last executing test programs: 26.852004252s ago: executing program 3 (id=1520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x74, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x5c, 0x1, 0x0, 0x1, [@nested={0x58, 0x5c, 0x0, 0x1, [@generic="2dde06dd2d6fb527ff41e9716a45cce84f369c2a36346365fd7f05704d7102cd0898a0a0a91a923e7e7a7afe1ceb1d3ce47c0e7b6a133a34ed1ecb8f348616e8abb9ea", @generic="9c733c3c70c7af1225882ffac8", @nested={0x4, 0x12b}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x4c, 0xfffffffffffffd83, &(0x7f0000000480)="88b8f99dbfdc837928422a2c1609faf8d1c4b07641bf9b43872047c9cbbb0ced81c7860849dded3e42c01b688e713247e76c64a0a26c66189037950e524600"/76, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x81}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000180)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYRES8=r15, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080001000d0c00454afc06e0592297cd3b56dd729d450205460768b300bbd572000bc922a332bca5caad310457d7546bca09cee016b8c8f63e0070cfc9add9123795797622a129097ee31ad7c1b7f16b8489e00a3af438ff0d94f4c460efcfefcc45dfb8dc3b09663ba7257055f0f85bf54667d7fd94b24d7e5ed0788451ee6b4c8c4f0b807bfab4b1e8e0c581ea0ba1749c25d79c4edf135319c0a9153edd670acd8953bac7bb70b04bcf9f", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB='\x00', @ANYRES32=r17, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20840}, 0x10000040) r18 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r18, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fe8000000000000000000000000000bb4e200000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000030000000000000000000000000000000025bd70004400100000000000000000000000000000000000000000000000000000000000fe88000000000000000000000000010100"/196], 0x16c}}, 0x0) 26.341549812s ago: executing program 1 (id=1526): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 25.692556624s ago: executing program 0 (id=1533): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r5, &(0x7f0000000300)={@void, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x2c, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e60, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0x200, 0x0, 0x4, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x3e) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000140)={'veth0_to_bridge\x00'}) 23.86961025s ago: executing program 4 (id=1536): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 23.684408126s ago: executing program 1 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23.476867033s ago: executing program 3 (id=1539): r0 = socket$kcm(0xa, 0x5, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0500e2", 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x1, 0xe}], {{0x8000, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x6}}}}}}}, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f0000000900)}, 0x10) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000306010800000000000000000300000605000100070000000900020073797a320000000005000100060000000000000073797a56000000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd700004000000050000000a0009000200000008000c00a50a000008000b2f8800000006000100070000000500120009000000"], 0x3c}}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r13}}, 0x18}, 0x1, 0x0, 0x0, 0x410}, 0x0) (async) close(0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r14) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23.136470655s ago: executing program 4 (id=1540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT, @ANYBLOB="2b202df3ac926af9ea4aa861a27a58fa38f399745cb7f8ce2ccf164f3f63addcef", @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xd8, &(0x7f0000009a40)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r2], 0xc4}}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073319e310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a000009090001007379000000000000eeff020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 23.018690122s ago: executing program 3 (id=1542): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x71, 0x0, &(0x7f0000000440)=0x9b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) close(r0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000600000000002d4c00"/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x6, 0x2, 0x1, @private2, @mcast2, 0x27, 0x0, 0x6, 0xb}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x0, 0x26}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000780)=0x2) write$cgroup_int(r7, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r7, r6, 0x0, 0xbdc4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000020000009500000000000000950000000000000095970001010000ecb7536e0000000000196654c2ccfce5e96b3df8330cf9f159fe634919bdab12f509b228de92e472cfa24a2d617b234115795593513c05e824660dc759d9df199f59"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) select(0x40, &(0x7f0000000240)={0x4, 0x6, 0x2, 0x10001, 0x4, 0x2, 0x0, 0x37d}, &(0x7f0000000480)={0x800, 0x2, 0x6, 0x1, 0x0, 0x4, 0x3ff, 0x8}, &(0x7f0000000700)={0x5, 0x3, 0xffffffffffffffff, 0x66, 0x0, 0x9, 0x0, 0x7}, &(0x7f0000000740)={0x77359400}) sendmsg(r7, &(0x7f0000000680)={&(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="5dadf31cc00030965def9079e982bd79e222ce34287e49ab5fcd817ad67c8734cb99f76e5d1f3648150a5220e7ec2efc5d087d71aa0c9a8e0363de63d1f94b772a80f03526e180ba5a4e6cb372c1ce2fdba0f8c3e91170515f9be75908ae03aed33ec66c81f276253f96111eae35baf558ae82c6a72be16ecdba2e008800458a11da54acc1e31d484c2c5ead77906c54257e77172794e7b28f0e75520c4266baed2a395bfab9651393ff1f058a1a24a0e1540986a4603231980e", 0xba}, {&(0x7f00000005c0)="7bab640619cb11958e3390a454241ed71578f2d8c198589f9a9041df5223bb8b39e027f4354a7f5bd1401a7336599460789f67e59dd06258f1e22dd1e3edc0382880554e3c743bccd7feeb", 0x4b}], 0x2}, 0x40004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x6, 0x2, 0xf9, 0x12380, r3, 0x1, '\x00', r8, r4, 0x4, 0x4, 0x3, 0x0, @void, @value, @value=r9}, 0x50) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r11, 0x8982, &(0x7f00000006c0)={0x8, 'veth0_virt_wifi\x00', {'team_slave_1\x00'}, 0x3}) accept4(r10, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.710467059s ago: executing program 4 (id=1544): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000540)={{r2, &(0x7f0000000200)='[\x9a(-\'%*$}\x00', 0x104a0, &(0x7f0000000300)={@align=0x1000000000007, {0x9, 0x4, 0x4, 0x100000000}}, 0xa, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xb1}, {[0x0, 0x4, 0x7ff, 0x5]}, 0xc000, 0x0, &(0x7f00000003c0)}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000006800090300000000000000000a00000000000006040004005200060000341cfe600fe9bd1a49f590480a000000000000000000ffff0a0101029378ab3ab827ac4cd3862e1cdcec6eae20400b43d5660e3ad1fce79ba1ae713a3c8d44b383cb49df8d27f337e8d57f2141337ccdb3a16bb0ab92f950077ad8b840684ffdfaaa211656"], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000940)=""/238, &(0x7f0000000a40)=0xee) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=@deltfilter={0x44, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0x5}, {0xfff2, 0xb}, {0xb, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x47}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000780)={r3}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000008c0)={{r6, &(0x7f0000000400)='^$*^\x00', 0x40, &(0x7f00000005c0)={@_ha_fsid={[0x2f, 0xfffff5b6]}, {0x33, 0xff, 0x9, 0xfffffffffffffff1}}, 0x6, &(0x7f0000000700), &(0x7f0000000740)=0x3a}, {[0x7ff, 0x4, 0x6, 0x4]}, 0xf, 0x45, &(0x7f0000000840)=""/69}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x59a, 0x4c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0xfffffffffffffffc) 22.615938931s ago: executing program 1 (id=1545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x81}}]}, 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000052c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}}], 0x1, 0x20040814) 22.3021669s ago: executing program 1 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) recvmmsg(r8, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000500)=""/4103, 0x1007}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/72, 0x48}, {&(0x7f0000000000)=""/61, 0x3d}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{0x0, 0x0, 0x0}, 0xd58a}, {{0x0, 0x0, 0x0}, 0x9}], 0xa, 0x2000, 0x0) 21.902098594s ago: executing program 3 (id=1547): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80) 21.627930063s ago: executing program 0 (id=1549): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 21.574313078s ago: executing program 4 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 21.571563318s ago: executing program 3 (id=1551): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) 21.272256755s ago: executing program 0 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r2) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xf057, 0x8}, 0xc) r4 = socket(0x1e, 0x1, 0x0) accept$inet6(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100)="72a1f0f6cdf723fc9c2f0bc7521cba270c93a10c8dffa2b131564c0f93d827be6f9908bc3491b38fc60114e2ba7b633ce8e70121c906be6dcaae2b0b675893e2e47463aaab1e368d6972b66a9b71f197ff79d696bf3926121cabf4d7a326d4363770296f2084909427d801aa898fa395f1dc20d868ff29f8ffd44191ed9b336503cffc92ae3bd3529236b9194afd14e982b77648fa13ea882c905bfd73b1adb95c4ec6", &(0x7f00000001c0)=@udp=r4, 0x1}, 0x20) writev(r0, &(0x7f0000000040), 0x2) 20.961151206s ago: executing program 0 (id=1555): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfffffffffffffe29) 20.848500897s ago: executing program 2 (id=1556): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500628b5e649a049c709082938fe01945c1cd5c006ad38a52334d6d90734e4cd99be8e57e15f356f2cfd89ffc2a69d63f0019694f6ed92da7d2810467f12927ec1092d0d283ba68a9d83e5b0ac679da10e2ee5150a9728448f4c03981e1fa823cdb3c6056a4", 0x2) 20.601829174s ago: executing program 2 (id=1557): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000380)='\v\t', 0x2, 0x4000000, &(0x7f0000000340), 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x48}], 0x1}, 0x0) 20.421881508s ago: executing program 2 (id=1558): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000001c0)="ecc174e8806e44a5a449dc210683bc5e5d0713a02a752b4183c7e34d3153c9d5000000000000000015d8228e3f5a511f687c1bc6e90203daddc7d9a72bb5b5f0ceea295fdeeabfd60a009873b506c88302cd26f7be85125079f7cf0c44587e264aeb87768a", 0x65, 0x48800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7d, &(0x7f0000000700)={r6, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r6, @ANYRES64=r9, @ANYBLOB="0000000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) 19.474499208s ago: executing program 2 (id=1559): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x6) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) r2 = socket(0x9, 0x4, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0xdd3d}, 0x1c) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040029bd7000fbdbdf251500000008000100", @ANYRES32=r6, @ANYBLOB="a9cb33a3", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x4, 0x3, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, 0x20, 0x1, 0xfffeffff, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x29}}, &(0x7f0000000480)='GPL\x00'}, 0x90) read(r9, &(0x7f00000003c0)=""/132, 0x84) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, @isdn={0x22, 0x9, 0x6, 0x7f, 0x4}, @nfc={0x27, r6, 0xffffffffffffffff, 0x5}, @hci={0x1f, 0x0, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='ip6erspan0\x00', 0x1, 0x2, 0x1ff}) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x4, 0x0, {{0x1f, 0x4, 0x0, 0x3d, 0x7c, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @private=0xa010101, {[@ssrr={0x89, 0x23, 0x83, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback]}, @cipso={0x86, 0x2e, 0x3, [{0x7, 0xb, "eb81f10a924344eab2"}, {0x2, 0xf, "2728c3a48c426b373663c17083"}, {0x5, 0x7, "91c0832d5e"}, {0x1, 0x7, "1161d2d899"}]}, @lsrr={0x83, 0x7, 0xac, [@rand_addr=0x64010100]}, @noop, @timestamp_addr={0x44, 0xc, 0x2e, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @noop]}}}}}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x8, 0x1, 0x0, 0x5, 0x1, 0x10, [{0x8, 0x4, 0x5}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000700)=""/196, 0x34, 0xc4, 0x1, 0xfffffff9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x92}, @call={0x85, 0x0, 0x0, 0x61}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x27}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}]}, &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x6, '\x00', r12, 0x25, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000840)=[{0x0, 0x4, 0x6, 0x4}, {0x3, 0x3, 0x10, 0x4}, {0x0, 0x3, 0x9, 0x5}, {0x4, 0x1, 0xa, 0x2}, {0x5, 0x1, 0x2, 0x2}, {0x3, 0x2, 0x8, 0x3}, {0x0, 0xa, 0xf, 0xc}], 0x10, 0x7}, 0x94) 17.210013367s ago: executing program 4 (id=1560): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x800, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x8000}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb3, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in=@dev}}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.197064105s ago: executing program 3 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' Z\x00\x00', @ANYRES16=r5, @ANYBLOB="31830000000000000000190000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000ecc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000ec80)={&(0x7f0000006900)=@newtaction={0xe0, 0x30, 0xb38, 0x70bd26, 0x25dfdbff, {}, [{0x60, 0x1, [@m_skbedit={0x30, 0x14, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x6c}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000004}, 0x805) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) recvmsg$unix(r9, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000280)={0xa79, 0x0, 0x680e, 0xe, 0x0, 0x26, 0x20, "624df8ab15b319f8e10d7a0b5e5920e8d1e2e6a0", "f8dc2ab330b4d0b3a43f5b5d2f26bec597f3d6bc"}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000880) 16.978727179s ago: executing program 0 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}}, 0x448d0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400290200000000000000000a000000"], 0x14}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x20}}], 0x1, 0x8000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000021eb080002000006e2dadf020200000008000800", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 16.883624599s ago: executing program 2 (id=1563): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r1, 0xaa, "a1fd3af7539bcf9146253cbbc5bda1babf0e29e3c75faef082bf3af467d2ec0f28116adaadd58074fe641623568e2e78c966a7428c4b8992837bd0994e226172efd34b414741ab37739414d4552eefe43e5373d2c8accfe3fc4aa755e250bce8ac017f26f65600f134db2fa5f4b5c9d1d7353315660120306e738d64ae3c57fdf9205ced937d4d03501b523220ec21ff3c5b2241837a890fc9a706ed58ea686c33fd011ce4383f599b3a"}, &(0x7f0000000200)=0xb2) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r1, 0xaa, "a1fd3af7539bcf9146253cbbc5bda1babf0e29e3c75faef082bf3af467d2ec0f28116adaadd58074fe641623568e2e78c966a7428c4b8992837bd0994e226172efd34b414741ab37739414d4552eefe43e5373d2c8accfe3fc4aa755e250bce8ac017f26f65600f134db2fa5f4b5c9d1d7353315660120306e738d64ae3c57fdf9205ced937d4d03501b523220ec21ff3c5b2241837a890fc9a706ed58ea686c33fd011ce4383f599b3a"}, &(0x7f0000000200)=0xb2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x5}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20001800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000440)={r3}, &(0x7f0000000480)=0x8) getpeername(r0, &(0x7f00000004c0)=@xdp, &(0x7f0000000540)=0x80) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40015}, 0x48040) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000680)={r0, 0x101, 0x665b6d26}) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000740)=@generic={0x0, 0xdb, 0xffff}) listen(r0, 0x71b) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000780)={0x1, [0x0]}, &(0x7f00000007c0)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000780)={0x1, [0x0]}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000800)=@assoc_value={r7, 0x8}, 0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000800)=@assoc_value={r7, 0x8}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000840)={r1, 0x6, 0x9, 0x5}, &(0x7f0000000880)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000008c0)={r9, 0x6bdb}, &(0x7f0000000900)=0x8) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000940), 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000940), 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@can_delroute={0x20, 0x19, 0x4, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_FILTER={0xc, 0xb, {{0x4}, {0x3, 0x1, 0x0, 0x1}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x40014) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000a80)=@fragment={0x2e, 0x0, 0x7, 0x1, 0x0, 0xf, 0x68}, 0x8) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000ac0)={r7, 0x3, 0x10, 0xb3, 0x9}, &(0x7f0000000b00)=0x18) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000b80)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @multicast2}, 0x62, 0x0, 0x0, 0x0, 0x90, &(0x7f0000000b40)='xfrm0\x00', 0x290f, 0x3e, 0x800}) 16.654895049s ago: executing program 0 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r2], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) socket$netlink(0x10, 0x3, 0xf) 16.584923223s ago: executing program 2 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x9, &(0x7f00000001c0)=[{0x5, 0x3, 0x5, 0x80000000}, {0x2, 0x2, 0x8, 0xf}, {0x5, 0xf5, 0x8, 0x2}, {0x3ff, 0x9, 0x8, 0x6b7f}, {0x0, 0xb, 0x1, 0x7}, {0x8001, 0x4, 0x4, 0x5149}, {0x8, 0x8, 0x4}, {0xa746, 0xb2, 0x3, 0x10000}, {0x0, 0x9, 0x4, 0xfffffff9}]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x85}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x8005) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {0x80, 0x20, 0x20, 0x81, 0xfc, 0x3, 0xc8, 0x4, 0x800}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x20, 0x10, 0xc, 0x7, 0x0, 0x0, 0x2, 0x1c}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x84) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x23c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x93bf}, {0x6, 0x11, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = accept4(0xffffffffffffffff, &(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000a80)=0x80, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000b00)={0x0, 'batadv_slave_1\x00', {}, 0x5}) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000000b40)={0x3ff, 0xc80, 0x7, 0x9, 0x3ff, 0x20, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x7f, 0x2, 0x28, @mcast2, @loopback, 0x40, 0xc7, 0x4, 0x7f}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x24382ecb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0x9, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x286, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000c00)='GPL\x00', 0x8, 0x7f, &(0x7f0000000c40)=""/127, 0x41000, 0x48, '\x00', r8, @sock_ops=0xc8d31a71fd2bec34, r4, 0x8, &(0x7f0000000d80)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, r4, 0x6, &(0x7f0000000e00)=[r4, r4], &(0x7f0000000e40)=[{0x4, 0x2, 0x6, 0x6}, {0x5, 0x4, 0x2, 0xa}, {0x7, 0x5, 0x3, 0x4}, {0x3, 0x2, 0xe, 0x3}, {0x1, 0x4, 0xd, 0x6d63f0847739ded6}, {0x2, 0x4, 0x6, 0x4}], 0x10, 0x80000001}, 0x94) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000001100)={'filter\x00', 0x0, 0x3, 0xe9, [0x8000, 0x7, 0x0, 0x7, 0xf61a, 0x7e], 0x7, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001000)=""/233}, &(0x7f0000001180)=0x78) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x11c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x52c4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000001400)=""/4096, &(0x7f0000002400)=0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16.174007878s ago: executing program 4 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 15.237003394s ago: executing program 1 (id=1567): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) socket(0x1d, 0x2, 0x6) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, &(0x7f0000000080)) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) 15.178947784s ago: executing program 1 (id=1568): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x40010, r0, 0xc3355000) (async) r5 = socket(0x8, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000440)={'wg2\x00'}) 1.256968741s ago: executing program 32 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r2], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) socket$netlink(0x10, 0x3, 0xf) 1.200197634s ago: executing program 33 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x9, &(0x7f00000001c0)=[{0x5, 0x3, 0x5, 0x80000000}, {0x2, 0x2, 0x8, 0xf}, {0x5, 0xf5, 0x8, 0x2}, {0x3ff, 0x9, 0x8, 0x6b7f}, {0x0, 0xb, 0x1, 0x7}, {0x8001, 0x4, 0x4, 0x5149}, {0x8, 0x8, 0x4}, {0xa746, 0xb2, 0x3, 0x10000}, {0x0, 0x9, 0x4, 0xfffffff9}]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x85}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x8005) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {0x80, 0x20, 0x20, 0x81, 0xfc, 0x3, 0xc8, 0x4, 0x800}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2, 0x20, 0x10, 0xc, 0x7, 0x0, 0x0, 0x2, 