last executing test programs: 4.568479314s ago: executing program 3 (id=5257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.48088044s ago: executing program 3 (id=5260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.319293492s ago: executing program 3 (id=5264): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='geneve1\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @multicast1}, &(0x7f00000000c0)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x23}, 0x94) 2.764993813s ago: executing program 3 (id=5268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYRES64=r1, @ANYRES64=0x0], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40048d4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x5460, 0x0) r5 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/16, 0x10}], 0x1}}], 0x1, 0x40032041, 0x0) 2.455558461s ago: executing program 3 (id=5274): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910080001000000630800000000000000007c0000e700002dfefd2c0ee1469a345e4f6ec20c0bec1aedc5eb0999f5a914fa5924553cbe5d0b00b24c33fdb1ae590f8d29ebbfc19daeca0bd6c81246d95db6d94dbef45f4d2993fd8117d8846278fc717bdee1a863bc4ef1d242d5a5eb33f6e582b9a72436e822bd657408d2a5ea8550339a5372f3cd44964a857daa2c2aa90b91a1384a7ec3d6e2f6"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) r5 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000000)=0x80, 0x80000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x58}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r13, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8005}, 0x4050) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[], 0xa) 2.052436001s ago: executing program 3 (id=5280): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) unshare(0x62000000) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x81, 0x0) close(0x4) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1406, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x8, 0x4, 0xff, 0x0, 0x1, 0x40, 0x8, 0x0, 0x24}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r7}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x5055}, 0x8) 1.162020212s ago: executing program 1 (id=5296): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000780), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x40, 0x4, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.137236326s ago: executing program 2 (id=5297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 1.116117629s ago: executing program 0 (id=5298): r0 = socket(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x8) (async) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x8) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'wg0\x00', 0x5}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x39, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x2c}}, 0x800) 996.296397ms ago: executing program 1 (id=5299): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)="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", 0x15f}, {&(0x7f0000000240)="92c8308f50bba2da5ee082c3b8dfae49dd913523b57daa0c3360c48ac2dfb3c6966fcbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867a70f93838c529160935b2e8d215daa857d8d8af704772858ca50a7a49e610c807b96eae4617639b498aec97ad751e6a92", 0x74}, {&(0x7f0000001740)="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", 0xdc3}], 0x3}, 0x4090) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x1, 0x8, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x78, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x5c}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2fa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc0}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x91}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6f95}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4028040}, 0x18000) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newqdisc={0x148, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x10, 0x8}, {0xffe0, 0xe}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xff, 0x6, 0xfffffffa, 0x1, 0x80, 0x8, 0x2}}, {0x8, 0x2, [0x8, 0xde]}}, {{0x1c, 0x1, {0x1, 0x3, 0xff, 0x1, 0x1, 0x3a65, 0x4, 0x1}}, {0x6, 0x2, [0x1f3e]}}, {{0x1c, 0x1, {0x19, 0xb, 0x4e2, 0x9, 0x0, 0x10000, 0x7, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x4426, 0x6, 0x5, 0x69]}}, {{0x1c, 0x1, {0x9, 0x4, 0x3, 0xff00000, 0x2, 0x7, 0x8, 0x3}}, {0xa, 0x2, [0x200, 0x5, 0x2]}}, {{0x1c, 0x1, {0xd, 0x5, 0x2, 0x20, 0x0, 0x100, 0xd0c, 0x4}}, {0xc, 0x2, [0x0, 0x9, 0x4e32, 0xfff]}}, {{0x1c, 0x1, {0x3, 0x3, 0xa927, 0x0, 0x2, 0x5, 0x3, 0x6}}, {0x10, 0x2, [0x101, 0x3, 0xf000, 0xfb3b, 0xc, 0x6]}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0xd5ab, 0x1, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x10]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x148}}, 0x0) (async, rerun: 64) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xfffffffffffffc24, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 32) sendmmsg(r7, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async, rerun: 32) ioctl$sock_ifreq(r9, 0x8911, &(0x7f0000000a80)={'wg1\x00', @ifru_settings={0x3, 0x1, @sync=&(0x7f0000000a40)={0x3, 0xfffffbff, 0xc}}}) sendmsg$NFT_BATCH(r7, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xee, 0x7, 0x1, 0x0, "50514e1cba85d89a634c4539e6136fa3f4a4c4e33214b06d28460afd046ba9609894792fe922dbb13a3d9c00c5e591d2c9ce7d84b8b62304f793f20d6161cd034efad276a579ab405aea4c2c33b3db7ebd4047878229f862529f865e52c457cab5af91ba1c2018cb06addbcce94013a8530006a544af987ab46dac1514d8ea319f05f8718ff2a3ff92ceb2834b5fd1d3406b9490a26a9b19bc50281fec3d41830bbe6f825783b4246d95f2b66377f2961d76c4aec700e2b7bd4c9f571a06d73dc10173f0c6ac61f583bdc9a1adf07ad5ee8540a54379084b7e919380a09846b9a7ca1213660addc8d7e3"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x16c}, 0x1, 0x0, 0x0, 0x4904}, 0x20000080) 971.062857ms ago: executing program 0 (id=5300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a00000709e8020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100070000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000840}, 0x4c8d0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r5, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000380)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000040900010073797a31000000001c0004801800018008000100647570000c00028008000140000000020900020073797a3200000000140000001100010000000086000000000100000ab2b69531049005b427a19044ae325df78d95532b00083f41f4f6559e0221ae"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)=ANY=[@ANYRESHEX=r3], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8010) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 888.517728ms ago: executing program 1 (id=5302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbbc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) 887.960982ms ago: executing program 2 (id=5303): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) unshare(0x8040480) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x5760, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095", @ANYRES16=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095", @ANYRES16=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r4, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r4, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x2c}}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fd7e43b4", @ANYRES16=r8, @ANYBLOB="010002000000fbdbdf253600000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 842.457774ms ago: executing program 4 (id=5304): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080)="149d8a97c5c40c1def1902fa6b02d71ff2669b11f1daa15c1eadfbff7134040439e1d8b8e7f866969f6255d5956f4eaa000154c65a7c8dd1fd4c6fc31f33aac6d6bab8b17efa247235dfa7620401b9b0a6020e7daa60ec6fd86b150fe989", &(0x7f0000000100)=@udp=r1}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="b9ed29bb189bf2c983f72c5245ae7d2a3c19575c586a26685bebfd77bd108c36a74b4273689774", 0x27}, {&(0x7f0000000200)="53a2546d11d3ecaed0db91414ccb0dbb1c3fe95d90cfc39680fe09785ee44c6c92873a3da4ac48691275c545b8be015eaf652bfcbc94160ce5e6040fcdfc34bd52d8c5e2c905979183b39d0318e12d47b9e24b02ddbe58818d36cdb5519f572e4456ab07fd316d4063d5a340b7a6427622a079d056dc650bc31a47a4ba9d2175e46624016b4c07cddd30ea77f2d058066c585a7b996649bd54a0cc0a173719df8eee1ed0f4769de4c5bc92c07195ce10d246c3f5159bcff42cb8566c93ee1516a544cbab4b13a53e2bbd95017582966773230d023733cf89564d6f9b586793eb60e17a1777", 0xe5}, {&(0x7f0000000300)="feff543a1a5637ba4f35a4d3a60abcf3b1f17fc5c53f9b26558c79f1f77f2b6b4d20429413a1db5a1c30377db1374259750683af847e5497b6b222846bc6143bcad46b749268673b665d77d8ff9376bc43effb82e07261ce1394eb0ef8866ae6ff7bbb385b277be74a38abe823849ee7633766d3a1376b15d7c79ccea61807e2a69283afbd14a0028f60b7986c30c2141d0d5e4abe564c33f32b8391f8d7171d", 0xa0}, {&(0x7f00000003c0)="0c476f821ea1c94e4a3ce27700f406e35c536b1c1e6bd45f858ddb91ccdeea30cb8741d7ac7a1b9e7de4920035aa8ac8b0b08a98c97bd41ee2e87b36e0e6075ab38b41e91588da49cfe52ceb5e2524242ba1d7d76cfde372b702398796e4d3db4099a5d6570a948c41ee31e23e1ef923c770f9fd9abf50ee5479a8183a9e11ddef9d3155aa", 0x85}, {&(0x7f0000000480)="0f27bff2fcad404e55c9677e1b1b80010b14d614f43bc3f04efec6f7f0a952219cab25b33df7e26f5d3d165f948dac0bf5033cacce189c5a21eb3c5e5f46d0a47744a0d2ac5967132f548e0dcf899ea5bdbc0f326fc3f478b39faef38855c1242c9d69af87e0b00ae2940a813289c99e5c45b49ad489e3521609bfb4fb99", 0x7e}, {&(0x7f0000000500)="250fe3fc03c4a152097b2dd4f766ab184fd473fbb39109fb3d80b2d501b6d73d43e55d1f03ac9f816bdf6f1b0326229bae52d3640b4dcb8056f201ba69f5a5", 0x3f}], 0x6, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0x80, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x58}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xa0}, 0x40004) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000009c0)={@empty, @multicast1, r2}, 0xc) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000a00)={0x0, 0x0, 0xfa, r2, 0x1a}, 0xc) (async) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000a40)=""/92, &(0x7f0000000ac0)=0x5c) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x80000000, 0x20, 0x3, 0x2004, r0, 0x105c738d, '\x00', 0x0, r5, 0x4, 0x4, 0x0, 0xb}, 0x50) (async) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000bc0)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c40)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x110, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000c00), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffffff, 0x0, 'bridge_slave_0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x1, 0x8}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x7}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d6]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'caif0\x00', {0x81}}}}, {{@ip={@broadcast, @local, 0xffffffff, 0xffffffff, 'tunl0\x00', 'wg0\x00', {}, {}, 0x11, 0x2, 0x32}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfff, 0x0, 0x401, 0xd, 0x1c, 0x2, 0x200, 0x5]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5}, {0x1, 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) syz_open_procfs$namespace(0x0, &(0x7f0000000fc0)='ns/cgroup\x00') (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001000)={'dvmrp0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000001040)={0xf, 0x61}, 0x2) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001080)='blkio.bfq.dequeue\x00', 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f00000010c0)=0x1, 0x4) (async) recvmsg$unix(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/247, 0xf7}, {&(0x7f0000001200)=""/109, 0x6d}, {&(0x7f0000001280)=""/81, 0x51}, {&(0x7f0000001300)=""/141, 0x8d}], 0x4, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x100) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000001480)={"650e117f35a8e0c3bbe485a25406bf8b", 0x0, 0x0, {0x620, 0x8}, {0x1000, 0x3}, 0x3, [0x1, 0x5, 0x6, 0x6, 0x0, 0x10, 0x8, 0x8, 0x7fffffffffffffff, 0x4, 0x7, 0x1, 0x6, 0x29, 0x9]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001580)=r11) (async) connect$inet(r10, &(0x7f00000015c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$bt_l2cap(r10, &(0x7f0000001600)={0x1f, 0x0, @any, 0x3ff, 0x1}, 0xe) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000001640), &(0x7f0000001680)=0xe) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000016c0), r13) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f0000001700)) 817.2598ms ago: executing program 2 (id=5305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"], 0x48) write$tun(r0, &(0x7f0000002640)=ANY=[@ANYBLOB="000086dd0000120000000000000064f871760f9806fffe8000000000000000000000000000aafe8800000000000000000000000001014e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50101000"], 0xfce) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 664.367275ms ago: executing program 0 (id=5306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f00000000c0)=@udp, 0x2}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r4, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) r6 = getpid() r7 = socket$inet(0x2, 0x80000, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r3, &(0x7f0000000600)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc, &(0x7f0000000040)=[{&(0x7f0000001f40)={0x1534, 0x36, 0x518, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x2d4, 0xdf, 0x0, 0x1, [@generic="ff5298a783deff8574b7be0fb69dabfa535ca48824acdc373743ad8746612f120ae607aceb174396eb9f6272e874c345022a3961aafda9dedda8c82b15e6a526260ac96e616ba169e6ce5e04a7f0db889a619be2b5c3e163c166", @generic="9ec3da6535864d4acae00a4e6c434906b0d0fb7813a4fea761eea78ac127416994dcb237ad1d416a841d0fc7e5817db31a38fbcbec19d9aaf25a434009247e32908a33e59622f716d5b58d278bec8082352ea95699bad16fa084253a02852954e6a1", @generic="a031246806c99a039fcbf60e521ed23c127a5df34345129649a725bd56a8c81e971ef053307ae80b224991513c04a5cf480f690252ac06063b7f706dcaf109ea5bf798d826600354a1a0afdd4e6d46bb1b22e13580cdcddb8d109243b87afa71022568e3fec3cd3fdd681e984a77b40f2fceaf32e7ed9b1cf6fe53772a6c322ef573419e145fb68b582cc4199cf8284d218b8c658f732f60ed6a247bc5940ac482c34d0f4c6d13739b6c63a5f949f69a0f2b0ebe6e796b8a6c938baaa285c840db86ec91f1e148d62c396d40dc555b818beb856665526b3a76b5f644ddea368c25d56f4a596d4472d3b7d730b9000ae45136", @generic="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", @typed={0x8, 0xff, 0x0, 0x0, @pid=r5}, @generic="b337a645336983280a290d086edc967968abbbdb7e4bd416c3086c83"]}, @typed={0x8, 0xff, 0x0, 0x0, @fd=r2}, @typed={0x87, 0x9, 0x0, 0x0, @binary="cd08f4a1ac85930e159491f36638c4d6e71dc6db4dbfdbf90536324dd6bdfb5416bbed4bea0bb71d058080bb57ab77d5ca571bb5a7e731fed98cf6f52f8e0c4e3bf1b4e8cfe34757ee61bb9028549d2589ccbe243681c889d5b623a0c8371ed9d5e76a347d0bc72721b015ac0376c9780f670c4bb39177688a33db22626de8b8b80419"}, @nested={0x1130, 0x5e, 0x0, 0x1, [@typed={0x1004, 0x2f, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x8}, @generic="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", @nested={0x4, 0xca}]}, @generic="a54de4643db4", @generic="73eb41521493", @generic="2a556104595e867819df5344ff627e65978c8af96e700bf26f748c6a5e6ad909c94cc4b6cda7585c4d09086b6e2f6f52d4312ccf0eac56836c4223b0f05d92e5b1c2ad63c621dac8a4f4e9bf48e7d1c837c9b0c2", @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x7fe6}]}, 0x1534}, {&(0x7f0000001bc0)={0x368, 0x39, 0x200, 0x70bd25, 0x25dfdbfb, "", [@typed={0x6, 0x2d, 0x0, 0x0, @str='(\x00'}, @generic="4cd1f98ddb51beeed422125af138a3de2bdfd190cac38f8a3566114c1b5946260c44019b09ef74c9f35f902664c3efe0e04a106a5e4a804fabc122ac7c122b614667d68aa7b5eaf5490a4efae22c9d4dbaaa5eeb931a9dca870f09ec4651395756e6179d848c5a7fa3dfd1c6312025f8f655df9bd3c464f3e2469ff294c3ee7da13fab22c715a548eb488d", @generic="175d973a89e2d8966b59421282af5653c204907923b0246024c8aff908ccb2925c113c7c0d81b9765c54283dcfcf", @generic="b6dc9780b9fddee39355fea870a1df6767640cdb575ea75e98141f95aff3efe18300e296ef38c5d57ff3f16fe328f45217c6a7d912a5c07da1ea79d6af61dba83a17af71eb9c7f09232463d5100b759293ce186b68b90afed1895d1de1e52bd6494cb7dde2355c63523a9a0927d4ba0b4323ee2338428c09b7316ae3998fcc85cc123756a9fbafd8183dc81e50bcc3093bc4b88b", @typed={0x8, 0x14e, 0x0, 0x0, @pid=r6}, @typed={0x4, 0xc6}, @nested={0x191, 0x50, 0x0, 0x1, [@nested={0x4, 0x37}, @nested={0x4, 0x5d}, @generic="b99cb8befb3271bc1eb3a3c12bda6bbcc1771a3ce04d30759b6c9225b0ca82328903d119764929b994d95b8bc2e1ca84988fa401d307a362321becfc218ed4f1e8e359324e422d893ed47f4c4866a77fe6e7cd78a4b1f19bce704bf2b962bc40200a7c0b4f11b944bf5a7a1cbdaeb4174dd0e10538e0bf93a9eb34ce9a98da401795a9acd97f00f58bdf09fc99ad3da707f8f3d7bf24492fd6db0b5cc5c7e66edd22aeed3925c2c6b6596f7d48166e48d7bb60296eee8c607b786842fcce4b8022aa1ba31d4e560dbe45678e1e06e5aea24f668ac4fee155efce1d7b50051a0a36c99cf9e1ea22", @nested={0x4, 0x67}, @nested={0x4, 0xee}, @generic="8233bdada7315a4c4e0f734335b37ee55c48ed1b1b0946bd5ff6627bc5adbd6b7537a4178d39f11f7f306e61044f34f23f6e3f7e9930ac20f0b6c310238b2367f051a8e20e55e202a26a7a1d7e517c884aacda681320ac16b8a2a9b902963d203aa8426abe7f95ab178112b648edbd0f68604d35524114f07812d6f1e61d77199aeebd571363e913b22eeed8e88736881341e30cd1e3"]}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r0}, @typed={0x55, 0x7b, 0x0, 0x0, @binary="ec6a9fc8fe2ffaea00e81e871d3bd1a9053bd26614e74b20f3af5532b59035b01d6e7827ff728cf09043cc843592600e4a9933d2037adfa23fb5135e9e5605250d1048f705a1c8d393c162236c5ae5175f"}]}, 0x368}, {&(0x7f0000000280)={0x150, 0x10, 0x8, 0x70bd27, 0x25dfdbfe, "", [@generic="a3031bdffc6549818256f5cb225de189829f2b258aa0aaa036d53ee8b4226fa06935b04ca4a7e2f4de36214f95a5b8fc2cdb5133b9361078bbbb68f81bb6e1d8f0245e6a311cd21e6e6b1dddd751a4467699b49bb91a063459921ae20fadcdd7d243966f808a1e4b203d51ef7300600aa2871fd6bc42ba84cb40ca22e0512f861801b1a845092e8f95aadef39b10b9ce33ee84dae35bcd9ab5f995abc519e5bbdeae014eb8008d561c913caf270735af8025600b44fedf8f1035a6a94e8223981f", @typed={0x79, 0x71, 0x0, 0x0, @binary="3f2fc841c5111dd7c24bd87cc8ecc469b8754db7371b6b7dc24ddb487177dad59ecb0b12f759a2673f100e22f6cbb6bca072b07a428942b81f11989d7c2857f98d4d1bc7be0d51a8985f2a6ca47cb48d371dfdebda1eb5031800f5ed5bb51efc47f630e45f3bcc80b53d64279ce3c881f0f1070b9f"}]}, 0x150}], 0x3, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [r1, r7, r0, r1, r1, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x68, 0x4008890}, 0x20000004) 664.074607ms ago: executing