last executing test programs: 5.13286896s ago: executing program 2 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="190000005e7dd10008e67a72cc040000ef000000b649ec000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000a40)="a219", &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20) select(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5bf17c37462aff00000000000000f7c08cda3e44e260f9d369f62bfe3c4e3dad5e87f81d000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036677265000014000280060003000200000006000200930a0000"], 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 4.174808798s ago: executing program 2 (id=1637): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) read(r2, &(0x7f00000000c0)=""/116, 0x74) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r4, 0x200, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) (fail_nth: 2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008825}, 0x20000800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000002f40)=""/267, 0xfffffeed}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.962630851s ago: executing program 1 (id=1642): socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_to_team\x00', @random="f60f63971a2b"}) 3.54742975s ago: executing program 1 (id=1644): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) close(0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800ce2e72009fb3000000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x20000290, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) syz_emit_ethernet(0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaae43f66429fea041191780893b9a40000000000890dbc63936724154c88460094f700bf757aa8a5"], 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r7, 0x0, 0x9}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r7, 0x0, 0x5}, 0x18) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6, r10}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.17815542s ago: executing program 3 (id=1646): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xab0c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}], 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x7e, r3}, [@IFA_LABEL={0x14, 0x3, 'macsec0\x00'}]}, 0x2c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff62f6ed", @ANYRES16=r5, @ANYBLOB="01032abd7000fddbdf251600000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) r8 = socket(0x8, 0x5, 0x0) getsockname$packet(r8, 0x0, 0x0) (async) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) (async) close(r9) (async) socket(0x80000000000000a, 0x2, 0x0) 3.00032011s ago: executing program 1 (id=1647): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) read(r2, &(0x7f00000000c0)=""/116, 0x74) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r4, 0x200, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008825}, 0x20000800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000002f40)=""/267, 0xfffffeed}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) 2.927320576s ago: executing program 3 (id=1649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8", 0xe}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) 2.805884854s ago: executing program 2 (id=1650): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) socket$inet6(0xa, 0x80002, 0x88) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, 0x0, 0x1800) (async) bind$inet6(r1, 0x0, 0x1800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x27, 0xf, 0x0, &(0x7f0000000480)="0300f977ea0e00c00c00004256fd44", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r2, &(0x7f0000000180)="0ac2bb915b1fd42f9e045f0b5f9b7f39c68523dd9be6521ceb1443d069ea5ddae055c177ecb28a83d4349d79ef7b03898847adc8fa589b68e08b287c33f9a716c67e931708b4759bb0de8ffd090e", &(0x7f0000000200)=""/80}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r2, &(0x7f0000000180)="0ac2bb915b1fd42f9e045f0b5f9b7f39c68523dd9be6521ceb1443d069ea5ddae055c177ecb28a83d4349d79ef7b03898847adc8fa589b68e08b287c33f9a716c67e931708b4759bb0de8ffd090e", &(0x7f0000000200)=""/80}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0xc, 0x3, 0x5, 0x6a6186f126c255d9, @mcast2, @loopback, 0x8, 0x700, 0x98, 0x4b344768}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x48004) r5 = socket$igmp(0x2, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in=@rand_addr=0x64010100, 0x4e22, 0x4, 0x4e23, 0x58, 0xa, 0x40, 0x0, 0x4, r6, r7}, {0x3e5, 0x6, 0x7, 0x0, 0x0, 0x3, 0x8, 0x9}, {0x9, 0xffffffffffffffff, 0x5996, 0xb}, 0x2, 0x6e6bb4, 0x0, 0x0, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in=@local, 0x0, 0x0, 0x2, 0x2, 0x2, 0x81, 0x3}}, 0xe8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0xa, 0x0, 0x0, 0xe, 0x2, 0x2}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000340), 0x38, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x2, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0xb3, &(0x7f0000000240)=""/179, 0x41000, 0x50, '\x00', 0x0, @fallback=0x36, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, r10]}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000980)={'veth1_to_bond\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000980)={'veth1_to_bond\x00', 0x200}) accept(0xffffffffffffffff, &(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000a40)=0x80) (async) r12 = accept(0xffffffffffffffff, &(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000a40)=0x80) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r13, 0x89e4) syz_genetlink_get_family_id$l2tp(&(0x7f0000001180), r12) syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002880)={0xb}, 0x8) 2.641192246s ago: executing program 0 (id=1653): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000300000000000ff00fcffffff9500000000275800b161f4aa8787b8a4efd0e92eedfa9d44a3a5721d29763b35c253f78759b699b547533d51ea673a272822a1bd781afc62a8d140dfc3558b063ee85e7c780000000000008000190ad4fe5f3830a44c6820680b7e4026cca6c90a4da9b892fb4e41c7574c8df529820e270e38a32352cc963fd4b708a4d1626d98acd9e1f5f06aebaf18a440dc802cf645a565e78c6a31f07d8c54af538efd4c2759f45796d68457dc4d75de91456995e562f8e87e1cdfe4159be67e75f6550386"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x29}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000200)={0x0, 0x4967, 0x400}) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a000000000044000780080001"], 0x90}}, 0x0) 2.586173263s ago: executing program 2 (id=1654): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) getsockopt(r3, 0x11c, 0x1f, 0x0, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0xee00, 0xee00}, 0xc) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000a00)) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x7, @empty, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="b00200001600010000000000000000000000000000000000000000000000fc0200000000000000000000000000004e20000000000000000000001fc3000000003108ec4d681898a3b49ad4b59431d3116102cc277a561b2d2777389dba65be77105a434ac91e44cd0d066834bfbeffe0125b7663bcb3f552eda8195132a3fabdeef73d0915fbcc2d8e506b93c91183d0dc20800e7a86995cc016208ef1221e1191169a21bda90000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000001000000000000000bf5a416000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100030300000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 2.585957392s ago: executing program 4 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0xffffffff, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x2b, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x50}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 2.090430187s ago: executing program 1 (id=1656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) splice(r7, &(0x7f0000000680)=0x5, r8, &(0x7f0000000700)=0x7, 0x3d, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000d000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008daef571c0400000000000085000000030000009500"], &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x103, 0x103, 0x9, [@var={0x8, 0x0, 0x0, 0xe, 0x1}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0xd, [{0x10, 0x46bc, 0x9}, {0xa, 0x6, 0x1}, {0xa, 0x1}, {0x1000009, 0x4fc1ed0b, 0x4}, {0x6, 0xbb4, 0xfffffffd}]}, @struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}, @datasec={0xa, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x4, 0x7}, {0x1, 0x5, 0x4}, {0x2, 0x65}, {0x4, 0x3ff, 0x6}, {0x2, 0x1, 0xd8000}, {0x3, 0x9, 0xff}, {0x2, 0x6, 0x1}], "50577f"}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x10000, 0x8}]}]}, {0x0, [0x0, 0x5f, 0x1e, 0x2e, 0x5f, 0x30, 0x30]}}, &(0x7f0000000780)=""/25, 0x125, 0x19, 0x0, 0x0, 0x10000}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xfffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xde2, 0xc2, &(0x7f00000004c0)=""/194, 0x41000, 0xc, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xe, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)=[{0x1, 0x4, 0xf, 0x4}], 0x10, 0x91b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xf, &(0x7f00000009c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000a40)='syzkaller\x00', 0x1, 0xcb, &(0x7f0000000a80)=""/203, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000b80)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x10, 0xbb0, 0xfffffff8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[r9, r11, r2], &(0x7f0000000c40)=[{0x2, 0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0xe}], 0x10, 0x101}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000d40)={r14, r6}, 0xc) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r13) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r15, 0x805, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xb5, 0x80}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x814) r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r18 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r18, 0x6b, 0x4, &(0x7f0000000140), 0x4) r19 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="270e28bd70adef785bcc4d79e817de094cd6db000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 1.054023751s ago: executing program 4 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdc01, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r4, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r3, 0x0, 0xa0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) 998.039762ms ago: executing program 2 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="ca0c67093673965a622d18608cc9c98b6d851c5511cb79da34eac814fa3e55ecaabb1be8d6cd773f83667e014999544f185bd6ba72b3540bac271b197f0dc654476df30d5249a23bec9a594a995c1e4a48976c3310f5816dda0810f8454816fc261c04a4bb995bb0f32ed078f173398a68ae342b6d7eb2251f9b54037f174cb604ba4d763c5c8987d1d31d1d117b21169bb8e3f401735260", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001140)=[{{&(0x7f00000002c0)={0xa, 0x4a22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0xffff, @private2, 0x6}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="2786", 0x2}], 0x1}}], 0x2, 0x4000044) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000003c0)={'wg0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newlink={0xc4, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, 0x8013, 0x42922}, [@IFLA_AF_SPEC={0xa4, 0x1a, 0x0, 0x1, [@AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0xd5, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0xfffffffffffffda1, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x9}, {0x8, 0x7, 0x0, 0x0, 0x10000}, {0x2, 0x18, 0x0, 0x0, 0xfff}, {0x8, 0x2, 0x0, 0x0, 0x3}, {0x8, 0xb, 0x0, 0x0, 0x5}]}}, @AF_MPLS={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @empty, 0x2e}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) sendmsg$netlink(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x10, 0x26, 0x100, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', r7, 0x2f, 0x8, 0xf, 0x9c, 0x40, @loopback, @mcast2, 0x10, 0x7f01, 0x3, 0xffffffff}}) 997.450827ms ago: executing program 3 (id=1659): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) (async) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x6, 0x50a, 0x8, {}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "d098abce9aeebd97"}}, 0x48}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x2}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x11d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x2}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x11d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x6c}}, 0x0) 948.020804ms ago: executing program 1 (id=1660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x18, 0x25, 0x101, 0x70bd2c, 0xfefffff8, {0x87}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048957}, 0x28850) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x5b}, {&(0x7f0000000640)='$', 0x1}], 0x2) close(r0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffd76) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, @value=r3}, 0x28) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (rerun: 32) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000008b80)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r6, &(0x7f00000005c0), 0x0}, 0x20) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000008f80)={0x0, 0x10e8, 0xd, 0xb}, &(0x7f0000009000)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)={r9, 0x8}, &(0x7f00000000c0)=0x8) (async, rerun: 32) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000009200), 0x0, 0x8000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x4e23, 0x3, 'wlc\x00', 0x1, 0x4, 0x800008}, 0x2c) (async) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 892.679071ms ago: executing program 0 (id=1661): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x99}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa900000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0xb0, &(0x7f00000002c0)=""/176, 0x41000, 0x7}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 860.702005ms ago: executing program 4 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe8103, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) unshare(0x20000400) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4c000) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 658.102987ms ago: executing program 1 (id=1663): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) r2 = socket(0x10, 0x3, 0x0) read(r2, &(0x7f00000000c0)=""/116, 0x74) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r4, 0x200, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008825}, 0x20000800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000002f40)=""/267, 0xfffffeed}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 656.511559ms ago: executing program 0 (id=1664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911100000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c000000}, 0x94) 623.888377ms ago: executing program 3 (id=1665): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x72bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) 550.027932ms ago: executing program 4 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x16) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='cpuhp_exit\x00'}, 0x18) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r9, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) 502.0514ms ago: executing program 0 (id=1667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x3, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 399.024609ms ago: executing program 4 (id=1668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x9}, {0x1, 0xfff2}}}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f0000"], 0x40}, 0x24040090) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0x7f, 0x7}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x4, 0xfff}}], 0x38, 0x48060}], 0x1, 0x200000d0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) 313.965239ms ago: executing program 3 (id=1669): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000100000000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b52050000000000300012800e00010069703665727370616e0000c9755e2b2e001c000280080015007f180e000800140001040000050008"], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 166.168997ms ago: executing program 0 (id=1670): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000040)='GPL\x00', 0x3, 0x3, &(0x7f0000003300)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=@can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "afa06e8a9d15799b"}, 0x10}, 0x1, 0x0, 0x0, 0x841}, 0x4000) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 124.237102ms ago: executing program 3 (id=1671): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) shutdown(0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@loopback, 0x78}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) write(r3, &(0x7f00000002c0)="d3ac6015b85ef219e0b0263b379ea07b486e136189d8db863df8db6b839910d62de47c9f39201865ae7f918d84776c06bc35b97e95a2e08244c66efcbab6e1d7fdb6adb0ecf78bd30d339504626a2813775d244c85785bc64abaccfbaf917684663cb645e5b2ca89cf5f26e0d251b13f1757d62ffc0e1421bf46959a32336492ffb0a2f357cb58065fe8d167f215", 0x8e) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 101.99477ms ago: executing program 4 (id=1672): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0200000004000000080020000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xf, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x8000000, 0x2, 0x9, 0x6, 0x8704, 0x27000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x478, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb06e, 0x7b7, 0x8, 0xfffffff8, 0x1, 0x3, 0x2, 0x9, 0xd, 0x5, 0x3, 0x3, 0x400, 0x7, 0x6, 0x0, 0x8, 0x7, 0x9, 0x7ff, 0x5, 0x6, 0x2f06, 0x3ab, 0x7, 0x6, 0xd, 0xa5, 0x6, 0x0, 0x7fffffff, 0x18000, 0x8, 0x4, 0xffffffff, 0x6, 0x1, 0xf, 0xd1, 0x1, 0xfffffff7, 0x1, 0x1, 0x76ad, 0xe8d, 0x0, 0xfffffff6, 0x3, 0x7ff, 0x2, 0x0, 0x2228, 0x2140, 0xcbc2, 0x3, 0x2, 0x1, 0x100, 0x6, 0x7fffffff, 0xc, 0x0, 0x1f5d, 0x6, 0x3, 0xe7, 0x3, 0xaf0, 0xfffffbfd, 0x4000000, 0x3, 0x6, 0x3, 0xffffffde, 0x2, 0x6, 0x9, 0x9254, 0x3, 0x5, 0x9, 0x70, 0x2, 0x8, 0x9, 0x4, 0x2a, 0x4, 0x6, 0xfffffffd, 0x0, 0x6, 0x7, 0x9, 0x200, 0x45, 0x2, 0xd82, 0xeae2, 0x8, 0x9, 0x80, 0x101, 0xebc1, 0x7, 0x6, 0x6, 0xf, 0x8000007, 0x1000, 0x4, 0x241, 0xa, 0xac000000, 0x2, 0x3, 0xfffffffe, 0x7, 0x8001, 0x0, 0x7, 0x6, 0x0, 0x3, 0x5, 0x463, 0x3, 0xe6, 0x7, 0xfffffff9, 0x1, 0x4, 0x86a, 0x0, 0xc, 0xfffffffb, 0x3, 0x2, 0x1, 0xff, 0x4, 0x1e8e3d9a, 0x2, 0x3, 0x6, 0x1, 0xa, 0x9, 0x8001, 0x3, 0x0, 0xfff, 0x1, 0x7, 0x10001, 0xa6d, 0x2df, 0x10, 0x3, 0xba, 0x8, 0x9, 0x1, 0x9, 0x8f12, 0xaf, 0xfffffff3, 0x2, 0x4, 0x6, 0x8, 0x3, 0x9, 0x1, 0x7, 0x0, 0x8001, 0x3, 0x5, 0x1, 0x2, 0x101, 0x9, 0x0, 0x3, 0x7, 0x1, 0x40000000, 0x9, 0x200, 0xfffffffc, 0x9, 0xd11, 0x8, 0x4, 0x101, 0xfff, 0x0, 0x80000000, 0x4000000, 0x7, 0x93a, 0x3af, 0x474, 0x316, 0x9, 0xd0, 0x0, 0x0, 0x9, 0x9, 0x8, 0xa5a0, 0xffffffff, 0x2, 0x1, 0x2, 0x8000, 0x8e0, 0xf2, 0x5, 0x3, 0x6, 0xfffffff0, 0x5, 0x2, 0x81, 0x3ca, 0xfffffff7, 0x7, 0xf55f, 0xd, 0x7f, 0x800, 0x8, 0x5, 0x1c, 0x9, 0x10003, 0xffffffff, 0x1, 0xe7f, 0x10, 0x7, 0x0, 0x2, 0x89e3, 0x6, 0xe893, 0x10, 0x3, 0x891, 0x3, 0x3, 0x4, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x6, 0xfffffff3, 0x6, {0x1, 0x2, 0x1, 0x9ab3, 0x6, 0x1}, {0x80, 0x2, 0x4, 0x8, 0x6, 0x3}, 0x1, 0x8001, 0x5}}]}]}}]}, 0x478}}, 0x20000000) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4006) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000000803000005100000000000000000000900010073797a3000000000060002400300010000b2813744fbe6d5b22e001400048008000140000000070800024000000003"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000110001003fbd7000015cdf2564010101000000000000000000000000000004d30a0032000c0015005c07350004000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async) r6 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)=""/60, &(0x7f0000000380)=0x3c) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x4000fffd, 'syz0\x00', @bcast, 0xfffffdb6, 0x3, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x70bd2b, 0xfffffffd, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x12, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x14, 0x6, "156c58e6140000000000000047d3289b"}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x4000000) (async) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x101, 0x7, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 549.302µs ago: