last executing test programs: 3.407834065s ago: executing program 2 (id=896): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002400040027bd7000fddbdf25000000000600040000000000060003000000000006000300000000000ebbb4e650416f4642584f76b8197bd9acda88f7711a5b5560d319f5dce3ad5b3fd2b244c5429a33efdcf56d4a3098ca44310b9dc5e8bab059ffb40fe4176c81098d0eebefdcf20085b6b57a11d7bf4ce2c9097e783c43947d28e6db6040465fdf6a54d4e11a312caa5400d64b9ff7a9de5969b9d38a7560a24d26193da71a7e8100ae188b6be6ced6b9d10007babb0477cdace54ce4f739b57f"], 0x2c}}, 0x4804) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000080)=""/45, 0x2d, 0x0, &(0x7f0000001400)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.215767681s ago: executing program 2 (id=900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000001740)={0xd92, {{0xa, 0x4e20, 0x7fff, @private1, 0x10}}, {{0xa, 0x4e21, 0x5, @mcast1, 0x449a}}}, 0x108) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d4120000000000000029000000030000", 0x2f) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x2, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}}, 0x0) 2.79226914s ago: executing program 2 (id=907): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040020f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.79012181s ago: executing program 3 (id=909): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x0, 0x0, 0x3ff}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000bb00"/17], 0x18}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) r2 = socket(0x11, 0x3, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004097}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b22, &(0x7f0000000040)) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000040), 0x4) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) socket$phonet(0x23, 0x2, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0xa0c4978a4e985d9d, 0x8, 0x5, 0x2, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) 2.6636901s ago: executing program 2 (id=912): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x6, @private2, 0x2}, 0x1c, &(0x7f0000000400), 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x78}}], 0x1, 0x20000800) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000042c0)=0x8, 0x4) 2.460586452s ago: executing program 2 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 2.37418302s ago: executing program 3 (id=916): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x11, 0x7a, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4004051}, 0x8044) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r2}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = socket(0x2, 0x80805, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) sendfile(r7, r5, &(0x7f0000001180)=0xd2a, 0x7) (async) sendfile(r7, r5, &(0x7f0000001180)=0xd2a, 0x7) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4096, &(0x7f0000001040)=0x63ad82c2469e5e14) (async) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4096, &(0x7f0000001040)=0x63ad82c2469e5e14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@mpls_delroute={0x44, 0x19, 0x20, 0x70bd26, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x1, 0xfc, 0x0, 0xff, 0xb, 0x2300}, [@RTA_VIA={0x14, 0x12, {0x3, "49780bc03479c3c4298272adaefd"}}, @RTA_VIA={0x14, 0x12, {0x11, "d9dbf7e1b915376c2d50b4038288"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c801) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r9, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000200)={0xa0000004}) (async) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 2.219164904s ago: executing program 2 (id=918): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) unshare(0x6a040000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)=ANY=[@ANYBLOB="240000001600010a000000000100000002d96d00100022800c00088008abe300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) unshare(0x44000000) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000100)="e72f735b29b71453ab2ccf7bd7b17c70255e9c611f7b01e82f35570999fac7fe960ae4384c66cb91afc039c95f7a224b8af85c09f7caa4b1870439d109718bb372652066899421973c7e37e8f2c6da0bc7e6757fa470633de1d926d271d842dbf03aa0579fdfc9bafef9e5c8c9b1a4ba8471e251652c4795ba76d492730f85ad16fa32f95fb5e5f75a40a68a8bc2273d87d1798bf883e8bb53227d3faa476c41f21abb615eee19763be79ba375b49762dd81a054c27f2c8371ea5a563b930d9d6ce6cfd7432c50f200"/214, 0xd6}, {&(0x7f0000000200)="aa7ccbe2fb221d28f58b1a6fca135d88de600b8b4d5fe97d00f1d12ec5", 0x1d}, {&(0x7f0000000240)="45c3", 0x2}], 0x3}], 0x1, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x492, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x7ff, 0xe, 0x200, 0x40, 0x8, 0x3, 0x12}, 0x9c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r6], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) 1.954522921s ago: executing program 3 (id=921): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000580)=ANY=[@ANYBLOB="94798684", @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f687372000000000800030000000000140002006970766c616e300000000000000000001800018014000200766574683000000000000000000000009000038008000200020000007c0003801c000180040003000900020073797a300000000008000100000002002400018004000300040003000a00020074756e6c3000000004000300050002000000000038000180050002000000000005000200000000000400030006000200ffff0000110002007465616d5f736c6176655f3000000000040003000800020004000000"], 0xf8}}, 0x4040004) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r3, 0x2000}], 0x1, &(0x7f0000000340)={r6, r7+10000000}, &(0x7f0000000440)={[0x8]}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4, 0xb}, {0x7, 0xc}, {0x0, 0x8}}, [""]}, 0x24}}, 0x20040084) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x2, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) r15 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) r17 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r17, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @empty}, {0x6, @local}, 0x2, {0x2, 0x4e22, @remote}, 'veth0_to_team\x00'}) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x0, @remote, 'ip6erspan0\x00'}}, 0x1e) 1.416912709s ago: executing program 4 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f00000002c0)=0x405, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a32000000001400000011000100"], 0x6c}}, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 1.41555412s ago: executing program 0 (id=925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x6, @private2, 0x2}, 0x1c, &(0x7f0000000400), 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x78}}], 0x1, 0x20000800) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000042c0)=0x8, 0x4) 1.292628903s ago: executing program 1 (id=926): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000001000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.194007218s ago: executing program 0 (id=927): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x11, 0x3, 0x2, 0x23, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x18, 0x6, 0x4f, 0x1, 0x20000000}, @sadb_lifetime={0x4, 0x4, 0x3, 0x3696, 0x8, 0xfffffffffffffffc}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_sec_ctx={0x9, 0x18, 0x2, 0x7, 0x3f, "65b103ae35eb0d7500b80f77f97c1c3cc144380a4abb49612a76e7e289b66c1f3f9bd1e5a2e1e3c55764775a46f67098adef8e8789b2c2b1472aaa05abc436"}, @sadb_ident={0x2, 0xa, 0x9a0, 0x0, 0x4}, @sadb_key={0x3, 0x9, 0x60, 0x0, "73ffcf5e79723285be437610"}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2d, 0x3502}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@empty, 0x2c, 0x10, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@loopback, 0x1d, 0x14, 0x4}]}, 0x118}}, 0x8880) r1 = socket(0x0, 0x2, 0x135) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="ab197cec23e38d3990e5e3ed06092d3348ebbd2101c22d8afc32c1948fb1c42be9962005fb4bb9911afec4f8bec0beeddeef343fbea5ffff3edd5a7ed5a07bb59ae0456ef96bde9cc463b34866401029b79e5076f4dbf6010fcd1a50cf8a1cb659b00a6108cc2403bc3343f53ce5b39b556bafab3b5dcc074bd5248e3ce4ab6da7aadc1630667bbfa2381611df1c2a6264a961ef381bbd32c22d2a7e03", 0x9d}, {&(0x7f0000000300)="1e7de1f4da78a84ee1acb810d474892fd81b", 0x12}, {&(0x7f0000000340)="534d049cabf541e0c83cad1d3869f096e7f767a89add8cb5190f232a319c5b4b0f3861c510a96e2b4f0ce3016cb2abccbc77c530a7bd19fe2ab0bfeff97ae1a4619c3d3d62375fce34c5ab3e19c82ebc2e1d525c8dc7e3720ac1749c527dd366fbebf03e1b8a0526408a729c0ea07dc57a2b0666ce4da1b8a5af8e566acae61fba67c9991b02afafcdc4f1b259c75b8ec7f72933694a9895d4a027fe7085ddcf9a671cd0f5a318fa69ef4614c513512e0352f07d2b09db9507956771a31135d8f0aeaeba285382910dcb", 0xca}, {&(0x7f0000000440)="30070fb2b713fdbc6dd27eca6c3520695b2340db6b2684d84a6147697400360fe84e84693d517320b9d7c34416471e917cb15353ebdad49f", 0x38}], 0x4, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x7, [{@multicast2, 0x6}]}, @timestamp={0x44, 0x24, 0x1f, 0x0, 0x1, [0x10000, 0x9, 0x4, 0x4, 0x8, 0x5, 0x8000, 0x8]}, @lsrr={0x83, 0xb, 0x5c, [@dev={0xac, 0x14, 0x14, 0x28}, @empty]}, @generic={0x7, 0x11, "71aaf51f725fe7cbc79c91f5fb70c2"}, @end, @timestamp_addr={0x44, 0x14, 0xac, 0x1, 0x3, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xc}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0x9, [0x80]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xeb, 0x0, 0x9, [0x3]}, @rr={0x7, 0x1b, 0xe0, [@empty, @multicast2, @private=0xa010101, @loopback, @loopback, @empty]}]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xa7, 0x3, 0x0, [{@broadcast, 0x8973}, {@loopback, 0x80000000}]}, @lsrr={0x83, 0xb, 0xd1, [@private=0xa010101, @local]}, @timestamp_addr={0x44, 0x1c, 0xc8, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x1000}, {@multicast2, 0x8001}]}, @lsrr={0x83, 0x7, 0xfa, [@multicast2]}, @noop, @lsrr={0x83, 0x23, 0x36, [@loopback, @private=0xa010102, @remote, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local]}, @ssrr={0x89, 0xf, 0x5a, [@private=0xa010102, @multicast2, @local]}, @timestamp_prespec={0x44, 0x1c, 0x49, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x5}, {@rand_addr=0x64010102, 0x3}]}, @lsrr={0x83, 0x13, 0xb, [@private=0xa010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}]}, @cipso={0x86, 0x1c, 0xfffffffffffffffc, [{0x6, 0x9, "e9c878c8c7e85c"}, {0x1, 0xd, "41ad040c0e06b6a338e55f"}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x1d0}, 0x40000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000940)=@req={0x8, 0x200, 0xfffffc01, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x2820, 0x4e24, 0xfffe, 0x2, 0x0, 0x0, 0x0, r3, 0xee01}, {0x7, 0x1, 0xfff, 0x700b, 0x7, 0x1, 0x6, 0x1}, {0x2, 0x9ea2, 0x800, 0x8000000000000001}, 0xfffffff0, 0x6e6bb5, 0x1, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0xff}, 0x2, @in6=@loopback, 0x3503, 0x1, 0x0, 0x6, 0x4, 0x7, 0x1000}}, 0xe8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x178, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x6000800) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000d40)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000d80)=@req={0x7fff, 0x1, 0xc0c, 0x9}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000dc0)={0x0, 0x5, 0xa5f}, &(0x7f0000000e00)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000e40)={r5, @in6={{0xa, 0x4e21, 0x6, @remote, 0xd88c}}, 0x3, 0x7, 0x400, 0x81, 0x5, 0x56fef093, 0x8}, &(0x7f0000000f00)=0x9c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000f40)={0x3a, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0x8}]}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000f80)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000fc0)={0x92, @multicast1, 0x4e21, 0x2, 'lblc\x00', 0x2, 0x3}, 0x2c) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000001000), &(0x7f0000001040)=0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x7c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x99}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40850}, 0x8080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x6c, r7, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6ef, 0x65}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1361}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3cb}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f00000013c0)="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", 0x1000) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000002440)={@mcast2, 0x4c}) 1.149640754s ago: executing program 1 (id=928): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000012000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 1.05980245s ago: executing program 4 (id=929): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async, rerun: 64) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (rerun: 64) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x9, 0x4, {{0xa, 0x4, 0x3, 0x5, 0x28, 0x66, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x12, 0xfffffffffffffffe, [{0x1, 0xc, "60d501323c9c08ae9cae"}]}]}}}}}) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x100, '\x00', r5, r6, 0x1, 0x4, 0x1}, 0x50) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, 0x0, 0x40) (async) close(r3) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 997.757834ms ago: executing program 1 (id=930): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x209, 0x70bd28, 0x25dfdbfe, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x1}}]}, 0x1c}}, 0x8800) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 922.259958ms ago: executing program 4 (id=931): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r0, 0x20, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a00)=""/56, 0x38}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000900000085000000630000009500000000000000b001b1b9d239fc0d21e0badf93cb6f03201905c3ce99fb782d4b568c4da0abef1fe18c90dd77979c6e606ea77160f678"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 853.871282ms ago: executing program 0 (id=932): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048040) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 853.133973ms ago: executing program 3 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000001740)={0xd92, {{0xa, 0x4e20, 0x7fff, @private1, 0x10}}, {{0xa, 0x4e21, 0x5, @mcast1, 0x449a}}}, 0x108) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x8044) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) close(0x4) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 819.05864ms ago: executing program 1 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x91, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x4040845) 740.304011ms ago: executing program 4 (id=935): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@float={0x10, 0x0, 0x0, 0x10, 0x261a03cadf162b46}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x3, 0x5, 