program 4 (id=5307): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) write$cgroup_subtree(r3, &(0x7f0000001200)=ANY=[], 0xfe33) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x448, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x23, 0x81, 0x0, 0x8, {0x4e22, 0x4e21, [0x4, 0x10000, 0x44a1233, 0x2], [0x1, 0x7, 0x33e7, 0x9], 0x0, [0x6, 0x6]}, 0xbb6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "4d7ad7194c831f3e296f66da7f5770028891a40ba337df27e0b84441bde715057c4d7db188c0865df6277031ebf02218c1fa5d84cc6ef921fae45ea2e7372aeba36abd4feb116c7ab0a1b0c2783437f3ab5b681ba2b6a43b1eb5a1a2a806b1693024e3bc2739216a8406e26443f93c3e1dc9d4f84764d346f38510ce8e76cfea5244a253edcbe08925df1ee82c1b4fc3f2504a7212576a93acd1d05a41a1a506d0f10dec472c59a809304575db82f6ca78717c"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "f45910071ecfb057fc2bdefe6040c66e8846e1c273321000aa812745193664586ce8eadc206f9a845d4098ae8a781659a54d1f030234c5b5f65d34ee8062ba5f66dc3cddc58d72fdb797020529e8ad92f65cb275ec43a132f3cb860547dcb91d24d04e94c398a31df7d05b2387bd183e4bc21b7226ff5a53efec424bba47c3f23b9d8e65c36ff5dc16c453a2b686a1ede421240df87a026bf2df3546e55e419792563fe6fcd05c7689ef11785c66e917ce496903cd192d19fd6cfc0ab6ec77c9f36acf29970f4b4e84a0396d16ac583c49a30eadd1a77917cb052c550b"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "687412721985afce0c26d6acccb87d49cbfeb7853dc6a7247b2eed4cb07f1514505ec91d49a55cdea49d54915dba9844042e81f1f08a6dd68b7f641164d96d90406b5e5c093e92d7612ec98e974e5448a9f0e75b6f41fff96ae9c9784c6d131d13cb24dcdaf882baa747f4d908c1651405e5cb084d222fc62192de8451876e77e77d2ec0b1b47ef81649cc0793e2fb70cf9afb89c51aa5d691e1b8e687e4219ea58b51a92a8299916c59a4e8ed"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "15d78d67ea63aae437ad0c9a25cda6abc87c430b2bb9652387b0fe6cd69757ff59ed1b949248578447a15c0f065118d3967a97aff5bd9114e39e3a2455c04bafd146ab086da76638a73d9bec8a45d8bd4ae4d41af13ec1857ffbf733fbe2a067bdcd82a05284b162f5616d5b25507d67"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "9c99725293e4590d8c9ce6e71e9da44378e348176e8826bbd318d33692dd5ba16b098af183c19aac8f2f51ad53b0a42eccc2755f68a895ea4ff6b74d7c2d4626c391d2a992e2eea00a969d4d564db36582a8d1ce62d26c33d496220579"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "0d976830ea1a8e2e6b33dcc4114dad25747bcdd8903e347fe606b254600af8118bd40425a1d950079f87b78812ce13034ec9d73250c6b76dcc6e906d144c58772e0abf10121048debb47c910"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "4c019a30fa1c50be77b81a0670c2936477822d5173278667dafbaf0454061e3cc88a192f418ce70bffaa242e08258c5ebff982bfda283dc30960d69d031d12523719f8b3fcde47bc9319aeeb9b7ac3abd75ef36aaa81e5161c8d854a136365bc620df11dd7eb6a88570bbbefd02092ba7c35f7624d2f9e3cbf326670c650fa74"}]}, 0x448}, 0x1, 0x0, 0x0, 0x4008041}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 646.114319ms ago: executing program 1 (id=5308): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) close(r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r5, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/1, 0x1}, {&(0x7f00000003c0)=""/127, 0x7f}], 0x8, &(0x7f00000016c0)=[{0xa0, 0x0, 0x0, ""/144}, {0x108, 0x0, 0x0, ""/246}, {0x110, 0x0, 0x0, ""/252}, {0xc0, 0x0, 0x0, ""/169}, {0xb0, 0x0, 0x0, ""/157}, {0x48, 0x0, 0x0, ""/55}], 0x470, 0x10040}, 0x38, 0x40000100) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYRES16=r3], 0x48}}, 0x0) connect$rds(r6, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) 632.516317ms ago: executing program 2 (id=5309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7068dad3df2501000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0xd, 0x24, 0x64, 0x0, 0x7, 0x21, 0x0, @remote, @remote}, {{0x4e23, 0x4e24, 0x4, 0x1, 0xd, 0x0, 0x0, 0x8, 0x3, '~YV', 0x0, "b8bb19"}}}}}}}, 0x36) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000040)=0x2, 0x4) 440.478617ms ago: executing program 4 (id=5310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) 440.064574ms ago: executing program 0 (id=5311): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000"/19], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20, 0x3f}}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000440)="b3e0eff1cdaeb2948da788b82462b7c45add142daef465f12c543981e5416bfe9ef4fea2e5b31724d07307175cf16a92f69051c711afe329f3a332636c648d2a29e2c61005c8ef48ab472bbd4c5e99eed1e8cb68070e2ff6fd9e3fb47c50b0b020c61278ef5c54fba124deb17fb763c0e450b97d2ad9e632ff4ded53b7baa59539908451d31d3294137b6be00c087c582d8c0eede853bc618a4c21c7f1420de719e12c15a157c8388cb2c66caea09219f94ebf148d2b615cd6c10553aefb62ccd4d04762c5eb37658c6b50388b4ff0", 0xcf}], 0x1, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xda6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0x14, [@dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @loopback]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "40accd23463b40675b6c"}]}, @rr={0x7, 0xf, 0xde, [@local, @multicast2, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xe2, 0x3, 0x9, [{@rand_addr=0x64010100, 0x6}]}, @end, @end, @cipso={0x86, 0x63, 0xffffffffffffffff, [{0x1, 0x9, "1c0229c86bbabd"}, {0x7, 0x12, "602d2e52264b209bfd4608b80d6cfa06"}, {0x7, 0x6, "146f7ac5"}, {0x2, 0x10, "7ad2dbd7ef55404d7fa1d01fbc9f"}, {0x2, 0xc, "c58ab98bc550f3d80be0"}, {0x7, 0xc, "d981cbcc9304d7371e49"}, {0x5, 0x7, "66903ee7a8"}, {0x2, 0xd, "e40c7c38a6577bc07c9e32"}]}]}}}], 0x110}}], 0x2, 0xc0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r10, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c) 434.799909ms ago: executing program 1 (id=5312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6gretap0\x00'}]}, 0x30}}, 0x44054) r1 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x113, 0x0, 0x0, 0x20000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 420.515824ms ago: executing program 4 (id=5313): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001900)=""/205, 0xcd}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000001500)=""/137, 0x89}, {&(0x7f00000002c0)=""/26, 0x1a}], 0x7, &(0x7f0000001740)=""/160, 0xa0}, 0x400021a2) (async) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20000050) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcff"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0xb}, 0x1c) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x7fff, 0x0, 0x7, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, &(0x7f0000000300), &(0x7f0000000340)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0xb, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x7}, 0x94) (async) listen(r7, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 264.509733ms ago: executing program 2 (id=5314): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) (async) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 260.418376ms ago: executing program 4 (id=5315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) 166.296206ms ago: executing program 4 (id=5316): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000200)={0x7, 'veth0_to_bridge\x00', {0xfffffff7}, 0xffff}) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x15, 0x902, 0x70bd2c, 0x25dfdbfe, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "65e9c5e3c2a8307cff2c2077a1e8021ae1ee292ad8cbdaaea650565a0b6112c962fdb52aef38d7fe34a828aa80520de4326b105f49c121f8fe917a5e449f2ccdca351ead8c1397ca29140afdeb1ce0d78db01d0f749142bc567b595412ec882a260c528311894d3bc9b5ea4a68ed7d8487c3755b50fd943d85e22587a50af6a63fb53a6174512af41ebb6b26ec91"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000014}, 0x881) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 135.642004ms ago: executing program 0 (id=5317): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x5e20, 0x0, @local}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008000005953085d446ecb9c94d832d85fb5b7d9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 45.093844ms ago: executing program 1 (id=5318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) r6 = accept$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0xfffffcb5}}, 0x0) 42.168341ms ago: executing program 2 (id=5319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004008}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x1, 0x343, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x65, 0x0, 0x4e, 0x27, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010100, {[@end, @timestamp_prespec={0x44, 0x1c, 0xb9, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote}, {@rand_addr=0x64010100}]}, @timestamp={0x44, 0x28, 0xfc, 0x0, 0x9, [0x20000, 0x3, 0x7f, 0xd6b4, 0x0, 0x9, 0x401, 0x61ab, 0x6]}, @ra={0x94, 0x4}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000004d0000000c0000001000002040000000", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0400000000000000050000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x26, 0x0, @void}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r6}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=5320): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): devsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.508008][T16941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.663114][T16791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.678953][T16791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.696668][T16791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.794446][T16957] bond3 (unregistering): Released all slaves [ 359.839405][T16791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.850298][T16791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.861807][T16791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.967902][T16791] batman_adv: batadv0: Removing interface: netdevsim0 [ 359.985076][T16791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.997063][T16791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.009629][T16791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.247347][ T5832] Bluetooth: hci1: command tx timeout [ 360.295065][T16971] lo: left allmulticast mode [ 360.304894][T16971] bridge0: entered allmulticast mode [ 360.326194][ T5832] Bluetooth: hci4: command 0x040f tx timeout [ 360.395042][T16791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.422114][T16791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.455773][T16791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.472458][T16958] wg1 speed is unknown, defaulting to 1000 [ 360.482979][T16791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.710316][T16791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.757526][T16791] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.779422][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.786606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.863072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.870263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.883561][T17000] netlink: 'syz.2.3264': attribute type 2 has an invalid length. [ 360.897504][T17000] netlink: 'syz.2.3264': attribute type 2 has an invalid length. [ 360.992650][T17003] tipc: Started in network mode [ 360.997833][T17003] tipc: Node identity ac14142f, cluster identity 4711 [ 361.005101][T17003] tipc: New replicast peer: 0.0.0.0 [ 361.012487][T17003] tipc: Enabled bearer , priority 10 [ 361.038483][T17003] gre1: entered promiscuous mode [ 361.043695][T17003] gre1: entered allmulticast mode [ 361.189092][T17010] netlink: 'syz.4.3267': attribute type 1 has an invalid length. [ 361.330249][T16791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.468944][T17030] FAULT_INJECTION: forcing a failure. [ 361.468944][T17030] name failslab, interval 1, probability 0, space 0, times 0 [ 361.511181][T16791] veth0_vlan: entered promiscuous mode [ 361.518191][T17030] CPU: 0 UID: 0 PID: 17030 Comm: syz.4.3272 Not tainted syzkaller #0 PREEMPT(full) [ 361.518218][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.518231][T17030] Call Trace: [ 361.518239][T17030] [ 361.518247][T17030] dump_stack_lvl+0x189/0x250 [ 361.518281][T17030] ? __pfx____ratelimit+0x10/0x10 [ 361.518308][T17030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.518334][T17030] ? __pfx__printk+0x10/0x10 [ 361.518361][T17030] ? __pfx___might_resched+0x10/0x10 [ 361.518381][T17030] ? fs_reclaim_acquire+0x7d/0x100 [ 361.518416][T17030] should_fail_ex+0x414/0x560 [ 361.518452][T17030] should_failslab+0xa8/0x100 [ 361.518474][T17030] __kmalloc_noprof+0xcb/0x7f0 [ 361.518500][T17030] ? tomoyo_encode+0x28b/0x550 [ 361.518537][T17030] tomoyo_encode+0x28b/0x550 [ 361.518573][T17030] tomoyo_realpath_from_path+0x58d/0x5d0 [ 361.518605][T17030] ? tomoyo_domain+0xd9/0x130 [ 361.518630][T17030] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 361.518655][T17030] tomoyo_path_number_perm+0x1e8/0x5a0 [ 361.518684][T17030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 361.518754][T17030] ? __fget_files+0x2a/0x420 [ 361.518778][T17030] ? __fget_files+0x3a0/0x420 [ 361.518793][T17030] ? __fget_files+0x2a/0x420 [ 361.518814][T17030] security_file_ioctl+0xcb/0x2d0 [ 361.518838][T17030] __se_sys_ioctl+0x47/0x170 [ 361.518865][T17030] do_syscall_64+0xfa/0xfa0 [ 361.518891][T17030] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.518918][T17030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.518938][T17030] ? clear_bhb_loop+0x60/0xb0 [ 361.518962][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.518981][T17030] RIP: 0033:0x7f85ff38f749 [ 361.518999][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.519017][T17030] RSP: 002b:00007f85fd5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.519038][T17030] RAX: ffffffffffffffda RBX: 00007f85ff5e5fa0 RCX: 00007f85ff38f749 [ 361.519053][T17030] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000006 [ 361.519065][T17030] RBP: 00007f85fd5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 361.519078][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.519096][T17030] R13: 00007f85ff5e6038 R14: 00007f85ff5e5fa0 R15: 00007ffe3f5dbde8 [ 361.519132][T17030] [ 361.753005][T17030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.759736][T16791] veth1_vlan: entered promiscuous mode [ 361.831304][T16791] veth0_macvtap: entered promiscuous mode [ 361.872811][T16791] veth1_macvtap: entered promiscuous mode [ 361.910560][T16791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.942628][T16791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.960822][T17038] xt_TCPMSS: Only works on TCP SYN packets [ 361.984622][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.001977][T17044] lo: entered promiscuous mode [ 362.011402][T17044] tunl0: entered promiscuous mode [ 362.017920][T17044] gre0: entered promiscuous mode [ 362.023551][T17044] gretap0: entered promiscuous mode [ 362.030561][T17044] erspan0: entered promiscuous mode [ 362.037753][T17044] ip_vti0: entered promiscuous mode [ 362.043502][T17044] ip6_vti0: entered promiscuous mode [ 362.050035][T17044] sit0: entered promiscuous mode [ 362.057166][T17044] ip6tnl0: entered promiscuous mode [ 362.067451][T17044] ip6gre0: entered promiscuous mode [ 362.073333][T17044] syz_tun: entered promiscuous mode [ 362.080416][T17044] ip6gretap0: entered promiscuous mode [ 362.114794][T17044] bridge0: entered promiscuous mode [ 362.121675][T17044] vcan0: entered promiscuous mode [ 362.127732][T17044] bond0: entered promiscuous mode [ 362.133007][T17044] bond_slave_0: entered promiscuous mode [ 362.139648][T17044] bond_slave_1: entered promiscuous mode [ 362.147998][T17044] dummy0: entered promiscuous mode [ 362.153772][T17044] nlmon0: entered promiscuous mode [ 362.159872][T17044] caif0: entered promiscuous mode [ 362.165185][T17044] batadv0: entered promiscuous mode [ 362.171858][T17044] vxcan0: entered promiscuous mode [ 362.178920][T17044] vxcan1: entered promiscuous mode [ 362.184956][T17044] veth0: entered promiscuous mode [ 362.190815][T17044] veth1: entered promiscuous mode [ 362.197248][T17044] wg0: entered promiscuous mode [ 362.202792][T17044] wg1: entered promiscuous mode [ 362.208208][T17044] wg2: entered promiscuous mode [ 362.213495][T17044] veth0_to_bridge: entered promiscuous mode [ 362.220811][T17044] veth1_to_bridge: entered promiscuous mode [ 362.229798][T17044] veth0_to_bond: entered promiscuous mode [ 362.236774][T17044] veth1_to_bond: entered promiscuous mode [ 362.243111][T17044] veth0_to_team: entered promiscuous mode [ 362.250361][T17044] veth1_to_team: entered promiscuous mode [ 362.258656][T17044] veth0_to_batadv: entered promiscuous mode [ 362.265474][T17044] batadv_slave_0: entered promiscuous mode [ 362.271650][T17044] veth1_to_batadv: entered promiscuous mode [ 362.279312][T17044] batadv_slave_1: entered promiscuous mode [ 362.285536][T17044] xfrm0: entered promiscuous mode [ 362.291485][T17044] veth0_to_hsr: entered promiscuous mode [ 362.298464][T17044] veth1_to_hsr: entered promiscuous mode [ 362.304807][T17044] hsr0: entered promiscuous mode [ 362.310889][T17044] veth1_virt_wifi: entered promiscuous mode [ 362.317808][T17044] veth0_virt_wifi: entered promiscuous mode [ 362.324088][T17044] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 362.331437][ T5832] Bluetooth: hci1: command tx timeout [ 362.340682][T17044] vlan0: entered promiscuous mode [ 362.346740][T17044] vlan1: entered promiscuous mode [ 362.352171][T17044] macvlan0: entered promiscuous mode [ 362.358385][T17044] macvlan1: entered promiscuous mode [ 362.364155][T17044] ipvlan0: entered promiscuous mode [ 362.370031][T17044] ipvlan1: entered promiscuous mode [ 362.376375][T17044] macvtap0: entered promiscuous mode [ 362.382315][T17044] macsec0: entered promiscuous mode [ 362.388072][T17044] geneve0: entered promiscuous mode [ 362.393861][T17044] geneve1: entered promiscuous mode [ 362.399977][T17044] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 362.408400][T17044] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 362.417259][T17044] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 362.424999][T17044] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 362.433684][T17044] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 362.441957][T17044] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 362.450525][T17044] bridge1: entered promiscuous