last executing test programs: 2m21.322682522s ago: executing program 3 (id=5083): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @empty}}}, 0x108) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2m21.087785148s ago: executing program 3 (id=5090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) 2m20.895194631s ago: executing program 3 (id=5095): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) close(r5) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000240)) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x401, 0x7, 0x4}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x67, 0x0, 0x8, 0x88, 0x0, @private=0xa0100fe, @rand_addr=0x64010101}, "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"}}, 0xfca) 2m20.58631969s ago: executing program 3 (id=5101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2, r0, 0x4, r0}, 0x10) (async) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) r3 = socket$kcm(0x11, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e}, 0x28) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x300, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000757656e686cc5b1300450000280064000004029078000000e0e000000211009078e0000002002400010000000000000000d1eff5ba638a4dea86d7ea03df73958155c9b1b6a2808ac26b996cdcf5513ce5f1072c5d13c1938c0c97fe9bcb151932f5bab46288be0f26cca9037968ac3487203b76970c3c318e1f4e04e47b6251d76232455b3880bb64a696154e43ba3362c1a38921da5b14cf8d0b2149abd124f478846cd3aeb28e40deb8fa7f49f203a7098b4d7324f1c38a617c9a20a5a46370de365b6aa91345f5ce6f08e3e7bef71f42034936f4"], 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000f40)='\x00\x00\x00', 0x3}], 0x1}, 0x20044001) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) socket$inet6_sctp(0xa, 0x5, 0x84) 2m20.318744311s ago: executing program 3 (id=5104): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x62, 0x0, 0xd, 0x1, 0x0, 0x8, 0x65}, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x5ac, 0x10010000000000, 0x0, 0x0) 2m20.196395022s ago: executing program 3 (id=5107): unshare(0x40000000) r0 = socket(0x15, 0x5, 0x0) unshare(0x20680) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r4, 0x2) accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r5, r5, 0x2f, 0x2024, 0x4}, 0x20) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c00028008000900ffffffff080000006d6163766c616e300000000000000000714495be92ee7d40dfe57d6ec881bcc02bc6613cc8570c087d7150831d07cee915665c5c4e3da1d804c42f04f4e101035faed7ece3696a79d858bce16820608f7da3"], 0x50}}, 0x8000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25ffdc01, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) unshare(0x20100) 2m4.584203811s ago: executing program 32 (id=5107): unshare(0x40000000) r0 = socket(0x15, 0x5, 0x0) unshare(0x20680) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r4, 0x2) accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r5, r5, 0x2f, 0x2024, 0x4}, 0x20) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c00028008000900ffffffff080000006d6163766c616e300000000000000000714495be92ee7d40dfe57d6ec881bcc02bc6613cc8570c087d7150831d07cee915665c5c4e3da1d804c42f04f4e101035faed7ece3696a79d858bce16820608f7da3"], 0x50}}, 0x8000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25ffdc01, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) unshare(0x20100) 1m40.196299919s ago: executing program 5 (id=5494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x6, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) r10 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r11, 0x40024, 0x8d85}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gretap0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000001c0)) 1m40.038358879s ago: executing program 5 (id=5497): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m39.897093261s ago: executing program 1 (id=5500): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) 1m39.767231711s ago: executing program 1 (id=5501): r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x69}]}, 0x44}}, 0x24000040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) 1m39.766203365s ago: executing program 0 (id=5502): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x61}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x38}}, 0x20000000) 1m39.765426328s ago: executing program 4 (id=5503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x1c000000, {{@in6=@local, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) 1m39.637899312s ago: executing program 5 (id=5506): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000100000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x1, 0x4, 0x7, 0xa, 0xc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7a) 1m39.583038127s ago: executing program 1 (id=5507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 1m39.582061173s ago: executing program 4 (id=5508): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0xfffffffc, 0x0, 0x4000800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) 1m39.581813233s ago: executing program 0 (id=5509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x4000000000000000) 1m39.488797658s ago: executing program 1 (id=5511): r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x9, 0x5, 0x0, 0x45a}, {0xfff, 0x6, 0x7, 0x80000000}, {0x8, 0x2a, 0x40}]}, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 1m39.43894559s ago: executing program 4 (id=5512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @remote}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private2, 0x63, r3}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 1m39.438332068s ago: executing program 0 (id=5513): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8001, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10111090}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x288, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12d8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote, 0x21}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5113}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16e4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5aa4}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000096c1c82add6795e6f7b2ca09716eef2237f943682b031438f12e17737d5e0b1f5f9aded2486fe43cf1c563c0be8db2a3877f2b", @ANYRES16=r2, @ANYBLOB="010000000000000000000b00000004000180080004000000000004000680"], 0x24}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x401, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x40800) 1m39.383937998s ago: executing program 5 (id=5514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m39.307079016s ago: executing program 4 (id=5516): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m39.227236306s ago: executing program 0 (id=5517): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r4, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1m39.165979792s ago: executing program 0 (id=5518): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4020) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x28}, 0x1, 0x6000, 0x0, 0x40400c1}, 0x10) 1m39.051114572s ago: executing program 1 (id=5519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x20000000, {{@in6=@local, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) 1m39.043170151s ago: executing program 5 (id=5520): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd26, 0x0, {{}, {0x0, 0x5, 0xfffc}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) 1m39.029774452s ago: executing program 0 (id=5521): socket(0x2c, 0x3, 0x0) pipe(0x0) close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[], 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4008451) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) socket(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) 1m39.018198392s ago: executing program 4 (id=5522): socket$inet(0x2, 0x2, 0x1) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000004daeff591566518600e56f644f00"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}}, 0x44) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1m38.58314198s ago: executing program 33 (id=5521): socket(0x2c, 0x3, 0x0) pipe(0x0) close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[], 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="a2", 0x1}], 0x1}}], 0x1, 0x4008451) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) socket(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) 1m38.515125835s ago: executing program 1 (id=5524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000080a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500060000000c0016"], 0x38}}, 0x10) 1m38.449480294s ago: executing program 34 (id=5524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000080a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500060000000c0016"], 0x38}}, 0x10) 1m38.443867813s ago: executing program 5 (id=5526): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socketpair(0x6, 0x2, 0xaf, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r3, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 1m38.148115525s ago: executing program 35 (id=5526): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socketpair(0x6, 0x2, 0xaf, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r3, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 1m38.134619252s ago: executing program 4 (id=5527): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x1, 0xf, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00[;\b`', @ANYRES16=r7, @ANYRES8=r8], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) connect$netlink(r1, &(0x7f0000000100)=@unspec, 0xc) 1m38.133848067s ago: executing program 36 (id=5527): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x1, 0xf, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00[;\b`', @ANYRES16=r7, @ANYRES8=r8], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) connect$netlink(r1, &(0x7f0000000100)=@unspec, 0xc) 2.897048826s ago: executing program 2 (id=7053): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.834851482s ago: executing program 2 (id=7065): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.710026846s ago: executing program 2 (id=7070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) 1.537823042s ago: executing program 6 (id=7075): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002e00)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=[@hoplimit={{0x14, 0x29, 0x34, 0x1ff}}], 0x18}}], 0x1, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) unshare(0x20040600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x22, 0x0, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000000)=0x8, 0x4) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(r5, 0x3) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007000000000014000000466f00b400660000401190780a0101204e20004c9078010000000400000031150048e56e0573239361bd8f05c60ff304e7fee8a3221b0000000000000000b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287b15c14be998215153aaf76bbf0aead9a5cd7bcd4dc8e1acb0a78f4793cfd119c"], 0xc2) 1.120378023s ago: executing program 8 (id=7077): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) 1.021769911s ago: executing program 8 (id=7081): syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @nop, @sack={0x5, 0x12, [0x7, 0x767, 0xb, 0xfffffffc]}, @timestamp={0x8, 0xa, 0x800001, 0x8a}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) 963.078469ms ago: executing program 7 (id=7082): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 924.620524ms ago: executing program 7 (id=7083): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 817.593218ms ago: executing program 8 (id=7085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa0008060001080006040000ffffffffffffac141400aaaaaaaaaa2ae0000002"], 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xcf3, 0x10}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r13, 0x0) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000ba056527d724cdf0000000000000d7cadf6d7877b36b7b291d43fc98889b0d9d6ad4caaee754da656a542214851f9ed0f1f7b2b5ff9ca141734226ad0efc20c671462f1fb51eefc8be71132f05f7bf5a9151850432c9c4a38a3b17c2a9d486b703eece3c2ef8012ccfacb3dfc3150a7d87f7d049c3791d6b18c3a4d7804e7b10053aefd404eeaf751c47d1cc8ffaabb4c9a1da232bb27924e4854c199da3"], 0x48) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @func, @exit]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x10, &(0x7f0000000540)=""/16, 0x41000, 0x4, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x6, 0x5, 0x3ad}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r13, r12, r7], &(0x7f00000006c0)=[{0x2, 0x4, 0x4, 0x9}, {0x3, 0x1, 0x7, 0x6}, {0x3, 0x5, 0x9, 0x5}, {0x0, 0x5, 0xf, 0x7}, {0x5, 0x3, 0x10, 0x7}, {0x5, 0x3, 0xe, 0x5}, {0x1, 0x2, 0x7, 0xc}]}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000980)={r16, 0x0, 0xa4, 0x0, &(0x7f0000000800)="526887c693e75ddd4d04d42e91442a17647da4fd3b3e1d80dbc0f07410294b1ab8dacc062734ada7f18b5eff678ee054af22b0ac3415cce09edf79e0bf7332744021c03f8910573bd5163ef51179479dfc42408af78bd88227aad2322d613849b81854dc94f0334098fcd1630ddad0452e480d04abb32b7959c70c08c7f91b21826918f8a02c81dd8e7a431b97f15065571940f7ada8dcb0dd6bc90f02669abe9bb22376", 0x0, 0xa1000000, 0x0, 0x92, 0x0, &(0x7f00000008c0)="5d6da7378cd0c034553ceb367b599d8e62837e1321de16358616cf08d9025f0dcb9688b64564a189f6de124aff9c5c5c8d7ce89a5fa3633ea9c965c7cf418ac072269976cfd445479e7adf74445ccda55a59e6f72ff7c15414eb6b2045e4ab539bd13c7299f149d7a328cbe1e6aafb23ac8b27ed1dcc44326bdd68a69faa8f57d87d9e7b79baf0daba657c8db777c778164f"}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r15, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r15, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1869d92b48776a5a2aa2000000000080"], &(0x7f00000000c0)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x24, '\x00', r5, @fallback=0x21, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[r11, r12, r13, r14, r15], &(0x7f0000000280)=[{0x1, 0x5, 0x5, 0x4}, {0x3, 0x4, 0x6, 0xa}, {0x1, 0x2, 0x8, 0x8}, {0x10, 0x4, 0x4, 0xa}, {0x0, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x10, 0x8}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r17, 0xff03, 0x0) 749.601255ms ago: executing program 7 (id=7086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001100)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "39be251d1eabe5d383b83d7b7e3d8a239273c82b1fc06d23d50e17e69c6ee2848410590f6c0e2a534af6bf6748eb4c584401b16c30a714c496c77ddfd4e196378b7ab3ef23a522d8b89388ab4e3fb8d0"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000100)=""/146, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000001c0), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20008084) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) close(r5) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x401, 0x7, 0x4}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7e8, 0x67, 0x0, 0x8, 0x88, 0x0, @private=0xa0100fe, @rand_addr=0x64010101}, "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"}}, 0x7f6) 728.313871ms ago: executing program 9 (id=7087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 726.227731ms ago: executing program 2 (id=7088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x24, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'syz_tun\x00', 0x5}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 626.753661ms ago: executing program 6 (id=7089): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x7, "a098f75bcd9a5516f311a8eaa9ce4a38b900", "674e20c1c38da0a452bae176e96e2b1e08fcde1ee4805fe36ef556ff6cb46fd595915c864cafe26107bc517193b48ef7", "5e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a", {"75d450fb18d042893597291d77675a63", "8674ef6f2b136c97448a476ca98e61cf"}}}}}}}}, 0x0) 619.86972ms ago: executing program 8 (id=7090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) 569.01241ms ago: executing program 6 (id=7091): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) 510.959836ms ago: executing program 9 (id=7092): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000041a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 486.366837ms ago: executing program 8 (id=7093): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 470.926265ms ago: executing program 6 (id=7094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 456.394558ms ago: executing program 2 (id=7095): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700, 0x10000000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 432.599532ms ago: executing program 9 (id=7096): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x7, "a098f75bcd9a5516f311a8eaa9ce4a38b900", "674e20c1c38da0a452bae176e96e2b1e08fcde1ee4805fe36ef556ff6cb46fd595915c864cafe26107bc517193b48ef7", "5e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a", {"75d450fb18d042893597291d77675a63", "8674ef6f2b136c97448a476ca98e61cf"}}}}}}}}, 0x0) (fail_nth: 3) 431.166783ms ago: executing program 7 (id=7097): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x3b, 0x0, 0x8f, 0x1, 0x0, 0x0, 0x66}, 0x8) 326.165696ms ago: executing program 9 (id=7098): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x800}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6a000000009c1100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e20009c90780100000007000000a098f75bcd9a5516f311a8eaa9ce4a38b9000000000000000000000000000000674e20c1c38da0a452bae176e96e2b1e08fcde1ee480fe8dff43355fe36ef556ff6cb46fd595915c864cafe26107bc517193b48ef75e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a75d450fb18d042893597291d77675a638674ef6f2b136c8a476ca98e61cf"], 0x0) 283.108346ms ago: executing program 6 (id=7099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 282.509701ms ago: executing program 2 (id=7100): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 282.309233ms ago: executing program 8 (id=7101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xdcee729b7a9faec8) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 