] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.123346][T16537] tipc: Enabling of bearer rejected, already enabled [ 450.132407][T16537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2942'. [ 450.345824][T16543] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 450.467234][ T1150] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.800647][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.857053][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.868753][ T13] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.995575][T16556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.006519][T16560] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 451.132530][T16566] tipc: Failed to remove unknown binding: 66,1,1/1576437291:2136721136/2136721138 [ 451.175013][T16566] tipc: Failed to remove unknown binding: 66,1,1/1576437291:2136721136/2136721138 [ 451.258717][T16376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.380057][T16376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.451524][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 451.595810][T16376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.608528][T16542] wg1 speed is unknown, defaulting to 1000 [ 451.608891][T16376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.638442][ T13] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.693310][T16587] bond3: option arp_interval: invalid value (18446744073709551615) [ 451.701389][T16587] bond3: option arp_interval: allowed values 0 - 2147483647 [ 451.712283][T16587] bond3 (unregistering): Released all slaves [ 451.739669][ T13] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.759847][ T13] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.770206][ T13] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.976645][T16376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.059750][T16376] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.096844][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.104129][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.194878][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.202173][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.744000][T16613] wg1 speed is unknown, defaulting to 1000 [ 452.895779][T16376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.995476][T16630] tipc: Failed to remove unknown binding: 66,1,1/1500693543:2236188785/2236188787 [ 453.037486][T16630] tipc: Failed to remove unknown binding: 66,1,1/1500693543:2236188785/2236188787 [ 453.186254][T16632] netlink: 4580 bytes leftover after parsing attributes in process `syz.6.2956'. [ 453.206379][T16376] veth0_vlan: entered promiscuous mode [ 453.384952][T16376] veth1_vlan: entered promiscuous mode [ 453.586801][T16639] netem: incorrect ge model size [ 453.603581][T16639] netem: change failed [ 453.676815][T16376] veth0_macvtap: entered promiscuous mode [ 453.713983][T16376] veth1_macvtap: entered promiscuous mode [ 453.795658][T16376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.848161][T16376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.080129][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.097959][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.278229][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.298040][T16657] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.2965'. [ 454.375235][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.402271][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.420666][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.502082][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.524859][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.739991][T16671] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.2969'. [ 454.835387][T16674] bridge3: entered allmulticast mode [ 454.845957][T16678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2971'. [ 454.898925][T16678] nbd: socks must be embedded in a SOCK_ITEM attr [ 455.078432][T16687] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2974'. [ 455.207223][T16696] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2974'. [ 455.218217][T16687] veth3: entered promiscuous mode [ 455.509911][T16694] wg1 speed is unknown, defaulting to 1000 [ 456.212265][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2978'. [ 456.513673][T16729] netlink: 'syz.5.2983': attribute type 62 has an invalid length. [ 456.645314][T16729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.983319][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2986'. [ 457.261415][T16737] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 457.432317][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 458.447106][T16789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2997'. [ 458.480088][T16788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2997'. [ 458.499205][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2999'. [ 458.568122][T16793] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 458.579016][T16788] netlink: 'syz.1.2997': attribute type 10 has an invalid length. [ 458.646805][T16805] netlink: 'syz.5.3003': attribute type 1 has an invalid length. [ 458.701583][T16805] bond8: entered promiscuous mode [ 458.707197][T16805] 8021q: adding VLAN 0 to HW filter on device bond8 [ 458.827000][T16809] 8021q: adding VLAN 0 to HW filter on device bond8 [ 458.852363][T16809] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 458.891504][T16809] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 458.934669][T16809] bond8: (slave gre1): making interface the new active one [ 458.961965][T16809] gre1: entered promiscuous mode [ 459.003869][T16809] bond8: (slave gre1): Enslaving as an active interface with an up link [ 459.042345][T16812] tipc: Started in network mode [ 459.047264][T16812] tipc: Node identity e64afb327ce9, cluster identity 4711 [ 459.077851][T16812] tipc: Enabled bearer , priority 0 [ 459.166372][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 459.181706][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 459.190150][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 459.199613][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 459.208273][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 459.228836][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3003'. [ 459.279785][T16803] tipc: Disabling bearer [ 459.327422][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'. [ 459.379088][ T5828] syz_tun (unregistering): left allmulticast mode [ 459.448743][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3010'. [ 459.874365][T16843] netlink: 'syz.6.3015': attribute type 1 has an invalid length. [ 459.897090][T16818] wg1 speed is unknown, defaulting to 1000 [ 460.015681][T16843] bond1: entered promiscuous mode [ 460.022145][T16843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.049465][T16849] tipc: Failed to remove unknown binding: 66,1,1/1576437291:2365013160/2365013162 [ 460.080738][T16849] tipc: Failed to remove unknown binding: 66,1,1/1576437291:2365013160/2365013162 [ 460.156986][T16843] bond1: entered allmulticast mode [ 460.491604][T16843] bond1: (slave bridge3): making interface the new active one [ 460.499353][T16843] bridge3: entered promiscuous mode [ 460.511213][T16843] bridge3: entered allmulticast mode [ 460.518831][T16843] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 460.571992][T16861] batadv1: entered promiscuous mode [ 460.643599][T16850] wg1 speed is unknown, defaulting to 1000 [ 460.667936][T16869] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 460.848343][T16818] chnl_net:caif_netlink_parms(): no params data found [ 461.108316][T16874] bond2: Removing last arp target with arp_interval on [ 461.202171][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.209596][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.217105][T16818] bridge_slave_0: entered allmulticast mode [ 461.225344][T16818] bridge_slave_0: entered promiscuous mode [ 461.235586][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.243847][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.264048][T16818] bridge_slave_1: entered allmulticast mode [ 461.271502][ T5833] Bluetooth: hci7: command tx timeout [ 461.289647][T16818] bridge_slave_1: entered promiscuous mode [ 461.358389][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.372383][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.446499][T16818] team0: Port device team_slave_0 added [ 461.461763][T16818] team0: Port device team_slave_1 added [ 461.561565][T16862] wg1 speed is unknown, defaulting to 1000 [ 461.584342][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.597959][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.626370][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.679981][T16872] wg1 speed is unknown, defaulting to 1000 [ 461.735722][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.745419][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.772655][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.930295][T16818] hsr_slave_0: entered promiscuous mode [ 461.936976][T16818] hsr_slave_1: entered promiscuous mode [ 461.944074][T16818] debugfs: 'hsr0' already exists in 'hsr' [ 461.949945][T16818] Cannot create hsr debugfs directory [ 462.170746][T16896] __nla_validate_parse: 3 callbacks suppressed [ 462.170765][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3029'. [ 462.217416][T16898] tipc: Failed to remove unknown binding: 66,1,1/0:93484464/93484466 [ 462.227590][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3029'. [ 462.238281][T16898] tipc: Failed to remove unknown binding: 66,1,1/0:93484464/93484466 [ 462.413060][T16896] bridge_slave_1: left allmulticast mode [ 462.429532][T16896] bridge_slave_1: left promiscuous mode [ 462.446301][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.466251][T16896] bridge_slave_0: left allmulticast mode [ 462.472371][T16896] bridge_slave_0: left promiscuous mode [ 462.478375][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.958985][T16921] openvswitch: netlink: IP tunnel dst address not specified [ 462.993876][T16924] tipc: Failed to remove unknown binding: 66,1,1/0:2056130616/2056130618 [ 463.004297][T16924] tipc: Failed to remove unknown binding: 66,1,1/0:2056130616/2056130618 [ 463.089655][T16926] tipc: Enabled bearer , priority 0 [ 463.129031][T16925] tipc: Disabling bearer [ 463.177138][T16932] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 463.201209][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3044'. [ 463.341872][ T5833] Bluetooth: hci7: command tx timeout [ 463.347977][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3046'. [ 463.395203][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3047'. [ 463.413435][T16818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.434717][T16818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.454351][T16818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.476031][T16818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.698106][T16957] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3052'. [ 463.721270][T16959] xt_hashlimit: size too large, truncated to 1048576 [ 463.792217][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.869381][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.927867][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.935121][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.992269][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.999434][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.605736][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.724265][T16818] veth0_vlan: entered promiscuous mode [ 464.751773][T16818] veth1_vlan: entered promiscuous mode [ 464.753532][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 464.822376][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3061'. [ 464.898248][T16989] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3061'. [ 464.919472][T16989] openvswitch: netlink: Key type 158 is out of range max 32 [ 464.972559][T16818] veth0_macvtap: entered promiscuous mode [ 465.001969][T16818] veth1_macvtap: entered promiscuous mode [ 465.047209][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.095590][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.119449][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 465.143007][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.172746][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.233378][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.255925][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.281042][T16998] tipc: Enabling of bearer rejected, failed to enable media [ 465.431907][ T5833] Bluetooth: hci7: command tx timeout [ 465.514036][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.542012][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.671662][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.679523][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.882587][ T9747] IPVS: starting estimator thread 0... [ 465.918592][T17025] netlink: 'syz.2.3070': attribute type 4 has an invalid length. [ 465.991088][T17026] IPVS: using max 27 ests per chain, 64800 per kthread [ 466.142824][T17031] pimreg3: entered allmulticast mode [ 466.219990][T17010] wg1 speed is unknown, defaulting to 1000 [ 466.879864][T17052] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 466.949187][T17052] bond3 (unregistering): Released all slaves [ 466.991168][T17061] netlink: 'syz.0.3082': attribute type 3 has an invalid length. [ 466.999518][T17067] netlink: 'syz.2.3083': attribute type 6 has an invalid length. [ 467.511066][ T5833] Bluetooth: hci7: command tx timeout [ 467.521682][T17099] __nla_validate_parse: 8 callbacks suppressed [ 467.521700][T17099] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3093'. [ 467.778752][T17083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.796825][T17083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.049447][T17083] bond1: left promiscuous mode [ 468.054708][T17083] bridge3: left promiscuous mode [ 468.059937][T17083] bond1: left allmulticast mode [ 468.066714][T17083] bridge3: left allmulticast mode [ 468.105782][T14281] wg1 speed is unknown, defaulting to 1000 [ 468.122323][T14281] syz: Port: 1 Link DOWN [ 468.186250][T17118] tipc: Failed to remove unknown binding: 66,1,1/0:2639880265/2639880267 [ 468.204388][ T2992] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.208271][T17118] tipc: Failed to remove unknown binding: 66,1,1/0:2639880265/2639880267 [ 468.230862][ T2992] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.297732][T17111] syzkaller0: entered promiscuous mode [ 468.307028][T17111] syzkaller0: entered allmulticast mode [ 468.318760][ T2992] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.353588][ T2992] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.371765][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3098'. [ 468.912537][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 470.451539][T17151] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 470.652350][T17161] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3105'. [ 470.674831][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3105'. [ 470.720702][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3105'. [ 470.757278][T17166] tipc: Failed to remove unknown binding: 66,1,1/0:2834228002/2834228004 [ 470.766879][T17159] debugfs: 'netdev:nicvf0' already exists in 'phy29' [ 470.803574][T17166] tipc: Failed to remove unknown binding: 66,1,1/0:2834228002/2834228004 [ 470.822634][T17167] 8021q: adding VLAN 0 to HW filter on device bond9 [ 471.029436][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3113'. [ 471.093368][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3116'. [ 471.240067][T17189] bond3: option arp_interval: invalid value (18446744073709551615) [ 471.248618][T17189] bond3: option arp_interval: allowed values 0 - 2147483647 [ 471.259271][T17189] bond3 (unregistering): Released all slaves [ 471.271981][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3117'. [ 471.449597][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3120'. [ 471.881499][T17228] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 473.381600][T17228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.416007][T17236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.454543][T17230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.476241][T17230] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 473.488460][T17230] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 473.558873][T17232] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 473.583108][T17232] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 473.746972][T17253] __nla_validate_parse: 1 callbacks suppressed [ 473.746990][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3135'. [ 473.958687][T17273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3135'. [ 474.047243][T17272] pim6reg1: entered promiscuous mode [ 474.058836][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 474.078668][T17272] pim6reg1: entered allmulticast mode [ 474.155451][T17273] vlan3: entered promiscuous mode [ 474.166102][T17273] bond0: entered promiscuous mode [ 474.175141][T17273] bond_slave_0: entered promiscuous mode [ 474.181346][T17273] bond_slave_1: entered promiscuous mode [ 474.189071][T17273] dummy0: entered promiscuous mode [ 474.297918][T17290] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3144'. [ 474.307577][T17290] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3144'. [ 474.317033][T17290] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3144'. [ 474.379537][T17291] tipc: Started in network mode [ 474.385440][T17291] tipc: Node identity 2e556bb8d3c5, cluster identity 4711 [ 474.411609][T17291] tipc: Enabled bearer , priority 0 [ 474.428419][T17291] syzkaller0: entered promiscuous mode [ 474.445798][T17291] syzkaller0: entered allmulticast mode [ 474.482099][T17291] tipc: Resetting bearer [ 474.497719][T17289] tipc: Resetting bearer [ 474.528296][T17289] tipc: Disabling bearer [ 474.613670][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3148'. [ 474.698632][T17308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3151'. [ 474.763622][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 474.968314][T17324] netlink: 'syz.0.3156': attribute type 1 has an invalid length. [ 474.988319][T17324] netlink: 'syz.0.3156': attribute type 11 has an invalid length. [ 475.027644][T17324] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3156'. [ 475.124914][T17336] ipip0: entered promiscuous mode [ 475.137935][T17336] ipip0: entered allmulticast mode [ 475.152346][T17337] netlink: 'syz.5.3159': attribute type 13 has an invalid length. [ 476.687181][ T30] audit: type=1800 audit(1764682612.871:10): pid=17398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3175" name="memory.events" dev="tmpfs" ino=123 res=0 errno=0 [ 476.791929][T17382] wg1 speed is unknown, defaulting to 1000 [ 477.346876][T17393] wg1 speed is unknown, defaulting to 1000 [ 477.593958][T17424] xt_TCPMSS: Only works on TCP SYN packets [ 477.651075][T17425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.763128][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.770957][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.988710][T17420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.002009][T17434] netlink: 'syz.6.3187': attribute type 1 has an invalid length. [ 478.012077][T17434] netlink: 'syz.6.3187': attribute type 2 has an invalid length. [ 478.019487][T17420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.178408][T17420] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 478.291258][ T63] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.351036][T17442] syzkaller0: entered promiscuous mode [ 478.362534][T17442] syzkaller0: entered allmulticast mode [ 478.381612][ T63] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.406490][ T63] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.477566][ T63] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.779522][T17459] batman_adv: batadv0: Adding interface: macsec1 [ 478.824714][T17459] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.856119][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.882653][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.900943][T17459] batman_adv: batadv0: Interface activated: macsec1 [ 479.092986][T17478] ieee802154 phy0 wpan0: encryption failed: -22 [ 479.115536][T17478] ieee802154 phy0 wpan0: encryption failed: -22 [ 479.350873][T17496] syzkaller1: entered promiscuous mode [ 479.366839][T17496] syzkaller1: entered allmulticast mode [ 479.397711][T17501] xt_cluster: node mask cannot exceed total number of nodes [ 479.749732][T17517] tipc: Resetting bearer [ 479.798099][T17519] netlink: 'syz.0.3210': attribute type 39 has an invalid length. [ 479.913584][T17514] team_slave_0: mtu less than device minimum [ 480.458943][T17549] syzkaller0: entered promiscuous mode [ 480.476480][T17549] syzkaller0: entered allmulticast mode [ 481.975275][T17566] __nla_validate_parse: 11 callbacks suppressed [ 481.975293][T17566] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3223'. [ 482.219115][T17548] wg1 speed is unknown, defaulting to 1000 [ 482.279588][T17588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.467225][T17594] bridge4: entered promiscuous mode [ 482.479731][T17594] bridge4: entered allmulticast mode [ 482.504137][T17598] Cannot find del_set index 4 as target [ 482.595373][T17601] netlink: 'syz.0.3233': attribute type 4 has an invalid length. [ 482.610761][T17567] wg1 speed is unknown, defaulting to 1000 [ 482.676786][T17600] nbd: must specify at least one socket [ 482.714307][T17606] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 482.733983][T17606] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 482.747510][T17603] tipc: Started in network mode [ 482.753158][T17603] tipc: Node identity caf63049c67d, cluster identity 4711 [ 482.754170][T17606] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 482.771597][T17606] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 482.797826][T17603] tipc: Enabled bearer , priority 0 [ 482.822984][T17610] syzkaller0: entered promiscuous mode [ 482.848490][T17610] syzkaller0: entered allmulticast mode [ 482.904830][T17613] netlink: 'syz.0.3233': attribute type 4 has an invalid length. [ 482.920399][T17612] bridge0: entered promiscuous mode [ 482.968486][T17612] bridge0: port 3(vlan2) entered blocking state [ 482.986291][T17612] bridge0: port 3(vlan2) entered disabled state [ 482.999037][T17612] vlan2: entered allmulticast mode [ 483.007377][T17612] bridge0: entered allmulticast mode [ 483.031150][T17612] vlan2: left allmulticast mode [ 483.036048][T17612] bridge0: left allmulticast mode [ 483.043831][T17612] bridge0: left promiscuous mode [ 483.117175][T17614] tipc: Resetting bearer [ 483.225434][T17617] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3236'. [ 483.237224][T17617] block nbd0: reconnected socket [ 483.316047][T17602] tipc: Resetting bearer [ 483.379650][T17602] tipc: Disabling bearer [ 483.541465][T17623] netlink: 'syz.0.3239': attribute type 2 has an invalid length. [ 483.549654][T17623] netlink: 'syz.0.3239': attribute type 1 has an invalid length. [ 483.558648][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 484.062911][ T5833] block nbd0: Receive control failed (result -32) [ 484.272996][ T36] bond3 (unregistering): (slave geneve2): Releasing active interface [ 484.781511][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.794711][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.806730][ T36] bond0 (unregistering): Released all slaves [ 484.825268][ T36] bond1 (unregistering): Released all slaves [ 484.839411][ T36] bond2 (unregistering): Released all slaves [ 484.955286][ T36] bond3 (unregistering): Released all slaves [ 485.118262][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3245'. [ 485.213622][ T36] : left promiscuous mode [ 485.498195][ T36] tipc: Disabling bearer [ 485.508056][ T36] tipc: Left network mode [ 485.697382][T17663] tipc: Enabled bearer , priority 0 [ 485.731544][T17663] syzkaller0: entered promiscuous mode [ 485.737497][T17663] syzkaller0: entered allmulticast mode [ 485.842754][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3253'. [ 485.866638][T17677] siw: device registration error -23 [ 485.945843][T17663] tipc: Resetting bearer [ 486.495133][T17662] tipc: Resetting bearer [ 486.601465][T17662] tipc: Disabling bearer [ 486.728666][T17698] openvswitch: netlink: IP tunnel dst address not specified [ 486.733357][T17696] tipc: Enabled bearer , priority 0 [ 486.746903][T17696] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3259'. [ 486.757445][T17696] tipc: Resetting bearer [ 486.767238][T17696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3259'. [ 486.778914][T17698] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3258'. [ 486.806728][T17695] tipc: Disabling bearer [ 486.938447][T17700] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 487.251597][T17663] wg1 speed is unknown, defaulting to 1000 [ 487.334344][T17679] wg1 speed is unknown, defaulting to 1000 [ 487.469322][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3264'. [ 487.559932][T17712] vlan2: entered promiscuous mode [ 487.565895][T17712] bond0: entered promiscuous mode [ 487.574263][T17712] bond_slave_0: entered promiscuous mode [ 487.586124][T17712] bond_slave_1: entered promiscuous mode [ 487.639877][ T36] hsr_slave_0: left promiscuous mode [ 487.647568][ T36] hsr_slave_1: left promiscuous mode [ 487.682720][ T36] veth1_macvtap: left promiscuous mode [ 487.700645][ T36] veth0_macvtap: left promiscuous mode [ 487.706365][ T36] veth1_vlan: left promiscuous mode [ 487.718728][ T36] veth0_vlan: left promiscuous mode [ 487.783785][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3266'. [ 487.849607][T17726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3268'. [ 487.914992][ T36] pim6reg99999999 (unregistering): left allmulticast mode [ 488.495735][ T36] team_slave_1 (unregistering): left promiscuous mode [ 488.508735][ T36] ` (unregistering): Port device team_slave_1 removed [ 488.588805][ T36] team_slave_0 (unregistering): left promiscuous mode [ 488.597910][ T36] ` (unregistering): Port device team_slave_0 removed [ 488.609460][ T12] smc: removing ib device syz0 [ 489.042146][T17730] tipc: Enabled bearer , priority 0 [ 489.065711][T17731] syzkaller0: entered promiscuous mode [ 489.091285][T17731] syzkaller0: entered allmulticast mode [ 489.103285][T17733] tipc: Resetting bearer [ 489.223317][T17728] tipc: Resetting bearer [ 489.259034][T17728] tipc: Disabling bearer [ 489.591340][T17751] wg1 speed is unknown, defaulting to 1000 [ 489.686822][T17762] vlan2: entered promiscuous mode [ 489.692264][T17762] bridge0: entered promiscuous mode [ 491.857831][T17810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3283'. [ 491.927148][ T36] IPVS: stop unused estimator thread 0... [ 491.928745][T17810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.097574][T17812] wg1 speed is unknown, defaulting to 1000 [ 492.375354][T17825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'. [ 