mode [ 362.461450][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.481192][ T7605] tipc: Node number set to 2886997039 [ 362.489466][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.516424][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.627329][T17064] netlink: 'syz.0.3284': attribute type 4 has an invalid length. [ 362.647638][T17066] __nla_validate_parse: 13 callbacks suppressed [ 362.647656][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.664545][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.690723][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.700034][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.723080][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.744404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.744651][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.762165][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 362.763307][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.772429][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.821308][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.832254][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.843471][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.878411][T17075] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 362.931110][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 362.969280][T17077] bond1: (slave ip6gretap1): making interface the new active one [ 362.979015][T17077] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 363.113498][T17083] veth1_macvtap: left promiscuous mode [ 363.197564][T17086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.308435][T17101] netlink: 'syz.3.3294': attribute type 13 has an invalid length. [ 363.352368][T17101] netlink: 'syz.3.3294': attribute type 17 has an invalid length. [ 363.382769][T17101] lo: left promiscuous mode [ 363.397430][T17101] tunl0: left promiscuous mode [ 363.410711][T17101] gre0: left promiscuous mode [ 363.427796][T17101] gretap0: left promiscuous mode [ 363.464381][T17101] erspan0: left promiscuous mode [ 363.555155][T17101] ip_vti0: left promiscuous mode [ 363.566658][T17101] ip6_vti0: left promiscuous mode [ 363.586712][T17101] sit0: left promiscuous mode [ 363.592694][T17101] ip6tnl0: left promiscuous mode [ 363.600210][T17101] ip6gre0: left promiscuous mode [ 363.609844][T17101] syz_tun: left promiscuous mode [ 363.665967][T17101] ip6gretap0: left promiscuous mode [ 363.687434][T17119] warn_alloc: 1 callbacks suppressed [ 363.687453][T17119] syz.4.3300: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 363.688993][T17101] bridge0: left promiscuous mode [ 363.706330][T17119] ,cpuset=/,mems_allowed=0-1 [ 363.723194][T17101] vcan0: left promiscuous mode [ 363.731607][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.4.3300 Not tainted syzkaller #0 PREEMPT(full) [ 363.731634][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.731647][T17119] Call Trace: [ 363.731655][T17119] [ 363.731663][T17119] dump_stack_lvl+0x189/0x250 [ 363.731702][T17119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.731730][T17119] ? __pfx__printk+0x10/0x10 [ 363.731752][T17119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 363.731780][T17119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 363.731810][T17119] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 363.731841][T17119] warn_alloc+0x214/0x310 [ 363.731871][T17119] ? stack_depot_save_flags+0x40/0x860 [ 363.731903][T17119] ? __pfx_warn_alloc+0x10/0x10 [ 363.731939][T17119] ? kasan_save_track+0x3e/0x80 [ 363.731964][T17119] ? __kasan_kmalloc+0x93/0xb0 [ 363.731991][T17119] ? xsk_setsockopt+0x4dc/0x8d0 [ 363.732011][T17119] ? do_sock_setsockopt+0x17c/0x1b0 [ 363.732029][T17119] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 363.732048][T17119] ? do_syscall_64+0xfa/0xfa0 [ 363.732076][T17119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.732106][T17119] __vmalloc_node_range_noprof+0x125/0x12d0 [ 363.732166][T17119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 363.732195][T17119] ? __kasan_kmalloc+0x93/0xb0 [ 363.732225][T17119] vmalloc_user_noprof+0xad/0xf0 [ 363.732249][T17119] ? xskq_create+0xbf/0x170 [ 363.732272][T17119] xskq_create+0xbf/0x170 [ 363.732298][T17119] xsk_init_queue+0xb0/0x110 [ 363.732322][T17119] xsk_setsockopt+0x4dc/0x8d0 [ 363.732346][T17119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 363.732370][T17119] ? __pfx_aa_sk_perm+0x10/0x10 [ 363.732395][T17119] ? aa_sock_opt_perm+0xff/0x1b0 [ 363.732423][T17119] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 363.732439][T17119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 363.732461][T17119] do_sock_setsockopt+0x17c/0x1b0 [ 363.732482][T17119] __x64_sys_setsockopt+0x13f/0x1b0 [ 363.732505][T17119] do_syscall_64+0xfa/0xfa0 [ 363.732527][T17119] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.732551][T17119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.732567][T17119] ? clear_bhb_loop+0x60/0xb0 [ 363.732587][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.732604][T17119] RIP: 0033:0x7f85ff38f749 [ 363.732637][T17119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.732652][T17119] RSP: 002b:00007f85fd5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 363.732670][T17119] RAX: ffffffffffffffda RBX: 00007f85ff5e5fa0 RCX: 00007f85ff38f749 [ 363.732684][T17119] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 363.732694][T17119] RBP: 00007f85ff413f91 R08: 0000000000000004 R09: 0000000000000000 [ 363.732705][T17119] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.732716][T17119] R13: 00007f85ff5e6038 R14: 00007f85ff5e5fa0 R15: 00007ffe3f5dbde8 [ 363.732744][T17119] [ 363.732925][T17119] Mem-Info: [ 363.757933][T17101] bond0: left promiscuous mode [ 363.776523][T17119] active_anon:3904 inactive_anon:0 isolated_anon:0 [ 363.776523][T17119] active_file:3401 inactive_file:40000 isolated_file:0 [ 363.776523][T17119] unevictable:768 dirty:37 writeback:0 [ 363.776523][T17119] slab_reclaimable:12243 slab_unreclaimable:151352 [ 363.776523][T17119] mapped:29105 shmem:1356 pagetables:1296 [ 363.776523][T17119] sec_pagetables:0 bounce:0 [ 363.776523][T17119] kernel_misc_reclaimable:0 [ 363.776523][T17119] free:1278718 free_pcp:15760 free_cma:0 [ 363.803258][T17101] dummy0: left promiscuous mode [ 363.814840][T17119] Node 0 active_anon:15616kB inactive_anon:0kB active_file:13604kB inactive_file:159796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116420kB dirty:148kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15320kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 363.890910][T17101] nlmon0: left promiscuous mode [ 363.895402][T17119] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.035690][T17119] Node 0 [ 364.044304][ T5922] IPVS: starting estimator thread 0... [ 364.057194][T17119] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.216018][T17119] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 364.222121][T17119] Node 0 DMA32 free:1190228kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15716kB inactive_anon:0kB active_file:13604kB inactive_file:159796kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:45324kB local_pcp:24696kB free_cma:0kB [ 364.261784][T17101] caif0: left promiscuous mode [ 364.267163][T17101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.286534][T17127] IPVS: using max 28 ests per chain, 67200 per kthread [ 364.301528][T17119] lowmem_reserve[]: 0 0 0 0 0 [ 364.311645][T17119] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.342174][T17132] IPVS: ip_vs_edit_dest(): server weight less than zero [ 364.410218][ T5832] Bluetooth: hci1: command tx timeout [ 364.535435][T17119] lowmem_reserve[]: 0 0 0 0 0 [ 364.543119][T17119] Node 1 Normal free:3900868kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18872kB local_pcp:9092kB free_cma:0kB [ 364.731066][T17119] lowmem_reserve[]: 0 0 0 0 0 [ 364.760033][T17119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 364.816377][T17119] Node 0 DMA32: 545*4kB (UME) 94*8kB (UME) 68*16kB (UME) 75*32kB (M) 77*64kB (UM) 502*128kB (UME) 709*256kB (UME) 404*512kB (UME) 179*1024kB (UME) 18*2048kB (UM) 124*4096kB (M) = 1192020kB [ 364.836384][T17139] netlink: 'syz.3.3304': attribute type 33 has an invalid length. [ 364.876360][T17119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 364.885872][T17139] bridge0: port 3(team0) entered disabled state [ 364.914575][T17119] Node 1 Normal: 35*4kB (UE) 37*8kB (UME) 35*16kB (UME) 93*32kB (UME) 33*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 950*4096kB (UME) = 3900868kB [ 364.988956][T17119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.046701][T17119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.064498][T17146] sch_fq: defrate 0 ignored. [ 365.080353][T17119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.093795][T17146] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 365.135995][T17119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.164607][T17119] 44754 total pagecache pages [ 365.172287][T17119] 0 pages in swap cache [ 365.185141][T17119] Free swap = 124996kB [ 365.198199][T17155] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 365.210014][T17119] Total swap = 124996kB [ 365.214292][T17119] 2097051 pages RAM [ 365.218634][T17119] 0 pages HighMem/MovableOnly [ 365.225374][T17119] 424121 pages reserved [ 365.231627][T17119] 0 pages cma reserved [ 365.531403][T17166] netlink: 'syz.1.3313': attribute type 6 has an invalid length. [ 365.537778][T17167] tipc: Started in network mode [ 365.545132][T17167] tipc: Node identity faa00026244f, cluster identity 4711 [ 365.552874][T17167] tipc: Enabled bearer , priority 0 [ 365.559662][T17169] netlink: 'syz.4.3314': attribute type 1 has an invalid length. [ 365.561271][T17164] syzkaller0: entered allmulticast mode [ 365.575169][T17169] netlink: 'syz.4.3314': attribute type 1 has an invalid length. [ 365.583156][T17169] netlink: 'syz.4.3314': attribute type 1 has an invalid length. [ 365.607585][T17169] netlink: 'syz.4.3314': attribute type 2 has an invalid length. [ 365.609582][T17164] tipc: Resetting bearer [ 365.646689][T17163] tipc: Resetting bearer [ 365.707167][T17163] tipc: Disabling bearer [ 365.914285][T17186] bond2 (unregistering): Released all slaves [ 366.143105][T17199] netlink: 'syz.0.3324': attribute type 10 has an invalid length. [ 366.162006][T17202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.164962][T17199] veth0_virt_wifi: entered allmulticast mode [ 366.221703][T17199] team0: Port device veth0_virt_wifi added [ 366.256810][T17205] sch_fq: defrate 0 ignored. [ 366.318881][T17212] bond3: option coupled_control: invalid value (52) [ 366.335180][T17212] bond3 (unregistering): Released all slaves [ 366.471195][T17220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.478520][T17220] IPv6: NLM_F_CREATE should be set when creating new route [ 366.491603][T17220] IPv6: Can't replace route, no match found [ 366.882988][T17245] openvswitch: netlink: IP tunnel dst address not specified [ 366.938117][T17250] sctp: [Deprecated]: syz.4.3337 (pid 17250) Use of int in maxseg socket option. [ 366.938117][T17250] Use struct sctp_assoc_value instead [ 367.045137][T17250] sctp: [Deprecated]: syz.4.3337 (pid 17250) Use of int in max_burst socket option deprecated. [ 367.045137][T17250] Use struct sctp_assoc_value instead [ 367.218703][T17265] syzkaller0: entered promiscuous mode [ 367.246228][T17265] syzkaller0: entered allmulticast mode [ 367.772472][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.998119][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.043543][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.318163][T17280] __nla_validate_parse: 73 callbacks suppressed [ 368.318184][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 368.451505][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.462737][T17299] validate_nla: 5 callbacks suppressed [ 368.462755][T17299] netlink: 'syz.4.3353': attribute type 13 has an invalid length. [ 368.477835][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.506543][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.518650][T17303] netlink: 'syz.0.3355': attribute type 3 has an invalid length. [ 368.592392][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.628412][T17310] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 368.653960][T17303] gretap1: entered promiscuous mode [ 368.666056][T17310] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 368.694812][T17310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3357'. [ 368.696601][T17312] netlink: 'syz.0.3355': attribute type 3 has an invalid length. [ 368.780024][T17315] xt_bpf: check failed: parse error [ 368.861147][T17322] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3360'. [ 368.876818][T17322] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 368.902366][T17328] syzkaller0: entered promiscuous mode [ 368.909967][T17328] syzkaller0: entered allmulticast mode [ 369.072668][T17344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3367'. [ 369.116284][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3368'. [ 369.127904][T17349] netem: change failed [ 369.153646][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'. [ 369.196425][T17353] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3370'. [ 369.398917][T17367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3374'. [ 369.443142][T17369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3375'. [ 369.637153][T17371] netlink: 'syz.2.3376': attribute type 12 has an invalid length. [ 369.645112][T17371] netlink: 'syz.2.3376': attribute type 29 has an invalid length. [ 369.653658][T17371] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3376'. [ 369.897188][T17391] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 370.117854][T17410] syzkaller0: entered promiscuous mode [ 370.123821][T17410] syzkaller0: entered allmulticast mode [ 370.340990][T17425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 370.370338][T17427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.396972][T17432] x_tables: duplicate underflow at hook 4 [ 370.428514][T17432] x_tables: duplicate underflow at hook 4 [ 370.437866][T17432] x_tables: duplicate underflow at hook 4 [ 370.450552][T17432] x_tables: duplicate underflow at hook 4 [ 370.466690][T17432] x_tables: duplicate underflow at hook 4 [ 370.472795][T17432] x_tables: duplicate underflow at hook 4 [ 370.483559][T17432] x_tables: duplicate underflow at hook 4 [ 370.494744][T17432] x_tables: duplicate underflow at hook 4 [ 370.500705][T17432] x_tables: duplicate underflow at hook 4 [ 370.508456][T17432] x_tables: duplicate underflow at hook 4 [ 370.622580][T17450] netlink: 'syz.1.3397': attribute type 1 has an invalid length. [ 370.630798][T17450] netlink: 'syz.1.3397': attribute type 2 has an invalid length. [ 370.639544][T17450] netlink: 'syz.1.3397': attribute type 13 has an invalid length. [ 371.471075][T17499] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 372.849993][T17573] macsec1: entered promiscuous mode [ 373.271575][T17589] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 373.320347][T17587] +: renamed from syzkaller0 [ 373.337661][T17603] __nla_validate_parse: 15 callbacks suppressed [ 373.337681][T17603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3447'. [ 373.539809][T17612] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 373.563352][T17611] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 373.574390][T17612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3449'. [ 373.602046][T17611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.645620][T17616] syzkaller0: entered promiscuous mode [ 373.651202][T17616] syzkaller0: entered allmulticast mode [ 373.775991][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x505 [ 373.958710][T17646] xt_bpf: check failed: parse error [ 374.128208][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 374.139006][T17659] bridge_slave_1: left allmulticast mode [ 374.144887][T17659] bridge_slave_1: left promiscuous mode [ 374.150785][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.159928][T17659] bridge_slave_0: left allmulticast mode [ 374.172121][T17659] bridge_slave_0: left promiscuous mode [ 374.178376][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.318536][T17657] syz.3.3462 (17657) used greatest stack depth: 17432 bytes left [ 374.438380][T17667] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3465'. [ 374.671151][T17679] validate_nla: 4 callbacks suppressed [ 374.671170][T17679] netlink: 'syz.4.3469': attribute type 1 has an invalid length. [ 374.760518][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'. [ 374.777607][T17684] syzkaller1: entered promiscuous mode [ 374.804153][T17688] netlink: 'syz.4.3473': attribute type 27 has an invalid length. [ 374.810172][T17684] syzkaller1: entered allmulticast mode [ 374.828692][T17689] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 374.841953][T17689] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3471'. [ 374.964106][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3475'. [ 374.985158][T17700] netlink: 'syz.0.3477': attribute type 1 has an invalid length. [ 375.154307][T17723] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3481'. [ 375.164252][T17723] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3481'. [ 375.384634][T17731] netlink: 'syz.2.3483': attribute type 10 has an invalid length. [ 375.425982][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.472749][T17731] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 375.487634][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 375.851466][T17734] syz_tun: entered promiscuous mode [ 375.858819][T17734] syz_tun: left promiscuous mode [ 375.904586][T17731] syz_tun: entered promiscuous mode [ 375.917401][T17731] syz_tun: left promiscuous mode [ 376.182961][T17762] tipc: Enabled bearer , priority 0 [ 376.216452][T17762] syzkaller0: entered promiscuous mode [ 376.221962][T17762] syzkaller0: entered allmulticast mode [ 376.253956][T17762] tipc: Resetting bearer [ 