0x1c}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x84) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x23c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x93bf}, {0x6, 0x11, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = accept4(0xffffffffffffffff, &(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000a80)=0x80, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000b00)={0x0, 'batadv_slave_1\x00', {}, 0x5}) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000000b40)={0x3ff, 0xc80, 0x7, 0x9, 0x3ff, 0x20, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x7f, 0x2, 0x28, @mcast2, @loopback, 0x40, 0xc7, 0x4, 0x7f}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000dc0)={0x24382ecb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xd, 0x9, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x286, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000c00)='GPL\x00', 0x8, 0x7f, &(0x7f0000000c40)=""/127, 0x41000, 0x48, '\x00', r8, @sock_ops=0xc8d31a71fd2bec34, r4, 0x8, &(0x7f0000000d80)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, r4, 0x6, &(0x7f0000000e00)=[r4, r4], &(0x7f0000000e40)=[{0x4, 0x2, 0x6, 0x6}, {0x5, 0x4, 0x2, 0xa}, {0x7, 0x5, 0x3, 0x4}, {0x3, 0x2, 0xe, 0x3}, {0x1, 0x4, 0xd, 0x6d63f0847739ded6}, {0x2, 0x4, 0x6, 0x4}], 0x10, 0x80000001}, 0x94) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000001100)={'filter\x00', 0x0, 0x3, 0xe9, [0x8000, 0x7, 0x0, 0x7, 0xf61a, 0x7e], 0x7, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001000)=""/233}, &(0x7f0000001180)=0x78) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x11c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x52c4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000001400)=""/4096, &(0x7f0000002400)=0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.114985369s ago: executing program 34 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' Z\x00\x00', @ANYRES16=r5, @ANYBLOB="31830000000000000000190000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000ecc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000ec80)={&(0x7f0000006900)=@newtaction={0xe0, 0x30, 0xb38, 0x70bd26, 0x25dfdbff, {}, [{0x60, 0x1, [@m_skbedit={0x30, 0x14, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x6c}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000004}, 0x805) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) recvmsg$unix(r9, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000280)={0xa79, 0x0, 0x680e, 0xe, 0x0, 0x26, 0x20, "624df8ab15b319f8e10d7a0b5e5920e8d1e2e6a0", "f8dc2ab330b4d0b3a43f5b5d2f26bec597f3d6bc"}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000880) 62.574906ms ago: executing program 35 (id=1568): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x40010, r0, 0xc3355000) (async) r5 = socket(0x8, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000440)={'wg2\x00'}) 0s ago: executing program 36 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) kernel console output (not intermixed with test programs): ffffffffda RBX: 00007f8dcd615fa0 RCX: 00007f8dcd39ce59 [ 204.386394][ T9329] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 204.386405][ T9329] RBP: 00007f8dce2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.386416][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.386426][ T9329] R13: 00007f8dcd616038 R14: 00007f8dcd615fa0 R15: 00007fff03d18d48 [ 204.386452][ T9329] [ 204.386675][ T9327] syzkaller1: entered allmulticast mode [ 204.845569][ T9349] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 204.868453][ T9349] netlink: 'syz.3.1019': attribute type 4 has an invalid length. [ 205.006680][ T9355] syzkaller0: entered promiscuous mode [ 205.012205][ T9355] syzkaller0: entered allmulticast mode [ 205.333522][ T9362] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.344722][ T9362] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.288197][ T9400] syzkaller1: entered promiscuous mode [ 206.312450][ T9400] syzkaller1: entered allmulticast mode [ 206.803084][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.904613][ T9442] __nla_validate_parse: 107 callbacks suppressed [ 206.904632][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 207.001724][ T30] audit: type=1800 audit(1781635418.596:6): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1046" name="memory.events" dev="tmpfs" ino=1109 res=0 errno=0 [ 207.107942][ T9446] team0: Device gtp1 is up. Set it down before adding it as a team port [ 207.297040][ T9463] netlink: 'syz.0.1049': attribute type 8 has an invalid length. [ 207.305008][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 207.356814][ T9465] FAULT_INJECTION: forcing a failure. [ 207.356814][ T9465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.370186][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) [ 207.370208][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.370219][ T9465] Call Trace: [ 207.370226][ T9465] [ 207.370233][ T9465] dump_stack_lvl+0xe8/0x150 [ 207.370259][ T9465] should_fail_ex+0x40c/0x560 [ 207.370283][ T9465] _copy_to_user+0x31/0xb0 [ 207.370307][ T9465] simple_read_from_buffer+0xe1/0x170 [ 207.370333][ T9465] proc_fail_nth_read+0x1bb/0x230 [ 207.370358][ T9465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.370383][ T9465] ? rw_verify_area+0x24a/0x4c0 [ 207.370408][ T9465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.370428][ T9465] vfs_read+0x213/0xa80 [ 207.370455][ T9465] ? __pfx___mutex_lock+0x10/0x10 [ 207.370474][ T9465] ? __pfx_vfs_read+0x10/0x10 [ 207.370499][ T9465] ? __fget_files+0x2a/0x420 [ 207.370523][ T9465] ? __fget_files+0x3a2/0x420 [ 207.370541][ T9465] ? __fget_files+0x2a/0x420 [ 207.370567][ T9465] ksys_read+0x150/0x270 [ 207.370592][ T9465] ? __pfx_ksys_read+0x10/0x10 [ 207.370623][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.370641][ T9465] do_syscall_64+0x174/0x580 [ 207.370658][ T9465] ? clear_bhb_loop+0x40/0x90 [ 207.370679][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.370695][ T9465] RIP: 0033:0x7f295cf5d68e [ 207.370711][ T9465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.370726][ T9465] RSP: 002b:00007f295de33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.370744][ T9465] RAX: ffffffffffffffda RBX: 00007f295de346c0 RCX: 00007f295cf5d68e [ 207.370769][ T9465] RDX: 000000000000000f RSI: 00007f295de340a0 RDI: 0000000000000004 [ 207.370780][ T9465] RBP: 00007f295de34090 R08: 0000000000000000 R09: 0000000000000000 [ 207.370791][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.370801][ T9465] R13: 00007f295d216038 R14: 00007f295d215fa0 R15: 00007ffdcfc17b68 [ 207.370831][ T9465] [ 207.769547][ T9478] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1055'. [ 207.888275][ T9470] batadv0: entered promiscuous mode [ 207.891531][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 207.902399][ T9470] macsec1: entered promiscuous mode [ 207.909583][ T9470] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 207.935525][ T9470] batadv0: left promiscuous mode [ 207.999658][ T9485] SET target dimension over the limit! [ 208.119380][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 208.128827][ T30] audit: type=1800 audit(1781635419.706:7): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1059" name="memory.events" dev="tmpfs" ino=1107 res=0 errno=0 [ 208.130870][ T9491] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 208.165180][ T30] audit: type=1804 audit(1781635419.706:8): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1059" name="/newroot/214/memory.events" dev="tmpfs" ino=1107 res=1 errno=0 [ 208.176971][ T9491] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 208.365861][ T9500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 208.377522][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 208.407888][ T9500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 208.569660][ T9507] netlink: 'syz.2.1065': attribute type 30 has an invalid length. [ 208.582513][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'. [ 208.658884][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'. [ 209.347156][ T9542] pim6reg: entered allmulticast mode [ 209.576380][ T9544] syzkaller0: entered promiscuous mode [ 209.593178][ T9544] syzkaller0: entered allmulticast mode [ 209.607201][ T9536] pim6reg: left allmulticast mode [ 209.647513][ T9556] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 209.659833][ T9556] bond4 (unregistering): Released all slaves [ 212.789688][ T9561] vlan2: entered allmulticast mode [ 212.812163][ T9561] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 213.151392][ T9601] __nla_validate_parse: 1 callbacks suppressed [ 213.151411][ T9601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1088'. [ 213.205032][ T9608] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 213.213983][ T9603] bridge0: port 3(syz_tun) entered blocking state [ 213.220516][ T9603] bridge0: port 3(syz_tun) entered disabled state [ 213.227100][ T9603] syz_tun: entered allmulticast mode [ 213.238023][ T9603] syz_tun: entered promiscuous mode [ 213.245040][ T9608] net_ratelimit: 57 callbacks suppressed [ 213.245056][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.250240][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 213.256964][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1088'. [ 213.478872][ T9619] dvmrp0: entered allmulticast mode [ 213.586566][ T9630] FAULT_INJECTION: forcing a failure. [ 213.586566][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.612749][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 213.612772][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.612781][ T9630] Call Trace: [ 213.612787][ T9630] [ 213.612795][ T9630] dump_stack_lvl+0xe8/0x150 [ 213.612816][ T9630] should_fail_ex+0x40c/0x560 [ 213.612836][ T9630] _copy_from_iter+0x1d3/0x1660 [ 213.612856][ T9630] ? _copy_from_iter+0x21b/0x1660 [ 213.612872][ T9630] ? __pfx__copy_from_iter+0x10/0x10 [ 213.612890][ T9630] ? __pfx__copy_from_iter+0x10/0x10 [ 213.612909][ T9630] copy_page_from_iter+0x219/0x2d0 [ 213.612927][ T9630] skb_copy_datagram_from_iter+0x2f4/0x720 [ 213.612951][ T9630] unix_stream_sendmsg+0x5ce/0xde0 [ 213.612981][ T9630] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 213.613002][ T9630] ? aa_sock_msg_perm+0xda/0x1b0 [ 213.613035][ T9630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.613052][ T9630] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 213.613069][ T9630] ____sys_sendmsg+0x9b9/0xa20 [ 213.613089][ T9630] ? __might_fault+0xaf/0x130 [ 213.613110][ T9630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.613136][ T9630] ? import_iovec+0x73/0xa0 [ 213.613155][ T9630] ___sys_sendmsg+0x2a5/0x360 [ 213.613174][ T9630] ? __lock_acquire+0x683/0x2cd0 [ 213.613191][ T9630] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.613236][ T9630] ? __fget_files+0x2a/0x420 [ 213.613251][ T9630] ? __fget_files+0x3a2/0x420 [ 213.613295][ T9630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 213.613318][ T9630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.613344][ T9630] ? __pfx_ksys_write+0x10/0x10 [ 213.613370][ T9630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.613385][ T9630] do_syscall_64+0x174/0x580 [ 213.613398][ T9630] ? trace_irq_disable+0x3b/0x140 [ 213.613418][ T9630] ? clear_bhb_loop+0x40/0x90 [ 213.613434][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.613447][ T9630] RIP: 0033:0x7f63d8f9ce59 [ 213.613463][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.613475][ T9630] RSP: 002b:00007f63d9e45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.613491][ T9630] RAX: ffffffffffffffda RBX: 00007f63d9215fa0 RCX: 00007f63d8f9ce59 [ 213.613501][ T9630] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 213.613510][ T9630] RBP: 00007f63d9e45090 R08: 0000000000000000 R09: 0000000000000000 [ 213.613519][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.613527][ T9630] R13: 00007f63d9216038 R14: 00007f63d9215fa0 R15: 00007ffd83e0e648 [ 213.613549][ T9630] [ 214.353957][ T9662] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20004 [ 214.456616][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1108'. [ 214.599748][ T9670] netlink: 'syz.0.1109': attribute type 8 has an invalid length. [ 214.607548][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 218.902358][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 218.912170][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 218.922116][ T9677] netlink: 'syz.3.1111': attribute type 4 has an invalid length. [ 218.933205][ T9677] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1111'. [ 219.176678][ T9687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1117'. [ 219.359956][ T9699] FAULT_INJECTION: forcing a failure. [ 219.359956][ T9699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.401497][ T9699] CPU: 1 UID: 0 PID: 9699 Comm: syz.0.1119 Not tainted syzkaller #0 PREEMPT(full) [ 219.401522][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.401534][ T9699] Call Trace: [ 219.401541][ T9699] [ 219.401549][ T9699] dump_stack_lvl+0xe8/0x150 [ 219.401575][ T9699] should_fail_ex+0x40c/0x560 [ 219.401598][ T9699] _copy_from_iter+0x1d3/0x1660 [ 219.401622][ T9699] ? _copy_from_iter+0x21b/0x1660 [ 219.401643][ T9699] ? __pfx__copy_from_iter+0x10/0x10 [ 219.401666][ T9699] ? __pfx__copy_from_iter+0x10/0x10 [ 219.401692][ T9699] copy_page_from_iter+0x219/0x2d0 [ 219.401715][ T9699] skb_copy_datagram_from_iter+0x2f4/0x720 [ 219.401744][ T9699] unix_stream_sendmsg+0x5ce/0xde0 [ 219.401783][ T9699] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 219.401811][ T9699] ? aa_sock_msg_perm+0xda/0x1b0 [ 219.401837][ T9699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.401859][ T9699] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 219.401881][ T9699] ____sys_sendmsg+0x9b9/0xa20 [ 219.401908][ T9699] ? __might_fault+0xaf/0x130 [ 219.401935][ T9699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.401968][ T9699] ? import_iovec+0x73/0xa0 [ 219.401992][ T9699] ___sys_sendmsg+0x2a5/0x360 [ 219.402021][ T9699] ? __lock_acquire+0x683/0x2cd0 [ 219.402043][ T9699] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.402100][ T9699] ? __fget_files+0x2a/0x420 [ 219.402129][ T9699] ? __fget_files+0x3a2/0x420 [ 219.402163][ T9699] __x64_sys_sendmsg+0x1bd/0x2a0 [ 219.402191][ T9699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.402225][ T9699] ? __pfx_ksys_write+0x10/0x10 [ 219.402256][ T9699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.402274][ T9699] do_syscall_64+0x174/0x580 [ 219.402292][ T9699] ? trace_irq_disable+0x3b/0x140 [ 219.402317][ T9699] ? clear_bhb_loop+0x40/0x90 [ 219.402340][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.402357][ T9699] RIP: 0033:0x7f8a3559ce59 [ 219.402375][ T9699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.402390][ T9699] RSP: 002b:00007f8a36375028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.402409][ T9699] RAX: ffffffffffffffda RBX: 00007f8a35815fa0 RCX: 00007f8a3559ce59 [ 219.402421][ T9699] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 219.402433][ T9699] RBP: 00007f8a36375090 R08: 0000000000000000 R09: 0000000000000000 [ 219.402443][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.402454][ T9699] R13: 00007f8a35816038 R14: 00007f8a35815fa0 R15: 00007ffd6e2ca648 [ 219.402482][ T9699] [ 219.855719][ T9708] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1123'. [ 220.053299][ T9713] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 220.552353][ T9744] netlink: 'syz.2.1131': attribute type 16 has an invalid length. [ 220.624759][ T9744] netlink: 'syz.2.1131': attribute type 17 has an invalid length. [ 220.855386][ T9753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.024658][ T9744] bridge0: port 3(syz_tun) entered blocking state [ 223.031312][ T9744] bridge0: port 3(syz_tun) entered forwarding state [ 223.043254][ T9744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.054151][ T9744] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.076477][ T9744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.153542][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.169325][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.184159][ T9744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.195414][ T9744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.219746][ T9744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.228769][ T9744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.239500][ T9744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.248892][ T9744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.260524][ T9744] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 223.278971][ T9744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.287727][ T9744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.305818][ T9744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.334372][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.341588][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.375541][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.382763][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.511150][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 223.524948][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.537006][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.576911][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 223.578783][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.631787][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.761953][ T9779] nbd: must specify an index to disconnect [ 223.955803][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1147'. [ 224.160469][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 224.189134][ T9795] FAULT_INJECTION: forcing a failure. [ 224.189134][ T9795] name failslab, interval 1, probability 0, space 0, times 0 [ 224.244027][ T9795] CPU: 0 UID: 0 PID: 9795 Comm: syz.2.1152 Not tainted syzkaller #0 PREEMPT(full) [ 224.244054][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.244064][ T9795] Call Trace: [ 224.244070][ T9795] [ 224.244079][ T9795] dump_stack_lvl+0xe8/0x150 [ 224.244102][ T9795] should_fail_ex+0x40c/0x560 [ 224.244127][ T9795] should_failslab+0xa8/0x100 [ 224.244156][ T9795] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 224.244180][ T9795] ? __alloc_skb+0x189/0x7a0 [ 224.244202][ T9795] ? __alloc_skb+0x1d7/0x7a0 [ 224.244220][ T9795] ? __local_bh_enable_ip+0xd0/0x130 [ 224.244244][ T9795] __alloc_skb+0x1d7/0x7a0 [ 224.244270][ T9795] alloc_skb_with_frags+0xc6/0x760 [ 224.244300][ T9795] ? sk_psock_skb_ingress_enqueue+0x449/0x590 [ 224.244330][ T9795] sock_alloc_send_pskb+0x878/0x990 [ 224.244347][ T9795] ? lockdep_hardirqs_on+0x7a/0x110 [ 224.244378][ T9795] ? lock_acquire+0x106/0x350 [ 224.244405][ T9795] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 224.244427][ T9795] ? sk_psock_verdict_data_ready+0xae/0x960 [ 224.244453][ T9795] ? __pfx_sock_def_readable+0x10/0x10 [ 224.244474][ T9795] ? sk_psock_verdict_data_ready+0x7ca/0x960 [ 224.244497][ T9795] ? sk_psock_verdict_data_ready+0xae/0x960 [ 224.244525][ T9795] unix_stream_sendmsg+0x4ba/0xde0 [ 224.244565][ T9795] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 224.244592][ T9795] ? aa_sock_msg_perm+0xda/0x1b0 [ 224.244619][ T9795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.244640][ T9795] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 224.244663][ T9795] ____sys_sendmsg+0x9b9/0xa20 [ 224.244688][ T9795] ? __might_fault+0xaf/0x130 [ 224.244716][ T9795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.244749][ T9795] ? import_iovec+0x73/0xa0 [ 224.244774][ T9795] ___sys_sendmsg+0x2a5/0x360 [ 224.244797][ T9795] ? __lock_acquire+0x683/0x2cd0 [ 224.244820][ T9795] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.244889][ T9795] ? __fget_files+0x2a/0x420 [ 224.244909][ T9795] ? __fget_files+0x3a2/0x420 [ 224.244940][ T9795] __x64_sys_sendmsg+0x1bd/0x2a0 [ 224.244968][ T9795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.245003][ T9795] ? __pfx_ksys_write+0x10/0x10 [ 224.245036][ T9795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.245055][ T9795] do_syscall_64+0x174/0x580 [ 224.245071][ T9795] ? trace_irq_disable+0x3b/0x140 [ 224.245096][ T9795] ? clear_bhb_loop+0x40/0x90 [ 224.245118][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.245135][ T9795] RIP: 0033:0x7f600c79ce59 [ 224.245153][ T9795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.245167][ T9795] RSP: 002b:00007f600d571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.245186][ T9795] RAX: ffffffffffffffda RBX: 00007f600ca15fa0 RCX: 00007f600c79ce59 [ 224.245199][ T9795] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 224.245210][ T9795] RBP: 00007f600d571090 R08: 0000000000000000 R09: 0000000000000000 [ 224.245221][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.245231][ T9795] R13: 00007f600ca16038 R14: 00007f600ca15fa0 R15: 00007fff430ec898 [ 224.245261][ T9795] [ 224.761704][ T9799] syzkaller0: entered promiscuous mode [ 224.767280][ T9799] syzkaller0: entered allmulticast mode [ 225.053987][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 225.063155][ T9819] netlink: 'syz.4.1159': attribute type 12 has an invalid length. [ 