last executing test programs: 9.917374616s ago: executing program 2 (id=3198): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) (async) sendfile(r2, r2, 0x0, 0x100000000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000040)=""/129, &(0x7f0000000100)=0x81) gettid() sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x2f, 0x1, 0x40000000, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x2f, 0x1, 0x40000000, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 9.615917398s ago: executing program 2 (id=3200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f00000007c0)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31070000000000000000380000000e0001006e657464657677696d0000000f0002006e657464657673696d30000098a766524df2da8c3c31a28f8b94eea634ce77e2030f61bfb498ace7d2660753f4847770e2e6c3d4be653fd3bb66a7a56f5ed68bc0e6168d13655148e7f2e01e2e293dfe00a4c49a03ba09bd1fb8d77ac007d297034aa967d32f167f3c1e15c8a953f2ef08cb6e12ca779ea8d35202441be2a6464d169f5f22161db09ece1aea0cb3c4cb5fa643fe4df428f8dc19a3fbff70eed492447a01ac301a1b67a0648f91dc6e3777d22b43e1b5a22a1e58d2758ab2a5164172e1e6a72213048a"], 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x3, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r3, &(0x7f0000000280)="d311744d70ad0fb8fa73bf63964b57c1a295e86c1da5a23a4ac0", &(0x7f0000000940)=""/83, 0x4}, 0x20) r4 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x160, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x3, 0x6}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x130, 0x2, [@TCA_FLOW_EMATCHES={0x12c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x286a, 0x1, 0x467a}, {0xa, 0x401, 0xd000, 0x4, 0x4, 0x2, 0x3}}}, @TCF_EM_META={0x78, 0x3, 0x0, 0x0, {{0x8}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='V']}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="27111a154536865a", @TCF_META_TYPE_VAR="4ef5b39c0bb8ba", @TCF_META_TYPE_VAR="1a1a", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="738068b6d8d860e4858d"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="4dbf9b425cb01c55c0b6", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_IPT={0x8c, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x56, 0x5, "83b2276258fd40059541164de9fc9d179e194c2d7af7f1f04a41d6dac5aa224a170a659ea79ab40209b1c6d24bdf5f0243266a42bf63fb7e91d50933532b1d8328dee4bd2c0a010825de4c3fea223ba5f5ae"}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}]}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r11, 0xd, 0x4}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 9.238675812s ago: executing program 2 (id=3202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x200000000000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 8.706425373s ago: executing program 2 (id=3206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x6c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 8.421044589s ago: executing program 2 (id=3208): close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd27, 0xffffffff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x14, 0x67, 0x0, 0x1, [@nested={0xd, 0x9, 0x0, 0x1, [@generic="e59b06f6f044058215"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 8.040597521s ago: executing program 2 (id=3212): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f000801}, 0x44000) 5.823754023s ago: executing program 3 (id=3226): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x218, 0x0, {}, [@common=@hbh={{0x48}, {0x7919, 0x0, 0x1, [0xe, 0x172, 0x200, 0x6, 0xff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x5, 0x6d, 0x2, 0x6, 0xfff, 0x3d], 0xe}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:smartcard_device_t:s0\x00'}}}, {{@ipv6={@private2, @empty, [0xff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffff00, 0xff], 'tunl0\x00', 'syzkaller1\x00', {}, {}, 0x21, 0x4, 0x4, 0x2b}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) close(r0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x3}) setsockopt$inet6_int(r0, 0x29, 0x1000000000031, 0x0, 0x0) 5.401079111s ago: executing program 3 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000024003a376f0851acb5ed00005dcdfffffffffbff81000000000000000000fefc000000001800128008000100736974000c00028008000300640101007c"], 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000003c0)={@rand_addr=' \x01\x00', 0x1a, r6}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x5, @mcast2, 0x1}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1e8}}], 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0xfffffcac) bind$xdp(r4, &(0x7f0000000440)={0x2c, 0xe, r8, 0x0, r4}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xffff, 0xfff3}, {0xf, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x94}}, 0x4c840) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x28c0aa9df6c5754f}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000005) 4.135681986s ago: executing program 0 (id=3239): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x1000, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000290000000400000037012c"], 0x20}, 0x800) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x78}}, 0x0) 3.922950115s ago: executing program 3 (id=3240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000002300000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001d97e0f89e76aa2aae3dcee191c908c9fbd9f6aad84e64c54b96bb25668606969c3d89e8e1ea935a1a3edb81a681fa27bf4ff0927ee8369181006d39c3cf4c55b20ee204e71bcce033290806867d4ae9281f987bb8515de2262b3e5dd0cd9a66193b03409eafd72536329476c194243d24017748d7713f8226e6f2342523c37ef9578fd89d02bda66ea236e40159d86e2c6a12f052dbf0eb451b85c5d"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "eb01"}]}]}]}]}, 0x40}}, 0x8000) 3.665000695s ago: executing program 3 (id=3243): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x40000, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc01, {0x7, 0x0, 0x0, r2, 0x81, 0x6e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000200", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}}}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000100"/88], 0x58) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) 3.514991993s ago: executing program 0 (id=3245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000004000000001400000000000000290000000b00000000000004000000ff1300000000000000290000003e"], 0x48}}], 0x1, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x80000002, 0x12) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r7 = openat$cgroup_ro(r5, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r8, 0x0, 0x1001) write$cgroup_int(r8, &(0x7f0000000380)=0x8, 0x12) write$tun(r8, &(0x7f0000001400)={@val={0x0, 0x9300}, @val={0x0, 0x1, 0xe, 0x6, 0x4, 0x129}, @eth={@random="91d993d5768f", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1a, 0xfe5, 0x67, 0x0, 0x3, 0x11, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100}, {0x4e23, 0x4e21, 0xfd1, 0x0, @wg=@data={0x4, 0x7, 0x4, "14043a04d069dc0a1e77929977c2590f69c5f7972603acdaf0ca5f47a013ca3f1e63ef9a692632033380e52f8050fb9e8e1f4e3b4145530b13e59238561fdd8081fef8bf32622911c1aa6bca5bdb70383716f89e42d35c532a03ba8fe317758b506a293ee496ba825456ed6d850302ca9c3155d1476de80ef7494043b2e8c53c617eb9a136be06109983eb904d946970e765137b5bdf58be88a1165e2b8356ca044cd7b8e58619bdfcc97baec8d4627d39e83570c5d75f664b2684c6f56dad46ee81f559ba5241090c65de06b6942339c24f4909a847004f4d8851fba3d6a6574da53d205e202beff95b5c241b5e410e8284f962b8e71dd3354ac83492a8f6e2febf8cd340c1daa08a53cc39d158b92759964181bd43dd16a373c1edfc9bc5b08a1c61b5a22487142c82d60a5c1d69fda92bce565122b26bead5d4897c438a1058469b0d1fe283cbd90d0b449210381e55817997f8b5a998d002b2be66a4659849439691215efd31fb4a998321db71917ae814abed98f41ba49f03c875774c6f01103cfee8247184d41e7caf92a5ac10d79b79a69ddaf880b56ee29febb8f56b54c61d9f5e900854e75630f13767d9e5648a8bf4801a7843ce54e1ee674f4a744ddf7103019e6a34dcda3c324e3d0fa10838e5f63e00c954c0ed3f159ee820ec07ab8554f606ac5c9e56e3b211b6d31017b63ef098dcf5c76dea7311aad2e2faa7e7c6bfb7519dfa2f366034925db638db8a03798a91b3158e9b1124cdc5444774c7d041cca9ed964553c76ce93275a614566df0b863b5a462314576afbd6c74898f33c30095e622c7f7076e6ce2fa13d7b596a4bdf49287aaf3a6370990664d228f854900d5c0c810629b2a81c0b3cf5d40dabd95ce38eefc5a923997eb1a8ff569827dd21f9c289c89cf83197015db8f504c7e433c2f846a6656d3ce70262e0ecf5aac09c7ecba2a20383e7a5cf12c814d656073bae33357a1e51409acf32a508dc8708a3b9dcd99bcc267f26919e6a6a2b0b970eaac627e1d1dee1a137a701fc1d91cb5441062d8ac7d8da9075907521b27e1344ec534feb4b40f366881d85cee6f2376b199f190e8983be60d501ce3dc578b9717b7e821b3fd56a140a3a4b9d1e3bdcbcb9bbf7b6ca1c7b9f0ff0796bed17989cdf93a1f974e6a438f89c34b5176cb10e352afffbe5661d4f0cceef882f2ecaa1d681b6d902b991663c5f8d26488d66597941cdb762d7790c2b7c0e36411428ddeeb633cd15098c647703eecbff57de11ce26570d264ee5700e9c4bac3bfd3a0858a87fe70134bc7a3816e212a5d6b60c707099175aae9e3068f7baf87675362b260bcbcdddf9fe2e0f43a7017de87be71ecdf7df12507ef7a3e6e126439b5097f57416c9d8437de3ed81bf7e2a099dee26f8081fbccb093c724510c996877f7adc4c6d1ba4b69469e72aece70bb85713ca3ac8b2ea5eb770f4de562e8e3f03eeff5674671d7ff8b30819dfb55df592a024c94c25de54c94b1e1abdc9fc721bd94205cadbb823fb0d9dd07b21c13c77f362a9790034a602116a0a07989420ea706abbf9973d00033b7eb73d5be42a93d47179852cdc4bef7cc9ba083d5dd136718ad22b8ec9afa3dd5092b87b4a5deec7a7531b6033e39ca3bed849459afaee097c14496b64813abc3747253ee87c06986a8527e05df802ec1b75924b8ce1a5ff34fb1fc38adb3794a53b10a35d16828227b711f5808615f96af517a4ad47455f75fe9390f2abcf20a0933d795e10bd5a5a8f3cb3b209da8f419676c4361e4d60e67d9e7d8cf9a20b9f532206645713ee368efe609f9c5c638cbf3fb33d02f405470fa4e7142ae986b399d732a596d2bdcbc8f2409d9c968a5172740ac0f5044d765cab1e04b00600f22006db5bb7c65cef7f9082a482c470ae12f22d9fd4716446b284b451280c8a2effd8fe9adb8c041f73ba832afb60d84d4cf502d4adac0f42f394c4f2466fe9a7155716693a8df02d7288f5ab454eb3cdda0ea582d2eace5b595c8056e81c953fe39d60b25c0913247c103ec171d0477b26df445da32ddd2a215e2aa9ff5e3f3ba89bead8e33b2f4102b2729af3e76300a37151b785f461386b7426ff1cea8cfd49b1170c7b691375cd0bb9efd82bddbcec4f7976982905f2ca663df87e8412a623b92c9afc1acde17f84f91c1b2a1af34a5ba88baa7249f9f24cdc5a9dca5ba723b0bdaba8fa02d34edeb73783229d6d94c02ace062ed821d292ca840b70841c10f0ae146ed32b357e6c67e90dec784602e9ad52db22a2a94c8b453948fcabab8afa0de5f6e84b9f1f657f1308a8f158851e572d9eca8b6a93ead7f313ae78f21cf252f8674dd0c89f296329cb917df464df53988503d005e85e3119a652dc9438fbcfd20ad65d67d469813668f9869f478c21819cdc63df2e034d3ed4bd5f0eb872c37ef1779f56af4e3a66896c27f943e5e9bc0f64c5f16c818c224ed13805c92ecbbf964d9bc453dbb81a9bb09955469f5c01ea84e527cf38604b2a946324e21b27e57d20939b2abab425fb5a9f88486f361e40fb5fc8f1331fc453afdf5613fdb8cf0e2c99f10bf7dd5260872550cec86e04e108600166dfd16306b3c3209b1e1e4b8b5079575e8654d45e9ab21a92d526cc61cfb998c3ebe9518b097bdb78195df466b9692197bd1ad185ac796aeb4e3700d9fc3f4b33f679aa0c9f5c9b3fb7c3ee004c86445cd4786499ae0feb7617c347fca4c42d73bd2e132fcc83ae0b303b1b5ee1f34f967b02c3de26f0ef96669b94536f2d0ffc88bab932e328866846170d0da0ebe789b12e38afbcfa9c03bb47611af0ca92fb644070d663033d506a4f1449ff92388a523cc161029f12046eb1aeaa64a8f510e422903720f08ce2a741a81b0db95147fe09e22b721f99f42678db035a4ab4e94554a3843a96481423382949703c528b73de13abb6a072c775b54eb37f64f57532e6ea3ced847f01d5d4e96df48e2d0d10cfb99ee470af700484b664915343cd9c8ec3587140e5d3bf7022d73fa1392dbd07f48b960cc6371094f866a0a36b7e6417b8abe1539d2b98e9dffadcdf7e29fb3dfccc99fce15b6a85da1cd87e58e7175883d51dba10dc242c221b27da3299db962c0fa8129687a893064e019b4fcadba44bc089c28be9944c927c9efe4c656babc352344bad94cf63a5c7990b7fd261b441e718af179e56b3bebeebc969cc5e8e1c125467781ca3f2d42819f58a86bb7bd3244d96d80dc440bc74f7cc7d5e921a8b99cdb048091438ee748edce764953cdeaf7a80c80cb7a57a52a2b0fa0313bbde0fbc23da2e0ddf478e0f71a8d407a61ce4e3cc79a193355b8c5f33b8c12d4d72aad642db1e6de7cf6e532c4d557d6bfa4e020952caa7fa01d7082c7dfe71c27a1df7f9895519cdc11e26f8a26c3d815ba45aec20b3ffefa32500a1af534bc6783fc1321265899ddae85aee365dfb6e44a08fca97ff79a6113a863fdcef3bebb71e97385cf602e09df1d4b0ae2e733d21358b838aafd5acf9cfa72322fce5bd39f839f4adca1095169eabda3232df05a852bedf8b6568ad73f25ddd58444ac64dfff704252f519eb05373194d16ea71bdd895f272b857bf51c62b698bf5998f49fa153d2d3ea958942ba1f7b906095b5d7eb244288e1011469f5066669892dddc8baa1684835428b07b1d35ac5e4384824112e974447d2229372047fc0b00c9171f73f5c0e85331dfb03544449cf3cd84a3ab6335726015f2cd27a4644b5f6f876c6d9bfd8943730d6c21bd15c3532546a4b4301dbc9d3317315a7974263a413d1254ddb3a6693ea31289f616d24a360365c44043f84a730bdf6687fb471db50d29113f3aac84201ab29dd9fd796e0f34285f7d0c0c6635c7cda30dee6b3677b8c74241caab44de03aa73029197049e592b4bd71046b3f09ff36e2a043d70dbd2425fa02ae5fb42ca5c70a6c47f9cdeab5baa17e0495b83b9d83db5a328bd167165fb2c8a2b4b6dfd53516b246799d54fd3bca116c18b3bd52319ee6d24a1ccbd81ba6fe8e7f1c5e8dfaad038c84cd4b4e53ab1a4eb3702d7ac3487020aec5fa6e6b89b062847515a333caadeb776e3fd54b65c0385291fb6d77ca2a2e6b78f574253e36c49ab5e9a71aa0f08f9783e1f01fd25a8b52ebdc5a02d1bb0297f3134f2d88e6e1b9bd4c126b2f35d8bdc572620dece7f56dbc4caf25642c7342fbce0d9b89f5eb1d009d15efbb3ed68b308031f226409e2a6960712ef0bd87f3be82d2c11e8d225da3743fec6556a1bfc921c13b37305ba9ae7f3044c2265ed5d8cde2a6d6e4ca9e48ed8fad19477ffabb57c620cf7afa48c1c7d408c4d96005b53fd4284070de339e9758e98dbe42655ee5c0cf975dc6fc8452da48684681a14c3dd89c86a6b2766a1da710d5c214c3a4a1f6c5135d5519565b836bd0314839e9ac4bbf95fe0f689e7565ac581adfc7caa383ce92b435dd7a91775acc8906846c0de0291e38abcedcd3b58df35b8ac3204fe19867c718c6ae1edfae800979bc744b9b91871b8fcdddf28e2e5c97a03be017247ec4cd2db3db51be17ebefe6e54e376aa269fa6d288bb74f0469aefcaf1a4509c4cee11cec7d2d709036fff4cd83a7460bb2fed4d55a40238dff4cf2b94829cd16c2f956f58f168ae784a7ba46d29a470f177197ef93e0a7d0a6304a02360f2926aa166871ce05e4f82cceb85b4b8de9d91479423c4a6cf0b2a89c7040f9f7c5ccf90137418f1b7288c77472aae1ea5ae5eb421113dcbefa0a7181b7ca87def2950d8b11f27f695389b019992180c9c7f1c8c1bd0945fb228ed7172b16249e67ec3d9994c7a33bf941068aa5b12fe10236963568ebbd50c78e0d1202a4d86949ab3a8a515f8b2f055474c5a5a68ef86a8896f64635253b188cb20d8e4708c39f47abd6cefffb58b6d69e7d4666354e83ad2f2752a3c87f8488c5d66754242482cf63a24dfe23f92e1a2e971975a58f6b47fa937cd1d525471081c69677ae73c619653d50c0b2b442f54801e4e5cd985656fca4b21342a282b91d5c6580b935a733f70cdf533b43050cfd1a7246d044abb31c9634690fe4f59f360359e9db7c800f19b2a4ac9dbb9ae16f308f2fc2cbb9e3591b5edab6ce07d7df69333bcba326911547ebc0920d03bc30cf5790986984c87ad7295adf0f176cd13013547846e9966bc20a7ed11a04e768371ce055f8c7a75c1bcc335ffc25870049f00496efb09a935c31ec3e97982fd58eb44fe1b106d051ed00bb7c3340da1688894a4885be7ee5ec0f9c90a8a7e8bdfb4777f453823445bb3e6c7560040ff07d45110ab91c16626404cc3440d95011cc5bd362054da1080e7129d2d9872275b95b39c48628d30e135a2aefb4d3c819fa830bc34a054e34f40b2eb341e29f8ce93cc4fdf1171b232a578d6501b96da90341b3b723d7112d64346a0b8b476fbaf9ca8d8bd9087a943882b1967f752c9e2bd1dd902187330eee88feecc0489a2e62ead8588fe17cdcaf11eef140b68b7f9ab006d512b23d02ad377ea03adda9ec7bd18ea0c28f2fdfe349f860c407443b898b5ee26120fe10adff55ebc1ccac83d87715d81ac5c0a8935d5c4ed185edfb72f3d1eef0d49cdca56f0eab38a209b18c593b2ed446145b63df8025d0bdf0f3afa909130f768640a3f55498b3377e00e9116c16"}}}}}}}, 0x1001) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={&(0x7f0000000000)="02a17ff9610223b66987c6439262d7352aef880369b6248cb1f8985e7f01608cab0a5dc73a9a726905109a4ebbcac35e04a32c006e072dff2b0ccc0de1d6e8aad4f70303e319d26e0d8f5589245987027fd385077612ef78fb9af2b7a8ccaada7b9dd51b432eee0f999b3139e00657d2", &(0x7f0000000600)=""/254, &(0x7f0000000700)="ba51289bda466f22935eda358f9c4bbec617f5f6d801762b987c484eaf17735418794c6f7f247c49750f13dc62fc541cbbccad5c8b541f5c5643d1576a29ac699e76a74d0ec5ff58f108913930b5a365", &(0x7f0000000780)="81096c4d3f3bcdca680960b3426a1b5e61e1e706c594f3f1c340e1", 0x2, r7, 0x4}, 0x38) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 3.008894844s ago: executing program 4 (id=3249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000055a607110000ddea8e942be5ed7e8a77ad737c1f752e015eecae90024044d8ed75c7c28d85630d549525796982f7f8938a407241d19f9b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r1, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x2b, 0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x31, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x5d4d4261, 0x7090, 0x0, 0x81, 0x1, 0x1, 0x8, 0x3}, &(0x7f0000000280)={0xbc, 0x9, 0x5, 0x2, 0xc2, 0x8, 0xfffffffffffffff6, 0x8}, &(0x7f0000000340)={0x0, 0x2, 0x80000001, 0x66, 0x6, 0xffffffffffffffff, 0x1, 0x4}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x1]}, 0x8}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000001001000001e7b0c85b150b583b000000dc00000000000040c49322522ec0e390bd12b259b86432f2d84abc9e361f32fa612770af9a6aa5308b675b412fbacc888e36220a5f34f7bc75b478465674574e5ff265664b30e2ed30ab822f4ac0ab964e0da6eacb9764dc08fff888e3b4dd1b390dcb813980d1151e2136c0b11776845ff841b9e4a0324ad1e900"/160], 0x18}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000c, 0x6e073, 0xffffffffffffffff, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r5}, 0x2) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000b0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), 0xff, r8}, 0x38) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x30, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x4814) 3.007174085s ago: executing program 0 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e591c2199cf1fae5505"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xfd, 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f00000001c0)=""/253, 0xfd}, &(0x7f00000002c0), 0x18}, 0x20) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @empty, @empty}}}}) 2.756221504s ago: executing program 0 (id=3252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000006fc0)={0x0, @in6={{0xa, 0x4e22, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0xf}, 0xbb7081a}}, 0x3, 0x4}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r4, 0x1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getgid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x3a, 0xce, 0x569f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x66, 0x10, 0x2619, 0xb}}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, r7, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.720319382s ago: executing program 4 (id=3253): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x2800, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.588449695s ago: executing program 3 (id=3254): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x1000, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000290000000400000037012c"], 0x20}, 0x800) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x78}}, 0x0) 2.496194113s ago: executing program 4 (id=3256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000008b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.40158176s ago: executing program 1 (id=3257): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) (async) accept$alg(r3, 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000200)={0x0, 0xffff}, 0x8) (async, rerun: 64) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000800000000000300000a1400000011000100000000000000b431ffc68d3d00000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x100, r8, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x100}}, 0x8800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10002bbd7000041e030000000000000002000900000000d1bd962d120b230e252cd630dedf6d87c19dbf7242ba95f1e43475ebe5694b6344ee17f3b79b449fe58107ed40cd82f8177994509e94fc3efe84c477435435b89e6fa277c9c7bd499dbc04c465f7122f07879ac1ee4f6c09c9ca1931d5ce5f2eda5b14d3439b7ddb0bd5d09c86001d2ccc1dcab309881a2fb10513f3b37125307e0ca192dc49f1d1b56af1"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x400400c) 2.279931716s ago: executing program 4 (id=3258): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080301000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.2596219s ago: executing program 1 (id=3259): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x400, @empty}, 0x10) (async) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400000000002419f6f687019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac141410ac1414bb44440001000086dd00000000ac1414bb00000000ac14143200000000000000000000004fe00000ab0ac800007f00000100000000ac1414aa00000004e00000"], 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf2520010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ddffffff000000000000000000000000000a0000000000000022000000804000000008000000000881000000000000000000000000000000b3571bb6299d57280f6d87c996982b0280f942fc4cbea7c2fb54eacf6e38bc487dede445417c1bea7112a729a7155a9c1730cacca677e9f816fb60"], 0xb8}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="2c00dfff", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf2509000000050007000300000005000800000000000800010001000000"], 0x2c}}, 0x48010) (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x75b}], 0x1, 0x161, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000040)) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)=@newchain={0x2270, 0x64, 0x2, 0x11, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffef}, {0x8, 0x3}, {0xfff1, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_cgroup={{0xb}, {0x2238, 0x2, [@TCA_CGROUP_POLICE={0xc94, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x3729, 0x4, 0x80000001, {0x4, 0x1, 0x8000, 0x0, 0xd, 0xcb38}, {0x1, 0x2, 0x480, 0xfffd, 0x10, 0x225}, 0x800, 0xd75, 0x8000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x9, 0xb, 0x5fd9f42d, 0x2, 0x0, 0x0, 0xffff, 0x2, 0x0, 0xfffffff9, 0x800, 0xb5b9, 0xfffffffb, 0x4, 0x7, 0x8001, 0x7, 0x4f8a, 0x5, 0x9, 0x0, 0xb3, 0x7ff, 0x6, 0xe5a7, 0x7, 0x0, 0x3, 0xd, 0x6, 0x100000, 0xf, 0x7, 0xffffffff, 0x2a, 0x1, 0x6, 0xffff8001, 0x1, 0x7, 0x2, 0x9, 0xa, 0x1, 0xfffffffb, 0x4, 0x1, 0x3, 0x101, 0x20b6, 0x6ffe, 0xffffffbc, 0x8, 0x284, 0x6, 0x8, 0xb, 0x1, 0xd, 0x5, 0x4, 0x9, 0x1, 0x80000000, 0x7, 0xffff8000, 0x4, 0x8, 0x9, 0x2, 0xe, 0x2, 0x7, 0x8, 0x1ff, 0x299, 0x80000001, 0x4, 0x9, 0x7fffffff, 0x2bb0, 0x8, 0x6cfa, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x7, 0xe, 0x10, 0x4, 0x1, 0x4, 0x80000000, 0xae0d, 0x9, 0x511, 0x8, 0x3, 0x8000, 0x5, 0x5, 0x3ff, 0x800, 0x3, 0x8, 0x9, 0xa, 0x1, 0xe, 0x10, 0xfbb6, 0x401, 0xf, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4a, 0x35, 0x7fdd, 0x5, 0x1, 0x4333, 