376.262043][T17761] tipc: Resetting bearer [ 376.327093][T17761] tipc: Disabling bearer [ 376.609814][T17793] tipc: Started in network mode [ 376.637994][T17793] tipc: Node identity cac9ca3199d3, cluster identity 4711 [ 376.674726][T17793] tipc: Enabled bearer , priority 0 [ 376.707919][T17796] syzkaller0: entered promiscuous mode [ 376.732061][T17796] syzkaller0: entered allmulticast mode [ 376.798106][T17793] tipc: Resetting bearer [ 377.055706][T17793] dvmrp0: entered allmulticast mode [ 377.110590][T17792] tipc: Resetting bearer [ 377.131701][T17792] tipc: Disabling bearer [ 377.779445][T17841] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 377.793013][T17840] bond0: (slave dummy0): Releasing backup interface [ 377.822315][T17842] Bluetooth: MGMT ver 1.23 [ 378.093577][T17856] bond1: option min_links: invalid value (18446744073441116158) [ 378.101617][T17856] bond1: option min_links: allowed values 0 - 2147483647 [ 378.175085][T17856] bond1 (unregistering): Released all slaves [ 378.385182][T17863] team0: Caught tx_queue_len zero misconfig [ 378.526325][T17869] __nla_validate_parse: 19 callbacks suppressed [ 378.526343][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'. [ 378.552414][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'. [ 378.576650][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3533'. [ 378.622025][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'. [ 378.625305][ T6531] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.637667][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3533'. [ 378.676082][ T6531] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.684929][ T6531] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.727838][ T6531] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.100305][T17898] syzkaller0: entered promiscuous mode [ 379.114033][T17898] syzkaller0: entered allmulticast mode [ 379.381374][ T6821] team0: left allmulticast mode [ 379.394015][ T6821] team_slave_0: left allmulticast mode [ 379.403877][ T6821] team_slave_1: left allmulticast mode [ 379.419080][ T6821] team0: left promiscuous mode [ 379.430997][ T6821] team_slave_0: left promiscuous mode [ 379.439811][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3553'. [ 379.452948][ T6821] team_slave_1: left promiscuous mode [ 379.471031][ T6821] bridge0: port 1(team0) entered disabled state [ 379.483286][ T6821] bridge_slave_1: left allmulticast mode [ 379.493317][ T6821] bridge_slave_1: left promiscuous mode [ 379.499908][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.527952][T17923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3552'. [ 379.540649][T17923] ksmbd: Unknown IPC event: 3, ignore. [ 379.604801][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3554'. [ 380.157439][ T6821] team0: Port device bridge4 removed [ 380.397609][ T6821] team0: Port device bridge9 removed [ 380.480193][ T6821] bond1 (unregistering): Released all slaves [ 380.494213][ T6821] bond2 (unregistering): Released all slaves [ 380.508244][ T6821] bond3 (unregistering): Released all slaves [ 380.606486][ T6821] bond4 (unregistering): Released all slaves [ 380.697290][ T6821] bond5 (unregistering): Released all slaves [ 380.786805][ T6821] bond6 (unregistering): Released all slaves [ 380.876805][ T6821] bond7 (unregistering): Released all slaves [ 380.890502][ T6821] bond8 (unregistering): Released all slaves [ 380.981878][ T6821] bond9 (unregistering): Released all slaves [ 380.994091][ T6821] bond10 (unregistering): Released all slaves [ 381.006041][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 381.252389][ T6821] : left promiscuous mode [ 381.287124][T17948] Bluetooth: MGMT ver 1.23 [ 381.428074][ T6821] : left promiscuous mode [ 381.433680][T17953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3561'. [ 381.595090][ T6821] tipc: Left network mode [ 381.753568][ T6821] IPVS: stopping master sync thread 12996 ... [ 382.349519][T18001] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 382.354801][T17945] wg1 speed is unknown, defaulting to 1000 [ 382.588596][T18017] ip6t_srh: unknown srh invflags 4000 [ 382.840255][T18026] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 382.858506][T18026] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 382.923699][ T6821] hsr_slave_0: left promiscuous mode [ 382.934404][ T6821] hsr_slave_1: left promiscuous mode [ 382.940557][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.950566][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.959205][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.966935][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.974751][ T6821] batman_adv: batadv0: Removing interface: dummy0 [ 382.996188][ T6821] veth1_macvtap: left promiscuous mode [ 383.001807][ T6821] veth0_macvtap: left promiscuous mode [ 383.007566][ T6821] veth1_vlan: left promiscuous mode [ 383.012931][ T6821] veth0_vlan: left promiscuous mode [ 383.108931][ T6821] pimreg3 (unregistering): left allmulticast mode [ 383.505599][ T6821] team0 (unregistering): Port device team_slave_1 removed [ 383.546386][ T6821] team0 (unregistering): Port device team_slave_0 removed [ 383.624306][ T12] smc: removing ib device syû [ 383.997357][T18041] bond3 (unregistering): Released all slaves [ 384.268588][T18056] netlink: 'syz.1.3589': attribute type 11 has an invalid length. [ 384.402274][T18061] xt_TCPMSS: Only works on TCP SYN packets [ 384.479918][T18061] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 384.526101][T18061] netlink: 'syz.4.3590': attribute type 21 has an invalid length. [ 384.570657][T18061] netlink: 'syz.4.3590': attribute type 22 has an invalid length. [ 384.585508][T18063] __nla_validate_parse: 9 callbacks suppressed [ 384.585525][T18063] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3591'. [ 384.611472][T18061] netlink: 'syz.4.3590': attribute type 23 has an invalid length. [ 384.635510][T18061] netlink: 'syz.4.3590': attribute type 25 has an invalid length. [ 384.643377][T18061] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3590'. [ 384.653932][T18063] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3591'. [ 384.738641][T18062] syzkaller0: entered promiscuous mode [ 384.744350][T18062] syzkaller0: entered allmulticast mode [ 384.834131][T18081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3595'. [ 385.124642][T18092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3600'. [ 385.134293][T18092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3600'. [ 385.497219][T18099] ip6tnl0: Caught tx_queue_len zero misconfig [ 385.778343][T18112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3605'. [ 385.787580][T18112] nbd: couldn't find a device at index 0 [ 385.889560][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3608'. [ 385.953817][T18118] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 385.989565][T18118] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 386.151266][T18126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3610'. [ 386.249244][T18127] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 386.644439][ T6821] IPVS: stop unused estimator thread 0... [ 386.792484][T18157] tipc: Enabling of bearer rejected, already enabled [ 386.801507][T18158] tipc: Enabling of bearer rejected, already enabled [ 386.810455][T18157] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 386.834368][T18156] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3620'. [ 386.909047][T18162] netlink: 'syz.4.3622': attribute type 10 has an invalid length. [ 386.917219][T18162] dummy0: entered promiscuous mode [ 386.924721][T18162] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 387.386613][T18195] nbd: device at index 2 is going down [ 387.828297][T18224] wg1 speed is unknown, defaulting to 1000 [ 388.285079][T18258] gretap1: entered promiscuous mode [ 388.292010][T18262] netlink: 'syz.2.3654': attribute type 11 has an invalid length. [ 388.328747][T18258] gretap1: entered allmulticast mode [ 388.339308][T18262] netlink: 'syz.2.3654': attribute type 4 has an invalid length. [ 388.628431][T18282] block nbd3: Unsupported socket: should be TCP or UNIX. [ 388.709767][T18284] bridge0: port 3(ipvlan3) entered blocking state [ 388.719263][T18284] bridge0: port 3(ipvlan3) entered disabled state [ 388.735698][T18284] ipvlan3: entered allmulticast mode [ 388.751253][T18284] bridge0: entered allmulticast mode [ 388.771250][T18284] ipvlan3: left allmulticast mode [ 388.785473][T18284] bridge0: left allmulticast mode [ 389.198128][T18306] bond0: Caught tx_queue_len zero misconfig [ 389.345045][T18316] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 389.482410][T18311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.492590][T18320] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 389.517087][T18320] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.524853][T18320] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.591175][T18321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.598510][T18321] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 389.609648][T18321] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 389.629099][T18322] __nla_validate_parse: 19 callbacks suppressed [ 389.629118][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 389.668741][T18331] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 389.687287][T18331] bond1 (unregistering): Released all slaves [ 389.810977][T18337] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 389.830064][T18343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.869798][T18337] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 389.926028][T18345] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 389.937937][T18347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3679'. [ 389.947162][T18345] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 389.955676][T18345] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 389.955872][T18347] netlink: 'syz.4.3679': attribute type 7 has an invalid length. [ 389.976903][T18352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3678'. [ 389.981088][T18345] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 389.997220][T18345] netlink: 'syz.0.3676': attribute type 29 has an invalid length. [ 390.013923][T18347] netlink: 'syz.4.3679': attribute type 8 has an invalid length. [ 390.042163][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3679'. [ 390.140942][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'. [ 390.178202][T18363] netlink: 'syz.0.3683': attribute type 4 has an invalid length. [ 390.186416][T18363] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3683'. [ 390.213154][T18365] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3684'. [ 390.244301][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 390.248107][T18367] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3685'. [ 390.338777][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3686'. [ 390.769555][T18399] tipc: Enabling of bearer rejected, failed to enable media [ 390.779350][T18399] xt_check_table_hooks: 23 callbacks suppressed [ 390.779369][T18399] x_tables: unsorted underflow at hook 4 [ 390.889181][T18409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.513667][T18455] openvswitch: netlink: nsh attribute has 939 unknown bytes. [ 391.537910][T18455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.612289][T18455] veth1: Caught tx_queue_len zero misconfig [ 391.934800][T18483] netlink: 'syz.0.3720': attribute type 11 has an invalid length. [ 392.139177][T18502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.928316][T18556] xt_ecn: cannot match TCP bits for non-tcp packets [ 392.973804][T18561] team0: Device gtp0 is of different type [ 393.218282][T18576] openvswitch: netlink: Flow key attr not present in new flow. [ 393.549556][T18601] syzkaller1: entered promiscuous mode [ 393.555143][T18601] syzkaller1: entered allmulticast mode [ 393.611756][T18599] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.620822][T18599] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.628047][T18599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.773875][T18603] vlan2: entered allmulticast mode [ 394.100852][T18635] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.588166][T18660] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 394.626705][T18659] bond2: option primary_reselect: invalid value (255) [ 394.637277][T18659] bond2 (unregistering): Released all slaves [ 394.932630][T18678] __nla_validate_parse: 15 callbacks suppressed [ 394.932650][T18678] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3786'. [ 395.564563][T18719] xt_hashlimit: overflow, rate too high: 0 [ 395.613702][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 395.723837][T18729] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3803'. [ 395.818803][T18733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3804'. [ 396.017166][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3805'. [ 396.147508][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'. [ 396.156607][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'. [ 396.208991][T18749] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 396.248327][T18751] pimreg: entered allmulticast mode [ 396.302870][T18754] syzkaller0: entered promiscuous mode [ 396.315174][T18754] syzkaller0: entered allmulticast mode [ 396.445176][T18767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.469743][T18757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.736184][T18778] team0: Device geneve2 is up. Set it down before adding it as a team port [ 396.813494][T18786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3819'. [ 396.855419][T18783] can: request_module (can-proto-0) failed. [ 397.438423][T18813] validate_nla: 5 callbacks suppressed [ 397.438440][T18813] netlink: 'syz.2.3830': attribute type 13 has an invalid length. [ 397.462335][T18813] gretap0: refused to change device tx_queue_len [ 397.470046][T18813] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 397.510572][T18809] dvmrp6: entered allmulticast mode [ 397.763811][T18832] tipc: Started in network mode [ 397.769281][T18832] tipc: Node identity 423436a62d74, cluster identity 4711 [ 397.776671][T18832] tipc: Enabled bearer , priority 0 [ 397.785216][T18832] syzkaller0: entered promiscuous mode [ 397.794476][T18832] syzkaller0: entered allmulticast mode [ 397.813408][T18832] tipc: Resetting bearer [ 397.821193][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3837'. [ 397.838874][T18830] tipc: Resetting bearer [ 397.864662][T18830] tipc: Disabling bearer [ 397.912403][T18840] pim6reg: entered allmulticast mode [ 397.922924][T18840] pim6reg: left allmulticast mode [ 398.101878][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3844'. [ 398.115749][T18852] netlink: 'syz.4.3843': attribute type 21 has an invalid length. [ 398.123855][T18852] netlink: 'syz.4.3843': attribute type 5 has an invalid length. [ 398.138580][T18852] lo: Caught tx_queue_len zero misconfig [ 398.338950][ T5832] Bluetooth: hci1: command tx timeout [ 398.402909][T18871] bond0: Error: Cannot enslave bond to itself. [ 398.447745][T18873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.455022][T18873] IPv6: NLM_F_CREATE should be set when creating new route [ 398.516785][T18873] x_tables: unsorted underflow at hook 4 [ 399.359822][T18933] netem: change failed [ 399.540402][T18947] FAULT_INJECTION: forcing a failure. [ 399.540402][T18947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.569600][T18947] CPU: 0 UID: 0 PID: 18947 Comm: syz.2.3876 Not tainted syzkaller #0 PREEMPT(full) [ 399.569628][T18947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.569641][T18947] Call Trace: [ 399.569649][T18947] [ 399.569657][T18947] dump_stack_lvl+0x189/0x250 [ 399.569688][T18947] ? __pfx____ratelimit+0x10/0x10 [ 399.569716][T18947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.569742][T18947] ? __pfx__printk+0x10/0x10 [ 399.569776][T18947] should_fail_ex+0x414/0x560 [ 399.569811][T18947] _copy_to_user+0x31/0xb0 [ 399.569838][T18947] simple_read_from_buffer+0xe1/0x170 [ 399.569872][T18947] proc_fail_nth_read+0x1b3/0x220 [ 399.569901][T18947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.569929][T18947] ? rw_verify_area+0x2a6/0x4d0 [ 399.569955][T18947] ? __lock_acquire+0xab9/0xd20 [ 399.569972][T18947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.569998][T18947] vfs_read+0x200/0xa30 [ 399.570024][T18947] ? fdget_pos+0x247/0x320 [ 399.570047][T18947] ? __pfx___mutex_lock+0x10/0x10 [ 399.570078][T18947] ? __pfx_vfs_read+0x10/0x10 [ 399.570106][T18947] ? __fget_files+0x2a/0x420 [ 399.570130][T18947] ? __fget_files+0x3a0/0x420 [ 399.570147][T18947] ? __fget_files+0x2a/0x420 [ 399.570176][T18947] ksys_read+0x145/0x250 [ 399.570211][T18947] ? __pfx_ksys_read+0x10/0x10 [ 399.570249][T18947] do_syscall_64+0xfa/0xfa0 [ 399.570275][T18947] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.570302][T18947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.570322][T18947] ? clear_bhb_loop+0x60/0xb0 [ 399.570346][T18947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.570365][T18947] RIP: 0033:0x7fc492f8e15c [ 399.570382][T18947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 399.570400][T18947] RSP: 002b:00007fc493d92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.570420][T18947] RAX: ffffffffffffffda RBX: 00007fc4931e5fa0 RCX: 00007fc492f8e15c [ 399.570435][T18947] RDX: 000000000000000f RSI: 00007fc493d920a0 RDI: 0000000000000004 [ 399.570447][T18947] RBP: 00007fc493d92090 R08: 0000000000000000 R09: 0000000000000000 [ 399.570458][T18947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.570470][T18947] R13: 00007fc4931e6038 R14: 00007fc4931e5fa0 R15: 00007ffd686a0518 [ 399.570506][T18947] [ 399.967426][T18959] netlink: 'syz.3.3882': attribute type 64 has an invalid length. [ 399.977055][T18959] __nla_validate_parse: 6 callbacks suppressed [ 399.977071][T18959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3882'. [ 400.006501][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3884'. [ 400.324240][T18990] xt_hashlimit: size