225.160887][ T9830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1162'. [ 225.323976][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 225.508184][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 225.519902][ T9842] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1167'. [ 225.845003][ T9855] syzkaller0: entered promiscuous mode [ 225.850528][ T9855] syzkaller0: entered allmulticast mode [ 226.092399][ T9872] FAULT_INJECTION: forcing a failure. [ 226.092399][ T9872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.119448][ T9872] CPU: 0 UID: 0 PID: 9872 Comm: syz.4.1180 Not tainted syzkaller #0 PREEMPT(full) [ 226.119475][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.119485][ T9872] Call Trace: [ 226.119492][ T9872] [ 226.119501][ T9872] dump_stack_lvl+0xe8/0x150 [ 226.119527][ T9872] should_fail_ex+0x40c/0x560 [ 226.119560][ T9872] _copy_from_iter+0x1d3/0x1660 [ 226.119585][ T9872] ? rcu_is_watching+0x15/0xb0 [ 226.119611][ T9872] ? __pfx__copy_from_iter+0x10/0x10 [ 226.119627][ T9872] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 226.119660][ T9872] ? netlink_sendmsg+0x650/0xb40 [ 226.119685][ T9872] ? skb_put+0x112/0x210 [ 226.119712][ T9872] netlink_sendmsg+0x6c0/0xb40 [ 226.119745][ T9872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.119773][ T9872] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.119799][ T9872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.119821][ T9872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.119845][ T9872] ____sys_sendmsg+0x9b9/0xa20 [ 226.119870][ T9872] ? __might_fault+0xaf/0x130 [ 226.119896][ T9872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.119927][ T9872] ? import_iovec+0x73/0xa0 [ 226.119950][ T9872] ___sys_sendmsg+0x2a5/0x360 [ 226.119975][ T9872] ? __lock_acquire+0x683/0x2cd0 [ 226.119997][ T9872] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.120026][ T9872] ? kstrtouint+0x6e/0xe0 [ 226.120073][ T9872] ? __fget_files+0x2a/0x420 [ 226.120094][ T9872] ? __fget_files+0x3a2/0x420 [ 226.120121][ T9872] __sys_sendmmsg+0x27c/0x4e0 [ 226.120152][ T9872] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.120175][ T9872] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 226.120220][ T9872] ? ksys_write+0x242/0x270 [ 226.120246][ T9872] ? __pfx_ksys_write+0x10/0x10 [ 226.120276][ T9872] __x64_sys_sendmmsg+0xa0/0xc0 [ 226.120302][ T9872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.120321][ T9872] do_syscall_64+0x174/0x580 [ 226.120337][ T9872] ? trace_irq_disable+0x3b/0x140 [ 226.120362][ T9872] ? clear_bhb_loop+0x40/0x90 [ 226.120385][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.120402][ T9872] RIP: 0033:0x7f8dcd39ce59 [ 226.120419][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.120432][ T9872] RSP: 002b:00007f8dce2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 226.120451][ T9872] RAX: ffffffffffffffda RBX: 00007f8dcd615fa0 RCX: 00007f8dcd39ce59 [ 226.120463][ T9872] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.120474][ T9872] RBP: 00007f8dce2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 226.120484][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.120494][ T9872] R13: 00007f8dcd616038 R14: 00007f8dcd615fa0 R15: 00007fff03d18d48 [ 226.120524][ T9872] [ 226.844922][ T9902] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1190'. [ 226.857021][ T9902] openvswitch: netlink: IP tunnel dst address not specified [ 227.500472][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1200'. [ 227.565705][ T9940] C: renamed from lo (while UP) [ 227.597029][ T9940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 228.139959][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 228.320828][ T9972] syzkaller1: entered promiscuous mode [ 228.354710][ T9972] syzkaller1: entered allmulticast mode [ 228.919421][T10005] IPVS: set_ctl: invalid protocol: 50 172.20.20.64:20003 [ 229.236855][ T9982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.472222][T10024] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1225'. [ 229.581816][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1226'. [ 229.826839][T10039] netlink: 'syz.4.1230': attribute type 8 has an invalid length. [ 229.834623][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 230.115271][T10057] FAULT_INJECTION: forcing a failure. [ 230.115271][T10057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.128669][T10057] CPU: 1 UID: 0 PID: 10057 Comm: syz.4.1234 Not tainted syzkaller #0 PREEMPT(full) [ 230.128694][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.128705][T10057] Call Trace: [ 230.128712][T10057] [ 230.128720][T10057] dump_stack_lvl+0xe8/0x150 [ 230.128747][T10057] should_fail_ex+0x40c/0x560 [ 230.128780][T10057] _copy_from_iter+0x1d3/0x1660 [ 230.128806][T10057] ? rcu_is_watching+0x15/0xb0 [ 230.128832][T10057] ? __pfx__copy_from_iter+0x10/0x10 [ 230.128848][T10057] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 230.128881][T10057] ? netlink_sendmsg+0x650/0xb40 [ 230.128906][T10057] ? skb_put+0x112/0x210 [ 230.128933][T10057] netlink_sendmsg+0x6c0/0xb40 [ 230.128968][T10057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.128996][T10057] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.129023][T10057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.129045][T10057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.129072][T10057] ____sys_sendmsg+0x9b9/0xa20 [ 230.129099][T10057] ? __might_fault+0xaf/0x130 [ 230.129127][T10057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.129161][T10057] ? import_iovec+0x73/0xa0 [ 230.129186][T10057] ___sys_sendmsg+0x2a5/0x360 [ 230.129210][T10057] ? __lock_acquire+0x683/0x2cd0 [ 230.129234][T10057] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.129257][T10057] ? __lock_acquire+0x683/0x2cd0 [ 230.129280][T10057] ? kstrtouint+0x6e/0xe0 [ 230.129344][T10057] __sys_sendmmsg+0x27c/0x4e0 [ 230.129376][T10057] ? __pfx___sys_sendmmsg+0x10/0x10 [ 230.129400][T10057] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 230.129443][T10057] ? ksys_write+0x242/0x270 [ 230.129471][T10057] ? __pfx_ksys_write+0x10/0x10 [ 230.129501][T10057] __x64_sys_sendmmsg+0xa0/0xc0 [ 230.129527][T10057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.129546][T10057] do_syscall_64+0x174/0x580 [ 230.129565][T10057] ? clear_bhb_loop+0x40/0x90 [ 230.129587][T10057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.129604][T10057] RIP: 0033:0x7f8dcd39ce59 [ 230.129622][T10057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.129637][T10057] RSP: 002b:00007f8dce2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 230.129657][T10057] RAX: ffffffffffffffda RBX: 00007f8dcd615fa0 RCX: 00007f8dcd39ce59 [ 230.129671][T10057] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 230.129683][T10057] RBP: 00007f8dce2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 230.129694][T10057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.129704][T10057] R13: 00007f8dcd616038 R14: 00007f8dcd615fa0 R15: 00007fff03d18d48 [ 230.129733][T10057] [ 230.877129][T10075] syzkaller0: entered promiscuous mode [ 230.882833][T10075] syzkaller0: entered allmulticast mode [ 231.552761][T10086] FAULT_INJECTION: forcing a failure. [ 231.552761][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 231.565530][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.3.1245 Not tainted syzkaller #0 PREEMPT(full) [ 231.565557][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.565573][T10086] Call Trace: [ 231.565580][T10086] [ 231.565588][T10086] dump_stack_lvl+0xe8/0x150 [ 231.565615][T10086] should_fail_ex+0x40c/0x560 [ 231.565639][T10086] should_failslab+0xa8/0x100 [ 231.565668][T10086] __kmalloc_cache_noprof+0x88/0x660 [ 231.565706][T10086] ? ip_fib_metrics_init+0xbe/0x6f0 [ 231.565735][T10086] ip_fib_metrics_init+0xbe/0x6f0 [ 231.565764][T10086] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 231.565785][T10086] ? __kmalloc_noprof+0x379/0x750 [ 231.565813][T10086] ? __asan_memset+0x22/0x50 [ 231.565838][T10086] ip6_route_info_create+0x19e/0x890 [ 231.565863][T10086] ? __lock_acquire+0x683/0x2cd0 [ 231.565885][T10086] ip6_route_add+0x49/0x1b0 [ 231.565912][T10086] inet6_rtm_newroute+0x267/0x1a30 [ 231.565937][T10086] ? unwind_next_frame+0x8f/0x2550 [ 231.565965][T10086] ? is_bpf_text_address+0x26/0x2b0 [ 231.565984][T10086] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 231.566018][T10086] ? __lock_acquire+0x683/0x2cd0 [ 231.566041][T10086] ? kernel_text_address+0xa5/0xe0 [ 231.566066][T10086] ? __kernel_text_address+0xd/0x30 [ 231.566089][T10086] ? unwind_get_return_address+0x4d/0x90 [ 231.566136][T10086] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 231.566156][T10086] rtnetlink_rcv_msg+0x802/0xc00 [ 231.566178][T10086] ? kasan_save_track+0x3e/0x80 [ 231.566204][T10086] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 231.566227][T10086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.566251][T10086] ? __lock_acquire+0x683/0x2cd0 [ 231.566281][T10086] netlink_rcv_skb+0x226/0x4a0 [ 231.566309][T10086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.566333][T10086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.566368][T10086] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.566391][T10086] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.566420][T10086] netlink_unicast+0x7bb/0x940 [ 231.566452][T10086] netlink_sendmsg+0x813/0xb40 [ 231.566485][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.566513][T10086] ? aa_sock_msg_perm+0xf1/0x1b0 [ 231.566540][T10086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.566562][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.566587][T10086] ____sys_sendmsg+0x9b9/0xa20 [ 231.566614][T10086] ? __might_fault+0xaf/0x130 [ 231.566641][T10086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.566682][T10086] ? import_iovec+0x73/0xa0 [ 231.566707][T10086] ___sys_sendmsg+0x2a5/0x360 [ 231.566732][T10086] ? __lock_acquire+0x683/0x2cd0 [ 231.566754][T10086] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.566777][T10086] ? __lock_acquire+0x683/0x2cd0 [ 231.566798][T10086] ? kstrtouint+0x6e/0xe0 [ 231.566862][T10086] __sys_sendmmsg+0x27c/0x4e0 [ 231.566893][T10086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 231.566916][T10086] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 231.566955][T10086] ? ksys_write+0x242/0x270 [ 231.566980][T10086] ? __pfx_ksys_write+0x10/0x10 [ 231.567011][T10086] __x64_sys_sendmmsg+0xa0/0xc0 [ 231.567036][T10086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.567054][T10086] do_syscall_64+0x174/0x580 [ 231.567071][T10086] ? trace_irq_disable+0x3b/0x140 [ 231.567094][T10086] ? clear_bhb_loop+0x40/0x90 [ 231.567117][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.567134][T10086] RIP: 0033:0x7f63d8f9ce59 [ 231.567152][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.567168][T10086] RSP: 002b:00007f63d9e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 231.567186][T10086] RAX: ffffffffffffffda RBX: 00007f63d9215fa0 RCX: 00007f63d8f9ce59 [ 231.567199][T10086] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 231.567211][T10086] RBP: 00007f63d9e45090 R08: 0000000000000000 R09: 0000000000000000 [ 231.567222][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.567233][T10086] R13: 00007f63d9216038 R14: 00007f63d9215fa0 R15: 00007ffd83e0e648 [ 231.567260][T10086] [ 232.577746][T10029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.587789][T10031] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1226'. [ 232.831722][T10099] syzkaller0: entered promiscuous mode [ 232.837830][T10099] syzkaller0: entered allmulticast mode [ 233.016016][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 233.361621][T10121] FAULT_INJECTION: forcing a failure. [ 233.361621][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 233.386451][T10123] openvswitch: netlink: IP tunnel dst address not specified [ 233.404257][T10121] CPU: 1 UID: 0 PID: 10121 Comm: syz.4.1256 Not tainted syzkaller #0 PREEMPT(full) [ 233.404284][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.404294][T10121] Call Trace: [ 233.404302][T10121] [ 233.404309][T10121] dump_stack_lvl+0xe8/0x150 [ 233.404336][T10121] should_fail_ex+0x40c/0x560 [ 233.404360][T10121] should_failslab+0xa8/0x100 [ 233.404388][T10121] __kmalloc_noprof+0xe8/0x750 [ 233.404413][T10121] ? fib6_info_alloc+0x30/0xf0 [ 233.404441][T10121] fib6_info_alloc+0x30/0xf0 [ 233.404464][T10121] ip6_route_info_create+0x149/0x890 [ 233.404493][T10121] ip6_route_add+0x49/0x1b0 [ 233.404519][T10121] inet6_rtm_newroute+0x267/0x1a30 [ 233.404549][T10121] ? kasan_quarantine_put+0xbb/0x1f0 [ 233.404571][T10121] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.404600][T10121] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 233.404619][T10121] ? nlmon_xmit+0xb0/0x100 [ 233.404634][T10121] ? kmem_cache_free+0x182/0x650 [ 233.404668][T10121] ? __lock_acquire+0x683/0x2cd0 [ 233.404691][T10121] ? __dev_queue_xmit+0x29b/0x37f0 [ 233.404711][T10121] ? __local_bh_enable_ip+0xd0/0x130 [ 233.404730][T10121] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.404782][T10121] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 233.404802][T10121] rtnetlink_rcv_msg+0x802/0xc00 [ 233.404829][T10121] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 233.404852][T10121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.404872][T10121] ? ref_tracker_free+0x689/0x830 [ 233.404895][T10121] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.404924][T10121] netlink_rcv_skb+0x226/0x4a0 [ 233.404950][T10121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.404975][T10121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.405011][T10121] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.405034][T10121] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.405063][T10121] netlink_unicast+0x7bb/0x940 [ 233.405096][T10121] netlink_sendmsg+0x813/0xb40 [ 233.405129][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.405157][T10121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.405189][T10121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.405211][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.405237][T10121] ____sys_sendmsg+0x9b9/0xa20 [ 233.405263][T10121] ? __might_fault+0xaf/0x130 [ 233.405290][T10121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.405323][T10121] ? import_iovec+0x73/0xa0 [ 233.405348][T10121] ___sys_sendmsg+0x2a5/0x360 [ 233.405372][T10121] ? __lock_acquire+0x683/0x2cd0 [ 233.405394][T10121] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.405416][T10121] ? __lock_acquire+0x683/0x2cd0 [ 233.405439][T10121] ? kstrtouint+0x6e/0xe0 [ 233.405503][T10121] __sys_sendmmsg+0x27c/0x4e0 [ 233.405532][T10121] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.405554][T10121] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 233.405594][T10121] ? ksys_write+0x242/0x270 [ 233.405619][T10121] ? __pfx_ksys_write+0x10/0x10 [ 233.405653][T10121] __x64_sys_sendmmsg+0xa0/0xc0 [ 233.405677][T10121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.405696][T10121] do_syscall_64+0x174/0x580 [ 233.405711][T10121] ? trace_irq_disable+0x3b/0x140 [ 233.405733][T10121] ? clear_bhb_loop+0x40/0x90 [ 233.405755][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.405772][T10121] RIP: 0033:0x7f8dcd39ce59 [ 233.405790][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.405805][T10121] RSP: 002b:00007f8dce2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.405825][T10121] RAX: ffffffffffffffda RBX: 00007f8dcd615fa0 RCX: 00007f8dcd39ce59 [ 233.405838][T10121] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.405850][T10121] RBP: 00007f8dce2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.405860][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.405871][T10121] R13: 00007f8dcd616038 R14: 00007f8dcd615fa0 R15: 00007fff03d18d48 [ 233.405897][T10121] [ 233.945427][T10135] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 233.953469][T10135] netlink: 'syz.1.1262': attribute type 2 has an invalid length. [ 234.061117][T10137] syzkaller0: entered promiscuous mode [ 234.067434][T10137] syzkaller0: entered allmulticast mode [ 234.463092][T10166] FAULT_INJECTION: forcing a failure. [ 234.463092][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 234.478583][T10166] CPU: 1 UID: 0 PID: 10166 Comm: syz.2.1270 Not tainted syzkaller #0 PREEMPT(full) [ 234.478608][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.478618][T10166] Call Trace: [ 234.478626][T10166] [ 234.478633][T10166] dump_stack_lvl+0xe8/0x150 [ 234.478659][T10166] should_fail_ex+0x40c/0x560 [ 234.478680][T10166] should_failslab+0xa8/0x100 [ 234.478708][T10166] __kmalloc_cache_noprof+0x88/0x660 [ 234.478731][T10166] ? ip_fib_metrics_init+0xbe/0x6f0 [ 234.478757][T10166] ip_fib_metrics_init+0xbe/0x6f0 [ 234.478784][T10166] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 234.478804][T10166] ? __kmalloc_noprof+0x379/0x750 [ 234.478831][T10166] ? __asan_memset+0x22/0x50 [ 234.478854][T10166] ip6_route_info_create+0x19e/0x890 [ 234.478885][T10166] ip6_route_add+0x49/0x1b0 [ 234.478911][T10166] inet6_rtm_newroute+0x267/0x1a30 [ 234.478939][T10166] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.478961][T10166] ? lockdep_hardirqs_on+0x7a/0x110 [ 234.478997][T10166] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 234.479016][T10166] ? nlmon_xmit+0xb0/0x100 [ 234.479029][T10166] ? kmem_cache_free+0x182/0x650 [ 234.479058][T10166] ? __lock_acquire+0x683/0x2cd0 [ 234.479081][T10166] ? __dev_queue_xmit+0x29b/0x37f0 [ 234.479101][T10166] ? __local_bh_enable_ip+0xd0/0x130 [ 234.479117][T10166] ? lockdep_hardirqs_on+0x7a/0x110 [ 234.479166][T10166] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 234.479186][T10166] rtnetlink_rcv_msg+0x802/0xc00 [ 234.479213][T10166] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 234.479234][T10166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.479255][T10166] ? ref_tracker_free+0x689/0x830 [ 234.479277][T10166] ? __pfx_ref_tracker_free+0x10/0x10 [ 234.479306][T10166] netlink_rcv_skb+0x226/0x4a0 [ 234.479332][T10166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.479357][T10166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.479393][T10166] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.479415][T10166] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.479444][T10166] netlink_unicast+0x7bb/0x940 [ 234.479476][T10166] netlink_sendmsg+0x813/0xb40 [ 234.479509][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.479537][T10166] ? aa_sock_msg_perm+0xf1/0x1b0 [ 234.479562][T10166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.479584][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.479610][T10166] ____sys_sendmsg+0x9b9/0xa20 [ 234.479636][T10166] ? __might_fault+0xaf/0x130 [ 234.479664][T10166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.479692][T10166] ? import_iovec+0x73/0xa0 [ 234.479715][T10166] ___sys_sendmsg+0x2a5/0x360 [ 234.479737][T10166] ? __lock_acquire+0x683/0x2cd0 [ 234.479762][T10166] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.479784][T10166] ? __lock_acquire+0x683/0x2cd0 [ 234.479804][T10166] ? kstrtouint+0x6e/0xe0 [ 234.479865][T10166] __sys_sendmmsg+0x27c/0x4e0 [ 234.479896][T10166] ? __pfx___sys_sendmmsg+0x10/0x10 [ 234.479919][T10166] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 234.479961][T10166] ? ksys_write+0x242/0x270 [ 234.479998][T10166] ? __pfx_ksys_write+0x10/0x10 [ 234.480028][T10166] __x64_sys_sendmmsg+0xa0/0xc0 [ 234.480054][T10166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.480073][T10166] do_syscall_64+0x174/0x580 [ 234.480089][T10166] ? trace_irq_disable+0x3b/0x140 [ 234.480114][T10166] ? clear_bhb_loop+0x40/0x90 [ 234.480135][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.480152][T10166] RIP: 0033:0x7f600c79ce59 [ 234.480170][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.480185][T10166] RSP: 002b:00007f600d571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 234.480205][T10166] RAX: ffffffffffffffda RBX: 00007f600ca15fa0 RCX: 00007f600c79ce59 [ 234.480218][T10166] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.480230][T10166] RBP: 00007f600d571090 R08: 0000000000000000 R09: 0000000000000000 [ 234.480241][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.480252][T10166] R13: 00007f600ca16038 R14: 00007f600ca15fa0 R15: 00007fff430ec898 [ 234.480281][T10166] [ 235.067616][T10169] syzkaller0: entered promiscuous mode [ 235.105250][T10169] syzkaller0: entered allmulticast mode [ 235.188638][T10169] tipc: Enabled bearer , priority 0 [ 235.222412][T10169] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.1272'. [ 235.234267][T10169] netlink: Unknown conntrack attr (type=2304, max=9) [ 235.240052][T10189] syzkaller1: entered promiscuous mode [ 235.246676][T10189] syzkaller1: entered allmulticast mode [ 235.277239][T10191] sctp: [Deprecated]: syz.4.1280 (pid 10191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.277239][T10191] Use struct sctp_sack_info instead [ 235.293676][T10190] sctp: [Deprecated]: syz.4.1280 (pid 10190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.293676][T10190] Use