0x10, 0x1ff, 0xb, 0x4, 0x4, 0x8, 0x80000001, 0x1f, 0x4, 0xc42, 0x6, 0xfff, 0x5, 0xe, 0x7, 0xc, 0x7fffffff, 0x5, 0x1, 0x1, 0x4, 0x5, 0x35fe, 0x7, 0xf, 0x5, 0x101, 0x0, 0x7, 0x9, 0x3, 0x7, 0x200, 0x4, 0x5d2, 0xffffffff, 0xfffffff0, 0x4, 0xa99, 0x2, 0xffffffff, 0xffff9022, 0x8, 0xfe97, 0x28, 0x3, 0x0, 0x5, 0x1, 0xc, 0xb0da, 0x5, 0x3, 0x5, 0x2001, 0x2, 0x4, 0x7fff, 0x5, 0x6, 0x0, 0xffffff81, 0xfff, 0x5, 0x91, 0x1, 0xffffff81, 0xfffffffb, 0x9, 0x81, 0x5, 0xfffffc01, 0x4, 0x4, 0x9, 0x3, 0xbc1, 0x4, 0x5, 0x5, 0x400, 0x0, 0x1ff, 0x800, 0xff, 0x2, 0xaf8, 0x0, 0x1, 0xffff, 0x9, 0x7, 0x0, 0x6, 0x5, 0x10, 0x9, 0x3, 0x3fc3962, 0x8, 0xd, 0x9, 0xb9f4, 0xffff, 0x1, 0xc4, 0x2, 0x6, 0x1a40000, 0x9, 0x8, 0xfffffff7, 0x3, 0x1, 0xb, 0x1, 0xc, 0x80, 0x5, 0x5, 0x1000, 0x7fff, 0xb18, 0x3, 0x3ff, 0x400, 0x5, 0x7, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x3, 0x9, 0x380, 0x609a, {0x25, 0x0, 0x2, 0xfffa, 0x9, 0x3}, {0x7, 0x1, 0x1fc6, 0x4, 0x1}, 0x7a1, 0x0, 0x96}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e73, 0x7fffffff, 0x10, 0x8, 0x9, 0x7, 0x8, 0x8, 0x7, 0x40, 0x0, 0x5, 0x2, 0x5946, 0x7fff, 0x5, 0x6, 0x60, 0x7fff, 0xfffffffa, 0xfffffffd, 0xffffffff, 0x4, 0x8, 0x6, 0x5, 0x4, 0x0, 0x1aad, 0xe, 0xb04f, 0x1, 0x3, 0x1, 0x8001, 0x8, 0x4, 0x6a, 0x93b7, 0xe93c, 0x8, 0x6, 0x8, 0x2a5, 0x8, 0x0, 0xd, 0x1, 0x8, 0x7, 0x6, 0x0, 0xa47, 0x6, 0xff, 0x2, 0x9, 0x1b1, 0x100, 0x2, 0x8001, 0x35c6, 0x1000, 0x8, 0x3, 0x5a, 0x1, 0x9, 0xc, 0xd9, 0x1ff, 0x1f, 0x60000000, 0x1, 0x83d, 0x7, 0x5, 0x4f61, 0x1ffc0000, 0x8, 0x9, 0xd, 0x4, 0x1, 0x0, 0x4, 0x3, 0x2, 0xf3, 0x80, 0x7, 0x988, 0x3, 0x7, 0x6, 0x5, 0x0, 0x6, 0x2, 0x1, 0x3, 0x3, 0x3, 0x9, 0x6, 0x400, 0x8, 0xffffffff, 0x6, 0x8, 0x5, 0x3ff, 0x100, 0x2, 0x2, 0x2, 0x5, 0x4c, 0x20, 0x1ff, 0xfffff45d, 0x8001, 0xf1, 0x2, 0x6, 0x1, 0xfffffffb, 0x4, 0x6, 0x5, 0xe, 0x4, 0x1000, 0x2, 0x5, 0xfffffffe, 0x6, 0x8, 0xb4b, 0x4, 0x0, 0x5, 0x3, 0x80000000, 0x3, 0xffffffbd, 0x6, 0xb05, 0x7f, 0x4000000, 0x9, 0x2, 0x7, 0xa31, 0x9, 0x8, 0x9, 0x9, 0x100, 0xfffffffb, 0x9, 0x6, 0x5, 0x8000, 0x8001, 0x400, 0xf, 0x100, 0x4, 0x2, 0x9, 0x200, 0x9, 0x7, 0x7, 0x9, 0x0, 0x3, 0x8, 0x8, 0x8, 0xa4a, 0x3, 0x0, 0x0, 0x1c0, 0x1, 0x1, 0x2, 0x8, 0x9, 0x2, 0xa, 0x40, 0xf1, 0x2, 0x1000, 0x8, 0x10001, 0x3, 0x6, 0x2, 0xab, 0x6, 0x9, 0x9, 0x8, 0x3, 0xb, 0xf3, 0x6, 0x0, 0x8, 0x0, 0x7fff, 0x8001, 0x7f, 0x7, 0x3, 0x1, 0x200, 0x3, 0x7, 0x4, 0x1, 0x3ed, 0x6, 0xffffffff, 0x1, 0x48ab, 0x3, 0x8, 0x10, 0x4, 0x0, 0x0, 0x2, 0x5, 0x6, 0x4, 0x7, 0x80, 0x5f, 0x7, 0x9, 0x20000, 0x2, 0x0, 0xff, 0x7, 0xfffffffa, 0x39f31140, 0xc, 0x8d, 0x2, 0xa4b]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0xe, 0x6, 0xff, 0xfffffff7, 0x7ec2, 0x1, 0xfffffffa, 0x0, 0x7ff, 0x7, 0x5, 0x6, 0x8, 0x72, 0xb884, 0x4, 0x5, 0x0, 0x80000001, 0x7, 0x800, 0x9, 0xfffffffd, 0x101, 0x2, 0x934, 0x5, 0x80, 0x5, 0x3, 0xfffffffa, 0x5, 0x6, 0xffff, 0x200, 0x10001, 0xc8, 0xa8ff, 0xe, 0x7fffffff, 0x0, 0xffff, 0x5, 0x1, 0x8, 0x0, 0x639, 0x1, 0x89, 0xfffffffb, 0x8, 0x2, 0x0, 0x4, 0x3ff, 0x6, 0x0, 0xffffffff, 0x7, 0x1ff, 0x200, 0x0, 0x6, 0x8, 0xfffffff8, 0x8, 0xfffffffe, 0x5, 0x1, 0x2fa, 0x4, 0x5217, 0x4, 0x0, 0x3, 0x5c, 0x8, 0x4, 0x7f, 0x1, 0x5, 0x6e9a, 0x80000001, 0x7, 0x4, 0x9, 0x2, 0x7, 0x9, 0x989, 0x6, 0x0, 0x7, 0x80000001, 0x7, 0x401, 0x6, 0x0, 0xfe000000, 0x5, 0x6, 0x81, 0x3ff, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfffff926, 0x9, 0x2, 0x2, 0x86, 0x0, 0x101, 0x4, 0x7, 0xdc, 0x1000, 0x9, 0x5, 0x40, 0x200, 0x7, 0x100, 0xc, 0x8, 0x9, 0xc4, 0x7, 0x1075, 0x5, 0xf, 0x3, 0x13f, 0x8, 0x6, 0x3, 0xb, 0x4, 0x8, 0x2, 0x6, 0x7f1, 0x1, 0x3, 0x4, 0x6b278aa, 0x1, 0xb2f0, 0x9, 0x3, 0x10001, 0x4, 0x7, 0x3, 0xffffffff, 0x90f, 0xe, 0x8001, 0x7fff, 0x2651fe01, 0x8000, 0x8, 0xc4, 0x51, 0x3, 0x1, 0xfffffffa, 0x1, 0x0, 0x790, 0x3, 0x3, 0x2c1, 0x10001, 0x0, 0x6, 0xfffffff3, 0x5, 0x5, 0x5567, 0x8, 0x3, 0x7, 0x40, 0x6cd5, 0xfffffff9, 0x8, 0x3, 0x5, 0x9a, 0x9, 0xd, 0x4, 0x1, 0x27f, 0xffffe9cf, 0x4, 0x3, 0x7, 0x3ff, 0x0, 0xf, 0x3, 0x8, 0x0, 0x242, 0x9554, 0x9, 0x4, 0x7fff, 0x8, 0xffff, 0x7fff, 0x5, 0x6, 0x5, 0x2, 0x8, 0x2e6, 0x7, 0xa35c, 0x4, 0x251, 0x70, 0x2be8, 0x101, 0x7, 0xffff40ff, 0x8, 0xfffffff7, 0x5, 0x3e, 0x6, 0x800, 0x9, 0xfffffc00, 0xe, 0x5, 0xfffffffe, 0x7a3, 0x10000, 0x3, 0x4, 0xfffffffd, 0x1, 0x200, 0x100, 0x7fffffff, 0x8000, 0x3, 0x9]}]}, @TCA_CGROUP_POLICE={0xc68, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2fa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfef, 0x1, 0x8, 0x90e3, 0xff, 0x0, 0x2f4, 0xffffffc0, 0x0, 0x97e, 0x4, 0x7, 0xc71, 0x7ff, 0x9, 0x9, 0xfffffff2, 0x7f, 0x4, 0x5, 0x8, 0x866, 0x6, 0x5, 0x0, 0x0, 0xd, 0x8, 0x0, 0x2, 0x5, 0x0, 0x6, 0x8f33, 0x1, 0x1, 0x2, 0x6, 0x2, 0x8, 0x2, 0x41, 0x200, 0x3ff, 0x7f, 0x44b9, 0x0, 0x9, 0x2, 0x1000, 0xc449, 0x2, 0x4, 0xc, 0x80000000, 0x1000, 0x400, 0x200, 0x3, 0x80, 0x5, 0x6, 0xd822, 0x5, 0x10000000, 0x8001, 0xbe3, 0x5bf5cb43, 0x8, 0xe, 0x0, 0x5, 0xffffffff, 0x80003, 0xb, 0x1, 0x5, 0x1, 0x35, 0xd, 0x400, 0x8001, 0x6, 0x1, 0x6, 0x0, 0x4, 0x9, 0x6, 0x6, 0x2, 0x6, 0x1000, 0x5, 0x227, 0x3, 0x5, 0x6, 0x2, 0x4, 0x350e0cc0, 0x81, 0x9, 0x4, 0x0, 0x3ff, 0x4b, 0x5, 0x1, 0xff1e, 0xb1d3, 0x2, 0x3, 0x1, 0xab12, 0x5, 0x800, 0x1, 0x3, 0x83e1, 0x1, 0x40, 0x7, 0xdbee, 0x3, 0x81, 0x1, 0x1, 0x401, 0x9, 0xf, 0x7ff, 0x3, 0xe, 0x400, 0x9, 0x0, 0x5, 0x6, 0x49d, 0x34, 0x4, 0x2, 0x1, 0x1, 0x5, 0x100, 0x5, 0x7, 0x0, 0x1, 0x10001, 0xffff0df5, 0xd24, 0x3ff, 0x1, 0x5, 0xaf3, 0x66ab2640, 0x0, 0x2, 0x1, 0xfff, 0x4, 0x2, 0x8, 0xffffffff, 0xff, 0xffffffff, 0x10001, 0x0, 0x3, 0x9, 0x0, 0x3, 0x2, 0x2, 0x40, 0x0, 0x100, 0x8, 0x8071, 0x2, 0x401, 0x0, 0x7, 0x64b, 0x10, 0x6, 0x7f, 0x4, 0xfff, 0xc, 0x9, 0x9, 0x3, 0x9, 0xffffffff, 0xe, 0x8, 0x8000, 0x5, 0x5, 0x10, 0x3, 0x2, 0x8, 0x1, 0x7, 0x7, 0x7, 0x3, 0x6, 0x4, 0x956f, 0x10, 0x10, 0xffffffff, 0x401, 0x0, 0x4a2, 0x2, 0x1, 0x1200, 0x8, 0x1, 0x5, 0x9, 0x8001, 0x7, 0x2, 0x0, 0x8001, 0x8001, 0x7, 0x401, 0x400, 0x6, 0x80000001, 0x1, 0x8, 0x80, 0x8, 0x40, 0x5, 0x7, 0x8, 0x2, 0x70000000, 0x7fffffff, 0x4, 0x1ff, 0x4, 0x5, 0x9, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0xe, 0x3, 0x5, 0x617, 0x5, 0x7, 0x7f, 0x8000, 0x1, 0x3, 0x7fff, 0xfff, 0xfffffffe, 0xff, 0xd, 0x9, 0x0, 0x40, 0x6, 0x510, 0x5, 0xa870, 0x81, 0x8, 0x3, 0xa, 0x3, 0x0, 0x3, 0x9b, 0x256c, 0x6, 0x3, 0x6ce, 0x6, 0x8, 0xfe, 0x0, 0x8, 0x2, 0x4, 0x200, 0x100000, 0x9, 0x9, 0x96c, 0x7, 0x7ff, 0x475, 0x8, 0x1ff, 0xffff0662, 0x8, 0x7, 0x3740, 0x401, 0x0, 0x100, 0x9, 0xdf1, 0x100, 0x7, 0x8, 0x5289b550, 0x3, 0x7, 0x401, 0x6, 0x7, 0x5, 0x6, 0x3, 0x800001, 0xe108c57, 0x8, 0x8001, 0xffd, 0x81, 0x0, 0x5, 0x15, 0xfffffffc, 0x1, 0x80000000, 0xd4d, 0x0, 0x800, 0xffffffff, 0xd, 0x8a01, 0x4, 0x7, 0x2, 0x17c, 0x5, 0x7fff, 0x7fff, 0x400, 0x4b9, 0xed4a, 0x1, 0x59, 0x4, 0xffffffff, 0xaa2, 0xb0, 0x1, 0x5, 0x2, 0x10000, 0x5, 0xa, 0x4, 0x1, 0xfa43, 0x6, 0xfffffffd, 0xf, 0x4, 0x9, 0x28000000, 0x101, 0x8001, 0x8001, 0x29753f7a, 0x1ff, 0x1, 0x1, 0x0, 0xffffffff, 0x8001, 0x1, 0x1000, 0x4e33, 0x400000, 0x4, 0x1ff000, 0x2, 0x8, 0x4, 0x1, 0x80000000, 0x2, 0x40, 0x8000, 0x1, 0xe19, 0x0, 0x0, 0x8, 0xf, 0x0, 0x7, 0x5, 0xf7a, 0x6, 0x101, 0x18b, 0x6, 0x5, 0xb68, 0x8, 0x6, 0x0, 0x8, 0x1, 0xa2, 0x31, 0x3, 0x3827, 0x1, 0x5, 0x4, 0x8, 0x8, 0x555, 0xff, 0x9, 0xffffff47, 0xfffffffe, 0x1000, 0x7, 0x2, 0x6, 0xd, 0x2248, 0x2, 0x7fffffff, 0x8, 0x2, 0x1, 0x7ee6, 0x6, 0x8, 0x2, 0x3a030483, 0x8, 0x2, 0x10000, 0x7, 0x2, 0x1, 0x81, 0x10001, 0xffff, 0x100, 0x100, 0x80, 0x9000000, 0x2, 0x7, 0x8, 0x56b2, 0x7, 0x3, 0x4, 0x3, 0x35, 0x7ff, 0x9, 0x1, 0x2, 0x1, 0x4, 0x1b4, 0x9, 0x9, 0x4, 0x0, 0x2, 0x6, 0x7, 0x2, 0x4, 0x9, 0x0, 0x80000001, 0x3, 0x1, 0x200, 0x4, 0x4, 0x3, 0x7, 0x5, 0x32c9, 0x51b, 0xb, 0x81, 0x80, 0x1, 0x200, 0x2c0, 0x80]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1000, 0x4, 0x1, 0x5, 0x2, 0x8, 0x1, 0x10000, 0x8, 0x6, 0x2, 0x800, 0x1, 0x40, 0x3, 0x3, 0x6, 0x7, 0x5, 0x37d0, 0xac, 0x82, 0x1, 0x4, 0x4, 0x5, 0x8, 0x4, 0x7, 0x10, 0x200, 0x5, 0x10, 0x3, 0x14b, 0x8, 0x1, 0x5, 0xbce5, 0x3, 0x800, 0xb, 0x6, 0xffff, 0x80000001, 0xfffffe00, 0x5, 0x6, 0x8, 0x1ff, 0x5, 0x9, 0x5, 0x6, 0x200, 0x2, 0x1000, 0x800, 0x72c707d6, 0x200, 0x39, 0xa27, 0x2, 0x9, 0xb, 0x4, 0xea0a, 0x9, 0xffff8000, 0x6, 0x6, 0xc10e, 0xfffff801, 0x8, 0x3, 0x3, 0x1, 0x7, 0x0, 0xf7, 0x7, 0x0, 0x400, 0x446, 0x1000, 0x7, 0x5, 0xfffffff9, 0x4, 0x7fff, 0x5, 0x200, 0x1, 0x4, 0xc, 0x8, 0xf, 0x3ca, 0x5, 0x7, 0x2, 0xed50, 0x8, 0x80, 0x6, 0x5, 0x81, 0x2, 0x5, 0x6, 0x3, 0x7, 0x2, 0xec88, 0x0, 0x0, 0x7c50, 0x5f84, 0x5a0, 0x9, 0x1, 0x6, 0xff, 0x39f, 0xe, 0x7fff, 0xfbc, 0x0, 0xffff, 0x3ff, 0x2, 0x4, 0x1, 0x9, 0xffffffff, 0x5, 0x1, 0x92e7, 0x3, 0x3, 0x7, 0x7, 0x2, 0x400, 0x40, 0xc, 0x8, 0x7, 0x5, 0x400, 0x5a5, 0x60, 0xfffffffa, 0x7, 0x7ff, 0x7, 0xff, 0x1, 0x6, 0x6, 0x7, 0x6, 0x4, 0x7e103ca1, 0x7, 0x6, 0x4e, 0x1ff, 0x4df, 0x8000, 0x400, 0x40, 0x4, 0x0, 0x10000000, 0x7, 0xb, 0x10, 0xb, 0x5, 0xd09, 0xffffffff, 0x5, 0x6, 0x9, 0xe, 0x9, 0x400, 0x2, 0x9, 0x2, 0x8, 0x0, 0x2, 0x6, 0x9, 0x80000001, 0x1, 0x3, 0x9, 0x3, 0x7, 0x0, 0x4006, 0x9, 0x13c400, 0x7, 0xffffff80, 0x8001, 0x8, 0x9, 0x9, 0x3ff, 0x80000000, 0xc, 0xf9c1, 0x8000, 0xff, 0x7, 0x0, 0x401, 0x8, 0x1, 0xff, 0x92, 0x7, 0x8001, 0xb, 0x6b4, 0x7b, 0xd, 0x8, 0x1, 0x1, 0x80000001, 0x2, 0x4, 0x7, 0x401, 0x3, 0x2, 0xfff, 0x9, 0xaff6, 0x1, 0xffff0, 0x22, 0xfffffffb, 0x5, 0x31d5, 0x9, 0x0, 0x2, 0xd5f, 0x200]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x31140f59, 0x2, 0x7, 0x0, 0xeb, {0x0, 0x1, 0x1, 0xffff, 0x2, 0x3ff}, {0x40, 0x1, 0x4000, 0x10, 0x91a5, 0x2}, 0x0, 0xffffffff, 0x9}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x8ac, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7fff, 0x2, 0x9, 0x9, 0x8, 0xc, 0x5, 0xfffffffc, 0x9, 0x0, 0x2, 0x306, 0x100, 0x17cb, 0x40a, 0x7, 0xe215, 0x11, 0x3, 0x4, 0x1, 0x4, 0x1, 0x0, 0x2, 0xf, 0x9, 0x164b, 0xcdb9, 0x6, 0x95, 0xffffff1e, 0x4, 0x400, 0x4, 0x8000, 0x1, 0x4, 0x68fa, 0x400, 0x8000, 0x2, 0xff2, 0x5, 0xfffffff9, 0xfff, 0x0, 0x8, 0x1, 0x9, 0x0, 0x4, 0xff, 0x200, 0x3d18cff7, 0xffff, 0x1, 0xc3, 0x59, 0x5, 0x3, 0x3, 0x6, 0x1000, 0x3, 0x2, 0x5, 0xd, 0x4, 0xea, 0xfffffff7, 0x0, 0x0, 0x0, 0x6, 0x1, 0x8, 0x3, 0x6, 0x66d, 0x9, 0x2, 0x1c, 0x1ff, 0x3, 0x4953, 0x8, 0x29865f0a, 0x1, 0x8, 0xd, 0x401, 0x3369cdbb, 0x4, 0x10001, 0xbcf, 0x2, 0x1, 0xc, 0x101, 0xc8e, 0x6, 0x2, 0x2, 0x7ff, 0x8, 0x5, 0x8, 0x0, 0x2, 0xfffffff4, 0xd, 0xa, 0x100, 0x3, 0x8, 0xad, 0x2, 0x1, 0x9, 0x6, 0x2, 0x1, 0xfc3c, 0xa3cf, 0x5, 0x3, 0x4, 0x3, 0x97b, 0x6, 0x80000000, 0x8, 0x81, 0xe, 0xe0b, 0x9, 0x2, 0x8, 0xe, 0xffff, 0x6, 0x6, 0x4, 0x11, 0x8001, 0x7, 0x6, 0x4, 0x1, 0x1, 0x64f0, 0x0, 0xfffffb5a, 0x9, 0xf7f568e, 0x80, 0x7, 0x12, 0x4, 0x0, 0x7, 0x77, 0x7, 0x5, 0x0, 0x70a, 0x5, 0x400, 0xd, 0xf808, 0x10000, 0x9, 0x2, 0x7, 0x5, 0x9, 0x0, 0xc5, 0x400, 0x2, 0x0, 0x0, 0x8, 0x50a24835, 0x4, 0x2, 0x40004, 0xb, 0xc8, 0x11, 0x100, 0xe2, 0x4, 0x1, 0x3, 0x3, 0x401, 0x1, 0x6, 0xfffffffe, 0x3, 0x6da5, 0x100, 0x0, 0xf, 0x80000001, 0x2, 0x91b0, 0x7, 0xffff, 0x4, 0x4, 0x8, 0x6, 0x37, 0x34, 0xf, 0x2, 0x6, 0x0, 0x9, 0x1, 0x5, 0x6, 0x608, 0xfffffffe, 0x204, 0x2, 0xae1a, 0x4, 0x905, 0x0, 0x6, 0x4, 0x8, 0x7, 0x9, 0x3, 0x7ff, 0x1ff, 0x40, 0x1, 0x5, 0x39, 0xa, 0x400, 0x3ff, 0x5, 0x7, 0x80, 0xc, 0xffff, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x380000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x9, 0x0, 0x8000, 0x2800, 0x2, 0x9, 0xffffff01, 0x1, 0xffff, 0x9, 0x8001, 0x0, 0x8bf8, 0x8, 0x6, 0x7fffffff, 0x89d, 0x106, 0x7fff, 0x785, 0x0, 0x2, 0x5, 0xfb8, 0x10000, 0x9, 0x2, 0x4, 0x101, 0x1, 0x0, 0x8000, 0x9, 0x1, 0x8, 0xfffffffc, 0x8, 0xfffffffe, 0x1ff, 0x5, 0x5, 0x2, 0x3, 0x8, 0x6, 0x0, 0xe9e, 0x3, 0x5, 0x8, 0xfff, 0x0, 0x1c, 0x1, 0x8001, 0xc8a, 0x4, 0x3, 0x2, 0x4, 0x2, 0x5, 0x8, 0x5, 0x80000001, 0x8, 0x2, 0x9, 0x8, 0x3, 0x6, 0x2, 0x9c5, 0x6, 0x8, 0xa357, 0xfe0000, 0x7, 0x2, 0x3a254530, 0x0, 0x80, 0x1, 0x4, 0x8, 0x80, 0x3, 0x40, 0x100, 0xfffffffc, 0x8001, 0xffffffff, 0x20, 0x4, 0x2, 0x5, 0x4, 0x8, 0x2, 0x7, 0x7ff, 0x80, 0xfffffffe, 0x400, 0xfffffff7, 0x10000, 0x0, 0x8000, 0x8, 0x58d, 0xad13, 0x5, 0x5, 0x1, 0x2, 0x3, 0x3, 0xf, 0x0, 0x9, 0x90000, 0x2, 0x4, 0x7, 0xffffffff, 0xffffff24, 0x29a9, 0x6, 0x10001, 0x6, 0xe160, 0x3, 0x6, 0xfffffff7, 0x7fffffff, 0x3, 0xffffffc8, 0xc0d, 0x7ff, 0xfff, 0x6, 0xffff, 0x7f, 0x2, 0x1, 0x8, 0x6, 0x7, 0xb, 0x8, 0x8, 0x7, 0x6, 0xfffffffa, 0x5f2, 0x6, 0x816, 0x70, 0x4, 0xfffffff7, 0x1, 0x8, 0x2, 0x2, 0x1, 0x7, 0x5, 0x9b, 0x5, 0x0, 0x1ff, 0x6, 0x7, 0x3, 0x3, 0xfb0a, 0x1, 0x1, 0x7, 0x2, 0x40, 0x7, 0x10000, 0x62, 0x1, 0x2, 0x80000001, 0x2, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x75f, 0x6, 0x1, 0x2, 0x6, 0xa, 0x7, 0x4, 0xf, 0x1000, 0x9, 0x6, 0x800, 0x2, 0x4, 0x1, 0x6, 0x200, 0x4, 0x5, 0x800, 0x1, 0xb, 0x7fff, 0x9, 0x2, 0x1, 0x5, 0x4, 0x6, 0xa029, 0x1, 0xf97, 0x8, 0x1, 0xfffffff8, 0x9000, 0x7, 0x2, 0x45b5, 0xd6a2, 0x401, 0x7, 0x400, 0xbc3, 0x2, 0x7fffffff, 0x8, 0xfffffff9, 0xc8, 0x80000001, 0x1, 0xfce4, 0x10, 0x0, 0x2, 0x800, 0xd7c33821, 0xfffffffb, 0x100, 0x1e2, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x39, 0x1, 0xf, {0x5, 0x1, 0x8, 0x1, 0x9, 0x9}, {0x4, 0x1, 0x2, 0x400, 0x7, 0x8}, 0x5, 0x6, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x675d, 0x5, 0x4, 0x2, 0x7da0, {0x4, 0x1, 0x5, 0x8}, {0xfc, 0x2, 0x8, 0xfffb, 0x0, 0x9}, 0x800, 0xd, 0x80}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}]}, @TCA_CGROUP_EMATCHES={0x88, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0xf09a}, {0x1, 0x5, 0x4}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x2, 0xfffa}, {0x4, 0xa, 0x0, "029f24592657704eb763"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xc86, 0x2, 0x47f1}, {0x22c0, 0x8, 0x2, "5c8684c6996b7fb4"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x8076}, {0x7f, 0x8, 0xbd9, 0x2, 0x1, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a1}}]}]}}]}, 0x2270}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xfff2}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x48005) (async, rerun: 32) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f00000002c0)={0x8, 0x5, 0x4ea, 0x7ff, 0x57b}) (async, rerun: 32) r10 = socket(0x10, 0x3, 0xa84f) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008000100010000"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0={0xfc, 0x0, '\x00', 0x8}, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)='\t', 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) 2.171208343s ago: executing program 4 (id=3260): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffffff000000002000000073110f000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0xfffffffffffffffe, 0xf, 0xffff, 0x4, 0x6, 0xfa}}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 1.897682001s ago: executing program 0 (id=3261): r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0xd1}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000e00000010000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000030000000000000000000000000000000000000000000000008aa9bcb8cb7d972995702d235c4eb51bccee24e4b9b57a8f472f5c5595c7313e35f340b40bc763ed39f96a95d85302fed103ab897f72e1e5c1b887074c77a1376bb6069baf7f68d4ddcd4e8ffcc8636f71ff5e28e210020aa48fbe6b2bac910d592858"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r9, 0x0, 0x0}, 0x10) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) socket$kcm(0xa, 0x1, 0x106) 1.881363801s ago: executing program 1 (id=3262): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfc}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfc}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x8, 0x3, 0x5, 0x6, 0x6, 0x5, 0x37ec, {0x0, @in6={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x7, 0x5, 0x9, 0x8, 0x3}}, &(0x7f0000000380)=0xb0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c40)={{r0, &(0x7f0000000080)='\xff\xff', 0x10000, &(0x7f0000000100)={@align=0x6, {0x7, 0xb, 0x0, 0x3}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x27df}, 0x8, &(0x7f0000000b40)=[{0x1, 0x7, &(0x7f00000001c0)='%\'+@,\x00', &(0x7f0000000200)="d1551c47aa369766c63ad2f2cbf6f31774bd7fb3bd62c4ccd834638fd6e763e71047f7396ce2a7e5a15b1dbd3c79df6ca95c8da7e8b0949d304757813c31ad08418ed0d9d0b1b45c067d2ab7ed377518efafd742756a71d7f2a7fcfe707fca35b50a7e71612336990dfc7424fbb1930970bbbce121d19fc3", 0x78, 0x8}, {0x1, 0x2, &(0x7f00000003c0)='\'\x00', &(0x7f0000000480)="2a718ead3169d141558b54800b5910f61c2732d783172e8a6add11f4507391dbd1f0fd1b3bfcc72adb84a1eae17d99b674b73634f7cbeec2e516253a4da2553ebf11db0cc74017e4bbedef4358585e285d0cc82892378ab8d4d1a68850a36fd34ac13bf2d5eb4f0fda7185c555c40ef2bd674f039cd8fce275ffbe4d3a8dc4767366edd6af73dc21e9f895c4e8f76bd5021a8de8057ecb607e7772ac025fb6ea3e792a2ce3052eda74151ae309", 0xad, 0x2}, {0x2, 0x0, &(0x7f0000000540)='-#$,\xa3^\x00', &(0x7f0000000580)="06d46ca1d4ad3bfa9df85b2c311bddee20d3d86c3dcfac264a08447db3b2eba466ff6fd4a3faa009630314bb0e5823c53b080c5eea43d1889e339d7408a6725d796b467bf61c1a1641388fa20252dedefa5477a55499cfb72398d2", 0x5b, 0x20}, {0x1, 0x5, &(0x7f0000000600)='\xff\xff', &(0x7f0000000640)="06592a0d8be99620d261c194fec139f71f358802daaf5f878191e5339e90c7523b19cc4e508ea126b253246e11a1d9ec27b394b6c263373a2dc8619175bbeeba1c4cf561e561242f33699c68fe5901bcb1c2443824cc843685929ab4b6ed075eeab664694170abf993c67b60f70f5b49507f9acedf729009844d6b5b5ee7abbbbc1628f402e79b35497f48ac50c8c5fe27f37ba04801cba4709da0596fd7680903", 0xa1, 0xa}, {0x3, 0xb0d7, &(0x7f0000000700)=',\x87\\-)--\x00', &(0x7f0000000740)="4fe7f49f0bb9c0bbf0c1fb408c6b138cf8554a9fefd6b752e9c41714b1b759d8b75c5c4f5c78ad3e619643db1f4a654d412054dcadb9c86dd3e671145056a4d4f0c3999b8f163f6ff3e520838dacecaa85cc66f2d41c04ebdc029d3e4395adef84139ce37ddbf97e38a7a49700ec72cae943ee907eec3ebcdb17aadf2a2b2fa5f05144c14fa7463b546db63ebe3c191298bd89844f09887126c9eaf213df4a132612489cf4fa457ca01b171ecfcb5a1d854255861eef4c018e4aa2306950a5120abfb300", 0xc4, 0x28}, {0x2, 0xffff, &(0x7f0000000840)='\xff\xff', &(0x7f0000000880)="98c444d98396ebb286da24b6a8df59e4ff405e1e383d6e46da57682a946cc23475b6e4c1dcc2d23470791c6cf1376f3a8b21258b5f23a984bfd3496424895765dbb67dfa0214535c1e0c90aa658de3610f70dde975b5a67d3028c8b57deb88e14b209cfd1739e586544c825cc30ddc4975280c65fcf8b5fea1a8ee0082407c83532001b4921c", 0x86, 0x2}, {0x4, 0x2, &(0x7f0000000940)='-@$-\x00', &(0x7f0000000980)="f4cc35ff1b5ecfaae5c8189c1601b500f834384820c06433af9109020bfc8983db31862df361992a9520f7cfc48a29c0a9b882d019f917e956297ac9f0db18eb570bc15f00219861151390058fffb7307183ecee2f36c7bc01a07156d3e93d86cca2c339fb55f3f6851e496f5bb9dc0e9ba86eb8d83d254ce771afe2d81d925c619f7ef3eac736581451b5707f1b8a53e723b2539e4acdc19eedd4c22ab1d4b21f86fdaf1b6221553dfd57472d6cd5ef30f02ad78a", 0xb5, 0x2}, {0x3, 0x3, &(0x7f0000000a40)='\x00', &(0x7f0000000a80)="e3ec550a5b68a9f0443bbd0fbe348dace8678235a9f0a1fbe61d07f58d28bf4f5c29b269680861902991cbea87cf92fff8b7c17d908296ccbf3a5c8df159c8bcf999b6eee5ea54bbfdbc998f61eca2ba04af129480389a6d0ba04a3f1f30cab69ac9d6de742314589e735c8a153374a2c5bfaa77042813059274cf05431bfdfb12a3c1703fa85068febccebef449841ba978b486d04472c73a41c6fd1cd1e0c9d5829749ed3b02be65877a89a768b92db10e5f5b15", 0xb5}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4dd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x4008000) 1.807702015s ago: executing program 3 (id=3263): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f0000000240)={'syztnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000052000d0300000000000000000400008050ad711a9b36e1145c9282218a95540c8631e10278fee8a12b25f79c38f13bf06ae54f368c120cfb368ecb516379e76e667c"], 0x14}], 0x1}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) getsockname$packet(r4, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001b00)=0x14) 1.575863605s ago: executing program 4 (id=3264): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1fffff6d, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31}, 0x94) listen(r0, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}}, 0x40080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) unshare(0x2a060400) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f200000000000000000000000000000048c318ca305cd6bf52"], 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r11, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001001000000196ba2170f1c98ae3b792502c00000000002001000000000000000000000000000064010102000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a", @ANYRESDEC=r12, @ANYRES16=r5, @ANYRESOCT=0x0], 0xfc}}, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 1.514277695s ago: executing program 1 (id=3265): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x2b00, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.3244694s ago: executing program 1 (id=3266): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) 1.08650797s ago: executing program 1 (id=3267): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f000077b000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0xdfbd2000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r2, 0x80c3e000) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000009b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ess not yet configured! [ 308.808286][T13866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.821317][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2233'. [ 309.329549][T13924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.377283][T13919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.415650][T13930] syzkaller1: entered promiscuous mode [ 309.445741][T13930] syzkaller1: entered allmulticast mode [ 309.727375][T13946] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 309.744141][T13946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2246'. [ 310.076541][T13954] xt_CT: No such helper "netbios-ns" [ 310.326806][T13974] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.445157][T13938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.002136][T14002] FAULT_INJECTION: forcing a failure. [ 311.002136][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 311.031420][T14002] CPU: 0 UID: 0 PID: 14002 Comm: syz.0.2267 Not tainted syzkaller #0 PREEMPT(full) [ 311.031446][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.031457][T14002] Call Trace: [ 311.031464][T14002] [ 311.031479][T14002] dump_stack_lvl+0xe8/0x150 [ 311.031515][T14002] should_fail_ex+0x40c/0x560 [ 311.031542][T14002] should_failslab+0xa8/0x100 [ 311.031570][T14002] __kmalloc_cache_node_noprof+0xaa/0x630 [ 311.031593][T14002] ? finish_task_switch+0x412/0xc60 [ 311.031612][T14002] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.031631][T14002] ? __get_vm_area_node+0x136/0x300 [ 311.031649][T14002] ? __get_vm_area_node+0x136/0x300 [ 311.031675][T14002] __get_vm_area_node+0x136/0x300 [ 311.031700][T14002] __vmalloc_node_range_noprof+0x358/0x1730 [ 311.031723][T14002] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.031752][T14002] ? __lock_acquire+0x683/0x2cf0 [ 311.031796][T14002] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.031828][T14002] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.031851][T14002] __vmalloc_noprof+0xd2/0x120 [ 311.031871][T14002] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.031896][T14002] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.031918][T14002] ? bpf_prog_alloc+0x2a/0x1a0 [ 311.031942][T14002] bpf_prog_alloc+0x3c/0x1a0 [ 311.031966][T14002] bpf_prog_load+0x7f8/0x1c00 [ 311.032001][T14002] ? __pfx_bpf_prog_load+0x10/0x10 [ 311.032047][T14002] __sys_bpf+0xd0d/0xd90 [ 311.032076][T14002] ? __pfx___sys_bpf+0x10/0x10 [ 311.032107][T14002] ? __fget_files+0x2a/0x420 [ 311.032144][T14002] ? ksys_write+0x242/0x270 [ 311.032173][T14002] ? __pfx_ksys_write+0x10/0x10 [ 311.032203][T14002] __x64_sys_bpf+0xba/0xd0 [ 311.032224][T14002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.032244][T14002] do_syscall_64+0x174/0x580 [ 311.032263][T14002] ? trace_irq_disable+0x3b/0x140 [ 311.032284][T14002] ? clear_bhb_loop+0x40/0x90 [ 311.032306][T14002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.032324][T14002] RIP: 0033:0x7fe75999de99 [ 311.032342][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.032358][T14002] RSP: 002b:00007fe75a950028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.032378][T14002] RAX: ffffffffffffffda RBX: 00007fe759c25fa0 RCX: 00007fe75999de99 [ 311.032391][T14002] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 311.032403][T14002] RBP: 00007fe75a950090 R08: 0000000000000000 R09: 0000000000000000 [ 311.032414][T14002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.032425][T14002] R13: 00007fe759c26038 R14: 00007fe759c25fa0 R15: 00007ffdee066f68 [ 311.032454][T14002] [ 311.033944][T14002] syz.0.2267: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 311.160765][T13976] lo speed is unknown, defaulting to 1000 [ 311.203080][T14002] ,cpuset=/,mems_allowed=0-1 [ 311.372585][T14002] CPU: 0 UID: 0 PID: 14002 Comm: syz.0.2267 Not tainted syzkaller #0 PREEMPT(full) [ 311.372611][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.372622][T14002] Call Trace: [ 311.372629][T14002] [ 311.372636][T14002] dump_stack_lvl+0xe8/0x150 [ 311.372666][T14002] warn_alloc+0x24c/0x270 [ 311.372689][T14002] ? __kasan_kmalloc+0x22/0xb0 [ 311.372717][T14002] ? __pfx_warn_alloc+0x10/0x10 [ 311.372748][T14002] ? __get_vm_area_node+0x2af/0x300 [ 311.372774][T14002] __vmalloc_node_range_noprof+0x37d/0x1730 [ 311.372800][T14002] ? __lock_acquire+0x683/0x2cf0 [ 311.372846][T14002] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.372880][T14002] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.372903][T14002] __vmalloc_noprof+0xd2/0x120 [ 311.372925][T14002] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.372951][T14002] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 311.372974][T14002] ? bpf_prog_alloc+0x2a/0x1a0 [ 311.372999][T14002] bpf_prog_alloc+0x3c/0x1a0 [ 311.373026][T14002] bpf_prog_load+0x7f8/0x1c00 [ 311.373061][T14002] ? __pfx_bpf_prog_load+0x10/0x10 [ 311.373108][T14002] __sys_bpf+0xd0d/0xd90 [ 311.373138][T14002] ? __pfx___sys_bpf+0x10/0x10 [ 311.373169][T14002] ? __fget_files+0x2a/0x420 [ 311.373204][T14002] ? ksys_write+0x242/0x270 [ 311.373230][T14002] ? __pfx_ksys_write+0x10/0x10 [ 311.373260][T14002] __x64_sys_bpf+0xba/0xd0 [ 311.373280][T14002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.373297][T14002] do_syscall_64+0x174/0x580 [ 311.373316][T14002] ? trace_irq_disable+0x3b/0x140 [ 311.373339][T14002] ? clear_bhb_loop+0x40/0x90 [ 311.373361][T14002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.373380][T14002] RIP: 0033:0x7fe75999de99 [ 311.373397][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.373434][T14002] RSP: 002b:00007fe75a950028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.373463][T14002] RAX: ffffffffffffffda RBX: 00007fe759c25fa0 RCX: 00007fe75999de99 [ 311.373476][T14002] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 311.373486][T14002] RBP: 00007fe75a950090 R08: 0000000000000000 R09: 0000000000000000 [ 311.373499][T14002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.373509][T14002] R13: 00007fe759c26038 R14: 00007fe759c25fa0 R15: 00007ffdee066f68 [ 311.373536][T14002] [ 311.375958][T14002] Mem-Info: [ 311.480195][T14007] syzkaller1: entered promiscuous mode [ 311.525182][T14002] active_anon:12197 inactive_anon:0 isolated_anon:0 [ 311.525182][T14002] active_file:0 inactive_file:43478 isolated_file:0 [ 311.525182][T14002] unevictable:768 dirty:207 writeback:0 [ 311.525182][T14002] slab_reclaimable:11234 slab_unreclaimable:107392 [ 311.525182][T14002] mapped:32642 shmem:4148 pagetables:1277 [ 311.525182][T14002] sec_pagetables:0 bounce:0 [ 311.525182][T14002] kernel_misc_reclaimable:0 [ 311.525182][T14002] free:1308410 free_pcp:9596 free_cma:0 [ 311.547935][T14007] syzkaller1: entered allmulticast mode [ 311.639283][T14002] Node 0 active_anon:48888kB inactive_anon:0kB active_file:0kB inactive_file:173704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130668kB dirty:824kB writeback:0kB shmem:15056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14244kB pagetables:4964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.687900][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.749269][T14002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.793999][T14002] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.833547][T14002] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 311.887571][T14002] Node 0 DMA32 free:1272768kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48640kB inactive_anon:0kB active_file:0kB inactive_file:173704kB unevictable:1536kB writepending:832kB zspages:0kB present:3129332kB managed:2548684kB mlocked:0kB bounce:0kB free_pcp:38776kB local_pcp:18392kB free_cma:0kB [ 311.925041][T14002] lowmem_reserve[]: 0 0 0 0 0 [ 311.945850][T14002] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.998605][T14002] lowmem_reserve[]: 0 0 0 0 0 [ 312.032689][T14002] Node 1 Normal free:3945352kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.091016][T14002] lowmem_reserve[]: 0 0 0 0 0 [ 312.097339][T14002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 312.110718][T14002] Node 0 DMA32: 1234*4kB (UE) 585*8kB (UM) 199*16kB (U) 134*32kB (UME) 82*64kB (UM) 37*128kB (UM) 40*256kB (UME) 9*512kB (M) 6*1024kB (UME) 6*2048kB (UME) 296*4096kB (UM) = 1272768kB [ 312.146394][T14002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 312.158295][T14002] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945352kB [ 312.177521][T14002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.196170][T14002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.215735][T14002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.225682][T14002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.235082][T14002] 47683 total pagecache pages [ 312.239826][T14002] 0 pages in swap cache [ 312.243991][T14002] Free swap = 124996kB [ 312.251194][T14002] Total swap = 124996kB [ 312.259451][T14002] 2097051 pages RAM [ 312.268131][T14002] 0 pages HighMem/MovableOnly [ 312.279370][T14002] 428199 pages reserved [ 312.288603][T14002] 0 pages cma reserved [ 312.626162][T14014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.064355][T14063] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2278'. [ 313.259201][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 313.290367][T14076] netlink: 'syz.0.2281': attribute type 11 has an invalid length. [ 313.566510][T14093] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2286'. [ 313.795623][T14107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.802126][T14108] netlink: 'syz.3.2291': attribute type 24 has an invalid length. [ 313.812643][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 313.821804][T14108] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 314.147287][T14125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2298'. [ 314.288647][T14134] gre1: entered promiscuous mode [ 314.327094][T14135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2299'. [ 314.338509][T14135] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 314.495552][T14144] netlink: 'syz.0.2304': attribute type 24 has an invalid length. [ 314.504282][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 314.513299][T14144] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 314.576832][T14101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.930169][T14161] FAULT_INJECTION: forcing a failure. [ 314.930169][T14161] name failslab, interval 1, probability 0, space 0, times 0 [ 314.958434][T14161] CPU: 0 UID: 0 PID: 14161 Comm: syz.0.2311 Not tainted syzkaller #0 PREEMPT(full) [ 314.958460][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.958470][T14161] Call Trace: [ 314.958477][T14161] [ 314.958485][T14161] dump_stack_lvl+0xe8/0x150 [ 314.958518][T14161] should_fail_ex+0x40c/0x560 [ 314.958546][T14161] should_failslab+0xa8/0x100 [ 314.958575][T14161] __kmalloc_cache_noprof+0xa8/0x660 [ 314.958600][T14161] ? device_create+0x13d/0x300 [ 314.958618][T14161] ? device_create+0x13d/0x300 [ 314.958644][T14161] device_create+0x13d/0x300 [ 314.958669][T14161] ? timer_init_key+0x161/0x2c0 [ 314.958701][T14161] ? __pfx_device_create+0x10/0x10 [ 314.958723][T14161] ? ieee80211_roc_setup+0x119/0x1d0 [ 314.958751][T14161] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 314.958778][T14161] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 314.958815][T14161] ? __pfx___nla_validate_parse+0x10/0x10 [ 314.958857][T14161] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 314.958884][T14161] ? trace_kmalloc+0x2a/0xf0 [ 314.958915][T14161] hwsim_new_radio_nl+0xd8b/0xf90 [ 314.958956][T14161] genl_family_rcv_msg_doit+0x233/0x340 [ 314.958990][T14161] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.959028][T14161] ? bpf_lsm_capable+0x9/0x20 [ 314.959048][T14161] ? security_capable+0x7e/0x2c0 [ 314.959081][T14161] genl_rcv_msg+0x614/0x7a0 [ 314.959109][T14161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.959131][T14161] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 314.959167][T14161] netlink_rcv_skb+0x226/0x4a0 [ 314.959186][T14161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.959209][T14161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.959240][T14161] ? down_read+0x2be/0x330 [ 314.959263][T14161] genl_rcv+0x28/0x40 [ 314.959283][T14161] netlink_unicast+0x7bb/0x940 [ 314.959318][T14161] netlink_sendmsg+0x813/0xb40 [ 314.959349][T14161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.959373][T14161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.959398][T14161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.959415][T14161] sock_sendmsg_nosec+0x13a/0x180 [ 314.959440][T14161] ____sys_sendmsg+0x54e/0x850 [ 314.959462][T14161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.959489][T14161] ? import_iovec+0x73/0xa0 [ 314.959515][T14161] ___sys_sendmsg+0x2a5/0x360 [ 314.959533][T14161] ? __lock_acquire+0x683/0x2cf0 [ 314.959558][T14161] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.959612][T14161] ? __fget_files+0x2a/0x420 [ 314.959634][T14161] ? __fget_files+0x3a2/0x420 [ 314.959665][T14161] __x64_sys_sendmsg+0x1b1/0x290 [ 314.959693][T14161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.959731][T14161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.959751][T14161] do_syscall_64+0x174/0x580 [ 314.959769][T14161] ? trace_irq_disable+0x3b/0x140 [ 314.959790][T14161] ? clear_bhb_loop+0x40/0x90 [ 314.959813][T14161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.959831][T14161] RIP: 0033:0x7fe75999de99 [ 314.959849][T14161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.959862][T14161] RSP: 002b:00007fe75a950028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.959882][T14161] RAX: ffffffffffffffda RBX: 00007fe759c25fa0 RCX: 00007fe75999de99 [ 314.959895][T14161] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 314.959906][T14161] RBP: 00007fe75a950090 R08: 0000000000000000 R09: 0000000000000000 [ 314.959917][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.959928][T14161] R13: 00007fe759c26038 R14: 00007fe759c25fa0 R15: 00007ffdee066f68 [ 314.959957][T14161] [ 315.267493][T14179] IPv6: addrconf: prefix option has invalid lifetime [ 315.321415][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.338029][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.354270][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.379266][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.454360][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.491867][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.520785][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.577419][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.616417][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.761016][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 315.884525][T14196] bridge0: port 1(vlan2) entered blocking state [ 315.909104][T14196] bridge0: port 1(vlan2) entered disabled state [ 315.915947][T14196] vlan2: entered allmulticast mode [ 315.921851][T14196] bridge0: entered allmulticast mode [ 315.931049][T14196] vlan2: left allmulticast mode [ 315.948487][T14196] bridge0: left allmulticast mode [ 315.964366][T14209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2323'. [ 316.137217][T14215] FAULT_INJECTION: forcing a failure. [ 316.137217][T14215] name failslab, interval 1, probability 0, space 0, times 0 [ 316.154641][T14215] CPU: 1 UID: 0 PID: 14215 Comm: syz.4.2328 Not tainted syzkaller #0 PREEMPT(full) [ 316.154666][T14215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.154677][T14215] Call Trace: [ 316.154685][T14215] [ 316.154692][T14215] dump_stack_lvl+0xe8/0x150 [ 316.154726][T14215] should_fail_ex+0x40c/0x560 [ 316.154754][T14215] should_failslab+0xa8/0x100 [ 316.154782][T14215] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 316.154811][T14215] ? kobject_set_name_vargs+0x61/0x110 [ 316.154834][T14215] ? kobject_set_name_vargs+0x61/0x110 [ 316.154865][T14215] kvasprintf+0xeb/0x1a0 [ 316.154896][T14215] ? __pfx_kvasprintf+0x10/0x10 [ 316.154927][T14215] ? __raw_spin_lock_init+0x45/0x100 [ 316.154952][T14215] ? kvasprintf_const+0xe1/0x240 [ 316.154981][T14215] kobject_set_name_vargs+0x61/0x110 [ 316.155007][T14215] device_create+0x23d/0x300 [ 316.155034][T14215] ? timer_init_key+0x161/0x2c0 [ 316.155057][T14215] ? __pfx_device_create+0x10/0x10 [ 316.155079][T14215] ? ieee80211_roc_setup+0x119/0x1d0 [ 316.155107][T14215] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 316.155134][T14215] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 316.155172][T14215] ? __pfx___nla_validate_parse+0x10/0x10 [ 316.155211][T14215] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 316.155238][T14215] ? trace_kmalloc+0x2a/0xf0 [ 316.155269][T14215] hwsim_new_radio_nl+0xd8b/0xf90 [ 316.155311][T14215] genl_family_rcv_msg_doit+0x233/0x340 [ 316.155345][T14215] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 316.155384][T14215] ? bpf_lsm_capable+0x9/0x20 [ 316.155407][T14215] ? security_capable+0x7e/0x2c0 [ 316.155442][T14215] genl_rcv_msg+0x614/0x7a0 [ 316.155474][T14215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.155498][T14215] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 316.155530][T14215] ? __pfx_ref_tracker_free+0x10/0x10 [ 316.155571][T14215] netlink_rcv_skb+0x226/0x4a0 [ 316.155593][T14215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.155619][T14215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.155655][T14215] ? down_read+0x2be/0x330 [ 316.155682][T14215] genl_rcv+0x28/0x40 [ 316.155704][T14215] netlink_unicast+0x7bb/0x940 [ 316.155745][T14215] netlink_sendmsg+0x813/0xb40 [ 316.155775][T14215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.155800][T14215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.155825][T14215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.155847][T14215] sock_sendmsg_nosec+0x13a/0x180 [ 316.155875][T14215] ____sys_sendmsg+0x54e/0x850 [ 316.155901][T14215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.155931][T14215] ? import_iovec+0x73/0xa0 [ 316.155962][T14215] ___sys_sendmsg+0x2a5/0x360 [ 316.155981][T14215] ? __lock_acquire+0x683/0x2cf0 [ 316.156010][T14215] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.156066][T14215] ? __fget_files+0x2a/0x420 [ 316.156089][T14215] ? __fget_files+0x3a2/0x420 [ 316.156124][T14215] __x64_sys_sendmsg+0x1b1/0x290 [ 316.156147][T14215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.156184][T14215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.156205][T14215] do_syscall_64+0x174/0x580 [ 316.156224][T14215] ? trace_irq_disable+0x3b/0x140 [ 316.156246][T14215] ? clear_bhb_loop+0x40/0x90 [ 316.156269][T14215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.156288][T14215] RIP: 0033:0x7fd69f59de99 [ 316.156306][T14215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.156322][T14215] RSP: 002b:00007fd6a04f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.156341][T14215] RAX: ffffffffffffffda RBX: 00007fd69f825fa0 RCX: 00007fd69f59de99 [ 316.156354][T14215] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 316.156366][T14215] RBP: 00007fd6a04f7090 R08: 0000000000000000 R09: 0000000000000000 [ 316.156378][T14215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.156388][T14215] R13: 00007fd69f826038 R14: 00007fd69f825fa0 R15: 00007fff789d2e48 [ 316.156419][T14215] [ 316.673696][T14200] syzkaller1: entered promiscuous mode [ 316.697893][T14200] syzkaller1: entered allmulticast mode [ 317.054397][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.281431][T14249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2342'. [ 317.691006][T14269] netlink: 'syz.3.2351': attribute type 4 has an invalid length. [ 317.711281][T14269] netlink: 'syz.3.2351': attribute type 4 has an invalid length. [ 318.085741][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 318.111039][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 318.223781][T14302] tipc: Enabled bearer , priority 25 [ 318.620924][T14328] netlink: 'syz.3.2367': attribute type 4 has an invalid length. [ 318.662627][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2367'. [ 318.713354][T14328] netlink: 'syz.3.2367': attribute type 32 has an invalid length. [ 318.743503][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 318.961244][T14328] bond9: option coupled_control: invalid value (255) [ 318.981821][T14328] bond9 (unregistering): Released all slaves [ 319.002883][T14346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2373'. [ 319.032123][ T29] audit: type=1800 audit(1784762576.047:5): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2374" name=680B20 dev="tmpfs" ino=2363 res=0 errno=0 [ 319.338525][ T5730] tipc: Node number set to 1598645842 [ 319.607880][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 319.904661][ T5637] Bluetooth: hci4: link tx timeout [ 319.912614][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.930682][ T4938] Bluetooth: hci4: link tx timeout [ 319.937402][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.027244][ T7676] udevd[7676]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 320.152452][ T4938] Bluetooth: hci4: link tx timeout [ 320.155406][T14403] netlink: 'syz.4.2384': attribute type 2 has an invalid length. [ 320.158988][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.200370][ T4938] Bluetooth: hci4: link tx timeout [ 320.206785][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.394789][T14420] bridge0: entered promiscuous mode [ 320.413803][T14420] bridge0: entered allmulticast mode [ 320.462669][T14419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2392'. [ 320.478651][ T4938] Bluetooth: hci4: link tx timeout [ 320.484321][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.496009][T14419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2392'. [ 320.648145][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 320.725722][ T5632] Bluetooth: hci4: link tx timeout [ 320.731280][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 320.996853][ T1170] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 321.193655][T14448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.525526][T14473] bridge0: port 1(netdevsim1) entered blocking state [ 321.527870][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.546197][T14473] bridge0: port 1(netdevsim1) entered disabled state [ 321.589604][T14473] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 321.648409][T14473] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 321.677875][T14473] bridge0: port 1(netdevsim1) entered blocking state [ 321.684761][T14473] bridge0: port 1(netdevsim1) entered forwarding state [ 321.704520][T14484] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 321.878826][ T5632] Bluetooth: hci4: link tx timeout [ 321.884018][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.010033][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 322.143487][T14503] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.2408'. [ 322.145727][T14497] net_ratelimit: 26 callbacks suppressed [ 322.145743][T14497] Set syz1 is full, maxelem 1029 reached [ 322.189405][T14503] openvswitch: netlink: Flow key attr not present in new flow. [ 322.246592][T14497] netlink: 'syz.0.2406': attribute type 2 has an invalid length. [ 322.308142][T14503] block nbd2: server does not support multiple connections per device. [ 322.331840][T14503] block nbd2: shutting down sockets [ 322.522960][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 322.535537][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2412'. [ 