282.171112ms ago: executing program 7 (id=7102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000b0000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500060000000c0016"], 0x38}}, 0x10) 192.75187ms ago: executing program 6 (id=7103): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f0000000480)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "492216", 0xfcf, 0x21, 0x0, @dev, @private2, {[@fragment, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @empty]}, @hopopts={0x0, 0x1e0, '\x00', [@generic={0x0, 0xeff, "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"}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85b36f", 0x0, "63f226"}, "6927155de4155953418064938630a61736c5e9f80d756280b0d28fd858ebabd2c7d30f6e3cc7f93d294c6275d3420ce5ba199ec804b4ec9ab7cb4384532cc3"}}}}, 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000007143feb10c001a800800048004000180"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 136.960782ms ago: executing program 7 (id=7104): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) 91.057545ms ago: executing program 9 (id=7105): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'rlimit'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2b, 'pids'}]}, 0x20) 0s ago: executing program 9 (id=7106): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6a9ba5f0009c110000000000000000000000ffffe0000002ff0200000000000000000000000000014e234e20009c90"], 0x0) kernel console output (not intermixed with test programs): EWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.079560][T21401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.150171][T21404] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5337'. [ 458.362769][T21432] validate_nla: 1 callbacks suppressed [ 458.362788][T21432] netlink: 'syz.4.5344': attribute type 3 has an invalid length. [ 458.600075][T21442] netlink: 'syz.1.5347': attribute type 33 has an invalid length. [ 458.646662][T21442] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 458.662401][T21442] bond14 (unregistering): Released all slaves [ 458.848910][T21456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.856633][T21456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.865002][T21456] FAULT_INJECTION: forcing a failure. [ 458.865002][T21456] name failslab, interval 1, probability 0, space 0, times 0 [ 458.883991][T21456] CPU: 1 UID: 0 PID: 21456 Comm: syz.2.5351 Not tainted syzkaller #0 PREEMPT(full) [ 458.884019][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.884031][T21456] Call Trace: [ 458.884040][T21456] [ 458.884049][T21456] dump_stack_lvl+0x189/0x250 [ 458.884080][T21456] ? __pfx____ratelimit+0x10/0x10 [ 458.884107][T21456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.884135][T21456] ? __pfx__printk+0x10/0x10 [ 458.884153][T21456] ? __sock_sendmsg+0x21c/0x270 [ 458.884180][T21456] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 458.884202][T21456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.884241][T21456] should_fail_ex+0x414/0x560 [ 458.884277][T21456] should_failslab+0xa8/0x100 [ 458.884300][T21456] kmem_cache_alloc_noprof+0x74/0x6e0 [ 458.884330][T21456] ? skb_clone+0x212/0x3a0 [ 458.884358][T21456] skb_clone+0x212/0x3a0 [ 458.884385][T21456] __netlink_deliver_tap+0x404/0x850 [ 458.884420][T21456] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.884442][T21456] netlink_deliver_tap+0x19c/0x1b0 [ 458.884464][T21456] netlink_sendskb+0x68/0x140 [ 458.884495][T21456] netlink_unicast+0x397/0x9e0 [ 458.884521][T21456] ? __asan_memcpy+0x40/0x70 [ 458.884556][T21456] ? __pfx_netlink_unicast+0x10/0x10 [ 458.884596][T21456] netlink_rcv_skb+0x28c/0x470 [ 458.884617][T21456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.884650][T21456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.884682][T21456] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.884710][T21456] netlink_unicast+0x82f/0x9e0 [ 458.884747][T21456] ? __pfx_netlink_unicast+0x10/0x10 [ 458.884778][T21456] ? netlink_sendmsg+0x642/0xb30 [ 458.884794][T21456] ? skb_put+0x11b/0x210 [ 458.884815][T21456] netlink_sendmsg+0x805/0xb30 [ 458.884846][T21456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.884871][T21456] ? aa_sock_msg_perm+0xf1/0x1d0 [ 458.884902][T21456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.884922][T21456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.884944][T21456] __sock_sendmsg+0x21c/0x270 [ 458.884975][T21456] ____sys_sendmsg+0x52d/0x830 [ 458.885003][T21456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.885035][T21456] ? import_iovec+0x74/0xa0 [ 458.885062][T21456] ___sys_sendmsg+0x21f/0x2a0 [ 458.885086][T21456] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.885160][T21456] ? __might_fault+0xb0/0x130 [ 458.885193][T21456] __sys_sendmmsg+0x227/0x430 [ 458.885222][T21456] ? __pfx___sys_sendmmsg+0x10/0x10 [ 458.885262][T21456] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.885313][T21456] ? ksys_write+0x22a/0x250 [ 458.885344][T21456] ? __pfx_ksys_write+0x10/0x10 [ 458.885378][T21456] __x64_sys_sendmmsg+0xa0/0xc0 [ 458.885404][T21456] do_syscall_64+0xfa/0xfa0 [ 458.885433][T21456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.885453][T21456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.885474][T21456] ? clear_bhb_loop+0x60/0xb0 [ 458.885498][T21456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.885518][T21456] RIP: 0033:0x7fd60a98f749 [ 458.885536][T21456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.885555][T21456] RSP: 002b:00007fd60b7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.885577][T21456] RAX: ffffffffffffffda RBX: 00007fd60abe5fa0 RCX: 00007fd60a98f749 [ 458.885592][T21456] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 458.885607][T21456] RBP: 00007fd60b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 458.885621][T21456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.885633][T21456] R13: 00007fd60abe6038 R14: 00007fd60abe5fa0 R15: 00007fff25bc5308 [ 458.885670][T21456] [ 459.344759][T21465] bridge11: entered promiscuous mode [ 459.351265][T21465] bridge11: entered allmulticast mode [ 459.430895][T21471] FAULT_INJECTION: forcing a failure. [ 459.430895][T21471] name failslab, interval 1, probability 0, space 0, times 0 [ 459.444319][T21471] CPU: 1 UID: 0 PID: 21471 Comm: syz.2.5359 Not tainted syzkaller #0 PREEMPT(full) [ 459.444346][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.444357][T21471] Call Trace: [ 459.444365][T21471] [ 459.444373][T21471] dump_stack_lvl+0x189/0x250 [ 459.444406][T21471] ? __pfx____ratelimit+0x10/0x10 [ 459.444434][T21471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.444456][T21471] ? __pfx__printk+0x10/0x10 [ 459.444478][T21471] ? __pfx___might_resched+0x10/0x10 [ 459.444498][T21471] ? fs_reclaim_acquire+0x7d/0x100 [ 459.444532][T21471] should_fail_ex+0x414/0x560 [ 459.444564][T21471] should_failslab+0xa8/0x100 [ 459.444585][T21471] __kmalloc_cache_noprof+0x6f/0x6f0 [ 459.444611][T21471] ? nl80211_dump_interface+0x9f/0x690 [ 459.444633][T21471] ? nl80211_dump_wiphy_parse+0xa7/0x550 [ 459.444663][T21471] nl80211_dump_wiphy_parse+0xa7/0x550 [ 459.444691][T21471] ? __pfx_nl80211_dump_wiphy_parse+0x10/0x10 [ 459.444727][T21471] nl80211_dump_interface+0x103/0x690 [ 459.444765][T21471] ? __build_skb_around+0x262/0x3f0 [ 459.444790][T21471] genl_dumpit+0x10b/0x1b0 [ 459.444821][T21471] netlink_dump+0x6e4/0xe90 [ 459.444851][T21471] ? __pfx_netlink_dump+0x10/0x10 [ 459.444890][T21471] ? genl_start+0x499/0x6c0 [ 459.444924][T21471] __netlink_dump_start+0x5cb/0x7e0 [ 459.444953][T21471] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 459.444983][T21471] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 459.445006][T21471] ? genl_get_cmd+0x7d9/0x910 [ 459.445037][T21471] ? __pfx_genl_start+0x10/0x10 [ 459.445059][T21471] ? __pfx_genl_dumpit+0x10/0x10 [ 459.445078][T21471] ? __pfx_genl_done+0x10/0x10 [ 459.445117][T21471] genl_rcv_msg+0x5da/0x790 [ 459.445148][T21471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.445171][T21471] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 459.445199][T21471] ? __asan_memcpy+0x40/0x70 [ 459.445234][T21471] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.445263][T21471] netlink_rcv_skb+0x208/0x470 [ 459.445280][T21471] ? __lock_acquire+0xab9/0xd20 [ 459.445300][T21471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.445325][T21471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.445365][T21471] ? down_read+0x1ad/0x2e0 [ 459.445389][T21471] genl_rcv+0x28/0x40 [ 459.445410][T21471] netlink_unicast+0x82f/0x9e0 [ 459.445445][T21471] ? __pfx_netlink_unicast+0x10/0x10 [ 459.445473][T21471] ? netlink_sendmsg+0x642/0xb30 [ 459.445490][T21471] ? skb_put+0x11b/0x210 [ 459.445513][T21471] netlink_sendmsg+0x805/0xb30 [ 459.445542][T21471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.445566][T21471] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.445597][T21471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.445617][T21471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.445638][T21471] __sock_sendmsg+0x21c/0x270 [ 459.445668][T21471] ____sys_sendmsg+0x505/0x830 [ 459.445696][T21471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.445730][T21471] ? import_iovec+0x74/0xa0 [ 459.445761][T21471] ___sys_sendmsg+0x21f/0x2a0 [ 459.445787][T21471] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.445853][T21471] ? __fget_files+0x2a/0x420 [ 459.445872][T21471] ? __fget_files+0x3a0/0x420 [ 459.445903][T21471] __x64_sys_sendmsg+0x19b/0x260 [ 459.445928][T21471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.445962][T21471] ? __pfx_ksys_write+0x10/0x10 [ 459.445995][T21471] ? do_syscall_64+0xbe/0xfa0 [ 459.446027][T21471] do_syscall_64+0xfa/0xfa0 [ 459.446054][T21471] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.446080][T21471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.446100][T21471] ? clear_bhb_loop+0x60/0xb0 [ 459.446124][T21471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.446143][T21471] RIP: 0033:0x7fd60a98f749 [ 459.446162][T21471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.446180][T21471] RSP: 002b:00007fd60b7ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.446202][T21471] RAX: ffffffffffffffda RBX: 00007fd60abe5fa0 RCX: 00007fd60a98f749 [ 459.446224][T21471] RDX: 0000000020000010 RSI: 0000200000000e00 RDI: 0000000000000003 [ 459.446238][T21471] RBP: 00007fd60b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 459.446250][T21471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.446261][T21471] R13: 00007fd60abe6038 R14: 00007fd60abe5fa0 R15: 00007fff25bc5308 [ 459.446299][T21471] [ 460.014876][T21479] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 460.024086][T21480] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 460.091985][T21479] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 460.106385][T21479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.120348][T21492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.146509][T21492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.169475][T21492] FAULT_INJECTION: forcing a failure. [ 460.169475][T21492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.199870][T21492] CPU: 1 UID: 0 PID: 21492 Comm: syz.1.5366 Not tainted syzkaller #0 PREEMPT(full) [ 460.199899][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.199911][T21492] Call Trace: [ 460.199920][T21492] [ 460.199929][T21492] dump_stack_lvl+0x189/0x250 [ 460.199961][T21492] ? __pfx____ratelimit+0x10/0x10 [ 460.199989][T21492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.200016][T21492] ? __pfx__printk+0x10/0x10 [ 460.200036][T21492] ? __might_fault+0xb0/0x130 [ 460.200077][T21492] should_fail_ex+0x414/0x560 [ 460.200113][T21492] _copy_from_user+0x2d/0xb0 [ 460.200149][T21492] ___sys_sendmsg+0x158/0x2a0 [ 460.200176][T21492] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.200247][T21492] ? __might_fault+0xb0/0x130 [ 460.200278][T21492] __sys_sendmmsg+0x227/0x430 [ 460.200307][T21492] ? __pfx___sys_sendmmsg+0x10/0x10 [ 460.200340][T21492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.200390][T21492] ? ksys_write+0x22a/0x250 [ 460.200421][T21492] ? __pfx_ksys_write+0x10/0x10 [ 460.200455][T21492] __x64_sys_sendmmsg+0xa0/0xc0 [ 460.200480][T21492] do_syscall_64+0xfa/0xfa0 [ 460.200507][T21492] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.200534][T21492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.200554][T21492] ? clear_bhb_loop+0x60/0xb0 [ 460.200579][T21492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.200599][T21492] RIP: 0033:0x7f0151d8f749 [ 460.200617][T21492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.200636][T21492] RSP: 002b:00007f0152b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 460.200658][T21492] RAX: ffffffffffffffda RBX: 00007f0151fe5fa0 RCX: 00007f0151d8f749 [ 460.200673][T21492] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 460.200688][T21492] RBP: 00007f0152b98090 R08: 0000000000000000 R09: 0000000000000000 [ 460.200701][T21492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.200714][T21492] R13: 00007f0151fe6038 R14: 00007f0151fe5fa0 R15: 00007ffc4a4d16f8 [ 460.200749][T21492] [ 460.628776][T21508] FAULT_INJECTION: forcing a failure. [ 460.628776][T21508] name failslab, interval 1, probability 0, space 0, times 0 [ 460.642516][T21508] CPU: 1 UID: 0 PID: 21508 Comm: syz.2.5373 Not tainted syzkaller #0 PREEMPT(full) [ 460.642545][T21508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.642558][T21508] Call Trace: [ 460.642567][T21508] [ 460.642577][T21508] dump_stack_lvl+0x189/0x250 [ 460.642609][T21508] ? __pfx____ratelimit+0x10/0x10 [ 460.642638][T21508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.642665][T21508] ? __pfx__printk+0x10/0x10 [ 460.642694][T21508] ? __pfx___might_resched+0x10/0x10 [ 460.642721][T21508] should_fail_ex+0x414/0x560 [ 460.642757][T21508] should_failslab+0xa8/0x100 [ 460.642781][T21508] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 460.642810][T21508] ? kasprintf+0xd4/0x120 [ 460.642843][T21508] kvasprintf+0xdc/0x190 [ 460.642867][T21508] ? nf_tables_newset+0x136f/0x2540 [ 460.642890][T21508] ? nfnetlink_rcv+0x11d9/0x2590 [ 460.642916][T21508] ? netlink_unicast+0x82f/0x9e0 [ 460.642946][T21508] ? __pfx_kvasprintf+0x10/0x10 [ 460.642969][T21508] ? __x64_sys_sendmsg+0x19b/0x260 [ 460.643008][T21508] kasprintf+0xd4/0x120 [ 460.643041][T21508] ? __pfx_kasprintf+0x10/0x10 [ 460.643083][T21508] nf_tables_set_alloc_name+0x109/0x720 [ 460.643106][T21508] ? rcu_is_watching+0x15/0xb0 [ 460.643131][T21508] ? trace_kmalloc+0x1f/0xd0 [ 460.643157][T21508] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 460.643186][T21508] ? nla_strdup+0xb8/0x140 [ 460.643219][T21508] nf_tables_newset+0x1390/0x2540 [ 460.643259][T21508] ? __pfx_nf_tables_newset+0x10/0x10 [ 460.643310][T21508] ? __nla_parse+0x40/0x60 [ 460.643336][T21508] nfnetlink_rcv+0x11d9/0x2590 [ 460.643410][T21508] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 460.643459][T21508] ? ref_tracker_free+0x63a/0x7d0 [ 460.643510][T21508] ? __netlink_deliver_tap+0x807/0x850 [ 460.643531][T21508] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.643571][T21508] netlink_unicast+0x82f/0x9e0 [ 460.643610][T21508] ? __pfx_netlink_unicast+0x10/0x10 [ 460.643642][T21508] ? netlink_sendmsg+0x642/0xb30 [ 460.643661][T21508] ? skb_put+0x11b/0x210 [ 460.643685][T21508] netlink_sendmsg+0x805/0xb30 [ 460.643717][T21508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.643746][T21508] ? aa_sock_msg_perm+0xf1/0x1d0 [ 460.643778][T21508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.643797][T21508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.643819][T21508] __sock_sendmsg+0x21c/0x270 [ 460.643850][T21508] ____sys_sendmsg+0x505/0x830 [ 460.643879][T21508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.643913][T21508] ? import_iovec+0x74/0xa0 [ 460.643942][T21508] ___sys_sendmsg+0x21f/0x2a0 [ 460.643968][T21508] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.644033][T21508] ? __fget_files+0x2a/0x420 [ 460.644052][T21508] ? __fget_files+0x3a0/0x420 [ 460.644084][T21508] __x64_sys_sendmsg+0x19b/0x260 [ 460.644109][T21508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.644142][T21508] ? __pfx_ksys_write+0x10/0x10 [ 460.644174][T21508] ? do_syscall_64+0xbe/0xfa0 [ 460.644207][T21508] do_syscall_64+0xfa/0xfa0 [ 460.644235][T21508] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.644264][T21508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.644285][T21508] ? clear_bhb_loop+0x60/0xb0 [ 460.644310][T21508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.644330][T21508] RIP: 0033:0x7fd60a98f749 [ 460.644355][T21508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.644374][T21508] RSP: 002b:00007fd60b7ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.644396][T21508] RAX: ffffffffffffffda RBX: 00007fd60abe5fa0 RCX: 00007fd60a98f749 [ 460.644411][T21508] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 460.644425][T21508] RBP: 00007fd60b7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 460.644438][T21508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.644451][T21508] R13: 00007fd60abe6038 R14: 00007fd60abe5fa0 R15: 00007fff25bc5308 [ 460.644487][T21508] [ 461.083577][T21514] __nla_validate_parse: 9 callbacks suppressed [ 461.083595][T21514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5375'. [ 461.119241][T21514] FAULT_INJECTION: forcing a failure. [ 461.119241][T21514] name failslab, interval 1, probability 0, space 0, times 0 [ 461.176170][T21514] CPU: 0 UID: 0 PID: 21514 Comm: syz.5.5375 Not tainted syzkaller #0 PREEMPT(full) [ 461.176200][T21514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.176213][T21514] Call