executing program 2 (id=1673): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, '\x00', [{0xe7fd, 0x5, 0x10000, 0x1, 0x5, 0x5}, {0x3ff, 0x6, 0x0, 0x2d, 0x7fff, 0xd}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x5, 0x1, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x700, 0xa, 0x6}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x3, 0x0}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x10, 0x7fffffff, 0xc0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0xe}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x9, 0x8}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x1e, &(0x7f00000002c0)=@raw=[@ldst={0x5, 0x0, 0x5dc2e309009b07b7, 0x5, 0x1, 0x1, 0xfffffffffffffff0}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @ldst={0x2, 0x0, 0x0, 0x8, 0x5, 0xfffffffffffffff4, 0x10}, @alu={0x0, 0x0, 0xc, 0x2, 0x7, 0x0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @cb_func={0x18, 0xe, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x1, 0xb, 0xb, 0x9, 0x20, 0xfffffffffffffff0}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0xf4, &(0x7f0000000400)=""/244, 0x40f00, 0x4, '\x00', r2, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0xf, 0xfffffff7, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000740)=[r4, r5, r6], &(0x7f0000000780)=[{0x2, 0x1, 0x8, 0x2}, {0x0, 0x4, 0xb, 0x9}, {0x0, 0x2, 0x7, 0x8}, {0x5, 0x1, 0x2, 0x5}, {0x5, 0x4, 0x7, 0x8}], 0x10, 0x8}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0xfffffffe, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x8, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={@loopback, 0x0, 0x0, 0x40, 0x0, [{@broadcast}, {@broadcast}, {@broadcast}, {@private}]}}) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40), 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r4}, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r10, r11}, 0xc) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x200, @random="d1f6247fe785"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000c00)="9c6abaf9061cb2e5883856d560f2589ec1e0596eae1a49b866fd2ba3f3ef24167edcc723d562e882426f02cd4045e77aa7ee3a5cf91b3d03c6859d0d178ca2f303377b9e6973d83cfe5a23c0f8abb33a3f0a890931dabb7077dcc4e928bd0021fe771a9f895ef57777c276b222c26900223b2cb56a65393fb047b6d4eecca2f57287c2cbc61fae62ad404281dbf69cfcd363416830af606cae806585fa8e57d682974e020a7bcc8189b54273f991edf07adc216c901969d84d6fd647209def417ff6954e480e3ecb9db0002c873b2b587217fdc52092b2801abf7fd9a4e286e06767d0eef9", 0xe5) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000d00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x72, r2}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r10, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0], 0x0, 0xd, &(0x7f00000010c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x97, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r5, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1e, 0x9, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x72}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @generic={0x64, 0x0, 0x9, 0xe, 0x7}]}, &(0x7f0000000dc0)='GPL\x00', 0x0, 0xe9, &(0x7f0000000e00)=""/233, 0x41100, 0x21, '\x00', 0x0, @fallback=0xa, r12, 0x8, &(0x7f0000000f40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x8, 0xa, 0x6}, 0x10, r14, r7, 0x9, &(0x7f00000013c0)=[r8, r9, r5, r15, r8, r5, r8, r8], &(0x7f0000001400)=[{0x3, 0x5, 0x5, 0x1}, {0x2, 0x5, 0x6, 0x6}, {0x0, 0x5, 0x10}, {0x3, 0x2, 0x3, 0x7}, {0x1, 0x80, 0x10, 0xc}, {0x3, 0x1, 0x8, 0x5}, {0x2, 0x5, 0xc, 0x5}, {0x5, 0x1, 0x6, 0x6}, {0x2, 0x5, 0xd, 0x5}], 0x10, 0xc}, 0x94) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r16, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r17, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r18}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048085}, 0x404) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r16, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0x8040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001940)={@fallback=r7, 0x0, 0x1, 0xbf47, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001980)={@fallback=r12, r11, 0x22, 0x24, 0x0, @void, @void, @void, @value=r13, r19}, 0x20) 0s ago: executing program 0 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8050000b803000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003900)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) sendmmsg(r7, &(0x7f0000003800)=[{{&(0x7f0000000200)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="1fa34b63e6af5c28b9d20d08ef5f14fa0099fba0bdca2323f59b84551a81e88987edf0c7fb8d62ecb6e464876ea95b562c988aebc7573f8cf718d073552c2ccbc7afaf7be7b3411966b15fc0cc6a80fe19ce65fe62d7aa309f7aad18e2198b1e6ca700997d820883009702628c98cfea2fec07167a95b698ff0568c98a6eee722937", 0x82}, {&(0x7f0000000000)="1686d08637", 0x5}, {&(0x7f00000004c0)="dca39d742ea41d45bf8fcd5c2b3261116d91f3df03427122a0304038ce274f1e28ab0fd6d971d9e4011e2eb512b31e784504ba25192d", 0x36}, {&(0x7f0000000500)="73ece54cb179b36d", 0x8}], 0x4, &(0x7f0000000a00)=[{0xe0, 0x0, 0x8001, "5f16c80dfbd8ae8b1749c1500ed0cde51c51a77f6ea237fad4cd7a53731a63014990dfe2690dd5c57ea37a95524060ef19a0377939bb5a9efb2ce1d14449b94a12874587368a57bece902ee0cded73131b8580f861c44a24fbce4f64fb965e9aad2fa0f3d3d073783c09f4f1b97ea5d1f188e7ca096790891d3bbfb985a09e88915b4e3d82132e79dc7cb0b17f4185f53c97679eac923b089e6860b86eedfca8820597f4f04f4ea86d0140e67e7e6f013bd04307b12c70227a5e40ca836c72d2b3525dad31836bb3ce969461aa0e9c"}, {0x78, 0x109, 0x9, "f98dd4c3a61b76809be6a835470373d9c22cc75ba31b4a6a5d6a30999144b5e1bd0ffab551239a65bda684ad29c1681f5c8668a05edc9dbefb6b148b804a0e199bd26724525638a42d8e5438f41df39be23f8150b1d603845ebc9660356d2d455a2b9b90f9"}, {0xb8, 0x109, 0x1, "6e1ab4b7ba6aecfa3089efeb56bee9b21e0e78597c9399cc92c578d2d53aed9d9d4493981479de323b54ef3a2f8d9f57544969153ea30574a88a166d4e3fe645f591c68e90fe9d8b5be83922d0f99dff714b36d45c07dec61e558e738ec96a8a1f451df65ba603d931307fdc16a6e8faf959b7f2d39c2e0798f2b62c14246393c5f1294338dc53b26c2c132fe5435efe350f0ec2f1b517715244fae880b639e8fa25d6"}, {0xd8, 0x114, 0x2, "982a71c1322f252d8a38dd86a14867965a3bb24347d37487003d0231d428cb6f81f8ecb8b19a0170492fb2da6f57fda3ea3e5ad4a08f74717ee4b40467c512d91e12ca9852356e291b073e84d6c47c4d76a03240784d09adec2512ddbefafb20823b090f2020ad871981b5072c629e766d08aa032dde463e98e4404b0168afcda90867f1115ff6995e09be15a561c500ae301aeda78ac90558433cede146710b4a6cc7173adb80d9a386e212927390e09f8acbe03f39aae8778d5ebf7f1ad9988997"}, {0x10, 0x112, 0x81}, {0xe8, 0x88, 0xd526, "a25946b63260224d4a92c8ccc937a1efee4042a8c1c00eb0b45194b82e4c7f10fed736f01f1e9aa16912d3ceb6badd5fbb22fef52f9a6a5840b09f26695b7be438ceb98910b87c7cc6b346463b529bb06257947f3d178c4e62c0368ec330ccad29728a2e08e3cc2f9747abeaf119cb5d3aafc985b2e13f91f3f651b99478716f1e6708312e33b02cf5c971a412aacc978be8bb6440dec271b07ffc4b4514edca93adacad9009db122780347fe3c6739484f685a3688c47e941c236f91ebdc65475dbcff345085cb57da0093ee6e1498199"}, {0xc8, 0x111, 0x8922, "6c027dc94fca51a9d95898b53e824420243752ef14852734fe82b2eff56f3c11f8bc402f80f4ab032655c816ffc939cda0e80fa7869c7756b414d822c66954938a2910103b45c1325ae789ad9b97f46ad49f7265ff5baa3ddfbe5f6e79d28fec0ede9838a4dd2994c30f33843b5470f36e9b64e3deeda47e6da50aeb2299edbfc7c3923cd7dd3c4d9c5d25b1eca5358211a712f34068f1def106bd7a5f315ce49e0d867161af24a371c11924dbf271ff13b885fe626c"}, {0xb8, 0x1, 0xfffffffa, "bf56573d5c2d97730cb1ef467af8ee5c21905096ecebdd7ba19cf1b36497cbda5a96cfa4b632249a1eb0ec51015c419d18f22845937748d403874df663f9bf087b954b058cb6fcfc017979ae6d7ba5e3cea0f336587454d6b89fd64e23c38f218ce71f991ced18455e784c4eff2d51b75a8240ddb10e98aab01fcd6f430626afe6591af1f3638e908f94b1c54d4b6725feb9f1afc611a1719391712429f6b3eaee"}, {0x100, 0x118, 0x0, "774f765cf10ed1ed8c53ba16479b6bf749606a4295c7e21b153e10f1c8006ed6b45a3bddad07053afe97eced01edf1dedf39244581e8dd02125f02924704d98b30190fbca0c00b7ba0fc1a7ce322603f8d366d5537e1710f0e1be95d3daa46b08cc47cc53ff853d59454e97bfa334240b37647a518ceabbe597ab81a75c34c87e3cd2ff40689231b8185f5c31890706a80ca72cc5f042123577943a43e9e742b60a030914af037f98ce44e27ac7cfec4bfc35a4539907b4d844033867c56ec1fba1596581317118a882664d65a0894726a0bc682c792297586e60ec4164bb95db4508d88c0d969aac7decf455a832580"}, {0x1010, 0x109, 0xffffffff, "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"}], 0x1670}}, {{&(0x7f0000000580)=@qipcrtr={0x2a, 0x0, 0x4001}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)="a44fc367be13058e55e2b3defb966f865fa7e2a51659864543d1d9da86b3fd36ec0b916c31aa5a8f28d2380d9c2442b62f4732dce0e62053655289e7eadbff2c143315b57560d033ffcf327c21b7223aa059ed4c4683985c757eb65aa8f506d46e4e8e7417119de6fb55eac03c", 0x6d}, {&(0x7f0000000680)="9e7c5783ff6fe37f3b56ab023793ee2ff845", 0x12}], 0x2}}, {{&(0x7f0000000700)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="d16e1f0ca5aa15c451b5fc783a7f76739af0f60eee734033d6766b2a87f14363876d7097530124d7155e6547b0fb667c2cc9941761f7ed9b8e631448bd276eb7fdccef014387069a6aae3283ab67c7e9", 0x50}], 0x1}}, {{&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}, 0xfffffff2}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="af58783eb6c8f8cde55220ab4ab186873c28ee5cf6815bcd808ee191e80ba16a0975d5ce020545ae97fc47388f16d7adde36b36b2193c14aea787bc41f49b757dacf9815685ab859a61817b2afa859c41a8ccb5401bbcdbef67aa69b99d49c7539162b8fc2b40ee98860529cfa6178cf33288ad853f9226913a326c85cfef8ddd07f505eea26a3ec5355b9ef26d42e8c0b767aaeb48eaadacb23840806658bf2227034220449b92e140398e3cc5a7c45d716b155638ee079d81f4b543db5d841fb817900876531ec72e7001991ca6fc0acfc3acb", 0xd4}, {&(0x7f0000000940)="793f9b829b2eeb2439e5f42242702aaa6b3efc845be38f467f6422843884e3ecde66eda7db90c38916fbf38c843a8102e63b75e96718219f277e0206df140ede5e95", 0x42}, {&(0x7f0000003180)="36ca44978b7206d227c8f9c9be021127e7ecbeb42263d94d98f1507533ab7ce6cbfe5c170673d9d48563ebe97fa5731dc2a88b36410178692718628ff75587465ae99e2cead9e4ad077789e2cfa8db14cd56c5581a12357fed87a57eb44b547ea7b460f9d15ff3e1f4f7ae67131192e7d852247719d339b7530eed03afd25301ef31e53a93d439ae57dedf99acbb9edb68ec57baa2dcc19cfe92e353d1e138cbce", 0xa1}, {&(0x7f0000003240)="3f97d06cd47effe8031d914fa585eac0d98763590fd955066a25361ee08cdfc24cc13db7519a2ba1ab8365eca4d356ff959f968e542557529904a838f4b82cf6a8ecdca6164573f5d6ded31988f66ca790127ab4fa43fbd9d1ac792a648b10ca70e158107ec6284ec37250bc85bf642049de958c50fa2cbb8f80c71415765e3f8f7b7e46bb2d8cbf38ac4e016346820134fc8c727b95a201cf8e8453a7aa7c3b8eba402f311fe547e11800d2f7e171da54d836da2f62440a70b03ac41f6ec1cecdf0e1378433363c7bfc84e4957e613f2f84ca1475b64298e08fd6b13190", 0xde}, {&(0x7f0000003340)="b1e8a1120b67941cc78502a948f500c75e293b69249dd514525738af046290d1ce6b84510d7c6cb3237e332c47394f07ca702466f6e7138c2ae6ed4d9d62bb3f29e54d80b2c6a8", 0x47}], 0x6, &(0x7f0000003440)=[{0xd8, 0x10c, 0x3245, "308b6b512fc57970cac19bd70e536c5532e7759271fd030d59423f34f7bf4b14223210cf603768290a13011a2b2f6ec1d1c60bf5d44cbdc7aaac1cfec04067ea460d7ea8a9f84a156b2106b7fa666bb714dbaaa35cf5c26214b40329a80cf2ade087dec4ec5c7df4c081c6f37d7cdd77b8f69d7446d1fb3d959a543e107d7be129b9379c3b78fc4c5bab5da3292c030c82d821b0de22e331a73d7929d5a869e8f7e24fe2f19568b209594f78609fc23e53ac9859bcc7ec00c01b10ba749b5feaa30ddfec"}, {0x90, 0x0, 0x5842, "ef67248f745c7ca3074e590bf68b30b808a225e78d400aaffaac651c155efb241e11be4071157b8e79e0395b6eb6767baf25038dd94aacbf7275c7cf269521b2630cf358a9ea68563266c02ebb61254e8dfdb6dfaf4f3d9bdec617be34dfc269a571d896b92110ef8c6422da6f319993f7f0a797d596987e0462feb72a62"}, {0x40, 0x119, 0x2eb94cf, "0f4c006f604cd063d0539eaf3ebaca489c9de3d081fa0fd43194ed906e757b09ef574e8af0e35b29841142"}, {0x50, 0x84, 0x80, "f7015cc1dae2e7fb58cfe4bc83d496ee980e1eb25fb0eef8a7b595e11636f8469565f3c9653f7bd4e51a626e50c2a75443d6f755a640ef4c2f9fbb7d77eb76"}, {0x30, 0x114, 0x68ba, "b8b4879250432a6c843fd38c4133062c3ded38a348cc708f790f211b5e"}, {0x70, 0x109, 0x8, "2d771af345c302d23d00b2ce4c83da110ae8aedeec6dfca9740a9bbbf8ba39bc37c2b6b8cdab281549cdc02afd18ff56080b022d0ea6476bed4f93bf75f975603ad5dae4d5a0178dbda854e4b6b0c0cf5feef5a9fa2c22271c76bb83"}, {0x90, 0x116, 0x7, "7ba13256d5df4261d360f7f17eefc108e8b2050392c9700c99bdf7a46f8fa6385d192050fcd92f7542d8ec89b2a4d95bcd4a87faaf8ee8f04b712dfce89ff5be3a9cd05f7f3a4a8dd080c613b317a1b3a743c29d14bd33f2e3e78ae6066f5262f8d927465f1b9b14d134eb41942d5cad1b9ca631231241395a6e24646e2964"}, {0x78, 0x0, 0x8, "b53475d2a9fd68a835ab1cfd0f8ccf2a39b17f7ae8c98782ba20eb92379329fe16d6701c4887d567e022ed754ae09e15c163b4bc171861d1f3d97a99db2e2a305536ddc4851bc1af59dce01decf2a8b73e23ae51b4701f426ca26b8afe0ed3318a7504da1a"}], 0x3a0}}], 0x4, 0x20000800) kernel console output (not intermixed with test programs): [ T7281] Call Trace: [ 140.239852][ T7281] [ 140.239861][ T7281] dump_stack_lvl+0x189/0x250 [ 140.239896][ T7281] ? __pfx____ratelimit+0x10/0x10 [ 140.239930][ T7281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.239961][ T7281] ? __pfx__printk+0x10/0x10 [ 140.239990][ T7281] ? __pfx___might_resched+0x10/0x10 [ 140.240012][ T7281] ? fs_reclaim_acquire+0x7d/0x100 [ 140.240051][ T7281] should_fail_ex+0x414/0x560 [ 140.240090][ T7281] should_failslab+0xa8/0x100 [ 140.240113][ T7281] __kvmalloc_node_noprof+0x158/0x910 [ 140.240148][ T7281] ? nf_tables_newset+0x1330/0x2540 [ 140.240187][ T7281] ? nft_set_lookup+0x128/0x150 [ 140.240216][ T7281] ? nft_rhash_estimate+0x4f/0xa0 [ 140.240242][ T7281] nf_tables_newset+0x1330/0x2540 [ 140.240286][ T7281] ? __pfx_nf_tables_newset+0x10/0x10 [ 140.240339][ T7281] ? __nla_parse+0x40/0x60 [ 140.240368][ T7281] nfnetlink_rcv+0x11d9/0x2590 [ 140.240441][ T7281] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 140.240533][ T7281] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.240576][ T7281] netlink_unicast+0x82f/0x9e0 [ 140.240619][ T7281] ? __pfx_netlink_unicast+0x10/0x10 [ 140.240654][ T7281] ? netlink_sendmsg+0x642/0xb30 [ 140.240673][ T7281] ? skb_put+0x11b/0x210 [ 140.240699][ T7281] netlink_sendmsg+0x805/0xb30 [ 140.240731][ T7281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.240757][ T7281] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.240790][ T7281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.240811][ T7281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.240834][ T7281] __sock_sendmsg+0x21c/0x270 [ 140.240867][ T7281] ____sys_sendmsg+0x505/0x830 [ 140.240897][ T7281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.240932][ T7281] ? import_iovec+0x74/0xa0 [ 140.240964][ T7281] ___sys_sendmsg+0x21f/0x2a0 [ 140.240990][ T7281] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.241057][ T7281] ? __fget_files+0x2a/0x420 [ 140.241076][ T7281] ? __fget_files+0x3a0/0x420 [ 140.241108][ T7281] __x64_sys_sendmsg+0x19b/0x260 [ 140.241134][ T7281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.241175][ T7281] ? __pfx_ksys_write+0x10/0x10 [ 140.241210][ T7281] ? do_syscall_64+0xbe/0xfa0 [ 140.241243][ T7281] do_syscall_64+0xfa/0xfa0 [ 140.241270][ T7281] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.241299][ T7281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.241319][ T7281] ? clear_bhb_loop+0x60/0xb0 [ 140.241345][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.241366][ T7281] RIP: 0033:0x7ff04e18f6c9 [ 140.241385][ T7281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.241402][ T7281] RSP: 002b:00007ff04f0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.241424][ T7281] RAX: ffffffffffffffda RBX: 00007ff04e3e5fa0 RCX: 00007ff04e18f6c9 [ 140.241440][ T7281] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 140.241453][ T7281] RBP: 00007ff04f0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 140.241466][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.241478][ T7281] R13: 00007ff04e3e6038 R14: 00007ff04e3e5fa0 R15: 00007ffc2a75d818 [ 140.241514][ T7281] [ 140.636061][ T7268] tipc: Resetting bearer [ 140.663337][ T7268] tipc: Disabling bearer [ 140.877331][ T7297] netlink: 'syz.4.328': attribute type 7 has an invalid length. [ 140.890341][ T7297] netlink: 192 bytes leftover after parsing attributes in process `syz.4.328'. [ 140.899976][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 140.934891][ T7300] netlink: 'syz.1.329': attribute type 30 has an invalid length. [ 140.976030][ T7300] netlink: 'syz.1.329': attribute type 30 has an invalid length. [ 140.980827][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.010977][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.029682][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.048956][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.473901][ T7316] netlink: 'syz.4.335': attribute type 6 has an invalid length. [ 141.520359][ T7316] wg1 speed is unknown, defaulting to 1000 [ 141.648260][ T7318] wg1 speed is unknown, defaulting to 1000 [ 141.988886][ T7334] wg1 speed is unknown, defaulting to 1000 [ 142.094360][ T7341] bridge0: entered promiscuous mode [ 142.099959][ T7341] macsec1: entered allmulticast mode [ 142.105507][ T7341] bridge0: entered allmulticast mode [ 142.112844][ T7341] bridge0: port 3(macsec1) entered blocking state [ 142.119651][ T7341] bridge0: port 3(macsec1) entered disabled state [ 142.131698][ T7343] netlink: 'syz.3.342': attribute type 3 has an invalid length. [ 142.144417][ T7341] bridge0: left allmulticast mode [ 142.149643][ T7341] bridge0: left promiscuous mode [ 142.342364][ T7351] ip6_tunnel: non-ECT from fd02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 142.715851][ T7376] netlink: 'syz.0.355': attribute type 11 has an invalid length. [ 142.828188][ T7384] __nla_validate_parse: 6 callbacks suppressed [ 142.828207][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 142.854832][ T7385] netlink: 'syz.3.356': attribute type 13 has an invalid length. [ 142.938900][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.359'. [ 143.115950][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.123915][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state acpid: input device has been disconnected, fd 10 [ 143.422937][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.448050][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.777686][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 143.852259][ T7385] batman_adv: batadv0: Interface deactivated: gretap1 [ 143.893093][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 143.950925][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 143.951182][ T2988] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.022940][ T2988] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.059701][ T2988] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.091322][ T7430] 8021q: VLANs not supported on ipvlan1 [ 144.126445][ T7435] macsec1: entered promiscuous mode [ 144.151764][ T7435] macsec1: entered allmulticast mode [ 144.187652][ T2988] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.216345][ T2988] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.276206][ T2988] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.302213][ T2988] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.334219][ T7441] wg1 speed is unknown, defaulting to 1000 [ 144.373935][ T2988] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.417705][ T7459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.371'. [ 144.444205][ T7459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.371'. [ 144.474782][ T7457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.618061][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 145.815611][ T7500] dvmrp0: entered allmulticast mode [ 145.830418][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 145.840513][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 145.856902][ T7502] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 145.875554][ T7502] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 145.940056][ T7504] netlink: 'syz.3.384': attribute type 2 has an invalid length. [ 145.950443][ T7504] netlink: 'syz.3.384': attribute type 2 has an invalid length. [ 146.047555][ T7504] wg1 speed is unknown, defaulting to 1000 [ 146.589647][ T7539] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 146.860471][ T7558] FAULT_INJECTION: forcing a failure. [ 146.860471][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 146.873355][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.4.399 Not tainted syzkaller #0 PREEMPT(full) [ 146.873384][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.873397][ T7558] Call Trace: [ 