322.930388][T14530] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.979069][T14503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.996598][T14503] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 323.105551][T14503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.149304][T14503] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 323.287001][T14503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.313568][T14503] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 323.364623][T14503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.382095][T14503] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 323.932166][T14565] Set syz1 is full, maxelem 1029 reached [ 324.015814][T14572] netlink: 'syz.2.2421': attribute type 2 has an invalid length. [ 324.433397][T14016] tipc: Subscription rejected, illegal request [ 324.778892][T14605] __nla_validate_parse: 4 callbacks suppressed [ 324.778911][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2431'. [ 324.863875][T14605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2431'. [ 325.462969][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2443'. [ 325.578319][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 325.906254][T14677] netlink: 'syz.0.2448': attribute type 21 has an invalid length. [ 325.937555][T14677] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2448'. [ 325.950985][T14677] netlink: 'syz.0.2448': attribute type 5 has an invalid length. [ 325.959881][T14677] netlink: 'syz.0.2448': attribute type 6 has an invalid length. [ 325.980341][T14677] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2448'. [ 326.032858][T14685] gre1: entered allmulticast mode [ 326.300435][T14697] FAULT_INJECTION: forcing a failure. [ 326.300435][T14697] name failslab, interval 1, probability 0, space 0, times 0 [ 326.333399][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 326.342609][T14697] CPU: 0 UID: 0 PID: 14697 Comm: syz.4.2450 Not tainted syzkaller #0 PREEMPT(full) [ 326.342634][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.342645][T14697] Call Trace: [ 326.342652][T14697] [ 326.342659][T14697] dump_stack_lvl+0xe8/0x150 [ 326.342691][T14697] should_fail_ex+0x40c/0x560 [ 326.342718][T14697] should_failslab+0xa8/0x100 [ 326.342745][T14697] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 326.342765][T14697] ? __kernfs_new_node+0xe6/0x980 [ 326.342787][T14697] ? __kernfs_new_node+0xe6/0x980 [ 326.342818][T14697] __kernfs_new_node+0xe6/0x980 [ 326.342851][T14697] ? __pfx___kernfs_new_node+0x10/0x10 [ 326.342876][T14697] ? kernfs_root+0x1c/0x230 [ 326.342906][T14697] ? kernfs_root+0x1c/0x230 [ 326.342927][T14697] ? kernfs_root+0x1c/0x230 [ 326.342948][T14697] ? kernfs_root+0x1c/0x230 [ 326.342975][T14697] kernfs_new_node+0xea/0x140 [ 326.343008][T14697] kernfs_create_link+0xa7/0x200 [ 326.343030][T14697] sysfs_do_create_link_sd+0x83/0x110 [ 326.343056][T14697] device_add_class_symlinks+0xb6/0x240 [ 326.343079][T14697] device_add+0x467/0xb80 [ 326.343100][T14697] device_create+0x269/0x300 [ 326.343125][T14697] ? timer_init_key+0x161/0x2c0 [ 326.343147][T14697] ? __pfx_device_create+0x10/0x10 [ 326.343168][T14697] ? ieee80211_roc_setup+0x119/0x1d0 [ 326.343196][T14697] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 326.343222][T14697] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 326.343258][T14697] ? __pfx___nla_validate_parse+0x10/0x10 [ 326.343305][T14697] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 326.343331][T14697] ? trace_kmalloc+0x2a/0xf0 [ 326.343360][T14697] hwsim_new_radio_nl+0xd8b/0xf90 [ 326.343401][T14697] genl_family_rcv_msg_doit+0x233/0x340 [ 326.343434][T14697] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.343470][T14697] ? bpf_lsm_capable+0x9/0x20 [ 326.343491][T14697] ? security_capable+0x7e/0x2c0 [ 326.343525][T14697] genl_rcv_msg+0x614/0x7a0 [ 326.343555][T14697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.343578][T14697] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 326.343604][T14697] ? __pfx_ref_tracker_free+0x10/0x10 [ 326.343638][T14697] netlink_rcv_skb+0x226/0x4a0 [ 326.343658][T14697] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.343682][T14697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.343718][T14697] ? down_read+0x2be/0x330 [ 326.343743][T14697] genl_rcv+0x28/0x40 [ 326.343764][T14697] netlink_unicast+0x7bb/0x940 [ 326.343801][T14697] netlink_sendmsg+0x813/0xb40 [ 326.343829][T14697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.343854][T14697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.343876][T14697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.343895][T14697] sock_sendmsg_nosec+0x13a/0x180 [ 326.343922][T14697] ____sys_sendmsg+0x54e/0x850 [ 326.343946][T14697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.343974][T14697] ? import_iovec+0x73/0xa0 [ 326.344003][T14697] ___sys_sendmsg+0x2a5/0x360 [ 326.344021][T14697] ? __lock_acquire+0x683/0x2cf0 [ 326.344049][T14697] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.344102][T14697] ? __fget_files+0x2a/0x420 [ 326.344124][T14697] ? __fget_files+0x3a2/0x420 [ 326.344157][T14697] __x64_sys_sendmsg+0x1b1/0x290 [ 326.344178][T14697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.344215][T14697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.344235][T14697] do_syscall_64+0x174/0x580 [ 326.344254][T14697] ? trace_irq_disable+0x3b/0x140 [ 326.344281][T14697] ? clear_bhb_loop+0x40/0x90 [ 326.344304][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.344321][T14697] RIP: 0033:0x7fd69f59de99 [ 326.344339][T14697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.344355][T14697] RSP: 002b:00007fd6a04f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.344373][T14697] RAX: ffffffffffffffda RBX: 00007fd69f825fa0 RCX: 00007fd69f59de99 [ 326.344386][T14697] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 326.344398][T14697] RBP: 00007fd6a04f7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.344410][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.344420][T14697] R13: 00007fd69f826038 R14: 00007fd69f825fa0 R15: 00007fff789d2e48 [ 326.344450][T14697] [ 326.951499][T14718] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20003 [ 327.206528][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2458'. [ 327.344122][T14745] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 327.404190][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 327.446817][T14755] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 327.493677][T14756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2461'. [ 327.507630][T14755] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 327.642129][T14754] bond6: (slave geneve3): making interface the new active one [ 327.684536][T14754] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 327.723085][T14756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.772134][ T6408] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.792200][ T6408] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.820197][ T6408] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.831708][T14772] netlink: 'syz.0.2469': attribute type 15 has an invalid length. [ 327.834473][ T6408] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.299660][T14801] xt_l2tp: v2 doesn't support IP mode [ 328.372481][T14810] x_tables: duplicate underflow at hook 3 [ 328.942353][T14843] netlink: 'syz.2.2484': attribute type 3 has an invalid length. [ 329.159439][T14857] openvswitch: netlink: Message has 156 unknown bytes. [ 329.187536][T14859] nbd: socks must be embedded in a SOCK_ITEM attr [ 329.556291][T14880] netlink: 'syz.1.2496': attribute type 30 has an invalid length. [ 329.593114][T14880] vxlan1: entered promiscuous mode [ 329.608568][T14880] vxlan1: entered allmulticast mode [ 329.733674][T14894] FAULT_INJECTION: forcing a failure. [ 329.733674][T14894] name failslab, interval 1, probability 0, space 0, times 0 [ 329.760713][T14894] CPU: 1 UID: 0 PID: 14894 Comm: syz.4.2500 Not tainted syzkaller #0 PREEMPT(full) [ 329.760740][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.760750][T14894] Call Trace: [ 329.760758][T14894] [ 329.760766][T14894] dump_stack_lvl+0xe8/0x150 [ 329.760800][T14894] should_fail_ex+0x40c/0x560 [ 329.760827][T14894] should_failslab+0xa8/0x100 [ 329.760856][T14894] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 329.760877][T14894] ? kstrdup+0x81/0x100 [ 329.760902][T14894] ? __kernfs_new_node+0xe6/0x980 [ 329.760926][T14894] ? __kernfs_new_node+0xe6/0x980 [ 329.760958][T14894] __kernfs_new_node+0xe6/0x980 [ 329.760993][T14894] ? __pfx___kernfs_new_node+0x10/0x10 [ 329.761021][T14894] ? kernfs_root+0x1c/0x230 [ 329.761051][T14894] ? kernfs_root+0x1c/0x230 [ 329.761074][T14894] ? kernfs_root+0x1c/0x230 [ 329.761096][T14894] ? kernfs_root+0x1c/0x230 [ 329.761131][T14894] kernfs_new_node+0xea/0x140 [ 329.761162][T14894] kernfs_create_link+0xa7/0x200 [ 329.761186][T14894] sysfs_do_create_link_sd+0x83/0x110 [ 329.761213][T14894] device_add_class_symlinks+0x1cf/0x240 [ 329.761236][T14894] device_add+0x467/0xb80 [ 329.761258][T14894] device_create+0x269/0x300 [ 329.761284][T14894] ? timer_init_key+0x161/0x2c0 [ 329.761308][T14894] ? __pfx_device_create+0x10/0x10 [ 329.761329][T14894] ? ieee80211_roc_setup+0x119/0x1d0 [ 329.761356][T14894] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 329.761382][T14894] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 329.761419][T14894] ? __pfx___nla_validate_parse+0x10/0x10 [ 329.761462][T14894] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 329.761489][T14894] ? trace_kmalloc+0x2a/0xf0 [ 329.761518][T14894] hwsim_new_radio_nl+0xd8b/0xf90 [ 329.761561][T14894] genl_family_rcv_msg_doit+0x233/0x340 [ 329.761595][T14894] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.761633][T14894] ? bpf_lsm_capable+0x9/0x20 [ 329.761654][T14894] ? security_capable+0x7e/0x2c0 [ 329.761689][T14894] genl_rcv_msg+0x614/0x7a0 [ 329.761721][T14894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.761745][T14894] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.761772][T14894] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.761807][T14894] netlink_rcv_skb+0x226/0x4a0 [ 329.761828][T14894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.761854][T14894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.761891][T14894] ? down_read+0x2be/0x330 [ 329.761917][T14894] genl_rcv+0x28/0x40 [ 329.761940][T14894] netlink_unicast+0x7bb/0x940 [ 329.761981][T14894] netlink_sendmsg+0x813/0xb40 [ 329.762012][T14894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.762036][T14894] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.762062][T14894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.762081][T14894] sock_sendmsg_nosec+0x13a/0x180 [ 329.762109][T14894] ____sys_sendmsg+0x54e/0x850 [ 329.762140][T14894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.762170][T14894] ? import_iovec+0x73/0xa0 [ 329.762200][T14894] ___sys_sendmsg+0x2a5/0x360 [ 329.762219][T14894] ? __lock_acquire+0x683/0x2cf0 [ 329.762248][T14894] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.762309][T14894] ? __fget_files+0x2a/0x420 [ 329.762331][T14894] ? __fget_files+0x3a2/0x420 [ 329.762366][T14894] __x64_sys_sendmsg+0x1b1/0x290 [ 329.762393][T14894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.762432][T14894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.762453][T14894] do_syscall_64+0x174/0x580 [ 329.762472][T14894] ? trace_irq_disable+0x3b/0x140 [ 329.762494][T14894] ? clear_bhb_loop+0x40/0x90 [ 329.762518][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.762536][T14894] RIP: 0033:0x7fd69f59de99 [ 329.762555][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.762571][T14894] RSP: 002b:00007fd6a04f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.762590][T14894] RAX: ffffffffffffffda RBX: 00007fd69f825fa0 RCX: 00007fd69f59de99 [ 329.762604][T14894] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 329.762616][T14894] RBP: 00007fd6a04f7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.762627][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.762638][T14894] R13: 00007fd69f826038 R14: 00007fd69f825fa0 R15: 00007fff789d2e48 [ 329.762669][T14894] [ 330.252041][T14905] netlink: 'syz.1.2503': attribute type 24 has an invalid length. [ 330.261958][T14905] __nla_validate_parse: 9 callbacks suppressed [ 330.261974][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 330.286864][T14907] 8021q: VLANs not supported on xfrm0 [ 330.330493][T14907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 330.333839][T14905] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 330.451956][T14916] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2507'. [ 330.462790][T14916] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 330.731734][T14923] syzkaller0: entered promiscuous mode [ 330.747825][T14923] syzkaller0: entered allmulticast mode [ 331.085349][T14950] netlink: 'syz.4.2518': attribute type 24 has an invalid length. [ 331.112746][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 331.152127][T14950] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 331.601703][T14986] FAULT_INJECTION: forcing a failure. [ 331.601703][T14986] name failslab, interval 1, probability 0, space 0, times 0 [ 331.640361][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.3.2527 Not tainted syzkaller #0 PREEMPT(full) [ 331.640394][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.640405][T14986] Call Trace: [ 331.640412][T14986] [ 331.640420][T14986] dump_stack_lvl+0xe8/0x150 [ 331.640452][T14986] should_fail_ex+0x40c/0x560 [ 331.640480][T14986] should_failslab+0xa8/0x100 [ 331.640508][T14986] __kmalloc_noprof+0xfe/0x720 [ 331.640532][T14986] ? sk_prot_alloc+0xe7/0x210 [ 331.640549][T14986] ? sk_prot_alloc+0xe7/0x210 [ 331.640572][T14986] sk_prot_alloc+0xe7/0x210 [ 331.640588][T14986] ? sk_alloc+0x27/0x390 [ 331.640607][T14986] sk_alloc+0x3a/0x390 [ 331.640628][T14986] bpf_prog_test_run_skb+0x3a6/0x2230 [ 331.640668][T14986] ? __fget_files+0x3a2/0x420 [ 331.640691][T14986] ? __fget_files+0x2a/0x420 [ 331.640718][T14986] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 331.640739][T14986] bpf_prog_test_run+0x2c5/0x340 [ 331.640770][T14986] __sys_bpf+0xa22/0xd90 [ 331.640801][T14986] ? __pfx___sys_bpf+0x10/0x10 [ 331.640835][T14986] ? __fget_files+0x2a/0x420 [ 331.640878][T14986] ? ksys_write+0x242/0x270 [ 331.640907][T14986] ? __pfx_ksys_write+0x10/0x10 [ 331.640938][T14986] __x64_sys_bpf+0xba/0xd0 [ 331.640958][T14986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.640979][T14986] do_syscall_64+0x174/0x580 [ 331.640998][T14986] ? trace_irq_disable+0x3b/0x140 [ 331.641020][T14986] ? clear_bhb_loop+0x40/0x90 [ 331.641043][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.641062][T14986] RIP: 0033:0x7fa9d739de99 [ 331.641080][T14986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.641096][T14986] RSP: 002b:00007fa9d8222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.641115][T14986] RAX: ffffffffffffffda RBX: 00007fa9d7625fa0 RCX: 00007fa9d739de99 [ 331.641129][T14986] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 331.641141][T14986] RBP: 00007fa9d8222090 R08: 0000000000000000 R09: 0000000000000000 [ 331.641153][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.641163][T14986] R13: 00007fa9d7626038 R14: 00007fa9d7625fa0 R15: 00007ffc35c47bf8 [ 331.641193][T14986] [ 332.304691][T15011] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2534'. [ 332.328734][T14963] lo speed is unknown, defaulting to 1000 [ 332.341138][T15011] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2534'. [ 332.367849][T15007] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2532'. [ 332.371640][T15011] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2534'. [ 332.379675][T15007] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2532'. [ 332.714703][T15026] FAULT_INJECTION: forcing a failure. [ 332.714703][T15026] name failslab, interval 1, probability 0, space 0, times 0 [ 332.750628][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.3.2539 Not tainted syzkaller #0 PREEMPT(full) [ 332.750654][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.750665][T15026] Call Trace: [ 332.750672][T15026] [ 332.750679][T15026] dump_stack_lvl+0xe8/0x150 [ 332.750723][T15026] should_fail_ex+0x40c/0x560 [ 332.750750][T15026] should_failslab+0xa8/0x100 [ 332.750779][T15026] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 332.750802][T15026] ? __kernfs_new_node+0xe6/0x980 [ 332.750826][T15026] ? __kernfs_new_node+0xe6/0x980 [ 332.750858][T15026] __kernfs_new_node+0xe6/0x980 [ 332.750893][T15026] ? __pfx___kernfs_new_node+0x10/0x10 [ 332.750920][T15026] ? kernfs_root+0x1c/0x230 [ 332.750951][T15026] ? kernfs_root+0x1c/0x230 [ 332.750974][T15026] ? kernfs_root+0x1c/0x230 [ 332.750995][T15026] ? kernfs_root+0x1c/0x230 [ 332.751024][T15026] kernfs_new_node+0xea/0x140 [ 332.751053][T15026] __kernfs_create_file+0x4b/0x2e0 [ 332.751075][T15026] sysfs_add_file_mode_ns+0x237/0x300 [ 332.751105][T15026] sysfs_merge_group+0x183/0x320 [ 332.751133][T15026] ? __pfx_sysfs_merge_group+0x10/0x10 [ 332.751157][T15026] ? device_add_attrs+0x5c3/0x600 [ 332.751178][T15026] ? __pfx_device_add_attrs+0x10/0x10 [ 332.751202][T15026] dpm_sysfs_add+0xd2/0x270 [ 332.751226][T15026] device_add+0x4ca/0xb80 [ 332.751247][T15026] device_create+0x269/0x300 [ 332.751274][T15026] ? timer_init_key+0x161/0x2c0 [ 332.751298][T15026] ? __pfx_device_create+0x10/0x10 [ 332.751320][T15026] ? ieee80211_roc_setup+0x119/0x1d0 [ 332.751349][T15026] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 332.751374][T15026] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 332.751412][T15026] ? __pfx___nla_validate_parse+0x10/0x10 [ 332.751455][T15026] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 332.751482][T15026] ? trace_kmalloc+0x2a/0xf0 [ 332.751516][T15026] hwsim_new_radio_nl+0xd8b/0xf90 [ 332.751559][T15026] genl_family_rcv_msg_doit+0x233/0x340 [ 332.751593][T15026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 332.751632][T15026] ? bpf_lsm_capable+0x9/0x20 [ 332.751655][T15026] ? security_capable+0x7e/0x2c0 [ 332.751690][T15026] genl_rcv_msg+0x614/0x7a0 [ 332.751742][T15026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.751767][T15026] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 332.751794][T15026] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.751828][T15026] netlink_rcv_skb+0x226/0x4a0 [ 332.751850][T15026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.751876][T15026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.751913][T15026] ? down_read+0x2be/0x330 [ 332.751940][T15026] genl_rcv+0x28/0x40 [ 332.751962][T15026] netlink_unicast+0x7bb/0x940 [ 332.752002][T15026] netlink_sendmsg+0x813/0xb40 [ 332.752033][T15026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.752057][T15026] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.752079][T15026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.752098][T15026] sock_sendmsg_nosec+0x13a/0x180 [ 332.752125][T15026] ____sys_sendmsg+0x54e/0x850 [ 332.752149][T15026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.752176][T15026] ? import_iovec+0x73/0xa0 [ 332.752205][T15026] ___sys_sendmsg+0x2a5/0x360 [ 332.752223][T15026] ? __lock_acquire+0x683/0x2cf0 [ 332.752252][T15026] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.752308][T15026] ? __fget_files+0x2a/0x420 [ 332.752330][T15026] ? __fget_files+0x3a2/0x420 [ 332.752361][T15026] __x64_sys_sendmsg+0x1b1/0x290 [ 332.752384][T15026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.752422][T15026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.752441][T15026] do_syscall_64+0x174/0x580 [ 332.752458][T15026] ? trace_irq_disable+0x3b/0x140 [ 332.752481][T15026] ? clear_bhb_loop+0x40/0x90 [ 332.752504][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.752522][T15026] RIP: 0033:0x7fa9d739de99 [ 332.752539][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.752554][T15026] RSP: 002b:00007fa9d8222028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.752573][T15026] RAX: ffffffffffffffda RBX: 00007fa9d7625fa0 RCX: 00007fa9d739de99 [ 332.752586][T15026] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 332.752597][T15026] RBP: 00007fa9d8222090 R08: 0000000000000000 R09: 0000000000000000 [ 332.752608][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.752619][T15026] R13: 00007fa9d7626038 R14: 00007fa9d7625fa0 R15: 00007ffc35c47bf8 [ 332.752649][T15026] [ 333.018835][T15035] xt_NFQUEUE: number of total queues is 0 [ 333.193927][T15034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2542'. [ 333.356604][T15046] netlink: 'syz.4.2546': attribute type 12 has an invalid length. [ 333.515894][T15057] netlink: 'syz.4.2546': attribute type 42 has an invalid length. [ 333.850018][T15062] syzkaller0: entered promiscuous mode [ 333.869368][T15062] syzkaller0: entered allmulticast mode [ 334.327897][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.582733][T15084] netlink: 'syz.3.2554': attribute type 83 has an invalid length. [ 334.625197][T15084] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 335.113997][T15112] netlink: 'syz.2.2565': attribute type 24 has an invalid length. [ 335.128780][T15112] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 335.303208][T15118] __nla_validate_parse: 8 callbacks suppressed [ 335.303226][T15118] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2567'. [ 335.309181][T15121] FAULT_INJECTION: forcing a failure. [ 335.309181][T15121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.335702][T15121] CPU: 1 UID: 0 PID: 15121 Comm: syz.2.2568 Not tainted syzkaller #0 PREEMPT(full) [ 335.335723][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.335731][T15121] Call Trace: [ 335.335737][T15121] [ 335.335743][T15121] dump_stack_lvl+0xe8/0x150 [ 335.335771][T15121] should_fail_ex+0x40c/0x560 [ 335.335791][T15121] _copy_to_user+0x31/0xb0 [ 335.335815][T15121] bpf_test_finish+0x1cf/0x690 [ 335.335838][T15121] ? __pfx_bpf_test_finish+0x10/0x10 [ 