0x200}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0xf}, {0x8, 0x5}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30]}}, &(0x7f0000000340)=""/135, 0x97, 0x87, 0x0, 0x5, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x204, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0xd1ed76241e7c3aae, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 707.374762ms ago: executing program 1 (id=936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x209, 0x70bd28, 0x25dfdbfe, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x1}}]}, 0x1c}}, 0x8800) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) (fail_nth: 4) 648.248565ms ago: executing program 0 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 285.131915ms ago: executing program 0 (id=938): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000590007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 190.241703ms ago: executing program 1 (id=939): r0 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000180)=0x80) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r4, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41100}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r4, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41100}, 0x94) bind$nfc_llcp(r2, &(0x7f0000000340)={0x27, r3, 0x0, 0x1, 0x3, 0x2, "3519ebf599f7c19e940b3ba88c26f1382eb6152d6a13b6b80eee06f70a448495f4d755c8cfad26268aab2b7ad7f277b6cad04be70ca87b62492e00a8c2e9df", 0x9}, 0x60) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x300}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES64=r1, @ANYRESOCT=r0], 0x4c}}, 0x0) 189.426279ms ago: executing program 3 (id=940): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029001200", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 108.611934ms ago: executing program 4 (id=941): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0xf3}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) 108.031319ms ago: executing program 0 (id=942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000dc0)=@newtclass={0x8d0, 0x28, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xf, 0x9}, {0xc, 0x9}}, [@tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0xd, 0xe0}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x870, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x80, 0x2, 0xb, 0x0, 0x7, 0x2}, {0x6, 0x1, 0xcd8f, 0x3bf, 0x0, 0x3}, 0x10001, 0x6f, 0xf, 0xffffffff, 0xb}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x5}, @TCA_HTB_RATE64={0xc, 0x6, 0x100}, @TCA_HTB_RATE64={0xc, 0x6, 0x10000}, @TCA_HTB_CEIL64={0xc, 0x7, 0xb99682a}, @TCA_HTB_CTAB={0x404, 0x3, [0xe, 0x4, 0x9, 0x7f, 0x8, 0xa32, 0x6, 0x7, 0xee4, 0x9, 0xeecc, 0x0, 0x4820, 0x1, 0xfff, 0xc363, 0x6, 0x4, 0x8, 0x81, 0x200, 0xb6, 0xfffffff9, 0x4, 0x3ff, 0x6, 0x22, 0x3959, 0x3, 0xfffffff8, 0x6, 0x4, 0x8d57, 0x0, 0x200, 0x9, 0x6, 0x2, 0x8c9c, 0x7, 0x7, 0x3, 0x80, 0x5, 0x1, 0xe4, 0x1, 0x0, 0x2, 0xcc, 0x0, 0x2, 0x6, 0x1, 0x8, 0x8, 0x819, 0x5, 0x0, 0x4, 0x1, 0x4, 0x3, 0x5, 0x7, 0x1d, 0x101, 0xff, 0x8, 0xa, 0x4, 0xa90, 0x6, 0x9, 0x3, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x7, 0x6, 0xa764, 0x800, 0x2, 0x4, 0x68, 0x4, 0x8, 0x6, 0xfc94, 0x4, 0x64, 0x2de5, 0x7, 0xf, 0x9, 0x7, 0x8, 0x80, 0x3, 0x933, 0x9, 0x9, 0x80000001, 0xd1, 0x400, 0x3, 0x8, 0x1, 0x5, 0x7, 0x10000, 0x49, 0x8, 0x77719c75, 0x7, 0x2, 0x8, 0x7, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x4, 0x7b43, 0x3ff, 0x2, 0x2, 0x4, 0x7, 0x6, 0xc603, 0x6c, 0x8c, 0x8, 0x280000, 0xffffffff, 0x8, 0xfffffff8, 0x2, 0x9, 0x2, 0x5, 0x62d424f2, 0x3b88, 0x6, 0x4, 0x3, 0xd, 0x9, 0x0, 0x1, 0x7, 0xac, 0x0, 0x78c, 0x4, 0x101, 0xa182, 0xa87b, 0x5, 0x4, 0x7f, 0x6, 0x9, 0xc6, 0x0, 0x7, 0x80000001, 0xff, 0x1, 0x7, 0x80000001, 0x81, 0x7, 0x88, 0x800, 0x9, 0x3, 0xffffceec, 0x4, 0x9, 0x8, 0x7, 0x200, 0x0, 0x4, 0x4, 0x40, 0x9, 0x7ff, 0x7a, 0x81, 0x0, 0x0, 0x80, 0x4, 0x8, 0x6, 0x1ff, 0x81, 0x6ee92bc7, 0xa46, 0xf, 0x8, 0x1, 0x0, 0xb, 0xd4d, 0x800, 0x7, 0xf, 0x9796, 0x4, 0x7b, 0x200, 0x33, 0x8, 0xc66, 0x0, 0x6, 0x7, 0x8, 0x6, 0x0, 0x4, 0x3, 0x6544, 0x3, 0x9, 0x1, 0x3, 0x61b, 0x8, 0xba6, 0x3, 0x3ff, 0x6, 0x13a0, 0x3, 0x1, 0x2, 0x7b, 0x2, 0x7f, 0x80, 0x477, 0x180, 0xffff, 0x9, 0xd80, 0x7, 0xc99, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x7, 0x8, 0x101, 0x4, 0x6, 0xbdb, 0xe, 0x6, 0xa4bf, 0x7fff, 0x4, 0x2, 0x4, 0xff, 0x1, 0x6, 0x1, 0x3, 0x3, 0x2, 0xfffffff9, 0x8, 0x401, 0x9, 0x8, 0x4, 0x80000000, 0xffff, 0x0, 0x8, 0x101, 0x3ff, 0x7fff, 0x4, 0x6, 0x5, 0x81, 0x3ff, 0x3, 0x1, 0x7fff, 0x2, 0x6, 0x7, 0x6, 0x5, 0x2, 0xbc76, 0x8, 0x7, 0x2, 0x4, 0x3, 0x1, 0x4e, 0x200, 0x0, 0x1000, 0x2, 0x8, 0x3, 0x10000, 0x3, 0x8, 0x1000, 0x9, 0xab, 0x7f, 0x3, 0x800, 0x7, 0x9, 0x7, 0x8001, 0x1fe0, 0xfffffff9, 0xffffff08, 0x77, 0x8, 0x6, 0xff, 0x8, 0xdee, 0x6, 0x5, 0x6, 0x800, 0x5, 0x87, 0x6, 0x4, 0x1000, 0xc77, 0x0, 0x10, 0x9, 0x3, 0x80000000, 0x4, 0x40, 0xfffff91d, 0xc, 0x8, 0x7fff, 0x6, 0x200, 0x7fff, 0x1, 0x80000001, 0x80, 0x12f, 0x2, 0x4, 0x101, 0x8000, 0xffff8001, 0x1dc, 0x8, 0x100, 0x4, 0x7f, 0x9b, 0x3, 0xe03e, 0x7fffffff, 0xf, 0xfffffdbd, 0xffffffff, 0x3, 0x1, 0x1, 0x69, 0xc, 0x80, 0x83e7, 0x3, 0x8000, 0x2d691fbc, 0x0, 0x80, 0xffff, 0xea62, 0x8, 0x9, 0x6, 0x80000001, 0x7fffffff, 0x2, 0x800, 0x6, 0x647d1f00, 0x3, 0x369, 0x1, 0x1, 0x6b, 0x1d, 0xe, 0xfffffffc, 0x1000, 0x0, 0x879, 0x2, 0x5, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x7, 0xa, 0xbb57, 0x3, 0x10, 0xaa, 0x101, 0x8001, 0x2, 0x1, 0x7, 0x5, 0x31bb, 0x2, 0x10000, 0x7, 0x0, 0x8, 0x4, 0x2, 0x1, 0x3, 0x2, 0x6, 0x3, 0xfe, 0x6, 0x2, 0xf, 0x1, 0x2, 0x1, 0x400, 0x81, 0x10, 0x1, 0x0, 0xffffffd4, 0x80000000, 0x8, 0x3, 0x6, 0x2d6, 0x5, 0x4da9, 0x0, 0x6, 0x0, 0x1ff, 0x80000001, 0xfffffff7, 0xd, 0x8, 0x0, 0x3, 0x8, 0x401, 0x8001, 0x2, 0xfffffeff, 0x6, 0x100, 0x3, 0x400, 0x7, 0xb7, 0x8, 0x9, 0xf0, 0x395, 0xf56d, 0xe9a, 0x0, 0x400, 0x9000, 0x77, 0xffff1992, 0x800, 0x8, 0x1, 0x80000001, 0x1, 0x0, 0x7, 0x0, 0x7, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0xa}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e25, 0x9, @mcast2, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="2c100042d4eba86f20790d1c9b6d092e", 0x10}, {&(0x7f0000000300)="0a68f53536c0114fc00e32cc5e09eb251cd3a94d18f850028644d9e29c42bfdc3c69032d3a52aa6ee43cf098e346628bba01636dcca7c2b285deca8903d58ce56e9128440e5657b7279733e8d610f731de5d56533781206ff86c0d72fd6004b9a4550bcf34ea18a5cc30fa9bd8e60c6734189b60ac66c05c84716d7c5fbc49c98f770164e0a20a71914e7d3090c01db16e3b60abbf02b0aed8b2e2fd60bb29312f755dbb5d35ec6a017bc7db6eca8697e8c569f94e9c2d49f5cb35142c33900ca3c44abec1d80a2bd9c758bc79b82e", 0xcf}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 29.359011ms ago: executing program 3 (id=943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x4040845) (fail_nth: 2) 0s ago: executing program 4 (id=944): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) syz_init_net_socket$ax25(0x3, 0x6, 0xcb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000040)=0xe, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e25, 0x9, @mcast2, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 72.303157][ T5815] cgroup: Unknown subsys name 'net' [ 72.458455][ T5815] cgroup: Unknown subsys name 'cpuset' [ 72.466922][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.856955][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.824309][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.832990][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.842128][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.849814][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.859261][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.867571][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.875932][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.884089][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.895160][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.902594][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.910470][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.923902][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.932196][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.939742][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.948377][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.956938][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.957988][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.971828][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.980282][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.988011][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.996667][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.003933][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.004452][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.042083][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.052228][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.759383][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 78.803049][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.828685][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 78.838911][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 78.919577][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.119900][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.127223][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.134661][ T5826] bridge_slave_0: entered allmulticast mode [ 79.142672][ T5826] bridge_slave_0: entered promiscuous mode [ 79.167444][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.174540][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.182426][ T5827] bridge_slave_0: entered allmulticast mode [ 79.189454][ T5827] bridge_slave_0: entered promiscuous mode [ 79.219770][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.226972][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.234230][ T5826] bridge_slave_1: entered allmulticast mode [ 79.241477][ T5826] bridge_slave_1: entered promiscuous mode [ 79.276412][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.283615][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.290958][ T5827] bridge_slave_1: entered allmulticast mode [ 79.297985][ T5827] bridge_slave_1: entered promiscuous mode [ 79.305906][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.313044][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.320524][ T5828] bridge_slave_0: entered allmulticast mode [ 79.328263][ T5828] bridge_slave_0: entered promiscuous mode [ 79.347067][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.354225][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.361471][ T5842] bridge_slave_0: entered allmulticast mode [ 79.368453][ T5842] bridge_slave_0: entered promiscuous mode [ 79.410794][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.418039][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.425583][ T5828] bridge_slave_1: entered allmulticast mode [ 79.433022][ T5828] bridge_slave_1: entered promiscuous mode [ 79.467886][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.476000][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.483133][ T5842] bridge_slave_1: entered allmulticast mode [ 79.490461][ T5842] bridge_slave_1: entered promiscuous mode [ 79.497294][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.504436][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.511659][ T5846] bridge_slave_0: entered allmulticast mode [ 79.518775][ T5846] bridge_slave_0: entered promiscuous mode [ 79.529044][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.552696][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.573158][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.580791][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.588594][ T5846] bridge_slave_1: entered allmulticast mode [ 79.595905][ T5846] bridge_slave_1: entered promiscuous mode [ 79.606695][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.634357][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.648373][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.695471][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.716319][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.739271][ T5827] team0: Port device team_slave_0 added [ 79.771815][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.784012][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.795975][ T5827] team0: Port device team_slave_1 added [ 79.815533][ T5828] team0: Port device team_slave_0 added [ 79.823162][ T5826] team0: Port device team_slave_0 added [ 79.842749][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.864636][ T5828] team0: Port device team_slave_1 added [ 79.872517][ T5826] team0: Port device team_slave_1 added [ 79.885633][ T5148] Bluetooth: hci1: command tx timeout [ 79.933985][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.941384][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.967718][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.006186][ T5842] team0: Port device team_slave_0 added [ 80.013942][ T5846] team0: Port device team_slave_0 added [ 80.020386][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.027570][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.045444][ T5148] Bluetooth: hci0: command tx timeout [ 80.054233][ T5838] Bluetooth: hci3: command tx timeout [ 80.059489][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.100274][ T5842] team0: Port device team_slave_1 added [ 80.107615][ T5846] team0: Port device team_slave_1 added [ 80.120639][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.127992][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.134997][ T5838] Bluetooth: hci4: command tx timeout [ 80.153984][ T5148] Bluetooth: hci2: command tx timeout [ 80.154875][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.177888][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.185115][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.211431][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.246172][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.253137][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.279276][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.290934][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.298508][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.324467][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.359436][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.366444][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.393136][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.417064][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.424032][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.450347][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.473121][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.480293][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.507063][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.544883][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.551849][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.578344][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.644559][ T5827] hsr_slave_0: entered promiscuous mode [ 80.653256][ T5827] hsr_slave_1: entered promiscuous mode [ 80.688255][ T5846] hsr_slave_0: entered promiscuous mode [ 80.695004][ T5846] hsr_slave_1: entered promiscuous mode [ 80.701418][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 80.708089][ T5846] Cannot create hsr debugfs directory [ 80.746796][ T5826] hsr_slave_0: entered promiscuous mode [ 80.753429][ T5826] hsr_slave_1: entered promiscuous mode [ 80.759811][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 80.765698][ T5826] Cannot create hsr debugfs directory [ 80.812222][ T5828] hsr_slave_0: entered promiscuous mode [ 80.819284][ T5828] hsr_slave_1: entered promiscuous mode [ 80.825683][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 80.831419][ T5828] Cannot create hsr debugfs directory [ 80.905146][ T5842] hsr_slave_0: entered promiscuous mode [ 80.911388][ T5842] hsr_slave_1: entered promiscuous mode [ 80.918262][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 80.924016][ T5842] Cannot create hsr debugfs directory [ 81.427018][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.440859][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.452412][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.463730][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.534591][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.551561][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.568242][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.582720][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.724440][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.762039][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.800755][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.848615][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.906756][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.954483][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.965563][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.966055][ T5838] Bluetooth: hci1: command tx timeout [ 82.001104][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.022927][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.036253][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.081196][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.125286][ T5838] Bluetooth: hci0: command tx timeout [ 82.129552][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.137930][ T5838] Bluetooth: hci3: command tx timeout [ 82.149914][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.157220][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.181779][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.192902][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.205400][ T5838] Bluetooth: hci2: command tx timeout [ 82.208865][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.215753][ T5838] Bluetooth: hci4: command tx timeout [ 82.218121][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.235916][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.248800][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.284460][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.291641][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.320038][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.327196][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.437469][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.523201][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.572298][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.579526][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.629612][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.664600][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.671826][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.721000][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.763064][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.793854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.801090][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.848107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.855291][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.882777][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.917976][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.925141][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.934445][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.941557][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.987396][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.001861][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.052839][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.218515][ T5846] veth0_vlan: entered promiscuous mode [ 83.257445][ T5846] veth1_vlan: entered promiscuous mode [ 83.341458][ T5846] veth0_macvtap: entered promiscuous mode [ 83.387150][ T5846] veth1_macvtap: entered promiscuous mode [ 83.432870][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.502662][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.560710][ T5826] veth0_vlan: entered promiscuous mode [ 83.589547][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.623333][ T5826] veth1_vlan: entered promiscuous mode [ 83.662913][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.670803][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.680709][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.702112][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.720512][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.752588][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.769879][ T5827] veth0_vlan: entered promiscuous mode [ 83.788602][ T5826] veth0_macvtap: entered promiscuous mode [ 83.832743][ T5826] veth1_macvtap: entered promiscuous mode [ 83.874115][ T5827] veth1_vlan: entered promiscuous mode [ 83.900563][ T5842] veth0_vlan: entered promiscuous mode [ 83.914607][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.928852][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.959784][ T5828] veth0_vlan: entered promiscuous mode [ 83.977719][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.008272][ T5842] veth1_vlan: entered promiscuous mode [ 84.019318][ T5827] veth0_macvtap: entered promiscuous mode [ 84.032041][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.042055][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.051477][ T5838] Bluetooth: hci1: command tx timeout [ 84.059988][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.060448][ T5827] veth1_macvtap: entered promiscuous mode [ 84.078725][ T5828] veth1_vlan: entered promiscuous mode [ 84.092334][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.101631][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.122518][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.132455][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.187324][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.205712][ T5838] Bluetooth: hci3: command tx timeout [ 84.206466][ T5148] Bluetooth: hci0: command tx timeout [ 84.222153][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.229785][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.274994][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.285514][ T5148] Bluetooth: hci4: command tx timeout [ 84.289169][ T5838] Bluetooth: hci2: command tx timeout [ 84.305400][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.307695][ T5828] veth0_macvtap: entered promiscuous mode [ 84.323942][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.335862][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.394126][ T5828] veth1_macvtap: entered promiscuous mode [ 84.404304][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.433323][ T5842] veth0_macvtap: entered promiscuous mode [ 84.440547][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.452228][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.470328][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.482222][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.487590][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.502505][ T5842] veth1_macvtap: entered promiscuous mode [ 84.580956][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.642968][ T3461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.665751][ T3461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682383][ T3461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.703738][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 84.706734][ T3461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.723846][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.745372][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.811197][ T3444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820694][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.837336][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.840665][ T3444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.863865][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 84.906636][ T3444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.921588][ T3444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.037737][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.055719][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.174972][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.204351][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.344321][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.395392][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.442715][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.453097][ T5964] ieee802154 phy0 wpan0: encryption failed: -90 [ 85.461366][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.563770][ T5968] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.578071][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 85.609144][ T5968] Bluetooth: MGMT ver 1.23 [ 85.618797][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.631454][ T5966] Zero length message leads to an empty skb [ 85.639203][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.790804][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11'. [ 85.863899][ T5971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.951555][ T5985] netlink: 'syz.2.13': attribute type 39 has an invalid length. [ 86.035110][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.126676][ T5148] Bluetooth: hci1: command tx timeout [ 86.285539][ T5148] Bluetooth: hci3: command tx timeout [ 86.290184][ T5845] Bluetooth: hci0: command tx timeout [ 86.366367][ T5845] Bluetooth: hci4: command tx timeout [ 86.366426][ T5148] Bluetooth: hci2: command tx timeout [ 86.621765][ T6010] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.734346][ T10] cfg80211: failed to load regulatory.db [ 86.810509][ T6012] tipc: Failed to remove unknown binding: 66,1,1/0:485416662/485416664 [ 86.871292][ T6012] tipc: Failed to remove unknown binding: 66,1,1/0:485416662/485416664 [ 86.882806][ T6012] tipc: Failed to remove unknown binding: 66,1,1/0:485416662/485416664 [ 87.151790][ T6029] netlink: 'syz.3.25': attribute type 2 has an invalid length. [ 87.213189][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 87.313343][ T6035] IPVS: length: 52 != 8 [ 87.348733][ T6038] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 87.491385][ T6038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.633136][ T6046] bond1: option ad_user_port_key: invalid value (65535) [ 87.645386][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.654613][ T6046] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 87.696269][ T6046] bond1 (unregistering): Released all slaves [ 87.769098][ T6041] bond1: (slave gretap1): making interface the new active one [ 87.785959][ T6041] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.901788][ T6052] @ÿ: renamed from hsr0 (while UP) [ 88.187603][ T6059] netlink: 256 bytes leftover after parsing attributes in process `syz.1.36'. [ 88.369683][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.419623][ T6068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39'. [ 88.791432][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 88.926879][ T6091] nbd: illegal input index 1685554631 [ 89.133917][ T6097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.192332][ T6097] warning: `syz.4.