too large, truncated to 1048576 [ 400.366308][T18993] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3894'. [ 400.411524][T18990] syz.1.3893: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 400.442624][T18990] CPU: 0 UID: 0 PID: 18990 Comm: syz.1.3893 Not tainted syzkaller #0 PREEMPT(full) [ 400.442653][T18990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.442665][T18990] Call Trace: [ 400.442673][T18990] [ 400.442681][T18990] dump_stack_lvl+0x189/0x250 [ 400.442715][T18990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.442742][T18990] ? __pfx__printk+0x10/0x10 [ 400.442763][T18990] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.442791][T18990] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 400.442820][T18990] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 400.442851][T18990] warn_alloc+0x214/0x310 [ 400.442884][T18990] ? __pfx_warn_alloc+0x10/0x10 [ 400.442921][T18990] ? __get_vm_area_node+0x28f/0x300 [ 400.442950][T18990] ? htable_create+0x101/0x7a0 [ 400.442980][T18990] __vmalloc_node_range_noprof+0x690/0x12d0 [ 400.443035][T18990] ? alloc_pages_mpol+0x3cd/0x4a0 [ 400.443058][T18990] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.443089][T18990] ? rcu_is_watching+0x15/0xb0 [ 400.443113][T18990] ? htable_create+0x101/0x7a0 [ 400.443139][T18990] __kvmalloc_node_noprof+0x674/0x910 [ 400.443169][T18990] ? htable_create+0x101/0x7a0 [ 400.443193][T18990] ? hashlimit_pernet+0x23/0x240 [ 400.443219][T18990] ? hashlimit_pernet+0x23/0x240 [ 400.443246][T18990] ? hashlimit_pernet+0x23/0x240 [ 400.443279][T18990] htable_create+0x101/0x7a0 [ 400.443314][T18990] hashlimit_mt_check_common+0x719/0xa10 [ 400.443358][T18990] xt_check_match+0x3d1/0xab0 [ 400.443390][T18990] ? __pfx_xt_check_match+0x10/0x10 [ 400.443417][T18990] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 400.443458][T18990] ? xt_find_match+0x1f7/0x250 [ 400.443490][T18990] translate_table+0x1553/0x2040 [ 400.443546][T18990] ? __pfx_translate_table+0x10/0x10 [ 400.443576][T18990] ? __might_fault+0xb0/0x130 [ 400.443620][T18990] ? _copy_from_user+0x94/0xb0 [ 400.443651][T18990] do_ip6t_set_ctl+0x970/0xce0 [ 400.443688][T18990] ? rcu_is_watching+0x15/0xb0 [ 400.443709][T18990] ? trace_contention_end+0x39/0x120 [ 400.443732][T18990] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 400.443785][T18990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 400.443825][T18990] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.443858][T18990] nf_setsockopt+0x26f/0x290 [ 400.443884][T18990] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 400.443915][T18990] do_sock_setsockopt+0x17c/0x1b0 [ 400.443942][T18990] __x64_sys_setsockopt+0x13f/0x1b0 [ 400.443969][T18990] do_syscall_64+0xfa/0xfa0 [ 400.443995][T18990] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.444022][T18990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.444041][T18990] ? clear_bhb_loop+0x60/0xb0 [ 400.444065][T18990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.444083][T18990] RIP: 0033:0x7f5d4078f749 [ 400.444101][T18990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.444116][T18990] RSP: 002b:00007f5d415c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.444137][T18990] RAX: ffffffffffffffda RBX: 00007f5d409e6180 RCX: 00007f5d4078f749 [ 400.444151][T18990] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 400.444163][T18990] RBP: 00007f5d40813f91 R08: 0000000000000588 R09: 0000000000000000 [ 400.444175][T18990] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 400.444186][T18990] R13: 00007f5d409e6218 R14: 00007f5d409e6180 R15: 00007ffe62037a88 [ 400.444220][T18990] [ 400.444293][T18990] Mem-Info: [ 400.608352][T19007] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 400.685395][T18990] active_anon:3974 inactive_anon:0 isolated_anon:0 [ 400.685395][T18990] active_file:3401 inactive_file:40014 isolated_file:0 [ 400.685395][T18990] unevictable:768 dirty:99 writeback:0 [ 400.685395][T18990] slab_reclaimable:12480 slab_unreclaimable:176554 [ 400.685395][T18990] mapped:29123 shmem:1356 pagetables:1336 [ 400.685395][T18990] sec_pagetables:0 bounce:0 [ 400.685395][T18990] kernel_misc_reclaimable:0 [ 400.685395][T18990] free:1249332 free_pcp:17698 free_cma:0 [ 400.876040][T19004] net veth1_virt_wifi .: renamed from virt_wifi0 [ 400.978154][T18990] Node 0 active_anon:15796kB inactive_anon:0kB active_file:13604kB inactive_file:159852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116592kB dirty:396kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14744kB pagetables:5012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.011677][T18990] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.048751][T18990] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.078872][T18990] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 401.084657][T18990] Node 0 DMA32 free:1080112kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15696kB inactive_anon:0kB active_file:13604kB inactive_file:159852kB unevictable:1536kB writepending:396kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:54152kB local_pcp:20192kB free_cma:0kB [ 401.118362][T18990] lowmem_reserve[]: 0 0 0 0 0 [ 401.123112][T18990] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.152682][T18990] lowmem_reserve[]: 0 0 0 0 0 [ 401.158844][T18990] Node 1 Normal free:3901656kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18124kB local_pcp:9124kB free_cma:0kB [ 401.232128][T18990] lowmem_reserve[]: 0 0 0 0 0 [ 401.237247][T18990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.286582][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 401.301717][T18990] Node 0 DMA32: 2011*4kB (UME) 754*8kB (UME) 310*16kB (UME) 113*32kB (UME) 63*64kB (UM) 234*128kB (UM) 728*256kB (UM) 411*512kB (UME) 176*1024kB (UM) 18*2048kB (UM) 100*4096kB (UM) = 1080124kB [ 401.320997][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3902'. [ 401.382270][T18990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.400239][T18990] Node 1 Normal: 160*4kB (UE) 37*8kB (UME) 35*16kB (UME) 100*32kB (UME) 34*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 950*4096kB (UME) = 3901656kB [ 401.420974][T18990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.431080][T18990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.440708][T18990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.518068][T19045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3907'. [ 401.595400][T18990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.617377][T18990] 44768 total pagecache pages [ 401.622171][T18990] 0 pages in swap cache [ 401.632432][T18990] Free swap = 124996kB [ 401.644846][T18990] Total swap = 124996kB [ 401.664862][T18990] 2097051 pages RAM [ 401.669314][T18990] 0 pages HighMem/MovableOnly [ 401.674112][T18990] 424121 pages reserved [ 401.678606][T18990] 0 pages cma reserved [ 401.709485][T19059] tls_set_device_offload: netdev not found [ 401.812145][T19063] netlink: 'syz.2.3914': attribute type 1 has an invalid length. [ 402.157534][T19084] IPVS: set_ctl: invalid protocol: 44 172.30.0.2:20000 [ 402.233475][T19094] netlink: 'syz.3.3922': attribute type 3 has an invalid length. [ 402.255703][T19094] netlink: 'syz.3.3922': attribute type 3 has an invalid length. [ 402.274027][T19094] netlink: 'syz.3.3922': attribute type 3 has an invalid length. [ 402.297647][T19097] netlink: 'syz.4.3924': attribute type 2 has an invalid length. [ 402.340467][T19094] netlink: 'syz.3.3922': attribute type 3 has an invalid length. [ 402.610928][T19120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3931'. [ 402.664925][T19124] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 402.686887][T19124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3932'. [ 402.730935][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'. [ 402.763209][T19129] syzkaller1: entered promiscuous mode [ 402.787256][T19129] syzkaller1: entered allmulticast mode [ 402.814690][T19129] netlink: 'syz.0.3934': attribute type 10 has an invalid length. [ 402.829557][T19129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.959213][T19145] syzkaller1: entered promiscuous mode [ 402.964723][T19145] syzkaller1: entered allmulticast mode [ 402.967404][T19127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.292571][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'. [ 403.574135][T19167] tipc: Enabled bearer , priority 2 [ 403.991641][T19213] netlink: 'syz.2.3957': attribute type 11 has an invalid length. [ 404.304784][T19232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.460475][T19240] netlink: 'syz.1.3964': attribute type 3 has an invalid length. [ 404.685436][ T7600] tipc: Node number set to 1866479270 [ 404.796521][T19253] netlink: 'syz.1.3970': attribute type 1 has an invalid length. [ 405.004988][T19261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.016913][T19268] __nla_validate_parse: 9 callbacks suppressed [ 405.016932][T19268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3975'. [ 405.033956][T19271] xt_ecn: cannot match TCP bits for non-tcp packets [ 405.044824][T19261] bond1: (slave bond2): making interface the new active one [ 405.062121][T19261] bond1: (slave bond2): Enslaving as an active interface with an up link [ 405.152429][T19271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3973'. [ 405.162950][T19272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3974'. [ 405.196078][T19275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3975'. [ 405.224852][T19275] nbd: device at index 64 is going down [ 405.575429][T19304] netlink: 'syz.3.3984': attribute type 4 has an invalid length. [ 405.644085][T19308] netlink: 'syz.0.3986': attribute type 1 has an invalid length. [ 405.683604][T19308] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3986'. [ 405.701219][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3986'. [ 405.871756][T19309] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3986'. [ 406.043861][T19338] x_tables: duplicate underflow at hook 1 [ 406.196864][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3999'. [ 406.276300][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 406.360883][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 406.605555][T19363] tipc: Enabled bearer , priority 0 [ 406.653100][T19363] syzkaller0: MTU too low for tipc bearer [ 406.685559][T19363] tipc: Disabling bearer [ 406.735074][T19387] nft_compat: unsupported protocol 0 [ 406.780717][T19384] netlink: 'syz.2.4013': attribute type 4 has an invalid length. [ 407.064882][T19396] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 407.069627][T19403] bond4: entered promiscuous mode [ 407.076291][T19403] bond4: entered allmulticast mode [ 407.081968][T19403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.327283][T19427] netlink: 'syz.1.4025': attribute type 16 has an invalid length. [ 407.342881][T19427] netlink: 'syz.1.4025': attribute type 17 has an invalid length. [ 407.346068][T19428] syzkaller1: entered promiscuous mode [ 407.357025][T19428] syzkaller1: entered allmulticast mode [ 407.360833][T19427] netlink: 'syz.1.4025': attribute type 27 has an invalid length. [ 407.389049][T19425] syzkaller0: entered promiscuous mode [ 407.394565][T19425] syzkaller0: entered allmulticast mode [ 407.407393][T19428] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106 [ 407.722621][T19449] bond1: option xmit_hash_policy: invalid value (64) [ 407.777911][T19449] bond1 (unregistering): Released all slaves [ 408.112815][T19493] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.121814][T19494] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.272423][T19496] : entered promiscuous mode [ 409.306033][T19564] netlink: 'syz.0.4063': attribute type 1 has an invalid length. [ 409.398107][T19564] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.407983][T19570] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 409.500269][T19574] syzkaller0: entered promiscuous mode [ 409.506166][T19574] syzkaller0: entered allmulticast mode [ 410.119029][T19609] __nla_validate_parse: 19 callbacks suppressed [ 410.119049][T19609] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4080'. [ 410.260498][T19614] wg1 speed is unknown, defaulting to 1000 [ 410.818187][T19661] netlink: 'syz.0.4093': attribute type 12 has an invalid length. [ 410.826597][T19661] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4093'. [ 411.156618][T19682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4101'. [ 411.453046][T19705] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 411.647524][T19718] netlink: 'syz.1.4115': attribute type 1 has an invalid length. [ 411.690323][T19720] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4114'. [ 411.909767][T19735] bond5: entered promiscuous mode [ 411.974540][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'. [ 412.383194][T19781] xt_l2tp: v2 sid > 0xffff: 1114112 [ 412.387279][T19784] netlink: 'syz.4.4131': attribute type 4 has an invalid length. [ 412.399847][T19785] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 412.416218][T19784] netlink: 'syz.4.4131': attribute type 4 has an invalid length. [ 412.424541][T19784] netlink: 'syz.4.4131': attribute type 4 has an invalid length. [ 412.433972][T19785] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.4132'. [ 412.495603][T19781] nbd3: detected capacity change from 0 to 127 [ 412.505947][ T5832] block nbd3: Receive control failed (result -32) [ 412.772678][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4140'. [ 412.827439][T19809] bridge5: entered promiscuous mode [ 412.832694][T19809] bridge5: entered allmulticast mode [ 412.880419][T19811] 8021q: VLANs not supported on syzkaller1 [ 412.892718][T19811] syzkaller1: entered promiscuous mode [ 412.905862][T19811] syzkaller1: entered allmulticast mode [ 413.136846][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4147'. [ 413.249170][T19834] bridge_slave_1 (unregistering): left allmulticast mode [ 413.274659][T19834] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.375157][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.402654][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.425483][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.480290][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.513400][T19853] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4152'. [ 413.792546][T19868] bridge0: port 2(syz_tun) entered blocking state [ 413.801008][T19868] bridge0: port 2(syz_tun) entered disabled state [ 413.809357][T19868] syz_tun: entered allmulticast mode [ 413.824176][T19868] syz_tun: entered promiscuous mode [ 413.839059][T19868] 8021q: VLANs not supported on syzkaller1 [ 413.854979][T19868] syzkaller1: entered promiscuous mode [ 413.863843][T19868] syzkaller1: entered allmulticast mode [ 413.864726][T19873] netlink: 'syz.3.4160': attribute type 6 has an invalid length. [ 413.870718][T19874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4161'. [ 413.978477][T19880] netlink: 'syz.3.4163': attribute type 6 has an invalid length. [ 414.030594][T19880] netlink: 'syz.3.4163': attribute type 6 has an invalid length. [ 414.150695][T19889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.158007][ T5909] IPVS: starting estimator thread 0... [ 414.192074][T19891] pim6reg1: entered promiscuous mode [ 414.198353][T19891] pim6reg1: entered allmulticast mode [ 414.296005][T19892] IPVS: using max 32 ests per chain, 76800 per kthread [ 414.324906][T19899] tipc: Disabling bearer [ 415.099897][T19950] tipc: Started in network mode [ 415.104816][T19950] tipc: Node identity 9a8e149ef1b6, cluster identity 4711 [ 415.124033][T19954] netlink: 'syz.0.4189': attribute type 2 has an invalid length. [ 415.155931][T19950] tipc: Enabled bearer , priority 0 [ 415.182824][T19952] syzkaller0: entered promiscuous mode [ 415.188421][T19952] syzkaller0: entered allmulticast mode [ 415.199498][T19952] __nla_validate_parse: 11 callbacks suppressed [ 415.199516][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4187'. [ 415.226757][T19961] syzkaller0: entered promiscuous mode [ 415.243961][T19961] syzkaller0: entered allmulticast mode [ 415.372974][T19949] tipc: Resetting bearer [ 415.408947][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4192'. [ 415.420327][T19949] tipc: Disabling bearer [ 415.469247][T19982] bridge0: port 3(ipvlan2) entered blocking state [ 415.492039][T19982] bridge0: port 3(ipvlan2) entered disabled state [ 415.505148][T19982] ipvlan2: entered allmulticast mode [ 415.511855][T19982] bridge0: entered allmulticast mode [ 415.520700][T19982] ipvlan2: left allmulticast mode [ 415.530890][T19982] bridge0: left allmulticast mode [ 415.585126][T19984] gtp0: entered promiscuous mode [ 415.591074][T19984] gtp0: entered allmulticast mode [ 415.604681][T19987] netlink: 'syz.2.4196': attribute type 4 has an invalid length. [ 415.681213][T19992] netlink: 'syz.2.4196': attribute type 4 has an invalid length. [ 415.805119][T19987] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.812876][T19987] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.835103][ T5922] IPVS: starting estimator thread 0... [ 415.947149][T20004] IPVS: using max 31 ests per chain, 74400 per kthread [ 415.956386][T20002] netlink: 'syz.2.4196': attribute type 1 has an invalid length. [ 415.994718][T19987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.013763][T19987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.272401][T20012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4203'. [ 416.588904][T20020] syzkaller0: entered promiscuous mode [ 416.594473][T20020] syzkaller0: entered allmulticast mode [ 416.704154][T20029] syzkaller0: entered promiscuous mode [ 416.709797][T20029] syzkaller0: entered allmulticast mode [ 416.815928][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 416.966458][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 416.989752][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4207'. [ 421.501579][T20081] netlink: 'syz.2.4216': attribute type 2 has an invalid length. [ 421.775851][T20095] netlink: 'syz.1.4223': attribute type 5 has an invalid length. [ 