335.335863][T15121] bpf_prog_test_run_skb+0x11fe/0x2230 [ 335.335894][T15121] ? __fget_files+0x3a2/0x420 [ 335.335911][T15121] ? __fget_files+0x2a/0x420 [ 335.335933][T15121] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 335.335950][T15121] bpf_prog_test_run+0x2c5/0x340 [ 335.335974][T15121] __sys_bpf+0xa22/0xd90 [ 335.336002][T15121] ? __pfx___sys_bpf+0x10/0x10 [ 335.336035][T15121] ? __fget_files+0x2a/0x420 [ 335.336074][T15121] ? ksys_write+0x242/0x270 [ 335.336110][T15121] ? __pfx_ksys_write+0x10/0x10 [ 335.336142][T15121] __x64_sys_bpf+0xba/0xd0 [ 335.336164][T15121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.336185][T15121] do_syscall_64+0x174/0x580 [ 335.336205][T15121] ? trace_irq_disable+0x3b/0x140 [ 335.336228][T15121] ? clear_bhb_loop+0x40/0x90 [ 335.336251][T15121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.336270][T15121] RIP: 0033:0x7f9c3c39de99 [ 335.336288][T15121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.336304][T15121] RSP: 002b:00007f9c3d273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.336325][T15121] RAX: ffffffffffffffda RBX: 00007f9c3c625fa0 RCX: 00007f9c3c39de99 [ 335.336339][T15121] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 335.336351][T15121] RBP: 00007f9c3d273090 R08: 0000000000000000 R09: 0000000000000000 [ 335.336362][T15121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.336374][T15121] R13: 00007f9c3c626038 R14: 00007f9c3c625fa0 R15: 00007ffe3c070d78 [ 335.336405][T15121] [ 336.134774][T15159] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2577'. [ 336.434398][T15168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2581'. [ 336.463634][T15168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2581'. [ 336.482095][T15179] FAULT_INJECTION: forcing a failure. [ 336.482095][T15179] name failslab, interval 1, probability 0, space 0, times 0 [ 336.531610][T15179] CPU: 0 UID: 0 PID: 15179 Comm: syz.1.2585 Not tainted syzkaller #0 PREEMPT(full) [ 336.531636][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.531647][T15179] Call Trace: [ 336.531654][T15179] [ 336.531662][T15179] dump_stack_lvl+0xe8/0x150 [ 336.531696][T15179] should_fail_ex+0x40c/0x560 [ 336.531724][T15179] should_failslab+0xa8/0x100 [ 336.531751][T15179] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 336.531775][T15179] ? __kernfs_new_node+0xe6/0x980 [ 336.531799][T15179] ? __kernfs_new_node+0xe6/0x980 [ 336.531831][T15179] __kernfs_new_node+0xe6/0x980 [ 336.531867][T15179] ? __pfx___kernfs_new_node+0x10/0x10 [ 336.531893][T15179] ? kernfs_root+0x1c/0x230 [ 336.531924][T15179] ? kernfs_root+0x1c/0x230 [ 336.531947][T15179] ? kernfs_root+0x1c/0x230 [ 336.531968][T15179] ? kernfs_root+0x1c/0x230 [ 336.531994][T15179] kernfs_new_node+0xea/0x140 [ 336.532023][T15179] __kernfs_create_file+0x4b/0x2e0 [ 336.532046][T15179] sysfs_add_file_mode_ns+0x237/0x300 [ 336.532072][T15179] sysfs_merge_group+0x183/0x320 [ 336.532099][T15179] ? __pfx_sysfs_merge_group+0x10/0x10 [ 336.532122][T15179] ? device_add_attrs+0x5c3/0x600 [ 336.532143][T15179] ? __pfx_device_add_attrs+0x10/0x10 [ 336.532165][T15179] dpm_sysfs_add+0xd2/0x270 [ 336.532189][T15179] device_add+0x4ca/0xb80 [ 336.532209][T15179] device_create+0x269/0x300 [ 336.532234][T15179] ? timer_init_key+0x161/0x2c0 [ 336.532258][T15179] ? __pfx_device_create+0x10/0x10 [ 336.532280][T15179] ? ieee80211_roc_setup+0x119/0x1d0 [ 336.532308][T15179] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 336.532334][T15179] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 336.532371][T15179] ? __pfx___nla_validate_parse+0x10/0x10 [ 336.532413][T15179] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 336.532440][T15179] ? trace_kmalloc+0x2a/0xf0 [ 336.532471][T15179] hwsim_new_radio_nl+0xd8b/0xf90 [ 336.532520][T15179] genl_family_rcv_msg_doit+0x233/0x340 [ 336.532553][T15179] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.532591][T15179] ? bpf_lsm_capable+0x9/0x20 [ 336.532613][T15179] ? security_capable+0x7e/0x2c0 [ 336.532646][T15179] genl_rcv_msg+0x614/0x7a0 [ 336.532677][T15179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.532701][T15179] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 336.532727][T15179] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.532763][T15179] netlink_rcv_skb+0x226/0x4a0 [ 336.532784][T15179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.532810][T15179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.532846][T15179] ? down_read+0x2be/0x330 [ 336.532874][T15179] genl_rcv+0x28/0x40 [ 336.532896][T15179] netlink_unicast+0x7bb/0x940 [ 336.532936][T15179] netlink_sendmsg+0x813/0xb40 [ 336.532966][T15179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.532991][T15179] ? aa_sock_msg_perm+0xf1/0x1b0 [ 336.533015][T15179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.533035][T15179] sock_sendmsg_nosec+0x13a/0x180 [ 336.533062][T15179] ____sys_sendmsg+0x54e/0x850 [ 336.533087][T15179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.533119][T15179] ? import_iovec+0x73/0xa0 [ 336.533149][T15179] ___sys_sendmsg+0x2a5/0x360 [ 336.533167][T15179] ? __lock_acquire+0x683/0x2cf0 [ 336.533197][T15179] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.533254][T15179] ? __fget_files+0x2a/0x420 [ 336.533276][T15179] ? __fget_files+0x3a2/0x420 [ 336.533311][T15179] __x64_sys_sendmsg+0x1b1/0x290 [ 336.533334][T15179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.533372][T15179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.533393][T15179] do_syscall_64+0x174/0x580 [ 336.533412][T15179] ? trace_irq_disable+0x3b/0x140 [ 336.533436][T15179] ? clear_bhb_loop+0x40/0x90 [ 336.533459][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.533478][T15179] RIP: 0033:0x7f521ff9de99 [ 336.533502][T15179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.533518][T15179] RSP: 002b:00007f5220e98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.533539][T15179] RAX: ffffffffffffffda RBX: 00007f5220225fa0 RCX: 00007f521ff9de99 [ 336.533552][T15179] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 336.533565][T15179] RBP: 00007f5220e98090 R08: 0000000000000000 R09: 0000000000000000 [ 336.533576][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.533587][T15179] R13: 00007f5220226038 R14: 00007f5220225fa0 R15: 00007ffe8f2478d8 [ 336.533619][T15179] [ 337.173995][T15195] netlink: 432 bytes leftover after parsing attributes in process `syz.1.2592'. [ 337.448759][T15208] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 337.665033][T15227] FAULT_INJECTION: forcing a failure. [ 337.665033][T15227] name failslab, interval 1, probability 0, space 0, times 0 [ 337.688751][T15227] CPU: 0 UID: 0 PID: 15227 Comm: syz.2.2602 Not tainted syzkaller #0 PREEMPT(full) [ 337.688777][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.688790][T15227] Call Trace: [ 337.688798][T15227] [ 337.688806][T15227] dump_stack_lvl+0xe8/0x150 [ 337.688839][T15227] should_fail_ex+0x40c/0x560 [ 337.688866][T15227] should_failslab+0xa8/0x100 [ 337.688894][T15227] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 337.688917][T15227] ? __kernfs_new_node+0xe6/0x980 [ 337.688942][T15227] ? __kernfs_new_node+0xe6/0x980 [ 337.688974][T15227] __kernfs_new_node+0xe6/0x980 [ 337.689009][T15227] ? __pfx___kernfs_new_node+0x10/0x10 [ 337.689036][T15227] ? kernfs_root+0x1c/0x230 [ 337.689066][T15227] ? kernfs_root+0x1c/0x230 [ 337.689090][T15227] ? kernfs_root+0x1c/0x230 [ 337.689112][T15227] ? kernfs_root+0x1c/0x230 [ 337.689140][T15227] kernfs_new_node+0xea/0x140 [ 337.689172][T15227] __kernfs_create_file+0x4b/0x2e0 [ 337.689195][T15227] sysfs_add_file_mode_ns+0x237/0x300 [ 337.689225][T15227] sysfs_merge_group+0x183/0x320 [ 337.689254][T15227] ? __pfx_sysfs_merge_group+0x10/0x10 [ 337.689277][T15227] ? device_add_attrs+0x5c3/0x600 [ 337.689300][T15227] ? __pfx_device_add_attrs+0x10/0x10 [ 337.689323][T15227] dpm_sysfs_add+0xd2/0x270 [ 337.689348][T15227] device_add+0x4ca/0xb80 [ 337.689369][T15227] device_create+0x269/0x300 [ 337.689401][T15227] ? timer_init_key+0x161/0x2c0 [ 337.689425][T15227] ? __pfx_device_create+0x10/0x10 [ 337.689447][T15227] ? ieee80211_roc_setup+0x119/0x1d0 [ 337.689476][T15227] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 337.689502][T15227] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 337.689541][T15227] ? __pfx___nla_validate_parse+0x10/0x10 [ 337.689583][T15227] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 337.689610][T15227] ? trace_kmalloc+0x2a/0xf0 [ 337.689642][T15227] hwsim_new_radio_nl+0xd8b/0xf90 [ 337.689682][T15227] genl_family_rcv_msg_doit+0x233/0x340 [ 337.689713][T15227] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 337.689748][T15227] ? bpf_lsm_capable+0x9/0x20 [ 337.689768][T15227] ? security_capable+0x7e/0x2c0 [ 337.689798][T15227] genl_rcv_msg+0x614/0x7a0 [ 337.689828][T15227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.689849][T15227] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 337.689876][T15227] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.689910][T15227] netlink_rcv_skb+0x226/0x4a0 [ 337.689931][T15227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.689958][T15227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.689995][T15227] ? down_read+0x2be/0x330 [ 337.690021][T15227] genl_rcv+0x28/0x40 [ 337.690043][T15227] netlink_unicast+0x7bb/0x940 [ 337.690084][T15227] netlink_sendmsg+0x813/0xb40 [ 337.690114][T15227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.690139][T15227] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.690164][T15227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.690184][T15227] sock_sendmsg_nosec+0x13a/0x180 [ 337.690212][T15227] ____sys_sendmsg+0x54e/0x850 [ 337.690238][T15227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.690267][T15227] ? import_iovec+0x73/0xa0 [ 337.690297][T15227] ___sys_sendmsg+0x2a5/0x360 [ 337.690314][T15227] ? __lock_acquire+0x683/0x2cf0 [ 337.690342][T15227] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.690397][T15227] ? __fget_files+0x2a/0x420 [ 337.690418][T15227] ? __fget_files+0x3a2/0x420 [ 337.690451][T15227] __x64_sys_sendmsg+0x1b1/0x290 [ 337.690472][T15227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.690509][T15227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.690527][T15227] do_syscall_64+0x174/0x580 [ 337.690544][T15227] ? trace_irq_disable+0x3b/0x140 [ 337.690564][T15227] ? clear_bhb_loop+0x40/0x90 [ 337.690585][T15227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.690602][T15227] RIP: 0033:0x7f9c3c39de99 [ 337.690619][T15227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.690633][T15227] RSP: 002b:00007f9c3d273028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.690653][T15227] RAX: ffffffffffffffda RBX: 00007f9c3c625fa0 RCX: 00007f9c3c39de99 [ 337.690666][T15227] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 337.690678][T15227] RBP: 00007f9c3d273090 R08: 0000000000000000 R09: 0000000000000000 [ 337.690690][T15227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.690700][T15227] R13: 00007f9c3c626038 R14: 00007f9c3c625fa0 R15: 00007ffe3c070d78 [ 337.690731][T15227] [ 337.838715][T15236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2603'. [ 338.167822][T15236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2603'. [ 338.289794][T15256] FAULT_INJECTION: forcing a failure. [ 338.289794][T15256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.309990][T15256] CPU: 1 UID: 0 PID: 15256 Comm: syz.4.2610 Not tainted syzkaller #0 PREEMPT(full) [ 338.310015][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.310026][T15256] Call Trace: [ 338.310033][T15256] [ 338.310041][T15256] dump_stack_lvl+0xe8/0x150 [ 338.310073][T15256] should_fail_ex+0x40c/0x560 [ 338.310100][T15256] _copy_from_iter+0x1d3/0x1660 [ 338.310124][T15256] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.310154][T15256] ? __pfx_policy_nodemask+0x10/0x10 [ 338.310182][T15256] ? unwind_next_frame+0x8f/0x2550 [ 338.310201][T15256] ? __pfx__copy_from_iter+0x10/0x10 [ 338.310227][T15256] ? alloc_pages_mpol+0x24a/0x380 [ 338.310259][T15256] copy_page_from_iter+0x219/0x2d0 [ 338.310284][T15256] tun_get_user+0x1bf1/0x4370 [ 338.310311][T15256] ? tun_get_user+0x6e7/0x4370 [ 338.310348][T15256] ? aa_file_perm+0x4ed/0x15f0 [ 338.310368][T15256] ? __pfx_tun_get_user+0x10/0x10 [ 338.310392][T15256] ? __lock_acquire+0x683/0x2cf0 [ 338.310429][T15256] ? ref_tracker_alloc+0x341/0x4b0 [ 338.310450][T15256] ? get_pid_task+0x20/0x1f0 [ 338.310476][T15256] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 338.310500][T15256] ? tun_get+0x1c/0x2f0 [ 338.310524][T15256] ? tun_get+0x1c/0x2f0 [ 338.310553][T15256] ? tun_get+0x1c/0x2f0 [ 338.310573][T15256] ? tun_get+0x1c/0x2f0 [ 338.310599][T15256] tun_chr_write_iter+0x113/0x200 [ 338.310623][T15256] vfs_write+0x612/0xba0 [ 338.310657][T15256] ? __pfx_vfs_write+0x10/0x10 [ 338.310691][T15256] ? __fget_files+0x2a/0x420 [ 338.310722][T15256] ksys_write+0x150/0x270 [ 338.310749][T15256] ? __pfx_ksys_write+0x10/0x10 [ 338.310787][T15256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.310807][T15256] do_syscall_64+0x174/0x580 [ 338.310826][T15256] ? trace_irq_disable+0x3b/0x140 [ 338.310855][T15256] ? clear_bhb_loop+0x40/0x90 [ 338.310879][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.310896][T15256] RIP: 0033:0x7fd69f55e6ce [ 338.310912][T15256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.310928][T15256] RSP: 002b:00007fd6a04f6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.310948][T15256] RAX: ffffffffffffffda RBX: 00007fd6a04f76c0 RCX: 00007fd69f55e6ce [ 338.310961][T15256] RDX: 000000000000004a RSI: 0000200000000680 RDI: 00000000000000c8 [ 338.310973][T15256] RBP: 00007fd6a04f7090 R08: 0000000000000000 R09: 0000000000000000 [ 338.310984][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.310994][T15256] R13: 00007fd69f826038 R14: 00007fd69f825fa0 R15: 00007fff789d2e48 [ 338.311025][T15256] [ 338.852749][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2617'. [ 339.065799][T15285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2622'. [ 339.085512][T15285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2622'. [ 339.210886][T15298] netlink: 'syz.2.2626': attribute type 32 has an invalid length. [ 339.856556][T15329] sctp: [Deprecated]: syz.0.2636 (pid 15329) Use of int in max_burst socket option deprecated. [ 339.856556][T15329] Use struct sctp_assoc_value instead [ 340.082699][T15325] lo speed is unknown, defaulting to 1000 [ 340.522453][T15341] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 340.533304][T15342] __nla_validate_parse: 7 callbacks suppressed [ 340.533321][T15342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2641'. [ 340.593002][T15341] bond11 (unregistering): Released all slaves [ 340.598802][T15342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2641'. [ 340.660402][T15363] Set syz1 is full, maxelem 1029 reached [ 341.017127][T15380] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 341.052721][T15389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2654'. [ 341.062621][T15380] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 341.783398][T15413] bond10: invalid ARP target 0.0.0.0 specified for addition [ 341.791344][T15413] bond10: option arp_ip_target: invalid value (0) [ 341.817174][T15413] bond10 (unregistering): Released all slaves [ 341.953258][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 342.183060][T15442] veth15: entered promiscuous mode [ 342.188542][T15442] veth15: entered allmulticast mode [ 342.194472][T15442] team0: Device veth15 is up. Set it down before adding it as a team port [ 342.238962][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058539800: rx timeout, send abort [ 342.247445][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058539800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 342.398684][T15456] tipc: Enabled bearer , priority 0 [ 342.412240][T15456] syzkaller0: entered promiscuous mode [ 342.428934][T15456] syzkaller0: entered allmulticast mode [ 342.449815][T15456] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 342.504198][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2674'. [ 342.534021][T15456] tipc: Resetting bearer [ 342.544271][T15456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2674'. [ 342.581238][T15464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.602877][T15455] tipc: Resetting bearer [ 342.754565][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2681'. [ 343.413566][T15455] tipc: Disabling bearer [ 343.433383][T15472] 8021q: VLANs not supported on ip6tnl0 [ 343.450298][T15473] tipc: Enabled bearer , priority 0 [ 343.487546][ T6408] tipc: Resetting bearer [ 343.627587][T15486] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 343.674627][T15486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.712935][T15484] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2685'. [ 343.762349][T15484] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2685'. [ 343.800276][T15486] geneve5: entered promiscuous mode [ 343.810480][T15486] geneve5: entered allmulticast mode [ 343.872926][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 344.090952][T15516] Set syz1 is full, maxelem 1029 reached [ 345.253039][T15582] openvswitch: netlink: Message has 8 unknown bytes. [ 345.288777][T15582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.621657][T15600] netlink: 'syz.3.2713': attribute type 2 has an invalid length. [ 345.711495][T15600] : entered promiscuous mode [ 345.838817][T15606] __nla_validate_parse: 5 callbacks suppressed [ 345.838834][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2715'. [ 345.892704][T15609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2717'. [ 345.903167][T15609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2717'. [ 346.100375][T15617] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2720'. [ 346.132202][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 346.165948][T15617] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 346.468299][T15634] Bluetooth: MGMT ver 1.23 [ 346.535959][T15636] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.086910][T15666] syzkaller0: entered promiscuous mode [ 347.093442][T15666] syzkaller0: entered allmulticast mode [ 347.390684][T15675] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2740'. [ 347.523089][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2742'. [ 347.631585][T15690] rdma_op ffff8880558c41f0 conn xmit_rdma 0000000000000000 [ 348.040706][T15712] openvswitch: netlink: Message has 12 unknown bytes. [ 348.048589][T15712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.501686][T15733] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2755'. [ 349.044189][T15755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2764'. [ 349.085541][T15755] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2764'. [ 349.517641][T15781] netlink: 'syz.0.2773': attribute type 12 has an invalid length. [ 349.579860][T15784] Set syz1 is full, maxelem 1029 reached [ 349.961940][T15798] netlink: 'syz.0.2778': attribute type 13 has an invalid length. [ 349.986107][T15798] tipc: Resetting bearer [ 350.000937][T15798] tipc: Resetting bearer [ 350.050931][T15803] macvtap1: entered allmulticast mode [ 350.056770][T15798] tipc: Enabled bearer , priority 0 [ 350.068878][T15798] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 350.095979][T15798] syzkaller0: entered promiscuous mode [ 350.103282][T15798] syzkaller0: entered allmulticast mode [ 350.120439][T15797] tipc: Resetting bearer [ 350.155788][T15797] tipc: Disabling bearer [ 350.176792][T15806] vlan5: entered allmulticast mode [ 350.182394][T15806] bond0: entered allmulticast mode [ 350.670363][T15832] tipc: Enabled bearer , priority 10 [ 351.016143][T15849] netlink: 'syz.3.2794': attribute type 19 has an invalid length. [ 351.037886][T15849] __nla_validate_parse: 16 callbacks suppressed [ 351.037938][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 351.060976][T15849] netlink: 'syz.3.2794': attribute type 19 has an invalid length. [ 351.100924][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 351.125966][T15851] netlink: 432 bytes leftover after parsing attributes in process `syz.4.2795'. [ 351.276762][T15853] Set syz1 is full, maxelem 1029 reached [ 351.466555][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 351.667310][T15874] netlink: 432 bytes leftover after parsing attributes in process `syz.2.2804'. [ 352.161828][T15879] team0: Port device syz_tun added [ 352.171475][T15888] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.2808'. [ 352.191589][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2808'. [ 352.200944][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2808'. [ 352.364999][T15898] netlink: 432 bytes leftover after parsing attributes in process `syz.2.2809'. [ 352.403753][T15902] syzkaller0: entered promiscuous mode [ 352.429012][T15902] syzkaller0: entered allmulticast mode [ 352.451400][T15904] netlink: 'syz.1.2813': attribute type 58 has an invalid length. [ 352.478040][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2813'. [ 352.582706][ T5637] block nbd2: Receive control failed (result -1) [ 353.298849][T15929] sctp: [Deprecated]: syz.1.2818 (pid 15929) Use of int in maxseg socket option. [ 353.298849][T15929] Use struct sctp_assoc_value instead [ 353.507439][T15929] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.545881][T15929] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.618599][T15936] syzkaller1: entered promiscuous mode [ 353.627347][T15946] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 353.629093][T15936] syzkaller1: entered allmulticast mode [ 353.636651][T15946] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 353.743288][T15951] veth1_to_bond: left allmulticast mode [ 353.886393][T15960] ip6t_rpfilter: unknown options [ 354.070111][T15972] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 354.246664][T15972] 8021q: adding VLAN 0 to HW filter on device bond10 [ 