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.343179][ T6105] netlink: 'syz.0.51': attribute type 2 has an invalid length. [ 89.925954][ T6125] __nla_validate_parse: 4 callbacks suppressed [ 89.925972][ T6125] netlink: 168 bytes leftover after parsing attributes in process `syz.0.59'. [ 89.979510][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.59'. [ 90.269601][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.321462][ T6139] netlink: 1128 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.381771][ T6142] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 90.406464][ T6142] bond1 (unregistering): Released all slaves [ 90.503265][ T6148] netlink: 312 bytes leftover after parsing attributes in process `syz.0.68'. [ 90.593553][ T6153] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 90.687998][ T6153] team0: Port device dummy0 added [ 90.710313][ T6154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.790863][ T6153] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 91.017324][ T6172] Illegal XDP return value 4294967294 on prog (id 31) dev N/A, expect packet loss! [ 91.076644][ T6172] bond1: option arp_validate: invalid value (18446744073491447809) [ 91.091765][ T6172] bond1 (unregistering): Released all slaves [ 91.140746][ T6175] netlink: 'syz.4.73': attribute type 13 has an invalid length. [ 91.465604][ T6182] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 91.509393][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 91.567544][ T6182] syz.0.75 uses obsolete (PF_INET,SOCK_PACKET) [ 91.587420][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.595860][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.744346][ T6194] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 91.801739][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.81'. [ 91.878074][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.900933][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.949835][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 92.076918][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.109840][ T44] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.120532][ T44] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.198731][ T6196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.227550][ T44] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.326115][ T44] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.430238][ T6219] netlink: 3 bytes leftover after parsing attributes in process `syz.0.88'. [ 92.484471][ T6219] 0ªX¹¦À: renamed from caif0 [ 92.544896][ T6219] 0ªX¹¦À: entered allmulticast mode [ 92.561367][ T6219] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 92.759651][ T6237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.918161][ T6243] netlink: 'syz.3.93': attribute type 5 has an invalid length. [ 93.011454][ T6243] batman_adv: batadv0: Adding interface: vxlan0 [ 93.021366][ T6243] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.070694][ T6243] batman_adv: batadv0: Interface activated: vxlan0 [ 93.110406][ T3502] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.138025][ T3502] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.181256][ T3502] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.190435][ T3502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.538461][ T6273] netlink: 'syz.2.100': attribute type 8 has an invalid length. [ 93.602369][ T6273] bond2 (unregistering): Released all slaves [ 93.663803][ T30] audit: type=1800 audit(1764173294.872:2): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.99" name="memory.events" dev="tmpfs" ino=155 res=0 errno=0 [ 94.095820][ T6292] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 94.329085][ T6308] @ÿ: renamed from hsr0 (while UP) [ 94.432207][ T6316] bond2: entered promiscuous mode [ 94.458497][ T6316] bond2: entered allmulticast mode [ 94.630726][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.661359][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.675708][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.686181][ T6331] geneve2: entered promiscuous mode [ 94.696399][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.723494][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.734051][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.745213][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.755842][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.767653][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.793746][ T6330] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 94.984360][ T6344] netlink: zone id is out of range [ 94.991053][ T6344] netlink: zone id is out of range [ 94.996636][ T6344] netlink: zone id is out of range [ 95.003269][ T6344] netlink: zone id is out of range [ 95.010301][ T6344] netlink: zone id is out of range [ 95.229292][ T6357] __nla_validate_parse: 4 callbacks suppressed [ 95.229310][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 95.250611][ T6357] netlink: 56 bytes leftover after parsing attributes in process `syz.4.122'. [ 95.262824][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 95.276217][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 95.560237][ T6367] netlink: 'syz.3.126': attribute type 2 has an invalid length. [ 95.573586][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 95.730817][ T6381] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.750981][ T6383] netlink: 'syz.1.132': attribute type 32 has an invalid length. [ 95.759087][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 95.759231][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 95.768901][ T6383] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 95.828098][ T6385] 0ªX¹¦À: left allmulticast mode [ 95.848030][ T6385] net_ratelimit: 11 callbacks suppressed [ 95.848047][ T6385] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 96.158127][ T6392] bond1: option arp_interval: invalid value (18446744073709551615) [ 96.166362][ T6392] bond1: option arp_interval: allowed values 0 - 2147483647 [ 96.197341][ T6392] bond1 (unregistering): Released all slaves [ 96.231311][ T6399] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.262269][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 96.395986][ T6399] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.533195][ T6417] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 96.568991][ T6417] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 96.594366][ T6420] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 96.617559][ T6420] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 96.735865][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 96.744942][ T6427] netlink: 'syz.1.146': attribute type 31 has an invalid length. [ 97.053925][ T6448] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 97.139439][ T6447] ªªªªªª: renamed from wg2 (while UP) [ 97.291226][ T6457] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 97.373742][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'. [ 97.630733][ T6477] ªªªªªª: renamed from wg2 [ 97.656241][ T6485] netlink: 'syz.3.164': attribute type 3 has an invalid length. [ 97.714252][ T6485] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 97.929909][ T6495] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.231728][ T6535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.244059][ T6573] IPVS: length: 8 != 435837819464 [ 100.479274][ T6585] __nla_validate_parse: 3 callbacks suppressed [ 100.479290][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 100.502511][ T6584] tipc: Invalid UDP bearer configuration [ 100.502567][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 100.518136][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 132.767205][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773556][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.664557][ T6648] IPv6: sit2: Disabled Multicast RS [ 190.684695][ T6648] sit2: entered promiscuous mode [ 190.703696][ T6648] sit2: entered allmulticast mode [ 190.777719][ T6660] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 190.808144][ T6658] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 190.881328][ T6660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.889514][ T6658] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 190.906330][ T6668] vlan2: entered allmulticast mode [ 190.922692][ T6668] veth1: entered allmulticast mode [ 190.946389][ T6666] tipc: Started in network mode [ 190.951404][ T6666] tipc: Node identity 9e2fbab563b9, cluster identity 4711 [ 190.968211][ T6666] tipc: Enabled bearer , priority 0 [ 190.990175][ T6666] syzkaller0: entered promiscuous mode [ 191.010432][ T6666] syzkaller0: entered allmulticast mode [ 191.088457][ T6666] tipc: Resetting bearer [ 191.132166][ T6665] tipc: Resetting bearer [ 191.170638][ T6665] tipc: Disabling bearer [ 191.536322][ T6691] netlink: 200 bytes leftover after parsing attributes in process `syz.4.222'. [ 191.566681][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 191.705657][ T6700] netlink: 72 bytes leftover after parsing attributes in process `syz.0.224'. [ 192.212832][ T6709] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 192.242198][ T6709] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 192.527367][ T6727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.227'. [ 192.998602][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 192.998778][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 193.226802][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 193.227525][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 193.262546][ T6740] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 193.301890][ T6747] x_tables: duplicate underflow at hook 3 [ 193.334881][ T6743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 193.515472][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.523216][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.548877][ T6758] bridge0: entered allmulticast mode [ 193.754067][ T6769] bridge_slave_1: left allmulticast mode [ 193.760131][ T6769] bridge_slave_1: left promiscuous mode [ 193.770513][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.824647][ T6769] bridge_slave_0: left allmulticast mode [ 193.830727][ T6769] bridge_slave_0: left promiscuous mode [ 193.837198][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.089614][ T6784] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 194.116440][ T6784] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 194.214592][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221068][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.388735][ T6800] x_tables: duplicate entry at hook 1 [ 194.437683][ T6801] macsec1: entered promiscuous mode [ 194.476270][ T6801] macsec1: entered allmulticast mode [ 195.068143][ T6831] geneve0: entered promiscuous mode [ 195.811402][ T6879] v: renamed from vlan0 (while UP) [ 195.919217][ T6888] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 196.781571][ T6918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.945509][ T6911] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 196.965354][ T6929] __nla_validate_parse: 13 callbacks suppressed [ 196.965372][ T6929] netlink: 92 bytes leftover after parsing attributes in process `syz.4.281'. [ 197.257221][ T6930] batman_adv: batadv0: Adding interface: macsec2 [ 197.314873][ T6930] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.430554][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.501739][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.551145][ T6930] batman_adv: batadv0: Interface activated: macsec2 [ 198.231129][ T6955] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 198.469605][ T6967] xt_hashlimit: max too large, truncated to 1048576 [ 199.020395][ T6976] syzkaller0: entered promiscuous mode [ 199.034936][ T6976] syzkaller0: entered allmulticast mode [ 199.604051][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 199.915659][ T7002] netlink: 312 bytes leftover after parsing attributes in process `syz.3.297'. [ 200.815226][ T7004] batadv1: entered promiscuous mode [ 200.999349][ T7012] netlink: 184 bytes leftover after parsing attributes in process `syz.2.300'. [ 201.008611][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 201.192272][ T7028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.349214][ T7033] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 201.360358][ T7033] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 201.400584][ T7034] syzkaller0: entered promiscuous mode [ 201.409215][ T6984] Bluetooth: hci4: command 0x0406 tx timeout [ 201.415458][ T6984] Bluetooth: hci1: command 0x0406 tx timeout [ 201.417925][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 201.422085][ T6984] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.427896][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.433653][ T7034] syzkaller0: entered allmulticast mode [ 201.536962][ T7034] tipc: Started in network mode [ 201.544457][ T7034] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 201.554084][ T7034] tipc: Enabling of bearer rejected, failed to enable media [ 201.833046][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.0.309'. [ 201.873551][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.881778][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.957339][ T7054] netlink: 76 bytes leftover after parsing attributes in process `syz.0.309'. [ 202.000939][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 202.011986][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.019300][ T7054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.026877][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.034007][ T7054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.060266][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 202.066181][ T7058] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 202.088654][ T7054] netlink: 52 bytes leftover after parsing attributes in process `syz.0.309'. [ 202.137950][ T7058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.145524][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.154081][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.219826][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 202.252543][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 202.277449][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 202.481646][ T7080] gretap0: entered promiscuous mode [ 202.519528][ T7080] macsec1: entered promiscuous mode [ 202.547045][ T7080] macsec1: entered allmulticast mode [ 202.560369][ T7080] gretap0: entered allmulticast mode [ 202.589966][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 202.605872][ T7080] gretap0: left allmulticast mode [ 202.609329][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.312'. [ 202.621507][ T7080] gretap0: left promiscuous mode [ 202.837498][ T7097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.001198][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 203.016394][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 203.029825][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 203.059467][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 203.068668][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'. [ 203.088235][ T7109] netlink: del zone limit has 4 unknown bytes [ 203.271630][ T7111] bond2: left promiscuous mode [ 203.525473][ T7113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.629502][ T7102] infiniband syz2: set active [ 203.635537][ T5946] vxcan1 speed is unknown, defaulting to 1000 [ 203.655257][ T7102] infiniband syz2: added vxcan1 [ 203.988191][ T7102] RDS/IB: syz2: added [ 203.992883][ T7102] smc: adding ib device syz2 with port count 1 [ 204.024304][ T7129] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 204.059377][ T7102] smc: ib device syz2 port 1 has no pnetid [ 204.113937][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 204.125093][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 204.410223][ T7146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.483935][ T7146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.583936][ T7139] tipc: Enabled bearer , priority 0 [ 204.600406][ T7148] erspan0: entered promiscuous mode [ 204.741868][ T7149] syzkaller0: entered promiscuous mode [ 204.755121][ T7149] syzkaller0: entered allmulticast mode [ 204.761823][ T7149] tipc: Resetting bearer [ 204.794252][ T7143] vxcan1 speed is unknown, defaulting to 1000 [ 204.832644][ T7157] syzkaller0: entered promiscuous mode [ 204.850709][ T7157] syzkaller0: entered allmulticast mode [ 204.897959][ T7157] tipc: Started in network mode [ 204.920269][ T7157] tipc: Node identity de8cd9ac79a8, cluster identity 4711 [ 204.944042][ T7157] tipc: Enabled bearer , priority 