146.873405][ T7558] [ 146.873414][ T7558] dump_stack_lvl+0x189/0x250 [ 146.873449][ T7558] ? __pfx____ratelimit+0x10/0x10 [ 146.873478][ T7558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.873507][ T7558] ? __pfx__printk+0x10/0x10 [ 146.873536][ T7558] ? __pfx___might_resched+0x10/0x10 [ 146.873567][ T7558] ? fs_reclaim_acquire+0x7d/0x100 [ 146.873605][ T7558] should_fail_ex+0x414/0x560 [ 146.873643][ T7558] should_failslab+0xa8/0x100 [ 146.873667][ T7558] __kvmalloc_node_noprof+0x158/0x910 [ 146.873700][ T7558] ? rhashtable_init_noprof+0x4f3/0xbc0 [ 146.873723][ T7558] ? rhashtable_init_noprof+0x145/0xbc0 [ 146.873753][ T7558] rhashtable_init_noprof+0x4f3/0xbc0 [ 146.873785][ T7558] nft_rhash_init+0x10b/0x3a0 [ 146.873812][ T7558] ? __pfx_nft_rhash_init+0x10/0x10 [ 146.873832][ T7558] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.873878][ T7558] ? __pfx_nft_rhash_key+0x10/0x10 [ 146.873900][ T7558] ? __pfx_nft_rhash_obj+0x10/0x10 [ 146.873922][ T7558] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 146.873947][ T7558] ? nf_tables_newset+0x139b/0x2540 [ 146.873974][ T7558] ? kfree+0x19a/0x6d0 [ 146.874008][ T7558] nf_tables_newset+0x1c0c/0x2540 [ 146.874051][ T7558] ? __pfx_nf_tables_newset+0x10/0x10 [ 146.874104][ T7558] ? __nla_parse+0x40/0x60 [ 146.874132][ T7558] nfnetlink_rcv+0x11d9/0x2590 [ 146.874205][ T7558] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 146.874256][ T7558] ? ref_tracker_free+0x63a/0x7d0 [ 146.874311][ T7558] ? __netlink_deliver_tap+0x807/0x850 [ 146.874334][ T7558] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.874376][ T7558] netlink_unicast+0x82f/0x9e0 [ 146.874419][ T7558] ? __pfx_netlink_unicast+0x10/0x10 [ 146.874453][ T7558] ? netlink_sendmsg+0x642/0xb30 [ 146.874473][ T7558] ? skb_put+0x11b/0x210 [ 146.874498][ T7558] netlink_sendmsg+0x805/0xb30 [ 146.874531][ T7558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.874564][ T7558] ? aa_sock_msg_perm+0xf1/0x1d0 [ 146.874599][ T7558] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.874620][ T7558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.874643][ T7558] __sock_sendmsg+0x21c/0x270 [ 146.874676][ T7558] ____sys_sendmsg+0x505/0x830 [ 146.874707][ T7558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.874741][ T7558] ? import_iovec+0x74/0xa0 [ 146.874772][ T7558] ___sys_sendmsg+0x21f/0x2a0 [ 146.874799][ T7558] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.874864][ T7558] ? __fget_files+0x2a/0x420 [ 146.874884][ T7558] ? __fget_files+0x3a0/0x420 [ 146.874917][ T7558] __x64_sys_sendmsg+0x19b/0x260 [ 146.874944][ T7558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.874979][ T7558] ? __pfx_ksys_write+0x10/0x10 [ 146.875015][ T7558] ? do_syscall_64+0xbe/0xfa0 [ 146.875050][ T7558] do_syscall_64+0xfa/0xfa0 [ 146.875078][ T7558] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.875108][ T7558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.875129][ T7558] ? clear_bhb_loop+0x60/0xb0 [ 146.875156][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.875177][ T7558] RIP: 0033:0x7f778558f6c9 [ 146.875197][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.875215][ T7558] RSP: 002b:00007f778642c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.875238][ T7558] RAX: ffffffffffffffda RBX: 00007f77857e5fa0 RCX: 00007f778558f6c9 [ 146.875253][ T7558] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 146.875267][ T7558] RBP: 00007f778642c090 R08: 0000000000000000 R09: 0000000000000000 [ 146.875280][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.875291][ T7558] R13: 00007f77857e6038 R14: 00007f77857e5fa0 R15: 00007fffc1b116c8 [ 146.875329][ T7558] [ 146.947121][ T7560] xt_TCPMSS: Only works on TCP SYN packets [ 147.107422][ T7561] tipc: Enabling of bearer rejected, failed to enable media [ 147.365025][ T7566] netlink: 'syz.3.401': attribute type 18 has an invalid length. [ 147.592188][ T7572] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 147.697650][ T7582] tipc: Enabling of bearer rejected, failed to enable media [ 147.783153][ T7585] netlink: 'syz.3.406': attribute type 13 has an invalid length. [ 147.913824][ T7594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.970293][ T7600] FAULT_INJECTION: forcing a failure. [ 147.970293][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 147.983842][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.1.410 Not tainted syzkaller #0 PREEMPT(full) [ 147.983869][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.983882][ T7600] Call Trace: [ 147.983890][ T7600] [ 147.983899][ T7600] dump_stack_lvl+0x189/0x250 [ 147.983932][ T7600] ? __pfx____ratelimit+0x10/0x10 [ 147.983959][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.983987][ T7600] ? __pfx__printk+0x10/0x10 [ 147.984015][ T7600] ? __pfx___might_resched+0x10/0x10 [ 147.984043][ T7600] should_fail_ex+0x414/0x560 [ 147.984080][ T7600] should_failslab+0xa8/0x100 [ 147.984103][ T7600] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 147.984136][ T7600] ? kasprintf+0xd4/0x120 [ 147.984167][ T7600] kvasprintf+0xdc/0x190 [ 147.984192][ T7600] ? nf_tables_newset+0x136f/0x2540 [ 147.984217][ T7600] ? nfnetlink_rcv+0x11d9/0x2590 [ 147.984245][ T7600] ? netlink_unicast+0x82f/0x9e0 [ 147.984277][ T7600] ? __pfx_kvasprintf+0x10/0x10 [ 147.984300][ T7600] ? __x64_sys_sendmsg+0x19b/0x260 [ 147.984340][ T7600] kasprintf+0xd4/0x120 [ 147.984375][ T7600] ? __pfx_kasprintf+0x10/0x10 [ 147.984418][ T7600] nf_tables_set_alloc_name+0x109/0x720 [ 147.984444][ T7600] ? rcu_is_watching+0x15/0xb0 [ 147.984468][ T7600] ? trace_kmalloc+0x1f/0xd0 [ 147.984503][ T7600] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 147.984520][ T7600] ? nla_strdup+0xb8/0x140 [ 147.984551][ T7600] nf_tables_newset+0x1390/0x2540 [ 147.984586][ T7600] ? __pfx_nf_tables_newset+0x10/0x10 [ 147.984637][ T7600] ? __nla_parse+0x40/0x60 [ 147.984663][ T7600] nfnetlink_rcv+0x11d9/0x2590 [ 147.984733][ T7600] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.984785][ T7600] ? ref_tracker_free+0x63a/0x7d0 [ 147.984840][ T7600] ? __netlink_deliver_tap+0x807/0x850 [ 147.984861][ T7600] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.984904][ T7600] netlink_unicast+0x82f/0x9e0 [ 147.984946][ T7600] ? __pfx_netlink_unicast+0x10/0x10 [ 147.984981][ T7600] ? netlink_sendmsg+0x642/0xb30 [ 147.985000][ T7600] ? skb_put+0x11b/0x210 [ 147.985026][ T7600] netlink_sendmsg+0x805/0xb30 [ 147.985059][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.985086][ T7600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 147.985120][ T7600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.985140][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.985163][ T7600] __sock_sendmsg+0x21c/0x270 [ 147.985196][ T7600] ____sys_sendmsg+0x505/0x830 [ 147.985227][ T7600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.985262][ T7600] ? import_iovec+0x74/0xa0 [ 147.985294][ T7600] ___sys_sendmsg+0x21f/0x2a0 [ 147.985321][ T7600] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.985389][ T7600] ? __fget_files+0x2a/0x420 [ 147.985408][ T7600] ? __fget_files+0x3a0/0x420 [ 147.985441][ T7600] __x64_sys_sendmsg+0x19b/0x260 [ 147.985468][ T7600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.985510][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 147.985546][ T7600] ? do_syscall_64+0xbe/0xfa0 [ 147.985581][ T7600] do_syscall_64+0xfa/0xfa0 [ 147.985609][ T7600] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.985639][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.985660][ T7600] ? clear_bhb_loop+0x60/0xb0 [ 147.985686][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.985707][ T7600] RIP: 0033:0x7f0e8c18f6c9 [ 147.985727][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.985744][ T7600] RSP: 002b:00007f0e8cf40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.985767][ T7600] RAX: ffffffffffffffda RBX: 00007f0e8c3e5fa0 RCX: 00007f0e8c18f6c9 [ 147.985782][ T7600] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 147.985795][ T7600] RBP: 00007f0e8cf40090 R08: 0000000000000000 R09: 0000000000000000 [ 147.985807][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.985820][ T7600] R13: 00007f0e8c3e6038 R14: 00007f0e8c3e5fa0 R15: 00007fff4adb6b18 [ 147.985856][ T7600] [ 148.395935][ T7602] wg1 speed is unknown, defaulting to 1000 [ 148.501499][ T7606] syzkaller0: entered promiscuous mode [ 148.507217][ T7606] syzkaller0: entered allmulticast mode [ 148.876827][ T7626] __nla_validate_parse: 7 callbacks suppressed [ 148.876859][ T7626] netlink: 48 bytes leftover after parsing attributes in process `syz.4.416'. [ 149.414506][ T7650] wg1 speed is unknown, defaulting to 1000 [ 149.642384][ T13] syzkaller0: tun_net_xmit 76 [ 149.647692][ T13] syzkaller0: tun_net_xmit 48 [ 149.667298][ T7663] syzkaller0: tun_net_xmit 76 [ 149.672606][ T7663] tipc: Enabled bearer , priority 0 [ 149.681118][ T7416] syzkaller0: tun_net_xmit 76 [ 149.703130][ T7663] tipc: Resetting bearer [ 149.708965][ T7663] syzkaller0: tun_net_xmit 76 [ 149.778098][ T7671] wg1 speed is unknown, defaulting to 1000 [ 149.788712][ T7662] tipc: Resetting bearer [ 150.225352][ T7696] netlink: 240 bytes leftover after parsing attributes in process `syz.3.434'. [ 150.255614][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.434'. [ 150.307376][ T7673] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 150.370649][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 151.305880][ T7662] tipc: Disabling bearer [ 151.412877][ T7708] ip6tnl1: entered promiscuous mode [ 151.418242][ T7708] ip6tnl1: entered allmulticast mode [ 151.464595][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.490885][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.565438][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.594990][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.300692][ T7756] sctp: [Deprecated]: syz.4.451 (pid 7756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.300692][ T7756] Use struct sctp_sack_info instead [ 152.605280][ T7765] IPVS: set_ctl: invalid protocol: 51 172.30.0.2:20004 [ 153.243999][ T7798] syzkaller0: entered promiscuous mode [ 153.249533][ T7798] syzkaller0: entered allmulticast mode [ 153.673504][ T7812] netlink: 52 bytes leftover after parsing attributes in process `syz.2.474'. [ 153.697346][ T7814] netlink: 52 bytes leftover after parsing attributes in process `syz.2.474'. [ 153.797783][ T7823] xt_HMARK: spi-set and port-set can't be combined [ 154.043561][ T7836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.055493][ T7838] netlink: 244 bytes leftover after parsing attributes in process `syz.0.477'. [ 154.356694][ T7847] netlink: 3 bytes leftover after parsing attributes in process `syz.3.482'. [ 154.381323][ T7847] 0ªX¹¦À: renamed from caif0 [ 154.404479][ T7847] 0ªX¹¦À: entered allmulticast mode [ 154.409954][ T7847] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 154.497185][ T7847] netlink: 484 bytes leftover after parsing attributes in process `syz.3.482'. [ 154.584462][ T7856] syzkaller0: entered allmulticast mode [ 154.860081][ T7867] tipc: Enabling of bearer rejected, failed to enable media [ 154.915970][ T7867] bridge2: entered promiscuous mode [ 154.928431][ T7867] bridge2: entered allmulticast mode [ 155.370381][ T7896] netlink: 1240 bytes leftover after parsing attributes in process `syz.2.496'. [ 155.487090][ T7898] tipc: Started in network mode [ 155.506096][ T7898] tipc: Node identity b2a24542ad06, cluster identity 4711 [ 155.523486][ T7898] tipc: Enabled bearer , priority 0 [ 155.593974][ T7907] syzkaller0: entered promiscuous mode [ 155.602966][ T7907] syzkaller0: entered allmulticast mode [ 155.609471][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 155.619627][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 155.629889][ T7907] tipc: Resetting bearer [ 155.698864][ T13] tipc: Resetting bearer [ 155.883522][ T7897] tipc: Resetting bearer [ 156.583835][ T7401] tipc: Node number set to 530859330 [ 157.308804][ T7897] tipc: Disabling bearer [ 157.546265][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 157.555870][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 157.623098][ T7954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.513'. [ 157.650388][ T7954] netlink: 232 bytes leftover after parsing attributes in process `syz.1.513'. [ 158.023906][ T7975] wg1 speed is unknown, defaulting to 1000 [ 158.085537][ T7984] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 158.646394][ T8000] tipc: Enabled bearer , priority 0 [ 158.696905][ T8000] syzkaller0: entered promiscuous mode [ 158.710931][ T8000] syzkaller0: entered allmulticast mode [ 158.922302][ T8006] tipc: Resetting bearer [ 159.433831][ T7995] syz.1.523 (7995) used greatest stack depth: 17832 bytes left [ 159.464322][ T7998] tipc: Resetting bearer [ 159.523708][ T7998] tipc: Disabling bearer [ 159.639563][ T8031] __nla_validate_parse: 2 callbacks suppressed [ 159.639582][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 159.748957][ T8039] bridge1: entered allmulticast mode [ 159.803870][ T8039] macsec2: entered promiscuous mode [ 159.809141][ T8039] macsec0: entered promiscuous mode [ 159.820002][ T8046] openvswitch: netlink: Key type 1043 is out of range max 32 [ 159.828825][ T8039] macsec0: left promiscuous mode [ 159.854957][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 159.887776][ T8050] bond0: Caught tx_queue_len zero misconfig [ 159.900032][ T8046] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 160.010270][ T8059] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 160.077670][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 160.125927][ T8059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.132863][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 160.155131][ T8067] netlink: 'syz.3.542': attribute type 2 has an invalid length. [ 160.251020][ T8063] bond1 (unregistering): Released all slaves [ 160.359333][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.367335][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.569478][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.584810][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.686587][ T8075] veth1_macvtap: left allmulticast mode [ 160.705186][ T8075] macsec0: left promiscuous mode [ 160.710223][ T8075] macsec0: left allmulticast mode [ 160.866585][ T8096] netlink: 388 bytes leftover after parsing attributes in process `syz.4.549'. [ 160.891155][ T8075] ip6tnl1: left promiscuous mode [ 160.896155][ T8075] ip6tnl1: left allmulticast mode [ 160.909147][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.923036][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.931971][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.941396][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.955669][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.971222][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.259703][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.277206][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.287479][ T8082] wg1 speed is unknown, defaulting to 1000 [ 161.302546][ T8117] netlink: 280 bytes leftover after parsing attributes in process `syz.1.552'. [ 161.327831][ T8111] netlink: 'syz.0.553': attribute type 13 has an invalid length. [ 161.372266][ T8111] netlink: 'syz.0.553': attribute type 17 has an invalid length. [ 161.519302][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.530308][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.544204][ T8111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.939758][ T8138] delete_channel: no stack [ 162.065055][ T8143] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.101577][ T8143] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 162.120568][ T8143] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 162.172060][ T8153] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 162.456038][ T8160] wg1 speed is unknown, defaulting to 1000 [ 162.635096][ T8174] tipc: Enabled bearer , priority 0 [ 162.706780][ T8178] netlink: 'syz.2.568': attribute type 13 has an invalid length. [ 162.718033][ T8178] netlink: 'syz.2.568': attribute type 17 has an invalid length. [ 162.744153][ T8171] syzkaller0: entered promiscuous mode [ 162.749857][ T8171] syzkaller0: entered allmulticast mode [ 162.861668][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.874502][ T8178] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.888434][ T8178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.921594][ T8171] tipc: Resetting bearer [ 162.950439][ T8171] tipc: Disabling bearer [ 163.000962][ T8191] wg1 speed is unknown, defaulting to 1000 [ 163.233131][ T8205] IPVS: Error connecting to the multicast addr [ 163.467232][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.578'. [ 163.504496][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 163.733619][ T8216] bond2: option primary_reselect: invalid value (255) [ 163.762899][ T8216] bond2 (unregistering): Released all slaves [ 164.124409][ T8235] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 164.277038][ T8240] ipt_rpfilter: unknown options [ 164.383332][ T8246] netlink: 'syz.2.587': attribute type 13 has an invalid length. [ 164.625332][ T8250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.641524][ T50] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.686571][ T50] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.728111][ T8252] wg1 speed is unknown, defaulting to 1000 [ 164.740143][ T8258] wg1 speed is unknown, defaulting to 1000 [ 164.749025][ T50] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.829515][ T8270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.593'. [ 164.915727][ T50] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.149275][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 165.257896][ T8299] bridge_slave_1 (unregistering): left allmulticast mode [ 165.267664][ T8299] bridge_slave_1 (unregistering): left promiscuous mode [ 165.275907][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.339357][ T8286] wg1 speed is unknown, defaulting to 1000 [ 165.348937][ T8300] validate_nla: 1 callbacks suppressed [ 165.348956][ T8300] netlink: 'syz.3.601': attribute type 13 has an invalid length. [ 165.372006][ T8300] netlink: 'syz.3.601': attribute type 17 has an invalid length. [ 165.648776][ T8315] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001 [ 165.693510][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.844391][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.866076][ T8300] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.879500][ T8300] 0ªX¹¦À: left allmulticast mode [ 165.884908][ T8300] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 165.950643][ T8303] wg1 speed is unknown, defaulting to 1000 [ 166.036800][ T8305] wg1 speed is unknown, defaulting to 1000 [ 166.685981][ T8327] netlink: 'syz.4.605': attribute type 2 has an invalid length. [ 166.701885][ T8327] netlink: 'syz.4.605': attribute type 5 has an invalid length. [ 166.772052][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.606'. [ 166.809491][ T7404] IPVS: starting estimator thread 0... [ 166.816607][ T8329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.931812][ T8330] IPVS: using max 27 ests per chain, 64800 per kthread [ 167.073847][ T8338] FAULT_INJECTION: forcing a failure. [ 167.073847][ T8338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.101062][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.2.610 Not tainted syzkaller #0 PREEMPT(full) [ 167.101093][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.101106][ T8338] Call Trace: [ 167.101114][ T8338] [ 167.101122][ T8338] dump_stack_lvl+0x189/0x250 [ 167.101157][ T8338] ? __pfx____ratelimit+0x10/0x10 [ 167.101185][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.101214][ T8338] ? __pfx__printk+0x10/0x10 [ 167.101236][ T8338] ? __might_fault+0xb0/0x130 [ 167.101278][ T8338] should_fail_ex+0x414/0x560 [ 167.101314][ T8338] _copy_from_user+0x2d/0xb0 [ 167.101340][ T8338] __sys_bpf+0x1e3/0x860 [ 167.101362][ T8338] ? __pfx___sys_bpf+0x10/0x10 [ 167.101401][ T8338] ? ksys_write+0x22a/0x250 [ 167.101434][ T8338] ? __pfx_ksys_write+0x10/0x10 [ 167.101470][ T8338] __x64_sys_bpf+0x7c/0x90 [ 167.101503][ T8338] do_syscall_64+0xfa/0xfa0 [ 167.101531][ T8338] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.101560][ T8338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.101581][ T8338] ? clear_bhb_loop+0x60/0xb0 [ 167.101607][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.101627][ T8338] RIP: 0033:0x7ff04e18f6c9 [ 167.101646][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.101664][ T8338] RSP: 002b:00007ff04f0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.101686][ T8338] RAX: ffffffffffffffda RBX: 00007ff04e3e5fa0 RCX: 00007ff04e18f6c9 [ 167.101701][ T8338] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 167.101714][ T8338] RBP: 00007ff04f0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 167.101735][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.101747][ T8338] R13: 00007ff04e3e6038 R14: 00007ff04e3e5fa0 R15: 00007ffc2a75d818 [ 167.101783][ T8338] [ 167.518482][ T8353] wg1 speed is unknown, defaulting to 1000 [ 167.644880][ T8364] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.716395][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 167.740529][ T8372] bridge_slave_1: left allmulticast mode [ 167.759555][ T8372] bridge_slave_1: left promiscuous mode [ 167.775909][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.803177][ T8372] bridge_slave_0: left allmulticast mode [ 167.809574][ T8372] bridge_slave_0: left promiscuous mode [ 167.816655][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.319529][ T8387] bridge3: entered allmulticast mode [ 168.538887][ T8395] syzkaller0: entered promiscuous mode [ 168.555963][ T8395] syzkaller0: entered allmulticast mode [ 168.638503][ T8400] FAULT_INJECTION: forcing a failure. [ 168.638503][ T8400] name failslab, interval 1, probability 0, space 0, times 0 [ 168.677751][ T8402] wg1 speed is unknown, defaulting to 1000 [ 168.684369][ T8400] CPU: 1 UID: 0 PID: 8400 Comm: syz.1.625 Not tainted syzkaller #0 PREEMPT(full) [ 168.684398][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.684411][ T8400] Call Trace: [ 168.684420][ T8400] [ 168.684429][ T8400] dump_stack_lvl+0x189/0x250 [ 168.684464][ T8400] ? __pfx____ratelimit+0x10/0x10 [ 168.684493][ T8400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.684529][ T8400] ? __pfx__printk+0x10/0x10 [ 168.684559][ T8400] ? __pfx___might_resched+0x10/0x10 [ 168.684582][ T8400] ? fs_reclaim_acquire+0x7d/0x100 [ 168.684621][ T8400] should_fail_ex+0x414/0x560 [ 168.684659][ T8400] should_failslab+0xa8/0x100 [ 168.684682][ T8400] __kmalloc_noprof+0xcb/0x7f0 [ 168.684712][ T8400] ? bpf_test_init+0x9f/0x150 [ 168.684752][ T8400] bpf_test_init+0x9f/0x150 [ 168.684790][ T8400] bpf_prog_test_run_skb+0x206/0x1550 [ 168.684824][ T8400] ? __fget_files+0x2a/0x420 [ 168.684852][ T8400] ? __fget_files+0x2a/0x420 [ 168.684878][ T8400] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 168.684913][ T8400] bpf_prog_test_run+0x2c7/0x340 [ 168.684942][ T8400] __sys_bpf+0x562/0x860 [ 168.684965][ T8400] ? __pfx___sys_bpf+0x10/0x10 [ 168.685004][ T8400] ? ksys_write+0x22a/0x250 [ 168.685039][ T8400] ? __pfx_ksys_write+0x10/0x10 [ 168.685077][ T8400] __x64_sys_bpf+0x7c/0x90 [ 168.685110][ T8400] do_syscall_64+0xfa/0xfa0 [ 168.685138][ T8400] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.685167][ T8400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.685187][ T8400] ? clear_bhb_loop+0x60/0xb0 [ 168.685213][ T8400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.685233][ T8400] RIP: 0033:0x7f0e8c18f6c9 [ 168.685251][ T8400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.685268][ T8400] RSP: 002b:00007f0e8cf40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.685291][ T8400] RAX: ffffffffffffffda RBX: 00007f0e8c3e5fa0 RCX: 00007f0e8c18f6c9 [ 168.685306][ T8400] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 168.685319][ T8400] RBP: 00007f0e8cf40090 R08: 0000000000000000 R09: 0000000000000000 [ 168.685331][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.685343][ T8400] R13: 00007f0e8c3e6038 R14: 00007f0e8c3e5fa0 R15: 00007fff4adb6b18 [ 168.685379][ T8400] [ 169.328495][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 170.306727][ T30] audit: type=1800 audit(1762489144.680:2): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.634" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=645 res=0 errno=0 [ 170.463231][ T8457] FAULT_INJECTION: forcing a failure. [ 170.463231][ T8457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.482801][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: syz.1.638 Not tainted syzkaller #0 PREEMPT(full) [ 170.482830][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.482843][ T8457] Call Trace: [ 170.482851][ T8457] [ 170.482859][ T8457] dump_stack_lvl+0x189/0x250 [ 170.482892][ T8457] ? __pfx____ratelimit+0x10/0x10 [ 170.482919][ T8457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.482947][ T8457] ? __pfx__printk+0x10/0x10 [ 170.482982][ T8457] should_fail_ex+0x414/0x560 [ 170.483019][ T8457] _copy_from_user+0x2d/0xb0 [ 170.483045][ T8457] bpf_test_init+0xd8/0x150 [ 170.483082][ T8457] bpf_prog_test_run_skb+0x206/0x1550 [ 170.483115][ T8457] ? __fget_files+0x2a/0x420 [ 170.483141][ T8457] ? __fget_files+0x2a/0x420 [ 170.483166][ T8457] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 170.483200][ T8457] bpf_prog_test_run+0x2c7/0x340 [ 170.483226][ T8457] __sys_bpf+0x562/0x860 [ 170.483248][ T8457] ? __pfx___sys_bpf+0x10/0x10 [ 170.483285][ T8457] ? ksys_write+0x22a/0x250 [ 170.483318][ T8457] ? __pfx_ksys_write+0x10/0x10 [ 170.483353][ T8457] __x64_sys_bpf+0x7c/0x90 [ 170.483393][ T8457] do_syscall_64+0xfa/0xfa0 [ 170.483420][ T8457] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.483449][ T8457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.483469][ T8457] ? clear_bhb_loop+0x60/0xb0 [ 170.483494][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.483514][ T8457] RIP: 0033:0x7f0e8c18f6c9 [ 170.483532][ T8457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.483549][ T8457] RSP: 002b:00007f0e8cf40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.483570][ T8457] RAX: ffffffffffffffda RBX: 00007f0e8c3e5fa0 RCX: 00007f0e8c18f6c9 [ 170.483585][ T8457] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 170.483598][ T8457] RBP: 00007f0e8cf40090 R08: 0000000000000000 R09: 0000000000000000 [ 170.483611][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.483622][ T8457] R13: 00007f0e8c3e6038 R14: 00007f0e8c3e5fa0 R15: 00007fff4adb6b18 [ 170.483656][ T8457] [ 170.721809][ T8459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.735002][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 171.347360][ T8492] wg1 speed is unknown, defaulting to 1000 [ 171.501056][ T8500] FAULT_INJECTION: forcing a failure. [ 171.501056][ T8500] name failslab, interval 1, probability 0, space 0, times 0 [ 171.542290][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.3.652 Not tainted syzkaller #0 PREEMPT(full) [ 171.542320][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.542334][ T8500] Call Trace: [ 171.542342][ T8500] [ 171.542351][ T8500] dump_stack_lvl+0x189/0x250 [ 171.542387][ T8500] ? __pfx____ratelimit+0x10/0x10 [ 171.542426][ T8500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.542456][ T8500] ? __pfx__printk+0x10/0x10 [ 171.542485][ T8500] ? __pfx___might_resched+0x10/0x10 [ 171.542507][ T8500] ? fs_reclaim_acquire+0x7d/0x100 [ 171.542554][ T8500] should_fail_ex+0x414/0x560 [ 171.542593][ T8500] should_failslab+0xa8/0x100 [ 171.542617][ T8500] __kmalloc_noprof+0xcb/0x7f0 [ 171.542647][ T8500] ? sk_prot_alloc+0xe7/0x220 [ 171.542676][ T8500] sk_prot_alloc+0xe7/0x220 [ 171.542696][ T8500] ? sk_alloc+0x26/0x410 [ 171.542719][ T8500] sk_alloc+0x39/0x410 [ 171.542739][ T8500] ? bpf_ctx_init+0x167/0x1d0 [ 171.542762][ T8500] bpf_prog_test_run_skb+0x313/0x1550 [ 171.542807][ T8500] ? __fget_files+0x2a/0x420 [ 171.542833][ T8500] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 171.542868][ T8500] bpf_prog_test_run+0x2c7/0x340 [ 171.542896][ T8500] __sys_bpf+0x562/0x860 [ 171.542919][ T8500] ? __pfx___sys_bpf+0x10/0x10 [ 171.542963][ T8500] ? rcu_is_watching+0x15/0xb0 [ 171.542998][ T8500] __x64_sys_bpf+0x7c/0x90 [ 171.543039][ T8500] do_syscall_64+0xfa/0xfa0 [ 171.543068][ T8500] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.543098][ T8500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.543118][ T8500] ? clear_bhb_loop+0x60/0xb0 [ 171.543145][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.543166][ T8500] RIP: 0033:0x7fb85d58f6c9 [ 171.543185][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.543203][ T8500] RSP: 002b:00007fb85e33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.543226][ T8500] RAX: ffffffffffffffda RBX: 00007fb85d7e5fa0 RCX: 00007fb85d58f6c9 [ 171.543241][ T8500] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 171.543254][ T8500] RBP: 00007fb85e33f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.543266][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.543278][ T8500] R13: 00007fb85d7e6038 R14: 00007fb85d7e5fa0 R15: 00007ffe33de58e8 [ 171.543315][ T8500] [ 172.025802][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 172.270636][ T8526] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 172.305867][ T8526] openvswitch: netlink: Flow key attr not present in new flow. [ 172.523498][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'. [ 172.534770][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'. [ 172.544408][ T8528] netlink: 1 bytes leftover after parsing attributes in process `syz.0.660'. [ 172.623127][ T8531] netlink: 'syz.2.661': attribute type 58 has an invalid length. [ 172.633123][ T8531] netlink: 152 bytes leftover after parsing attributes in process `syz.2.661'. [ 172.864699][ T8536] FAULT_INJECTION: forcing a failure. [ 172.864699][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 172.885751][ T8537] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 172.924740][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.2.664 Not tainted syzkaller #0 PREEMPT(full) [ 172.924770][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.924783][ T8536] Call Trace: [ 172.924791][ T8536] [ 172.924800][ T8536] dump_stack_lvl+0x189/0x250 [ 172.924835][ T8536] ? __pfx____ratelimit+0x10/0x10 [ 172.924864][ T8536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.924901][ T8536] ? __pfx__printk+0x10/0x10 [ 172.924929][ T8536] ? __pfx___might_resched+0x10/0x10 [ 172.924953][ T8536] ? fs_reclaim_acquire+0x7d/0x100 [ 172.924992][ T8536] should_fail_ex+0x414/0x560 [ 172.925031][ T8536] should_failslab+0xa8/0x100 [ 172.925054][ T8536] __kmalloc_noprof+0xcb/0x7f0 [ 172.925084][ T8536] ? security_sk_alloc+0x52/0x390 [ 172.925114][ T8536] security_sk_alloc+0x52/0x390 [ 172.925141][ T8536] sk_prot_alloc+0x101/0x220 [ 172.925161][ T8536] ? sk_alloc+0x26/0x410 [ 172.925184][ T8536] sk_alloc+0x39/0x410 [ 172.925204][ T8536] ? bpf_ctx_init+0x167/0x1d0 [ 172.925228][ T8536] bpf_prog_test_run_skb+0x313/0x1550 [ 172.925272][ T8536] ? __fget_files+0x2a/0x420 [ 172.925299][ T8536] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.925335][ T8536] bpf_prog_test_run+0x2c7/0x340 [ 172.925362][ T8536] __sys_bpf+0x562/0x860 [ 172.925385][ T8536] ? __pfx___sys_bpf+0x10/0x10 [ 172.925424][ T8536] ? ksys_write+0x22a/0x250 [ 172.925457][ T8536] ? __pfx_ksys_write+0x10/0x10 [ 172.925495][ T8536] __x64_sys_bpf+0x7c/0x90 [ 172.925528][ T8536] do_syscall_64+0xfa/0xfa0 [ 172.925557][ T8536] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.925586][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.925607][ T8536] ? clear_bhb_loop+0x60/0xb0 [ 172.925633][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.925654][ T8536] RIP: 0033:0x7ff04e18f6c9 [ 172.925673][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.925691][ T8536] RSP: 002b:00007ff04f0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.925713][ T8536] RAX: ffffffffffffffda RBX: 00007ff04e3e5fa0 RCX: 00007ff04e18f6c9 [ 172.925729][ T8536] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 172.925742][ T8536] RBP: 00007ff04f0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 172.925754][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.925767][ T8536] R13: 00007ff04e3e6038 R14: 00007ff04e3e5fa0 R15: 00007ffc2a75d818 [ 172.925802][ T8536] [ 173.193254][ T8540] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 173.288290][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.303920][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.663'. [ 173.329382][ T8546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.351650][ T8537] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 173.400639][ T8537] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 173.543235][ T8546] geneve3: entered promiscuous mode [ 173.549265][ T8546] geneve3: entered allmulticast mode [ 173.578153][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.587941][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.622627][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.647597][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.930029][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.674'. [ 174.172411][ T8594] netlink: 'syz.1.680': attribute type 63 has an invalid length. [ 174.226445][ T8597] netlink: 'syz.1.680': attribute type 63 has an invalid length. [ 174.692821][ T8615] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 174.946585][ T8621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.954201][ T8621] IPv6: NLM_F_CREATE should be set when creating new route [ 174.982387][ T8623] FAULT_INJECTION: forcing a failure. [ 174.982387][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.031518][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT(full) [ 175.031548][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.031562][ T8623] Call Trace: [ 175.031570][ T8623] [ 175.031579][ T8623] dump_stack_lvl+0x189/0x250 [ 175.031615][ T8623] ? __pfx____ratelimit+0x10/0x10 [ 175.031644][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.031674][ T8623] ? __pfx__printk+0x10/0x10 [ 175.031711][ T8623] should_fail_ex+0x414/0x560 [ 175.031748][ T8623] _copy_to_user+0x31/0xb0 [ 175.031779][ T8623] bpf_test_finish+0x1ab/0x700 [ 175.031812][ T8623] ? __pfx_bpf_test_finish+0x10/0x10 [ 175.031849][ T8623] bpf_prog_test_run_skb+0xef8/0x1550 [ 175.031901][ T8623] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 175.031937][ T8623] bpf_prog_test_run+0x2c7/0x340 [ 175.031964][ T8623] __sys_bpf+0x562/0x860 [ 175.031987][ T8623] ? __pfx___sys_bpf+0x10/0x10 [ 175.032035][ T8623] ? ksys_write+0x22a/0x250 [ 175.032069][ T8623] ? __pfx_ksys_write+0x10/0x10 [ 175.032107][ T8623] __x64_sys_bpf+0x7c/0x90 [ 175.032140][ T8623] do_syscall_64+0xfa/0xfa0 [ 175.032169][ T8623] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.032198][ T8623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.032220][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 175.032246][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.032267][ T8623] RIP: 0033:0x7f0e8c18f6c9 [ 175.032286][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.032304][ T8623] RSP: 002b:00007f0e8cf40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.032326][ T8623] RAX: ffffffffffffffda RBX: 00007f0e8c3e5fa0 RCX: 00007f0e8c18f6c9 [ 175.032342][ T8623] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 175.032355][ T8623] RBP: 00007f0e8cf40090 R08: 0000000000000000 R09: 0000000000000000 [ 175.032368][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.032380][ T8623] R13: 00007f0e8c3e6038 R14: 00007f0e8c3e5fa0 R15: 00007fff4adb6b18 [ 175.032416][ T8623] [ 175.072123][ T8630] syzkaller1: entered promiscuous mode [ 175.332937][ T8630] syzkaller1: entered allmulticast mode [ 175.444311][ T8644] veth1_vlan: left allmulticast mode [ 175.628441][ T8648] wg1 speed is unknown, defaulting to 1000 [ 175.814223][ T8659] xt_hashlimit: size too large, truncated to 1048576 [ 175.956221][ T8664] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 176.196310][ T8674] x_tables: duplicate underflow at hook 1 [ 176.330219][ T8681] FAULT_INJECTION: forcing a failure. [ 176.330219][ T8681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.358327][ T8681] CPU: 0 UID: 0 PID: 8681 Comm: syz.0.704 Not tainted syzkaller #0 PREEMPT(full) [ 176.358357][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.358370][ T8681] Call Trace: [ 176.358379][ T8681] [ 176.358389][ T8681] dump_stack_lvl+0x189/0x250 [ 176.358423][ T8681] ? __pfx____ratelimit+0x10/0x10 [ 176.358452][ T8681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.358481][ T8681] ? __pfx__printk+0x10/0x10 [ 176.358518][ T8681] should_fail_ex+0x414/0x560 [ 176.358583][ T8681] _copy_to_user+0x31/0xb0 [ 176.358614][ T8681] bpf_test_finish+0x24e/0x700 [ 176.358646][ T8681] ? __pfx_bpf_test_finish+0x10/0x10 [ 176.358682][ T8681] bpf_prog_test_run_skb+0xef8/0x1550 [ 176.358735][ T8681] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 176.358770][ T8681] bpf_prog_test_run+0x2c7/0x340 [ 176.358797][ T8681] __sys_bpf+0x562/0x860 [ 176.358820][ T8681] ? __pfx___sys_bpf+0x10/0x10 [ 176.358868][ T8681] ? ksys_write+0x22a/0x250 [ 176.358902][ T8681] ? __pfx_ksys_write+0x10/0x10 [ 176.358939][ T8681] __x64_sys_bpf+0x7c/0x90 [ 176.358972][ T8681] do_syscall_64+0xfa/0xfa0 [ 176.359001][ T8681] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.359031][ T8681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.359053][ T8681] ? clear_bhb_loop+0x60/0xb0 [ 176.359078][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.359099][ T8681] RIP: 0033:0x7f5d2ad8f6c9 [ 176.359118][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.359136][ T8681] RSP: 002b:00007f5d28ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.359158][ T8681] RAX: ffffffffffffffda RBX: 00007f5d2afe5fa0 RCX: 00007f5d2ad8f6c9 [ 176.359173][ T8681] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 176.359187][ T8681] RBP: 00007f5d28ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.359199][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.359211][ T8681] R13: 00007f5d2afe6038 R14: 00007f5d2afe5fa0 R15: 00007fffb9117668 [ 176.359246][ T8681] [ 176.843559][ T8689] __nla_validate_parse: 6 callbacks suppressed [ 176.843585][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 177.063837][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 177.366916][ T8713] FAULT_INJECTION: forcing a failure. [ 177.366916][ T8713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.383863][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.3.715 Not tainted syzkaller #0 PREEMPT(full) [ 177.383893][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.383906][ T8713] Call Trace: [ 177.383914][ T8713] [ 177.383923][ T8713] dump_stack_lvl+0x189/0x250 [ 177.383956][ T8713] ? __pfx____ratelimit+0x10/0x10 [ 177.383985][ T8713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.384013][ T8713] ? __pfx__printk+0x10/0x10 [ 177.384051][ T8713] should_fail_ex+0x414/0x560 [ 177.384090][ T8713] _copy_to_user+0x31/0xb0 [ 177.384120][ T8713] bpf_test_finish+0x56f/0x700 [ 177.384152][ T8713] ? __pfx_bpf_test_finish+0x10/0x10 [ 177.384191][ T8713] bpf_prog_test_run_skb+0xef8/0x1550 [ 177.384246][ T8713] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 177.384282][ T8713] bpf_prog_test_run+0x2c7/0x340 [ 177.384309][ T8713] __sys_bpf+0x562/0x860 [ 177.384333][ T8713] ? __pfx___sys_bpf+0x10/0x10 [ 177.384372][ T8713] ? ksys_write+0x22a/0x250 [ 177.384406][ T8713] ? __pfx_ksys_write+0x10/0x10 [ 177.384444][ T8713] __x64_sys_bpf+0x7c/0x90 [ 177.384477][ T8713] do_syscall_64+0xfa/0xfa0 [ 177.384505][ T8713] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.384567][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.384589][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 177.384615][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.384636][ T8713] RIP: 0033:0x7fb85d58f6c9 [ 177.384656][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.384673][ T8713] RSP: 002b:00007fb85e33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.384695][ T8713] RAX: ffffffffffffffda RBX: 00007fb85d7e5fa0 RCX: 00007fb85d58f6c9 [ 177.384710][ T8713] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 177.384724][ T8713] RBP: 00007fb85e33f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.384736][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.384749][ T8713] R13: 00007fb85d7e6038 R14: 00007fb85d7e5fa0 R15: 00007ffe33de58e8 [ 177.384785][ T8713] [ 177.840370][ T8732] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 177.920611][ T8735] gretap1: entered allmulticast mode [ 177.949053][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 177.986209][ T8735] bond1: (slave gretap1): making interface the new active one [ 177.999999][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 178.017931][ T8735] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.034127][ T8732] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 178.092240][ T8732] team1: entered promiscuous mode [ 178.107766][ T8732] team1: entered allmulticast mode [ 178.187837][ T8739] wg1 speed is unknown, defaulting to 1000 [ 178.297585][ T8749] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 178.325832][ T8749] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 178.329397][ T8752] netlink: 48 bytes leftover after parsing attributes in process `syz.3.725'. [ 178.607167][ T8764] FAULT_INJECTION: forcing a failure. [ 178.607167][ T8764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.651041][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.4.729 Not tainted syzkaller #0 PREEMPT(full) [ 178.651071][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.651084][ T8764] Call Trace: [ 178.651092][ T8764] [ 178.651102][ T8764] dump_stack_lvl+0x189/0x250 [ 178.651137][ T8764] ? __pfx____ratelimit+0x10/0x10 [ 178.651165][ T8764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.651193][ T8764] ? __pfx__printk+0x10/0x10 [ 178.651227][ T8764] should_fail_ex+0x414/0x560 [ 178.651265][ T8764] _copy_to_user+0x31/0xb0 [ 178.651296][ T8764] simple_read_from_buffer+0xe1/0x170 [ 178.651342][ T8764] proc_fail_nth_read+0x1b3/0x220 [ 178.651372][ T8764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.651401][ T8764] ? rw_verify_area+0x2a6/0x4d0 [ 178.651430][ T8764] ? __lock_acquire+0xab9/0xd20 [ 178.651450][ T8764] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.651479][ T8764] vfs_read+0x200/0xa30 [ 178.651507][ T8764] ? fdget_pos+0x247/0x320 [ 178.651532][ T8764] ? __pfx___mutex_lock+0x10/0x10 [ 178.651565][ T8764] ? __pfx_vfs_read+0x10/0x10 [ 178.651596][ T8764] ? __fget_files+0x2a/0x420 [ 178.651621][ T8764] ? __fget_files+0x3a0/0x420 [ 178.651639][ T8764] ? __fget_files+0x2a/0x420 [ 178.651669][ T8764] ksys_read+0x145/0x250 [ 178.651703][ T8764] ? __pfx_ksys_read+0x10/0x10 [ 178.651738][ T8764] ? do_syscall_64+0xbe/0xfa0 [ 178.651773][ T8764] do_syscall_64+0xfa/0xfa0 [ 178.651801][ T8764] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.651830][ T8764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.651852][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 178.651879][ T8764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.651898][ T8764] RIP: 0033:0x7f778558e0dc [ 178.651917][ T8764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.651935][ T8764] RSP: 002b:00007f778642c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.651962][ T8764] RAX: ffffffffffffffda RBX: 00007f77857e5fa0 RCX: 00007f778558e0dc [ 178.651978][ T8764] RDX: 000000000000000f RSI: 00007f778642c0a0 RDI: 0000000000000005 [ 178.651999][ T8764] RBP: 00007f778642c090 R08: 0000000000000000 R09: 0000000000000000 [ 178.652012][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.652023][ T8764] R13: 00007f77857e6038 R14: 00007f77857e5fa0 R15: 00007fffc1b116c8 [ 178.652059][ T8764] [ 178.924160][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 178.959692][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 178.980170][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 179.002051][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 179.019757][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 179.522173][ T8799] netlink: 'syz.1.739': attribute type 13 has an invalid length. [ 179.550336][ T8799] netlink: 'syz.1.739': attribute type 17 has an invalid length. [ 179.603755][ T8799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.634415][ T8802] netlink: 'syz.2.741': attribute type 2 has an invalid length. [ 179.651943][ T8802] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 179.692183][ T8799] wg1 speed is unknown, defaulting to 1000 [ 179.744769][ T8807] netlink: 'syz.4.742': attribute type 12 has an invalid length. [ 179.789323][ T8809] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 180.349068][ T8832] lo: entered promiscuous mode [ 180.362213][ T8832] tunl0: entered promiscuous mode [ 180.373221][ T8832] gre0: entered promiscuous mode [ 180.381370][ T8832] gretap0: entered promiscuous mode [ 180.389511][ T8832] erspan0: entered promiscuous mode [ 180.403234][ T8832] ip_vti0: entered promiscuous mode [ 180.410530][ T8832] ip6_vti0: entered promiscuous mode [ 180.424194][ T8832] sit0: entered promiscuous mode [ 180.430049][ T8832] ip6tnl0: entered promiscuous mode [ 180.445322][ T8832] ip6gre0: entered promiscuous mode [ 180.455752][ T8832] syz_tun: entered promiscuous mode [ 180.472335][ T8832] ip6gretap0: entered promiscuous mode [ 180.492299][ T8832] bridge0: entered promiscuous mode [ 180.506870][ T8832] vcan0: entered promiscuous mode [ 180.519830][ T8832] team0: entered promiscuous mode [ 180.540980][ T8832] team_slave_0: entered promiscuous mode [ 180.581663][ T8832] team_slave_1: entered promiscuous mode [ 180.595598][ T8832] dummy0: entered promiscuous mode [ 180.604806][ T8832] nlmon0: entered promiscuous mode [ 180.613779][ T8832] 0ªX¹¦À: entered promiscuous mode [ 180.622359][ T8832] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 180.691910][ T8837] bond2: option arp_all_targets: invalid value (3) [ 180.707772][ T8837] bond2 (unregistering): Released all slaves [ 180.940894][ T8852] batadv_slave_1: entered promiscuous mode [ 180.979191][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.170692][ T8853] batadv_slave_1 (unregistering): left promiscuous mode [ 181.242677][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.279504][ T8854] wg1 speed is unknown, defaulting to 1000 [ 182.206701][ T8912] __nla_validate_parse: 87 callbacks suppressed [ 182.206722][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 182.230910][ T8912] bridge_slave_0: default FDB implementation only supports local addresses [ 182.414342][ T8919] tap0: tun_chr_ioctl cmd 35108 [ 182.458695][ T8919] netlink: 124 bytes leftover after parsing attributes in process `syz.2.771'. [ 182.484766][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 182.846125][ T8935] wg1 speed is unknown, defaulting to 1000 [ 182.867473][ T8939] netlink: 52 bytes leftover after parsing attributes in process `syz.4.777'. [ 183.030141][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 183.113914][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 183.169804][ T8949] wg1 speed is unknown, defaulting to 1000 [ 183.674367][ T8971] wg1 speed is unknown, defaulting to 1000 [ 183.720584][ T8964] "syz.3.786" (8964) uses obsolete ecb(arc4) skcipher [ 183.824573][ T8976] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 183.845033][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 183.854546][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 183.872899][ T8976] bond1 (unregistering): Released all slaves [ 184.097568][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 184.160280][ T8996] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 184.548123][ T9008] wg1 speed is unknown, defaulting to 1000 [ 184.555766][ T9015] netlink: 'syz.3.799': attribute type 13 has an invalid length. [ 184.598626][ T9017] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 184.614261][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 184.761487][ T9028] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 184.846592][ T9028] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 185.891589][ T9078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.907366][ T9078] IPv6: NLM_F_CREATE should be set when creating new route [ 185.914671][ T9078] IPv6: NLM_F_CREATE should be set when creating new route [ 185.922054][ T9078] IPv6: NLM_F_CREATE should be set when creating new route [ 185.938984][ T9078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.467388][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 186.749148][ T9116] wg1 speed is unknown, defaulting to 1000 [ 187.078106][ T9133] netlink: 'syz.0.831': attribute type 11 has an invalid length. [ 187.342597][ T9137] syzkaller0: entered promiscuous mode [ 187.348375][ T9137] syzkaller0: entered allmulticast mode [ 187.413139][ T9143] __nla_validate_parse: 2 callbacks suppressed [ 187.413159][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 187.473993][ T9137] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 187.493889][ T9143] bond1: entered promiscuous mode [ 187.499776][ T9143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.585624][ T9147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.607280][ T9147] bond2: entered promiscuous mode [ 187.624979][ T9147] bond1: (slave bond2): Enslaving as an active interface with an up link [ 188.234221][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 188.306098][ T9160] netlink: 'syz.4.839': attribute type 6 has an invalid length. [ 188.850306][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 189.071756][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 189.465103][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 189.531525][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 189.741839][ T9228] netlink: 3 bytes leftover after parsing attributes in process `syz.2.861'. [ 189.809032][ T9228] batadv1: entered promiscuous mode [ 189.841650][ T9228] batadv1: entered allmulticast mode [ 189.932717][ T9234] wg1 speed is unknown, defaulting to 1000 [ 190.069930][ T9248] netlink: 48 bytes leftover after parsing attributes in process `syz.4.868'. [ 190.134829][ T9253] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 190.156242][ T9248] netlink: 'syz.4.868': attribute type 54 has an invalid length. [ 190.350030][ T9261] netlink: 34 bytes leftover after parsing attributes in process `syz.4.872'. [ 190.388504][ T9267] netlink: 34 bytes leftover after parsing attributes in process `syz.4.872'. [ 191.145188][ T9288] unsupported nla_type 52263 [ 191.398676][ T9295] syzkaller1: entered promiscuous mode [ 191.430934][ T9295] syzkaller1: entered allmulticast mode [ 191.669428][ T9320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.386353][ T9366] netlink: 'syz.3.906': attribute type 4 has an invalid length. [ 193.418777][ T9367] tunl0: Caught tx_queue_len zero misconfig [ 193.746401][ T9380] wg1 speed is unknown, defaulting to 1000 [ 193.757979][ T9382] __nla_validate_parse: 1 callbacks suppressed [ 193.757998][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 194.255573][ T9395] wg1 speed is unknown, defaulting to 1000 [ 194.396558][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.912'. [ 195.199094][ T9410] wg1 speed is unknown, defaulting to 1000 [ 195.344324][ T9425] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 195.395077][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 195.418025][ T9430] netlink: 132 bytes leftover after parsing attributes in process `syz.4.918'. [ 195.436594][ T9425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.495644][ T9417] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 195.861806][ T9443] wg1 speed is unknown, defaulting to 1000 [ 195.965684][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.925'. [ 195.975849][ T9450] netlink: 'syz.4.925': attribute type 2 has an invalid length. [ 196.545500][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.933'. [ 196.644096][ T9474] lo: Caught tx_queue_len zero misconfig [ 196.782733][ T9473] wg1 speed is unknown, defaulting to 1000 [ 196.887913][ T9478] netlink: 'syz.4.934': attribute type 11 has an invalid length. [ 196.911367][ T9478] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.934'. [ 197.250524][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'. [ 197.284296][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.938'. [ 197.317489][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'. [ 197.860149][ T9506] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 198.279157][ T9524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.342683][ T9520] wg1 speed is unknown, defaulting to 1000 [ 198.665252][ T9534] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 198.849929][ T9534] wlan1: mtu less than device minimum [ 198.867214][ T9534] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 198.947466][ T9557] __nla_validate_parse: 9 callbacks suppressed [ 198.947486][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 199.078755][ T9557] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 199.094574][ T9557] team0: Device ipvlan3 is already an upper device of the team interface [ 199.215282][ T9562] vlan3: entered allmulticast mode [ 199.231003][ T9562] batadv_slave_1: entered allmulticast mode [ 199.526415][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.535281][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 199.565561][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 200.067113][ T9605] wg1 speed is unknown, defaulting to 1000 [ 200.613768][ T9638] netlink: 'syz.0.980': attribute type 25 has an invalid length. [ 200.635678][ T9638] netlink: 'syz.0.980': attribute type 7 has an invalid length. [ 200.674783][ T9638] netlink: 164 bytes leftover after parsing attributes in process `syz.0.980'. [ 200.700984][ T9640] syzkaller1: entered allmulticast mode [ 200.797372][ T9645] wg1 speed is unknown, defaulting to 1000 [ 200.886363][ T9652] vlan0: entered promiscuous mode [ 200.891661][ T9652] bond0: entered promiscuous mode [ 200.896847][ T9652] bond_slave_0: entered promiscuous mode [ 200.903953][ T9652] bond_slave_1: entered promiscuous mode [ 200.910061][ T9652] vlan0: entered allmulticast mode [ 200.915355][ T9652] bond0: entered allmulticast mode [ 200.921233][ T9652] bond_slave_0: entered allmulticast mode [ 200.927090][ T9652] bond_slave_1: entered allmulticast mode [ 201.007777][ T9657] netlink: 156 bytes leftover after parsing attributes in process `syz.2.986'. [ 201.055280][ T9657] netlink: 156 bytes leftover after parsing attributes in process `syz.2.986'. [ 201.256017][ T9666] pim6reg1: entered promiscuous mode [ 201.280497][ T9670] netlink: 136 bytes leftover after parsing attributes in process `syz.4.989'. [ 201.296298][ T9666] pim6reg1: entered allmulticast mode [ 201.326497][ T9670] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 201.354849][ T9670] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.989'. [ 201.391189][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 201.675226][ T9687] syzkaller0: entered promiscuous mode [ 201.699098][ T9687] syzkaller0: entered allmulticast mode [ 201.714430][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'. [ 202.185310][ T9721] netlink: 'syz.0.1002': attribute type 13 has an invalid length. [ 202.206031][ T9721] netlink: 'syz.0.1002': attribute type 17 has an invalid length. [ 202.312603][ T9721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.385898][ T9730] sctp: [Deprecated]: syz.2.1005 (pid 9730) Use of int in max_burst socket option. [ 202.385898][ T9730] Use struct sctp_assoc_value instead [ 202.490352][ T9739] wg1 speed is unknown, defaulting to 1000 [ 203.439202][ T9772] ip6gre1: entered promiscuous mode [ 203.471132][ T9772] ip6gre1: entered allmulticast mode [ 203.483240][ T1162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.494950][ T1162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.505909][ T9772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.530985][ T7401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.900228][ T9790] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 203.932482][ T9791] netlink: 'syz.0.1021': attribute type 21 has an invalid length. [ 203.937327][ T9792] netlink: 'syz.0.1021': attribute type 4 has an invalid length. [ 203.983750][ T9791] __nla_validate_parse: 3 callbacks suppressed [ 203.983769][ T9791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1021'. [ 204.083396][ T9800] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 204.506740][ T7398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.519294][ T7397] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.767861][ T9837] netlink: 'syz.3.1034': attribute type 3 has an invalid length. [ 204.815327][ T9837] netlink: 'syz.3.1034': attribute type 3 has an invalid length. [ 204.838768][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 204.915265][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 205.098496][ T9859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 205.207782][ T9873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1043'. [ 205.999681][ T9908] wg1 speed is unknown, defaulting to 1000 [ 206.328137][ T9938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1058'. [ 206.759952][ T9959] wg1 speed is unknown, defaulting to 1000 [ 206.774163][ T9967] validate_nla: 2 callbacks suppressed [ 206.774181][ T9967] netlink: 'syz.4.1065': attribute type 22 has an invalid length. [ 206.796243][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 206.844234][ T9961] syz.3.1064: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.874650][ T9961] CPU: 1 UID: 0 PID: 9961 Comm: syz.3.1064 Not tainted syzkaller #0 PREEMPT(full) [ 206.874682][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.874696][ T9961] Call Trace: [ 206.874705][ T9961] [ 206.874714][ T9961] dump_stack_lvl+0x189/0x250 [ 206.874771][ T9961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.874802][ T9961] ? __pfx__printk+0x10/0x10 [ 206.874825][ T9961] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.874855][ T9961] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.874887][ T9961] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 206.874921][ T9961] warn_alloc+0x214/0x310 [ 206.874962][ T9961] ? __pfx_warn_alloc+0x10/0x10 [ 206.875006][ T9961] ? __get_vm_area_node+0x28f/0x300 [ 206.875037][ T9961] ? xskq_create+0xbf/0x170 [ 206.875069][ T9961] __vmalloc_node_range_noprof+0x690/0x12d0 [ 206.875135][ T9961] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.875172][ T9961] ? __kasan_kmalloc+0x93/0xb0 [ 206.875212][ T9961] vmalloc_user_noprof+0xad/0xf0 [ 206.875244][ T9961] ? xskq_create+0xbf/0x170 [ 206.875272][ T9961] xskq_create+0xbf/0x170 [ 206.875309][ T9961] xsk_init_queue+0xb0/0x110 [ 206.875340][ T9961] xsk_setsockopt+0x57b/0x8d0 [ 206.875369][ T9961] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.875398][ T9961] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.875431][ T9961] ? aa_sock_opt_perm+0xff/0x1b0 [ 206.875467][ T9961] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 206.875487][ T9961] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.875514][ T9961] do_sock_setsockopt+0x17c/0x1b0 [ 206.875543][ T9961] __x64_sys_setsockopt+0x13f/0x1b0 [ 206.875572][ T9961] do_syscall_64+0xfa/0xfa0 [ 206.875601][ T9961] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.875630][ T9961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.875652][ T9961] ? clear_bhb_loop+0x60/0xb0 [ 206.875679][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.875712][ T9961] RIP: 0033:0x7fb85d58f6c9 [ 206.875744][ T9961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.875762][ T9961] RSP: 002b:00007fb85e33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.875786][ T9961] RAX: ffffffffffffffda RBX: 00007fb85d7e5fa0 RCX: 00007fb85d58f6c9 [ 206.875802][ T9961] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 206.875814][ T9961] RBP: 00007fb85d611f91 R08: 0000000000000004 R09: 0000000000000000 [ 206.875827][ T9961] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 206.875840][ T9961] R13: 00007fb85d7e6038 R14: 00007fb85d7e5fa0 R15: 00007ffe33de58e8 [ 206.875878][ T9961] [ 206.875965][ T9961] Mem-Info: [ 207.035265][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 207.036677][ T9961] active_anon:5206 inactive_anon:0 isolated_anon:0 [ 207.036677][ T9961] active_file:3479 inactive_file:39928 isolated_file:0 [ 207.036677][ T9961] unevictable:768 dirty:269 writeback:0 [ 207.036677][ T9961] slab_reclaimable:11249 slab_unreclaimable:152688 [ 207.036677][ T9961] mapped:29563 shmem:1358 pagetables:1128 [ 207.036677][ T9961] sec_pagetables:0 bounce:0 [ 207.036677][ T9961] kernel_misc_reclaimable:0 [ 207.036677][ T9961] free:1279561 free_pcp:15368 free_cma:0 [ 207.058246][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 207.066011][ T9967] netlink: 'syz.4.1065': attribute type 22 has an invalid length. [ 207.087214][ T9961] Node 0 active_anon:20824kB inactive_anon:0kB active_file:13916kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118168kB dirty:1072kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12656kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.097841][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 207.114669][ T9961] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.287779][ T9961] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.321571][ T9961] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 207.327492][ T9961] Node 0 DMA32 free:1218188kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20824kB inactive_anon:0kB active_file:13916kB inactive_file:159512kB unevictable:1536kB writepending:1072kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:40344kB local_pcp:21256kB free_cma:0kB [ 207.361522][ T9961] lowmem_reserve[]: 0 0 0 0 0 [ 207.366304][ T9961] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.397654][ T9961] lowmem_reserve[]: 0 0 0 0 0 [ 207.419120][ T9961] Node 1 Normal free:3887704kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17984kB local_pcp:12416kB free_cma:0kB [ 207.452185][ T9961] lowmem_reserve[]: 0 0 0 0 0 [ 207.457193][ T9961] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 207.473151][ T9961] Node 0 DMA32: 1367*4kB (UM) 612*8kB (UME) 237*16kB (UME) 545*32kB (UME) 228*64kB (UME) 113*128kB (UME) 57*256kB (UME) 24*512kB (UME) 14*1024kB (UME) 5*2048kB (UM) 270*4096kB (UM) = 1218028kB [ 207.494889][ T9961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.508372][ T9961] Node 1 Normal: 220*4kB (UME) 47*8kB (UME) 33*16kB (UME) 109*32kB (UME) 35*64kB (UME) 6*128kB (UME) 6*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3887704kB [ 207.529225][ T9961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.540382][ T9955] wg1 speed is unknown, defaulting to 1000 [ 207.604928][ T9961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.630822][ T9961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.646625][ T9961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.681011][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.709724][ T9961] 44760 total pagecache pages [ 207.727803][ T9961] 0 pages in swap cache [ 207.734133][ T9961] Free swap = 124996kB [ 207.738355][ T9961] Total swap = 124996kB [ 207.742704][ T9961] 2097051 pages RAM [ 207.760320][ T9961] 0 pages HighMem/MovableOnly [ 207.768184][ T9961] 424120 pages reserved [ 207.773173][ T9961] 0 pages cma reserved [ 207.827718][ T9980] bond2: option all_slaves_active: invalid value (13) [ 207.847943][ T9980] bond2 (unregistering): Released all slaves [ 208.009837][ T9987] tipc: Enabled bearer , priority 0 [ 208.124429][ T1148] syzkaller0: tun_net_xmit 76 [ 208.129661][ T1148] syzkaller0: tun_net_xmit 48 [ 208.152465][ T7398] syzkaller0: tun_net_xmit 76 [ 208.170674][ T9987] tipc: Disabling bearer [ 208.185307][ T9991] syzkaller0: tun_net_xmit 76 [ 208.190256][ T9991] tipc: Enabled bearer , priority 0 [ 208.320785][ C1] syzkaller0: tun_net_xmit 76 [ 208.411365][ T7397] syzkaller0: tun_net_xmit 76 [ 208.436765][ T9982] tipc: Resetting bearer [ 208.597901][T10018] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 208.608088][T10017] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 210.369335][ T9982] tipc: Disabling bearer [ 210.381941][T10018] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 210.382984][T10017] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 210.416153][T10032] __nla_validate_parse: 2 callbacks suppressed [ 210.416175][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 210.772780][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 210.904630][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 210.936544][T10078] wg1 speed is unknown, defaulting to 1000 [ 210.945744][T10095] tipc: Enabling of bearer rejected, failed to enable media [ 210.992934][T10095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.006383][T10095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.039091][T10095] hsr0: entered promiscuous mode [ 211.054567][T10095] hsr0: entered allmulticast mode [ 211.072471][T10095] hsr_slave_0: entered allmulticast mode [ 211.090487][T10095] hsr_slave_1: entered allmulticast mode [ 211.637767][T10123] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1094'. [ 211.900183][T10142] netlink: 'syz.1.1097': attribute type 13 has an invalid length. [ 211.926340][T10129] netlink: 'syz.2.1092': attribute type 27 has an invalid length. [ 211.932919][T10138] veth2: entered allmulticast mode [ 211.935121][T10142] netlink: 'syz.1.1097': attribute type 17 has an invalid length. [ 212.057203][T10142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.470503][T10166] tipc: Enabling of bearer rejected, failed to enable media [ 212.588558][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.615629][T10169] wg1 speed is unknown, defaulting to 1000 [ 212.894018][T10187] syzkaller0: entered promiscuous mode [ 212.900409][T10187] syzkaller0: entered allmulticast mode [ 214.072797][T10235] ieee802154 phy1 wpan1: encryption failed: -90 [ 214.908840][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1124'. [ 215.050171][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 215.176123][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 215.253105][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 215.575353][T10291] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 215.676843][T10301] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1140'. [ 215.735249][T10305] wg1 speed is unknown, defaulting to 1000 [ 215.740384][T10306] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1140'. [ 215.765303][T10306] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1140'. [ 216.046064][T10317] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 216.072100][T10315] wg1 speed is unknown, defaulting to 1000 [ 216.160897][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.399556][T10334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.510109][T10346] wg1 speed is unknown, defaulting to 1000 [ 216.539755][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 216.586171][T10351] bond2: option broadcast_neighbor: invalid value (5) [ 216.614395][T10351] bond2 (unregistering): Released all slaves [ 216.895627][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'. [ 216.934274][T10365] syz.4.1156: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.952378][T10365] CPU: 0 UID: 0 PID: 10365 Comm: syz.4.1156 Not tainted syzkaller #0 PREEMPT(full) [ 216.952406][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.952426][T10365] Call Trace: [ 216.952435][T10365] [ 216.952443][T10365] dump_stack_lvl+0x189/0x250 [ 216.952482][T10365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.952511][T10365] ? __pfx__printk+0x10/0x10 [ 216.952534][T10365] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.952563][T10365] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.952595][T10365] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 216.952628][T10365] warn_alloc+0x214/0x310 [ 216.952667][T10365] ? __pfx_warn_alloc+0x10/0x10 [ 216.952729][T10365] ? __get_vm_area_node+0x28f/0x300 [ 216.952759][T10365] ? xskq_create+0xbf/0x170 [ 216.952864][T10365] __vmalloc_node_range_noprof+0x690/0x12d0 [ 216.952931][T10365] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.952975][T10365] ? __kasan_kmalloc+0x93/0xb0 [ 216.953016][T10365] vmalloc_user_noprof+0xad/0xf0 [ 216.953056][T10365] ? xskq_create+0xbf/0x170 [ 216.953083][T10365] xskq_create+0xbf/0x170 [ 216.953113][T10365] xsk_init_queue+0xb0/0x110 [ 216.953141][T10365] xsk_setsockopt+0x57b/0x8d0 [ 216.953170][T10365] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.953199][T10365] ? __pfx_aa_sk_perm+0x10/0x10 [ 216.953231][T10365] ? aa_sock_opt_perm+0xff/0x1b0 [ 216.953270][T10365] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 216.953290][T10365] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.953317][T10365] do_sock_setsockopt+0x17c/0x1b0 [ 216.953345][T10365] __x64_sys_setsockopt+0x13f/0x1b0 [ 216.953374][T10365] do_syscall_64+0xfa/0xfa0 [ 216.953402][T10365] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.953431][T10365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.953446][T10365] ? clear_bhb_loop+0x60/0xb0 [ 216.953463][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.953477][T10365] RIP: 0033:0x7f778558f6c9 [ 216.953490][T10365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.953503][T10365] RSP: 002b:00007f778640b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.953518][T10365] RAX: ffffffffffffffda RBX: 00007f77857e6090 RCX: 00007f778558f6c9 [ 216.953528][T10365] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 216.953537][T10365] RBP: 00007f7785611f91 R08: 0000000000000004 R09: 0000000000000000 [ 216.953546][T10365] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 216.953555][T10365] R13: 00007f77857e6128 R14: 00007f77857e6090 R15: 00007fffc1b116c8 [ 216.953579][T10365] [ 216.953585][T10365] Mem-Info: [ 216.965983][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 216.977058][T10365] active_anon:5249 inactive_anon:0 isolated_anon:0 [ 216.977058][T10365] active_file:3644 inactive_file:39932 isolated_file:0 [ 216.977058][T10365] unevictable:768 dirty:106 writeback:0 [ 216.977058][T10365] slab_reclaimable:11215 slab_unreclaimable:152932 [ 216.977058][T10365] mapped:34794 shmem:1383 pagetables:1077 [ 216.977058][T10365] sec_pagetables:0 bounce:0 [ 216.977058][T10365] kernel_misc_reclaimable:0 [ 216.977058][T10365] free:1272025 free_pcp:21913 free_cma:0 [ 216.981173][ T5148] Bluetooth: hci2: command 0x0401 tx timeout [ 217.000928][T10365] Node 0 active_anon:20996kB inactive_anon:0kB active_file:14576kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139176kB dirty:424kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13024kB pagetables:4160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.000992][T10365] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.001044][T10365] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.001111][T10365] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 217.001168][T10365] Node 0 DMA32 free:1185040kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20996kB inactive_anon:0kB active_file:14576kB inactive_file:159528kB unevictable:1536kB writepending:424kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:69664kB local_pcp:27196kB free_cma:0kB [ 217.001240][T10365] lowmem_reserve[]: 0 0 0 0 0 [ 217.001286][T10365] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.010098][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 217.015911][T10365] lowmem_reserve[]: 0 0 0 0 0 [ 217.451343][T10365] Node 1 Normal free:3887704kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17988kB local_pcp:5572kB free_cma:0kB [ 217.512089][T10365] lowmem_reserve[]: 0 0 0 0 0 [ 217.516887][T10365] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 217.533129][T10365] Node 0 DMA32: 503*4kB (UM) 200*8kB (ME) 84*16kB (UM) 170*32kB (UME) 178*64kB (UM) 92*128kB (UME) 50*256kB (UE) 21*512kB (UME) 12*1024kB (UME) 5*2048kB (UM) 270*4096kB (UM) = 1185564kB [ 217.553227][T10365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 217.564913][T10365] Node 1 Normal: 220*4kB (UME) 47*8kB (UME) 33*16kB (UME) 109*32kB (UME) 35*64kB (UME) 6*128kB (UME) 6*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3887704kB [ 217.593543][T10365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.603420][T10365] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.630784][T10365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.661010][T10365] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.670405][T10365] 44962 total pagecache pages [ 217.676387][T10365] 0 pages in swap cache [ 217.690129][T10365] Free swap = 124996kB [ 217.703695][T10365] Total swap = 124996kB [ 217.707986][T10365] 2097051 pages RAM [ 217.711961][T10365] 0 pages HighMem/MovableOnly [ 217.716652][T10365] 424120 pages reserved [ 217.723404][T10365] 0 pages cma reserved [ 217.753687][T10386] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1160'. [ 218.028654][T10389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1163'. [ 218.476872][T10420] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1170'. [ 218.547470][T10419] wg1 speed is unknown, defaulting to 1000 [ 218.581996][T10426] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 218.622987][T10428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1172'. [ 218.954255][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 219.266370][T10461] Cannot find del_set index 2 as target [ 219.698274][T10469] tipc: Enabled bearer , priority 0 [ 219.752754][T10473] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.782121][T10473] syzkaller0: entered promiscuous mode [ 219.792833][T10473] syzkaller0: entered allmulticast mode [ 219.846008][T10481] netlink: 'syz.4.1185': attribute type 2 has an invalid length. [ 219.862085][T10475] tipc: Resetting bearer [ 219.877962][T10481] Bluetooth: MGMT ver 1.23 [ 219.885421][T10475] tipc: Disabling bearer [ 220.507031][T10508] Ï: option downdelay: invalid value (18446744073709547007) [ 220.514626][T10508] Ï: option downdelay: allowed values 0 - 2147483647 [ 220.532796][T10508] Ï (unregistering): Released all slaves [ 220.761465][ T1148] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 221.097684][T10541] __nla_validate_parse: 4 callbacks suppressed [ 221.097700][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.116298][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.127373][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.138353][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.149229][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.160261][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.174218][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.185665][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.196823][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.209081][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 221.229473][T10541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.239293][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.249722][T10541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.449820][T10553] wg1 speed is unknown, defaulting to 1000 [ 222.424420][T10598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.023399][T10625] ip6gre0: entered allmulticast mode [ 223.345848][T10638] wg1 speed is unknown, defaulting to 1000 [ 223.475565][T10636] wg1 speed is unknown, defaulting to 1000 [ 226.039278][T10646] netlink: 'syz.1.1233': attribute type 10 has an invalid length. [ 226.056187][T10646] netlink: 'syz.1.1233': attribute type 10 has an invalid length. [ 226.070323][T10646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 226.202455][T10650] __nla_validate_parse: 17 callbacks suppressed [ 226.202477][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 226.224585][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 226.247775][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 226.348325][T10657] siw: device registration error -23 [ 226.613940][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 226.643304][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. acpid: input device has been disconnected, fd 3 [ 227.523165][T10708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1250'. [ 227.528771][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 227.544197][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1250'. [ 227.758274][T10713] wg1 speed is unknown, defaulting to 1000 [ 227.800579][T10715] gtp0: entered promiscuous mode [ 227.821171][T10715] gtp0: entered allmulticast mode [ 228.283915][T10740] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 228.627777][T10746] wg1 speed is unknown, defaulting to 1000 [ 228.703839][T10752] wg1 speed is unknown, defaulting to 1000 [ 228.776655][T10756] wg1 speed is unknown, defaulting to 1000 [ 229.508107][T10778] wg1 speed is unknown, defaulting to 1000 [ 229.559722][T10779] wg1 speed is unknown, defaulting to 1000 [ 229.656158][T10794] netlink: 'syz.2.1273': attribute type 2 has an invalid length. [ 229.793427][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1274'. [ 230.414378][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 230.681286][T10814] netlink: 'syz.1.1279': attribute type 6 has an invalid length. [ 230.755740][T10814] wg1 speed is unknown, defaulting to 1000 [ 230.795301][T10827] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 230.812317][T10827] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 230.940330][T10816] wg1 speed is unknown, defaulting to 1000 [ 230.968189][T10831] wg1 speed is unknown, defaulting to 1000 [ 231.598680][T10842] wg1 speed is unknown, defaulting to 1000 [ 231.838021][T10855] veth6: entered allmulticast mode [ 232.160466][T10870] __nla_validate_parse: 4 callbacks suppressed [ 232.160485][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 232.268246][T10866] wg1 speed is unknown, defaulting to 1000 [ 232.916608][T10889] syzkaller0: entered promiscuous mode [ 232.936472][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 232.947390][T10889] syzkaller0: entered allmulticast mode [ 232.955588][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1302'. [ 233.366386][T10914] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1316'. [ 233.387426][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 233.397869][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 233.758260][T10933] wg1 speed is unknown, defaulting to 1000 [ 233.898176][T10941] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1311'. [ 233.989368][T10938] geneve1: Caught tx_queue_len zero misconfig [ 233.997073][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 234.027293][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 234.395534][T10948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1314'. [ 234.418648][T10948] netlink: 'syz.0.1314': attribute type 13 has an invalid length. [ 234.648047][T10965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.842481][T10973] netlink: 'syz.4.1323': attribute type 1 has an invalid length. [ 234.882381][T10973] bond4: entered promiscuous mode [ 234.888098][T10973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.933445][T10974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.944882][T10974] bond4: (slave bond5): making interface the new active one [ 234.952495][T10974] bond5: entered promiscuous mode [ 234.959753][T10974] bond4: (slave bond5): Enslaving as an active interface with an up link [ 235.007631][T10973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.017270][T10973] bond4: (slave bond6): Enslaving as a backup interface with an up link [ 236.057836][T11040] bridge3: entered promiscuous mode [ 236.072366][T11040] bridge3: entered allmulticast mode [ 236.328850][T11054] IPVS: persistence engine module ip_vs_pe_ not found [ 236.572680][T11063] wg1 speed is unknown, defaulting to 1000 [ 237.466749][T11094] netlink: 'syz.1.1355': attribute type 2 has an invalid length. [ 237.495375][T11094] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 238.103565][T11123] __nla_validate_parse: 5 callbacks suppressed [ 238.103584][T11123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1361'. [ 238.133058][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 238.149434][T11123] netlink: 'syz.1.1361': attribute type 13 has an invalid length. [ 238.347729][T11133] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 