354.284685][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.299926][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.311153][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.323320][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.333255][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.367811][T15981] bond10: (slave geneve6): making interface the new active one [ 354.431630][T15981] bond10: (slave geneve6): Enslaving as an active interface with an up link [ 354.440964][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.463048][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.474016][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.488588][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.507207][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.732001][T15981] syz.2.2828 (15981) used greatest stack depth: 16928 bytes left [ 354.899125][T15992] syzkaller0: entered promiscuous mode [ 354.911551][T15992] syzkaller0: entered allmulticast mode [ 356.651907][ T5637] Bluetooth: hci5: command tx timeout [ 357.372298][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.543427][T16056] team0: Device syz_tun failed to register rx_handler [ 357.593496][T16058] team0: Port device syz_tun removed [ 357.650828][T16058] bridge_slave_0: left allmulticast mode [ 357.656523][T16058] bridge_slave_0: left promiscuous mode [ 357.681883][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.741965][T16058] bridge_slave_1: left allmulticast mode [ 357.748742][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.764310][T16058] bond0: (slave bond_slave_0): Releasing backup interface [ 357.785736][T16058] team0: Port device team_slave_0 removed [ 357.802919][T16058] team0: Port device team_slave_1 removed [ 357.816699][T16058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.824718][T16058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.835831][T16058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.886331][T16063] team0: Port device xfrm0 added [ 357.901999][T16065] tipc: Enabled bearer , priority 0 [ 358.136512][T16090] __nla_validate_parse: 5 callbacks suppressed [ 358.136529][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 358.151762][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2850'. [ 358.162004][T16090] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2851'. [ 358.367237][T16078] tipc: Resetting bearer [ 358.403076][T16078] tipc: Resetting bearer [ 358.650542][T16078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.704579][ T10] syz0: Port: 1 Link DOWN [ 358.728084][ T5637] Bluetooth: hci5: command tx timeout [ 358.955832][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2855'. [ 359.044461][ T10] tipc: Node number set to 1403961793 [ 359.167859][T15984] lo speed is unknown, defaulting to 1000 [ 359.598691][T16140] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 359.658140][T16141] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 359.977099][T16147] batadv_slave_1: entered promiscuous mode [ 360.046653][T16146] batadv_slave_1: left promiscuous mode [ 360.130336][T16131] lo speed is unknown, defaulting to 1000 [ 360.219471][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2866'. [ 360.229236][T16157] batman_adv: batadv0: Adding interface: vlan4 [ 360.235657][T16157] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.265084][T16157] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 360.703372][T15984] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.710813][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.719137][T15984] bridge_slave_0: entered allmulticast mode [ 360.728593][T15984] bridge_slave_0: entered promiscuous mode [ 360.740088][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 360.753911][T15984] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.763398][T16179] nbd: must specify a size in bytes for the device [ 360.770697][T15984] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.779712][T15984] bridge_slave_1: entered allmulticast mode [ 360.787151][T15984] bridge_slave_1: entered promiscuous mode [ 360.813299][ T5637] Bluetooth: hci5: command tx timeout [ 360.860070][T15984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.875598][T15984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.988225][T15984] team0: Port device team_slave_0 added [ 361.007237][T15984] team0: Port device team_slave_1 added [ 361.185207][T15984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.185919][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2876'. [ 361.205150][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.232146][T15984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.243767][T16196] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2876'. [ 361.257100][T16195] batman_adv: batadv0: Interface deactivated: macvlan2 [ 361.286492][T16195] batadv_slave_1 (unregistering): left allmulticast mode [ 361.332087][T16195] batman_adv: batadv0: Removing interface: macvlan2 [ 361.405553][T15984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.413554][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.440856][T15984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.457439][T16199] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2876'. [ 361.496751][T16196] gretap0: entered promiscuous mode [ 361.541410][T16199] 0ªî{X¹¦: renamed from gretap0 [ 361.554161][T16199] 0ªî{X¹¦: left promiscuous mode [ 361.559294][T16199] 0ªî{X¹¦: entered allmulticast mode [ 361.565517][T16199] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 361.607125][T16201] tipc: Enabled bearer , priority 0 [ 361.643948][T15984] hsr_slave_0: entered promiscuous mode [ 361.656395][T15984] hsr_slave_1: entered promiscuous mode [ 361.665806][T16202] tipc: Disabling bearer [ 361.685330][T16204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.844809][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'. [ 361.946928][ T6417] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.006935][ T6845] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.020966][ T6845] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.035003][T16216] nbd: must specify a size in bytes for the device [ 362.054169][ T6845] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.393717][T15984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.419595][T15984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.638187][T15984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.672228][T15984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.828001][T15984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.859237][T15984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.892342][ T5637] Bluetooth: hci5: command tx timeout [ 363.025673][T15984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.046893][T15984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.330660][T16266] openvswitch: netlink: Message has 12 unknown bytes. [ 363.356426][T16266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.400633][T15984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.430158][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.445600][T15984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.459486][T16271] __nla_validate_parse: 2 callbacks suppressed [ 363.459505][T16271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2896'. [ 363.479592][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.490129][T15984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.509739][T16271] siw: device registration error -23 [ 363.524200][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.534232][T15984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.551931][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.767896][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.295322][T16285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2897'. [ 364.325799][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2897'. [ 364.400999][T16288] netlink: 'syz.0.2898': attribute type 11 has an invalid length. [ 364.657316][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 364.667062][T15984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.694217][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 364.715713][T15984] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.740651][T16306] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2901'. [ 364.751020][T16306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'. [ 364.769918][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 364.774027][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.785974][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.856701][T16306] netlink: 'syz.2.2901': attribute type 4 has an invalid length. [ 364.900852][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.902484][T16313] openvswitch: netlink: Message has 12 unknown bytes. [ 364.908153][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.939279][T16313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.116304][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 365.232147][T16328] openvswitch: netlink: Message has 12 unknown bytes. [ 365.248245][T16328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.641511][T15984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.200083][T15984] veth0_vlan: entered promiscuous mode [ 366.243298][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 366.244809][T15984] veth1_vlan: entered promiscuous mode [ 366.366243][T15984] veth0_macvtap: entered promiscuous mode [ 366.406315][T15984] veth1_macvtap: entered promiscuous mode [ 366.449845][T15984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.481461][T15984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.533881][T14016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.572795][T14016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.582607][T14016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.612056][T14016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.641972][T16361] syzkaller0: entered promiscuous mode [ 366.653958][T16361] syzkaller0: entered allmulticast mode [ 366.867327][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.889523][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.951397][ T6845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.965629][ T6845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.086036][T16377] openvswitch: netlink: Message has 12 unknown bytes. [ 367.105696][T16377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.331299][T16402] syzkaller0: entered promiscuous mode [ 368.358299][T16402] syzkaller0: entered allmulticast mode [ 368.521194][T16416] __nla_validate_parse: 4 callbacks suppressed [ 368.521210][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 368.537571][T16416] netlink: 'syz.3.2932': attribute type 10 has an invalid length. [ 368.575380][T16419] netlink: 432 bytes leftover after parsing attributes in process `syz.3.2932'. [ 368.614878][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 368.764996][T16423] ì: renamed from bond_slave_0 [ 368.824697][T16431] openvswitch: netlink: Message has 12 unknown bytes. [ 368.842359][T16431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.207175][T16452] ipvlan2: entered promiscuous mode [ 369.224068][T16452] bridge0: port 3(ipvlan2) entered blocking state [ 369.248680][T16452] bridge0: port 3(ipvlan2) entered disabled state [ 369.274205][T16455] netlink: 'syz.0.2944': attribute type 40 has an invalid length. [ 369.275423][T16452] ipvlan2: entered allmulticast mode [ 369.314927][T16452] bridge0: entered allmulticast mode [ 369.333594][T16452] ipvlan2: left allmulticast mode [ 369.347950][T16452] bridge0: left allmulticast mode [ 369.370327][T16460] x_tables: duplicate underflow at hook 2 [ 369.912228][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 370.065491][T16493] Set syz1 is full, maxelem 1029 reached [ 370.665254][T16488] lo speed is unknown, defaulting to 1000 [ 370.704972][T16494] dvmrp0: entered allmulticast mode [ 371.052997][T16522] netlink: 'syz.3.2957': attribute type 2 has an invalid length. [ 371.138729][T16524] FAULT_INJECTION: forcing a failure. [ 371.138729][T16524] name failslab, interval 1, probability 0, space 0, times 0 [ 371.164128][T16522] : entered promiscuous mode [ 371.195578][T16524] CPU: 1 UID: 0 PID: 16524 Comm: syz.4.2958 Not tainted syzkaller #0 PREEMPT(full) [ 371.195604][T16524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.195630][T16524] Call Trace: [ 371.195713][T16524] [ 371.195758][T16524] dump_stack_lvl+0xe8/0x150 [ 371.195901][T16524] should_fail_ex+0x40c/0x560 [ 371.196019][T16524] should_failslab+0xa8/0x100 [ 371.196070][T16524] __kmalloc_noprof+0xfe/0x720 [ 371.196103][T16524] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.196226][T16524] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.196267][T16524] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.196300][T16524] genl_family_rcv_msg_doit+0xda/0x340 [ 371.196330][T16524] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.196364][T16524] ? apparmor_capable+0x126/0x170 [ 371.196459][T16524] ? bpf_lsm_capable+0x9/0x20 [ 371.196498][T16524] ? security_capable+0x7e/0x2c0 [ 371.196582][T16524] genl_rcv_msg+0x614/0x7a0 [ 371.196612][T16524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.196634][T16524] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.196738][T16524] ? __pfx_ref_tracker_free+0x10/0x10 [ 371.196810][T16524] netlink_rcv_skb+0x226/0x4a0 [ 371.196832][T16524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.196858][T16524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.196891][T16524] ? down_read+0x2be/0x330 [ 371.196997][T16524] genl_rcv+0x28/0x40 [ 371.197019][T16524] netlink_unicast+0x7bb/0x940 [ 371.197058][T16524] netlink_sendmsg+0x813/0xb40 [ 371.197089][T16524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.197113][T16524] ? aa_sock_msg_perm+0xf1/0x1b0 [ 371.197145][T16524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.197164][T16524] sock_sendmsg_nosec+0x13a/0x180 [ 371.197266][T16524] ____sys_sendmsg+0x54e/0x850 [ 371.197290][T16524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.197318][T16524] ? import_iovec+0x73/0xa0 [ 371.197447][T16524] ___sys_sendmsg+0x2a5/0x360 [ 371.197465][T16524] ? __lock_acquire+0x683/0x2cf0 [ 371.197515][T16524] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.197569][T16524] ? __fget_files+0x2a/0x420 [ 371.197601][T16524] ? __fget_files+0x3a2/0x420 [ 371.197633][T16524] __x64_sys_sendmsg+0x1b1/0x290 [ 371.197656][T16524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.197692][T16524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.197730][T16524] do_syscall_64+0x174/0x580 [ 371.197779][T16524] ? trace_irq_disable+0x3b/0x140 [ 371.197816][T16524] ? clear_bhb_loop+0x40/0x90 [ 371.197839][T16524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.197857][T16524] RIP: 0033:0x7fd69f59de99 [ 371.197903][T16524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.197920][T16524] RSP: 002b:00007fd6a04f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.197946][T16524] RAX: ffffffffffffffda RBX: 00007fd69f825fa0 RCX: 00007fd69f59de99 [ 371.197960][T16524] RDX: 0000000000080014 RSI: 0000200000000400 RDI: 0000000000000005 [ 371.197972][T16524] RBP: 00007fd6a04f7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.197983][T16524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.197994][T16524] R13: 00007fd69f826038 R14: 00007fd69f825fa0 R15: 00007fff789d2e48 [ 371.198026][T16524] [ 372.052960][ T42] bridge0: entered promiscuous mode [ 372.460716][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2968'. [ 372.470048][T16561] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2968'. [ 372.775875][T16570] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2971'. [ 373.048436][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 373.081585][T16583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2976'. [ 373.387482][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.405065][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.413143][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.431183][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.441516][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.051382][ T6417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.153867][T16621] netlink: 'syz.3.2983': attribute type 1 has an invalid length. [ 374.256363][T16630] Set syz1 is full, maxelem 1029 reached [ 374.262385][T16615] netlink: 'syz.3.2983': attribute type 4 has an invalid length. [ 374.349029][ T6417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.579750][ T6417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.743867][ T6417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.869696][T16649] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2989'. [ 374.995091][T16650] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2988'. [ 375.090827][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'. [ 375.158339][T16647] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.192701][T16592] lo speed is unknown, defaulting to 1000 [ 375.351718][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2992'. [ 375.379928][T16661] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2992'. [ 375.530035][ T5637] Bluetooth: hci3: command tx timeout [ 375.710153][ T6417] lo: left allmulticast mode [ 375.883398][T16688] Set syz1 is full, maxelem 1029 reached [ 376.124876][ T6417] bond9 (unregistering): (slave geneve2): Releasing active interface [ 376.253678][ T6417] bond0 (unregistering): (slave team0): Releasing backup interface [ 376.265653][ T6417] tipc: Resetting bearer [ 376.274668][ T6417] tipc: Resetting bearer [ 376.282973][ T6417] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 376.303232][ T6417] bond0 (unregistering): Released all slaves [ 376.313402][ T6417] bond1 (unregistering): Released all slaves [ 376.329252][ T6417] bond2 (unregistering): Released all slaves [ 376.344839][ T6417] bond3 (unregistering): Released all slaves [ 376.364194][ T6417] bond4 (unregistering): Released all slaves [ 376.378252][ T6417] bond5 (unregistering): Released all slaves [ 376.392861][ T6417] bond6 (unregistering): Released all slaves [ 376.406271][ T6417] bond7 (unregistering): Released all slaves [ 376.423919][ T6417] bond8 (unregistering): Released all slaves [ 376.440132][ T6417] bond9 (unregistering): Released all slaves [ 376.456212][ T6417] bond10 (unregistering): Released all slaves [ 376.472062][ T6417] bond11 (unregistering): Released all slaves [ 376.497446][T16678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.573358][T16678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.673489][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 376.697428][ T6417] tipc: Disabling bearer [ 376.715840][ T6417] tipc: Left network mode [ 376.883426][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 376.904844][T16710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 377.002502][T16708] macsec2: entered promiscuous mode [ 377.441303][T16745] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3008'. [ 377.512661][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3008'. [ 377.627329][ T5637] Bluetooth: hci3: command tx timeout [ 378.262144][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 378.326821][T16784] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 378.470056][T16592] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.477569][T16592] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.485589][T16592] bridge_slave_0: entered allmulticast mode [ 378.506038][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.517256][T16592] bridge_slave_0: entered promiscuous mode [ 378.533398][T16592] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.541379][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.549156][T16592] bridge_slave_1: entered allmulticast mode [ 378.557171][T16592] bridge_slave_1: entered promiscuous mode [ 378.714848][T16592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.727635][T16592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.781568][T16592] team0: Port device team_slave_0 added [ 378.816518][T16592] team0: Port device team_slave_1 added [ 379.085144][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 379.119325][T16592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.147073][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.165030][T16832] xt_HMARK: proto mask must be zero with L3 mode [ 379.176885][T16592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.290904][T16592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.317515][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.370036][T16592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.421511][T16845] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 379.687799][ T5637] Bluetooth: hci3: command tx timeout [ 379.803348][T16592] hsr_slave_0: entered promiscuous mode [ 379.836569][T16592] hsr_slave_1: entered promiscuous mode [ 379.870463][T16592] debugfs: 'hsr0' already exists in 'hsr' [ 379.883286][T16592] Cannot create hsr debugfs directory [ 380.081498][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 380.332465][T16883] __nla_validate_parse: 2 callbacks suppressed [ 380.332483][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 380.373257][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3035'. [ 380.821518][ T6845] smc: removing ib device syz1 [ 380.930883][ T3324] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.971043][ T3324] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.028945][ T3324] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.054266][ T3324] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.097257][ T6845] smbdirect: ib_dev[syz1] removed [ 381.120228][T16913] netlink: 432 bytes leftover after parsing attributes in process `syz.3.3041'. [ 381.435339][T16931] netlink: 'syz.2.3042': attribute type 1 has an invalid length. [ 381.551066][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 381.770336][ T5637] Bluetooth: hci3: command tx timeout [ 382.491561][T16957] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3048'. [ 