492.478170][T17833] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3290'. [ 492.664974][T17829] batman_adv: batadv0: Adding interface: macsec0 [ 492.698377][T17829] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.761077][T17829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.821376][T17829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.881110][T17829] batman_adv: batadv0: Interface activated: macsec0 [ 493.196421][T17854] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20000 [ 493.327614][T17859] tipc: Enabled bearer , priority 0 [ 493.377855][T17862] syzkaller0: entered promiscuous mode [ 493.404683][T17862] syzkaller0: entered allmulticast mode [ 493.453244][T17859] tipc: Resetting bearer [ 493.490203][T17857] tipc: Resetting bearer [ 493.551341][T17868] netlink: 'syz.1.3301': attribute type 13 has an invalid length. [ 493.561502][T17857] tipc: Disabling bearer [ 493.569455][T17868] netlink: 'syz.1.3301': attribute type 17 has an invalid length. [ 493.748182][T17872] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3303'. [ 493.798774][T17868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.850115][T17865] wg1 speed is unknown, defaulting to 1000 [ 493.858341][T17874] tipc: Enabled bearer , priority 0 [ 493.865542][T17875] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 493.898149][T17867] syzkaller0: entered promiscuous mode [ 493.904314][T17867] syzkaller0: entered allmulticast mode [ 494.003061][T17879] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3305'. [ 494.117665][T17867] tipc: Resetting bearer [ 494.166638][T17866] tipc: Resetting bearer [ 494.224845][T17866] tipc: Disabling bearer [ 494.277002][T17882] wg1 speed is unknown, defaulting to 1000 [ 494.464308][T17891] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 494.482706][T17891] CPU: 0 UID: 0 PID: 17891 Comm: syz.6.3308 Not tainted syzkaller #0 PREEMPT(full) [ 494.482732][T17891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.482744][T17891] Call Trace: [ 494.482751][T17891] [ 494.482759][T17891] dump_stack_lvl+0x189/0x250 [ 494.482791][T17891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.482815][T17891] ? __pfx__printk+0x10/0x10 [ 494.482841][T17891] ? kernfs_path_from_node+0x2f/0x290 [ 494.482863][T17891] ? kernfs_path_from_node+0x250/0x290 [ 494.482882][T17891] ? kernfs_path_from_node+0x2f/0x290 [ 494.482909][T17891] sysfs_warn_dup+0x8e/0xa0 [ 494.482930][T17891] sysfs_do_create_link_sd+0xc0/0x110 [ 494.482953][T17891] device_add_class_symlinks+0x1cf/0x240 [ 494.482980][T17891] device_add+0x475/0xb50 [ 494.483010][T17891] wiphy_register+0x1d2e/0x2d20 [ 494.483051][T17891] ? __pfx_wiphy_register+0x10/0x10 [ 494.483073][T17891] ? __pfx_netdev_run_todo+0x10/0x10 [ 494.483098][T17891] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 494.483125][T17891] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 494.483157][T17891] ieee80211_register_hw+0x3473/0x40d0 [ 494.483193][T17891] ? ieee80211_register_hw+0x13e1/0x40d0 [ 494.483222][T17891] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 494.483238][T17891] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 494.483264][T17891] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.483284][T17891] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.483313][T17891] ? __hrtimer_setup+0x187/0x210 [ 494.483332][T17891] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 494.483357][T17891] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 494.483410][T17891] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 494.483428][T17891] ? trace_kmalloc+0x1f/0xd0 [ 494.483449][T17891] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 494.483475][T17891] ? kstrndup+0xbf/0x160 [ 494.483506][T17891] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 494.483534][T17891] ? __pfx___nla_validate_parse+0x10/0x10 [ 494.483570][T17891] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 494.483599][T17891] ? rcu_is_watching+0x15/0xb0 [ 494.483625][T17891] ? __nla_parse+0x40/0x60 [ 494.483655][T17891] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 494.483685][T17891] genl_family_rcv_msg_doit+0x215/0x300 [ 494.483712][T17891] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.483746][T17891] ? bpf_lsm_capable+0x9/0x20 [ 494.483766][T17891] ? security_capable+0x7e/0x2e0 [ 494.483797][T17891] genl_rcv_msg+0x60e/0x790 [ 494.483823][T17891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.483839][T17891] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 494.483876][T17891] netlink_rcv_skb+0x208/0x470 [ 494.483896][T17891] ? __lock_acquire+0xab9/0xd20 [ 494.483914][T17891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.483933][T17891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.483978][T17891] ? down_read+0x1ad/0x2e0 [ 494.484005][T17891] genl_rcv+0x28/0x40 [ 494.484020][T17891] netlink_unicast+0x82f/0x9e0 [ 494.484052][T17891] ? __pfx_netlink_unicast+0x10/0x10 [ 494.484075][T17891] ? netlink_sendmsg+0x642/0xb30 [ 494.484094][T17891] ? skb_put+0x11b/0x210 [ 494.484119][T17891] netlink_sendmsg+0x805/0xb30 [ 494.484152][T17891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.484178][T17891] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.484205][T17891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.484222][T17891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.484245][T17891] __sock_sendmsg+0x21c/0x270 [ 494.484274][T17891] ____sys_sendmsg+0x505/0x830 [ 494.484304][T17891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.484337][T17891] ? import_iovec+0x74/0xa0 [ 494.484364][T17891] ___sys_sendmsg+0x21f/0x2a0 [ 494.484388][T17891] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.484449][T17891] ? __fget_files+0x2a/0x420 [ 494.484466][T17891] ? __fget_files+0x3a0/0x420 [ 494.484496][T17891] __x64_sys_sendmsg+0x19b/0x260 [ 494.484523][T17891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.484565][T17891] ? do_syscall_64+0xbe/0xfa0 [ 494.484593][T17891] do_syscall_64+0xfa/0xfa0 [ 494.484613][T17891] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.484640][T17891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.484657][T17891] ? clear_bhb_loop+0x60/0xb0 [ 494.484679][T17891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.484696][T17891] RIP: 0033:0x7ff48038f749 [ 494.484711][T17891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.484725][T17891] RSP: 002b:00007ff48119d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.484744][T17891] RAX: ffffffffffffffda RBX: 00007ff4805e5fa0 RCX: 00007ff48038f749 [ 494.484757][T17891] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 494.484768][T17891] RBP: 00007ff480413f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.484778][T17891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.484788][T17891] R13: 00007ff4805e6038 R14: 00007ff4805e5fa0 R15: 00007fff28400c88 [ 494.484822][T17891] [ 495.050977][ T30] audit: type=1804 audit(1764682631.181:11): pid=17911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3312" name="/newroot/375/cgroup.controllers" dev="tmpfs" ino=1924 res=1 errno=0 [ 495.148074][ T30] audit: type=1800 audit(1764682631.181:12): pid=17911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3312" name="cgroup.controllers" dev="tmpfs" ino=1924 res=0 errno=0 [ 495.696403][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3315'. [ 496.071560][T17919] wg1 speed is unknown, defaulting to 1000 [ 496.085521][T17922] wg1 speed is unknown, defaulting to 1000 [ 496.733933][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3319'. [ 497.393064][T17958] netlink: 'syz.0.3324': attribute type 9 has an invalid length. [ 497.430598][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'. [ 497.468854][T17958] hsr0: entered promiscuous mode [ 497.490897][T17958] macvlan4: entered promiscuous mode [ 497.501322][T17958] macvlan4: entered allmulticast mode [ 497.511177][T17958] hsr0: entered allmulticast mode [ 497.520584][T17958] hsr_slave_0: entered allmulticast mode [ 497.532320][T17958] hsr_slave_1: entered allmulticast mode [ 497.784128][T17976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3329'. [ 498.306883][T17995] wg1 speed is unknown, defaulting to 1000 [ 498.405027][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3323'. [ 498.450158][T17957] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 498.499174][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3339'. [ 498.548815][T18016] batadv_slave_1: left allmulticast mode [ 498.569070][T18016] bridge0: port 3(batadv_slave_1) entered disabled state [ 498.595424][T18016] bridge_slave_1: left allmulticast mode [ 498.609960][T18016] bridge_slave_1: left promiscuous mode [ 498.616451][T18016] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.631810][T18016] bridge_slave_0: left allmulticast mode [ 498.637848][T18016] bridge_slave_0: left promiscuous mode [ 498.644020][T18016] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.824989][T18022] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 498.956510][T18028] netlink: 'syz.5.3344': attribute type 1 has an invalid length. [ 498.980752][T18028] erspan0: entered promiscuous mode [ 499.226641][T18042] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 499.296690][T18042] bond0: (slave bond_slave_0): Releasing backup interface [ 499.321422][T18042] bond_slave_0: left promiscuous mode [ 499.343835][T18042] bond0: (slave bond_slave_1): Releasing backup interface [ 499.375597][T18042] bond_slave_1: left promiscuous mode [ 499.387228][T18042] team0: Port device team_slave_0 removed [ 499.397850][T18042] team0: Port device team_slave_1 removed [ 499.407534][T18042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.425037][T18052] netlink: 'syz.6.3349': attribute type 10 has an invalid length. [ 499.434666][T18042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.447106][T18053] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3350'. [ 499.485109][T18042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.602631][T18052] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 499.614209][T18052] bond0: (slave wlan1): Opening slave failed [ 499.649765][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3354'. [ 499.723343][T18064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3356'. [ 499.790115][T18063] syzkaller0: entered promiscuous mode [ 499.804643][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 499.804739][T18063] syzkaller0: entered allmulticast mode [ 499.925995][T18063] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 500.111624][T18071] wg1 speed is unknown, defaulting to 1000 [ 500.368795][T18081] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3361'. [ 500.438445][T18086] wg1 speed is unknown, defaulting to 1000 [ 500.667970][T18101] Bluetooth: MGMT ver 1.23 [ 500.681332][T18103] netlink: 'syz.1.3367': attribute type 1 has an invalid length. [ 501.216522][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3377'. [ 501.289470][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 501.337385][T18135] netlink: 'syz.5.3377': attribute type 1 has an invalid length. [ 501.461976][T18145] bond10 (unregistering): Released all slaves [ 501.665986][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.675648][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.948672][T18165] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 501.972929][T18165] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 502.308825][T18171] tipc: Enabled bearer , priority 0 [ 502.328728][T18171] syzkaller0: entered promiscuous mode [ 502.355280][T18171] syzkaller0: entered allmulticast mode [ 502.413593][T18171] tipc: Resetting bearer [ 502.457101][T18170] tipc: Resetting bearer [ 502.518375][T18170] tipc: Disabling bearer [ 502.864789][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 502.872061][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 503.111122][T18203] __nla_validate_parse: 4 callbacks suppressed [ 503.111142][T18203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3396'. [ 503.509316][T18220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3403'. [ 503.669863][T18230] netlink: 'syz.5.3406': attribute type 1 has an invalid length. [ 503.680869][T18229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3405'. [ 503.689838][T18229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3405'. [ 503.740812][T18229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3405'. [ 503.749967][T18229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3405'. [ 504.091135][T18230] 8021q: adding VLAN 0 to HW filter on device bond10 [ 504.254099][T18232] vlan3: entered allmulticast mode [ 504.274368][T18232] bond10: entered allmulticast mode [ 504.479508][T18238] bond10: (slave gretap2): making interface the new active one [ 504.507747][T18238] gretap2: entered allmulticast mode [ 504.532866][T18238] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 504.801812][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3410'. [ 504.913782][T18259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3410'. [ 504.923484][T18255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3410'. [ 505.027080][T18250] syzkaller0: entered promiscuous mode [ 505.099234][T18250] syzkaller0: entered allmulticast mode [ 505.188326][T18265] netlink: 'syz.5.3409': attribute type 11 has an invalid length. [ 505.216876][T18265] netlink: 'syz.5.3409': attribute type 11 has an invalid length. [ 505.231470][T18265] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3409'. [ 505.519133][T18274] pim6reg: entered allmulticast mode [ 505.538011][T18274] pim6reg: left allmulticast