421.798809][T20099] netlink: 'syz.4.4221': attribute type 9 has an invalid length. [ 421.856697][T20099] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4221'. [ 421.971352][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4226'. [ 421.998427][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4226'. [ 422.020896][ T254] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.031289][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4226'. [ 422.041749][ T254] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.051741][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4226'. [ 422.071135][ T254] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.362997][T20124] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4233'. [ 422.704426][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 422.706596][T20140] netlink: 'syz.4.4237': attribute type 2 has an invalid length. [ 422.720262][T20138] wg1 speed is unknown, defaulting to 1000 [ 422.749723][T20134] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 423.065823][T20163] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4245'. [ 423.324551][T20177] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4248'. [ 423.324838][T20163] IPv6: sit1: Disabled Multicast RS [ 423.350252][T20163] sit1: entered allmulticast mode [ 423.484216][T20177] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 423.494675][T20177] 0ªî{X¹¦: entered allmulticast mode [ 423.502922][T20177] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 423.624067][T20192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4252'. [ 423.742259][T20201] netlink: 'syz.3.4255': attribute type 1 has an invalid length. [ 423.750649][T20201] netlink: 'syz.3.4255': attribute type 2 has an invalid length. [ 424.040611][T20214] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 424.057139][T20214] bond1 (unregistering): Released all slaves [ 424.191466][T20229] netlink: 'syz.3.4266': attribute type 3 has an invalid length. [ 424.365907][T20234] netlink: 'syz.2.4265': attribute type 29 has an invalid length. [ 424.423424][T20227] netlink: 'syz.2.4265': attribute type 29 has an invalid length. [ 424.843945][T20267] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 424.888037][T20267] bond1 (unregistering): Released all slaves [ 424.926977][T20274] netlink: 'syz.1.4282': attribute type 1 has an invalid length. [ 424.975909][T20274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.990528][T20272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.013348][T20274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.133900][T20283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.798068][T20330] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 426.214541][T20360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.286881][T20365] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 426.303876][T20365] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 426.324033][T20360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.332310][T20360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.373104][T20365] dvmrp6: entered allmulticast mode [ 426.900656][T20408] bond0: option ad_select: unable to set because the bond device is up [ 427.291572][T20418] validate_nla: 1 callbacks suppressed [ 427.291590][T20418] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 427.345398][T20418] __nla_validate_parse: 23 callbacks suppressed [ 427.345415][T20418] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4327'. [ 427.448796][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 427.646696][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4329'. [ 427.666919][T20427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4329'. [ 427.771608][T20434] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4332'. [ 427.798891][T20437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4332'. [ 427.853092][T20439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4333'. [ 428.051548][T20450] netlink: 'syz.1.4337': attribute type 179 has an invalid length. [ 428.199816][T20460] netlink: 'syz.0.4340': attribute type 4 has an invalid length. [ 428.212276][T20460] netlink: 'syz.0.4340': attribute type 4 has an invalid length. [ 428.224967][T20465] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 428.242566][T20467] netlink: 'syz.0.4340': attribute type 4 has an invalid length. [ 428.257309][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 428.280950][ T5832] Bluetooth: hci1: link tx timeout [ 428.290068][ T5832] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 428.296998][T20465] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 428.303113][ T5832] Bluetooth: hci1: link tx timeout [ 428.310590][ T5832] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 428.316314][T20465] IPVS: set_ctl: invalid protocol: 103 172.30.1.4:20003 [ 428.664097][T20496] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.739322][T20501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4354'. [ 428.756510][T20496] bond6: (slave lo): Enslaving as a backup interface with an up link [ 428.770822][T20496] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 428.791046][T20494] erspan0: entered allmulticast mode [ 428.888266][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4355'. [ 429.091676][T20528] openvswitch: netlink: IP tunnel dst address not specified [ 429.200662][T20533] netlink: 'syz.2.4366': attribute type 1 has an invalid length. [ 429.224716][T20537] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 429.229569][T20534] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 429.744885][T20564] tap0: tun_chr_ioctl cmd 1074025676 [ 429.765162][T20564] tap0: owner set to 0 [ 430.140739][T20590] C: renamed from lo (while UP) [ 430.222206][T20593] syzkaller0: entered promiscuous mode [ 430.229509][T20593] syzkaller0: entered allmulticast mode [ 430.263097][T20596] pim6reg1: entered promiscuous mode [ 430.269901][T20596] pim6reg1: entered allmulticast mode [ 430.329700][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 430.613654][T20628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.744060][T20634] netlink: 'syz.3.4400': attribute type 9 has an invalid length. [ 430.952287][T20641] netlink: 'syz.1.4402': attribute type 1 has an invalid length. [ 431.609925][T20687] tipc: Enabling of bearer rejected, failed to enable media [ 431.668475][T20690] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 432.018066][T20711] wg1 speed is unknown, defaulting to 1000 [ 432.363883][T20738] __nla_validate_parse: 23 callbacks suppressed [ 432.363903][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4436'. [ 432.487609][T20742] netlink: 'syz.0.4436': attribute type 12 has an invalid length. [ 432.513449][T20742] netlink: 'syz.0.4436': attribute type 29 has an invalid length. [ 432.531327][T20742] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4436'. [ 432.562164][T20755] netlink: 'syz.1.4439': attribute type 1 has an invalid length. [ 432.569106][T20742] netlink: 'syz.0.4436': attribute type 1 has an invalid length. [ 432.646054][T20742] netlink: 'syz.0.4436': attribute type 2 has an invalid length. [ 432.675640][T20742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4436'. [ 432.690928][T20755] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 432.918475][T20783] ipt_REJECT: TCP_RESET invalid for non-tcp [ 432.959544][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4445'. [ 433.087896][T20794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4449'. [ 433.158261][T20794] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.233399][T20807] delete_channel: no stack [ 433.344664][T20814] netlink: 'syz.3.4457': attribute type 8 has an invalid length. [ 433.740123][T20827] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 433.765085][T20830] syzkaller0: entered promiscuous mode [ 433.771273][T20830] syzkaller0: entered allmulticast mode [ 433.789073][T20837] xt_limit: Overflow, try lower: 271964/0 [ 433.913897][T20843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4466'. [ 435.455516][T20872] netlink: 544 bytes leftover after parsing attributes in process `syz.1.4473'. [ 435.586176][T20883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4476'. [ 435.731609][T20894] x_tables: duplicate underflow at hook 3 [ 435.825881][T20898] netlink: 'syz.4.4481': attribute type 3 has an invalid length. [ 436.004984][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4487'. [ 436.017185][T20902] bond5: ARP target 1.0.0.0 is already present [ 436.028653][T20902] bond5: option arp_ip_target: invalid value (1) [ 436.039835][T20902] bond5 (unregistering): Released all slaves [ 436.046354][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4487'. [ 436.318490][T20929] sctp: [Deprecated]: syz.2.4493 (pid 20929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.318490][T20929] Use struct sctp_sack_info instead [ 436.372643][ T5922] hid-generic 0005:0002:5508.0003: item fetching failed at offset 2/3 [ 436.387125][ T5922] hid-generic 0005:0002:5508.0003: probe with driver hid-generic failed with error -22 [ 436.713973][T20961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 436.730230][T20960] syzkaller0: entered promiscuous mode [ 436.743331][T20960] syzkaller0: entered allmulticast mode [ 437.090472][ T7600] IPVS: starting estimator thread 0... [ 437.101276][T20988] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 437.133791][T20992] syzkaller0: entered promiscuous mode [ 437.148708][T20992] syzkaller0: entered allmulticast mode [ 437.185409][T20989] IPVS: using max 31 ests per chain, 74400 per kthread [ 437.519943][T21013] bridge0: entered allmulticast mode [ 437.543391][T21013] bridge_slave_1: left allmulticast mode [ 437.550398][T21013] bridge_slave_1: left promiscuous mode [ 437.556892][T21013] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.571976][T21013] bridge_slave_0: left allmulticast mode [ 437.588977][T21013] bridge_slave_0: left promiscuous mode [ 437.605033][T21013] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.629351][T21021] __nla_validate_parse: 2 callbacks suppressed [ 437.629369][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4514'. [ 437.672499][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 437.683148][T21024] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 438.228642][T21063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4529'. [ 438.232257][T21061] openvswitch: netlink: Actions may not be safe on all matching packets [ 438.276119][T21055] netlink: 'syz.3.4527': attribute type 13 has an invalid length. [ 438.407859][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'. [ 438.591808][T21085] netlink: 'syz.4.4536': attribute type 1 has an invalid length. [ 438.717276][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4534'. [ 438.731560][T21087] can: request_module (can-proto-5) failed. [ 438.828697][T21103] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4542'. [ 438.840693][T21099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4540'. [ 438.948401][T21110] netlink: 'syz.0.4544': attribute type 1 has an invalid length. [ 439.009396][T21114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4544'. [ 439.021873][T21110] bond7: entered promiscuous mode [ 439.034638][T21110] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.053309][T21110] netlink: 'syz.0.4544': attribute type 1 has an invalid length. [ 439.053557][T21114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4544'. [ 439.671441][T21141] netlink: 'syz.4.4553': attribute type 1 has an invalid length. [ 439.756275][T21147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4552'. [ 439.776343][T21147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.791660][T21144] netlink: 'syz.3.4554': attribute type 11 has an invalid length. [ 439.805832][T21147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.817881][T21144] netlink: 'syz.3.4554': attribute type 4 has an invalid length. [ 440.188584][T21171] netlink: 'syz.3.4562': attribute type 10 has an invalid length. [ 440.363494][T21187] openvswitch: netlink: Flow key attr not present in new flow. [ 440.370458][T21182] netlink: 'syz.1.4566': attribute type 1 has an invalid length. [ 440.552113][T21182] bond5: entered promiscuous mode [ 440.569559][T21182] macvlan2: entered promiscuous mode [ 440.587809][T21182] macvlan2: entered allmulticast mode [ 440.604920][T21182] bond5: entered allmulticast mode [ 440.616089][T21182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.639268][T21182] bond5: left promiscuous mode [ 440.899319][T21222] netlink: 'syz.4.4574': attribute type 1 has an invalid length. [ 441.197544][T21232] netlink: 'syz.1.4576': attribute type 12 has an invalid length. [ 442.429011][T21217] syzkaller1: entered promiscuous mode [ 442.434527][T21217] syzkaller1: entered allmulticast mode [ 442.845153][T21268] tipc: Enabling of bearer rejected, failed to enable media [ 443.019157][T21275] __nla_validate_parse: 11 callbacks suppressed [ 443.019177][T21275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 443.401097][T21295] validate_nla: 5 callbacks suppressed [ 443.401117][T21295] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 443.556627][T21303] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 443.568501][T21311] can: request_module (can-proto-0) failed. [ 443.678961][T21295] veth3: entered promiscuous mode [ 443.703203][T21295] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 443.713593][T21320] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001 [ 444.103141][T21357] netlink: 'syz.2.4607': attribute type 1 has an invalid length. [ 444.172357][T21345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.189441][T21345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.193131][T21357] netlink: 'syz.2.4607': attribute type 2 has an invalid length. [ 444.286527][T21345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.297537][T21345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.372124][T21371] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 444.392349][T21345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.399327][T21374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.403343][T21345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.518400][T21381] x_tables: duplicate entry at hook 2 [ 444.520987][T21378] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.532679][T21378] bond6: (slave bond7): making interface the new active one [ 444.541036][T21378] bond6: (slave bond7): Enslaving as an active interface with an up link [ 444.590860][T21345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.613223][T21345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.826855][ T6819] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.836926][ T6819] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.881484][T21400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4619'. [ 444.896586][ T6819] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.906162][ T6819] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.939476][T20322] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.949545][T20322] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.982047][T21402] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 444.997587][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.005375][T21402] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.048877][T20322] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.070398][T20322] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.258332][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'. [ 445.439029][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4627'. [ 445.479133][T21441] tc_dump_action: action bad kind [ 445.559334][T21446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4627'. [ 445.604814][T21446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4627'. [ 445.640783][T21446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4627'. [ 445.676367][T21446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4627'. [ 445.859987][T21466] netlink: zone id is out of range [ 445.860151][T21464] netlink: 'syz.2.4634': attribute type 83 has an invalid length. [ 445.881387][T21466] netlink: zone id is out of range [ 445.893595][T21466] netlink: zone id is out of range [ 445.899327][T21466] netlink: get zone limit has 4 unknown bytes [ 445.907300][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4635'. [ 445.919176][T21466] netlink: zone id is out of range [ 445.937413][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4635'. [ 445.950778][T21466] netlink: zone id is out of range [ 445.956414][T21466] netlink: zone id is out of range [ 445.961621][T21466] netlink: get zone limit has 4 unknown bytes [ 446.282165][T21502] netlink: 'syz.0.4646': attribute type 64 has an invalid length. [ 446.284218][T21501] netlink: 'syz.0.4646': attribute type 64 has an invalid length. [ 446.291622][T21502] netlink: 'syz.0.4646': attribute type 64 has an invalid length. [ 446.398820][T21508] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 446.407941][T21508] team0: Device macvtap1 is already an upper device of the team interface [ 447.092565][T21547] netlink: 'syz.2.4658': attribute type 10 has an invalid length. [ 447.246399][T21555] team0: Device gtp0 is of different type [ 448.017828][T21614] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 448.049065][T21614] bond9 (unregistering): Released all slaves [ 448.074882][T21619] netlink: 'syz.4.4676': attribute type 9 has an invalid length. [ 448.556718][T21651] __nla_validate_parse: 39 callbacks suppressed [ 448.556737][T21651] netlink: 5164 bytes leftover after parsing attributes in process `syz.0.4685'. [ 448.708619][T21660] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 448.746558][T21660] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 448.754375][T21660] gretap2: entered promiscuous mode [ 448.780678][T21660] gretap2: entered allmulticast mode [ 448.932131][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4695'. [ 448.980540][T21677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4695'. [ 