382.570913][T16967] tun0: tun_chr_ioctl cmd 1074812117 [ 382.685705][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3050'. [ 382.713581][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 383.195323][T16980] netlink: 432 bytes leftover after parsing attributes in process `syz.2.3053'. [ 383.292012][T16987] bond13: (slave bond_slave_1): Device is not bonding slave [ 383.339390][T16987] bond13: option active_slave: invalid value (bond_slave_1) [ 383.365234][T16987] bond13 (unregistering): Released all slaves [ 383.608029][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.750133][T16592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.833954][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.873842][T17008] x_tables: duplicate underflow at hook 1 [ 383.979428][T16592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.009944][T17018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 384.045383][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.124140][T16592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.157541][ T6417] IPVS: stop unused estimator thread 0... [ 384.271026][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.326898][T16592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.392438][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.818548][T16592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.897521][T16592] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.939739][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.946955][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.036401][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.043683][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.410119][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 385.534116][T17078] veth1_macvtap: left promiscuous mode [ 386.373453][T17113] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 387.215478][T17145] syzkaller0: entered promiscuous mode [ 387.244831][T17145] syzkaller0: entered allmulticast mode [ 387.295751][T16592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.399961][T17149] siw: device registration error -23 [ 387.583473][T16592] veth0_vlan: entered promiscuous mode [ 387.929002][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 387.967339][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 388.016040][T16592] veth1_vlan: entered promiscuous mode [ 388.028904][T17174] Set syz1 is full, maxelem 1029 reached [ 388.152508][T16592] veth0_macvtap: entered promiscuous mode [ 388.205155][T16592] veth1_macvtap: entered promiscuous mode [ 388.356950][T16592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.533162][T16592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.603271][ T1030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.632824][ T1030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.645957][ T1030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.696495][ T1030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.755921][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 388.901669][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 389.255424][T17212] netlink: 'syz.1.3092': attribute type 9 has an invalid length. [ 389.285413][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.321673][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.584426][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.630281][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.478759][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'. [ 390.512068][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'. [ 390.732766][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.752279][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.761428][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.779399][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.792380][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.076438][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 391.156520][T17264] Set syz1 is full, maxelem 1029 reached [ 391.168762][ T1030] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.185948][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 391.211512][ T1030] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.252854][ T1030] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.324528][ T1030] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.883745][T17284] netlink: 'syz.2.3104': attribute type 3 has an invalid length. [ 391.957999][T17284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3104'. [ 392.004168][ T3723] lo speed is unknown, defaulting to 1000 [ 392.010224][ T9825] lo speed is unknown, defaulting to 1000 [ 392.043290][ T9825] syz2: Port: 1 Link DOWN [ 392.426593][T17253] lo speed is unknown, defaulting to 1000 [ 392.458938][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'. [ 392.706277][T17304] 8021q: adding VLAN 0 to HW filter on device bond11 [ 392.890537][ T5632] Bluetooth: hci1: command tx timeout [ 393.303319][T17318] macvlan5: entered promiscuous mode [ 393.320786][T17318] macvlan5: entered allmulticast mode [ 393.353992][T17318] bond11: entered promiscuous mode [ 393.375383][T17318] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 393.393084][T17318] bond11: left promiscuous mode [ 393.508884][T17334] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3111'. [ 393.623868][T17339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3111'. [ 393.816054][T17303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.842135][T17303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.989751][ T9836] bridge0: entered promiscuous mode [ 394.564409][T17303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.591230][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'. [ 394.602640][T17303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.663995][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'. [ 394.701640][T17370] xt_CT: No such helper "netbios-ns" [ 394.923957][T17303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.955399][T17303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.967810][ T5632] Bluetooth: hci1: command tx timeout [ 395.543031][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.581907][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.722476][ T3324] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.746605][ T3324] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.846299][ T6845] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.872275][ T6845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.885888][T17407] bridge0: port 3(syz_tun) entered blocking state [ 395.894996][T17407] bridge0: port 3(syz_tun) entered disabled state [ 395.920929][T17407] syz_tun: entered allmulticast mode [ 395.941492][T17407] syz_tun: entered promiscuous mode [ 395.952269][T17407] bridge0: port 3(syz_tun) entered blocking state [ 395.958856][T17407] bridge0: port 3(syz_tun) entered forwarding state [ 396.198725][T17427] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 396.233080][ T35] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.242054][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.358228][T17427] 8021q: adding VLAN 0 to HW filter on device bond13 [ 396.369588][T17437] Set syz1 is full, maxelem 1029 reached [ 396.543459][T17436] ip6gre3: entered allmulticast mode [ 396.601242][T17444] netlink: 'syz.1.3129': attribute type 9 has an invalid length. [ 396.651297][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 396.685155][T17253] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.698056][T17253] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.705656][T17253] bridge_slave_0: entered allmulticast mode [ 396.719979][T17253] bridge_slave_0: entered promiscuous mode [ 396.738226][T17253] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.753404][T17253] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.771704][T17253] bridge_slave_1: entered allmulticast mode [ 396.782420][T17253] bridge_slave_1: entered promiscuous mode [ 396.877433][T17253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.894552][T17253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.906282][ T6845] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 396.945452][T17253] team0: Port device team_slave_0 added [ 396.962646][T17253] team0: Port device team_slave_1 added [ 397.048948][ T5632] Bluetooth: hci1: command tx timeout [ 397.132625][T17253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.180822][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.328214][T17253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.376039][T17253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.386610][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 397.407255][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.434748][T17448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.435285][T17253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.458772][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 397.720421][T17253] hsr_slave_0: entered promiscuous mode [ 397.749023][T17253] hsr_slave_1: entered promiscuous mode [ 397.763759][T17253] debugfs: 'hsr0' already exists in 'hsr' [ 397.787058][T17253] Cannot create hsr debugfs directory [ 397.809343][T17471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3134'. [ 397.837801][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3134'. [ 397.958254][T17479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3137'. [ 398.690880][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 398.707369][T17253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.743312][T17253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.765134][T17253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.895516][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 399.001917][T17517] openvswitch: netlink: Message has 12 unknown bytes. [ 399.023976][T17517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.049743][T17253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.083825][T17253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.114629][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3148'. [ 399.127981][T17253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 399.128604][ T5632] Bluetooth: hci1: command tx timeout [ 399.159518][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 399.176176][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 399.279117][T17253] bridge0: port 1(netdevsim1) entered disabled state [ 399.361368][T17253] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 399.377913][T17253] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 399.392235][T17253] bridge0: port 1(netdevsim1) entered disabled state [ 399.434529][T17253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.447150][T17253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.461608][T17253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 399.602841][T17253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.614910][T17253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.625612][T17253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 400.014830][T17253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.051413][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.086027][T17253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.127619][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.163259][T17253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.209809][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.234213][T17253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.273310][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.496714][T17549] syzkaller0: entered promiscuous mode [ 400.508018][T17549] syzkaller0: entered allmulticast mode [ 400.536452][T17561] bond0: option arp_validate: invalid value (55553) [ 400.808312][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 401.746193][T17581] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 403.054709][ T5632] Bluetooth: hci3: command 0x0401 tx timeout [ 403.494257][T17596] __nla_validate_parse: 2 callbacks suppressed [ 403.494290][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 403.564788][T17253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.586422][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 403.624412][T17253] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.655356][T14016] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.662634][T14016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.681436][T17600] netlink: 'syz.2.3171': attribute type 1 has an invalid length. [ 403.719339][T14016] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.726526][T14016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.889574][T17600] bond14: entered promiscuous mode [ 403.908360][T17600] bond14: entered allmulticast mode [ 403.915307][T17600] 8021q: adding VLAN 0 to HW filter on device bond14 [ 404.176862][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3174'. [ 404.179673][T17253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.854878][T17644] lo speed is unknown, defaulting to 1000 [ 405.294029][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 405.321992][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 405.934660][T17684] syzkaller0: entered promiscuous mode [ 405.949283][T17684] syzkaller0: entered allmulticast mode [ 406.182955][T17253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.278551][T17694] SET target dimension over the limit! [ 406.294060][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 406.461215][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 406.508762][T17708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3194'. [ 407.044833][T17253] veth0_vlan: entered promiscuous mode [ 407.053997][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 407.107538][T17253] veth1_vlan: entered promiscuous mode [ 407.263303][T17253] veth0_macvtap: entered promiscuous mode [ 407.291153][T17253] veth1_macvtap: entered promiscuous mode [ 407.322518][T17726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3201'. [ 407.365711][T17726] sit0: entered promiscuous mode [ 407.416766][T17726] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 407.464221][T17253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.561877][T17253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.606894][T17714] No such timeout policy "syz1" [ 407.627217][ T6845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.648536][T17714] netlink: zone id is out of range [ 407.672037][ T6845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.675211][T17714] netlink: zone id is out of range [ 407.711762][T17714] netlink: zone id is out of range [ 407.722709][T17714] netlink: zone id is out of range [ 407.754637][T17714] netlink: zone id is out of range [ 407.761108][ T6845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.761209][ T6845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.788178][T17714] netlink: zone id is out of range [ 407.838780][T17714] netlink: zone id is out of range [ 407.874256][T17714] netlink: zone id is out of range [ 407.915825][T17714] netlink: zone id is out of range [ 407.982686][T17714] netlink: zone id is out of range [ 408.217663][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.237258][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.484339][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.512699][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.715446][T17762] lo speed is unknown, defaulting to 1000 [ 409.172982][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.192278][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.202443][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.228719][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.241812][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.652753][T17786] __nla_validate_parse: 4 callbacks suppressed [ 409.652793][T17786] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3218'. [ 409.711618][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 409.847934][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 410.242831][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 410.375968][T17799] vlan2: entered promiscuous mode [ 410.399105][T17799] bond0: entered promiscuous mode [ 410.418249][T17799] bond_slave_0: entered promiscuous mode [ 410.431973][T17799] bond_slave_1: entered promiscuous mode [ 410.683407][T17778] lo speed is unknown, defaulting to 1000 [ 410.812479][T17818] x_tables: duplicate underflow at hook 3 [ 410.992407][T17825] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 411.371833][ T5637] Bluetooth: hci2: command tx timeout [ 411.492322][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 411.845557][T17828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.877035][T17835] vlan6: entered promiscuous mode [ 411.887086][T17835] veth0_to_bridge: entered promiscuous mode [ 412.036133][T17852] sctp: [Deprecated]: syz.4.3236 (pid 17852) Use of int in maxseg socket option. [ 412.036133][T17852] Use struct sctp_assoc_value instead [ 412.795438][T17863] net_ratelimit: 34 callbacks suppressed [ 412.795593][T17863] Set syz1 is full, maxelem 1029 reached [ 412.902894][T17873] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 413.079695][T17878] xt_hashlimit: size too large, truncated to 1048576 [ 413.345281][T17882] sctp: [Deprecated]: syz.0.3245 (pid 17882) Use of int in max_burst socket option deprecated. [ 413.345281][T17882] Use struct sctp_assoc_value instead [ 413.451616][ T5637] Bluetooth: hci2: command tx timeout [ 413.760298][T17778] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.792629][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.801639][T17778] bridge_slave_0: entered allmulticast mode [ 413.812362][T17778] bridge_slave_0: entered promiscuous mode [ 413.825200][T17778] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.833585][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.842153][T17778] bridge_slave_1: entered allmulticast mode [ 413.856138][T17778] bridge_slave_1: entered promiscuous mode [ 414.033027][T17778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.066091][T17778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.141657][T17924] Set syz1 is full, maxelem 1029 reached [ 414.175801][T17778] team0: Port device team_slave_0 added [ 414.431560][T17778] team0: Port device team_slave_1 added [ 414.723541][T17778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.747259][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.839433][T17778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.855302][ T3723] IPVS: starting estimator thread 0... [ 414.880981][T17778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.901797][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.932514][T17959] netlink: 'syz.0.3261': attribute type 11 has an invalid length. [ 414.946524][T17959] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3261'. [ 414.972636][T17956] IPVS: using max 31 ests per chain, 74400 per kthread [ 415.020349][T17778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.090396][T17965] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 415.101302][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.106743][T17965] netlink: 756 bytes leftover after parsing attributes in process `syz.4.3264'. [ 415.179613][T17951] bridge_slave_0 (unregistering): left allmulticast mode [ 415.207307][T17951] bridge_slave_0 (unregistering): left promiscuous mode [ 415.220292][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 415.229195][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.528151][ T5637] Bluetooth: hci2: command tx timeout [ 415.839552][T17981] netlink: 'syz.3.3263': attribute type 4 has an invalid length. [ 416.527428][T17778] hsr_slave_0: entered promiscuous mode [ 417.968688][ T5637] Bluetooth: hci2: command tx timeout [ 419.451119][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 420.747526][ C1] sched: DL replenish lagged too much [ 424.570475][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 427.144762][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 440.517135][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.986838][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 471.643533][T17778] hsr_slave_1: entered promiscuous mode [ 482.964727][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 502.686781][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.498222][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 513.559446][ T5626] Bluetooth: hci3: command 0x0401 tx timeout [ 514.179429][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 537.236017][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 547.458225][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 552.569842][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.786999][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 599.617718][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 599.624712][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1170/1:b..l P4988/1:b..l P5283/1:b..l [ 599.635425][ C0] rcu: (detected by 0, t=10503 jiffies, g=78993, q=3493 ncpus=2) [ 599.643257][ C0] task:dhcpcd state:R running task stack:21736 pid:5283 tgid:5283 ppid:5282 task_flags:0x400140 flags:0x00080800 [ 599.658004][ C0] Call Trace: [ 599.661303][ C0] [ 599.664244][ C0] __schedule+0x17d9/0x56c0 [ 599.668794][ C0] ? __pfx___schedule+0x10/0x10 [ 599.673684][ C0] preempt_schedule_irq+0x4d/0xa0 [ 599.678722][ C0] irqentry_exit+0x14f/0x8f0 [ 599.683317][ C0] ? trace_irq_disable+0x3b/0x140 [ 599.688367][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.694374][ C0] RIP: 0010:unwind_next_frame+0xb46/0x2550 [ 599.700252][ C0] Code: 00 83 fe 02 0f 85 a2 07 00 00 48 89 5c 24 48 49 8d 7e 08 48 89 fb 48 c1 eb 03 42 80 3c 23 00 74 09 e8 8e ff bc 00 4c 8b 04 24 <4d> 8b 7e 08 49 8d 7e 10 49 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 [ 599.719877][ C0] RSP: 0018:ffffc90003447620 EFLAGS: 00000246 [ 599.725963][ C0] RAX: 0000000000000000 RBX: 1ffff92000688eda RCX: ffffffff907a6a84 [ 599.733947][ C0] RDX: ffffffff90fd3b9c RSI: 0000000000000002 RDI: ffffc900034476d0 [ 599.741930][ C0] RBP: 1ffffffff21fa773 R08: ffffc90003447970 R09: 0000000000000000 [ 599.749911][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 599.757885][ C0] R13: ffffffff90fd3b98 R14: ffffc900034476c8 R15: 1ffff92000688ed9 [ 599.765887][ C0] ? __reset_page_owner+0x71/0x1f0 [ 599.771055][ C0] ? unwind_next_frame+0x8f/0x2550 [ 599.776185][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 599.782390][ C0] arch_stack_walk+0x11b/0x150 [ 599.787195][ C0] ? __reset_page_owner+0x71/0x1f0 [ 599.792414][ C0] stack_trace_save+0xa9/0x100 [ 599.797226][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 599.802645][ C0] save_stack+0x122/0x230 [ 599.806997][ C0] ? __pfx_save_stack+0x10/0x10 [ 599.811880][ C0] ? page_ext_put+0x97/0xc0 [ 599.816416][ C0] __reset_page_owner+0x71/0x1f0 [ 599.821398][ C0] __free_frozen_pages+0xc1e/0xd10 [ 599.826566][ C0] ? __free_slab+0x172/0x280 [ 599.831168][ C0] __slab_free+0x274/0x2c0 [ 599.835609][ C0] ? qlist_free_all+0x8e/0x100 [ 599.840429][ C0] qlist_free_all+0x99/0x100 [ 599.845046][ C0] kasan_quarantine_reduce+0x148/0x160 [ 599.850522][ C0] __kasan_slab_alloc+0x22/0x80 [ 599.855388][ C0] ? __kmalloc_cache_noprof+0x150/0x660 [ 599.860945][ C0] __kmalloc_cache_noprof+0x2ab/0x660 [ 599.866329][ C0] ? __pfx_vma_policy_mof+0x10/0x10 [ 599.871628][ C0] ? __kmalloc_cache_noprof+0x150/0x660 [ 599.877193][ C0] ? task_numa_work+0x9be/0x15b0 [ 599.882143][ C0] ? task_numa_work+0x9be/0x15b0 [ 599.887098][ C0] task_numa_work+0x9be/0x15b0 [ 599.891883][ C0] ? __lock_acquire+0x683/0x2cf0 [ 599.896852][ C0] ? __pfx_task_numa_work+0x10/0x10 [ 599.902422][ C0] ? file_init_path+0x3b/0x5a0 [ 599.907248][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.912558][ C0] task_work_run+0x1d9/0x270 [ 599.917302][ C0] ? __pfx_task_work_run+0x10/0x10 [ 599.922461][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 599.927868][ C0] ? rcu_is_watching+0x15/0xb0 [ 599.932657][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.938741][ C0] do_syscall_64+0x353/0x580 [ 599.943353][ C0] ? clear_bhb_loop+0x40/0x90 [ 599.948060][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.953966][ C0] RIP: 0033:0x7fc08ea1073a [ 599.958391][ C0] RSP: 002b:00007ffc732d49e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 599.966857][ C0] RAX: 0000000000000000 RBX: 0000562149e6aab0 RCX: 00007fc08ea1073a [ 599.974848][ C0] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 599.982823][ C0] RBP: 00007ffc732f4e10 R08: 0000000000000000 R09: 0000000000000001 [ 599.990801][ C0] R10: 00007ffc732d4a00 R11: 0000000000000246 R12: 00007ffc732d4a00 [ 599.998783][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 000056213be26ac0 [ 600.006784][ C0] [ 600.009809][ C0] task:udevd state:R running task stack:23400 pid:4988 tgid:4988 ppid:1 task_flags:0x400140 flags:0x00080000 [ 600.023313][ C0] Call Trace: [ 600.026600][ C0] [ 600.029545][ C0] __schedule+0x17d9/0x56c0 [ 600.034076][ C0] ? __lock_acquire+0x683/0x2cf0 [ 600.039036][ C0] ? __pfx___schedule+0x10/0x10 [ 600.043922][ C0] ? __pfx___schedule+0x10/0x10 [ 600.048815][ C0] preempt_schedule_irq+0x4d/0xa0 [ 600.053848][ C0] irqentry_exit+0x14f/0x8f0 [ 600.058452][ C0] ? trace_irq_disable+0x3b/0x140 [ 600.063494][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 600.069495][ C0] RIP: 0010:memset_orig+0x15/0xb0 [ 600.074534][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 [ 600.094245][ C0] RSP: 0018:ffffc900031a72d8 EFLAGS: 00000206 [ 600.100333][ C0] RAX: 0000000000000000 RBX: ffffc900031a73d8 RCX: 0000000000000000 [ 600.108487][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900031a73d8 [ 600.116475][ C0] RBP: 1ffffffff21f9090 R08: ffffc900031a73e7 R09: 1ffff92000634e7c [ 600.124468][ C0] R10: ffffc900031a73d8 R11: fffff52000634e7d R12: dffffc0000000000 [ 600.132539][ C0] R13: ffffffff90fc8480 R14: ffffc900031a7388 R15: ffffc900031a73d0 [ 600.140544][ C0] unwind_next_frame+0xd04/0x2550 [ 600.145604][ C0] ? qlist_free_all+0x99/0x100 [ 600.150579][ C0] ? unwind_next_frame+0x8f/0x2550 [ 600.155712][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 600.161889][ C0] arch_stack_walk+0x11b/0x150 [ 600.166760][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 600.172417][ C0] stack_trace_save+0xa9/0x100 [ 600.177817][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 600.183204][ C0] ? __lock_acquire+0x683/0x2cf0 [ 600.188181][ C0] save_stack+0x122/0x230 [ 600.192542][ C0] ? __pfx_save_stack+0x10/0x10 [ 600.197409][ C0] ? page_ext_get+0x22/0x2e0 [ 600.202036][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 600.207346][ C0] ? __slab_free+0x274/0x2c0 [ 600.211959][ C0] ? qlist_free_all+0x99/0x100 [ 600.216755][ C0] ? page_ext_put+0x97/0xc0 [ 600.221398][ C0] __reset_page_owner+0x71/0x1f0 [ 600.226365][ C0] __free_frozen_pages+0xc1e/0xd10 [ 600.231504][ C0] ? __free_slab+0x172/0x280 [ 600.236121][ C0] __slab_free+0x274/0x2c0 [ 600.240567][ C0] ? qlist_free_all+0x8e/0x100 [ 600.245354][ C0] qlist_free_all+0x99/0x100 [ 600.249956][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 600.254997][ C0] kasan_quarantine_reduce+0x148/0x160 [ 600.260473][ C0] __kasan_slab_alloc+0x22/0x80 [ 600.265341][ C0] __kmalloc_noprof+0x311/0x720 [ 600.270205][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 600.275497][ C0] ? tomoyo_encode+0x2ad/0x570 [ 600.280355][ C0] ? tomoyo_encode+0x2ad/0x570 [ 600.285139][ C0] tomoyo_encode+0x2ad/0x570 [ 600.289746][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 600.295415][ C0] tomoyo_path_perm+0x283/0x560 [ 600.300371][ C0] ? tomoyo_path_perm+0x251/0x560 [ 600.305424][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 600.310871][ C0] security_inode_getattr+0x12b/0x310 [ 600.316282][ C0] vfs_getattr+0x23/0x70 [ 600.320650][ C0] vfs_statx_path+0x2b/0x230 [ 600.325445][ C0] ? vfs_statx+0x107/0x200 [ 600.329986][ C0] vfs_statx+0x12e/0x200 [ 600.334257][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 600.339037][ C0] ? strncpy_from_user+0x150/0x2c0 [ 600.344175][ C0] ? do_getname+0x151/0x250 [ 600.348701][ C0] vfs_fstatat+0x11b/0x170 [ 600.353137][ C0] __x64_sys_newfstatat+0x151/0x200 [ 600.358355][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 600.364106][ C0] ? rcu_is_watching+0x15/0xb0 [ 600.368899][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.374973][ C0] do_syscall_64+0x174/0x580 [ 600.379583][ C0] ? clear_bhb_loop+0x40/0x90 [ 600.384277][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.390230][ C0] RIP: 0033:0x7f9974f11b0a [ 600.394826][ C0] RSP: 002b:00007ffee15052a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 600.403248][ C0] RAX: ffffffffffffffda RBX: 000055aca4893408 RCX: 00007f9974f11b0a [ 600.411228][ C0] RDX: 00007ffee15052b0 RSI: 000055aca4881ef3 RDI: 00000000ffffff9c [ 600.419210][ C0] RBP: 000055acc43de148 R08: 00063489548db180 R09: 3fffffffffffffff [ 600.427190][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.435219][ C0] R13: 00007ffee15052b0 R14: 0000000000000000 R15: 00063489548db180 [ 600.443222][ C0] [ 600.446249][ C0] task:kworker/u8:9 state:R running task stack:20752 pid:1170 tgid:1170 ppid:2 task_flags:0x24248060 flags:0x00080000 [ 600.459933][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 600.465982][ C0] Call Trace: [ 600.469269][ C0] [ 600.472214][ C0] __schedule+0x17d9/0x56c0 [ 600.476772][ C0] ? __pfx___schedule+0x10/0x10 [ 600.481658][ C0] ? __lock_acquire+0x683/0x2cf0 [ 600.486624][ C0] preempt_schedule_irq+0x4d/0xa0 [ 600.491658][ C0] irqentry_exit+0x14f/0x8f0 [ 600.496256][ C0] ? trace_irq_disable+0x3b/0x140 [ 600.501301][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 600.507295][ C0] RIP: 0010:unwind_next_frame+0xcff/0x2550 [ 600.513117][ C0] Code: 20 00 49 8d 5e 38 4c 8b 6c 24 18 74 08 48 89 df e8 d6 fe bc 00 48 8b 04 24 48 89 03 ba 10 00 00 00 49 8d 5e 50 48 89 df 31 f6 9c 00 bd 00 48 8b 54 24 08 e9 c7 04 00 00 48 89 5c 24 48 49 8d [ 600.532922][ C0] RSP: 0000:ffffc9000569e6e0 EFLAGS: 00000246 [ 600.539008][ C0] RAX: ffffc9000569ec58 RBX: ffffc9000569e7d8 RCX: 1ffff92000ad3c01 [ 600.547018][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000569e7d8 [ 600.555003][ C0] RBP: 1ffffffff21f729c R08: ffffc9000569ec58 R09: 0000000000000000 [ 600.562993][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 600.570975][ C0] R13: ffffffff90fb94e0 R14: ffffc9000569e788 R15: ffffc9000569e7d0 [ 600.578984][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 600.584644][ C0] ? unwind_next_frame+0x8f/0x2550 [ 600.589775][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 600.595945][ C0] arch_stack_walk+0x11b/0x150 [ 600.600728][ C0] ? ext4_init_io_end+0x29/0x130 [ 600.605751][ C0] stack_trace_save+0xa9/0x100 [ 600.610533][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 600.615947][ C0] save_stack+0x122/0x230 [ 600.620297][ C0] ? __pfx_save_stack+0x10/0x10 [ 600.625164][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 600.630465][ C0] ? __slab_free+0x274/0x2c0 [ 600.635071][ C0] ? qlist_free_all+0x99/0x100 [ 600.639851][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 600.645500][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 600.650625][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 600.656283][ C0] ? page_ext_put+0x97/0xc0 [ 600.660803][ C0] __reset_page_owner+0x71/0x1f0 [ 600.665757][ C0] __free_frozen_pages+0xc1e/0xd10 [ 600.670884][ C0] ? __free_slab+0x172/0x280 [ 600.675486][ C0] __slab_free+0x274/0x2c0 [ 600.679921][ C0] ? qlist_free_all+0x8e/0x100 [ 600.684875][ C0] qlist_free_all+0x99/0x100 [ 600.689485][ C0] kasan_quarantine_reduce+0x148/0x160 [ 600.694968][ C0] __kasan_slab_alloc+0x22/0x80 [ 600.699848][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 600.705320][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 600.710967][ C0] ? ext4_init_io_end+0x29/0x130 [ 600.715909][ C0] ? ext4_init_io_end+0x29/0x130 [ 600.720865][ C0] ext4_init_io_end+0x29/0x130 [ 600.725640][ C0] ext4_do_writepages+0xc06/0x47a0 [ 600.730801][ C0] ? pick_task_fair+0x13d/0x1320 [ 600.735763][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 600.740992][ C0] ? rcu_is_watching+0x15/0xb0 [ 600.745872][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 600.751436][ C0] ? __lock_acquire+0x683/0x2cf0 [ 600.756395][ C0] ? __lock_acquire+0x683/0x2cf0 [ 600.761357][ C0] ? __lock_acquire+0x683/0x2cf0 [ 600.766316][ C0] ? ext4_writepages+0x205/0x3b0 [ 600.771269][ C0] ? ext4_writepages+0x205/0x3b0 [ 600.776238][ C0] ext4_writepages+0x241/0x3b0 [ 600.781018][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 600.786330][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 600.791451][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 600.796755][ C0] do_writepages+0x338/0x560 [ 600.801412][ C0] ? reacquire_held_locks+0x104/0x190 [ 600.806806][ C0] ? writeback_sb_inodes+0x450/0x1b00 [ 600.812198][ C0] __writeback_single_inode+0x12e/0xf90 [ 600.817771][ C0] writeback_sb_inodes+0x9de/0x1b00 [ 600.823007][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 600.828694][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 600.834182][ C0] __writeback_inodes_wb+0x114/0x240 [ 600.839492][ C0] wb_writeback+0x42f/0xad0 [ 600.844009][ C0] ? queue_io+0x221/0x470 [ 600.848358][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 600.853396][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.858445][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.864184][ C0] wb_workfn+0xc92/0x10f0 [ 600.868550][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 600.873324][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.878368][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 600.883499][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.889239][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.895064][ C0] ? rcu_is_watching+0x15/0xb0 [ 600.899848][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 600.905579][ C0] process_scheduled_works+0xa8e/0x14e0 [ 600.911164][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.917161][ C0] ? assign_work+0x3cf/0x5d0 [ 600.921778][ C0] worker_thread+0xa47/0xfb0 [ 600.926395][ C0] ? __kthread_parkme+0x71/0x1f0 [ 600.931360][ C0] kthread+0x388/0x470 [ 600.935453][ C0] ? __pfx_worker_thread+0x10/0x10 [ 600.940591][ C0] ? __pfx_kthread+0x10/0x10 [ 600.945204][ C0] ret_from_fork+0x514/0xb70 [ 600.949816][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 600.954945][ C0] ? __switch_to+0xc89/0x1420 [ 600.959636][ C0] ? __pfx_kthread+0x10/0x10 [ 600.964245][ C0] ret_from_fork_asm+0x1a/0x30 [ 600.969036][ C0] [ 600.972057][ C0] rcu: rcu_preempt kthread starved for 9972 jiffies! g78993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 600.983186][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 600.993250][ C0] rcu: RCU grace-period kthread stack dump: [ 600.999139][ C0] task:rcu_preempt state:R running task stack:28192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 601.012744][ C0] Call Trace: [ 601.016037][ C0] [ 601.018979][ C0] __schedule+0x17d9/0x56c0 [ 601.023512][ C0] ? __lock_acquire+0x683/0x2cf0 [ 601.028491][ C0] ? __pfx___schedule+0x10/0x10 [ 601.033393][ C0] ? schedule+0x90/0x2b0 [ 601.037654][ C0] schedule+0x164/0x2b0 [ 601.041818][ C0] schedule_timeout+0x152/0x2c0 [ 601.046684][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 601.052074][ C0] ? __pfx_process_timeout+0x10/0x10 [ 601.057466][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 601.063289][ C0] ? prepare_to_swait_event+0x322/0x350 [ 601.068854][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 601.073737][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 601.079920][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 601.085236][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 601.090724][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 601.096557][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 601.101170][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 601.106386][ C0] ? __kthread_parkme+0x71/0x1f0 [ 601.111351][ C0] ? __kthread_parkme+0x196/0x1f0 [ 601.116406][ C0] kthread+0x388/0x470 [ 601.120586][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 601.125799][ C0] ? __pfx_kthread+0x10/0x10 [ 601.130437][ C0] ret_from_fork+0x514/0xb70 [ 601.135052][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 601.140180][ C0] ? __switch_to+0xc89/0x1420 [ 601.144915][ C0] ? __pfx_kthread+0x10/0x10 [ 601.149524][ C0] ret_from_fork_asm+0x1a/0x30 [ 601.154313][ C0] [ 601.157336][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 601.163674][ C0] Sending NMI from CPU 0 to CPUs 1: [ 601.168904][ C1] NMI backtrace for cpu 1 [ 601.168920][ C1] CPU: 1 UID: 0 PID: 3228 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 601.168940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.168951][ C1] Workqueue: bat_events batadv_tt_purge [ 601.169097][ C1] RIP: 0010:__lock_acquire+0x477/0x2cf0 [ 601.169123][ C1] Code: 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce c0 0b 00 00 31 c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf 17 48 c7 c7 90 7f a2 8e 4c 89 fe e8 b8 e9 6d 03 8b 45 20 eb cf [ 601.169139][ C1] RSP: 0018:ffffc90000a07c18 EFLAGS: 00000006 [ 601.169153][ C1] RAX: 0000000000022007 RBX: 0000000000000002 RCX: 0000000000062822 [ 601.169164][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 601.169175][ C1] RBP: ffff888032a64a40 R08: ffffffff8176f27f R09: 0000000000000000 [ 601.169187][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000000 [ 601.169198][ C1] R13: 0000000000000000 R14: ffff888032a63e00 R15: 0000000000000001 [ 601.169209][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 601.169222][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.169234][ C1] CR2: 00007f2165800218 CR3: 000000000e946000 CR4: 00000000003526f0 [ 601.169249][ C1] Call Trace: [ 601.169256][ C1] [ 601.169268][ C1] ? __lock_acquire+0x683/0x2cf0 [ 601.169292][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169308][ C1] ? lock_acquire+0x106/0x350 [ 601.169331][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169346][ C1] lock_acquire+0x106/0x350 [ 601.169372][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169392][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169407][ C1] ? __napi_poll+0xaa/0x330 [ 601.169490][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169506][ C1] unwind_next_frame+0xac/0x2550 [ 601.169522][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169539][ C1] ? process_backlog+0xa34/0x1860 [ 601.169562][ C1] ? unwind_next_frame+0x8f/0x2550 [ 601.169579][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.169601][ C1] arch_stack_walk+0x11b/0x150 [ 601.169619][ C1] ? __napi_poll+0xaa/0x330 [ 601.169642][ C1] stack_trace_save+0xa9/0x100 [ 601.169661][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 601.169681][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 601.169700][ C1] kasan_save_track+0x3e/0x80 [ 601.169720][ C1] ? kasan_save_track+0x3e/0x80 [ 601.169739][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 601.169760][ C1] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 601.169780][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 601.169829][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 601.169904][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 601.169985][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 601.170006][ C1] ? nft_do_chain+0x48d/0x1b10 [ 601.170028][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 601.170096][ C1] ? nf_hook_slow+0xc5/0x220 [ 601.170143][ C1] ? NF_HOOK+0x21f/0x3c0 [ 601.170198][ C1] ? NF_HOOK+0x336/0x3c0 [ 601.170215][ C1] ? process_backlog+0xa34/0x1860 [ 601.170237][ C1] ? __napi_poll+0xaa/0x330 [ 601.170286][ C1] __kasan_slab_alloc+0x6c/0x80 [ 601.170307][ C1] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 601.170328][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 601.170364][ C1] ? local_lock_release+0x9c/0x160 [ 601.170387][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 601.170406][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 601.170428][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 601.170455][ C1] __alloc_skb+0x1d7/0x7a0 [ 601.170480][ C1] synproxy_send_client_synack+0x175/0xde0 [ 601.170503][ C1] ? lock_acquire+0x106/0x350 [ 601.170524][ C1] ? synproxy_pernet+0x45/0x270 [ 601.170548][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 601.170569][ C1] ? nft_synproxy_validate+0xd0/0xd0 [ 601.170592][ C1] ? synproxy_pernet+0x45/0x270 [ 601.170616][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 601.170641][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 601.170665][ C1] ? nf_ip_checksum+0x13c/0x510 [ 601.170715][ C1] nft_synproxy_do_eval+0x335/0x550 [ 601.170739][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 601.170761][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 601.170847][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 601.170873][ C1] nft_do_chain+0x48d/0x1b10 [ 601.170906][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 601.170928][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 601.170954][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 601.171016][ C1] nft_do_chain_inet+0x360/0x4b0 [ 601.171041][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 601.171064][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 601.171083][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 601.171103][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 601.171126][ C1] nf_hook_slow+0xc5/0x220 [ 601.171148][ C1] NF_HOOK+0x21f/0x3c0 [ 601.171167][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 601.171187][ C1] ? NF_HOOK+0x9e/0x3c0 [ 601.171205][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 601.171224][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 601.171247][ C1] ? ip_local_deliver+0x113/0x190 [ 601.171267][ C1] NF_HOOK+0x336/0x3c0 [ 601.171286][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 601.171305][ C1] ? NF_HOOK+0x9e/0x3c0 [ 601.171322][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 601.171342][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 601.171360][ C1] ? ip_rcv_core+0x88d/0xd50 [ 601.171381][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 601.171399][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 601.171417][ C1] process_backlog+0xa34/0x1860 [ 601.171442][ C1] ? process_backlog+0x3c3/0x1860 [ 601.171470][ C1] __napi_poll+0xaa/0x330 [ 601.171493][ C1] net_rx_action+0x61d/0xf50 [ 601.171521][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 601.171556][ C1] handle_softirqs+0x225/0x840 [ 601.171576][ C1] ? do_softirq+0x76/0xd0 [ 601.171596][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 601.171619][ C1] do_softirq+0x76/0xd0 [ 601.171636][ C1] [ 601.171642][ C1] [ 601.171647][ C1] __local_bh_enable_ip+0xf8/0x130 [ 601.171666][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 601.171693][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 601.171712][ C1] batadv_tt_purge+0x35/0xa10 [ 601.171736][ C1] ? rcu_is_watching+0x15/0xb0 [ 601.171762][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 601.171780][ C1] process_scheduled_works+0xa8e/0x14e0 [ 601.171809][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.171827][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.171848][ C1] ? assign_work+0x3af/0x5d0 [ 601.171867][ C1] rescuer_thread+0x7b6/0x10b0 [ 601.171890][ C1] ? rescuer_thread+0xb8/0x10b0 [ 601.171923][ C1] kthread+0x388/0x470 [ 601.171946][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 601.171965][ C1] ? __pfx_kthread+0x10/0x10 [ 601.171988][ C1] ret_from_fork+0x514/0xb70 [ 601.172012][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 601.172035][ C1] ? __switch_to+0xc89/0x1420 [ 601.172055][ C1] ? __pfx_kthread+0x10/0x10 [ 601.172078][ C1] ret_from_fork_asm+0x1a/0x30 [ 601.172099][ C1] [ 602.846776][ T30] INFO: task kworker/u8:11:6408 blocked for more than 180 seconds. [ 602.865909][ T30] Not tainted syzkaller #0 [ 608.965863][ T1317] ieee802154 phy1 wpan1: encryption failed: -22