mode [ 505.582054][T18253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.618597][T18276] ip6gretap1: entered allmulticast mode [ 505.944000][T18290] wg1 speed is unknown, defaulting to 1000 [ 506.053318][T18296] FAULT_INJECTION: forcing a failure. [ 506.053318][T18296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.085039][T18296] CPU: 0 UID: 0 PID: 18296 Comm: syz.6.3421 Not tainted syzkaller #0 PREEMPT(full) [ 506.085067][T18296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.085078][T18296] Call Trace: [ 506.085086][T18296] [ 506.085093][T18296] dump_stack_lvl+0x189/0x250 [ 506.085120][T18296] ? __pfx____ratelimit+0x10/0x10 [ 506.085141][T18296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.085163][T18296] ? __pfx__printk+0x10/0x10 [ 506.085181][T18296] ? __might_fault+0xb0/0x130 [ 506.085215][T18296] should_fail_ex+0x414/0x560 [ 506.085244][T18296] _copy_from_user+0x2d/0xb0 [ 506.085267][T18296] ___sys_sendmsg+0x158/0x2a0 [ 506.085292][T18296] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.085350][T18296] ? __fget_files+0x2a/0x420 [ 506.085366][T18296] ? __fget_files+0x3a0/0x420 [ 506.085400][T18296] __x64_sys_sendmsg+0x19b/0x260 [ 506.085424][T18296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.085455][T18296] ? __pfx_ksys_write+0x10/0x10 [ 506.085481][T18296] ? do_syscall_64+0xbe/0xfa0 [ 506.085506][T18296] do_syscall_64+0xfa/0xfa0 [ 506.085525][T18296] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.085545][T18296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.085562][T18296] ? clear_bhb_loop+0x60/0xb0 [ 506.085583][T18296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.085599][T18296] RIP: 0033:0x7ff48038f749 [ 506.085616][T18296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.085630][T18296] RSP: 002b:00007ff48119d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.085650][T18296] RAX: ffffffffffffffda RBX: 00007ff4805e5fa0 RCX: 00007ff48038f749 [ 506.085663][T18296] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 506.085675][T18296] RBP: 00007ff48119d090 R08: 0000000000000000 R09: 0000000000000000 [ 506.085686][T18296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.085697][T18296] R13: 00007ff4805e6038 R14: 00007ff4805e5fa0 R15: 00007fff28400c88 [ 506.085729][T18296] [ 506.419319][T18303] tipc: Enabled bearer , priority 0 [ 506.443380][T18304] syzkaller0: entered promiscuous mode [ 506.462002][T18304] syzkaller0: entered allmulticast mode [ 506.773989][T18310] tipc: Resetting bearer [ 506.870879][T18310] tipc: Disabling bearer [ 508.149810][T18355] tipc: Enabled bearer , priority 0 [ 508.161308][T18357] syzkaller0: entered promiscuous mode [ 508.171363][T18357] syzkaller0: entered allmulticast mode [ 508.305257][T18363] tipc: Resetting bearer [ 508.397840][T18363] tipc: Disabling bearer [ 508.489227][T18379] __nla_validate_parse: 9 callbacks suppressed [ 508.489245][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'. [ 508.570011][T18382] tipc: Enabling of bearer rejected, failed to enable media [ 509.115824][T18409] syzkaller0: entered promiscuous mode [ 509.122671][T18409] syzkaller0: entered allmulticast mode [ 509.141225][T18421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.151709][T18421] tipc: Enabled bearer , priority 0 [ 509.166114][T18398] tipc: Resetting bearer [ 509.215871][T18398] tipc: Disabling bearer [ 509.326678][T18420] tipc: Enabled bearer , priority 0 [ 509.370026][T18422] syzkaller0: entered promiscuous mode [ 509.376634][T18422] syzkaller0: entered allmulticast mode [ 509.382769][T18434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3460'. [ 509.438411][T18438] FAULT_INJECTION: forcing a failure. [ 509.438411][T18438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.470706][T18422] tipc: Resetting bearer [ 509.494228][T18434] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3460'. [ 509.497529][T18438] CPU: 1 UID: 0 PID: 18438 Comm: syz.1.3461 Not tainted syzkaller #0 PREEMPT(full) [ 509.497554][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.497565][T18438] Call Trace: [ 509.497572][T18438] [ 509.497579][T18438] dump_stack_lvl+0x189/0x250 [ 509.497606][T18438] ? __pfx____ratelimit+0x10/0x10 [ 509.497628][T18438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.497649][T18438] ? __pfx__printk+0x10/0x10 [ 509.497667][T18438] ? __might_fault+0xb0/0x130 [ 509.497701][T18438] should_fail_ex+0x414/0x560 [ 509.497730][T18438] _copy_from_iter+0x1de/0x1790 [ 509.497748][T18438] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 509.497771][T18438] ? kmalloc_reserve+0xbd/0x290 [ 509.497802][T18438] ? __pfx__copy_from_iter+0x10/0x10 [ 509.497818][T18438] ? __alloc_skb+0x2f1/0x430 [ 509.497839][T18438] ? __pfx___alloc_skb+0x10/0x10 [ 509.497859][T18438] ? netlink_sendmsg+0x642/0xb30 [ 509.497878][T18438] ? skb_put+0x11b/0x210 [ 509.497900][T18438] netlink_sendmsg+0x6b2/0xb30 [ 509.497930][T18438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.497953][T18438] ? aa_sock_msg_perm+0xf1/0x1d0 [ 509.497978][T18438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.497995][T18438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.498016][T18438] __sock_sendmsg+0x21c/0x270 [ 509.498044][T18438] ____sys_sendmsg+0x505/0x830 [ 509.498076][T18438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.498105][T18438] ? import_iovec+0x74/0xa0 [ 509.498129][T18438] ___sys_sendmsg+0x21f/0x2a0 [ 509.498152][T18438] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.498206][T18438] ? __fget_files+0x2a/0x420 [ 509.498222][T18438] ? __fget_files+0x3a0/0x420 [ 509.498248][T18438] __x64_sys_sendmsg+0x19b/0x260 [ 509.498271][T18438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.498301][T18438] ? __pfx_ksys_write+0x10/0x10 [ 509.498328][T18438] ? do_syscall_64+0xbe/0xfa0 [ 509.498352][T18438] do_syscall_64+0xfa/0xfa0 [ 509.498371][T18438] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.498392][T18438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.498408][T18438] ? clear_bhb_loop+0x60/0xb0 [ 509.498428][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.498443][T18438] RIP: 0033:0x7fb34678f749 [ 509.498459][T18438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.498474][T18438] RSP: 002b:00007fb347710038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.498493][T18438] RAX: ffffffffffffffda RBX: 00007fb3469e5fa0 RCX: 00007fb34678f749 [ 509.498506][T18438] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 509.498517][T18438] RBP: 00007fb347710090 R08: 0000000000000000 R09: 0000000000000000 [ 509.498528][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.498538][T18438] R13: 00007fb3469e6038 R14: 00007fb3469e5fa0 R15: 00007ffc14f94b88 [ 509.498568][T18438] [ 509.675679][T18417] tipc: Resetting bearer [ 509.741552][T18437] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3460'. [ 509.798438][T18441] netlink: 'syz.5.3460': attribute type 3 has an invalid length. [ 509.831667][T18417] tipc: Disabling bearer [ 509.857207][T18440] veth2: entered allmulticast mode [ 509.902172][T18437] veth0_to_batadv: entered allmulticast mode [ 509.956629][T18446] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 509.974229][T18446] CPU: 0 UID: 0 PID: 18446 Comm: syz.2.3463 Not tainted syzkaller #0 PREEMPT(full) [ 509.974256][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.974267][T18446] Call Trace: [ 509.974275][T18446] [ 509.974283][T18446] dump_stack_lvl+0x189/0x250 [ 509.974317][T18446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.974341][T18446] ? __pfx__printk+0x10/0x10 [ 509.974367][T18446] ? kernfs_path_from_node+0x2f/0x290 [ 509.974389][T18446] ? kernfs_path_from_node+0x250/0x290 [ 509.974409][T18446] ? kernfs_path_from_node+0x2f/0x290 [ 509.974436][T18446] sysfs_warn_dup+0x8e/0xa0 [ 509.974458][T18446] sysfs_do_create_link_sd+0xc0/0x110 [ 509.974482][T18446] device_add_class_symlinks+0x1cf/0x240 [ 509.974508][T18446] device_add+0x475/0xb50 [ 509.974535][T18446] wiphy_register+0x1d2e/0x2d20 [ 509.974577][T18446] ? __pfx_wiphy_register+0x10/0x10 [ 509.974598][T18446] ? __pfx_netdev_run_todo+0x10/0x10 [ 509.974621][T18446] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 509.974648][T18446] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 509.974680][T18446] ieee80211_register_hw+0x3473/0x40d0 [ 509.974715][T18446] ? ieee80211_register_hw+0x13e1/0x40d0 [ 509.974743][T18446] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 509.974758][T18446] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 509.974785][T18446] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 509.974806][T18446] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 509.974836][T18446] ? __hrtimer_setup+0x187/0x210 [ 509.974852][T18446] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 509.974872][T18446] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 509.974923][T18446] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 509.974939][T18446] ? trace_kmalloc+0x1f/0xd0 [ 509.974959][T18446] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 509.974980][T18446] ? kstrndup+0xbf/0x160 [ 509.975016][T18446] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 509.975043][T18446] ? __pfx___nla_validate_parse+0x10/0x10 [ 509.975080][T18446] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.975109][T18446] ? rcu_is_watching+0x15/0xb0 [ 509.975136][T18446] ? __nla_parse+0x40/0x60 [ 509.975161][T18446] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 509.975188][T18446] genl_family_rcv_msg_doit+0x215/0x300 [ 509.975215][T18446] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.975249][T18446] ? bpf_lsm_capable+0x9/0x20 [ 509.975268][T18446] ? security_capable+0x7e/0x2e0 [ 509.975298][T18446] genl_rcv_msg+0x60e/0x790 [ 509.975324][T18446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.975340][T18446] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.975378][T18446] netlink_rcv_skb+0x208/0x470 [ 509.975397][T18446] ? __lock_acquire+0xab9/0xd20 [ 509.975415][T18446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.975436][T18446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.975480][T18446] ? down_read+0x1ad/0x2e0 [ 509.975507][T18446] genl_rcv+0x28/0x40 [ 509.975521][T18446] netlink_unicast+0x82f/0x9e0 [ 509.975545][T18446] ? __pfx_netlink_unicast+0x10/0x10 [ 509.975565][T18446] ? netlink_sendmsg+0x642/0xb30 [ 509.975584][T18446] ? skb_put+0x11b/0x210 [ 509.975609][T18446] netlink_sendmsg+0x805/0xb30 [ 509.975643][T18446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.975669][T18446] ? aa_sock_msg_perm+0xf1/0x1d0 [ 509.975694][T18446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.975719][T18446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.975743][T18446] __sock_sendmsg+0x21c/0x270 [ 509.975771][T18446] ____sys_sendmsg+0x505/0x830 [ 509.975800][T18446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.975832][T18446] ? import_iovec+0x74/0xa0 [ 509.975857][T18446] ___sys_sendmsg+0x21f/0x2a0 [ 509.975881][T18446] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.975943][T18446] ? __fget_files+0x2a/0x420 [ 509.975960][T18446] ? __fget_files+0x3a0/0x420 [ 509.975989][T18446] __x64_sys_sendmsg+0x19b/0x260 [ 509.976019][T18446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.976063][T18446] ? do_syscall_64+0xbe/0xfa0 [ 509.976091][T18446] do_syscall_64+0xfa/0xfa0 [ 509.976112][T18446] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.976134][T18446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.976151][T18446] ? clear_bhb_loop+0x60/0xb0 [ 509.976173][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.976190][T18446] RIP: 0033:0x7f318d18f749 [ 509.976207][T18446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.976222][T18446] RSP: 002b:00007f318e027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.976243][T18446] RAX: ffffffffffffffda RBX: 00007f318d3e5fa0 RCX: 00007f318d18f749 [ 509.976257][T18446] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 509.976269][T18446] RBP: 00007f318d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.976280][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.976292][T18446] R13: 00007f318d3e6038 R14: 00007f318d3e5fa0 R15: 00007fff9b831718 [ 509.976327][T18446] [ 510.875108][T18466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3470'. [ 510.891113][T18468] tipc: Enabled bearer , priority 0 [ 510.921429][T18466] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3470'. [ 510.932544][T18460] wg1 speed is unknown, defaulting to 1000 [ 511.114297][T18467] tipc: Disabling bearer [ 511.155597][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3472'. [ 511.302879][T18474] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3473'. [ 511.372094][T18474] netlink: 'syz.2.3473': attribute type 3 has an invalid length. [ 511.400920][T18474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3473'. [ 511.499429][T18476] tipc: Enabled bearer , priority 0 [ 511.531442][T18476] syzkaller0: entered promiscuous mode [ 511.536992][T18476] syzkaller0: entered allmulticast mode [ 511.574733][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3476'. [ 511.580280][T18476] tipc: Resetting bearer [ 511.613414][T18475] tipc: Resetting bearer [ 511.657040][T18475] tipc: Disabling bearer [ 511.694578][T18480] macvtap1: entered promiscuous mode [ 511.699921][T18480] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 511.875560][T18504] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 511.917357][T18504] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 511.935010][T18509] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 511.941790][T18505] tipc: Enabled bearer , priority 0 [ 512.063893][T18494] syz.1.3481: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 512.099664][T18501] tipc: Disabling bearer [ 512.115764][T18494] CPU: 1 UID: 0 PID: 18494 Comm: syz.1.3481 Not tainted syzkaller #0 PREEMPT(full) [ 512.115790][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.115799][T18494] Call Trace: [ 512.115806][T18494] [ 512.115814][T18494] dump_stack_lvl+0x189/0x250 [ 512.115843][T18494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.115865][T18494] ? __pfx__printk+0x10/0x10 [ 512.115883][T18494] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 512.115905][T18494] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 512.115930][T18494] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 512.115954][T18494] warn_alloc+0x214/0x310 [ 512.115984][T18494] ? __pfx_warn_alloc+0x10/0x10 [ 512.116017][T18494] ? __get_vm_area_node+0x28f/0x300 [ 512.116040][T18494] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 512.116063][T18494] __vmalloc_node_range_noprof+0x690/0x12d0 [ 512.116113][T18494] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.116136][T18494] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 512.116155][T18494] ? rcu_is_watching+0x15/0xb0 [ 512.116174][T18494] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 512.116191][T18494] __kvmalloc_node_noprof+0x674/0x910 [ 512.116215][T18494] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 512.116230][T18494] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 512.116251][T18494] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 512.116274][T18494] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 512.116308][T18494] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 512.116324][T18494] ? __fget_files+0x2a/0x420 [ 512.116349][T18494] ? __fget_files+0x2a/0x420 [ 512.116365][T18494] ? __fget_files+0x2a/0x420 [ 512.116385][T18494] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 512.116410][T18494] link_create+0x673/0x850 [ 512.116435][T18494] __sys_bpf+0x6be/0x860 [ 512.116454][T18494] ? __pfx___sys_bpf+0x10/0x10 [ 512.116491][T18494] ? rcu_is_watching+0x15/0xb0 [ 512.116518][T18494] __x64_sys_bpf+0x7c/0x90 [ 512.116548][T18494] do_syscall_64+0xfa/0xfa0 [ 512.116568][T18494] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.116588][T18494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.116605][T18494] ? clear_bhb_loop+0x60/0xb0 [ 512.116625][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.116641][T18494] RIP: 0033:0x7fb34678f749 [ 512.116656][T18494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.116670][T18494] RSP: 002b:00007fb347710038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.116689][T18494] RAX: ffffffffffffffda RBX: 00007fb3469e5fa0 RCX: 00007fb34678f749 [ 512.116701][T18494] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 512.116712][T18494] RBP: 00007fb346813f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.116723][T18494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.116732][T18494] R13: 00007fb3469e6038 R14: 00007fb3469e5fa0 R15: 00007ffc14f94b88 [ 512.116761][T18494] [ 512.116780][T18494] Mem-Info: [ 512.204947][T18518] siw: device registration error -23 [ 512.240540][T18494] active_anon:5815 inactive_anon:0 isolated_anon:0 [ 512.240540][T18494] active_file:3475 inactive_file:40061 isolated_file:0 [ 512.240540][T18494] unevictable:768 dirty:225 writeback:0 [ 512.240540][T18494] slab_reclaimable:12812 slab_unreclaimable:194300 [ 512.240540][T18494] mapped:41888 shmem:1416 pagetables:1276 [ 512.240540][T18494] sec_pagetables:0 bounce:0 [ 512.240540][T18494] kernel_misc_reclaimable:0 [ 512.240540][T18494] free:1204264 free_pcp:16079 free_cma:0 [ 512.468292][T18494] Node 0 active_anon:23560kB inactive_anon:0kB active_file:13900kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167552kB dirty:900kB writeback:0kB shmem:4128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14200kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 512.600011][T18494] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 512.644665][T18494] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.681495][T18494] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 512.687494][T18494] Node 0 DMA32 free:910556kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23760kB inactive_anon:0kB active_file:13900kB inactive_file:160040kB unevictable:1536kB writepending:900kB zspages:0kB present:3129332kB managed:2564988kB mlocked:0kB bounce:0kB free_pcp:41932kB local_pcp:17764kB free_cma:0kB [ 512.744514][T18526] 8021q: VLANs not supported on vxcan1 [ 512.770106][T18494] lowmem_reserve[]: 0 0 0 0 0 [ 512.780158][T18494] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.898341][T18494] lowmem_reserve[]: 0 0 0 0 0 [ 512.910572][T18494] Node 1 Normal free:3891140kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:14304kB free_cma:0kB [ 512.976187][T18494] lowmem_reserve[]: 0 0 0 0 0 [ 512.983033][T18494] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 513.060998][T18494] Node 0 DMA32: 959*4kB (UME) 151*8kB (UM) 507*16kB (UME) 301*32kB (UME) 160*64kB (UME) 67*128kB (UME) 43*256kB (UME) 16*512kB (UM) 11*1024kB (U) 6*2048kB (UME) 202*4096kB (UM) = 911748kB [ 513.115108][T18494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 513.170714][T18494] Node 1 Normal: 197*4kB (U) 54*8kB (UME) 58*16kB (UME) 81*32kB (UME) 25*64kB (UME) 10*128kB (UME) 8*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891140kB [ 513.194078][T18549] tipc: Enabled bearer , priority 0 [ 513.219888][T18549] syzkaller0: entered promiscuous mode [ 513.230568][T18549] syzkaller0: entered allmulticast mode [ 513.244221][T18494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 513.258262][T18494] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 513.271295][T18494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 513.284121][T18494] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 513.294105][T18548] tipc: Resetting bearer [ 513.294417][T18494] 44948 total pagecache pages [ 513.304944][T18494] 0 pages in swap cache [ 513.309100][T18494] Free swap = 124996kB [ 513.313645][T18494] Total swap = 124996kB [ 513.322915][T18494] 2097051 pages RAM [ 513.326745][T18494] 0 pages HighMem/MovableOnly [ 513.342026][T18494] 424162 pages reserved [ 513.346214][T18494] 0 pages cma reserved [ 513.382166][T18548] tipc: Disabling bearer [ 513.495627][T18559] FAULT_INJECTION: forcing a failure. [ 513.495627][T18559] name failslab, interval 1, probability 0, space 0, times 0 [ 513.512007][T18556] __nla_validate_parse: 1 callbacks suppressed [ 513.512024][T18556] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3499'. [ 513.566945][T18559] CPU: 1 UID: 0 PID: 18559 Comm: syz.0.3498 Not tainted syzkaller #0 PREEMPT(full) [ 513.566972][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.566983][T18559] Call Trace: [ 513.566991][T18559] [ 513.566998][T18559] dump_stack_lvl+0x189/0x250 [ 513.567025][T18559] ? __pfx____ratelimit+0x10/0x10 [ 513.567048][T18559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.567070][T18559] ? __pfx__printk+0x10/0x10 [ 513.567092][T18559] ? __pfx___might_resched+0x10/0x10 [ 513.567110][T18559] ? fs_reclaim_acquire+0x7d/0x100 [ 513.567132][T18559] should_fail_ex+0x414/0x560 [ 513.567163][T18559] should_failslab+0xa8/0x100 [ 513.567183][T18559] __kmalloc_noprof+0xcb/0x7f0 [ 513.567205][T18559] ? fib_create_info+0x172d/0x3210 [ 513.567233][T18559] fib_create_info+0x172d/0x3210 [ 513.567261][T18559] ? rcu_is_watching+0x15/0xb0 [ 513.567284][T18559] ? __mutex_lock+0x335/0x1350 [ 513.567306][T18559] ? kasan_quarantine_put+0xdd/0x220 [ 513.567348][T18559] fib_table_insert+0xc6/0x1b50 [ 513.567364][T18559] ? lwtunnel_valid_encap_type+0xb7/0x210 [ 513.567392][T18559] ? __pfx___mutex_lock+0x10/0x10 [ 513.567412][T18559] ? rtm_to_fib_config+0x107f/0x13c0 [ 513.567456][T18559] inet_rtm_newroute+0x12b/0x210 [ 513.567477][T18559] ? __lock_acquire+0xab9/0xd20 [ 513.567496][T18559] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 513.567541][T18559] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 513.567562][T18559] rtnetlink_rcv_msg+0x7cf/0xb70 [ 513.567586][T18559] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 513.567604][T18559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.567621][T18559] ? ref_tracker_free+0x63a/0x7d0 [ 513.567640][T18559] ? __asan_memcpy+0x40/0x70 [ 513.567661][T18559] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.567690][T18559] netlink_rcv_skb+0x208/0x470 [ 513.567714][T18559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.567735][T18559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.567769][T18559] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.567799][T18559] netlink_unicast+0x82f/0x9e0 [ 513.567829][T18559] ? __pfx_netlink_unicast+0x10/0x10 [ 513.567851][T18559] ? netlink_sendmsg+0x642/0xb30 [ 513.567871][T18559] ? skb_put+0x11b/0x210 [ 513.567894][T18559] netlink_sendmsg+0x805/0xb30 [ 513.567927][T18559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.567952][T18559] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.567978][T18559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.567995][T18559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.568017][T18559] __sock_sendmsg+0x21c/0x270 [ 513.568046][T18559] ____sys_sendmsg+0x505/0x830 [ 513.568073][T18559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.568104][T18559] ? import_iovec+0x74/0xa0 [ 513.568130][T18559] ___sys_sendmsg+0x21f/0x2a0 [ 513.568154][T18559] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.568215][T18559] ? __fget_files+0x2a/0x420 [ 513.568232][T18559] ? __fget_files+0x3a0/0x420 [ 513.568260][T18559] __x64_sys_sendmsg+0x19b/0x260 [ 513.568285][T18559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.568317][T18559] ? __pfx_ksys_write+0x10/0x10 [ 513.568350][T18559] ? do_syscall_64+0xbe/0xfa0 [ 513.568376][T18559] do_syscall_64+0xfa/0xfa0 [ 513.568396][T18559] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.568416][T18559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.568436][T18559] ? clear_bhb_loop+0x60/0xb0 [ 513.568457][T18559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.568473][T18559] RIP: 0033:0x7fbfc018f749 [ 513.568489][T18559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.568503][T18559] RSP: 002b:00007fbfc0fd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.568522][T18559] RAX: ffffffffffffffda RBX: 00007fbfc03e5fa0 RCX: 00007fbfc018f749 [ 513.568535][T18559] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 513.568546][T18559] RBP: 00007fbfc0fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 513.568558][T18559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.568568][T18559] R13: 00007fbfc03e6038 R14: 00007fbfc03e5fa0 R15: 00007ffd821522f8 [ 513.568601][T18559] [ 513.967843][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 514.001577][T18556] batadv_slave_0: entered promiscuous mode [ 514.058112][T18562] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3500'. [ 514.066315][T18564] tipc: Enabled bearer , priority 0 [ 514.112254][T18563] tipc: Disabling bearer [ 514.308075][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3506'. [ 514.346369][T18574] netlink: 'syz.0.3504': attribute type 3 has an invalid length. [ 514.347081][ T5833] block nbd2: Receive control failed (result -1) [ 514.365112][T18574] netlink: 'syz.0.3504': attribute type 7 has an invalid length. [ 514.372963][T18574] netlink: 'syz.0.3504': attribute type 8 has an invalid length. [ 514.380852][T18574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3504'. [ 514.537361][T18582] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3509'. [ 514.596568][T18584] tipc: Enabled bearer , priority 0 [ 514.622322][T18584] syzkaller0: entered promiscuous mode [ 514.628093][T18584] syzkaller0: entered allmulticast mode [ 514.668048][T18588] FAULT_INJECTION: forcing a failure. [ 514.668048][T18588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.720725][T18588] CPU: 1 UID: 0 PID: 18588 Comm: syz.5.3512 Not tainted syzkaller #0 PREEMPT(full) [ 514.720751][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.720762][T18588] Call Trace: [ 514.720770][T18588] [ 514.720777][T18588] dump_stack_lvl+0x189/0x250 [ 514.720805][T18588] ? __pfx____ratelimit+0x10/0x10 [ 514.720826][T18588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.720849][T18588] ? __pfx__printk+0x10/0x10 [ 514.720868][T18588] ? __might_fault+0xb0/0x130 [ 514.720904][T18588] should_fail_ex+0x414/0x560 [ 514.720934][T18588] _copy_from_user+0x2d/0xb0 [ 514.720957][T18588] kstrtouint_from_user+0xc4/0x170 [ 514.720979][T18588] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 514.721016][T18588] proc_fail_nth_write+0x88/0x200 [ 514.721038][T18588] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 514.721066][T18588] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 514.721089][T18588] vfs_write+0x27e/0xb30 [ 514.721122][T18588] ? __pfx_vfs_write+0x10/0x10 [ 514.721147][T18588] ? __fget_files+0x2a/0x420 [ 514.721169][T18588] ? __fget_files+0x3a0/0x420 [ 514.721185][T18588] ? __fget_files+0x2a/0x420 [ 514.721212][T18588] ksys_write+0x145/0x250 [ 514.721238][T18588] ? __pfx_ksys_write+0x10/0x10 [ 514.721263][T18588] ? do_syscall_64+0xbe/0xfa0 [ 514.721289][T18588] do_syscall_64+0xfa/0xfa0 [ 514.721309][T18588] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.721330][T18588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.721347][T18588] ? clear_bhb_loop+0x60/0xb0 [ 514.721366][T18588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.721382][T18588] RIP: 