Trace: [ 461.176222][T21514] [ 461.176232][T21514] dump_stack_lvl+0x189/0x250 [ 461.176264][T21514] ? __pfx____ratelimit+0x10/0x10 [ 461.176299][T21514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.176326][T21514] ? __pfx__printk+0x10/0x10 [ 461.176353][T21514] ? __lock_acquire+0xab9/0xd20 [ 461.176382][T21514] should_fail_ex+0x414/0x560 [ 461.176419][T21514] should_failslab+0xa8/0x100 [ 461.176442][T21514] kmem_cache_alloc_noprof+0x74/0x6e0 [ 461.176470][T21514] ? skb_clone+0x212/0x3a0 [ 461.176500][T21514] skb_clone+0x212/0x3a0 [ 461.176528][T21514] __netlink_deliver_tap+0x404/0x850 [ 461.176564][T21514] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.176587][T21514] netlink_deliver_tap+0x19c/0x1b0 [ 461.176609][T21514] netlink_dump+0x92b/0xe90 [ 461.176643][T21514] ? __pfx_netlink_dump+0x10/0x10 [ 461.176682][T21514] ? genl_start+0x499/0x6c0 [ 461.176717][T21514] __netlink_dump_start+0x5cb/0x7e0 [ 461.176746][T21514] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 461.176777][T21514] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 461.176802][T21514] ? genl_get_cmd+0x7d9/0x910 [ 461.176833][T21514] ? __pfx_genl_start+0x10/0x10 [ 461.176856][T21514] ? __pfx_genl_dumpit+0x10/0x10 [ 461.176879][T21514] ? __pfx_genl_done+0x10/0x10 [ 461.176921][T21514] genl_rcv_msg+0x5da/0x790 [ 461.176955][T21514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.176979][T21514] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 461.177008][T21514] ? __asan_memcpy+0x40/0x70 [ 461.177039][T21514] ? __pfx_ref_tracker_free+0x10/0x10 [ 461.177068][T21514] netlink_rcv_skb+0x208/0x470 [ 461.177086][T21514] ? __lock_acquire+0xab9/0xd20 [ 461.177107][T21514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.177136][T21514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.177172][T21514] ? down_read+0x1ad/0x2e0 [ 461.177194][T21514] genl_rcv+0x28/0x40 [ 461.177216][T21514] netlink_unicast+0x82f/0x9e0 [ 461.177257][T21514] ? __pfx_netlink_unicast+0x10/0x10 [ 461.177287][T21514] ? netlink_sendmsg+0x642/0xb30 [ 461.177306][T21514] ? skb_put+0x11b/0x210 [ 461.177332][T21514] netlink_sendmsg+0x805/0xb30 [ 461.177362][T21514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.177387][T21514] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.177419][T21514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.177440][T21514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.177463][T21514] __sock_sendmsg+0x21c/0x270 [ 461.177495][T21514] ____sys_sendmsg+0x505/0x830 [ 461.177525][T21514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.177559][T21514] ? import_iovec+0x74/0xa0 [ 461.177590][T21514] ___sys_sendmsg+0x21f/0x2a0 [ 461.177616][T21514] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.177683][T21514] ? __fget_files+0x2a/0x420 [ 461.177702][T21514] ? __fget_files+0x3a0/0x420 [ 461.177732][T21514] __x64_sys_sendmsg+0x19b/0x260 [ 461.177756][T21514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.177784][T21514] ? __pfx_ksys_write+0x10/0x10 [ 461.177812][T21514] ? do_syscall_64+0xbe/0xfa0 [ 461.177841][T21514] do_syscall_64+0xfa/0xfa0 [ 461.177863][T21514] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.177889][T21514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.177908][T21514] ? clear_bhb_loop+0x60/0xb0 [ 461.177933][T21514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.177973][T21514] RIP: 0033:0x7f73a898f749 [ 461.177992][T21514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.178010][T21514] RSP: 002b:00007f73a97d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.178038][T21514] RAX: ffffffffffffffda RBX: 00007f73a8be5fa0 RCX: 00007f73a898f749 [ 461.178053][T21514] RDX: 0000000020000010 RSI: 0000200000000e00 RDI: 0000000000000003 [ 461.178067][T21514] RBP: 00007f73a97d7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.178080][T21514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.178092][T21514] R13: 00007f73a8be6038 R14: 00007f73a8be5fa0 R15: 00007fffe834afa8 [ 461.178129][T21514] [ 461.608187][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5377'. [ 461.987585][T21528] IPv6: sit3: Disabled Multicast RS [ 461.993969][T21528] sit3: entered allmulticast mode [ 462.200094][T21552] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5390'. [ 462.234237][T21552] vlan2: entered allmulticast mode [ 462.248627][T21552] gretap0: entered allmulticast mode [ 462.295794][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5388'. [ 462.395866][T21564] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 462.538449][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5388'. [ 462.744798][T21576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5392'. [ 462.755042][T21576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5392'. [ 462.802648][T21573] syzkaller0: entered promiscuous mode [ 462.809822][T21573] syzkaller0: entered allmulticast mode [ 463.303038][T21614] netlink: 'syz.2.5405': attribute type 3 has an invalid length. [ 463.330526][T21614] FAULT_INJECTION: forcing a failure. [ 463.330526][T21614] name failslab, interval 1, probability 0, space 0, times 0 [ 463.349286][T21614] CPU: 1 UID: 0 PID: 21614 Comm: syz.2.5405 Not tainted syzkaller #0 PREEMPT(full) [ 463.349316][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.349327][T21614] Call Trace: [ 463.349336][T21614] [ 463.349344][T21614] dump_stack_lvl+0x189/0x250 [ 463.349373][T21614] ? __pfx____ratelimit+0x10/0x10 [ 463.349398][T21614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.349422][T21614] ? __pfx__printk+0x10/0x10 [ 463.349445][T21614] ? __pfx___might_resched+0x10/0x10 [ 463.349466][T21614] ? fs_reclaim_acquire+0x7d/0x100 [ 463.349499][T21614] should_fail_ex+0x414/0x560 [ 463.349533][T21614] should_failslab+0xa8/0x100 [ 463.349555][T21614] __kmalloc_cache_noprof+0x6f/0x6f0 [ 463.349582][T21614] ? nft_delset+0x56/0x500 [ 463.349613][T21614] nft_delset+0x56/0x500 [ 463.349638][T21614] ? nla_strcmp+0x106/0x140 [ 463.349658][T21614] ? nla_strcmp+0x106/0x140 [ 463.349684][T21614] nf_tables_delset+0xc0b/0xda0 [ 463.349719][T21614] ? __pfx_nf_tables_delset+0x10/0x10 [ 463.349741][T21614] ? nfnl_pernet+0x23/0x240 [ 463.349777][T21614] ? __nla_parse+0x40/0x60 [ 463.349800][T21614] nfnetlink_rcv+0x11d9/0x2590 [ 463.349864][T21614] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 463.349911][T21614] ? ref_tracker_free+0x63a/0x7d0 [ 463.349963][T21614] ? __netlink_deliver_tap+0x807/0x850 [ 463.349982][T21614] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.350026][T21614] netlink_unicast+0x82f/0x9e0 [ 463.350074][T21614] ? __pfx_netlink_unicast+0x10/0x10 [ 463.350104][T21614] ? netlink_sendmsg+0x642/0xb30 [ 463.350122][T21614] ? skb_put+0x11b/0x210 [ 463.350146][T21614] netlink_sendmsg+0x805/0xb30 [ 463.350177][T21614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.350202][T21614] ? aa_sock_msg_perm+0xf1/0x1d0 [ 463.350235][T21614] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.350254][T21614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.350276][T21614] __sock_sendmsg+0x21c/0x270 [ 463.350306][T21614] ____sys_sendmsg+0x505/0x830 [ 463.350335][T21614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.350368][T21614] ? import_iovec+0x74/0xa0 [ 463.350397][T21614] ___sys_sendmsg+0x21f/0x2a0 [ 463.350422][T21614] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.350485][T21614] ? __fget_files+0x2a/0x420 [ 463.350504][T21614] ? __fget_files+0x3a0/0x420 [ 463.350536][T21614] __x64_sys_sendmsg+0x19b/0x260 [ 463.350562][T21614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.350594][T21614] ? __pfx_ksys_write+0x10/0x10 [ 463.350627][T21614] ? do_syscall_64+0xbe/0xfa0 [ 463.350660][T21614] do_syscall_64+0xfa/0xfa0 [ 463.350687][T21614] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.350713][T21614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.350733][T21614] ? clear_bhb_loop+0x60/0xb0 [ 463.350758][T21614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.350777][T21614] RIP: 0033:0x7fd60a98f749 [ 463.350795][T21614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.350813][T21614] RSP: 002b:00007fd60b7cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.350835][T21614] RAX: ffffffffffffffda RBX: 00007fd60abe6090 RCX: 00007fd60a98f749 [ 463.350850][T21614] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 463.350863][T21614] RBP: 00007fd60b7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 463.350877][T21614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.350889][T21614] R13: 00007fd60abe6128 R14: 00007fd60abe6090 R15: 00007fff25bc5308 [ 463.350925][T21614] [ 463.821749][T21624] netlink: 'syz.0.5410': attribute type 21 has an invalid length. [ 463.830258][T21624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5410'. [ 463.844146][T21624] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 463.994798][T21630] syz_tun: mtu less than device minimum [ 464.365494][T21648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5420'. [ 464.380599][T21650] syzkaller1: entered promiscuous mode [ 464.386308][T21650] syzkaller1: entered allmulticast mode [ 464.424365][T21652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.456384][T21652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.576894][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'. [ 464.805228][T21677] xt_cluster: node mask cannot exceed total number of nodes [ 465.013976][T21685] xt_ecn: cannot match TCP bits for non-tcp packets [ 465.096019][T21692] netlink: 'syz.1.5435': attribute type 23 has an invalid length. [ 465.275855][T21704] syz_tun: mtu less than device minimum [ 465.442842][T21711] vlan4: entered promiscuous mode [ 465.468652][T21711] vlan4: entered allmulticast mode [ 465.481995][T21711] hsr_slave_1: entered allmulticast mode [ 465.732272][T21730] syzkaller0: entered promiscuous mode [ 465.757709][T21730] syzkaller0: entered allmulticast mode [ 465.810497][T21737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.936522][T21745] syzkaller0: entered promiscuous mode [ 465.944991][T21745] syzkaller0: entered allmulticast mode [ 467.081390][T21795] __nla_validate_parse: 8 callbacks suppressed [ 467.081415][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5470'. [ 467.136041][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5472'. [ 467.146425][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5473'. [ 467.161742][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5473'. [ 467.183140][T21799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5472'. [ 467.276842][T21812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5473'. [ 467.435255][T21818] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5478'. [ 467.580921][T21832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5482'. [ 467.581239][T21831] netlink: 'syz.4.5481': attribute type 10 has an invalid length. [ 467.598327][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5479'. [ 467.643807][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5481'. [ 467.783423][T21840] ip6t_srh: unknown srh match flags 5F28 [ 467.813190][T21832] ipt_REJECT: TCP_RESET invalid for non-tcp [ 467.868913][T21846] macvlan2: entered promiscuous mode [ 468.148197][T21869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.155539][T21869] IPv6: NLM_F_CREATE should be set when creating new route [ 468.162854][T21869] IPv6: NLM_F_CREATE should be set when creating new route [ 468.203760][T21869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.464607][T21884] syzkaller0: entered promiscuous mode [ 468.470311][T21884] syzkaller0: entered allmulticast mode [ 468.761240][T21908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.777579][T21908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.853733][T21914] netlink: 'syz.5.5506': attribute type 4 has an invalid length. [ 468.978992][T21921] netlink: 'syz.1.5511': attribute type 10 has an invalid length. [ 469.007509][T21923] veth0_to_team: entered promiscuous mode [ 469.045358][T21923] 8021q: adding VLAN 0 to HW filter on device bond14 [ 469.183064][T21927] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 469.198241][T21927] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 469.216446][T21927] tipc: Resetting bearer [ 469.729240][ T1166] tipc: Resetting bearer [ 470.044925][ T1166] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.201208][ T1166] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.453697][ T1166] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.469200][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.482827][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.491407][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.499832][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.507688][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.704008][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.705187][ T1166] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.723320][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.731886][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.740785][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.751782][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.944944][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.955502][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.964097][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.976933][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.986439][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.025351][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.035188][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.043952][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.052213][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.060322][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.075165][ T1166] bridge_slave_1: left allmulticast mode [ 471.112511][ T1166] bridge_slave_1: left promiscuous mode [ 471.127170][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.146088][ T1166] bridge_slave_0: left allmulticast mode [ 471.152603][ T1166] bridge_slave_0: left promiscuous mode [ 471.165949][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.612929][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.624307][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.634663][ T1166] bond0 (unregistering): Released all slaves [ 472.110532][T21949] wlan0 speed is unknown, defaulting to 1000 [ 472.545983][T21988] netlink: 'syz.2.5541': attribute type 5 has an invalid length. [ 472.554595][T21988] __nla_validate_parse: 3 callbacks suppressed [ 472.554614][T21988] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5541'. [ 472.588207][ T5147] Bluetooth: hci1: command tx timeout [ 472.632129][T21949] chnl_net:caif_netlink_parms(): no params data found [ 472.642384][T21991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5542'. [ 472.671647][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'. [ 472.681095][T21990] tc_dump_action: action bad kind [ 472.690440][T21991] veth1_macvtap: left promiscuous mode [ 472.827909][ T5147] Bluetooth: hci2: command tx timeout [ 472.869921][T21949] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.877085][T21949] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.893502][T21949] bridge_slave_0: entered allmulticast mode [ 472.903115][T21949] bridge_slave_0: entered promiscuous mode [ 472.912412][T22002] veth0: entered promiscuous mode [ 472.922256][T21949] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.930510][T21949] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.938457][T21949] bridge_slave_1: entered allmulticast mode [ 472.946569][T21949] bridge_slave_1: entered promiscuous mode [ 472.954573][T22002] veth0: left promiscuous mode [ 473.008178][T22002] xfrm1: entered allmulticast mode [ 473.016935][T21949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.050361][T21949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.067879][ T5147] Bluetooth: hci3: command tx timeout [ 473.147795][ T5147] Bluetooth: hci4: command tx timeout [ 473.180519][T21953] wlan0 speed is unknown, defaulting to 1000 [ 473.218775][T21949] team0: Port device team_slave_0 added [ 473.234924][T21962] wlan0 speed is unknown, defaulting to 1000 [ 473.274705][T22004] ip6tnl3: entered promiscuous mode [ 473.287334][T22004] ip6tnl3: entered allmulticast mode [ 473.335901][T21949] team0: Port device team_slave_1 added [ 473.494285][T21949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.502105][T21949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.529130][T21949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.575779][T21949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.586548][T21949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.613172][T21949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.756846][T21958] wlan0 speed is unknown, defaulting to 1000 [ 473.833855][ T1166] hsr_slave_0: left promiscuous mode [ 473.842709][ T1166] hsr_slave_1: left promiscuous mode [ 473.848443][T22013] netlink: 'syz.2.5548': attribute type 4 has an invalid length. [ 473.849074][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.864429][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.872922][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.880841][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.913676][ T1166] veth1_macvtap: left promiscuous mode [ 473.920002][ T1166] veth0_macvtap: left promiscuous mode [ 473.925607][ T1166] veth1_vlan: left promiscuous mode [ 473.931417][ T1166] veth0_vlan: left promiscuous mode [ 474.404138][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 474.450430][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 474.667905][ T5147] Bluetooth: hci1: command tx timeout [ 474.910107][ T5147] Bluetooth: hci2: command tx timeout [ 