struct sctp_sack_info instead [ 235.318468][T10168] tipc: Resetting bearer [ 235.350258][T10168] tipc: Disabling bearer [ 235.377575][T10195] syzkaller0: entered promiscuous mode [ 235.383065][T10195] syzkaller0: entered allmulticast mode [ 235.634813][T10205] IPVS: sed: FWM 3 0x00000003 - no destination available [ 235.636740][T10204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.653825][T10204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.859095][T10204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.874407][T10204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.089094][T10230] syzkaller0: entered promiscuous mode [ 236.094849][T10230] syzkaller0: entered allmulticast mode [ 236.353523][T10204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.364537][T10204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.671464][T10204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.681803][T10204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.856421][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.875882][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.012829][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.075650][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.168734][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.215504][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.310289][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.338161][T10288] sctp: [Deprecated]: syz.3.1299 (pid 10288) Use of int in maxseg socket option. [ 237.338161][T10288] Use struct sctp_assoc_value instead [ 237.360658][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.362194][T10292] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 237.378136][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'. [ 237.478700][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1302'. [ 237.492665][T10300] bond5: (slave gretap1): making interface the new active one [ 237.502523][T10300] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 237.531794][T10300] syz.0.1301 (10300) used greatest stack depth: 18880 bytes left [ 239.957693][T10278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.968557][T10299] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1302'. [ 240.020910][T10299] netlink: 'syz.4.1302': attribute type 2 has an invalid length. [ 240.168625][T10316] FAULT_INJECTION: forcing a failure. [ 240.168625][T10316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.226465][T10316] CPU: 0 UID: 0 PID: 10316 Comm: syz.3.1305 Not tainted syzkaller #0 PREEMPT(full) [ 240.226489][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.226499][T10316] Call Trace: [ 240.226513][T10316] [ 240.226520][T10316] dump_stack_lvl+0xe8/0x150 [ 240.226551][T10316] should_fail_ex+0x40c/0x560 [ 240.226581][T10316] _copy_to_user+0x31/0xb0 [ 240.226605][T10316] simple_read_from_buffer+0xe1/0x170 [ 240.226634][T10316] proc_fail_nth_read+0x1bb/0x230 [ 240.226660][T10316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.226684][T10316] ? rw_verify_area+0x24a/0x4c0 [ 240.226832][T10316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.226858][T10316] vfs_read+0x213/0xa80 [ 240.226887][T10316] ? __pfx___mutex_lock+0x10/0x10 [ 240.226905][T10316] ? __pfx_vfs_read+0x10/0x10 [ 240.226929][T10316] ? __fget_files+0x2a/0x420 [ 240.226953][T10316] ? __fget_files+0x3a2/0x420 [ 240.226973][T10316] ? __fget_files+0x2a/0x420 [ 240.227003][T10316] ksys_read+0x150/0x270 [ 240.227031][T10316] ? __pfx_ksys_read+0x10/0x10 [ 240.227074][T10316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.227095][T10316] do_syscall_64+0x174/0x580 [ 240.227121][T10316] ? trace_irq_disable+0x3b/0x140 [ 240.227144][T10316] ? clear_bhb_loop+0x40/0x90 [ 240.227168][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.227186][T10316] RIP: 0033:0x7f63d8f5d68e [ 240.227203][T10316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.227219][T10316] RSP: 002b:00007f63d9e44fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.227238][T10316] RAX: ffffffffffffffda RBX: 00007f63d9e456c0 RCX: 00007f63d8f5d68e [ 240.227251][T10316] RDX: 000000000000000f RSI: 00007f63d9e450a0 RDI: 0000000000000004 [ 240.227262][T10316] RBP: 00007f63d9e45090 R08: 0000000000000000 R09: 0000000000000000 [ 240.227278][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.227289][T10316] R13: 00007f63d9216038 R14: 00007f63d9215fa0 R15: 00007ffd83e0e648 [ 240.227322][T10316] [ 240.581876][T10328] ip6erspan1: entered allmulticast mode [ 240.591197][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 240.626812][T10319] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 241.070377][T10359] netlink: 'syz.4.1315': attribute type 2 has an invalid length. [ 241.088272][T10359] netlink: 'syz.4.1315': attribute type 2 has an invalid length. [ 241.399039][T10370] tipc: Started in network mode [ 241.405036][T10370] tipc: Node identity 2a81f4e74728, cluster identity 4711 [ 241.412577][T10370] tipc: Enabled bearer , priority 0 [ 241.420628][T10371] syzkaller0: entered promiscuous mode [ 241.426140][T10371] syzkaller0: entered allmulticast mode [ 241.443665][T10351] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 241.659878][T10351] tipc: Resetting bearer [ 241.745672][T10348] tipc: Resetting bearer [ 241.785311][T10383] x_tables: duplicate underflow at hook 1 [ 241.832068][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 241.846149][T10348] tipc: Disabling bearer [ 241.882801][T10393] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1318'. [ 241.999801][T10390] xfrm0 speed is unknown, defaulting to 1000 [ 242.014551][T10390] lo speed is unknown, defaulting to 1000 [ 242.030656][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1322'. [ 242.398882][T10422] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 242.613695][T10422] bond5: entered promiscuous mode [ 242.619538][T10422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.157258][T10455] netlink: 'syz.0.1332': attribute type 10 has an invalid length. [ 243.316649][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 243.840599][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 243.852996][T10480] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1342'. [ 243.866338][T10480] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 244.038361][T10491] netlink: 'syz.3.1345': attribute type 9 has an invalid length. [ 244.704805][T10524] netlink: 'syz.2.1355': attribute type 2 has an invalid length. [ 244.719485][T10524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1355'. [ 244.772001][T10524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1355'. [ 244.867053][T10529] sch_fq: defrate 0 ignored. [ 244.920680][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'. [ 244.930083][T10529] syzkaller0: entered promiscuous mode [ 244.936650][T10529] syzkaller0: entered allmulticast mode [ 245.504786][T10556] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 245.786228][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 245.803318][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 245.930985][T10572] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1372'. [ 246.121653][T10576] ip6gre1: entered allmulticast mode [ 246.826466][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 247.150749][T10622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.158088][T10622] IPv6: NLM_F_CREATE should be set when creating new route [ 247.165747][T10622] IPv6: NLM_F_CREATE should be set when creating new route [ 247.315803][T10630] FAULT_INJECTION: forcing a failure. [ 247.315803][T10630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.329760][T10628] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 247.335763][T10630] CPU: 0 UID: 0 PID: 10630 Comm: syz.4.1392 Not tainted syzkaller #0 PREEMPT(full) [ 247.335790][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.335801][T10630] Call Trace: [ 247.335808][T10630] [ 247.335815][T10630] dump_stack_lvl+0xe8/0x150 [ 247.335841][T10630] should_fail_ex+0x40c/0x560 [ 247.335865][T10630] _copy_from_user+0x2d/0xb0 [ 247.335887][T10630] mptcp_setsockopt+0x18ef/0x3550 [ 247.335918][T10630] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 247.335941][T10630] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.335966][T10630] ? __fget_files+0x2a/0x420 [ 247.335985][T10630] ? aa_sock_opt_perm+0xff/0x1a0 [ 247.336009][T10630] ? sock_common_setsockopt+0x36/0xc0 [ 247.336031][T10630] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 247.336053][T10630] do_sock_setsockopt+0x17c/0x1b0 [ 247.336082][T10630] __x64_sys_setsockopt+0x13d/0x1b0 [ 247.336108][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.336127][T10630] do_syscall_64+0x174/0x580 [ 247.336142][T10630] ? trace_irq_disable+0x3b/0x140 [ 247.336167][T10630] ? clear_bhb_loop+0x40/0x90 [ 247.336188][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.336205][T10630] RIP: 0033:0x7f8dcd39ce59 [ 247.336222][T10630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.336236][T10630] RSP: 002b:00007f8dce2c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.336255][T10630] RAX: ffffffffffffffda RBX: 00007f8dcd616090 RCX: 00007f8dcd39ce59 [ 247.336268][T10630] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 247.336279][T10630] RBP: 00007f8dce2c7090 R08: 0000000000000028 R09: 0000000000000000 [ 247.336289][T10630] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 247.336300][T10630] R13: 00007f8dcd616128 R14: 00007f8dcd616090 R15: 00007fff03d18d48 [ 247.336328][T10630] [ 247.902104][ T5367] IPVS: starting estimator thread 0... [ 248.012860][T10649] IPVS: using max 33 ests per chain, 79200 per kthread [ 248.062129][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 248.084756][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 248.251215][T10664] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 248.268882][T10664] syzkaller1: group set to 0 [ 248.367112][T10672] netlink: 'syz.0.1406': attribute type 11 has an invalid length. [ 248.390315][T10672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1406'. [ 248.743577][T10690] syzkaller0: entered promiscuous mode [ 248.756187][T10690] syzkaller0: entered allmulticast mode [ 248.772207][T10693] netlink: 'syz.3.1411': attribute type 21 has an invalid length. [ 248.789191][T10692] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1408'. [ 248.827409][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1411'. [ 249.018080][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 249.180976][T10710] FAULT_INJECTION: forcing a failure. [ 