0033:0x7f330e58e1ff [ 514.721398][T18588] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 514.721413][T18588] RSP: 002b:00007f330c7ee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 514.721433][T18588] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f330e58e1ff [ 514.721445][T18588] RDX: 0000000000000001 RSI: 00007f330c7ee0a0 RDI: 0000000000000004 [ 514.721456][T18588] RBP: 00007f330c7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 514.721466][T18588] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 514.721476][T18588] R13: 00007f330e7e6038 R14: 00007f330e7e5fa0 R15: 00007ffe9a1a0d18 [ 514.721508][T18588] [ 515.042226][T18586] wg1 speed is unknown, defaulting to 1000 [ 515.160702][T18583] tipc: Resetting bearer [ 515.212344][T18583] tipc: Disabling bearer [ 515.234919][T18600] netlink: 'syz.5.3516': attribute type 1 has an invalid length. [ 515.382045][T18607] syzkaller0: entered promiscuous mode [ 515.419399][T18607] syzkaller0: entered allmulticast mode [ 515.435452][T18602] tipc: Enabled bearer , priority 0 [ 515.461196][T18601] tipc: Resetting bearer [ 515.532859][T18601] tipc: Disabling bearer [ 515.578640][T18615] tipc: Enabled bearer , priority 0 [ 515.592944][T18615] syzkaller0: entered promiscuous mode [ 515.598735][T18615] syzkaller0: entered allmulticast mode [ 515.686305][T18621] netlink: 'syz.6.3521': attribute type 1 has an invalid length. [ 515.788945][T18621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.940210][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3523'. [ 516.091083][T18640] tipc: Resetting bearer [ 516.147893][T18648] tipc: Enabled bearer , priority 0 [ 516.157318][T18648] syzkaller0: entered promiscuous mode [ 516.163176][T18648] syzkaller0: entered allmulticast mode [ 516.177978][T18647] tipc: Resetting bearer [ 516.198167][T18647] tipc: Disabling bearer [ 516.351337][T18614] tipc: Resetting bearer [ 516.399224][T18614] tipc: Disabling bearer [ 516.675457][T18660] syzkaller0: entered promiscuous mode [ 516.693001][T18660] syzkaller0: entered allmulticast mode [ 516.756608][T18660] tipc: Enabled bearer , priority 0 [ 516.789962][T18659] tipc: Resetting bearer [ 516.879488][T18659] tipc: Disabling bearer [ 517.308276][T18673] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3536'. [ 517.429823][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3537'. [ 517.525466][T18683] tipc: Enabled bearer , priority 0 [ 517.545494][T18683] syzkaller0: entered promiscuous mode [ 517.581052][T18683] syzkaller0: entered allmulticast mode [ 517.658854][T18683] tipc: Resetting bearer [ 517.676184][T18682] tipc: Resetting bearer [ 517.732117][T18682] tipc: Disabling bearer [ 517.917227][T18695] netlink: 'syz.1.3542': attribute type 178 has an invalid length. [ 518.064980][T18700] wg1 speed is unknown, defaulting to 1000 [ 518.338054][T18710] syzkaller0: entered promiscuous mode [ 518.344361][T18710] syzkaller0: entered allmulticast mode [ 518.360227][T18710] tipc: Enabled bearer , priority 0 [ 518.384137][T18709] tipc: Resetting bearer [ 518.433466][T18709] tipc: Disabling bearer [ 518.715339][T18724] syzkaller0: entered promiscuous mode [ 518.723438][T18724] syzkaller0: entered allmulticast mode [ 519.758207][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 519.768805][T18765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3559'. [ 520.976216][T18738] netlink: 'syz.2.3555': attribute type 7 has an invalid length. [ 520.985322][T18738] netlink: 'syz.2.3555': attribute type 8 has an invalid length. [ 520.994160][T18739] tipc: Enabling of bearer rejected, failed to enable media [ 521.080180][T18753] wg1 speed is unknown, defaulting to 1000 [ 521.222571][T18780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3563'. [ 521.327938][T18786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3565'. [ 521.419834][T18787] wg1 speed is unknown, defaulting to 1000 [ 521.686520][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 522.414209][T18828] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 522.507861][T18830] wg1 speed is unknown, defaulting to 1000 [ 522.588570][T18833] syzkaller0: entered promiscuous mode [ 522.612854][T18833] syzkaller0: entered allmulticast mode [ 522.800964][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3585'. [ 524.680776][T18860] dummy0: mtu less than device minimum [ 524.686713][T18854] wg1 speed is unknown, defaulting to 1000 [ 524.815493][T18858] wg1 speed is unknown, defaulting to 1000 [ 524.885909][T18863] netlink: 'syz.6.3591': attribute type 13 has an invalid length. [ 525.340139][T18880] tipc: Enabled bearer , priority 0 [ 525.355606][T18880] tipc: Resetting bearer [ 525.386617][T18879] tipc: Disabling bearer [ 525.432743][T14281] IPVS: starting estimator thread 0... [ 525.542890][T18887] IPVS: using max 36 ests per chain, 86400 per kthread [ 525.582875][T18894] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3601'. [ 525.593997][T18895] tipc: Enabled bearer , priority 0 [ 525.605677][T18895] syzkaller0: entered promiscuous mode [ 525.612119][T18895] syzkaller0: entered allmulticast mode [ 525.650229][T18893] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.657764][T18891] tipc: Resetting bearer [ 525.712502][T18901] tipc: Failed to remove unknown binding: 66,1,1/0:1327029029/1327029031 [ 525.722659][T18901] tipc: Failed to remove unknown binding: 66,1,1/0:1327029029/1327029031 [ 525.733079][T18891] tipc: Disabling bearer [ 525.803010][T18899] wg1 speed is unknown, defaulting to 1000 [ 525.881669][T18909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3606'. [ 525.963139][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'. [ 526.025538][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3606'. [ 526.131297][T18919] syzkaller0: entered promiscuous mode [ 526.145342][T18919] syzkaller0: entered allmulticast mode [ 526.191287][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 526.311503][T18922] tipc: Enabled bearer , priority 0 [ 526.338441][T18938] tipc: Enabled bearer , priority 0 [ 526.362486][T18938] tipc: Resetting bearer [ 526.379100][T18916] tipc: Resetting bearer [ 526.426534][T18943] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.446269][T18925] netlink: 'syz.2.3611': attribute type 83 has an invalid length. [ 526.455350][T18944] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.537364][T18916] tipc: Disabling bearer [ 526.590974][T18932] tipc: Disabling bearer [ 526.636066][T18951] syzkaller0: entered promiscuous mode [ 526.642486][T18951] syzkaller0: entered allmulticast mode [ 526.677513][T18947] tipc: Enabled bearer , priority 0 [ 526.754451][T18946] tipc: Resetting bearer [ 526.879076][T18946] tipc: Disabling bearer [ 527.089634][T18962] syzkaller1: entered promiscuous mode [ 527.102385][T18962] syzkaller1: entered allmulticast mode [ 527.401847][T18972] syzkaller0: entered promiscuous mode [ 527.407360][T18972] syzkaller0: entered allmulticast mode [ 527.497732][T18983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3626'. [ 527.665038][T18986] syzkaller1: entered promiscuous mode [ 527.694435][T18986] syzkaller1: entered allmulticast mode [ 527.776223][T18988] wg1 speed is unknown, defaulting to 1000 [ 528.024721][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3633'. [ 528.090239][T19012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3635'. [ 528.201820][T19015] tipc: Failed to remove unknown binding: 66,1,1/1576437291:3901158029/3901158031 [ 528.240517][T19015] tipc: Failed to remove unknown binding: 66,1,1/1576437291:3901158029/3901158031 [ 528.418225][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3641'. [ 528.481500][T19028] : entered promiscuous mode [ 528.573072][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'. [ 528.648430][T19037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.668892][T19045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.678567][T19036] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 528.723634][T19045] bond1: (slave bond0): Enslaving as an active interface with an up link [ 528.750947][T19039] tap0: tun_chr_ioctl cmd 2148553947 [ 529.408809][T19037] bond1 (unregistering): (slave bond0): Releasing backup interface [ 529.429854][T19037] bond1 (unregistering): Released all slaves [ 529.523353][T19040] bond2: (slave bridge3): making interface the new active one [ 529.542089][T19040] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 529.679648][T19054] netlink: 'syz.1.3647': attribute type 1 has an invalid length. [ 529.689620][T19054] netlink: 'syz.1.3647': attribute type 1 has an invalid length. [ 529.800065][T19056] IPv6: Can't replace route, no match found [ 529.976656][T19067] netlink: 'syz.1.3652': attribute type 10 has an invalid length. [ 530.027199][T19067] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.052677][T19067] bond0: (slave team0): Enslaving as an active interface with an up link [ 530.076837][T19065] syzkaller0: entered promiscuous mode [ 530.082641][T19065] syzkaller0: entered allmulticast mode [ 530.244718][T19074] netlink: 'syz.1.3655': attribute type 10 has an invalid length. [ 530.270948][T19074] batadv_slave_1: entered promiscuous mode [ 530.279679][T19074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.298649][T19074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.465432][T19074] bridge0: port 3(batadv_slave_1) entered blocking state [ 530.481583][T19074] bridge0: port 3(batadv_slave_1) entered disabled state [ 530.506852][T19074] batadv_slave_1: entered allmulticast mode [ 530.553471][T19074] bridge0: port 3(batadv_slave_1) entered blocking state [ 530.560772][T19074] bridge0: port 3(batadv_slave_1) entered forwarding state [ 531.158743][T19108] __nla_validate_parse: 3 callbacks suppressed [ 531.158761][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'. [ 531.294647][T19108] can: request_module (can-proto-3) failed. [ 531.367568][T19116] syzkaller0: entered promiscuous mode [ 531.373330][T19116] syzkaller0: entered allmulticast mode [ 531.441974][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 531.505134][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 531.553929][T19124] wg1 speed is unknown, defaulting to 1000 [ 531.855862][T19143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3674'. [ 532.466759][T19175] netlink: 'syz.2.3682': attribute type 39 has an invalid length. [ 534.137826][T19170] batman_adv: batadv0: Adding interface: ip6gretap1 [ 534.144967][T19170] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.171021][T19170] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 534.402732][T19209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.409635][T19205] wg1 speed is unknown, defaulting to 1000 [ 534.431902][T19207] nbd: socks must be embedded in a SOCK_ITEM attr [ 534.453784][T19211] FAULT_INJECTION: forcing a failure. [ 534.453784][T19211] name failslab, interval 1, probability 0, space 0, times 0 [ 534.500705][T19211] CPU: 0 UID: 0 PID: 19211 Comm: syz.5.3688 Not tainted syzkaller #0 PREEMPT(full) [ 534.500731][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.500742][T19211] Call Trace: [ 534.500748][T19211] [ 534.500756][T19211] dump_stack_lvl+0x189/0x250 [ 534.500784][T19211] ? __pfx____ratelimit+0x10/0x10 [ 534.500805][T19211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.500826][T19211] ? __pfx__printk+0x10/0x10 [ 534.500858][T19211] should_fail_ex+0x414/0x560 [ 534.500889][T19211] should_failslab+0xa8/0x100 [ 534.500907][T19211] kmem_cache_alloc_node_noprof+0x77/0x710 [ 534.500930][T19211] ? __alloc_skb+0x255/0x430 [ 534.500957][T19211] __alloc_skb+0x255/0x430 [ 534.500978][T19211] ? __pfx___alloc_skb+0x10/0x10 [ 534.500997][T19211] ? tipc_own_addr+0x45/0x2a0 [ 534.501027][T19211] tipc_msg_create+0x51/0x4d0 [ 534.501055][T19211] tipc_group_proto_xmit+0xce/0x790 [ 534.501086][T19211] tipc_group_delete+0x146/0x480 [ 534.501120][T19211] ? __pfx_tipc_group_delete+0x10/0x10 [ 534.501241][T19211] ? tipc_group_self+0x26/0x1c0 [ 534.501267][T19211] tipc_sk_leave+0x138/0x4e0 [ 534.501294][T19211] ? __pfx_tipc_sk_leave+0x10/0x10 [ 534.501314][T19211] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 534.501346][T19211] tipc_release+0x5fc/0x2120 [ 534.501379][T19211] ? __pfx_tipc_release+0x10/0x10 [ 534.501393][T19211] ? down_write+0x162/0x1f0 [ 534.501406][T19211] ? __pfx_down_write+0x10/0x10 [ 534.501426][T19211] ? locks_remove_posix+0x381/0x650 [ 534.501451][T19211] ? __pfx_locks_remove_posix+0x10/0x10 [ 534.501477][T19211] sock_close+0xc3/0x240 [ 534.501502][T19211] ? __pfx_sock_close+0x10/0x10 [ 534.501524][T19211] __fput+0x44c/0xa70 [ 534.501558][T19211] fput_close_sync+0x119/0x200 [ 534.501578][T19211] ? dnotify_flush+0x1db/0x5e0 [ 534.501598][T19211] ? __pfx_fput_close_sync+0x10/0x10 [ 534.501617][T19211] ? do_raw_spin_unlock+0x122/0x240 [ 534.501645][T19211] __x64_sys_close+0x7f/0x110 [ 534.501666][T19211] do_syscall_64+0xfa/0xfa0 [ 534.501685][T19211] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.501705][T19211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.501722][T19211] ? clear_bhb_loop+0x60/0xb0 [ 534.501740][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.501756][T19211] RIP: 0033:0x7f330e58f749 [ 534.501773][T19211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.501788][T19211] RSP: 002b:00007f330c7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 534.501805][T19211] RAX: ffffffffffffffda RBX: 00007f330e7e5fa0 RCX: 00007f330e58f749 [ 534.501817][T19211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 534.501827][T19211] RBP: 00007f330c7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 