474.925809][T21949] hsr_slave_0: entered promiscuous mode [ 474.932916][T21949] hsr_slave_1: entered promiscuous mode [ 474.939802][T21949] debugfs: 'hsr0' already exists in 'hsr' [ 474.945560][T21949] Cannot create hsr debugfs directory [ 475.148048][ T5147] Bluetooth: hci3: command tx timeout [ 475.228033][ T5147] Bluetooth: hci4: command tx timeout [ 475.274590][T21953] chnl_net:caif_netlink_parms(): no params data found [ 475.499755][ T1166] IPVS: stop unused estimator thread 0... [ 475.619548][T21962] chnl_net:caif_netlink_parms(): no params data found [ 475.635861][T21953] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.643396][T21953] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.651312][T21953] bridge_slave_0: entered allmulticast mode [ 475.658899][T21953] bridge_slave_0: entered promiscuous mode [ 475.712282][T21953] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.719881][T21953] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.727087][T21953] bridge_slave_1: entered allmulticast mode [ 475.734741][T21953] bridge_slave_1: entered promiscuous mode [ 475.813703][T21953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.831439][T21953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.890421][T21958] chnl_net:caif_netlink_parms(): no params data found [ 475.964414][T21953] team0: Port device team_slave_0 added [ 475.969991][T22047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5555'. [ 475.975042][T21953] team0: Port device team_slave_1 added [ 476.029272][T21962] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.036618][T21962] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.045031][T21962] bridge_slave_0: entered allmulticast mode [ 476.053970][T21962] bridge_slave_0: entered promiscuous mode [ 476.070947][T21962] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.078360][T21962] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.085739][T21962] bridge_slave_1: entered allmulticast mode [ 476.093356][T21962] bridge_slave_1: entered promiscuous mode [ 476.146704][T21953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.155262][T21953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.181862][T21953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.195270][T21953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.202508][T21953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.228989][T21953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.293513][T21962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.306696][T21962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.332862][T21958] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.340690][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.348579][T21958] bridge_slave_0: entered allmulticast mode [ 476.356369][T21958] bridge_slave_0: entered promiscuous mode [ 476.364307][T21949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.388102][T21962] team0: Port device team_slave_0 added [ 476.394323][T21958] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.402503][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.410054][T21958] bridge_slave_1: entered allmulticast mode [ 476.418231][T21958] bridge_slave_1: entered promiscuous mode [ 476.425102][T21949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.449050][T21962] team0: Port device team_slave_1 added [ 476.468210][T21949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.479100][T21949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 476.531718][T21953] hsr_slave_0: entered promiscuous mode [ 476.538642][T21953] hsr_slave_1: entered promiscuous mode [ 476.544915][T21953] debugfs: 'hsr0' already exists in 'hsr' [ 476.551168][T21953] Cannot create hsr debugfs directory [ 476.572270][T21958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.588316][T21962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.595394][T21962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.621647][T21962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.635742][T21958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.681068][T21962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.688165][T21962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.714806][T21962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.747508][ T5147] Bluetooth: hci1: command tx timeout [ 476.799045][T21958] team0: Port device team_slave_0 added [ 476.871379][T21958] team0: Port device team_slave_1 added [ 476.900571][T21962] hsr_slave_0: entered promiscuous mode [ 476.910744][T21962] hsr_slave_1: entered promiscuous mode [ 476.919690][T21962] debugfs: 'hsr0' already exists in 'hsr' [ 476.925485][T21962] Cannot create hsr debugfs directory [ 476.961957][T22058] netlink: 'syz.2.5556': attribute type 6 has an invalid length. [ 476.991584][ T5147] Bluetooth: hci2: command tx timeout [ 477.007109][T21958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.015400][T21958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.042753][T21958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.055914][T21958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.062980][T21958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.089464][T21958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.204555][T22068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5558'. [ 477.227462][ T5147] Bluetooth: hci3: command tx timeout [ 477.289171][T21958] hsr_slave_0: entered promiscuous mode [ 477.296348][T21958] hsr_slave_1: entered promiscuous mode [ 477.307673][ T5147] Bluetooth: hci4: command tx timeout [ 477.309637][T21958] debugfs: 'hsr0' already exists in 'hsr' [ 477.320937][T21958] Cannot create hsr debugfs directory [ 477.568395][T22075] netlink: 'syz.2.5560': attribute type 4 has an invalid length. [ 477.593194][T22075] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5560'. [ 477.647041][T21953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 477.694389][T21953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 477.714002][T21953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 477.725110][T22077] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 477.733936][T22077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.741939][T21953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 477.782008][T21949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.865642][T21949] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.880964][T21962] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 477.892354][T21962] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 477.907114][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.914493][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.930364][T21962] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 477.943951][T21962] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 477.959329][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.966529][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.073446][T21958] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.085652][T21958] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.098921][T21958] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.113454][T21958] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.266438][T21953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.341677][T21953] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.379193][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.386398][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.408876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.416107][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.433201][T21962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.489119][T21962] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.502973][T21958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.541534][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.548687][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.562497][T21949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.591271][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.598476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.666504][T21958] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.717093][T14254] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.724312][T14254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.765485][T14254] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.772820][T14254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.816597][T21962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.827556][ T5147] Bluetooth: hci1: command tx timeout [ 478.836114][T21962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.077726][ T5147] Bluetooth: hci2: command tx timeout [ 479.159093][T21953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.255573][T21949] veth0_vlan: entered promiscuous mode [ 479.294281][T21949] veth1_vlan: entered promiscuous mode [ 479.311220][ T5147] Bluetooth: hci3: command tx timeout [ 479.388319][ T5147] Bluetooth: hci4: command tx timeout [ 479.404199][T21958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.465760][T21962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.478814][T21949] veth0_macvtap: entered promiscuous mode [ 479.502609][T21949] veth1_macvtap: entered promiscuous mode [ 479.590079][T21949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.623369][T21949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.685488][ T44] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.744462][ T44] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.762516][ T44] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.803180][ T44] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.916533][T21953] veth0_vlan: entered promiscuous mode [ 479.981705][T21953] veth1_vlan: entered promiscuous mode [ 480.008261][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.016141][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.112659][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.122336][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.176891][T22149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.223603][T21958] veth0_vlan: entered promiscuous mode [ 480.237068][T21962] veth0_vlan: entered promiscuous mode [ 480.296336][T21962] veth1_vlan: entered promiscuous mode [ 480.326376][T21953] veth0_macvtap: entered promiscuous mode [ 480.343759][T21958] veth1_vlan: entered promiscuous mode [ 480.371563][T21953] veth1_macvtap: entered promiscuous mode [ 480.451890][T21958] veth0_macvtap: entered promiscuous mode [ 480.475899][T21953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.513961][T21953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.541610][T22159] geneve3: entered promiscuous mode [ 480.546863][T22159] geneve3: entered allmulticast mode [ 480.566893][T22160] tipc: Started in network mode [ 480.572804][T22160] tipc: Node identity 9abcc9dda05, cluster identity 4711 [ 480.581754][T22160] tipc: Enabled bearer , priority 0 [ 480.604122][T21958] veth1_macvtap: entered promiscuous mode [ 480.615532][T21962] veth0_macvtap: entered promiscuous mode [ 480.624254][ T970] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 480.638656][ T970] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 480.648487][ T970] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 480.658405][T22160] syzkaller0: entered promiscuous mode [ 480.663992][T22160] syzkaller0: entered allmulticast mode [ 480.692007][ T970] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.706686][T21962] veth1_macvtap: entered promiscuous mode [ 480.713821][ T970] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.723896][T22160] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 480.759620][ T970] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.773727][T22160] tipc: Resetting bearer [ 480.813996][T21958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.823522][ T970] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.843780][T22157] tipc: Resetting bearer [ 480.865224][T22157] tipc: Disabling bearer [ 480.916920][T21958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.011669][T21962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.023385][ T44] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.045086][T21962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.062690][T14254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.085181][ T44] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.094683][ T44] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.104808][T14254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.139519][ T44] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.182887][T14254] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.207059][T14254] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.226901][T14254] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.361821][T14254] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.384945][T14254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.394130][T14254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.479130][T22181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 481.553114][T14256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.582263][T14256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.644784][T14254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.660621][T14254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.685668][T14254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.711365][T14254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.740202][T22187] netlink: 'syz.7.5579': attribute type 3 has an invalid length. [ 481.814161][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.833067][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.195550][T22207] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5586'. [ 482.212614][T22207] FAULT_INJECTION: forcing a failure. [ 482.212614][T22207] name failslab, interval 1, probability 0, space 0, times 0 [ 482.230859][T22207] CPU: 0 UID: 0 PID: 22207 Comm: syz.9.5586 Not tainted syzkaller #0 PREEMPT(full) [ 482.230887][T22207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.230899][T22207] Call Trace: [ 482.230907][T22207] [ 482.230916][T22207] dump_stack_lvl+0x189/0x250 [ 482.230947][T22207] ? __pfx____ratelimit+0x10/0x10 [ 482.230972][T22207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.230994][T22207] ? __pfx__printk+0x10/0x10 [ 482.231011][T22207] ? netlink_sendmsg+0x805/0xb30 [ 482.231032][T22207] ? __x64_sys_sendmsg+0x19b/0x260 [ 482.231053][T22207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.231080][T22207] should_fail_ex+0x414/0x560 [ 482.231113][T22207] should_failslab+0xa8/0x100 [ 482.231134][T22207] kmem_cache_alloc_noprof+0x74/0x6e0 [ 482.231302][T22207] ? skb_clone+0x212/0x3a0 [ 482.231332][T22207] skb_clone+0x212/0x3a0 [ 482.231358][T22207] __netlink_deliver_tap+0x404/0x850 [ 482.231392][T22207] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.231414][T22207] netlink_deliver_tap+0x19c/0x1b0 [ 482.231435][T22207] netlink_sendskb+0x68/0x140 [ 482.231468][T22207] netlink_unicast+0x397/0x9e0 [ 482.231492][T22207] ? __asan_memcpy+0x40/0x70 [ 482.231528][T22207] ? __pfx_netlink_unicast+0x10/0x10 [ 482.231566][T22207] netlink_rcv_skb+0x28c/0x470 [ 482.231584][T22207] ? __lock_acquire+0xab9/0xd20 [ 482.231605][T22207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.231634][T22207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.231676][T22207] ? down_read+0x1ad/0x2e0 [ 482.231701][T22207] genl_rcv+0x28/0x40 [ 482.231724][T22207] netlink_unicast+0x82f/0x9e0 [ 482.231763][T22207] ? __pfx_netlink_unicast+0x10/0x10 [ 482.231795][T22207] ? netlink_sendmsg+0x642/0xb30 [ 482.231813][T22207] ? skb_put+0x11b/0x210 [ 482.231837][T22207] netlink_sendmsg+0x805/0xb30 [ 482.231869][T22207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.231895][T22207] ? aa_sock_msg_perm+0xf1/0x1d0 [ 482.231921][T22207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.231941][T22207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.231963][T22207] __sock_sendmsg+0x21c/0x270 [ 482.231996][T22207] ____sys_sendmsg+0x505/0x830 [ 482.232027][T22207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.232062][T22207] ? import_iovec+0x74/0xa0 [ 482.232092][T22207] ___sys_sendmsg+0x21f/0x2a0 [ 482.232116][T22207] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.232198][T22207] ? __fget_files+0x2a/0x420 [ 482.232219][T22207] ? __fget_files+0x3a0/0x420 [ 482.232247][T22207] __x64_sys_sendmsg+0x19b/0x260 [ 482.232273][T22207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.232303][T22207] ? __pfx_ksys_write+0x10/0x10 [ 482.232335][T22207] ? do_syscall_64+0xbe/0xfa0 [ 482.232367][T22207] do_syscall_64+0xfa/0xfa0 [ 482.232393][T22207] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.232421][T22207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.232440][T22207] ? clear_bhb_loop+0x60/0xb0 [ 482.232464][T22207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.232485][T22207] RIP: 0033:0x7ff23e98f749 [ 482.232505][T22207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.232521][T22207] RSP: 002b:00007ff23cbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.232544][T22207] RAX: ffffffffffffffda RBX: 00007ff23ebe5fa0 RCX: 00007ff23e98f749 [ 482.232559][T22207] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 482.232572][T22207] RBP: 00007ff23cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 482.232586][T22207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.232599][T22207] R13: 00007ff23ebe6038 R14: 00007ff23ebe5fa0 R15: 00007ffc11a75878 [ 482.232636][T22207] [ 482.233211][T22206] gre0: entered promiscuous mode [ 482.636920][T22206] gre0: entered allmulticast mode [ 482.653780][T22222] ip6t_srh: unknown srh invflags 4000 [ 