238.377560][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.385518][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.628222][T11123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.664373][T11123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.863974][T11151] netlink: 'syz.2.1370': attribute type 33 has an invalid length. [ 238.884230][T11151] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1370'. [ 239.058410][ T7404] wg1 speed is unknown, defaulting to 1000 [ 239.074561][ T7404] syz0: Port: 1 Link DOWN [ 239.090423][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.110888][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.130130][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.148179][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.195951][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.220855][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.240146][T11158] wg1 speed is unknown, defaulting to 1000 [ 239.251534][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.271226][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.499635][T11173] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1376'. [ 239.687556][T11185] FAULT_INJECTION: forcing a failure. [ 239.687556][T11185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.727936][T11185] CPU: 1 UID: 0 PID: 11185 Comm: syz.3.1380 Not tainted syzkaller #0 PREEMPT(full) [ 239.727966][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.727978][T11185] Call Trace: [ 239.727986][T11185] [ 239.727996][T11185] dump_stack_lvl+0x189/0x250 [ 239.728030][T11185] ? __pfx____ratelimit+0x10/0x10 [ 239.728058][T11185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.728087][T11185] ? __pfx__printk+0x10/0x10 [ 239.728107][T11185] ? __might_fault+0xb0/0x130 [ 239.728143][T11185] should_fail_ex+0x414/0x560 [ 239.728175][T11185] _copy_from_user+0x2d/0xb0 [ 239.728198][T11185] ___sys_sendmsg+0x158/0x2a0 [ 239.728240][T11185] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.728302][T11185] ? __fget_files+0x2a/0x420 [ 239.728322][T11185] ? __fget_files+0x3a0/0x420 [ 239.728355][T11185] __x64_sys_sendmsg+0x19b/0x260 [ 239.728358][T11182] ipvlan0: entered allmulticast mode [ 239.728382][T11185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.728414][T11185] ? __pfx_ksys_write+0x10/0x10 [ 239.728451][T11185] ? do_syscall_64+0xbe/0xfa0 [ 239.728492][T11185] do_syscall_64+0xfa/0xfa0 [ 239.728525][T11185] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.728559][T11185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.728585][T11185] ? clear_bhb_loop+0x60/0xb0 [ 239.728614][T11185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.728636][T11185] RIP: 0033:0x7fb85d58f6c9 [ 239.728660][T11185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.728680][T11185] RSP: 002b:00007fb85e33f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.728713][T11185] RAX: ffffffffffffffda RBX: 00007fb85d7e5fa0 RCX: 00007fb85d58f6c9 [ 239.728732][T11185] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 239.728748][T11185] RBP: 00007fb85e33f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.728762][T11185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.728777][T11185] R13: 00007fb85d7e6038 R14: 00007fb85d7e5fa0 R15: 00007ffe33de58e8 [ 239.728819][T11185] [ 239.950150][T11182] veth0_vlan: entered allmulticast mode [ 239.973217][T11190] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 239.985477][T11190] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 240.172924][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 240.232763][T11200] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 240.254242][T11200] bond4 (unregistering): Released all slaves [ 240.427620][T11213] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 240.492261][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1388'. [ 240.847829][T11229] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1394'. [ 240.951351][T11236] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 241.013162][T11235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.071467][T11234] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 241.110841][ T2988] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.214801][T11236] veth9: entered promiscuous mode [ 241.231516][T11236] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 241.240946][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.368760][T11241] wg1 speed is unknown, defaulting to 1000 [ 241.870387][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 241.890037][T11270] Bluetooth: MGMT ver 1.23 [ 242.228230][T11286] syzkaller1: entered promiscuous mode [ 242.233918][T11286] syzkaller1: entered allmulticast mode [ 242.243158][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 242.294405][T11286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.314038][T11292] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 242.327219][T11293] bridge0: entered allmulticast mode [ 242.343170][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1411'. [ 242.363416][T11293] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 242.384645][T11295] nbd: socks must be embedded in a SOCK_ITEM attr [ 242.999210][T11323] bond0: Caught tx_queue_len zero misconfig [ 243.818256][T11349] wg1 speed is unknown, defaulting to 1000 [ 243.828465][T11354] ip6tnl0: Caught tx_queue_len zero misconfig [ 244.110170][T11361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.203721][T11366] x_tables: duplicate underflow at hook 1 [ 244.619930][T11384] wg1 speed is unknown, defaulting to 1000 [ 244.688856][T11390] __nla_validate_parse: 1 callbacks suppressed [ 244.688874][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 244.740202][T11391] syzkaller0: entered promiscuous mode [ 244.745905][T11391] syzkaller0: entered allmulticast mode [ 244.804893][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 244.973619][T11400] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 245.029978][T11400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1436'. [ 245.071320][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 245.513332][T11411] veth1: entered allmulticast mode [ 245.694490][T11417] wg1 speed is unknown, defaulting to 1000 [ 245.795407][T11419] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1444'. [ 245.823498][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 245.828587][T11424] wg1 speed is unknown, defaulting to 1000 [ 245.832902][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 246.273157][T11448] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1451'. [ 246.433137][T11454] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 246.458931][T11451] wg1 speed is unknown, defaulting to 1000 [ 246.490384][ T30] audit: type=1800 audit(1762489220.860:3): pid=11456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1453" name="memory.events" dev="tmpfs" ino=1422 res=0 errno=0 [ 246.564936][T11456] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1453'. [ 247.009023][T11484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.031951][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1463'. [ 247.065757][T11488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.126900][T11487] wg1 speed is unknown, defaulting to 1000 [ 247.218879][T11495] netlink: 'syz.4.1465': attribute type 6 has an invalid length. [ 247.235958][T11493] vcan0: tx drop: invalid da for name 0x0000000000000e00 [ 247.246177][T11493] tap0: tun_chr_ioctl cmd 1074025677 [ 247.252083][T11493] tap0: linktype set to 773 [ 247.964868][T11531] ip6gretap0: entered promiscuous mode [ 247.983200][T11531] macsec1: entered promiscuous mode [ 247.992003][T11531] ip6gretap0: left promiscuous mode [ 248.154995][T11542] wg1 speed is unknown, defaulting to 1000 [ 248.765013][T11571] FAULT_INJECTION: forcing a failure. [ 248.765013][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 248.790877][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.4.1487 Not tainted syzkaller #0 PREEMPT(full) [ 248.790908][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.790921][T11571] Call Trace: [ 248.790930][T11571] [ 248.790940][T11571] dump_stack_lvl+0x189/0x250 [ 248.790975][T11571] ? __pfx____ratelimit+0x10/0x10 [ 248.791004][T11571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.791034][T11571] ? __pfx__printk+0x10/0x10 [ 248.791063][T11571] ? __pfx___might_resched+0x10/0x10 [ 248.791092][T11571] should_fail_ex+0x414/0x560 [ 248.791131][T11571] should_failslab+0xa8/0x100 [ 248.791156][T11571] kmem_cache_alloc_node_noprof+0x77/0x710 [ 248.791186][T11571] ? __alloc_skb+0x112/0x2d0 [ 248.791214][T11571] __alloc_skb+0x112/0x2d0 [ 248.791239][T11571] netlink_ack+0x146/0xa50 [ 248.791257][T11571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.791282][T11571] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 248.791312][T11571] ? __pfx_nl802154_post_doit+0x10/0x10 [ 248.791369][T11571] netlink_rcv_skb+0x28c/0x470 [ 248.791386][T11571] ? __lock_acquire+0xab9/0xd20 [ 248.791407][T11571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.791436][T11571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.791478][T11571] ? down_read+0x1ad/0x2e0 [ 248.791499][T11571] genl_rcv+0x28/0x40 [ 248.791524][T11571] netlink_unicast+0x82f/0x9e0 [ 248.791564][T11571] ? __pfx_netlink_unicast+0x10/0x10 [ 248.791598][T11571] ? netlink_sendmsg+0x642/0xb30 [ 248.791616][T11571] ? skb_put+0x11b/0x210 [ 248.791640][T11571] netlink_sendmsg+0x805/0xb30 [ 248.791672][T11571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.791697][T11571] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.791731][T11571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.791752][T11571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.791774][T11571] __sock_sendmsg+0x21c/0x270 [ 248.791806][T11571] ____sys_sendmsg+0x505/0x830 [ 248.791835][T11571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.791876][T11571] ? import_iovec+0x74/0xa0 [ 248.791907][T11571] ___sys_sendmsg+0x21f/0x2a0 [ 248.791933][T11571] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.791996][T11571] ? __fget_files+0x2a/0x420 [ 248.792015][T11571] ? __fget_files+0x3a0/0x420 [ 248.792046][T11571] __x64_sys_sendmsg+0x19b/0x260 [ 248.792101][T11571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.792142][T11571] ? __pfx_ksys_write+0x10/0x10 [ 248.792178][T11571] ? do_syscall_64+0xbe/0xfa0 [ 248.792212][T11571] do_syscall_64+0xfa/0xfa0 [ 248.792240][T11571] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.792269][T11571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.792290][T11571] ? clear_bhb_loop+0x60/0xb0 [ 248.792317][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.792338][T11571] RIP: 0033:0x7f778558f6c9 [ 248.792357][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.792376][T11571] RSP: 002b:00007f778642c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.792399][T11571] RAX: ffffffffffffffda RBX: 00007f77857e5fa0 RCX: 00007f778558f6c9 [ 248.792415][T11571] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 248.792428][T11571] RBP: 00007f778642c090 R08: 0000000000000000 R09: 0000000000000000 [ 248.792442][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.792454][T11571] R13: 00007f77857e6038 R14: 00007f77857e5fa0 R15: 00007fffc1b116c8 [ 248.792491][T11571] [ 249.269348][T11576] wg1 speed is unknown, defaulting to 1000 [ 249.732019][T11599] netlink: 'syz.3.1495': attribute type 4 has an invalid length. [ 250.013385][T11601] __nla_validate_parse: 6 callbacks suppressed [ 250.013405][T11601] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1493'. [ 250.488717][T11629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'. [ 250.615229][T11617] wg1 speed is unknown, defaulting to 1000 [ 252.165933][T11700] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 252.661059][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'. [ 252.745498][T11718] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 252.764856][T11718] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 252.977989][T11723] macvlan2: entered promiscuous mode [ 252.983481][T11723] macvlan2: entered allmulticast mode [ 252.989494][T11723] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 253.047047][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 253.855965][T11750] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1535'. [ 254.049443][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 254.062335][T11760] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1538'. [ 254.142686][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 254.765748][T11794] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1548'. [ 254.963332][T11806] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1551'. [ 255.387965][T11819] x_tables: ip_tables: osf match: only valid for protocol 6 [ 255.404943][T11823] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1555'. [ 256.131364][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 256.303068][T11835] syzkaller0: entered promiscuous mode [ 256.308674][T11835] syzkaller0: entered allmulticast mode [ 256.317303][T11839] tipc: Enabled bearer , priority 0 [ 256.324701][T11843] syzkaller0: entered promiscuous mode [ 256.331494][T11843] syzkaller0: entered allmulticast mode [ 257.721320][T11849] tipc: Resetting bearer [ 257.828792][T11838] tipc: Resetting bearer [ 257.893209][T11838] tipc: Disabling bearer [ 258.030596][T11854] wg1 speed is unknown, defaulting to 1000 [ 258.392221][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 258.494827][T11877] bridge0: left promiscuous mode [ 258.510510][T11879] netlink: 'syz.1.1575': attribute type 2 has an invalid length. [ 258.527202][T11877] bridge0: entered allmulticast mode [ 258.539541][T11879] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 258.576257][T11879] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1575'. [ 258.815665][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.826511][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.836691][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.846570][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.921416][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.964374][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.984873][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.017134][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.060086][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.100035][T11882] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.189952][T11890] syzkaller0: entered promiscuous mode [ 259.197160][T11890] syzkaller0: entered allmulticast mode [ 259.393922][T11906] x_tables: duplicate underflow at hook 4 [ 260.909219][T11927] ieee802154 phy1 wpan1: encryption failed: -90 [ 260.965022][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.643775][T11963] bridge_slave_1: entered promiscuous mode [ 263.291753][T11979] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 263.299662][T11979] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1599'. [ 263.330797][T11977] wg1 speed is unknown, defaulting to 1000 [ 263.490312][T12001] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 263.723137][T12008] bond5: option mode: invalid value (254) [ 263.745249][T12008] bond5 (unregistering): Released all slaves [ 264.075971][T12036] team_slave_1: Caught tx_queue_len zero misconfig [ 264.383148][T12049] FAULT_INJECTION: forcing a failure. [ 264.383148][T12049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.396661][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.0.1616 Not tainted syzkaller #0 PREEMPT(full) [ 264.396691][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.396705][T12049] Call Trace: [ 264.396716][T12049] [ 264.396732][T12049] dump_stack_lvl+0x189/0x250 [ 264.396767][T12049] ? __pfx____ratelimit+0x10/0x10 [ 264.396796][T12049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.396824][T12049] ? __pfx__printk+0x10/0x10 [ 264.396851][T12049] ? __might_fault+0xb0/0x130 [ 264.396890][T12049] should_fail_ex+0x414/0x560 [ 264.396926][T12049] _copy_from_user+0x2d/0xb0 [ 264.396954][T12049] ___sys_sendmsg+0x158/0x2a0 [ 264.396979][T12049] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.397047][T12049] ? __fget_files+0x2a/0x420 [ 264.397066][T12049] ? __fget_files+0x3a0/0x420 [ 264.397096][T12049] __x64_sys_sendmsg+0x19b/0x260 [ 264.397124][T12049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.397157][T12049] ? __pfx_ksys_write+0x10/0x10 [ 264.397193][T12049] ? do_syscall_64+0xbe/0xfa0 [ 264.397227][T12049] do_syscall_64+0xfa/0xfa0 [ 264.397254][T12049] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.397284][T12049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.397305][T12049] ? clear_bhb_loop+0x60/0xb0 [ 264.397331][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.397351][T12049] RIP: 0033:0x7f5d2ad8f6c9 [ 264.397371][T12049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.397399][T12049] RSP: 002b:00007f5d28fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.397422][T12049] RAX: ffffffffffffffda RBX: 00007f5d2afe6090 RCX: 00007f5d2ad8f6c9 [ 264.397437][T12049] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000008 [ 264.397451][T12049] RBP: 00007f5d28fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 264.397463][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.397476][T12049] R13: 00007f5d2afe6128 R14: 00007f5d2afe6090 R15: 00007fffb9117668 [ 264.397511][T12049] [ 265.595779][T12082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1627'. [ 265.912870][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1633'. [ 266.001599][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 266.681404][T12127] FAULT_INJECTION: forcing a failure. [ 266.681404][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 266.741342][T12127] CPU: 1 UID: 0 PID: 12127 Comm: syz.2.1637 Not tainted syzkaller #0 PREEMPT(full) [ 266.741373][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.741387][T12127] Call Trace: [ 266.741395][T12127] [ 266.741405][T12127] dump_stack_lvl+0x189/0x250 [ 266.741446][T12127] ? __pfx____ratelimit+0x10/0x10 [ 266.741476][T12127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.741506][T12127] ? __pfx__printk+0x10/0x10 [ 266.741534][T12127] ? __pfx___might_resched+0x10/0x10 [ 266.741558][T12127] ? fs_reclaim_acquire+0x7d/0x100 [ 266.741597][T12127] should_fail_ex+0x414/0x560 [ 266.741635][T12127] should_failslab+0xa8/0x100 [ 266.741659][T12127] kmem_cache_alloc_node_noprof+0x77/0x710 [ 266.741690][T12127] ? __alloc_skb+0x112/0x2d0 [ 266.741709][T12127] ? netlink_autobind+0xdb/0x300 [ 266.741737][T12127] __alloc_skb+0x112/0x2d0 [ 266.741762][T12127] netlink_sendmsg+0x5c6/0xb30 [ 266.741795][T12127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.741821][T12127] ? aa_sock_msg_perm+0xf1/0x1d0 [ 266.741854][T12127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.741876][T12127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.741899][T12127] __sock_sendmsg+0x21c/0x270 [ 266.741932][T12127] ____sys_sendmsg+0x505/0x830 [ 266.741963][T12127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.742003][T12127] ? import_iovec+0x74/0xa0 [ 266.742035][T12127] ___sys_sendmsg+0x21f/0x2a0 [ 266.742061][T12127] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.742124][T12127] ? __fget_files+0x2a/0x420 [ 266.742143][T12127] ? __fget_files+0x3a0/0x420 [ 266.742173][T12127] __x64_sys_sendmsg+0x19b/0x260 [ 266.742200][T12127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.742234][T12127] ? __pfx_ksys_write+0x10/0x10 [ 266.742268][T12127] ? do_syscall_64+0xbe/0xfa0 [ 266.742302][T12127] do_syscall_64+0xfa/0xfa0 [ 266.742337][T12127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.742357][T12127] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.742378][T12127] ? clear_bhb_loop+0x60/0xb0 [ 266.742404][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.742432][T12127] RIP: 0033:0x7ff04e18f6c9 [ 266.742451][T12127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.742469][T12127] RSP: 002b:00007ff04f09c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.742492][T12127] RAX: ffffffffffffffda RBX: 00007ff04e3e6090 RCX: 00007ff04e18f6c9 [ 266.742507][T12127] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000008 [ 266.742521][T12127] RBP: 00007ff04f09c090 R08: 0000000000000000 R09: 0000000000000000 [ 266.742533][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.742551][T12127] R13: 00007ff04e3e6128 R14: 00007ff04e3e6090 R15: 00007ffc2a75d818 [ 266.742586][T12127] [ 267.409368][T12146] wg1 speed is unknown, defaulting to 1000 [ 267.895209][T12168] xt_connbytes: Forcing CT accounting to be enabled [ 268.197553][T12186] netlink: 440 bytes leftover after parsing attributes in process `syz.2.1654'. [ 268.223451][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 268.232810][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 269.529899][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1655'. [ 269.539111][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1655'. [ 269.548195][T12181] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1655'. [ 269.698370][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 269.728244][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 269.759707][T12202] netlink: 'syz.1.1660': attribute type 3 has an invalid length. [ 269.938103][T12211] tap0: tun_chr_ioctl cmd 1074025677 [ 269.945036][T12211] tap0: linktype set to 270 [ 270.185119][T12230] team0: Port device team_slave_0 removed [ 270.633216][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. Connection to 10.128.0.142 closed by remote host. [ 270.818930][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 271.975898][ T1031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.046682][ T1031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.131259][ T1031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.196365][ T1031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.279018][ T1031] dummy0: left allmulticast mode [ 272.284614][ T1031] dummy0: left promiscuous mode [ 272.291893][ T1031] bridge0: port 3(dummy0) entered disabled state [ 272.302061][ T1031] bridge_slave_0: left allmulticast mode [ 272.307825][ T1031] bridge_slave_0: left promiscuous mode [ 272.313891][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.491037][ T31] INFO: task udevd:5826 blocked for more than 143 seconds. [ 272.500829][ T31] Not tainted syzkaller #0 [ 272.505885][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.514787][ T31] task:udevd state:D stack:23272 pid:5826 tgid:5826 ppid:1 task_flags:0x400140 flags:0x00080001 [ 272.527154][ T31] Call Trace: [ 272.530467][ T31] [ 272.533531][ T31] __schedule+0x1798/0x4cc0 [ 272.538088][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 272.543754][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 272.549695][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.554637][ T31] ? __pfx___schedule+0x10/0x10 [ 272.559632][ T31] ? schedule+0x91/0x360 [ 272.564107][ T31] schedule+0x165/0x360 [ 272.568302][ T31] schedule_timeout+0x12b/0x270 [ 272.573216][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 272.578626][ T31] ? __pfx_process_timeout+0x10/0x10 [ 272.583992][ T31] ? prepare_to_wait_event+0x437/0x480 [ 272.589649][ T31] nbd_queue_rq+0x662/0xf10 [ 272.594213][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 272.599249][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 272.605383][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 272.610983][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 272.616067][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 272.622135][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 272.627965][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 272.634602][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 272.641584][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 272.646908][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 272.653199][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 272.658539][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 272.663812][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 272.669068][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 272.674725][ T31] ? blk_mq_dispatch_list+0x1a0/0xe00 [ 272.680172][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 272.686010][ T31] ? rcu_is_watching+0x15/0xb0 [ 272.690873][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 272.696300][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 272.701580][ T31] ? blk_mq_submit_bio+0x1a65/0x25b0 [ 272.706919][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 272.712899][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 272.717796][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 272.723237][ T31] __submit_bio+0x2d3/0x5a0 [ 272.727753][ T31] ? __pfx___submit_bio+0x10/0x10 [ 272.732844][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 272.738257][ T31] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 272.744008][ T31] ? bio_associate_blkg+0x6d/0x230 [ 272.749147][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 272.755351][ T31] ? submit_bio_noacct+0xe0c/0x1b80 [ 272.760749][ T31] block_read_full_folio+0x599/0x830 [ 272.766086][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 272.771520][ T31] filemap_read_folio+0x117/0x380 [ 272.776588][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 272.782255][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 272.787833][ T31] ? filemap_add_folio+0x35f/0x540 [ 272.793007][ T31] do_read_cache_folio+0x350/0x590 [ 272.798141][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 272.803760][ T31] read_part_sector+0xb6/0x2b0 [ 272.808550][ T31] adfspart_check_ICS+0xa4/0xa50 [ 272.813546][ T31] ? snprintf+0xda/0x120 [ 272.817805][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 272.823424][ T31] bdev_disk_changed+0x75f/0x14b0 [ 272.828483][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 272.833978][ T31] ? wait_on_inode+0xc0/0x230 [ 272.838676][ T31] blkdev_get_whole+0x380/0x510 [ 272.843594][ T31] bdev_open+0x31e/0xd30 [ 272.847904][ T31] blkdev_open+0x457/0x600 [ 272.852428][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 272.857391][ T31] do_dentry_open+0x953/0x13f0 [ 272.862224][ T31] vfs_open+0x3b/0x340 [ 272.866300][ T31] ? path_openat+0x2ecd/0x3830 [ 272.871116][ T31] path_openat+0x2ee5/0x3830 [ 272.875743][ T31] ? __pfx_path_openat+0x10/0x10 [ 272.880822][ T31] do_filp_open+0x1fa/0x410 [ 272.885387][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.890260][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 272.895395][ T31] ? _raw_spin_unlock+0x28/0x50 [ 272.900291][ T31] ? alloc_fd+0x64c/0x6c0 [ 272.904717][ T31] do_sys_openat2+0x121/0x1c0 [ 272.909439][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.914705][ T31] __x64_sys_openat+0x138/0x170 [ 272.919584][ T31] do_syscall_64+0xfa/0xfa0 [ 272.924214][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.930313][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.936527][ T31] ? clear_bhb_loop+0x60/0xb0 [ 272.941282][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.947210][ T31] RIP: 0033:0x7fcb8e8a7407 [ 272.951749][ T31] RSP: 002b:00007ffc7046e950 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 272.960194][ T31] RAX: ffffffffffffffda RBX: 00007fcb8f05b880 RCX: 00007fcb8e8a7407 [ 272.968412][ T31] RDX: 00000000000a0800 RSI: 0000561fcf4bc320 RDI: ffffffffffffff9c [ 272.976431][ T31] RBP: 0000561fcf4b1910 R08: 0000000000000000 R09: 0000000000000000 [ 272.984540][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561fcf4ea230 [ 272.992773][ T31] R13: 0000561fcf4bf190 R14: 0000000000000000 R15: 0000561fcf4ea230 [ 273.000846][ T31] [ 273.004033][ T31] [ 273.004033][ T31] Showing all locks held in the system: [ 273.013601][ T31] 1 lock held by khungtaskd/31: [ 273.018509][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 273.029240][ T31] 5 locks held by kworker/u8:5/1031: [ 273.034596][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 273.045696][ T31] #1: ffffc9000390fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 273.056377][ T31] #2: ffffffff8f2be6f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 273.065790][ T31] #3: ffffffff8f2cb688 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 273.074958][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 273.085902][ T31] 3 locks held by kworker/u8:6/1148: [ 273.091231][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 273.103126][ T31] #1: ffffc90003c1fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 273.114167][ T31] #2: ffffffff8f2cb688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 273.123246][ T31] 2 locks held by getty/5590: [ 273.127930][ T31] #0: ffff88814e2b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 273.138101][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 273.148259][ T31] 3 locks held by udevd/5826: [ 273.152971][ T31] #0: ffff888143737358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 273.162311][ T31] #1: ffff8880245d9590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 273.171962][ T31] #2: ffff888024d451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 273.181016][ T31] 3 locks held by kworker/1:11/7401: [ 273.186336][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 273.197404][ T31] #1: ffffc9000add7ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 273.208451][ T31] #2: ffffffff8f2cb688 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 273.219094][ T31] [ 273.221515][ T31] ============================================= [ 273.221515][ T31] [ 273.229962][ T31] NMI backtrace for cpu 1 [ 273.229985][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.230021][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.230042][ T31] Call Trace: [ 273.230053][ T31] [ 273.230066][ T31] dump_stack_lvl+0x189/0x250 [ 273.230105][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.230134][ T31] ? __pfx__printk+0x10/0x10 [ 273.230175][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 273.230203][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 273.230230][ T31] ? __pfx__printk+0x10/0x10 [ 273.230256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.230293][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 273.230320][ T31] watchdog+0xf60/0xfa0 [ 273.230348][ T31] ? watchdog+0x1e2/0xfa0 [ 273.230376][ T31] kthread+0x711/0x8a0 [ 273.230408][ T31] ? __pfx_watchdog+0x10/0x10 [ 273.230428][ T31] ? __pfx_kthread+0x10/0x10 [ 273.230458][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.230485][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.230513][ T31] ? __pfx_kthread+0x10/0x10 [ 273.230542][ T31] ret_from_fork+0x4bc/0x870 [ 273.230567][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 273.230598][ T31] ? __switch_to_asm+0x39/0x70 [ 273.230621][ T31] ? __switch_to_asm+0x33/0x70 [ 273.230638][ T31] ? __pfx_kthread+0x10/0x10 [ 273.230673][ T31] ret_from_fork_asm+0x1a/0x30 [ 273.230707][ T31] [ 273.370980][ T31] Sending NMI from CPU 1 to CPUs 0: [ 273.376239][ C0] NMI backtrace for cpu 0 [ 273.376257][ C0] CPU: 0 UID: 0 PID: 1162 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 273.376278][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.376290][ C0] Workqueue: events_unbound toggle_allocation_gate [ 273.376312][ C0] RIP: 0010:__phys_addr+0xf1/0x180 [ 273.376339][ C0] Code: ff 0f 85 9f 00 00 00 e8 0d a5 4a 00 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c0 10 30 d6 8d 48 c1 e8 03 42 80 3c 38 00 <74> 0c 48 c7 c7 10 30 d6 8d e8 01 5a b0 00 48 8b 1d 7a d0 60 0c 4c [ 273.376355][ C0] RSP: 0018:ffffc90003ccf498 EFLAGS: 00000046 [ 273.376370][ C0] RAX: 1ffffffff1bac602 RBX: ffffffff8dd38000 RCX: ffff8880267a5ac0 [ 273.376384][ C0] RDX: 0000000000000000 RSI: ffffffff8dd38000 RDI: ffffffff7fffffff [ 273.376397][ C0] RBP: ffffc90003ccf5b0 R08: ffffffff8e048c5f R09: 1ffffffff1c0918b [ 273.376410][ C0] R10: dffffc0000000000 R11: fffffbfff1c0918c R12: ffffffff8e0485b8 [ 273.376423][ C0] R13: ffffffff8e048500 R14: 000000000dd38000 R15: dffffc0000000000 [ 273.376437][ C0] FS: 0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000 [ 273.376452][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.376464][ C0] CR2: 0000200000000040 CR3: 000000001a060000 CR4: 00000000003526f0 [ 273.376479][ C0] Call Trace: [ 273.376486][ C0] [ 273.376495][ C0] load_new_mm_cr3+0xb1/0x1e0 [ 273.376522][ C0] switch_mm_irqs_off+0x539/0x7b0 [ 273.376551][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 273.376576][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 273.376601][ C0] ? do_raw_spin_lock+0x121/0x290 [ 273.376624][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 273.376652][ C0] unuse_temporary_mm+0x136/0x220 [ 273.376680][ C0] ? __pfx_unuse_temporary_mm+0x10/0x10 [ 273.376707][ C0] ? __text_poke+0x636/0xa10 [ 273.376731][ C0] ? kasan_check_range+0x2b0/0x2c0 [ 273.376748][ C0] ? __text_poke+0x636/0xa10 [ 273.376772][ C0] ? __kmalloc_noprof+0xde/0x7f0 [ 273.376797][ C0] __text_poke+0x6c8/0xa10 [ 273.376823][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 273.376853][ C0] ? __kmalloc_noprof+0xde/0x7f0 [ 273.376877][ C0] ? __pfx___text_poke+0x10/0x10 [ 273.376902][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 273.376928][ C0] smp_text_poke_batch_finish+0xd0f/0x1130 [ 273.376960][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 273.376987][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 273.377022][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 273.377050][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 273.377077][ C0] static_key_enable+0x1a/0x20 [ 273.377101][ C0] toggle_allocation_gate+0xad/0x240 [ 273.377119][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 273.377135][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 273.377159][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 273.377178][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 273.377197][ C0] process_scheduled_works+0xae1/0x17b0 [ 273.377232][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.377260][ C0] worker_thread+0x8a0/0xda0 [ 273.377281][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.377310][ C0] ? __kthread_parkme+0x7b/0x200 [ 273.377336][ C0] kthread+0x711/0x8a0 [ 273.377360][ C0] ? __pfx_worker_thread+0x10/0x10 [ 273.377379][ C0] ? __pfx_kthread+0x10/0x10 [ 273.377404][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.377425][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.377448][ C0] ? __pfx_kthread+0x10/0x10 [ 273.377472][ C0] ret_from_fork+0x4bc/0x870 [ 273.377491][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 273.377513][ C0] ? __switch_to_asm+0x39/0x70 [ 273.377527][ C0] ? __switch_to_asm+0x33/0x70 [ 273.377541][ C0] ? __pfx_kthread+0x10/0x10 [ 273.377565][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.377592][ C0] [ 273.787290][ T1031] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 274.167371][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.178898][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.188595][ T1031] bond0 (unregistering): Released all slaves [ 274.280194][ T1031] bond1 (unregistering): (slave wlan0): Releasing active interface [ 274.289330][ T1031] bond1 (unregistering): Released all slaves [ 274.375996][ T1031] bond2 (unregistering): Released all slaves [ 274.390103][ T1031] bond3 (unregistering): Released all slaves [ 274.473980][ T1031] tipc: Left network mode [ 274.637985][ T1031] hsr_slave_0: left promiscuous mode [ 274.644238][ T1031] hsr_slave_1: left promiscuous mode [ 274.650222][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.658195][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.019656][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 275.055752][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 276.436496][ T1031] bridge_slave_1: left allmulticast mode [ 276.442292][ T1031] bridge_slave_1: left promiscuous mode [ 276.448074][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.457214][ T1031] bridge_slave_0: left allmulticast mode [ 276.463079][ T1031] bridge_slave_0: left promiscuous mode [ 276.468882][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.490206][ T1031] bridge_slave_1: left allmulticast mode [ 276.496161][ T1031] bridge_slave_1: left promiscuous mode [ 276.502116][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.511415][ T1031] bridge_slave_0: left allmulticast mode [ 276.517092][ T1031] bridge_slave_0: left promiscuous mode [ 276.523520][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.547660][ T1031] bridge_slave_1: left allmulticast mode [ 276.553491][ T1031] bridge_slave_1: left promiscuous mode [ 276.559270][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.568417][ T1031] bridge_slave_0: left allmulticast mode [ 276.577897][ T1031] bridge_slave_0: left promiscuous mode [ 276.584097][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.768534][ T1031] batman_adv: batadv0: Removing interface: gretap1 [ 277.206716][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.215653][ T1031] bond_slave_0: left promiscuous mode [ 277.222881][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.232822][ T1031] bond_slave_1: left promiscuous mode [ 277.238645][ T1031] bond0 (unregistering): Released all slaves [ 277.253710][ T1031] bond1 (unregistering): (slave veth3): Releasing active interface [ 277.262498][ T1031] bond1 (unregistering): Released all slaves [ 277.277015][ T1031] bond2 (unregistering): Released all slaves [ 277.494617][ T1031] dvmrp0 (unregistering): left allmulticast mode [ 278.046772][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.055980][ T1031] bond_slave_0: left promiscuous mode [ 278.061654][ T1031] bond_slave_0: left allmulticast mode [ 278.068213][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.077517][ T1031] bond_slave_1: left promiscuous mode [ 278.083414][ T1031] bond_slave_1: left allmulticast mode [ 278.089227][ T1031] bond0 (unregistering): Released all slaves [ 278.185949][ T1031] bond1 (unregistering): Released all slaves [ 278.199737][ T1031] bond2 (unregistering): Released all slaves [ 278.248354][ T1031] bond4 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 278.261240][ T1031] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 278.269725][ T1031] bond4 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 42:c4:44:f1:83:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 278.404565][ T1031] dvmrp0 (unregistering): left allmulticast mode [ 278.862007][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.873402][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.886112][ T1031] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 278.896795][ T1031] bond0 (unregistering): Released all slaves [ 278.989986][ T1031] bond1 (unregistering): (slave bond2): Releasing backup interface [ 278.998581][ T1031] bond2 (unregistering): left promiscuous mode [ 279.005317][ T1031] bond1 (unregistering): Released all slaves [ 279.102999][ T1031] bond2 (unregistering): Released all slaves [ 279.116880][ T1031] bond3 (unregistering): Released all slaves [ 279.207703][ T1031] bond4 (unregistering): (slave veth9): Releasing backup interface [ 279.218000][ T1031] bond4 (unregistering): Released all slaves [ 279.363623][ T1031] : left promiscuous mode [ 279.465221][ T1031] tipc: Left network mode [ 279.481916][ T1031] tipc: Left network mode [ 279.493125][ T1031] tipc: Left network mode [ 279.999977][ T1031] hsr_slave_0: left promiscuous mode [ 280.006863][ T1031] hsr_slave_1: left promiscuous mode [ 280.013111][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.023510][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.034143][ T1031] hsr_slave_0: left promiscuous mode [ 280.040138][ T1031] hsr_slave_1: left promiscuous mode [ 280.046283][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.058317][ T1031] hsr_slave_0: left promiscuous mode [ 280.065157][ T1031] hsr_slave_1: left promiscuous mode [ 280.071230][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.079059][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.425603][ T1031] team_slave_1 (unregistering): left promiscuous mode [ 280.433461][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 280.471023][ T1031] team_slave_0 (unregistering): left promiscuous mode [ 280.478718][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 281.054932][ T1031] team0 (unregistering): Port device team_slave_1 removed