534.501838][T19211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.501848][T19211] R13: 00007f330e7e6038 R14: 00007f330e7e5fa0 R15: 00007ffe9a1a0d18 [ 534.501881][T19211] [ 534.502641][T19211] tipc: Failed to remove unknown binding: 66,1,1/1576437291:198818273/198818275 [ 534.754410][T19217] tipc: Failed to remove unknown binding: 66,1,1/0:2393233302/2393233304 [ 534.763424][T19211] tipc: Failed to remove unknown binding: 66,1,1/1576437291:198818273/198818275 [ 534.812167][T19217] tipc: Failed to remove unknown binding: 66,1,1/0:2393233302/2393233304 [ 535.077667][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3694'. [ 535.099955][T19222] macsec1: entered promiscuous mode [ 535.106218][T19222] bridge0: entered promiscuous mode [ 535.115164][T19222] bridge0: port 1(macsec1) entered blocking state [ 535.122106][T19222] bridge0: port 1(macsec1) entered disabled state [ 535.139201][T19222] macsec1: entered allmulticast mode [ 535.154402][T19222] bridge0: entered allmulticast mode [ 535.173854][T19222] macsec1: left allmulticast mode [ 535.178938][T19222] bridge0: left allmulticast mode [ 535.187325][T19222] bridge0: left promiscuous mode [ 535.208665][T19235] tipc: Failed to remove unknown binding: 66,1,1/0:2388546647/2388546649 [ 535.217842][T19235] tipc: Failed to remove unknown binding: 66,1,1/0:2388546647/2388546649 [ 535.414763][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3699'. [ 535.429851][T19240] syzkaller0: entered promiscuous mode [ 535.435881][T19240] syzkaller0: entered allmulticast mode [ 535.521536][T19251] tipc: Failed to remove unknown binding: 66,1,1/0:659656865/659656867 [ 535.531066][T19251] tipc: Failed to remove unknown binding: 66,1,1/0:659656865/659656867 [ 535.667339][T19258] sctp: [Deprecated]: syz.0.3705 (pid 19258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.667339][T19258] Use struct sctp_sack_info instead [ 535.730671][T19255] sctp: [Deprecated]: syz.0.3705 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.730671][T19255] Use struct sctp_sack_info instead [ 535.810115][T19266] debugfs: 'netdev:nicvf0' already exists in 'phy34' [ 535.868478][T19267] tipc: Failed to remove unknown binding: 66,1,1/0:3165273848/3165273850 [ 535.897849][T19267] tipc: Failed to remove unknown binding: 66,1,1/0:3165273848/3165273850 [ 536.108379][T19280] syzkaller1: entered promiscuous mode [ 536.124164][T19280] syzkaller1: entered allmulticast mode [ 536.148332][T19280] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 536.251601][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3715'. [ 536.319616][T19293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3717'. [ 536.333783][T19293] netem: change failed [ 536.569622][T19313] syzkaller0: entered promiscuous mode [ 536.580528][T19313] syzkaller0: entered allmulticast mode [ 537.041674][T19328] debugfs: 'netdev:nicvf0' already exists in 'phy34' [ 537.416047][T19341] tipc: Failed to remove unknown binding: 66,1,1/1576437291:1244414941/1244414943 [ 537.427658][T19341] tipc: Failed to remove unknown binding: 66,1,1/1576437291:1244414941/1244414943 [ 537.478841][T19350] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3730'. [ 537.526013][T19350] IPv6: sit1: Disabled Multicast RS [ 537.547614][T19350] sit1: entered allmulticast mode [ 537.563723][T19354] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 537.645334][T19360] debugfs: 'netdev:nicvf0' already exists in 'phy23' [ 537.752329][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 537.864527][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 537.986953][T19376] wg1 speed is unknown, defaulting to 1000 [ 539.083066][T19410] debugfs: 'netdev:nicvf0' already exists in 'phy29' [ 539.304055][T19421] tipc: Enabled bearer , priority 0 [ 539.313050][T19421] syzkaller0: entered promiscuous mode [ 539.318540][T19421] syzkaller0: entered allmulticast mode [ 539.337158][T19421] tipc: Resetting bearer [ 539.361030][T19420] tipc: Resetting bearer [ 539.391451][T19425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3754'. [ 539.406194][T19420] tipc: Disabling bearer [ 539.646722][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3757'. [ 539.649916][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3758'. [ 539.697969][T19436] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 539.703234][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'. [ 539.779062][T19429] netlink: 'syz.0.3758': attribute type 18 has an invalid length. [ 539.858787][T19445] debugfs: 'netdev:nicvf0' already exists in 'phy29' [ 539.958771][T19452] openvswitch: netlink: Message has 8 unknown bytes. [ 540.105779][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'. [ 540.253196][T19469] wg1 speed is unknown, defaulting to 1000 [ 541.328495][T19505] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 541.475135][T19469] netlink: 'syz.2.3770': attribute type 6 has an invalid length. [ 543.404215][T19618] __nla_validate_parse: 3 callbacks suppressed [ 543.404232][T19618] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3831'. [ 543.420046][T19618] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 543.604368][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3835'. [ 544.104957][T19655] tipc: Enabled bearer , priority 0 [ 544.115508][T19655] syzkaller0: entered promiscuous mode [ 544.125751][T19655] syzkaller0: entered allmulticast mode [ 544.159487][T19655] tipc: Resetting bearer [ 544.179694][T19654] tipc: Resetting bearer [ 544.200027][T19654] tipc: Disabling bearer [ 544.242228][T19657] wg1 speed is unknown, defaulting to 1000 [ 544.711820][ T5830] Bluetooth: hci6: command 0x040f tx timeout [ 545.522853][T19682] tipc: Failed to remove unknown binding: 66,1,1/0:2288121104/2288121106 [ 545.533528][T19682] tipc: Failed to remove unknown binding: 66,1,1/0:2288121104/2288121106 [ 545.858588][T19704] debugfs: 'netdev:nicvf0' already exists in 'phy34' [ 545.963309][T19699] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3860'. [ 546.012229][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3860'. [ 546.111918][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.119697][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.140674][ T9747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.180655][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.282796][T19723] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.3869'. [ 546.321044][T19723] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 546.504855][T19729] 8021q: VLANs not supported on sit0 [ 546.544101][T19732] ipt_REJECT: ECHOREPLY no longer supported. [ 546.664954][T19736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3874'. [ 546.706440][T19738] debugfs: 'netdev:nicvf0' already exists in 'phy34' [ 546.715797][T19736] netlink: 'syz.5.3874': attribute type 1 has an invalid length. [ 546.752080][T19737] wg1 speed is unknown, defaulting to 1000 [ 547.024621][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 547.083002][T19763] tipc: Enabled bearer , priority 0 [ 547.117142][T19763] syzkaller0: entered promiscuous mode [ 547.141755][T19763] syzkaller0: entered allmulticast mode [ 547.169497][T19763] tipc: Resetting bearer [ 547.183226][T19762] tipc: Resetting bearer [ 547.217924][T19762] tipc: Disabling bearer [ 547.718713][T19786] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3888'. [ 547.788634][T19786] netlink: 'syz.5.3888': attribute type 10 has an invalid length. [ 547.981962][T19798] debugfs: 'netdev:nicvf0' already exists in 'phy23' [ 548.067257][T19807] FAULT_INJECTION: forcing a failure. [ 548.067257][T19807] name failslab, interval 1, probability 0, space 0, times 0 [ 548.105034][T19807] CPU: 1 UID: 0 PID: 19807 Comm: syz.5.3896 Not tainted syzkaller #0 PREEMPT(full) [ 548.105063][T19807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.105074][T19807] Call Trace: [ 548.105082][T19807] [ 548.105091][T19807] dump_stack_lvl+0x189/0x250 [ 548.105119][T19807] ? __pfx____ratelimit+0x10/0x10 [ 548.105140][T19807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.105162][T19807] ? __pfx__printk+0x10/0x10 [ 548.105183][T19807] ? kasan_save_track+0x4f/0x80 [ 548.105203][T19807] ? kasan_save_track+0x3e/0x80 [ 548.105222][T19807] ? __kasan_save_free_info+0x46/0x50 [ 548.105242][T19807] ? kfree+0x19a/0x6d0 [ 548.105260][T19807] ? tipc_group_delete+0x3ac/0x480 [ 548.105282][T19807] ? tipc_sk_leave+0x138/0x4e0 [ 548.105304][T19807] should_fail_ex+0x414/0x560 [ 548.105335][T19807] should_failslab+0xa8/0x100 [ 548.105354][T19807] kmem_cache_alloc_node_noprof+0x77/0x710 [ 548.105377][T19807] ? __alloc_skb+0x255/0x430 [ 548.105403][T19807] __alloc_skb+0x255/0x430 [ 548.105425][T19807] ? __pfx___alloc_skb+0x10/0x10 [ 548.105445][T19807] ? tipc_own_addr+0x45/0x2a0 [ 548.105474][T19807] tipc_msg_create+0x51/0x4d0 [ 548.105502][T19807] tipc_group_proto_xmit+0xce/0x790 [ 548.105533][T19807] tipc_group_delete+0x146/0x480 [ 548.105570][T19807] ? __pfx_tipc_group_delete+0x10/0x10 [ 548.105606][T19807] ? tipc_group_self+0x26/0x1c0 [ 548.105632][T19807] tipc_sk_leave+0x138/0x4e0 [ 548.105660][T19807] ? __pfx_tipc_sk_leave+0x10/0x10 [ 548.105695][T19807] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 548.105727][T19807] tipc_release+0x5fc/0x2120 [ 548.105760][T19807] ? __pfx_tipc_release+0x10/0x10 [ 548.105776][T19807] ? down_write+0x162/0x1f0 [ 548.105792][T19807] ? __pfx_down_write+0x10/0x10 [ 548.105812][T19807] ? locks_remove_posix+0x381/0x650 [ 548.105839][T19807] ? __pfx_locks_remove_posix+0x10/0x10 [ 548.105869][T19807] sock_close+0xc3/0x240 [ 548.105893][T19807] ? __pfx_sock_close+0x10/0x10 [ 548.105917][T19807] __fput+0x44c/0xa70 [ 548.105950][T19807] fput_close_sync+0x119/0x200 [ 548.105971][T19807] ? dnotify_flush+0x1db/0x5e0 [ 548.105991][T19807] ? __pfx_fput_close_sync+0x10/0x10 [ 548.106012][T19807] ? do_raw_spin_unlock+0x122/0x240 [ 548.106043][T19807] __x64_sys_close+0x7f/0x110 [ 548.106065][T19807] do_syscall_64+0xfa/0xfa0 [ 548.106085][T19807] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.106105][T19807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.106121][T19807] ? clear_bhb_loop+0x60/0xb0 [ 548.106142][T19807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.106159][T19807] RIP: 0033:0x7f330e58f749 [ 548.106176][T19807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.106191][T19807] RSP: 002b:00007f330c7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 548.106211][T19807] RAX: ffffffffffffffda RBX: 00007f330e7e5fa0 RCX: 00007f330e58f749 [ 548.106224][T19807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 548.106235][T19807] RBP: 00007f330c7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 548.106246][T19807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.106257][T19807] R13: 00007f330e7e6038 R14: 00007f330e7e5fa0 R15: 00007ffe9a1a0d18 [ 548.106290][T19807] [ 548.222279][T19807] tipc: Failed to remove unknown binding: 66,1,1/1576437291:3860955297/3860955299 [ 548.242278][T19810] tipc: Enabled bearer , priority 0 [ 548.259447][T19807] tipc: Failed to remove unknown binding: 66,1,1/1576437291:3860955297/3860955299 [ 548.265107][T19810] syzkaller0: entered promiscuous mode [ 548.493772][T19810] syzkaller0: entered allmulticast mode [ 548.513127][T19812] tipc: Resetting bearer [ 548.541759][T19809] tipc: Resetting bearer [ 548.610645][T19809] tipc: Disabling bearer [ 548.647525][T19822] IPVS: set_ctl: invalid protocol: 90 0.0.0.0:20000 [ 548.660210][T19822] tipc: Failed to remove unknown binding: 66,1,1/1576437291:2490630648/2490630650 [ 548.670046][T19822] tipc: Failed to remove unknown binding: 66,1,1/1576437291:2490630648/2490630650 [ 548.861811][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3902'. [ 548.984922][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3905'. [ 549.015938][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3906'. [ 549.045729][T19825] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 549.079517][T19831] macvlan2: entered promiscuous mode [ 549.085960][T19831] macvlan2: entered allmulticast mode [ 549.093466][T19831] bond1: entered promiscuous mode [ 549.099212][T19831] bridge4: entered promiscuous mode [ 549.110527][T19831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.120066][T19831] bond1: left promiscuous mode [ 549.132149][T19831] bridge4: left promiscuous mode [ 549.278139][T19837] syzkaller0: create flow: hash 3120792668 index 1 [ 549.346530][ T36] syzkaller0: tun_net_xmit 76 [ 549.357006][ T36] syzkaller0: tun_net_xmit 48 [ 549.371095][ T24] syzkaller0: tun_net_xmit 76 [ 549.529914][T19845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3908'. [ 549.605838][T19847] tipc: Failed to remove unknown binding: 66,1,1/0:1823821591/1823821593 [ 549.632840][T19847] tipc: Failed to remove unknown binding: 66,1,1/0:1823821591/1823821593 [ 549.649042][T19847] FAULT_INJECTION: forcing a failure. [ 549.649042][T19847] name failslab, interval 1, probability 0, space 0, times 0 [ 549.661796][T19847] CPU: 0 UID: 0 PID: 19847 Comm: syz.2.3909 Not tainted syzkaller #0 PREEMPT(full) [ 549.661823][T19847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.661834][T19847] Call Trace: [ 549.661841][T19847] [ 549.661849][T19847] dump_stack_lvl+0x189/0x250 [ 549.661878][T19847] ? __pfx____ratelimit+0x10/0x10 [ 549.661899][T19847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.661922][T19847] ? __pfx__printk+0x10/0x10 [ 549.661953][T19847] should_fail_ex+0x414/0x560 [ 549.661983][T19847] should_failslab+0xa8/0x100 [ 549.662003][T19847] kmem_cache_alloc_node_noprof+0x77/0x710 [ 549.662025][T19847] ? __alloc_skb+0x255/0x430 [ 549.662052][T19847] __alloc_skb+0x255/0x430 [ 