0 [ 204.988436][ T7155] tipc: Resetting bearer [ 205.059585][ T7155] tipc: Disabling bearer [ 205.270891][ T3502] tipc: Resetting bearer [ 205.287868][ T7137] tipc: Resetting bearer [ 206.448993][ T7137] tipc: Disabling bearer [ 206.459466][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 206.464656][ T5903] tipc: Node number set to 1 [ 207.153293][ T7205] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.159986][ T7205] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.199396][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 207.992970][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 208.140278][ T3502] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 208.302342][ T7259] __nla_validate_parse: 4 callbacks suppressed [ 208.302361][ T7259] netlink: 280 bytes leftover after parsing attributes in process `syz.1.367'. [ 208.345698][ T7259] netlink: 280 bytes leftover after parsing attributes in process `syz.1.367'. [ 208.711756][ T7102] vxcan1 speed is unknown, defaulting to 1000 [ 209.504011][ T7310] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 209.545293][ T7310] bridge1: entered allmulticast mode [ 209.626318][ T7317] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2302 [ 209.733979][ T7320] erspan0: left promiscuous mode [ 209.752165][ T7320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.895448][ T7326] netlink: 92 bytes leftover after parsing attributes in process `syz.1.383'. [ 210.237123][ T7328] batadv_slave_0: entered promiscuous mode [ 210.310300][ T7328] batman_adv: batadv0: Adding interface: macsec1 [ 210.354776][ T7328] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.490549][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.582551][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.693428][ T7328] batman_adv: batadv0: Interface activated: macsec1 [ 211.028877][ T7339] syzkaller0: entered promiscuous mode [ 211.034388][ T7339] syzkaller0: entered allmulticast mode [ 211.281002][ T7374] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 211.483566][ T7382] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 211.515333][ T7382] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 211.910793][ T7402] netlink: 92 bytes leftover after parsing attributes in process `syz.2.404'. [ 212.064427][ T7409] ip6gre1: entered promiscuous mode [ 212.161198][ T7404] batadv_slave_0: entered promiscuous mode [ 212.259166][ T7404] batman_adv: batadv0: Adding interface: macsec1 [ 212.341992][ T7404] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.392136][ T7404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.403278][ T7404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.457919][ T7404] batman_adv: batadv0: Interface activated: macsec1 [ 212.480681][ T7429] netlink: 'syz.4.409': attribute type 6 has an invalid length. [ 212.766731][ T7433] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 212.784948][ T7433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.895201][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 212.957670][ T7441] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 212.967692][ T7441] macvtap1: entered promiscuous mode [ 212.977066][ T7448] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 213.009121][ T7448] netlink: 140 bytes leftover after parsing attributes in process `syz.0.413'. [ 213.106681][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 213.269014][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 213.307852][ T7464] veth1_macvtap: left promiscuous mode [ 213.833740][ T7483] vxcan1 speed is unknown, defaulting to 1000 [ 213.918765][ T7499] netlink: 92 bytes leftover after parsing attributes in process `syz.0.425'. [ 214.372167][ T7514] veth0_vlan: entered allmulticast mode [ 214.809605][ T7533] netlink: 44 bytes leftover after parsing attributes in process `syz.2.432'. [ 214.859885][ T7533] netlink: 43 bytes leftover after parsing attributes in process `syz.2.432'. [ 214.902283][ T7532] netlink: 'syz.1.433': attribute type 12 has an invalid length. [ 214.911973][ T7533] netlink: 'syz.2.432': attribute type 6 has an invalid length. [ 214.921842][ T7533] netlink: 'syz.2.432': attribute type 5 has an invalid length. [ 214.947973][ T7533] netlink: 43 bytes leftover after parsing attributes in process `syz.2.432'. [ 215.017474][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 215.223542][ T7540] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 215.274108][ T7548] macvlan2: entered promiscuous mode [ 215.283089][ T7548] macvlan2: entered allmulticast mode [ 215.292923][ T7548] bond2: entered promiscuous mode [ 215.298109][ T7548] bridge2: entered promiscuous mode [ 215.304536][ T7548] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.333422][ T7548] bond2: left promiscuous mode [ 215.338368][ T7548] bridge2: left promiscuous mode [ 215.592291][ T7570] IPVS: length: 132 != 8 [ 215.623250][ T7570] pimreg: entered allmulticast mode [ 215.848055][ T7570] pimreg: left allmulticast mode [ 216.067599][ T7586] vxcan1 speed is unknown, defaulting to 1000 [ 216.138128][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 216.333856][ T7593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.412307][ T7597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.446301][ T7597] bond1: (slave sit4): The slave device specified does not support setting the MAC address [ 216.480703][ T7597] bond1: (slave sit4): Error -95 calling set_mac_address [ 216.562977][ T7588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.620628][ T7600] syzkaller1: entered promiscuous mode [ 216.627849][ T7600] syzkaller1: entered allmulticast mode [ 216.725664][ T7588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.784857][ T7590] vxcan1 speed is unknown, defaulting to 1000 [ 217.034905][ T7588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.352663][ T7588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.531015][ T7632] vxcan1 speed is unknown, defaulting to 1000 [ 217.720083][ T3461] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.778228][ T7634] trusted_key: syz.1.453 sent an empty control message without MSG_MORE. [ 217.865648][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 217.865745][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 218.048510][ T7649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.157690][ T7652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.183297][ T7652] bond2: (slave sit4): The slave device specified does not support setting the MAC address [ 218.207651][ T7662] netlink: 'syz.4.455': attribute type 2 has an invalid length. [ 218.216899][ T7652] bond2: (slave sit4): Error -95 calling set_mac_address [ 218.307249][ T44] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.350231][ T3502] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.366299][ T7656] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.570316][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.010725][ T7678] vxcan1 speed is unknown, defaulting to 1000 [ 219.256977][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 219.647606][ T7692] vxcan1 speed is unknown, defaulting to 1000 [ 221.179476][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'. [ 221.617433][ T7770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.322303][ T7784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.008851][ T7820] FAULT_INJECTION: forcing a failure. [ 223.008851][ T7820] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.084597][ T7820] CPU: 1 UID: 0 PID: 7820 Comm: syz.1.482 Not tainted syzkaller #0 PREEMPT(full) [ 223.084624][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.084642][ T7820] Call Trace: [ 223.084649][ T7820] [ 223.084657][ T7820] dump_stack_lvl+0x189/0x250 [ 223.084700][ T7820] ? __pfx____ratelimit+0x10/0x10 [ 223.084721][ T7820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.084756][ T7820] ? __pfx__printk+0x10/0x10 [ 223.084775][ T7820] ? __might_fault+0xb0/0x130 [ 223.084814][ T7820] should_fail_ex+0x414/0x560 [ 223.084847][ T7820] _copy_from_user+0x2d/0xb0 [ 223.084872][ T7820] ___sys_sendmsg+0x158/0x2a0 [ 223.084899][ T7820] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.084961][ T7820] ? __fget_files+0x2a/0x420 [ 223.084979][ T7820] ? __fget_files+0x3a0/0x420 [ 223.085008][ T7820] __x64_sys_sendmsg+0x19b/0x260 [ 223.085034][ T7820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.085068][ T7820] ? __pfx_ksys_write+0x10/0x10 [ 223.085107][ T7820] ? do_syscall_64+0xbe/0xfa0 [ 223.085133][ T7820] do_syscall_64+0xfa/0xfa0 [ 223.085153][ T7820] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.085175][ T7820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.085195][ T7820] ? clear_bhb_loop+0x60/0xb0 [ 223.085219][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.085238][ T7820] RIP: 0033:0x7fa59818f749 [ 223.085263][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.085279][ T7820] RSP: 002b:00007fa5990e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.085306][ T7820] RAX: ffffffffffffffda RBX: 00007fa5983e6090 RCX: 00007fa59818f749 [ 223.085321][ T7820] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 223.085334][ T7820] RBP: 00007fa5990e8090 R08: 0000000000000000 R09: 0000000000000000 [ 223.085346][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.085358][ T7820] R13: 00007fa5983e6128 R14: 00007fa5983e6090 R15: 00007ffd8e818048 [ 223.085398][ T7820] [ 223.691018][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 223.749508][ T7847] veth3: entered promiscuous mode [ 223.783083][ T7843] vxcan1 speed is unknown, defaulting to 1000 [ 223.790679][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 223.812510][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 223.852960][ T7853] : entered promiscuous mode [ 224.363026][ T7874] bond0: entered promiscuous mode [ 224.373140][ T7874] bond_slave_0: entered promiscuous mode [ 224.380222][ T7874] bond_slave_1: entered promiscuous mode [ 224.387782][ T7883] FAULT_INJECTION: forcing a failure. [ 224.387782][ T7883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.407130][ T7883] CPU: 1 UID: 0 PID: 7883 Comm: syz.4.499 Not tainted syzkaller #0 PREEMPT(full) [ 224.407158][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.407169][ T7883] Call Trace: [ 224.407177][ T7883] [ 224.407185][ T7883] dump_stack_lvl+0x189/0x250 [ 224.407216][ T7883] ? __pfx____ratelimit+0x10/0x10 [ 224.407239][ T7883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.407265][ T7883] ? __pfx__printk+0x10/0x10 [ 224.407298][ T7883] should_fail_ex+0x414/0x560 [ 224.407333][ T7883] _copy_to_user+0x31/0xb0 [ 224.407360][ T7883] simple_read_from_buffer+0xe1/0x170 [ 224.407394][ T7883] proc_fail_nth_read+0x1b3/0x220 [ 224.407423][ T7883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.407451][ T7883] ? rw_verify_area+0x2a6/0x4d0 [ 224.407476][ T7883] ? __lock_acquire+0xab9/0xd20 [ 224.407493][ T7883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.407519][ T7883] vfs_read+0x200/0xa30 [ 224.407545][ T7883] ? fdget_pos+0x247/0x320 [ 224.407568][ T7883] ? __pfx___mutex_lock+0x10/0x10 [ 224.407592][ T7883] ? __pfx_vfs_read+0x10/0x10 [ 224.407620][ T7883] ? __fget_files+0x2a/0x420 [ 224.407644][ T7883] ? __fget_files+0x3a0/0x420 [ 224.407660][ T7883] ? __fget_files+0x2a/0x420 [ 224.407688][ T7883] ksys_read+0x145/0x250 [ 224.407718][ T7883] ? __pfx_ksys_read+0x10/0x10 [ 224.407748][ T7883] ? do_syscall_64+0xbe/0xfa0 [ 224.407775][ T7883] do_syscall_64+0xfa/0xfa0 [ 224.407795][ T7883] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.407817][ T7883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.407836][ T7883] ? clear_bhb_loop+0x60/0xb0 [ 224.407859][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.407877][ T7883] RIP: 0033:0x7f2a0558e15c [ 224.407894][ T7883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 224.407925][ T7883] RSP: 002b:00007f2a063c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.407943][ T7883] RAX: ffffffffffffffda RBX: 00007f2a057e6090 RCX: 00007f2a0558e15c [ 224.407955][ T7883] RDX: 000000000000000f RSI: 00007f2a063c80a0 RDI: 0000000000000005 [ 224.407966][ T7883] RBP: 00007f2a063c8090 R08: 0000000000000000 R09: 0000000000000000 [ 224.407976][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.407986][ T7883] R13: 00007f2a057e6128 R14: 00007f2a057e6090 R15: 00007fffbe380308 [ 224.408017][ T7883] [ 224.408766][ T7874] batadv0: entered promiscuous mode [ 224.652855][ T7874] debugfs: 'hsr0' already exists in 'hsr' [ 224.658961][ T7874] Cannot create hsr debugfs directory [ 224.665559][ T7874] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 224.989550][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 225.187206][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.357384][ T7918] netlink: 312 bytes leftover after parsing attributes in process `syz.3.511'. [ 225.746511][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 225.768213][ T7930] netlink: 'syz.3.516': attribute type 2 has an invalid length. [ 225.795218][ T7930] : entered promiscuous mode [ 225.820170][ T7930] syzkaller1: entered promiscuous mode [ 225.834825][ T7930] syzkaller1: entered allmulticast mode [ 225.845594][ T7930] Cannot find del_set index 2 as target [ 226.341046][ T7949] vxcan1 speed is unknown, defaulting to 1000 [ 226.387591][ T7946] block nbd0: server does not support multiple connections per device. [ 226.425568][ T7946] block nbd0: shutting down sockets [ 226.747231][ T7963] policy can only be matched on NF_INET_PRE_ROUTING [ 226.747257][ T7963] unable to load match [ 226.934458][ T7969] @ÿ: renamed from hsr0 (while UP) [ 227.528865][ T7983] tipc: Started in network mode [ 227.533924][ T7983] tipc: Node identity 3660a548b917, cluster identity 4711 [ 227.541648][ T7983] tipc: Enabled bearer , priority 0 [ 227.549581][ T7988] syzkaller0: entered promiscuous mode [ 227.558974][ T7988] syzkaller0: entered allmulticast mode [ 227.819170][ T8008] netlink: 'syz.4.541': attribute type 39 has an invalid length. [ 228.684985][ T7992] tipc: Resetting bearer [ 228.776058][ T7992] tipc: Disabling bearer [ 229.026248][ T5837] tipc: Node number set to 2406982984 [ 229.087164][ T8024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.546'. [ 229.152747][ T8014] vxcan1 speed is unknown, defaulting to 1000 [ 229.200141][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.207411][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.215811][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.223000][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.315852][ T8030] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 