449.002441][T21677] validate_nla: 1 callbacks suppressed [ 449.002458][T21677] netlink: 'syz.0.4695': attribute type 7 has an invalid length. [ 449.043439][T21677] netlink: 'syz.0.4695': attribute type 8 has an invalid length. [ 449.087296][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4695'. [ 449.116233][T21681] netlink: 'syz.0.4695': attribute type 8 has an invalid length. [ 449.285215][T21702] bridge0: port 1(syz_tun) entered blocking state [ 449.292259][T21702] bridge0: port 1(syz_tun) entered disabled state [ 449.302365][T21702] syz_tun: entered allmulticast mode [ 449.336090][T21702] syz_tun: entered promiscuous mode [ 449.392603][T21710] 8021q: VLANs not supported on syzkaller1 [ 449.415527][T21715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4702'. [ 449.416174][T21702] syzkaller1: entered promiscuous mode [ 449.430770][T21702] syzkaller1: entered allmulticast mode [ 449.461518][T21715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4702'. [ 449.532417][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4702'. [ 449.542595][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4702'. [ 449.599113][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4705'. [ 449.670900][T21730] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 449.685807][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 449.713786][T21734] lo: Caught tx_queue_len zero misconfig [ 449.918236][T21748] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.956950][T21756] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4714'. [ 450.099738][T21755] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 450.133425][T21764] macvlan0: entered promiscuous mode [ 450.139805][T21764] macvlan0: entered allmulticast mode [ 450.233739][T21771] ip6gre2: entered promiscuous mode [ 450.259428][T21771] ip6gre2: entered allmulticast mode [ 450.281909][T20321] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.295808][T20321] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.305583][T17294] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.327685][T21771] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.572294][T21790] netlink: 'syz.4.4723': attribute type 1 has an invalid length. [ 450.601687][T21790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.830606][T21820] netlink: 'syz.1.4726': attribute type 11 has an invalid length. [ 450.924816][T21826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.935775][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 451.191817][T21841] : renamed from bridge_slave_0 (while UP) [ 451.280809][T21846] netlink: 'syz.4.4736': attribute type 5 has an invalid length. [ 451.361110][T21847] nbd: must specify at least one socket [ 451.367147][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 451.451479][T21859] netlink: 'syz.1.4739': attribute type 29 has an invalid length. [ 451.487092][T21859] netlink: 'syz.1.4739': attribute type 29 has an invalid length. [ 451.513226][T21859] syzkaller0: entered promiscuous mode [ 451.522711][T21859] syzkaller0: entered allmulticast mode [ 451.801125][T21874] pimreg: entered allmulticast mode [ 452.019121][T21882] netlink: 'syz.1.4747': attribute type 3 has an invalid length. [ 452.310326][T21904] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 452.649845][T21928] netlink: 'syz.4.4762': attribute type 1 has an invalid length. [ 452.948062][T21943] bond9 (unregistering): Released all slaves [ 453.185455][T21960] x_tables: duplicate underflow at hook 3 [ 454.325454][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 455.039931][T21994] bond0: Error: Cannot enslave bond to itself. [ 455.391083][T22015] tipc: New replicast peer: 255.255.255.255 [ 455.406760][T22015] tipc: Enabled bearer , priority 10 [ 455.472331][T22021] netlink: 'syz.4.4787': attribute type 5 has an invalid length. [ 455.496641][T22015] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 455.571211][T22020] syzkaller0: entered promiscuous mode [ 455.574540][T22025] workqueue: Failed to create a rescuer kthread for wq "nbd0-recv": -EINTR [ 455.577622][T22020] syzkaller0: entered allmulticast mode [ 455.582765][T22025] block (null): Could not allocate knbd recv work queue. [ 455.604878][T22023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.646563][T22025] nbd: failed to add new device [ 455.683184][T22034] __nla_validate_parse: 20 callbacks suppressed [ 455.683201][T22034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4792'. [ 455.707366][T22034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4792'. [ 456.368272][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4800'. [ 457.504014][T22057] netlink: 'syz.2.4799': attribute type 1 has an invalid length. [ 457.512202][T22057] netlink: 'syz.2.4799': attribute type 1 has an invalid length. [ 457.702002][T22080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4804'. [ 457.728156][T22084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4805'. [ 457.773226][T22088] netlink: 'syz.1.4806': attribute type 4 has an invalid length. [ 457.784306][T22075] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 457.823341][T22088] netlink: 'syz.1.4806': attribute type 4 has an invalid length. [ 458.167355][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 458.203272][T22107] wg1 speed is unknown, defaulting to 1000 [ 458.235990][T22110] netlink: 'syz.4.4813': attribute type 1 has an invalid length. [ 458.683283][T22128] tipc: Enabled bearer , priority 0 [ 458.716962][T22128] syzkaller0: entered promiscuous mode [ 458.722868][T22128] syzkaller0: entered allmulticast mode [ 458.819465][T22128] tipc: Resetting bearer [ 458.844622][T22127] tipc: Resetting bearer [ 458.909612][T22127] tipc: Disabling bearer [ 458.914304][T22142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.144057][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 459.199489][T22161] netlink: 'syz.3.4832': attribute type 12 has an invalid length. [ 459.260890][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4832'. [ 459.276873][T22159] hsr_slave_0 (unregistering): left promiscuous mode [ 459.284346][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4834'. [ 459.310499][T22169] bridge_slave_1: left allmulticast mode [ 459.320590][T22169] bridge_slave_1: left promiscuous mode [ 459.329873][T22169] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.384142][T22169] bridge_slave_0: left allmulticast mode [ 459.417949][T22169] bridge_slave_0: left promiscuous mode [ 459.423774][T22169] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.443991][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4837'. [ 459.569905][T22180] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4836'. [ 460.043546][T22220] netlink: 'syz.1.4846': attribute type 1 has an invalid length. [ 460.168931][T22232] hsr_slave_0 (unregistering): left promiscuous mode [ 460.714476][T22276] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 460.781262][T22282] netlink: 'syz.1.4865': attribute type 2 has an invalid length. [ 460.807414][T22282] __nla_validate_parse: 16 callbacks suppressed [ 460.807433][T22282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4865'. [ 460.970996][T22286] syzkaller0: entered promiscuous mode [ 460.977029][T22286] syzkaller0: entered allmulticast mode [ 462.652600][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4876'. [ 462.725416][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 462.848714][T22329] netlink: 'syz.1.4878': attribute type 1 has an invalid length. [ 462.864131][T22329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4878'. [ 463.112350][T22344] netlink: 'syz.2.4883': attribute type 83 has an invalid length. [ 463.125442][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.271777][ T6531] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.284165][ T6531] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.314212][ T6531] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.331883][ T6531] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.398732][T22350] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 463.578116][T22389] gretap0: entered promiscuous mode [ 463.644351][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4896'. [ 463.867148][T22407] syzkaller1: entered promiscuous mode [ 463.872839][T22407] syzkaller1: entered allmulticast mode [ 464.251356][T22367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.456734][T22411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4902'. [ 464.460971][T22417] tipc: Enabling of bearer rejected, failed to enable media [ 464.497855][T22417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4905'. [ 464.519020][T22417] netlink: 17104 bytes leftover after parsing attributes in process `syz.2.4905'. [ 464.681616][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4908'. [ 464.704751][T22432] syzkaller0: entered promiscuous mode [ 464.724294][T22432] syzkaller0: entered allmulticast mode [ 464.741857][T22436] pimreg3: entered allmulticast mode [ 464.770838][T22432] 0: reclassify loop, rule prio 0, protocol 800 [ 464.837315][T22439] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4912'. [ 464.846734][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4912'. [ 465.060880][T22460] pim6reg: entered allmulticast mode [ 465.067941][T22460] pim6reg: left allmulticast mode [ 465.266284][T22469] netlink: 'syz.0.4919': attribute type 1 has an invalid length. [ 465.274269][T22469] netlink: 'syz.0.4919': attribute type 1 has an invalid length. [ 465.282369][T22469] netlink: 'syz.0.4919': attribute type 1 has an invalid length. [ 465.291949][T22469] netlink: 'syz.0.4919': attribute type 1 has an invalid length. [ 465.304959][T22469] netlink: 'syz.0.4919': attribute type 2 has an invalid length. [ 465.331659][T22469] netlink: 'syz.0.4919': attribute type 2 has an invalid length. [ 465.349887][T22469] netlink: 'syz.0.4919': attribute type 2 has an invalid length. [ 465.856392][T22504] __nla_validate_parse: 8 callbacks suppressed [ 465.856410][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'. [ 465.918774][T22513] validate_nla: 1 callbacks suppressed [ 465.918793][T22513] netlink: 'syz.2.4933': attribute type 1 has an invalid length. [ 465.972779][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4936'. [ 465.979613][T22504] vlan2: entered allmulticast mode [ 465.999238][T22504] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 466.080739][T22518] macvtap1: entered promiscuous mode [ 466.086396][T22518] vlan0: entered promiscuous mode [ 466.091928][T22518] macvtap1: entered allmulticast mode [ 466.097697][T22518] vlan0: entered allmulticast mode [ 466.103072][T22518] veth0_vlan: entered allmulticast mode [ 466.343950][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4941'. [ 466.446192][ T984] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 466.476936][T22542] bridge4: entered promiscuous mode [ 466.506508][T22542] bridge4: entered allmulticast mode [ 466.527973][T22542] team0: Port device bridge4 added [ 466.705758][ T984] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 466.725054][T22559] gtp1: entered promiscuous mode [ 466.731247][T22559] gtp1: entered allmulticast mode [ 466.800452][T22565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.807763][T22565] IPv6: NLM_F_CREATE should be set when creating new route [ 466.813411][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4950'. [ 467.094158][T22595] netlink: 'syz.4.4956': attribute type 2 has an invalid length. [ 467.109308][T22595] netlink: 'syz.4.4956': attribute type 1 has an invalid length. [ 467.118265][T22595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4956'. [ 467.708013][T22630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.721377][T22630] netlink: 'syz.0.4966': attribute type 33 has an invalid length. [ 467.758833][T22630] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 467.775862][T22630] bond9 (unregistering): Released all slaves [ 467.808098][T22635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4967'. [ 467.820935][T22635] netlink: 'syz.4.4967': attribute type 4 has an invalid length. [ 468.064573][T22650] netlink: 'syz.1.4971': attribute type 2 has an invalid length. [ 468.332974][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 468.360658][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 468.378951][T22672] netlink: 'syz.2.4975': attribute type 10 has an invalid length. [ 468.407543][T22672] team0: Port device dummy0 added [ 468.418968][T22672] netlink: 'syz.2.4975': attribute type 10 has an invalid length. [ 468.461941][T22672] team0: Port device dummy0 removed [ 468.476054][T22672] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.564693][T22686] netlink: zone id is out of range [ 468.582157][T22686] netlink: zone id is out of range [ 468.588541][T22686] netlink: zone id is out of range [ 468.593885][T22686] netlink: get zone limit has 4 unknown bytes [ 468.820777][T22709] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 468.851637][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 468.865378][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4985'. [ 469.114301][T22727] netlink: 'syz.1.4993': attribute type 29 has an invalid length. [ 469.342730][T22737] delete_channel: no stack [ 469.465663][T22754] tipc: Enabling of bearer rejected, failed to enable media [ 469.662628][T22763] dvmrp0: entered allmulticast mode [ 469.772679][T22772] netlink: 'syz.3.5010': attribute type 1 has an invalid length. [ 469.902349][T22774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.911894][T22774] bond4: (slave bond5): making interface the new active one [ 469.920425][T22774] bond4: (slave bond5): Enslaving as an active interface with an up link [ 469.934080][T22772] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 469.947902][T22772] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 469.989960][T22777] team0: No ports can be present during mode change [ 470.076815][T22782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.085737][T22782] bond2: (slave bond3): making interface the new active one [ 470.093883][T22782] bond2: (slave bond3): Enslaving as an active interface with an up link [ 470.126585][T22779] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 470.139154][T22779] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 470.310335][T22808] openvswitch: netlink: IP tunnel dst address not specified [ 470.800942][T22835] bond4: (slave geneve2): making interface the new active one [ 470.809765][T22835] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 470.820128][ T6819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.855157][T22832] wg1 speed is unknown, defaulting to 1000 [ 470.957753][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 470.961284][T22848] __nla_validate_parse: 7 callbacks suppressed [ 470.961299][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5031'. [ 470.977696][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 471.055078][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 471.323414][T22872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5038'. [ 471.348008][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5038'. [ 471.377636][T22869] bridge0: entered allmulticast mode [ 471.758703][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5045'. [ 471.859785][ T36] bond13 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 471.870011][ T36] bond13 (unregistering): (slave ip6gretap2): Releasing backup interface [ 471.878546][ T36] bond13 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 9a:71:b1:16:a3:e6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 472.489895][ T36] bond0 (unregistering): Released all slaves [ 472.502908][ T36] bond1 (unregistering): Released all slaves [ 472.516135][ T36] bond2 (unregistering): Released all slaves [ 472.528912][ T36] bond3 (unregistering): Released all slaves [ 472.544887][ T36] bond4 (unregistering): Released all slaves [ 472.563922][ T36] bond5 (unregistering): Released all slaves [ 472.578988][ T36] bond6 (unregistering): (slave bond7): Releasing backup interface [ 472.587795][ T36] bond6 (unregistering): Released all slaves [ 472.687988][ T36] bond7 (unregistering): Released all slaves [ 472.782960][ T36] bond8 (unregistering): Released all slaves [ 472.795330][ T36] bond9 (unregistering): Released all slaves [ 472.809493][ T36] bond10 (unregistering): Released all slaves [ 472.821676][ T36] bond11 (unregistering): Released all slaves [ 472.922456][ T36] bond12 (unregistering): (slave veth3): Releasing active interface [ 472.932627][ T36] bond12 (unregistering): (slave veth5): Releasing active interface [ 472.942438][ T36] bond12 (unregistering): Released all slaves [ 473.037173][ T36] bond13 (unregistering): (slave veth7): Releasing backup interface [ 473.046928][ T36] bond13 (unregistering): Released all slaves [ 473.140485][ T36] bond14 (unregistering): Released all slaves [ 473.386381][T22926] validate_nla: 2 callbacks suppressed [ 473.386399][T22926] netlink: 'syz.0.5050': attribute type 1 has an invalid length. [ 473.402059][T22918] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 473.452717][T22918] bond9 (unregistering): Released all slaves [ 473.525840][ T5832] Bluetooth: hci4: command 0x040f tx timeout [ 473.556809][T22936] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5055'. [ 473.580979][ T36] tipc: Disabling bearer [ 473.597895][ T36] tipc: Left network mode [ 473.634495][T22926] 8021q: adding VLAN 0 to HW filter on device bond9 [ 473.688066][T22929] bond9: (slave gretap2): making interface the new active one [ 473.710677][T22929] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 473.845005][T22944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5057'. [ 474.002018][T22962] netlink: 'syz.4.5063': attribute type 21 has an invalid length. [ 474.398388][ T36] hsr_slave_0: left promiscuous mode [ 474.415059][ T36] hsr_slave_1: left promiscuous mode [ 474.548963][T23001] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 474.707401][ T36] pim6reg527 (unregistering): left allmulticast mode [ 475.313524][T22986] tipc: Enabled bearer , priority 0 [ 475.449753][T22986] tipc: Disabling bearer [ 475.676557][T23019] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 475.779867][T23026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.803766][T23027] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 475.843380][T23037] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5078'. [ 475.865442][T23039] openvswitch: netlink: IP tunnel dst address not specified [ 475.887518][T23039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5080'. [ 475.889854][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5081'. [ 475.929911][ T36] IPVS: stop unused estimator thread 0... [ 475.955570][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5081'. [ 476.160466][T23064] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 476.179232][T23065] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 476.517707][T23082] gretap0: left promiscuous mode [ 476.534151][T23082] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 476.568434][T23084] xt_hashlimit: invalid rate [ 476.700895][T23093] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5094'. [ 477.044955][T23107] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 477.059834][T23107] bond5: entered promiscuous mode [ 477.064982][T23107] bond5: entered allmulticast mode [ 477.079881][T23107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 477.511474][T23142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.565914][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 477.606517][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5107'. [ 477.621677][T23157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5104'. [ 477.933294][T23165] syzkaller0: entered promiscuous mode [ 477.944611][T23165] syzkaller0: entered allmulticast mode [ 478.286126][T23160] netlink: 'syz.2.5108': attribute type 1 has an invalid length. [ 478.293899][T23160] netlink: 'syz.2.5108': attribute type 1 has an invalid length. [ 478.325480][T23160] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.5108'. [ 478.629148][T23190] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5114'. [ 480.668997][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5129'. [ 480.696067][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'. [ 480.717464][T23246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5129'. [ 480.762016][T23241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5129'. [ 480.767739][T23249] wg1 speed is unknown, defaulting to 1000 [ 480.991124][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5134'. [ 481.045463][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 481.741080][T23311] netlink: 'syz.0.5148': attribute type 21 has an invalid length. [ 481.760825][T23311] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.790216][T23311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.796734][T23316] __nla_validate_parse: 1 callbacks suppressed [ 481.796751][T23316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5150'. [ 481.797499][T23311] IPv6: NLM_F_CREATE should be set when creating new route [ 481.819835][T23311] IPv6: NLM_F_CREATE should be set when creating new route [ 481.827085][T23311] IPv6: NLM_F_CREATE should be set when creating new route [ 481.833326][T23318] netlink: 'syz.1.5152': attribute type 1 has an invalid length. [ 481.839883][T23321] netlink: 'syz.0.5148': attribute type 21 has an invalid length. [ 481.850307][T23321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.947876][T23330] netlink: 'syz.4.5155': attribute type 11 has an invalid length. [ 481.989933][T23327] bond6: (slave gretap0): making interface the new active one [ 481.998274][T23327] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 482.036579][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5156'. [ 482.134054][T23340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5158'. [ 482.401331][T23358] netlink: 'syz.2.5164': attribute type 1 has an invalid length. [ 482.579924][T23358] netlink: 'syz.2.5164': attribute type 21 has an invalid length. [ 482.640795][T23358] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5164'. [ 482.717526][T23365] 8021q: adding VLAN 0 to HW filter on device bond9 [ 482.728227][T23365] bond8: (slave bond9): making interface the new active one [ 482.736915][T23365] bond8: (slave bond9): Enslaving as an active interface with an up link [ 482.746840][T23358] netlink: 'syz.2.5164': attribute type 5 has an invalid length. [ 482.755150][T23358] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5164'. [ 482.965345][T23405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5173'. [ 483.139915][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5179'. [ 483.168948][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5179'. [ 483.214494][ T6819] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.216732][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5179'. [ 483.232603][ T6819] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.245640][ T6819] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.259909][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5179'. [ 483.270401][ T6819] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.538876][T23439] wg1 speed is unknown, defaulting to 1000 [ 483.824274][T23452] x_tables: duplicate underflow at hook 1 [ 484.382291][T23477] tap0: tun_chr_ioctl cmd 2148553947 [ 484.476286][T23483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.482695][T23484] netlink: 'syz.1.5197': attribute type 3 has an invalid length. [ 484.701550][T23501] sctp: [Deprecated]: syz.4.5207 (pid 23501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.701550][T23501] Use struct sctp_sack_info instead [ 484.893247][T23515] netlink: 'syz.4.5214': attribute type 6 has an invalid length. [ 485.033040][T23526] bridge0: entered allmulticast mode [ 485.406154][T23547] syzkaller0: entered promiscuous mode [ 485.411638][T23547] syzkaller0: entered allmulticast mode [ 486.088535][T23589] netlink: 'syz.4.5240': attribute type 1 has an invalid length. [ 486.096565][T23589] netlink: 'syz.4.5240': attribute type 2 has an invalid length. [ 486.373861][T23581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.390940][T23581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.706922][T23581] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 486.814403][T23581] gretap1: left promiscuous mode [ 486.840115][T23581] ip6gre2: left promiscuous mode [ 486.928550][T23595] bond6: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 486.963767][T23595] bond6: (slave C): Enslaving as a backup interface with an up link [ 486.978687][T23595] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 486.994518][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.032417][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.054598][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.068371][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.100343][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.124669][T23612] __nla_validate_parse: 7 callbacks suppressed [ 487.124687][T23612] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5244'. [ 487.126810][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.149276][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.159172][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.198452][T23606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5242'. [ 487.248270][T23618] syzkaller0: entered promiscuous mode [ 487.253844][T23618] syzkaller0: entered allmulticast mode [ 487.489549][T23636] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5251'. [ 487.517064][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5251'. [ 487.574491][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5253'. [ 487.590494][T23643] nbd: must specify a size in bytes for the device [ 487.654641][ T30] audit: type=1804 audit(1763857611.174:8): pid=23651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5256" name="/newroot/382/cgroup.controllers" dev="tmpfs" ino=1951 res=1 errno=0 [ 487.709041][ T30] audit: type=1800 audit(1763857611.174:9): pid=23651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5256" name="cgroup.controllers" dev="tmpfs" ino=1951 res=0 errno=0 [ 487.770420][ T30] audit: type=1800 audit(1763857611.184:10): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5256" name="cgroup.controllers" dev="tmpfs" ino=1951 res=0 errno=0 [ 489.664600][T23708] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5268'. [ 490.013050][T23728] netlink: 'syz.4.5276': attribute type 1 has an invalid length. [ 490.030008][T23730] netlink: 'syz.2.5277': attribute type 13 has an invalid length. [ 490.038231][T23728] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.5276'. [ 490.047991][T23730] netlink: 'syz.2.5277': attribute type 17 has an invalid length. [ 490.060244][T23718] bond0: Caught tx_queue_len zero misconfig [ 490.319211][T23730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.328591][T23730] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.339757][T23730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.414372][T23742] wg1 speed is unknown, defaulting to 1000 [ 490.561704][T23756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5281'. [ 490.585814][T23756] ip6gre2: entered promiscuous mode [ 490.591131][T23756] ip6gre2: entered allmulticast mode [ 490.602017][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5281'. [ 490.727480][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5286'. [ 490.739592][T23770] nbd: illegal input index -8454144 [ 490.850503][T23777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.994798][T23785] netlink: 'syz.0.5293': attribute type 10 has an invalid length. [ 491.073969][T23791] ip6gre1: entered promiscuous mode [ 491.092509][T23791] ip6gre1: entered allmulticast mode [ 491.227305][T23798] hsr_slave_0 (unregistering): left promiscuous mode [ 491.247748][T23803] team0: Device gtp0 is of different type [ 491.404224][T23815] Cannot find set identified by id 1 to match [ 491.452556][T23819] 8021q: VLANs not supported on ip6_vti0 [ 491.539273][T23830] x_tables: duplicate underflow at hook 2 [ 491.678029][T23836] netlink: 'syz.4.5307': attribute type 1 has an invalid length. [ 491.757468][T23836] 8021q: adding VLAN 0 to HW filter on device bond8 [ 491.766925][T23836] bond7: (slave bond8): making interface the new active one [ 491.774962][T23836] bond7: (slave bond8): Enslaving as an active interface with an up link [ 491.925181][T23848] vlan1: entered promiscuous mode [ 491.941865][T23848] vlan1: entered allmulticast mode [ 491.948469][T23848] hsr_slave_1: entered allmulticast mode [ 492.071161][T23861] netlink: 'syz.2.5314': attribute type 1 has an invalid length. [ 492.082925][T23862] netlink: 'syz.2.5314': attribute type 1 has an invalid length. [ 492.124909][T23861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 492.214748][T23866] bond10: (slave veth7): Enslaving as an active interface with a down link [ 492.225009][T23869] netlink: 'syz.4.5316': attribute type 10 has an invalid length. [ 492.233313][T23869] dummy0: left promiscuous mode [ 492.247313][T23869] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 492.310626][T23878] [ 492.312988][T23878] ====================================================== [ 492.319999][T23878] WARNING: possible circular locking dependency detected [ 492.327015][T23878] syzkaller #0 Not tainted [ 492.331415][T23878] ------------------------------------------------------ [ 492.338413][T23878] syz.1.5318/23878 is trying to acquire lock: [ 492.344458][T23878] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 492.353765][T23878] [ 492.353765][T23878] but task is already holding lock: [ 492.361109][T23878] ffff88814cce0e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 492.370420][T23878] [ 492.370420][T23878] which lock already depends on the new lock. [ 492.370420][T23878] [ 492.380803][T23878] [ 492.380803][T23878] the existing dependency chain (in reverse order) is: [ 492.389797][T23878] [ 492.389797][T23878] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 492.397777][T23878] lock_acquire+0x120/0x360 [ 492.402788][T23878] _raw_spin_lock_bh+0x36/0x50 [ 492.408060][T23878] nr_rt_device_down+0x12a/0x720 [ 492.413508][T23878] nr_device_event+0x137/0x150 [ 492.418778][T23878] notifier_call_chain+0x1b6/0x3e0 [ 492.424400][T23878] __dev_notify_flags+0x18d/0x2e0 [ 492.429933][T23878] netif_change_flags+0xe8/0x1a0 [ 492.435377][T23878] dev_change_flags+0x130/0x260 [ 492.440732][T23878] dev_ioctl+0x7b4/0x1150 [ 492.445573][T23878] sock_do_ioctl+0x22c/0x300 [ 492.450672][T23878] sock_ioctl+0x576/0x790 [ 492.455510][T23878] __se_sys_ioctl+0xfc/0x170 [ 492.460610][T23878] do_syscall_64+0xfa/0xfa0 [ 492.465626][T23878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.472025][T23878] [ 492.472025][T23878] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 492.479833][T23878] lock_acquire+0x120/0x360 [ 492.484843][T23878] _raw_spin_lock_bh+0x36/0x50 [ 492.490116][T23878] nr_rt_device_down+0xa9/0x720 [ 492.495478][T23878] nr_device_event+0x137/0x150 [ 492.500749][T23878] notifier_call_chain+0x1b6/0x3e0 [ 492.506369][T23878] __dev_notify_flags+0x18d/0x2e0 [ 492.511899][T23878] netif_change_flags+0xe8/0x1a0 [ 492.517340][T23878] dev_change_flags+0x130/0x260 [ 492.522694][T23878] dev_ioctl+0x7b4/0x1150 [ 492.527537][T23878] sock_do_ioctl+0x22c/0x300 [ 492.532637][T23878] sock_ioctl+0x576/0x790 [ 492.537477][T23878] __se_sys_ioctl+0xfc/0x170 [ 492.542577][T23878] do_syscall_64+0xfa/0xfa0 [ 492.547595][T23878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.553995][T23878] [ 492.553995][T23878] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 492.561889][T23878] validate_chain+0xb9b/0x2140 [ 492.567160][T23878] __lock_acquire+0xab9/0xd20 [ 492.572340][T23878] lock_acquire+0x120/0x360 [ 492.577347][T23878] _raw_spin_lock_bh+0x36/0x50 [ 492.582622][T23878] nr_remove_neigh+0x25/0xe0 [ 492.587721][T23878] nr_add_node+0x1d9f/0x2570 [ 492.592821][T23878] nr_rt_ioctl+0xc12/0xd50 [ 492.597745][T23878] sock_do_ioctl+0xdc/0x300 [ 492.602761][T23878] sock_ioctl+0x576/0x790 [ 492.607596][T23878] __se_sys_ioctl+0xfc/0x170 [ 492.612695][T23878] do_syscall_64+0xfa/0xfa0 [ 492.617709][T23878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.624106][T23878] [ 492.624106][T23878] other info that might help us debug this: [ 492.624106][T23878] [ 492.634316][T23878] Chain exists of: [ 492.634316][T23878] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 492.634316][T23878] [ 492.648125][T23878] Possible unsafe locking scenario: [ 492.648125][T23878] [ 492.655565][T23878] CPU0 CPU1 [ 492.660914][T23878] ---- ---- [ 492.666259][T23878] lock(&nr_node->node_lock); [ 492.671014][T23878] lock(nr_node_list_lock); [ 492.678111][T23878] lock(&nr_node->node_lock); [ 492.685386][T23878] lock(nr_neigh_list_lock); [ 492.690056][T23878] [ 492.690056][T23878] *** DEADLOCK *** [ 492.690056][T23878] [ 492.698180][T23878] 1 lock held by syz.1.5318/23878: [ 492.703269][T23878] #0: ffff88814cce0e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 492.713010][T23878] [ 492.713010][T23878] stack backtrace: [ 492.718897][T23878] CPU: 1 UID: 0 PID: 23878 Comm: syz.1.5318 Not tainted syzkaller #0 PREEMPT(full) [ 492.718917][T23878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.718931][T23878] Call Trace: [ 492.718938][T23878] [ 492.718946][T23878] dump_stack_lvl+0x189/0x250 [ 492.718971][T23878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.718991][T23878] ? __pfx__printk+0x10/0x10 [ 492.719006][T23878] ? stack_trace_save+0x9c/0xe0 [ 492.719031][T23878] print_circular_bug+0x2ee/0x310 [ 492.719053][T23878] check_noncircular+0x134/0x160 [ 492.719075][T23878] validate_chain+0xb9b/0x2140 [ 492.719101][T23878] __lock_acquire+0xab9/0xd20 [ 492.719119][T23878] ? nr_remove_neigh+0x25/0xe0 [ 492.719143][T23878] lock_acquire+0x120/0x360 [ 492.719157][T23878] ? nr_remove_neigh+0x25/0xe0 [ 492.719180][T23878] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.719201][T23878] ? nr_remove_neigh+0x25/0xe0 [ 492.719221][T23878] _raw_spin_lock_bh+0x36/0x50 [ 492.719242][T23878] ? nr_remove_neigh+0x25/0xe0 [ 492.719262][T23878] nr_remove_neigh+0x25/0xe0 [ 492.719283][T23878] nr_add_node+0x1d9f/0x2570 [ 492.719304][T23878] ? __asan_memcpy+0x40/0x70 [ 492.719325][T23878] ? nr_call_to_digi+0x126/0x1b0 [ 492.719345][T23878] nr_rt_ioctl+0xc12/0xd50 [ 492.719368][T23878] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 492.719386][T23878] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.719413][T23878] ? apparmor_capable+0x137/0x1b0 [ 492.719434][T23878] ? capable+0x89/0xe0 [ 492.719451][T23878] ? nr_ioctl+0x1b1/0x3b0 [ 492.719467][T23878] sock_do_ioctl+0xdc/0x300 [ 492.719489][T23878] ? __pfx_sock_do_ioctl+0x10/0x10 [ 492.719515][T23878] sock_ioctl+0x576/0x790 [ 492.719535][T23878] ? __pfx_sock_ioctl+0x10/0x10 [ 492.719555][T23878] ? __fget_files+0x3a0/0x420 [ 492.719570][T23878] ? __fget_files+0x2a/0x420 [ 492.719585][T23878] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.719602][T23878] ? __pfx_sock_ioctl+0x10/0x10 [ 492.719621][T23878] __se_sys_ioctl+0xfc/0x170 [ 492.719641][T23878] do_syscall_64+0xfa/0xfa0 [ 492.719663][T23878] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.719684][T23878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.719700][T23878] ? clear_bhb_loop+0x60/0xb0 [ 492.719717][T23878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.719736][T23878] RIP: 0033:0x7f5d4078f749 [ 492.719751][T23878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.719766][T23878] RSP: 002b:00007f5d415e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.719783][T23878] RAX: ffffffffffffffda RBX: 00007f5d409e6090 RCX: 00007f5d4078f749 [ 492.719795][T23878] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000009 [ 492.719805][T23878] RBP: 00007f5d40813f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.719815][T23878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.719825][T23878] R13: 00007f5d409e6128 R14: 00007f5d409e6090 R15: 00007ffe62037a88 [ 492.719843][T23878]