482.824328][T22227] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.5591'. [ 482.878556][T22231] bond1 (unregistering): Released all slaves [ 483.134273][T22246] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 483.292387][T22257] netlink: 'syz.2.5602': attribute type 3 has an invalid length. [ 483.608513][T22275] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.5608'. [ 483.655706][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5611'. [ 483.730167][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5611'. [ 483.760484][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5611'. [ 483.811561][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5611'. [ 483.848533][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5611'. [ 483.854861][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5614'. [ 483.874100][T22295] FAULT_INJECTION: forcing a failure. [ 483.874100][T22295] name failslab, interval 1, probability 0, space 0, times 0 [ 483.885487][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5611'. [ 483.887616][T22293] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5614'. [ 483.908189][T22295] CPU: 1 UID: 0 PID: 22295 Comm: syz.6.5616 Not tainted syzkaller #0 PREEMPT(full) [ 483.908216][T22295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.908230][T22295] Call Trace: [ 483.908238][T22295] [ 483.908247][T22295] dump_stack_lvl+0x189/0x250 [ 483.908280][T22295] ? __pfx____ratelimit+0x10/0x10 [ 483.908308][T22295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.908334][T22295] ? __pfx__printk+0x10/0x10 [ 483.908358][T22295] ? __pfx___might_resched+0x10/0x10 [ 483.908377][T22295] ? fs_reclaim_acquire+0x7d/0x100 [ 483.908412][T22295] should_fail_ex+0x414/0x560 [ 483.908448][T22295] should_failslab+0xa8/0x100 [ 483.908471][T22295] kmem_cache_alloc_node_noprof+0x77/0x710 [ 483.908498][T22295] ? __alloc_skb+0x112/0x2d0 [ 483.908524][T22295] __alloc_skb+0x112/0x2d0 [ 483.908547][T22295] alloc_skb_with_frags+0xca/0x890 [ 483.908584][T22295] sock_alloc_send_pskb+0x84d/0x980 [ 483.908629][T22295] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 483.908659][T22295] ? dev_get_by_index+0x22/0x2e0 [ 483.908683][T22295] ? dev_get_by_index+0x22/0x2e0 [ 483.908715][T22295] packet_sendmsg+0x33a0/0x5080 [ 483.908745][T22295] ? match_mnt_path_str+0xab0/0xb40 [ 483.908792][T22295] ? __pfx___might_resched+0x10/0x10 [ 483.908812][T22295] ? __lock_acquire+0xab9/0xd20 [ 483.908846][T22295] ? __pfx_packet_sendmsg+0x10/0x10 [ 483.908863][T22295] ? aa_sk_perm+0x81e/0x950 [ 483.908897][T22295] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 483.908932][T22295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.908961][T22295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.908979][T22295] ? __pfx_packet_sendmsg+0x10/0x10 [ 483.908997][T22295] __sock_sendmsg+0x21c/0x270 [ 483.909025][T22295] __sys_sendto+0x3bd/0x520 [ 483.909054][T22295] ? __pfx___sys_sendto+0x10/0x10 [ 483.909073][T22295] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 483.909114][T22295] ? __fget_files+0x3a0/0x420 [ 483.909143][T22295] ? ksys_write+0x22a/0x250 [ 483.909171][T22295] ? __pfx_ksys_write+0x10/0x10 [ 483.909201][T22295] __x64_sys_sendto+0xde/0x100 [ 483.909223][T22295] do_syscall_64+0xfa/0xfa0 [ 483.909248][T22295] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.909274][T22295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.909293][T22295] ? clear_bhb_loop+0x60/0xb0 [ 483.909317][T22295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.909337][T22295] RIP: 0033:0x7f767ad8f749 [ 483.909354][T22295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.909373][T22295] RSP: 002b:00007f767bc81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.909395][T22295] RAX: ffffffffffffffda RBX: 00007f767afe5fa0 RCX: 00007f767ad8f749 [ 483.909409][T22295] RDX: ffffffffffffffb0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 483.909423][T22295] RBP: 00007f767bc81090 R08: 0000200000000540 R09: 0000000000000014 [ 483.909437][T22295] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 483.909450][T22295] R13: 00007f767afe6038 R14: 00007f767afe5fa0 R15: 00007ffda7981da8 [ 483.909484][T22295] [ 483.910920][T22293] netlink: 'syz.7.5614': attribute type 5 has an invalid length. [ 484.450845][T22318] netlink: 'syz.9.5620': attribute type 10 has an invalid length. [ 484.461004][T22318] netlink: 'syz.9.5620': attribute type 3 has an invalid length. [ 484.924105][T22330] netdevsim netdevsim9 : renamed from netdevsim0 (while UP) [ 485.051149][T22301] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 485.736921][T22378] vlan0: entered promiscuous mode [ 485.751394][T22378] vlan0: entered allmulticast mode [ 485.789677][T22378] veth0_vlan: entered allmulticast mode [ 485.905225][T22380] syzkaller1: entered promiscuous mode [ 485.938335][T22380] syzkaller1: entered allmulticast mode [ 486.005669][T22394] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.014408][T22394] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.131977][T22390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.201251][T22389] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 486.226273][T22401] syzkaller1: entered promiscuous mode [ 486.242292][T22401] syzkaller1: entered allmulticast mode [ 486.319050][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.335359][ T970] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.354728][ T970] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.375868][ T970] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.763754][T22433] netlink: 'syz.7.5661': attribute type 72 has an invalid length. [ 487.120214][T22456] netlink: 'syz.8.5671': attribute type 1 has an invalid length. [ 487.128661][T22456] netlink: 'syz.8.5671': attribute type 1 has an invalid length. [ 487.279991][T22466] tipc: Enabled bearer , priority 0 [ 487.288365][T22466] syzkaller0: entered promiscuous mode [ 487.300083][T22466] syzkaller0: entered allmulticast mode [ 487.337536][T22466] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 487.368429][T22466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 487.538239][T22466] tipc: Resetting bearer [ 487.606859][T22466] tipc: Disabling bearer [ 487.890243][T22512] netlink: 'syz.2.5691': attribute type 3 has an invalid length. [ 487.954950][T22515] netlink: 'syz.6.5693': attribute type 1 has an invalid length. [ 488.290329][T22538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.441580][T22544] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 488.485215][T22549] __nla_validate_parse: 48 callbacks suppressed [ 488.485234][T22549] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.5705'. [ 488.630590][T22560] xt_ecn: cannot match TCP bits for non-tcp packets [ 488.981572][T22584] xt_hashlimit: size too large, truncated to 1048576 [ 488.988970][T22581] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.989037][T22581] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.995732][T22585] netlink: 420 bytes leftover after parsing attributes in process `syz.7.5715'. [ 489.187019][T22581] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.251701][T22581] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.429803][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5720'. [ 489.584934][T22581] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.599341][T22581] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.683421][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.705209][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.716574][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.734006][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.754589][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.766476][T22581] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.783649][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.796587][T22581] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.822014][T22610] netlink: 668 bytes leftover after parsing attributes in process `syz.8.5724'. [ 489.866364][T22608] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 489.884245][T22608] bond1: entered promiscuous mode [ 489.893024][T22608] bond1: entered allmulticast mode [ 489.898838][T22608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.954400][ T44] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.992099][ T44] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.041280][ T44] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.050881][ T44] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.077708][ T44] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.097684][ T44] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.131337][ T44] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.149063][ T44] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.221058][T22632] netlink: 'syz.6.5727': attribute type 29 has an invalid length. [ 490.241562][T22632] netlink: 'syz.6.5727': attribute type 29 has an invalid length. [ 490.456131][T22647] netlink: 'syz.7.5735': attribute type 10 has an invalid length. [ 490.485428][T22643] bridge0: port 3(ipvlan2) entered blocking state [ 490.511290][T22643] bridge0: port 3(ipvlan2) entered disabled state [ 490.522529][T22643] ipvlan2: entered allmulticast mode [ 490.529419][T22643] bridge0: entered allmulticast mode [ 490.538973][T22643] ipvlan2: left allmulticast mode [ 490.544157][T22643] bridge0: left allmulticast mode [ 490.615822][T22647] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 490.753581][T22654] bond17: option xmit_hash_policy: invalid value (64) [ 490.783652][T22654] bond17 (unregistering): Released all slaves [ 491.305953][T22691] SET target dimension over the limit! [ 491.439487][T22701] x_tables: duplicate underflow at hook 2 [ 491.446195][T22699] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 491.450317][T22701] netlink: 'syz.9.5757': attribute type 2 has an invalid length. [ 491.463291][T22701] netlink: 'syz.9.5757': attribute type 2 has an invalid length. [ 491.530143][T22706] x_tables: unsorted entry at hook 2 [ 491.531500][T22705] openvswitch: netlink: Key type 31 is not supported [ 491.550515][T22705] netlink: 'syz.6.5758': attribute type 4 has an invalid length. [ 491.971508][T22725] xfrm1: entered promiscuous mode [ 491.976668][T22725] xfrm1: entered allmulticast mode [ 492.006443][T22730] netlink: 'syz.6.5767': attribute type 2 has an invalid length. [ 492.549854][T22767] xt_hashlimit: size too large, truncated to 1048576 [ 492.942014][T22781] netlink: 'syz.6.5784': attribute type 1 has an invalid length. [ 492.958579][T22781] netlink: 'syz.6.5784': attribute type 4 has an invalid length. [ 493.079061][T22794] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 493.300442][T22810] netlink: 'syz.2.5793': attribute type 6 has an invalid length. [ 493.618895][T22846] __nla_validate_parse: 42 callbacks suppressed [ 493.618916][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'. [ 494.133852][T22876] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5811'. [ 494.201863][T22879] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 494.212809][T22879] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 494.228707][T22879] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5812'. [ 494.416599][T22889] syzkaller0: entered promiscuous mode [ 494.422850][T22889] syzkaller0: entered allmulticast mode [ 494.760343][T22906] syzkaller1: entered promiscuous mode [ 494.765942][T22906] syzkaller1: entered allmulticast mode [ 494.929956][T22919] netlink: 18 bytes leftover after parsing attributes in process `syz.6.5825'. [ 495.132329][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5832'. [ 495.182339][T22933] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5831'. [ 495.523095][T22957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5842'. [ 495.571943][T22960] syzkaller1: entered promiscuous mode [ 495.588051][T22960] syzkaller1: entered allmulticast mode [ 495.623919][T22963] syz_tun: mtu less than device minimum [ 495.851386][T22977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.083908][T22989] bond17: entered allmulticast mode [ 496.090186][T22989] 8021q: adding VLAN 0 to HW filter on device bond17 [ 496.098310][T22989] bridge0: port 2(bond17) entered blocking state [ 496.105919][T22989] bridge0: port 2(bond17) entered disabled state [ 496.124450][T22989] bond17: entered promiscuous mode [ 496.154935][T22999] syz_tun: mtu less than device minimum [ 496.217669][T23001] syzkaller1: entered promiscuous mode [ 496.223299][T23001] syzkaller1: entered allmulticast mode [ 496.493700][T23014] validate_nla: 2 callbacks suppressed [ 496.493722][T23014] netlink: 'syz.9.5863': attribute type 3 has an invalid length. [ 496.516954][T23016] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5864'. [ 496.567468][T23020] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5863'. [ 496.774258][T23029] sctp: [Deprecated]: syz.7.5869 (pid 23029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.774258][T23029] Use struct sctp_sack_info instead [ 496.818454][T23029] netlink: 'syz.7.5869': attribute type 1 has an invalid length. [ 496.897021][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5869'. [ 496.964409][T23029] tipc: Resetting bearer [ 497.016707][T23043] netlink: 'syz.7.5869': attribute type 10 has an invalid length. [ 497.164734][T23043] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 497.398944][T23061] xt_recent: Unsupported userspace flags (000000b1) [ 497.461554][T23062] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 497.480098][T23062] bond2 (unregistering): Released all slaves [ 497.511701][T23067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 497.647521][T23080] netlink: 'syz.6.5883': attribute type 1 has an invalid length. [ 497.991301][T23104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.998640][T23104] IPv6: NLM_F_CREATE should be set when creating new route [ 498.005902][T23104] IPv6: NLM_F_CREATE should be set when creating new route [ 498.048561][T23104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.188882][T23114] syzkaller1: entered promiscuous mode [ 498.194476][T23114] syzkaller1: entered allmulticast mode [ 498.531879][T23136] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 498.858116][T23154] netlink: 'syz.7.5913': attribute type 12 has an invalid length. [ 498.865982][T23154] netlink: 'syz.7.5913': attribute type 29 has an invalid length. [ 498.897516][T23154] __nla_validate_parse: 3 callbacks suppressed [ 498.897536][T23154] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5913'. [ 498.914648][T23154] netlink: 59 bytes leftover after parsing attributes in process `syz.7.5913'. [ 498.949821][T23162] veth0: entered promiscuous mode [ 498.955812][T23156] syzkaller1: entered promiscuous mode [ 498.962429][T23156] syzkaller1: entered allmulticast mode [ 499.026049][T23154] veth3: entered promiscuous mode [ 499.135946][T23153] veth0: left promiscuous mode [ 499.431972][T23185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5927'. [ 499.471675][T23187] netlink: zone id is out of range [ 499.476835][T23187] netlink: zone id is out of range [ 499.489210][T23187] netlink: zone id is out of range [ 499.507055][T23187] netlink: zone id is out of range [ 499.519502][T23187] netlink: zone id is out of range [ 499.525155][T23187] netlink: zone id is out of range [ 499.559480][T23187] netlink: zone id is out of range [ 499.563369][T23194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.564826][T23187] netlink: zone id is out of range [ 499.571878][T23194] IPv6: NLM_F_CREATE should be set when creating new route [ 499.593789][T23187] netlink: zone id is out of range [ 499.750880][T23205] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5933'. [ 499.889322][T23213] netlink: 'syz.6.5936': attribute type 9 has an invalid length. [ 500.089903][T23227] Bluetooth: MGMT ver 1.23 [ 500.331346][T23244] IPv6: NLM_F_REPLACE set, but no existing node found! [ 500.471816][T23255] nbd: illegal input index 335946793 [ 500.756437][T23291] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5964'. [ 500.766525][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5964'. [ 500.777329][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5964'. [ 500.802874][T23295] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 501.663899][T23315] netlink: 'syz.7.5971': attribute type 6 has an invalid length. [ 501.721496][T23320] x_tables: duplicate underflow at hook 1 [ 501.730506][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5975'. [ 501.881128][T23335] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5978'. [ 501.964440][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5980'. [ 501.983129][T23339] nft_compat: unsupported protocol 0 [ 502.159013][T23341] team0 (unregistering): Port device team_slave_0 removed [ 502.179373][T23341] team0 (unregistering): Port device team_slave_1 removed [ 502.358351][T23352] netlink: 'syz.6.5987': attribute type 2 has an invalid length. [ 502.375663][T23356] netlink: 'syz.8.5985': attribute type 21 has an invalid length. [ 502.388987][T23352] 9: entered promiscuous mode [ 502.599329][T23359] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 502.610580][T23359] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 503.054280][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.063602][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.074237][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.083946][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.091899][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.345477][T23374] wlan0 speed is unknown, defaulting to 1000 [ 503.461734][T23374] chnl_net:caif_netlink_parms(): no params data found [ 