229.558158][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.612595][ T8038] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.636731][ T8038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.718819][ T8041] @ÿ: renamed from hsr0 (while UP) [ 231.300338][ T8088] syzkaller0: entered promiscuous mode [ 231.346025][ T8088] syzkaller0: entered allmulticast mode [ 231.423036][ T8095] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 231.445844][ T8095] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 231.513901][ T8095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.556'. [ 232.196230][ T8114] netlink: 92 bytes leftover after parsing attributes in process `syz.0.559'. [ 233.115995][ T8126] batadv_slave_0: entered promiscuous mode [ 233.124491][ T8126] batman_adv: batadv0: Adding interface: macsec1 [ 233.132121][ T8126] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.161437][ T8126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.185023][ T8126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.207125][ T8126] batman_adv: batadv0: Interface activated: macsec1 [ 233.306036][ T8133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.562'. [ 233.461555][ T8138] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 233.479282][ T8138] netlink: 228 bytes leftover after parsing attributes in process `syz.0.563'. [ 233.515228][ T8145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.563'. [ 233.726326][ T8155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.565'. [ 233.729545][ T8151] tipc: Enabled bearer , priority 0 [ 233.746294][ T8151] syzkaller0: entered promiscuous mode [ 233.751885][ T8151] syzkaller0: entered allmulticast mode [ 233.827617][ T2153] IPVS: starting estimator thread 0... [ 233.944315][ T8158] IPVS: Scheduler module ip_vs_sip not found [ 233.972564][ T8160] IPVS: using max 26 ests per chain, 62400 per kthread [ 234.043442][ T8166] tipc: Resetting bearer [ 234.296768][ T8158] IPVS: length: 141 != 8 [ 234.536681][ T8149] tipc: Resetting bearer [ 234.575237][ T8149] tipc: Disabling bearer [ 235.250515][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 235.626661][ T8207] netlink: 192 bytes leftover after parsing attributes in process `syz.2.580'. [ 235.701905][ T8204] vxcan1 speed is unknown, defaulting to 1000 [ 235.881931][ T8225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.911859][ T8229] netlink: 68 bytes leftover after parsing attributes in process `syz.3.587'. [ 236.072437][ T8227] pimreg3: entered allmulticast mode [ 236.111120][ T8221] vxcan1 speed is unknown, defaulting to 1000 [ 236.338817][ T8246] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 236.357974][ T8246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.962574][ T8268] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 237.117172][ T8268] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.450787][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.600'. [ 237.452339][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.594'. [ 237.563923][ T8292] tipc: Enabled bearer , priority 0 [ 237.649793][ T8290] tipc: Disabling bearer [ 237.804007][ T8305] netlink: 312 bytes leftover after parsing attributes in process `syz.2.604'. [ 238.093142][ T8319] syzkaller1: entered promiscuous mode [ 238.098790][ T8319] syzkaller1: entered allmulticast mode [ 238.186253][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 239.016280][ T8367] xt_policy: output policy not valid in PREROUTING and INPUT [ 240.228191][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 240.238344][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.245890][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.653751][ T8445] netlink: 'syz.0.639': attribute type 15 has an invalid length. [ 240.770270][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 240.793491][ T8457] bond3: option updelay: invalid value (18446744073709551615) [ 240.812028][ T8463] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 240.822253][ T8457] bond3: option updelay: allowed values 0 - 2147483647 [ 240.833639][ T8464] netlink: 312 bytes leftover after parsing attributes in process `syz.1.642'. [ 240.835516][ T8457] bond3 (unregistering): Released all slaves [ 240.899647][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 240.960513][ T8451] vxcan1 speed is unknown, defaulting to 1000 [ 241.667104][ T8504] xt_policy: output policy not valid in PREROUTING and INPUT [ 242.070892][ T8512] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 242.233259][ T8524] batadv1: entered promiscuous mode [ 242.303770][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 242.305031][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.665'. [ 242.363953][ T8531] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 242.376844][ T8531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.642217][ T8536] vxcan1 speed is unknown, defaulting to 1000 [ 242.751575][ T8547] __nla_validate_parse: 1 callbacks suppressed [ 242.751594][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.669'. [ 242.863586][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 243.284847][ T8535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.290993][ T8535] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 243.305900][ T8565] veth1_to_bond: entered allmulticast mode [ 243.312199][ T8565] veth1_to_bond: entered promiscuous mode [ 243.350228][ T8535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.439307][ T8535] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 243.472014][ T8535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.482720][ T8535] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 243.493344][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 243.548579][ T8535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.562177][ T8552] syz.1.669 (8552) used greatest stack depth: 17832 bytes left [ 243.573857][ T8535] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 243.759622][ T8579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 244.058217][ T8564] veth1_to_bond: left promiscuous mode [ 244.068565][ T8564] veth1_to_bond: left allmulticast mode [ 244.471683][ T8603] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 244.495170][ T8603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.695878][ T8611] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 244.759500][ T8610] netlink: 312 bytes leftover after parsing attributes in process `syz.0.681'. [ 244.790102][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 244.893261][ T8617] batman_adv: batadv0: Adding interface: ipvlan2 [ 244.907293][ T8617] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.995511][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.015530][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.025935][ T8617] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 245.307203][ T8631] netlink: 312 bytes leftover after parsing attributes in process `syz.2.685'. [ 245.345538][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 245.517102][ T8639] bond0: Device is already in use. [ 245.525341][ T8641] sctp: [Deprecated]: syz.4.689 (pid 8641) Use of int in maxseg socket option. [ 245.525341][ T8641] Use struct sctp_assoc_value instead [ 245.547226][ T8639] veth0: entered promiscuous mode [ 245.565629][ T8638] veth0: left promiscuous mode [ 245.668735][ T8650] bond0: option packets_per_slave: invalid value (2103706) [ 245.688417][ T8650] bond0: option packets_per_slave: allowed values 0 - 65535 [ 245.857569][ T8651] bond3: option primary_reselect: invalid value (6) [ 245.877903][ T8651] bond3 (unregistering): Released all slaves [ 246.368435][ T8676] sctp: [Deprecated]: syz.1.697 (pid 8676) Use of int in max_burst socket option deprecated. [ 246.368435][ T8676] Use struct sctp_assoc_value instead [ 246.423409][ T8685] netlink: 312 bytes leftover after parsing attributes in process `syz.0.700'. [ 246.670642][ T8697] xt_hashlimit: max too large, truncated to 1048576 [ 246.928338][ T8708] netlink: 92 bytes leftover after parsing attributes in process `syz.2.706'. [ 247.367862][ T8723] bond3: Invalid ad_actor_system MAC address. [ 247.373796][ T8728] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 247.374347][ T8723] bond3: option ad_actor_system: invalid value (7) [ 247.393053][ T8723] bond3 (unregistering): Released all slaves [ 247.408147][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.715834][ T8740] FAULT_INJECTION: forcing a failure. [ 247.715834][ T8740] name failslab, interval 1, probability 0, space 0, times 0 [ 247.761787][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.4.713 Not tainted syzkaller #0 PREEMPT(full) [ 247.761815][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.761827][ T8740] Call Trace: [ 247.761835][ T8740] [ 247.761844][ T8740] dump_stack_lvl+0x189/0x250 [ 247.761878][ T8740] ? __pfx____ratelimit+0x10/0x10 [ 247.761901][ T8740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.761944][ T8740] ? __pfx__printk+0x10/0x10 [ 247.761983][ T8740] ? __pfx___might_resched+0x10/0x10 [ 247.762005][ T8740] ? fs_reclaim_acquire+0x7d/0x100 [ 247.762031][ T8740] should_fail_ex+0x414/0x560 [ 247.762067][ T8740] should_failslab+0xa8/0x100 [ 247.762089][ T8740] __kmalloc_noprof+0xcb/0x7f0 [ 247.762117][ T8740] ? tomoyo_encode+0x28b/0x550 [ 247.762153][ T8740] tomoyo_encode+0x28b/0x550 [ 247.762190][ T8740] tomoyo_realpath_from_path+0x58d/0x5d0 [ 247.762224][ T8740] ? tomoyo_domain+0xd9/0x130 [ 247.762250][ T8740] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 247.762276][ T8740] tomoyo_path_number_perm+0x1e8/0x5a0 [ 247.762305][ T8740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.762376][ T8740] ? __fget_files+0x2a/0x420 [ 247.762401][ T8740] ? __fget_files+0x3a0/0x420 [ 247.762428][ T8740] ? __fget_files+0x2a/0x420 [ 247.762452][ T8740] security_file_ioctl+0xcb/0x2d0 [ 247.762480][ T8740] __se_sys_ioctl+0x47/0x170 [ 247.762509][ T8740] do_syscall_64+0xfa/0xfa0 [ 247.762530][ T8740] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.762554][ T8740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.762573][ T8740] ? clear_bhb_loop+0x60/0xb0 [ 247.762598][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.762618][ T8740] RIP: 0033:0x7f2a0558f749 [ 247.762636][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.762653][ T8740] RSP: 002b:00007f2a063e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.762674][ T8740] RAX: ffffffffffffffda RBX: 00007f2a057e5fa0 RCX: 00007f2a0558f749 [ 247.762689][ T8740] RDX: 0000200000000140 RSI: 0000000000008923 RDI: 0000000000000008 [ 247.762703][ T8740] RBP: 00007f2a063e9090 R08: 0000000000000000 R09: 0000000000000000 [ 247.762716][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.762727][ T8740] R13: 00007f2a057e6038 R14: 00007f2a057e5fa0 R15: 00007fffbe380308 [ 247.762763][ T8740] [ 247.762783][ T8740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.768769][ T8742] ªªªªªª: renamed from wg2 (while UP) [ 248.204405][ T8751] vxcan1 speed is unknown, defaulting to 1000 [ 248.344591][ T8763] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 248.352419][ T8763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.362433][ T8765] __nla_validate_parse: 1 callbacks suppressed [ 248.362449][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.720'. [ 248.414120][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 248.440436][ T8765] bond3: entered promiscuous mode [ 248.734138][ T8776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.723'. [ 248.983220][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 249.380653][ T8801] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 249.439347][ T8801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.463668][ T8804] netlink: 280 bytes leftover after parsing attributes in process `syz.4.732'. [ 249.505850][ T8804] netlink: 'syz.4.732': attribute type 5 has an invalid length. [ 249.540604][ T8804] ip6erspan0: entered promiscuous mode [ 249.845696][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 249.953730][ T8831] netlink: 92 bytes leftover after parsing attributes in process `syz.3.737'. [ 250.646821][ T8853] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 250.702045][ T8853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.938194][ T8862] tipc: Invalid UDP bearer configuration [ 250.938250][ T8862] tipc: Enabling of bearer rejected, failed to enable media [ 250.962917][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 251.027285][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 251.088577][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 251.249005][ T8875] netlink: 'syz.4.755': attribute type 10 has an invalid length. [ 251.298474][ T8875] dummy0: entered promiscuous mode [ 251.336125][ T8875] bridge0: port 3(dummy0) entered blocking state [ 251.342635][ T8875] bridge0: port 3(dummy0) entered disabled state [ 251.394489][ T8885] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 251.426522][ T8885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.445102][ T8875] dummy0: entered allmulticast mode [ 251.512100][ T8875] bridge0: port 3(dummy0) entered blocking state [ 251.518756][ T8875] bridge0: port 3(dummy0) entered forwarding state [ 252.101156][ T8906] batadv1: entered promiscuous mode [ 252.239530][ T8912] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 252.436322][ T8914] vxcan1 speed is unknown, defaulting to 1000 [ 252.545616][ T8919] tipc: Started in network mode [ 252.562431][ T8922] sock: sock_timestamping_bind_phc: sock not bind to device [ 252.574088][ T8919] tipc: Node identity c69b232cabee, cluster identity 4711 [ 252.593512][ T8919] tipc: Enabled bearer , priority 0 [ 252.626839][ T8920] syzkaller0: entered promiscuous mode [ 252.644961][ T8920] syzkaller0: entered allmulticast mode [ 252.908245][ T8920] tipc: Resetting bearer [ 252.990315][ T8939] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 253.007285][ T8939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.597322][ T8951] tipc: Enabled bearer , priority 0 [ 253.639467][ T8918] tipc: Resetting bearer [ 253.712209][ T8918] tipc: Disabling bearer [ 253.779012][ T2153] tipc: Node number set to 1836393260 [ 253.841167][ T8951] tipc: Disabling bearer [ 254.122010][ T8975] xt_policy: output policy not valid in PREROUTING and INPUT [ 254.313882][ T8980] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 254.330275][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.339584][ T8982] __nla_validate_parse: 2 callbacks suppressed [ 254.339599][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.782'. [ 254.609403][ T8987] syz.2.783 (8987) used obsolete PPPIOCDETACH ioctl [ 254.871020][ T8998] FAULT_INJECTION: forcing a failure. [ 254.871020][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 254.884172][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz.3.786 Not tainted syzkaller #0 PREEMPT(full) [ 254.884198][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.884209][ T8998] Call Trace: [ 254.884217][ T8998] [ 254.884225][ T8998] dump_stack_lvl+0x189/0x250 [ 254.884263][ T8998] ? __pfx____ratelimit+0x10/0x10 [ 254.884284][ T8998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.884309][ T8998] ? __pfx__printk+0x10/0x10 [ 254.884327][ T8998] ? __pfx___might_resched+0x10/0x10 [ 254.884348][ T8998] ? fs_reclaim_acquire+0x7d/0x100 [ 254.884368][ T8998] should_fail_ex+0x414/0x560 [ 254.884400][ T8998] should_failslab+0xa8/0x100 [ 254.884419][ T8998] __kmalloc_cache_noprof+0x6f/0x6f0 [ 254.884445][ T8998] ? __request_module+0x2b5/0x5e0 [ 254.884470][ T8998] __request_module+0x2b5/0x5e0 [ 254.884489][ T8998] ? __pfx___request_module+0x10/0x10 [ 254.884510][ T8998] ? __pfx___request_module+0x10/0x10 [ 254.884533][ T8998] ? apparmor_capable+0x137/0x1b0 [ 254.884566][ T8998] ? dev_load+0x21/0x1f0 [ 254.884589][ T8998] dev_ioctl+0x59f/0x1150 [ 254.884614][ T8998] sock_do_ioctl+0x22c/0x300 [ 254.884644][ T8998] ? __pfx_sock_do_ioctl+0x10/0x10 [ 254.884689][ T8998] sock_ioctl+0x576/0x790 [ 254.884715][ T8998] ? __pfx_sock_ioctl+0x10/0x10 [ 254.884744][ T8998] ? __fget_files+0x3a0/0x420 [ 254.884760][ T8998] ? __fget_files+0x2a/0x420 [ 254.884781][ T8998] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.884801][ T8998] ? __pfx_sock_ioctl+0x10/0x10 [ 254.884825][ T8998] __se_sys_ioctl+0xfc/0x170 [ 254.884852][ T8998] do_syscall_64+0xfa/0xfa0 [ 254.884873][ T8998] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.884894][ T8998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.884913][ T8998] ? clear_bhb_loop+0x60/0xb0 [ 254.884937][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.884954][ T8998] RIP: 0033:0x7efd0218f749 [ 254.884971][ T8998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.884986][ T8998] RSP: 002b:00007efd003f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.885005][ T8998] RAX: ffffffffffffffda RBX: 00007efd023e5fa0 RCX: 00007efd0218f749 [ 254.885019][ T8998] RDX: 0000200000000140 RSI: 0000000000008923 RDI: 0000000000000008 [ 254.885031][ T8998] RBP: 00007efd003f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.885042][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.885052][ T8998] R13: 00007efd023e6038 R14: 00007efd023e5fa0 R15: 00007ffceda5e078 [ 254.885083][ T8998] [ 255.221225][ T9004] tipc: Enabling of bearer rejected, failed to enable media [ 255.233563][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 255.257627][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 255.397325][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 255.422623][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'. [ 255.427971][ T9014] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 255.471121][ T9014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.651016][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.657823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.828850][ T9012] netlink: 'syz.3.792': attribute type 9 has an invalid length. [ 255.942923][ T9036] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 255.975468][ T9036] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 256.151324][ T9048] tipc: Enabled bearer , priority 0 [ 256.186991][ T9048] syzkaller0: entered promiscuous mode [ 256.196443][ T9048] syzkaller0: entered allmulticast mode [ 256.231738][ T9048] tipc: Resetting bearer [ 256.239234][ T9050] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 256.261362][ T9050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.270653][ T9046] tipc: Resetting bearer [ 256.297073][ T9046] tipc: Disabling bearer [ 256.328490][ T9053] netlink: 312 bytes leftover after parsing attributes in process `syz.2.807'. [ 256.697945][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.810081][ T9070] netlink: 96 bytes leftover after parsing attributes in process `syz.1.812'. [ 256.862212][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.813'. [ 257.047512][ T9083] netlink: 'syz.1.817': attribute type 4 has an invalid length. [ 257.086932][ T9085] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 257.183884][ T9089] @ÿÿÿ: renamed from hsr0 (while UP) [ 257.315889][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.821'. [ 257.356368][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 258.125827][ T9127] FAULT_INJECTION: forcing a failure. [ 258.125827][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.130465][ T9128] erspan0: entered promiscuous mode [ 258.146057][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.1.832 Not tainted syzkaller #0 PREEMPT(full) [ 258.146083][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.146094][ T9127] Call Trace: [ 258.146102][ T9127] [ 258.146109][ T9127] dump_stack_lvl+0x189/0x250 [ 258.146142][ T9127] ? __pfx____ratelimit+0x10/0x10 [ 258.146162][ T9127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.146187][ T9127] ? __pfx__printk+0x10/0x10 [ 258.146207][ T9127] ? __might_fault+0xb0/0x130 [ 258.146245][ T9127] should_fail_ex+0x414/0x560 [ 258.146280][ T9127] _copy_from_user+0x2d/0xb0 [ 258.146304][ T9127] ___sys_recvmsg+0x12e/0x510 [ 258.146332][ T9127] ? __pfx____sys_recvmsg+0x10/0x10 [ 258.146378][ T9127] ? __fget_files+0x3a0/0x420 [ 258.146406][ T9127] do_recvmmsg+0x307/0x770 [ 258.146437][ T9127] ? __pfx_do_recvmmsg+0x10/0x10 [ 258.146471][ T9127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.146508][ T9127] __x64_sys_recvmmsg+0x190/0x240 [ 258.146533][ T9127] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 258.146562][ T9127] ? do_syscall_64+0xbe/0xfa0 [ 258.146589][ T9127] do_syscall_64+0xfa/0xfa0 [ 258.146609][ T9127] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.146630][ T9127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.146649][ T9127] ? clear_bhb_loop+0x60/0xb0 [ 258.146672][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.146690][ T9127] RIP: 0033:0x7fa59818f749 [ 258.146707][ T9127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.146723][ T9127] RSP: 002b:00007fa599109038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.146744][ T9127] RAX: ffffffffffffffda RBX: 00007fa5983e5fa0 RCX: 00007fa59818f749 [ 258.146758][ T9127] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000004 [ 258.146770][ T9127] RBP: 00007fa599109090 R08: 0000000000000000 R09: 0000000000000000 [ 258.146781][ T9127] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001 [ 258.146793][ T9127] R13: 00007fa5983e6038 R14: 00007fa5983e5fa0 R15: 00007ffd8e818048 [ 258.146827][ T9127] [ 258.147039][ T9128] erspan0: left promiscuous mode [ 258.614555][ T9145] net_ratelimit: 5 callbacks suppressed [ 258.614572][ T9145] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 258.687294][ T9149] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 258.704416][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.736350][ T9151] openvswitch: netlink: Flow key attr not present in new flow. [ 258.757855][ T9151] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 258.764342][ T9151] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 259.096175][ T9167] FAULT_INJECTION: forcing a failure. [ 259.096175][ T9167] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 259.112763][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.2.848 Not tainted syzkaller #0 PREEMPT(full) [ 259.112790][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.112801][ T9167] Call Trace: [ 259.112808][ T9167] [ 259.112816][ T9167] dump_stack_lvl+0x189/0x250 [ 259.112847][ T9167] ? __pfx____ratelimit+0x10/0x10 [ 259.112869][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.112895][ T9167] ? __pfx__printk+0x10/0x10 [ 259.112917][ T9167] ? fs_reclaim_acquire+0x7d/0x100 [ 259.112945][ T9167] should_fail_ex+0x414/0x560 [ 259.112978][ T9167] prepare_alloc_pages+0x213/0x610 [ 259.113003][ T9167] __alloc_frozen_pages_noprof+0x123/0x370 [ 259.113026][ T9167] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.113053][ T9167] ? policy_nodemask+0x27c/0x720 [ 259.113069][ T9167] ? __lock_acquire+0xab9/0xd20 [ 259.113093][ T9167] alloc_pages_mpol+0x232/0x4a0 [ 259.113117][ T9167] vma_alloc_folio_noprof+0xe4/0x200 [ 259.113138][ T9167] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 259.113170][ T9167] folio_prealloc+0x30/0x180 [ 259.113200][ T9167] __handle_mm_fault+0x2a8b/0x5400 [ 259.113239][ T9167] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.113292][ T9167] ? find_vma+0xe7/0x160 [ 259.113316][ T9167] ? __pfx_find_vma+0x10/0x10 [ 259.113346][ T9167] handle_mm_fault+0x40a/0x8e0 [ 259.113384][ T9167] do_user_addr_fault+0x764/0x1380 [ 259.113421][ T9167] exc_page_fault+0x82/0x100 [ 259.113445][ T9167] asm_exc_page_fault+0x26/0x30 [ 259.113464][ T9167] RIP: 0010:put_cmsg+0x1d8/0x5f0 [ 259.113492][ T9167] Code: 63 f3 0f 84 9e 00 00 00 49 8d 6e f0 0f 1f 44 00 00 e8 ec a2 9b f8 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c5 4c 0f 47 e8 0f 01 cb <4d> 89 75 00 8b 44 24 08 41 89 45 08 8b 44 24 0c 41 89 45 0c 49 83 [ 259.113507][ T9167] RSP: 0018:ffffc9000c117100 EFLAGS: 00050283 [ 259.113525][ T9167] RAX: 00007ffffffff000 RBX: 0000000000000040 RCX: ffff88807a051e40 [ 259.113539][ T9167] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000081 [ 259.113551][ T9167] RBP: 0000000000000030 R08: ffffc9000c1171a0 R09: 1ffff1100b201e44 [ 259.113564][ T9167] R10: dffffc0000000000 R11: ffffed100b201e45 R12: dffffc0000000000 [ 259.113578][ T9167] R13: 0000200000001f80 R14: 0000000000000040 R15: ffffc9000c1171a0 [ 259.113621][ T9167] put_cmsg_scm_timestamping64+0x15b/0x1b0 [ 259.113650][ T9167] ? __pfx_put_cmsg_scm_timestamping64+0x10/0x10 [ 259.113684][ T9167] ? __might_fault+0xb0/0x130 [ 259.113721][ T9167] __sock_recv_timestamp+0x6c6/0x1070 [ 259.113766][ T9167] ? __pfx___sock_recv_timestamp+0x10/0x10 [ 259.113810][ T9167] ? __skb_datagram_iter+0x61d/0x990 [ 259.113833][ T9167] ? sock_def_error_report+0x22/0x390 [ 259.113862][ T9167] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 259.113887][ T9167] ? rcu_is_watching+0x15/0xb0 [ 259.113922][ T9167] ? skb_copy_datagram_iter+0xc5/0x230 [ 259.113952][ T9167] ipv6_recv_error+0x425/0x1490 [ 259.113989][ T9167] ? __pfx_ipv6_recv_error+0x10/0x10 [ 259.114010][ T9167] ? up_write+0x1c4/0x420 [ 259.114031][ T9167] ? aa_label_sk_perm+0x4cd/0x630 [ 259.114064][ T9167] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 259.114098][ T9167] udpv6_recvmsg+0x1f2/0x1590 [ 259.114139][ T9167] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 259.114165][ T9167] ? aa_sk_perm+0x81e/0x950 [ 259.114191][ T9167] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 259.114207][ T9167] inet6_recvmsg+0x1ee/0x6b0 [ 259.114233][ T9167] ? __pfx_aa_sk_perm+0x10/0x10 [ 259.114263][ T9167] ? __lock_acquire+0xab9/0xd20 [ 259.114285][ T9167] ? __pfx_inet6_recvmsg+0x10/0x10 [ 259.114315][ T9167] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 259.114333][ T9167] ? security_socket_recvmsg+0x7e/0x2e0 [ 259.114356][ T9167] sock_recvmsg+0x105/0x270 [ 259.114389][ T9167] ____sys_recvmsg+0x1c9/0x460 [ 259.114419][ T9167] ? __pfx_____sys_recvmsg+0x10/0x10 [ 259.114459][ T9167] ? import_iovec+0x74/0xa0 [ 259.114485][ T9167] ___sys_recvmsg+0x1b5/0x510 [ 259.114515][ T9167] ? __pfx____sys_recvmsg+0x10/0x10 [ 259.114568][ T9167] ? __fget_files+0x3a0/0x420 [ 259.114598][ T9167] do_recvmmsg+0x307/0x770 [ 259.114628][ T9167] ? __pfx_do_recvmmsg+0x10/0x10 [ 259.114668][ T9167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.114707][ T9167] __x64_sys_recvmmsg+0x190/0x240 [ 259.114733][ T9167] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 259.114762][ T9167] ? do_syscall_64+0xbe/0xfa0 [ 259.114788][ T9167] do_syscall_64+0xfa/0xfa0 [ 259.114808][ T9167] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.114830][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.114849][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 259.114873][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.114892][ T9167] RIP: 0033:0x7faec638f749 [ 259.114908][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.114925][ T9167] RSP: 002b:00007faec7280038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 259.114944][ T9167] RAX: ffffffffffffffda RBX: 00007faec65e5fa0 RCX: 00007faec638f749 [ 259.114958][ T9167] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000004 [ 259.114971][ T9167] RBP: 00007faec7280090 R08: 0000000000000000 R09: 0000000000000000 [ 259.114983][ T9167] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001 [ 259.114995][ T9167] R13: 00007faec65e6038 R14: 00007faec65e5fa0 R15: 00007ffeaf5a3b18 [ 259.115028][ T9167] [ 259.644659][ T9172] __nla_validate_parse: 5 callbacks suppressed [ 259.650949][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 259.659862][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 259.668799][ T9172] netlink: 58 bytes leftover after parsing attributes in process `syz.3.850'. [ 259.873800][ T9184] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 259.881505][ T9184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.975803][ T9189] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 260.141638][ T9195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.369120][ T9204] pim6reg99999999: entered allmulticast mode [ 260.380499][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 260.471063][ T9207] FAULT_INJECTION: forcing a failure. [ 260.471063][ T9207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.486734][ T9207] CPU: 1 UID: 0 PID: 9207 Comm: syz.3.861 Not tainted syzkaller #0 PREEMPT(full) [ 260.486761][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.486772][ T9207] Call Trace: [ 260.486780][ T9207] [ 260.486788][ T9207] dump_stack_lvl+0x189/0x250 [ 260.486817][ T9207] ? __pfx____ratelimit+0x10/0x10 [ 260.486839][ T9207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.486862][ T9207] ? __pfx__printk+0x10/0x10 [ 260.486892][ T9207] should_fail_ex+0x414/0x560 [ 260.486922][ T9207] _copy_to_user+0x31/0xb0 [ 260.486958][ T9207] simple_read_from_buffer+0xe1/0x170 [ 260.486990][ T9207] proc_fail_nth_read+0x1b3/0x220 [ 260.487015][ T9207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.487040][ T9207] ? rw_verify_area+0x2a6/0x4d0 [ 260.487062][ T9207] ? __lock_acquire+0xab9/0xd20 [ 260.487077][ T9207] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.487104][ T9207] vfs_read+0x200/0xa30 [ 260.487129][ T9207] ? fdget_pos+0x247/0x320 [ 260.487150][ T9207] ? __pfx___mutex_lock+0x10/0x10 [ 260.487173][ T9207] ? __pfx_vfs_read+0x10/0x10 [ 260.487199][ T9207] ? __fget_files+0x2a/0x420 [ 260.487222][ T9207] ? __fget_files+0x3a0/0x420 [ 260.487238][ T9207] ? __fget_files+0x2a/0x420 [ 260.487266][ T9207] ksys_read+0x145/0x250 [ 260.487296][ T9207] ? __pfx_ksys_read+0x10/0x10 [ 260.487327][ T9207] ? do_syscall_64+0xbe/0xfa0 [ 260.487353][ T9207] do_syscall_64+0xfa/0xfa0 [ 260.487374][ T9207] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.487397][ T9207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.487416][ T9207] ? clear_bhb_loop+0x60/0xb0 [ 260.487438][ T9207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.487456][ T9207] RIP: 0033:0x7efd0218e15c [ 260.487473][ T9207] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.487488][ T9207] RSP: 002b:00007efd003f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.487507][ T9207] RAX: ffffffffffffffda RBX: 00007efd023e5fa0 RCX: 00007efd0218e15c [ 260.487520][ T9207] RDX: 000000000000000f RSI: 00007efd003f60a0 RDI: 0000000000000005 [ 260.487530][ T9207] RBP: 00007efd003f6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.487541][ T9207] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001 [ 260.487551][ T9207] R13: 00007efd023e6038 R14: 00007efd023e5fa0 R15: 00007ffceda5e078 [ 260.487584][ T9207] [ 260.731335][ T9211] netlink: 'syz.1.860': attribute type 13 has an invalid length. [ 261.045049][ T9229] netlink: 92 bytes leftover after parsing attributes in process `syz.0.866'. [ 261.099111][ T9220] vxcan1 speed is unknown, defaulting to 1000 [ 261.752694][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.871'. [ 261.817320][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 262.241562][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'. [ 262.665712][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 262.695919][ T9290] gretap0: entered promiscuous mode [ 262.701274][ T9290] vlan3: entered promiscuous mode [ 262.800794][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.881'. [ 263.604499][ T9318] tipc: Enabled bearer , priority 0 [ 263.622709][ T9318] syzkaller0: entered promiscuous mode [ 263.633285][ T9318] syzkaller0: entered allmulticast mode [ 263.682407][ T9320] net_ratelimit: 4 callbacks suppressed [ 263.682423][ T9320] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 263.861249][ T9327] tipc: Resetting bearer [ 263.904290][ T9316] tipc: Resetting bearer [ 263.951053][ T9316] tipc: Disabling bearer [ 264.753968][ T9360] __nla_validate_parse: 4 callbacks suppressed [ 264.753986][ T9360] netlink: 312 bytes leftover after parsing attributes in process `syz.3.904'. [ 264.760271][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 265.384998][ T9369] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 265.819322][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 265.934542][ T9415] vxcan1 speed is unknown, defaulting to 1000 [ 266.279436][ T9430] xt_policy: output policy not valid in PREROUTING and INPUT [ 266.524139][ T9431] syzkaller0: entered promiscuous mode [ 266.535932][ T9431] syzkaller0: entered allmulticast mode [ 266.964938][ T9417] vxcan1 speed is unknown, defaulting to 1000 [ 267.025957][ T9465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'. [ 267.119921][ T9472] FAULT_INJECTION: forcing a failure. [ 267.119921][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 267.142939][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.1.936 Not tainted syzkaller #0 PREEMPT(full) [ 267.142964][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.142974][ T9472] Call Trace: [ 267.142982][ T9472] [ 267.142989][ T9472] dump_stack_lvl+0x189/0x250 [ 267.143019][ T9472] ? __pfx____ratelimit+0x10/0x10 [ 267.143039][ T9472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.143063][ T9472] ? __pfx__printk+0x10/0x10 [ 267.143076][ T9472] ? kmalloc_reserve+0xbd/0x290 [ 267.143100][ T9472] ? __lock_acquire+0xab9/0xd20 [ 267.143126][ T9472] should_fail_ex+0x414/0x560 [ 267.143159][ T9472] should_failslab+0xa8/0x100 [ 267.143180][ T9472] kmem_cache_alloc_noprof+0x74/0x6e0 [ 267.143206][ T9472] ? skb_clone+0x212/0x3a0 [ 267.143231][ T9472] skb_clone+0x212/0x3a0 [ 267.143258][ T9472] __netlink_deliver_tap+0x404/0x850 [ 267.143295][ T9472] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.143320][ T9472] netlink_deliver_tap+0x19c/0x1b0 [ 267.143344][ T9472] netlink_unicast+0x7fa/0x9e0 [ 267.143374][ T9472] ? __pfx_netlink_unicast+0x10/0x10 [ 267.143397][ T9472] ? netlink_sendmsg+0x642/0xb30 [ 267.143418][ T9472] ? skb_put+0x11b/0x210 [ 267.143443][ T9472] netlink_sendmsg+0x805/0xb30 [ 267.143476][ T9472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.143504][ T9472] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.143542][ T9472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.143561][ T9472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.143585][ T9472] __sock_sendmsg+0x21c/0x270 [ 267.143617][ T9472] ____sys_sendmsg+0x505/0x830 [ 267.143646][ T9472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.143679][ T9472] ? import_iovec+0x74/0xa0 [ 267.143707][ T9472] ___sys_sendmsg+0x21f/0x2a0 [ 267.143733][ T9472] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.143795][ T9472] ? __fget_files+0x2a/0x420 [ 267.143812][ T9472] ? __fget_files+0x3a0/0x420 [ 267.143842][ T9472] __x64_sys_sendmsg+0x19b/0x260 [ 267.143868][ T9472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.143906][ T9472] ? __pfx_ksys_write+0x10/0x10 [ 267.143938][ T9472] ? do_syscall_64+0xbe/0xfa0 [ 267.143963][ T9472] do_syscall_64+0xfa/0xfa0 [ 267.143981][ T9472] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.144003][ T9472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.144021][ T9472] ? clear_bhb_loop+0x60/0xb0 [ 267.144042][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.144059][ T9472] RIP: 0033:0x7fa59818f749 [ 267.144075][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.144090][ T9472] RSP: 002b:00007fa599109038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.144109][ T9472] RAX: ffffffffffffffda RBX: 00007fa5983e5fa0 RCX: 00007fa59818f749 [ 267.144121][ T9472] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 267.144132][ T9472] RBP: 00007fa599109090 R08: 0000000000000000 R09: 0000000000000000 [ 267.144143][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.144154][ T9472] R13: 00007fa5983e6038 R14: 00007fa5983e5fa0 R15: 00007ffd8e818048 [ 267.144185][ T9472] [ 267.487201][ T9470] tipc: Enabling of bearer rejected, failed to enable media [ 267.743029][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 267.772861][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 267.844324][ T9494] FAULT_INJECTION: forcing a failure. [ 267.844324][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 267.858167][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.3.943 Not tainted syzkaller #0 PREEMPT(full) [ 267.858194][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.858205][ T9494] Call Trace: [ 267.858213][ T9494] [ 267.858221][ T9494] dump_stack_lvl+0x189/0x250 [ 267.858253][ T9494] ? __pfx____ratelimit+0x10/0x10 [ 267.858276][ T9494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.858302][ T9494] ? __pfx__printk+0x10/0x10 [ 267.858328][ T9494] ? __pfx___might_resched+0x10/0x10 [ 267.858348][ T9494] ? fs_reclaim_acquire+0x7d/0x100 [ 267.858369][ T9494] should_fail_ex+0x414/0x560 [ 267.858403][ T9494] should_failslab+0xa8/0x100 [ 267.858425][ T9494] __kmalloc_cache_noprof+0x6f/0x6f0 [ 267.858453][ T9494] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.858474][ T9494] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 267.858505][ T9494] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 267.858547][ T9494] mptcp_sendmsg_fastopen+0x17d/0x580 [ 267.858582][ T9494] mptcp_sendmsg+0x1774/0x1980 [ 267.858603][ T9494] ? __pfx___might_resched+0x10/0x10 [ 267.858640][ T9494] ? aa_sk_perm+0x81e/0x950 [ 267.858670][ T9494] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.858694][ T9494] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 267.858725][ T9494] ? inet6_sendmsg+0x101/0x120 [ 267.858755][ T9494] __sock_sendmsg+0xe5/0x270 [ 267.858787][ T9494] ____sys_sendmsg+0x505/0x830 [ 267.858817][ T9494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.858850][ T9494] ? import_iovec+0x74/0xa0 [ 267.858878][ T9494] ___sys_sendmsg+0x21f/0x2a0 [ 267.858904][ T9494] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.858960][ T9494] ? __fget_files+0x2a/0x420 [ 267.858975][ T9494] ? __fget_files+0x3a0/0x420 [ 267.859001][ T9494] __x64_sys_sendmsg+0x19b/0x260 [ 267.859028][ T9494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.859062][ T9494] ? __pfx_ksys_write+0x10/0x10 [ 267.859092][ T9494] ? do_syscall_64+0xbe/0xfa0 [ 267.859115][ T9494] do_syscall_64+0xfa/0xfa0 [ 267.859134][ T9494] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.859152][ T9494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.859171][ T9494] ? clear_bhb_loop+0x60/0xb0 [ 267.859192][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.859209][ T9494] RIP: 0033:0x7efd0218f749 [ 267.859227][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.859243][ T9494] RSP: 002b:00007efd003f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.859263][ T9494] RAX: ffffffffffffffda RBX: 00007efd023e5fa0 RCX: 00007efd0218f749 [ 267.859278][ T9494] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 267.859290][ T9494] RBP: 00007efd003f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.859301][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.859311][ T9494] R13: 00007efd023e6038 R14: 00007efd023e5fa0 R15: 00007ffceda5e078 [ 267.859344][ T9494] [ 267.859453][ T9494] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 268.144507][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.3.943 Not tainted syzkaller #0 PREEMPT(full) [ 268.153692][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.163744][ T9494] RIP: 0010:__tcp_select_window+0x824/0x1320 [ 268.169726][ T9494] Code: ff ff ff 44 89 f1 d3 e0 89 c1 f7 d1 41 01 cc 41 21 c4 e9 a9 00 00 00 e8 da 10 01 f8 e9 9c 00 00 00 e8 d0 10 01 f8 44 89 e0 99 7c 24 1c 41 29 d4 48 bb 00 00 00 00 00 fc ff df e9 80 00 00 00 [ 268.189325][ T9494] RSP: 0018:ffffc9000b5bf3a0 EFLAGS: 00010293 [ 268.195383][ T9494] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802eef1e40 [ 268.203342][ T9494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.211300][ T9494] RBP: ffffc9000b5bf490 R08: ffff888025f01a43 R09: 1ffff11004be0348 [ 268.219261][ T9494] R10: dffffc0000000000 R11: ffffed1004be0349 R12: 0000000000000000 [ 268.227220][ T9494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.235178][ T9494] FS: 00007efd003f66c0(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 268.244094][ T9494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.250753][ T9494] CR2: 00007fbdec725e9c CR3: 00000000286d4000 CR4: 00000000003526f0 [ 268.258716][ T9494] Call Trace: [ 268.261991][ T9494] [ 268.264927][ T9494] ? __pfx___tcp_select_window+0x10/0x10 [ 268.270569][ T9494] __tcp_transmit_skb+0xbc7/0x3aa0 [ 268.275683][ T9494] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 268.281228][ T9494] ? read_tsc+0x9/0x20 [ 268.285289][ T9494] ? ktime_get+0x1d2/0x200 [ 268.289713][ T9494] tcp_send_active_reset+0x2d1/0x5b0 [ 268.294989][ T9494] mptcp_do_fastclose+0x286/0x390 [ 268.300011][ T9494] mptcp_disconnect+0x238/0x730 [ 268.304852][ T9494] mptcp_sendmsg_fastopen+0x2f8/0x580 [ 268.310218][ T9494] mptcp_sendmsg+0x1774/0x1980 [ 268.314975][ T9494] ? __pfx___might_resched+0x10/0x10 [ 268.320258][ T9494] ? aa_sk_perm+0x81e/0x950 [ 268.324756][ T9494] ? __pfx_aa_sk_perm+0x10/0x10 [ 268.329600][ T9494] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 268.334707][ T9494] ? inet6_sendmsg+0x101/0x120 [ 268.339466][ T9494] __sock_sendmsg+0xe5/0x270 [ 268.344054][ T9494] ____sys_sendmsg+0x505/0x830 [ 268.348809][ T9494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.354091][ T9494] ? import_iovec+0x74/0xa0 [ 268.358592][ T9494] ___sys_sendmsg+0x21f/0x2a0 [ 268.363262][ T9494] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.368468][ T9494] ? __fget_files+0x2a/0x420 [ 268.373048][ T9494] ? __fget_files+0x3a0/0x420 [ 268.377716][ T9494] __x64_sys_sendmsg+0x19b/0x260 [ 268.382645][ T9494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.388101][ T9494] ? __pfx_ksys_write+0x10/0x10 [ 268.392950][ T9494] ? do_syscall_64+0xbe/0xfa0 [ 268.397629][ T9494] do_syscall_64+0xfa/0xfa0 [ 268.402122][ T9494] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.407310][ T9494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.413365][ T9494] ? clear_bhb_loop+0x60/0xb0 [ 268.418035][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.423928][ T9494] RIP: 0033:0x7efd0218f749 [ 268.428332][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.448015][ T9494] RSP: 002b:00007efd003f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.456424][ T9494] RAX: ffffffffffffffda RBX: 00007efd023e5fa0 RCX: 00007efd0218f749 [ 268.464386][ T9494] RDX: 0000000004040845 RSI: 0000200000000680 RDI: 0000000000000003 [ 268.472347][ T9494] RBP: 00007efd003f6090 R08: 0000000000000000 R09: 0000000000000000 [ 268.480311][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.488271][ T9494] R13: 00007efd023e6038 R14: 00007efd023e5fa0 R15: 00007ffceda5e078 [ 268.496244][ T9494] [ 268.499253][ T9494] Modules linked in: [ 268.504633][ T9494] ---[ end trace 0000000000000000 ]--- [ 268.515660][ T9494] RIP: 0010:__tcp_select_window+0x824/0x1320 [ 268.521743][ T9494] Code: ff ff ff 44 89 f1 d3 e0 89 c1 f7 d1 41 01 cc 41 21 c4 e9 a9 00 00 00 e8 da 10 01 f8 e9 9c 00 00 00 e8 d0 10 01 f8 44 89 e0 99 7c 24 1c 41 29 d4 48 bb 00 00 00 00 00 fc ff df e9 80 00 00 00 [ 268.548695][ T9494] RSP: 0018:ffffc9000b5bf3a0 EFLAGS: 00010293 [ 268.558802][ T9494] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802eef1e40 [ 268.567490][ T9494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.575634][ T9494] RBP: ffffc9000b5bf490 R08: ffff888025f01a43 R09: 1ffff11004be0348 [ 268.583859][ T9494] R10: dffffc0000000000 R11: ffffed1004be0349 R12: 0000000000000000 [ 268.592604][ T9494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.601055][ T9494] FS: 00007efd003f66c0(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 268.612993][ T9494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.620591][ T9494] CR2: 0000000000000000 CR3: 00000000286d4000 CR4: 00000000003526f0 [ 268.634142][ T9494] Kernel panic - not syncing: Fatal exception [ 268.640587][ T9494] Kernel Offset: disabled [ 268.644899][ T9494] Rebooting in 86400 seconds..