549.662070][T19847] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.662092][T19847] ? __pfx___alloc_skb+0x10/0x10 [ 549.662107][T19847] ? __local_bh_enable_ip+0x12d/0x1c0 [ 549.662127][T19847] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 549.662152][T19847] ? tipc_named_withdraw+0x189/0x760 [ 549.662178][T19847] tipc_buf_acquire+0x2b/0xe0 [ 549.662199][T19847] tipc_named_withdraw+0x1db/0x760 [ 549.662227][T19847] tipc_nametbl_withdraw+0xcc/0x280 [ 549.662251][T19847] tipc_release+0x770/0x2120 [ 549.662285][T19847] ? __pfx_tipc_release+0x10/0x10 [ 549.662301][T19847] ? down_write+0x162/0x1f0 [ 549.662317][T19847] ? __pfx_down_write+0x10/0x10 [ 549.662338][T19847] ? locks_remove_posix+0x381/0x650 [ 549.662365][T19847] ? __pfx_locks_remove_posix+0x10/0x10 [ 549.662394][T19847] sock_close+0xc3/0x240 [ 549.662419][T19847] ? __pfx_sock_close+0x10/0x10 [ 549.662442][T19847] __fput+0x44c/0xa70 [ 549.662475][T19847] fput_close_sync+0x119/0x200 [ 549.662496][T19847] ? dnotify_flush+0x1db/0x5e0 [ 549.662516][T19847] ? __pfx_fput_close_sync+0x10/0x10 [ 549.662543][T19847] ? do_raw_spin_unlock+0x122/0x240 [ 549.662575][T19847] __x64_sys_close+0x7f/0x110 [ 549.662597][T19847] do_syscall_64+0xfa/0xfa0 [ 549.662617][T19847] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.662638][T19847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.662655][T19847] ? clear_bhb_loop+0x60/0xb0 [ 549.662677][T19847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.662694][T19847] RIP: 0033:0x7f318d18f749 [ 549.662711][T19847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.662726][T19847] RSP: 002b:00007f318e027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 549.662745][T19847] RAX: ffffffffffffffda RBX: 00007f318d3e5fa0 RCX: 00007f318d18f749 [ 549.662758][T19847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 549.662769][T19847] RBP: 00007f318e027090 R08: 0000000000000000 R09: 0000000000000000 [ 549.662779][T19847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.662790][T19847] R13: 00007f318d3e6038 R14: 00007f318d3e5fa0 R15: 00007fff9b831718 [ 549.662823][T19847] [ 549.662833][T19847] tipc: Withdrawal distribution failure [ 549.953746][T19832] syzkaller0: delete flow: hash 3120792668 index 1 [ 549.990551][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.409519][T19873] netlink: 'syz.2.3914': attribute type 2 has an invalid length. [ 550.421168][T19873] netlink: 'syz.2.3914': attribute type 1 has an invalid length. [ 551.225589][T19887] netlink: 'syz.0.3917': attribute type 6 has an invalid length. [ 551.233731][T19887] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3917'. [ 551.583725][ T31] INFO: task syz.4.2617:15325 blocked for more than 143 seconds. [ 551.591976][ T31] Not tainted syzkaller #0 [ 551.596920][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.606139][ T31] task:syz.4.2617 state:D stack:25824 pid:15325 tgid:15306 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 551.618362][ T31] Call Trace: [ 551.621892][ T31] [ 551.624831][ T31] __schedule+0x1798/0x4cc0 [ 551.629582][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.634734][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.640743][ T31] ? __pfx___schedule+0x10/0x10 [ 551.645680][ T31] ? schedule+0x91/0x360 [ 551.649922][ T31] schedule+0x165/0x360 [ 551.654625][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.660103][ T31] __mutex_lock+0x7e6/0x1350 [ 551.664967][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 551.669823][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 551.675109][ T31] ? __mutex_lock+0x5bb/0x1350 [ 551.679885][ T31] ? nfsd_nl_version_set_doit+0xc2/0x770 [ 551.685677][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.690975][ T31] nfsd_nl_version_set_doit+0xc2/0x770 [ 551.696443][ T31] ? rcu_is_watching+0x15/0xb0 [ 551.701263][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 551.707349][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 551.713910][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 551.719455][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 551.725871][ T31] ? bpf_lsm_capable+0x9/0x20 [ 551.730766][ T31] ? security_capable+0x7e/0x2e0 [ 551.735705][ T31] genl_rcv_msg+0x60e/0x790 [ 551.740581][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.745630][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 551.752500][ T31] netlink_rcv_skb+0x208/0x470 [ 551.757421][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.762411][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.767627][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.773643][ T31] ? down_read+0x1ad/0x2e0 [ 551.778242][ T31] genl_rcv+0x28/0x40 [ 551.782627][ T31] netlink_unicast+0x82f/0x9e0 [ 551.787696][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 551.793287][ T31] ? netlink_sendmsg+0x642/0xb30 [ 551.798433][ T31] ? skb_put+0x11b/0x210 [ 551.802986][ T31] netlink_sendmsg+0x805/0xb30 [ 551.807777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.813206][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.818176][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.825810][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.831323][ T31] __sock_sendmsg+0x21c/0x270 [ 551.836003][ T31] ____sys_sendmsg+0x505/0x830 [ 551.840823][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.846142][ T31] ? import_iovec+0x74/0xa0 [ 551.850761][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 551.855451][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.860971][ T31] ? __fget_files+0x2a/0x420 [ 551.865579][ T31] ? __fget_files+0x3a0/0x420 [ 551.870274][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 551.875618][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.881771][ T31] ? do_syscall_64+0xbe/0xfa0 [ 551.886478][ T31] do_syscall_64+0xfa/0xfa0 [ 551.891114][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.896325][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.903108][ T31] ? clear_bhb_loop+0x60/0xb0 [ 551.907814][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.913797][ T31] RIP: 0033:0x7fa9ad58f749 [ 551.918204][ T31] RSP: 002b:00007fa9ab3f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.926715][ T31] RAX: ffffffffffffffda RBX: 00007fa9ad7e6270 RCX: 00007fa9ad58f749 [ 551.934768][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 551.943148][ T31] RBP: 00007fa9ad613f91 R08: 0000000000000000 R09: 0000000000000000 [ 551.951229][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.959218][ T31] R13: 00007fa9ad7e6308 R14: 00007fa9ad7e6270 R15: 00007ffd3fde8c88 [ 551.967706][ T31] [ 551.986168][ T31] [ 551.986168][ T31] Showing all locks held in the system: [ 551.994455][ T31] 3 locks held by kworker/u8:1/13: [ 551.999607][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 552.011575][ T31] #1: ffffc90000127ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 552.022656][ T31] #2: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 552.031721][ T31] 1 lock held by khungtaskd/31: [ 552.036573][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 552.046517][ T31] 6 locks held by kworker/u8:8/3021: [ 552.052168][ T31] #0: ffff8880b883a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 552.062713][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 552.071795][ T31] #2: ffff888075d10b98 (key#16){+...}-{3:3}, at: batadv_tt_local_purge+0x10a/0x340 [ 552.081544][ T31] #3: ffff888067591ce0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1a9/0xb80 [ 552.093313][ T31] #4: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 552.103290][ T31] #5: ffff8880b893a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 552.114198][ T31] 2 locks held by getty/5583: [ 552.119032][ T31] #0: ffff88814dfdf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 552.129098][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 552.139801][ T31] 2 locks held by syz.3.1298/10944: [ 552.145141][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.153777][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 552.164275][ T31] 2 locks held by syz.4.2617/15325: [ 552.169491][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.177820][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770 [ 552.188020][ T31] 2 locks held by syz.5.3905/19832: [ 552.193340][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 552.202654][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 552.213750][ T31] 1 lock held by syz.1.3910/19849: [ 552.218872][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 552.228434][ T31] 1 lock held by syz.1.3910/19850: [ 552.233600][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 552.242771][ T31] 1 lock held by syz.1.3910/19851: [ 552.247875][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 552.256819][ T31] 1 lock held by syz.1.3910/19853: [ 552.262411][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 552.271878][ T31] 3 locks held by syz.1.3910/19862: [ 552.277066][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.285537][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 552.295342][ T31] #2: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x1fd/0x5f0 [ 552.305077][ T31] 1 lock held by syz.6.3911/19855: [ 552.310185][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 552.320243][ T31] 1 lock held by syz.6.3911/19860: [ 552.326394][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 552.336312][ T31] 1 lock held by syz.6.3911/19864: [ 552.341459][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtm_del_nexthop+0x354/0x5b0 [ 552.350762][ T31] 2 locks held by syz.6.3911/19868: [ 552.355964][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.364333][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 552.373440][ T31] 1 lock held by syz.2.3916/19877: [ 552.378556][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 552.388177][ T31] 2 locks held by syz.0.3917/19886: [ 552.393576][ T31] #0: ffffffff8f7ec650 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 552.403463][ T31] #1: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 552.412773][ T31] 1 lock held by syz.0.3917/19887: [ 552.418086][ T31] #0: ffffffff8f2cdb48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x109/0x210 [ 552.428109][ T31] [ 552.431967][ T31] ============================================= [ 552.431967][ T31] [ 552.442046][ T31] NMI backtrace for cpu 1 [ 552.442065][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.442081][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.442089][ T31] Call Trace: [ 552.442095][ T31] [ 552.442101][ T31] dump_stack_lvl+0x189/0x250 [ 552.442127][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.442145][ T31] ? __pfx__printk+0x10/0x10 [ 552.442169][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 552.442186][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 552.442202][ T31] ? __pfx__printk+0x10/0x10 [ 552.442219][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.442236][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 552.442253][ T31] watchdog+0xf60/0xfa0 [ 552.442271][ T31] ? watchdog+0x1e2/0xfa0 [ 552.442289][ T31] kthread+0x711/0x8a0 [ 552.442309][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.442322][ T31] ? __pfx_kthread+0x10/0x10 [ 552.442341][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.442358][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.442373][ T31] ? __pfx_kthread+0x10/0x10 [ 552.442391][ T31] ret_from_fork+0x4bc/0x870 [ 552.442408][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 552.442427][ T31] ? __switch_to_asm+0x39/0x70 [ 552.442438][ T31] ? __switch_to_asm+0x33/0x70 [ 552.442449][ T31] ? __pfx_kthread+0x10/0x10 [ 552.442467][ T31] ret_from_fork_asm+0x1a/0x30 [ 552.442497][ T31] [ 552.442505][ T31] Sending NMI from CPU 1 to CPUs 0: [ 552.588417][ C0] NMI backtrace for cpu 0 [ 552.588449][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 552.588466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.588475][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 552.588499][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 61 1f 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 552.588511][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 552.588525][ C0] RAX: 64160e49b484bd00 RBX: ffffffff81967b47 RCX: 64160e49b484bd00 [ 552.588537][ C0] RDX: 0000000000000001 RSI: ffffffff8d715097 RDI: ffffffff8bbf08e0 [ 552.588547][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 552.588558][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d2470 [ 552.588569][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 552.588579][ C0] FS: 0000000000000000(0000) GS:ffff88812612e000(0000) knlGS:0000000000000000 [ 552.588591][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.588601][ C0] CR2: 000000110c3adf3c CR3: 0000000020fb2000 CR4: 00000000003526f0 [ 552.588614][ C0] Call Trace: [ 552.588621][ C0] [ 552.588627][ C0] default_idle+0x13/0x20 [ 552.588640][ C0] default_idle_call+0x73/0xb0 [ 552.588654][ C0] do_idle+0x1e7/0x510 [ 552.588673][ C0] ? __pfx_do_idle+0x10/0x10 [ 552.588695][ C0] cpu_startup_entry+0x44/0x60 [ 552.588710][ C0] rest_init+0x2de/0x300 [ 552.588725][ C0] start_kernel+0x3ae/0x410 [ 552.588751][ C0] x86_64_start_reservations+0x24/0x30 [ 552.588769][ C0] x86_64_start_kernel+0x143/0x1c0 [ 552.588785][ C0] common_startup_64+0x13e/0x147 [ 552.588812][ C0] [ 553.472037][T19855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 553.488645][T19860] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 553.497101][T19862] tipc: Enabling of bearer rejected, failed to enable media [ 557.980971][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!