503.535473][T23374] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.543022][T23374] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.551072][T23374] bridge_slave_0: entered allmulticast mode [ 503.559359][T23374] bridge_slave_0: entered promiscuous mode [ 503.567285][T23374] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.574451][T23374] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.581879][T23374] bridge_slave_1: entered allmulticast mode [ 503.589405][T23374] bridge_slave_1: entered promiscuous mode [ 503.622004][T23374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.634448][T23374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.666632][T23374] team0: Port device team_slave_0 added [ 503.675572][T23374] team0: Port device team_slave_1 added [ 503.704181][T23374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.714106][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.740718][T23374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.754144][T23374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.761514][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.788549][T23374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.832824][T23374] hsr_slave_0: entered promiscuous mode [ 503.839762][T23374] hsr_slave_1: entered promiscuous mode [ 503.845969][T23374] debugfs: 'hsr0' already exists in 'hsr' [ 503.852091][T23374] Cannot create hsr debugfs directory [ 503.974988][T23374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.986774][T23374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.997433][T23374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.007964][T23374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 504.083248][T23374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.094013][T23374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.105801][T23374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.116584][T23374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 504.195493][T23374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.206406][T23374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.217777][T23374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.229300][T23374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 504.280438][T23374] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 504.300147][T23374] batman_adv: batadv0: Removing interface: netdevsim0 [ 504.642659][T23374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.705079][T23374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.732135][T23374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.777947][T23374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.895710][T23409] syzkaller0: entered promiscuous mode [ 504.937530][T23409] syzkaller0: entered allmulticast mode [ 504.940283][T23402] __nla_validate_parse: 2 callbacks suppressed [ 504.940304][T23402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6002'. [ 505.112050][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6007'. [ 505.150609][ T5147] Bluetooth: hci0: command tx timeout [ 505.210384][T23433] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.240253][T23433] bridge_slave_1: left allmulticast mode [ 505.267990][T23433] bridge_slave_1: left promiscuous mode [ 505.277470][T23433] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.289721][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6009'. [ 505.291544][T23433] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 505.445246][T23374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.531586][T23374] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.594781][T23450] net_ratelimit: 48 callbacks suppressed [ 505.594801][T23450] syz_tun: mtu less than device minimum [ 505.615784][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.623012][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.658873][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6014'. [ 505.701850][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.709084][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.710162][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6014'. [ 505.742438][T11168] IPVS: starting estimator thread 0... [ 505.748529][T23462] IPVS: ip_vs_edit_dest(): server weight less than zero [ 505.771120][T23455] bridge0: entered promiscuous mode [ 505.776785][T23455] macsec1: entered promiscuous mode [ 505.782671][T23455] macsec1: entered allmulticast mode [ 505.791453][T23455] bridge0: entered allmulticast mode [ 505.804545][T23455] bridge0: port 2(macsec1) entered blocking state [ 505.811849][T23455] bridge0: port 2(macsec1) entered disabled state [ 505.822652][T23455] bridge0: left allmulticast mode [ 505.828368][T23455] bridge0: left promiscuous mode [ 505.858377][T23463] IPVS: using max 27 ests per chain, 64800 per kthread [ 506.104369][T23475] netlink: 'syz.8.6020': attribute type 10 has an invalid length. [ 506.138348][T23475] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6020'. [ 506.181896][T23477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6021'. [ 506.289120][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6022'. [ 506.330744][T23486] Cannot find del_set index 0 as target [ 506.379282][T23481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.389184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.415480][T23374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.454025][T23485] syzkaller0: entered promiscuous mode [ 506.468363][T23485] syzkaller0: entered allmulticast mode [ 506.506592][T23485] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6023'. [ 506.693453][T23374] veth0_vlan: entered promiscuous mode [ 506.750148][T23501] bond1: entered promiscuous mode [ 506.755309][T23501] bond1: entered allmulticast mode [ 506.761364][T23501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.803915][T23374] veth1_vlan: entered promiscuous mode [ 506.983917][T23517] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.991865][T23517] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.011501][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6036'. [ 507.049247][T23374] veth0_macvtap: entered promiscuous mode [ 507.071509][T23374] veth1_macvtap: entered promiscuous mode [ 507.159013][T11168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.190833][T23374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.237908][ T5147] Bluetooth: hci0: command tx timeout [ 507.265934][T23374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.284673][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.342963][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.358511][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.391631][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.443365][T23543] tipc: Started in network mode [ 507.468258][T23543] tipc: Node identity , cluster identity 4711 [ 507.485292][T23543] tipc: Failed to set node id, please configure manually [ 507.493747][T23543] tipc: Enabling of bearer rejected, failed to enable media [ 507.602728][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.619777][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.692716][T23550] macvtap1: entered allmulticast mode [ 507.699374][T23550] veth0_macvtap: entered allmulticast mode [ 507.720954][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.743578][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.913786][T23563] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.921456][T23563] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.939667][T23565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.960066][T11161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.131788][ T44] netdevsim netdevsim9 : set [0, 0] type 1 family 0 port 8472 - 0 [ 508.143728][ T44] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.156801][ T44] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.168419][ T44] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.189396][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.296895][T23583] bridge_slave_1: left allmulticast mode [ 508.305660][T23583] bridge_slave_1: left promiscuous mode [ 508.313238][T23583] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.429015][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.562350][T23602] bond1: entered promiscuous mode [ 508.569283][T23602] bond1: entered allmulticast mode [ 508.575173][T23602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.587923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.599926][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.858282][T23611] nbd2: detected capacity change from 0 to 127 [ 508.866732][T23616] block nbd0: reconnected socket [ 508.876965][ T5147] block nbd2: Receive control failed (result -32) [ 508.888457][ T5834] block nbd0: Receive control failed (result -32) [ 509.125084][T23628] veth3: entered allmulticast mode [ 509.308404][ T5834] Bluetooth: hci0: command tx timeout [ 509.661628][T23664] Cannot find add_set index 2 as target [ 509.671568][T23658] Cannot find add_set index 2 as target [ 509.708578][T23663] syzkaller0: entered promiscuous mode [ 509.714097][T23663] syzkaller0: entered allmulticast mode [ 509.782249][T23669] netlink: 'syz.6.6083': attribute type 32 has an invalid length. [ 509.899571][T23669] bond2: option coupled_control: invalid value (52) [ 509.941734][T23669] bond2 (unregistering): Released all slaves [ 510.021163][T23685] __nla_validate_parse: 13 callbacks suppressed [ 510.021184][T23685] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6087'. [ 510.180168][T23694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 510.207712][T23697] netlink: 'syz.2.6092': attribute type 8 has an invalid length. [ 510.232010][T23703] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6093'. [ 510.244095][T23704] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6093'. [ 510.473691][T23716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6096'. [ 510.570313][T23722] : renamed from hsr0 (while UP) [ 510.624270][T23724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6100'. [ 510.720688][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6101'. [ 510.782859][T23733] netlink: 'syz.7.6102': attribute type 3 has an invalid length. [ 510.851433][T23737] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6105'. [ 510.863083][T23737] block nbd0: reconnected socket [ 510.870319][T23733] net_ratelimit: 8 callbacks suppressed [ 510.870340][T23733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.888144][ T5834] block nbd0: Receive control failed (result -32) [ 511.092779][T23750] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6111'. [ 511.112723][T23750] tipc: Enabling of bearer rejected, failed to enable media [ 511.162070][T23752] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20000 [ 511.272322][T23758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6114'. [ 511.309285][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.365016][T23762] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6116'. [ 511.388294][ T5834] Bluetooth: hci0: command tx timeout [ 511.473408][T23762] veth0_to_bond: entered allmulticast mode [ 511.558705][T23767] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 512.229153][T23800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.238116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.280914][T11161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.287206][ T984] IPVS: starting estimator thread 0... [ 512.377310][T23807] IPVS: using max 24 ests per chain, 57600 per kthread [ 512.384827][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.478139][T23814] syz_tun: mtu less than device minimum [ 512.500157][T23817] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.911858][T23838] netlink: 'syz.8.6146': attribute type 1 has an invalid length. [ 513.136348][T23850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.278214][T23850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.333538][T23861] syz_tun: mtu less than device minimum [ 513.388534][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.509204][ T5931] IPVS: starting estimator thread 0... [ 513.597781][T23872] IPVS: using max 29 ests per chain, 69600 per kthread [ 513.749892][T23884] netlink: 'syz.2.6162': attribute type 3 has an invalid length. [ 513.822870][T23884] netlink: 'syz.2.6162': attribute type 4 has an invalid length. [ 514.018161][T23900] syz_tun: mtu less than device minimum [ 514.042246][T23869] tipc: Started in network mode [ 514.059721][T23869] tipc: Node identity ac1414aa, cluster identity 4711 [ 514.075347][T23869] tipc: Enabled bearer , priority 10 [ 514.407042][T23924] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 515.187873][ T5931] tipc: Node number set to 2886997162 [ 515.280565][T23988] __nla_validate_parse: 13 callbacks suppressed [ 515.280587][T23988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6198'. [ 515.285184][T23984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6197'. [ 515.290498][T23988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6198'. [ 515.334370][T23988] xt_TCPMSS: Only works on TCP SYN packets [ 515.388978][T23993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6199'. [ 515.437824][T23991] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6200'. [ 515.576283][T24004] syzkaller1: entered promiscuous mode [ 515.610909][T24004] syzkaller1: entered allmulticast mode [ 515.685451][T24011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6205'. [ 515.849264][T24017] netlink: 'syz.7.6208': attribute type 1 has an invalid length. [ 515.902787][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6208'. [ 516.040353][T24039] net_ratelimit: 12 callbacks suppressed [ 516.040372][T24039] syz_tun: mtu less than device minimum [ 516.155413][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6215'. [ 516.395730][T24043] hsr_slave_0 (unregistering): left promiscuous mode [ 516.508365][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.665781][T24077] sctp: [Deprecated]: syz.7.6227 (pid 24077) Use of int in maxseg socket option. [ 516.665781][T24077] Use struct sctp_assoc_value instead [ 516.742817][T24080] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6228'. [ 516.978469][T24097] netlink: 'syz.8.6236': attribute type 11 has an invalid length. [ 517.001422][T24097] netlink: 199788 bytes leftover after parsing attributes in process `syz.8.6236'. [ 517.065793][T24102] xt_hashlimit: overflow, try lower: 3/0 [ 517.389569][T11161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.550689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.598149][T24135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.605112][T24133] tipc: Started in network mode [ 517.606630][T24135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.620710][T24133] tipc: Node identity ca052bdd99f, cluster identity 250 [ 517.633204][T24135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.644769][T24133] tipc: Enabled bearer , priority 0 [ 517.655121][T24135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.665113][T24135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.665124][T24140] syzkaller0: entered promiscuous mode [ 517.665144][T24140] syzkaller0: entered allmulticast mode [ 517.676575][T24134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.701600][T24139] netlink: 'syz.2.6252': attribute type 1 has an invalid length. [ 517.754285][T24133] tipc: Resetting bearer [ 517.795437][T24145] vxcan2: entered allmulticast mode [ 517.814937][T24132] tipc: Resetting bearer [ 517.843352][T24132] tipc: Disabling bearer [ 518.342361][T24178] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.350149][T24178] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.784365][ T9] IPVS: starting estimator thread 0... [ 518.846252][T24208] netlink: 'syz.9.6284': attribute type 4 has an invalid length. [ 518.889611][T24206] IPVS: using max 27 ests per chain, 64800 per kthread [ 518.923838][T24208] netlink: 'syz.9.6284': attribute type 4 has an invalid length. [ 518.976904][T24217] team0: No ports can be present during mode change [ 519.055255][T24222] batadv_slave_1: entered promiscuous mode [ 519.110062][T24221] batadv_slave_1: left promiscuous mode [ 519.199027][T24232] syzkaller0: entered promiscuous mode [ 519.204667][T24232] syzkaller0: entered allmulticast mode [ 519.682713][T24257] syzkaller1: entered promiscuous mode [ 519.689049][T24257] syzkaller1: entered allmulticast mode [ 519.698018][T24259] syzkaller0: entered promiscuous mode [ 519.703592][T24259] syzkaller0: entered allmulticast mode [ 519.799712][ T5866] IPVS: starting estimator thread 0... [ 519.918099][T24267] IPVS: using max 34 ests per chain, 81600 per kthread [ 520.271966][T24283] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.355589][T24253] wlan0 speed is unknown, defaulting to 1000 [ 520.506868][T24290] syzkaller1: entered promiscuous mode [ 520.524307][T24290] syzkaller1: entered allmulticast mode [ 520.791829][T24302] __nla_validate_parse: 8 callbacks suppressed [ 520.791850][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6326'. [ 521.165437][T24314] net_ratelimit: 43 callbacks suppressed [ 521.165458][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.183407][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.199103][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.209485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.218205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.221982][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6331'. [ 521.226476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.243710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.252018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.260377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.269021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.481332][T24320] syzkaller0: entered promiscuous mode [ 521.486864][T24320] syzkaller0: entered allmulticast mode [ 521.552119][T24320] tipc: Enabled bearer , priority 0 [ 521.559565][T24322] syzkaller1: entered promiscuous mode [ 521.572288][T24322] syzkaller1: entered allmulticast mode [ 521.645501][T24320] tipc: Resetting bearer [ 521.666053][T24319] tipc: Resetting bearer [ 521.745790][T24319] tipc: Disabling bearer [ 522.253759][T24348] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6347'. [ 522.953194][T24368] netlink: 'syz.8.6354': attribute type 10 has an invalid length. [ 522.978368][T24368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 523.016063][T24372] syzkaller1: entered promiscuous mode [ 523.022886][T24372] syzkaller1: entered allmulticast mode [ 523.086175][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6358'. [ 523.096121][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6358'. [ 523.125873][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6358'. [ 523.127188][T14256] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.135881][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6358'. [ 523.165027][T14256] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.188316][T14256] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.197082][T14256] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.296471][T24446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6388'. [ 525.014235][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6394'. [ 525.160326][T24466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6397'. [ 525.750651][T24494] netlink: 'syz.7.6411': attribute type 29 has an invalid length. [ 525.764953][T24494] netlink: 'syz.7.6411': attribute type 29 has an invalid length. [ 525.774491][T24495] netlink: 'syz.9.6412': attribute type 2 has an invalid length. [ 526.370114][T24520] __nla_validate_parse: 1 callbacks suppressed [ 526.370134][T24520] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6424'. [ 526.512700][T11181] net_ratelimit: 36 callbacks suppressed [ 526.512720][T11181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.667358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.678165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.909811][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.159495][ T5834] Bluetooth: hci0: command tx timeout [ 527.288846][T24553] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6441'. [ 527.744537][T24568] netlink: 'syz.2.6448': attribute type 21 has an invalid length. [ 527.767979][T24568] netlink: 'syz.2.6448': attribute type 6 has an invalid length. [ 527.786203][T24568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6448'. [ 527.849028][T24572] netlink: 212940 bytes leftover after parsing attributes in process `syz.7.6449'. [ 527.949464][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.264025][T24595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.270632][T24595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.353135][T24597] netlink: 'syz.7.6462': attribute type 10 has an invalid length. [ 528.427527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.747874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.756680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.775870][T24628] tipc: Enabled bearer , priority 0 [ 528.813705][T24628] syzkaller0: entered promiscuous mode [ 528.819550][T24628] syzkaller0: entered allmulticast mode [ 528.825742][T24628] tipc: Resetting bearer [ 528.835350][T24627] tipc: Resetting bearer [ 531.017035][T24627] tipc: Disabling bearer [ 531.423591][T24666] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6490'. [ 531.867352][ C1] net_ratelimit: 7 callbacks suppressed [ 531.867372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.111522][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.594758][T11181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.150273][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.670970][T24662] netem: incorrect gi model size [ 533.676414][T24662] netem: change failed [ 533.795541][T24677] pim6reg1: entered promiscuous mode [ 533.807915][T24677] pim6reg1: entered allmulticast mode [ 533.991904][T24687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.192669][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.240929][T24700] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6504'. [ 534.632401][T24725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6515'. [ 534.641845][T24725] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6515'. [ 534.971942][T24741] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6522'. [ 534.987463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.227911][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.632059][T11181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.842187][T24782] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6540'. [ 535.854034][T24785] tipc: Enabling of bearer rejected, failed to enable media [ 535.877283][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.886189][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.931769][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6562'. [ 537.313748][ T984] net_ratelimit: 46 callbacks suppressed [ 537.313768][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.666986][T24876] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 537.902487][T24891] tipc: Started in network mode [ 537.919078][T24891] tipc: Node identity caeb2139b95, cluster identity 4711 [ 537.934543][T24891] tipc: Enabled bearer , priority 0 [ 537.961755][T24893] veth4: entered promiscuous mode [ 537.966929][T24893] veth4: entered allmulticast mode [ 537.984940][T24895] veth0_vlan: entered allmulticast mode [ 538.114185][T24891] syzkaller0: entered promiscuous mode [ 538.120499][T24891] syzkaller0: entered allmulticast mode [ 538.127009][T24891] tipc: Resetting bearer [ 538.136572][T24899] : renamed from vlan1 [ 538.187724][T24890] tipc: Resetting bearer [ 538.347805][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.427441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.670454][T11181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.398188][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.438500][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.601220][T11161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.719492][T24890] tipc: Disabling bearer [ 540.741032][T24936] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6609'. [ 540.778334][T11181] tipc: Node number set to 1941643577 [ 541.469797][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.584261][T24982] bridge_slave_0: left allmulticast mode [ 541.590308][T24982] bridge_slave_0: left promiscuous mode [ 541.596144][T24982] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.636873][T24982] bond0: (slave bridge_slave_1): Releasing backup interface [ 541.665631][T24982] bond0: (slave bond_slave_0): Releasing backup interface [ 541.681161][T24982] bond0: (slave bond_slave_1): Releasing backup interface [ 541.735267][T24982] team0: Port device team_slave_0 removed [ 541.749116][T24982] team0: Port device team_slave_1 removed [ 541.756024][T24982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.763862][T24982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.773656][T24982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.781533][T24982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.794772][T24982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.999304][T24998] netlink: 592 bytes leftover after parsing attributes in process `syz.6.6636'. [ 542.374637][T25010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6641'. [ 542.514130][ C1] net_ratelimit: 2 callbacks suppressed [ 542.514153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.528229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.548043][T11183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.852632][T24979] wlan0 speed is unknown, defaulting to 1000 [ 543.250810][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6657'. [ 543.284404][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6659'. [ 543.551059][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.633564][T11161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.091385][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6671'. [ 544.601460][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.627458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.635638][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.071259][T25085] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 546.662516][T25118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.671178][T11183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.848197][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6694'. [ 546.891874][T25126] ip6gre1: entered allmulticast mode [ 547.599239][T25172] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6717'. [ 547.624509][T25171] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6716'. [ 547.718426][ T9] net_ratelimit: 1 callbacks suppressed [ 547.718444][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.802815][T25183] tipc: Enabling of bearer rejected, failed to enable media [ 548.352317][ T5834] Bluetooth: hci4: command tx timeout [ 548.747413][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.065083][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6756'. [ 549.083504][T25251] veth1_macvtap: left promiscuous mode [ 549.150247][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6757'. [ 549.196163][T25255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.205277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.655758][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.679787][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.699152][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.722221][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.736223][T11181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.748831][T25277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.780479][T25282] xt_hashlimit: size too large, truncated to 1048576 [ 550.261262][T25257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.283478][T25257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.666961][T25271] veth1_vlan: entered allmulticast mode [ 550.708540][T25289] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6772'. [ 550.737705][ T1166] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.746669][ T1166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.794683][ T1166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.891755][ T1166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.091846][T25314] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 551.116528][T25314] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 551.303237][T25325] pimreg: tun_chr_ioctl cmd 1074025677 [ 551.315922][T25325] pimreg: linktype set to 260 [ 552.748616][ T5934] net_ratelimit: 11 callbacks suppressed [ 552.748639][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.909005][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.773862][T25354] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6794'. [ 553.867800][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.949489][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.024069][T25363] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6801'. [ 554.284238][T25380] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6807'. [ 554.287268][T25379] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6806'. [ 554.340580][T25379] ip6gre2: entered allmulticast mode [ 554.389125][T25382] syzkaller0: entered promiscuous mode [ 554.395684][T25382] syzkaller0: entered allmulticast mode [ 554.665524][T25403] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6816'. [ 554.921031][T25411] syzkaller0: entered promiscuous mode [ 554.926565][T25411] syzkaller0: entered allmulticast mode [ 554.997843][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.045555][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.517659][T25390] Bluetooth: hci4: command 0x0405 tx timeout [ 556.568789][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6845'. [ 556.626491][T25467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6845'. [ 556.909289][T12043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.083063][T11167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.668598][T25427] wg2: entered promiscuous mode [ 557.673526][T25427] wg2: entered allmulticast mode [ 557.713637][T25466] tipc: Enabling of bearer rejected, failed to enable media [ 557.891824][T25481] netlink: 'syz.6.6848': attribute type 3 has an invalid length. [ 558.023901][T25488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.108143][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.140019][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6852'. [ 558.166146][T14256] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.178154][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6852'. [ 558.188140][T14256] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.216771][T14256] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.220310][T25499] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6856'. [ 558.260241][T14256] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.598952][T25520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.613943][T25520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.970862][T25544] __nla_validate_parse: 2 callbacks suppressed [ 558.970883][T25544] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6876'. [ 558.995546][T25544] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6876'. [ 559.006459][T25544] vlan0: entered promiscuous mode [ 559.150552][T11169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.213178][T25557] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6883'. [ 559.305054][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6885'. [ 559.385699][T25566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6887'. [ 559.707464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.712319][T25575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6891'. [ 559.736550][T25575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6891'. [ 559.860193][T25582] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6895'. [ 559.892576][T25582] block nbd0: reconnected socket [ 559.910633][T25390] block nbd0: Receive control failed (result -32) [ 559.939103][T25588] netlink: 'syz.7.6899': attribute type 10 has an invalid length. [ 559.948158][T25588] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6899'. [ 559.951139][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.188332][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.243906][T25602] netlink: 'syz.2.6906': attribute type 10 has an invalid length. [ 560.262655][T25602] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.288981][T25602] bond0: (slave team0): Enslaving as an active interface with an up link [ 560.343231][T25610] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 560.469733][T25616] syz_tun: entered allmulticast mode [ 560.535944][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6913'. [ 560.876895][T25643] tipc: Enabling of bearer rejected, failed to enable media [ 564.228327][T25837] tipc: Cannot configure node identity twice [ 564.865702][T25881] syzkaller1: entered promiscuous mode [ 564.872236][T25881] syzkaller1: entered allmulticast mode [ 564.876468][T25885] __nla_validate_parse: 5 callbacks suppressed [ 564.876487][T25885] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7038'. [ 564.894933][T25885] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7038'. [ 564.904581][T25885] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7038'. [ 564.916070][T25885] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7038'. [ 565.463871][T25918] syzkaller1: entered promiscuous mode [ 565.470509][T25918] syzkaller1: entered allmulticast mode [ 565.583297][T25926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.609567][T25928] syzkaller1: entered promiscuous mode [ 565.615286][T25928] syzkaller1: entered allmulticast mode [ 565.685675][T25930] FAULT_INJECTION: forcing a failure. [ 565.685675][T25930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.700007][T25930] CPU: 0 UID: 0 PID: 25930 Comm: syz.9.7058 Not tainted syzkaller #0 PREEMPT(full) [ 565.700054][T25930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.700078][T25930] Call Trace: [ 565.700086][T25930] [ 565.700094][T25930] dump_stack_lvl+0x189/0x250 [ 565.700127][T25930] ? __pfx____ratelimit+0x10/0x10 [ 565.700152][T25930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.700174][T25930] ? __pfx__printk+0x10/0x10 [ 565.700193][T25930] ? __might_fault+0xb0/0x130 [ 565.700229][T25930] should_fail_ex+0x414/0x560 [ 565.700260][T25930] _copy_from_user+0x2d/0xb0 [ 565.700284][T25930] ___sys_sendmsg+0x158/0x2a0 [ 565.700307][T25930] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.700361][T25930] ? __fget_files+0x2a/0x420 [ 565.700377][T25930] ? __fget_files+0x3a0/0x420 [ 565.700407][T25930] __sys_sendmmsg+0x227/0x430 [ 565.700436][T25930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 565.700468][T25930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.700517][T25930] ? ksys_write+0x22a/0x250 [ 565.700547][T25930] ? __pfx_ksys_write+0x10/0x10 [ 565.700580][T25930] __x64_sys_sendmmsg+0xa0/0xc0 [ 565.700604][T25930] do_syscall_64+0xfa/0xfa0 [ 565.700628][T25930] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.700655][T25930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.700674][T25930] ? clear_bhb_loop+0x60/0xb0 [ 565.700698][T25930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.700717][T25930] RIP: 0033:0x7ff23e98f749 [ 565.700745][T25930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.700763][T25930] RSP: 002b:00007ff23cbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 565.700785][T25930] RAX: ffffffffffffffda RBX: 00007ff23ebe5fa0 RCX: 00007ff23e98f749 [ 565.700801][T25930] RDX: 0000000000000001 RSI: 0000200000004640 RDI: 0000000000000004 [ 565.700814][T25930] RBP: 00007ff23cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 565.700827][T25930] R10: 0000000004048040 R11: 0000000000000246 R12: 0000000000000001 [ 565.700844][T25930] R13: 00007ff23ebe6038 R14: 00007ff23ebe5fa0 R15: 00007ffc11a75878 [ 565.700880][T25930] [ 566.173816][T25939] FAULT_INJECTION: forcing a failure. [ 566.173816][T25939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.203918][T25939] CPU: 0 UID: 0 PID: 25939 Comm: syz.7.7062 Not tainted syzkaller #0 PREEMPT(full) [ 566.203948][T25939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.203961][T25939] Call Trace: [ 566.203976][T25939] [ 566.203985][T25939] dump_stack_lvl+0x189/0x250 [ 566.204017][T25939] ? __pfx____ratelimit+0x10/0x10 [ 566.204046][T25939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.204073][T25939] ? __pfx__printk+0x10/0x10 [ 566.204094][T25939] ? __might_fault+0xb0/0x130 [ 566.204135][T25939] should_fail_ex+0x414/0x560 [ 566.204171][T25939] _copy_from_user+0x2d/0xb0 [ 566.204198][T25939] ___sys_sendmsg+0x158/0x2a0 [ 566.204223][T25939] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.204285][T25939] ? __fget_files+0x2a/0x420 [ 566.204304][T25939] ? __fget_files+0x3a0/0x420 [ 566.204334][T25939] __x64_sys_sendmsg+0x19b/0x260 [ 566.204360][T25939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.204393][T25939] ? __pfx_ksys_write+0x10/0x10 [ 566.204425][T25939] ? do_syscall_64+0xbe/0xfa0 [ 566.204458][T25939] do_syscall_64+0xfa/0xfa0 [ 566.204485][T25939] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.204511][T25939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.204531][T25939] ? clear_bhb_loop+0x60/0xb0 [ 566.204556][T25939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.204576][T25939] RIP: 0033:0x7f6145b8f749 [ 566.204594][T25939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.204613][T25939] RSP: 002b:00007f6146a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.204635][T25939] RAX: ffffffffffffffda RBX: 00007f6145de5fa0 RCX: 00007f6145b8f749 [ 566.204651][T25939] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 566.204664][T25939] RBP: 00007f6146a97090 R08: 0000000000000000 R09: 0000000000000000 [ 566.204678][T25939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.204690][T25939] R13: 00007f6145de6038 R14: 00007f6145de5fa0 R15: 00007ffe2a486108 [ 566.204724][T25939] [ 566.440800][T25943] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7063'. [ 566.762195][T25962] FAULT_INJECTION: forcing a failure. [ 566.762195][T25962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.794520][T25962] CPU: 0 UID: 0 PID: 25962 Comm: syz.9.7072 Not tainted syzkaller #0 PREEMPT(full) [ 566.794548][T25962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.794561][T25962] Call Trace: [ 566.794570][T25962] [ 566.794579][T25962] dump_stack_lvl+0x189/0x250 [ 566.794613][T25962] ? __pfx____ratelimit+0x10/0x10 [ 566.794641][T25962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.794667][T25962] ? __pfx__printk+0x10/0x10 [ 566.794688][T25962] ? __might_fault+0xb0/0x130 [ 566.794729][T25962] should_fail_ex+0x414/0x560 [ 566.794764][T25962] _copy_from_iter+0x1de/0x1790 [ 566.794790][T25962] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 566.794818][T25962] ? policy_nodemask+0x27c/0x720 [ 566.794838][T25962] ? __pfx__copy_from_iter+0x10/0x10 [ 566.794868][T25962] ? set_page_refcounted+0xa0/0x1e0 [ 566.794889][T25962] ? page_copy_sane+0x4e/0x280 [ 566.794922][T25962] copy_page_from_iter+0xdd/0x170 [ 566.794950][T25962] tun_get_user+0x1d7b/0x3e90 [ 566.794985][T25962] ? tun_get_user+0x6f6/0x3e90 [ 566.795019][T25962] ? aa_file_perm+0x44d/0x1550 [ 566.795038][T25962] ? __pfx_tun_get_user+0x10/0x10 [ 566.795061][T25962] ? _parse_integer_limit+0x1ae/0x1f0 [ 566.795092][T25962] ? __lock_acquire+0xab9/0xd20 [ 566.795118][T25962] ? ref_tracker_alloc+0x318/0x460 [ 566.795136][T25962] ? __lock_acquire+0xab9/0xd20 [ 566.795158][T25962] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 566.795185][T25962] ? tun_get+0x1c/0x2f0 [ 566.795215][T25962] ? tun_get+0x1c/0x2f0 [ 566.795238][T25962] ? tun_get+0x1c/0x2f0 [ 566.795267][T25962] tun_chr_write_iter+0x113/0x200 [ 566.795295][T25962] vfs_write+0x5c9/0xb30 [ 566.795329][T25962] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 566.795354][T25962] ? __pfx_vfs_write+0x10/0x10 [ 566.795394][T25962] ? __fget_files+0x2a/0x420 [ 566.795424][T25962] ksys_write+0x145/0x250 [ 566.795455][T25962] ? __pfx_ksys_write+0x10/0x10 [ 566.795487][T25962] ? do_syscall_64+0xbe/0xfa0 [ 566.795520][T25962] do_syscall_64+0xfa/0xfa0 [ 566.795547][T25962] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.795576][T25962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.795596][T25962] ? clear_bhb_loop+0x60/0xb0 [ 566.795620][T25962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.795638][T25962] RIP: 0033:0x7ff23e98e1ff [ 566.795655][T25962] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 566.795672][T25962] RSP: 002b:00007ff23cbee000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 566.795694][T25962] RAX: ffffffffffffffda RBX: 00007ff23ebe5fa0 RCX: 00007ff23e98e1ff [ 566.795708][T25962] RDX: 00000000000000d2 RSI: 0000200000000080 RDI: 00000000000000c8 [ 566.795720][T25962] RBP: 00007ff23cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 566.795733][T25962] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001 [ 566.795746][T25962] R13: 00007ff23ebe6038 R14: 00007ff23ebe5fa0 R15: 00007ffc11a75878 [ 566.795782][T25962] [ 567.158523][T25974] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 567.168337][T25974] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 567.331669][T25979] syzkaller1: entered promiscuous mode [ 567.337294][T25979] syzkaller1: entered allmulticast mode [ 567.636240][T25992] syzkaller1: entered promiscuous mode [ 567.645462][T25992] syzkaller1: entered allmulticast mode [ 567.793734][T25999] syz_tun: mtu less than device minimum [ 568.101034][T26029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7102'. [ 568.118514][T26028] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7101'. [ 568.219131][T26028] bond0: (slave wlan1): Releasing backup interface [ 568.248136][T26028] ------------[ cut here ]------------ [ 568.253714][T26028] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 568.262886][T26028] WARNING: CPU: 0 PID: 26028 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.274515][T26028] Modules linked in: [ 568.279293][T26028] CPU: 0 UID: 0 PID: 26028 Comm: syz.8.7101 Not tainted syzkaller #0 PREEMPT(full) [ 568.289102][T26028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.299879][T26028] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.306254][T26028] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 20 43 89 8c e8 26 fa cd f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 de 0a f7 90 0f 0b 90 42 80 7c 3d [ 568.326411][T26028] RSP: 0018:ffffc900055e6f80 EFLAGS: 00010246 [ 568.333167][T26028] RAX: 1844f9e07a759e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 568.341570][T26028] RDX: ffffc9000f0e4000 RSI: 0000000000028e5f RDI: 0000000000028e60 [ 568.350071][T26028] RBP: ffff8880842457b8 R08: 0000000000000003 R09: 0000000000000004 [ 568.358737][T26028] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888084246a80 [ 568.366750][T26028] R13: ffff888084244d80 R14: 1ffff11010848af7 R15: dffffc0000000000 [ 568.375141][T26028] FS: 00007fee1a23f6c0(0000) GS:ffff888126139000(0000) knlGS:0000000000000000 [ 568.384520][T26028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.391767][T26028] CR2: 0000555569ef5588 CR3: 000000007613a000 CR4: 00000000003526f0 [ 568.400204][T26028] Call Trace: [ 568.403511][T26028] [ 568.406476][T26028] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 568.412805][T26028] __ieee80211_link_release_channel+0x33b/0x4a0 [ 568.419743][T26028] ? __pfx_ieee80211_uninit+0x10/0x10 [ 568.425179][T26028] unregister_netdevice_many_notify+0x1cde/0x2390 [ 568.431792][T26028] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 568.438634][T26028] ? __pfx_call_rcu+0x10/0x10 [ 568.443320][T26028] unregister_netdevice_queue+0x33c/0x380 [ 568.449303][T26028] ? kernfs_remove_by_name_ns+0xee/0x130 [ 568.454953][T26028] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 568.461263][T26028] _cfg80211_unregister_wdev+0x165/0x590 [ 568.466928][T26028] ieee80211_if_remove+0x256/0x310 [ 568.472128][T26028] ieee80211_del_iface+0x19/0x30 [ 568.477405][T26028] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 568.483340][T26028] genl_family_rcv_msg_doit+0x215/0x300 [ 568.488978][T26028] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 568.495086][T26028] ? bpf_lsm_capable+0x9/0x20 [ 568.499813][T26028] ? security_capable+0x7e/0x2e0 [ 568.504783][T26028] genl_rcv_msg+0x60e/0x790 [ 568.510275][T26028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.515339][T26028] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 568.520917][T26028] ? __pfx_nl80211_del_interface+0x10/0x10 [ 568.526773][T26028] ? __pfx_nl80211_post_doit+0x10/0x10 [ 568.532297][T26028] ? __asan_memcpy+0x40/0x70 [ 568.536888][T26028] ? __pfx_ref_tracker_free+0x10/0x10 [ 568.542518][T26028] netlink_rcv_skb+0x208/0x470 [ 568.547324][T26028] ? __lock_acquire+0xab9/0xd20 [ 568.552199][T26028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.557304][T26028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.562627][T26028] ? down_read+0x1ad/0x2e0 [ 568.567474][T26028] genl_rcv+0x28/0x40 [ 568.571490][T26028] netlink_unicast+0x82f/0x9e0 [ 568.576284][T26028] ? __pfx_netlink_unicast+0x10/0x10 [ 568.581622][T26028] ? netlink_sendmsg+0x642/0xb30 [ 568.586691][T26028] ? skb_put+0x11b/0x210 [ 568.591234][T26028] netlink_sendmsg+0x805/0xb30 [ 568.596061][T26028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.601540][T26028] ? aa_sock_msg_perm+0xf1/0x1d0 [ 568.606489][T26028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 568.611824][T26028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.617189][T26028] __sock_sendmsg+0x21c/0x270 [ 568.621908][T26028] ____sys_sendmsg+0x505/0x830 [ 568.626704][T26028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.632349][T26028] ? import_iovec+0x74/0xa0 [ 568.636890][T26028] ___sys_sendmsg+0x21f/0x2a0 [ 568.641640][T26028] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.646906][T26028] ? __fget_files+0x2a/0x420 [ 568.651578][T26028] ? __fget_files+0x3a0/0x420 [ 568.656264][T26028] __x64_sys_sendmsg+0x19b/0x260 [ 568.661424][T26028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.666932][T26028] ? do_syscall_64+0xbe/0xfa0 [ 568.673688][T26028] do_syscall_64+0xfa/0xfa0 [ 568.678271][T26028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.684345][T26028] ? asm_sysvec_call_function_single+0x1a/0x20 [ 568.690902][T26028] ? clear_bhb_loop+0x60/0xb0 [ 568.695589][T26028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.701522][T26028] RIP: 0033:0x7fee1938f749 [ 568.705940][T26028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.726172][T26028] RSP: 002b:00007fee1a23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.734656][T26028] RAX: ffffffffffffffda RBX: 00007fee195e5fa0 RCX: 00007fee1938f749 [ 568.742689][T26028] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 568.751713][T26028] RBP: 00007fee19413f91 R08: 0000000000000000 R09: 0000000000000000 [ 568.759974][T26028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.768037][T26028] R13: 00007fee195e6038 R14: 00007fee195e5fa0 R15: 00007ffe15692048 [ 568.776053][T26028] [ 568.779258][T26028] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.786536][T26028] CPU: 0 UID: 0 PID: 26028 Comm: syz.8.7101 Not tainted syzkaller #0 PREEMPT(full) [ 568.795895][T26028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.805945][T26028] Call Trace: [ 568.809226][T26028] [ 568.812155][T26028] dump_stack_lvl+0x99/0x250 [ 568.816749][T26028] ? __asan_memcpy+0x40/0x70 [ 568.821340][T26028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.826556][T26028] ? __pfx__printk+0x10/0x10 [ 568.831250][T26028] vpanic+0x237/0x6d0 [ 568.835231][T26028] ? __pfx_vpanic+0x10/0x10 [ 568.839759][T26028] panic+0xb9/0xc0 [ 568.843483][T26028] ? __pfx_panic+0x10/0x10 [ 568.847942][T26028] __warn+0x31b/0x4b0 [ 568.851947][T26028] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.857673][T26028] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.863419][T26028] report_bug+0x2be/0x4f0 [ 568.867784][T26028] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.873532][T26028] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.879282][T26028] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 568.885019][T26028] handle_bug+0x84/0x160 [ 568.889270][T26028] exc_invalid_op+0x1a/0x50 [ 568.893778][T26028] asm_exc_invalid_op+0x1a/0x20 [ 568.898624][T26028] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 568.904963][T26028] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 20 43 89 8c e8 26 fa cd f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 de 0a f7 90 0f 0b 90 42 80 7c 3d [ 568.924579][T26028] RSP: 0018:ffffc900055e6f80 EFLAGS: 00010246 [ 568.930653][T26028] RAX: 1844f9e07a759e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 568.938624][T26028] RDX: ffffc9000f0e4000 RSI: 0000000000028e5f RDI: 0000000000028e60 [ 568.946594][T26028] RBP: ffff8880842457b8 R08: 0000000000000003 R09: 0000000000000004 [ 568.954566][T26028] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888084246a80 [ 568.962543][T26028] R13: ffff888084244d80 R14: 1ffff11010848af7 R15: dffffc0000000000 [ 568.970546][T26028] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 568.976545][T26028] __ieee80211_link_release_channel+0x33b/0x4a0 [ 568.982791][T26028] ? __pfx_ieee80211_uninit+0x10/0x10 [ 568.988177][T26028] unregister_netdevice_many_notify+0x1cde/0x2390 [ 568.994612][T26028] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 569.001394][T26028] ? __pfx_call_rcu+0x10/0x10 [ 569.006081][T26028] unregister_netdevice_queue+0x33c/0x380 [ 569.011821][T26028] ? kernfs_remove_by_name_ns+0xee/0x130 [ 569.017496][T26028] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 569.023789][T26028] _cfg80211_unregister_wdev+0x165/0x590 [ 569.029446][T26028] ieee80211_if_remove+0x256/0x310 [ 569.034573][T26028] ieee80211_del_iface+0x19/0x30 [ 569.039519][T26028] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 569.045423][T26028] genl_family_rcv_msg_doit+0x215/0x300 [ 569.050989][T26028] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 569.057077][T26028] ? bpf_lsm_capable+0x9/0x20 [ 569.061761][T26028] ? security_capable+0x7e/0x2e0 [ 569.066719][T26028] genl_rcv_msg+0x60e/0x790 [ 569.071237][T26028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 569.076266][T26028] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 569.081641][T26028] ? __pfx_nl80211_del_interface+0x10/0x10 [ 569.087463][T26028] ? __pfx_nl80211_post_doit+0x10/0x10 [ 569.092937][T26028] ? __asan_memcpy+0x40/0x70 [ 569.097534][T26028] ? __pfx_ref_tracker_free+0x10/0x10 [ 569.103190][T26028] netlink_rcv_skb+0x208/0x470 [ 569.107957][T26028] ? __lock_acquire+0xab9/0xd20 [ 569.112894][T26028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 569.117927][T26028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.123243][T26028] ? down_read+0x1ad/0x2e0 [ 569.127662][T26028] genl_rcv+0x28/0x40 [ 569.131655][T26028] netlink_unicast+0x82f/0x9e0 [ 569.136444][T26028] ? __pfx_netlink_unicast+0x10/0x10 [ 569.141744][T26028] ? netlink_sendmsg+0x642/0xb30 [ 569.146689][T26028] ? skb_put+0x11b/0x210 [ 569.150943][T26028] netlink_sendmsg+0x805/0xb30 [ 569.155734][T26028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.161023][T26028] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.165976][T26028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.171264][T26028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.176559][T26028] __sock_sendmsg+0x21c/0x270 [ 569.181249][T26028] ____sys_sendmsg+0x505/0x830 [ 569.186040][T26028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.191354][T26028] ? import_iovec+0x74/0xa0 [ 569.195876][T26028] ___sys_sendmsg+0x21f/0x2a0 [ 569.200677][T26028] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.205928][T26028] ? __fget_files+0x2a/0x420 [ 569.210531][T26028] ? __fget_files+0x3a0/0x420 [ 569.215222][T26028] __x64_sys_sendmsg+0x19b/0x260 [ 569.220168][T26028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.225654][T26028] ? do_syscall_64+0xbe/0xfa0 [ 569.230342][T26028] do_syscall_64+0xfa/0xfa0 [ 569.234871][T26028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.241034][T26028] ? asm_sysvec_call_function_single+0x1a/0x20 [ 569.247193][T26028] ? clear_bhb_loop+0x60/0xb0 [ 569.251880][T26028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.257776][T26028] RIP: 0033:0x7fee1938f749 [ 569.262191][T26028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.281801][T26028] RSP: 002b:00007fee1a23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.290225][T26028] RAX: ffffffffffffffda RBX: 00007fee195e5fa0 RCX: 00007fee1938f749 [ 569.298198][T26028] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 569.306172][T26028] RBP: 00007fee19413f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.314147][T26028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.322118][T26028] R13: 00007fee195e6038 R14: 00007fee195e5fa0 R15: 00007ffe15692048 [ 569.330115][T26028] [ 569.333567][T26028] Kernel Offset: disabled [ 569.337886][T26028] Rebooting in 86400 seconds..