249.180976][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.243752][T10710] CPU: 0 UID: 0 PID: 10710 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT(full) [ 249.243779][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.243789][T10710] Call Trace: [ 249.243796][T10710] [ 249.243804][T10710] dump_stack_lvl+0xe8/0x150 [ 249.243830][T10710] should_fail_ex+0x40c/0x560 [ 249.243855][T10710] _copy_to_user+0x31/0xb0 [ 249.243879][T10710] simple_read_from_buffer+0xe1/0x170 [ 249.243906][T10710] proc_fail_nth_read+0x1bb/0x230 [ 249.243933][T10710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.243958][T10710] ? rw_verify_area+0x24a/0x4c0 [ 249.243984][T10710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.244006][T10710] vfs_read+0x213/0xa80 [ 249.244034][T10710] ? __pfx___mutex_lock+0x10/0x10 [ 249.244055][T10710] ? __pfx_vfs_read+0x10/0x10 [ 249.244080][T10710] ? __fget_files+0x2a/0x420 [ 249.244106][T10710] ? __fget_files+0x3a2/0x420 [ 249.244125][T10710] ? __fget_files+0x2a/0x420 [ 249.244154][T10710] ksys_read+0x150/0x270 [ 249.244180][T10710] ? __pfx_ksys_read+0x10/0x10 [ 249.244211][T10710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.244229][T10710] do_syscall_64+0x174/0x580 [ 249.244246][T10710] ? trace_irq_disable+0x3b/0x140 [ 249.244269][T10710] ? clear_bhb_loop+0x40/0x90 [ 249.244289][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.244312][T10710] RIP: 0033:0x7f295cf5d68e [ 249.244328][T10710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.244341][T10710] RSP: 002b:00007f295de12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.244360][T10710] RAX: ffffffffffffffda RBX: 00007f295de136c0 RCX: 00007f295cf5d68e [ 249.244373][T10710] RDX: 000000000000000f RSI: 00007f295de130a0 RDI: 0000000000000006 [ 249.244384][T10710] RBP: 00007f295de13090 R08: 0000000000000000 R09: 0000000000000000 [ 249.244395][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.244404][T10710] R13: 00007f295d216128 R14: 00007f295d216090 R15: 00007ffdcfc17b68 [ 249.244431][T10710] [ 249.606232][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.614332][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.637191][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.753771][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.763243][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.775547][T10724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.785925][T10724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.898648][T10724] veth1_vlan: left promiscuous mode [ 249.905236][T10724] veth0_vlan: left promiscuous mode [ 249.911434][T10724] veth0_vlan: entered promiscuous mode [ 249.920613][T10724] veth1_vlan: entered promiscuous mode [ 249.931148][T10724] veth1_macvtap: left promiscuous mode [ 249.938026][T10724] veth0_macvtap: left promiscuous mode [ 249.944749][T10724] veth0_macvtap: entered promiscuous mode [ 249.990522][T10724] veth1_macvtap: entered promiscuous mode [ 250.000460][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.008664][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.017107][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.025686][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.034694][T10724] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 250.056172][T10724] batman_adv: batadv0: Interface activated: gretap1 [ 250.081624][T10724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.125734][ T3379] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.133116][ T3379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.175395][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.182804][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.228454][ T3379] bridge0: port 3(team0) entered blocking state [ 250.234872][ T3379] bridge0: port 3(team0) entered forwarding state [ 250.259578][ T134] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.269782][ T134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.279486][ T134] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.309694][T10749] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 250.318850][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.337516][T10748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.364048][ T134] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.392714][ T134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.407279][ T134] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.420806][ T134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.471555][ T1224] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 250.766710][ T71] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 250.903264][ T13] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 250.973121][T10777] __nla_validate_parse: 6 callbacks suppressed [ 250.973140][T10777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1433'. [ 251.027354][T10784] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1432'. [ 251.047243][T10777] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1433'. [ 251.057232][T10784] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 251.454167][ T24] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 251.861544][ T134] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 251.869875][ T134] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 252.347360][T10840] syzkaller0: entered promiscuous mode [ 252.352891][T10840] syzkaller0: entered allmulticast mode [ 252.362990][T10841] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1449'. [ 252.705767][ T9] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 252.762791][T10852] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1452'. [ 253.018256][T10868] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 253.060007][T10868] bond6: entered promiscuous mode [ 253.075155][T10868] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.124653][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'. [ 253.136268][T10868] bond6: entered allmulticast mode [ 253.185808][T10873] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 253.205555][T10873] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1459'. [ 253.218408][T10873] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1459'. [ 253.228559][T10868] bond6: (slave bridge5): making interface the new active one [ 253.228915][T10873] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1459'. [ 253.236057][T10868] bridge5: entered promiscuous mode [ 253.239226][T10868] bridge5: entered allmulticast mode [ 253.278726][T10876] netlink: 'syz.4.1461': attribute type 24 has an invalid length. [ 253.289039][T10868] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 253.361320][T10882] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1461'. [ 254.180639][T10920] xt_hashlimit: size too large, truncated to 1048576 [ 254.237121][T10917] Set syz1 is full, maxelem 0 reached [ 254.279136][T10917] Bluetooth: MGMT ver 1.23 [ 254.487885][T10929] veth0: entered promiscuous mode [ 254.505075][T10929] veth0: left promiscuous mode [ 254.675473][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.928499][T10949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.940160][T10947] tipc: Started in network mode [ 254.970952][T10947] tipc: Node identity e6b8a9d9b0ef, cluster identity 4711 [ 254.983430][T10947] tipc: Enabled bearer , priority 0 [ 255.031586][T10947] syzkaller0: entered promiscuous mode [ 255.037104][T10947] syzkaller0: entered allmulticast mode [ 255.043265][T10947] tipc: Resetting bearer [ 255.062303][T10946] tipc: Resetting bearer [ 255.768547][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 255.992360][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.567590][T10946] tipc: Disabling bearer [ 257.579842][T10975] __nla_validate_parse: 21 callbacks suppressed [ 257.579861][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 257.596603][T10980] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.1488'. [ 257.636153][ T10] tipc: Node number set to 1448585689 [ 257.661817][ T48] lo speed is unknown, defaulting to 1000 [ 257.836268][T10994] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 257.986510][T11006] netlink: 'syz.1.1496': attribute type 2 has an invalid length. [ 258.012179][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 258.098422][T11013] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1499'. [ 258.115511][T11007] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1496'. [ 258.934920][T11025] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1501'. [ 259.309629][T11047] xt_nat: multiple ranges no longer supported [ 259.526602][T11057] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 259.541582][T11058] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 259.618490][T11064] xfrm0 speed is unknown, defaulting to 1000 [ 259.626708][T11064] lo speed is unknown, defaulting to 1000 [ 260.850460][T10996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.213065][T11089] netlink: zone id is out of range [ 261.221781][T11089] netlink: zone id is out of range [ 261.229345][T11089] netlink: zone id is out of range [ 261.244713][T11089] netlink: zone id is out of range [ 261.254836][T11089] netlink: zone id is out of range [ 261.267554][T11089] netlink: zone id is out of range [ 261.278390][T11089] netlink: zone id is out of range [ 261.298343][T11089] netlink: set zone limit has 4 unknown bytes [ 261.500881][T11108] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1520'. [ 261.889000][T11128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.896387][T11128] IPv6: NLM_F_CREATE should be set when creating new route [ 261.903706][T11128] IPv6: NLM_F_CREATE should be set when creating new route [ 262.234375][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 262.659460][T11152] syzkaller0: entered promiscuous mode [ 262.664976][T11152] syzkaller0: entered allmulticast mode [ 263.683245][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 264.196397][T11089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.675339][T11174] bond2: option mode: unable to set because the bond device is up [ 264.753354][T11179] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.921816][T11179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.023789][T11179] bond2: (slave lo): Enslaving as an active interface with an up link [ 265.053603][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'. [ 265.132470][T11179] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 266.671496][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1551'. [ 266.855275][T11234] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1553'. [ 266.902961][T11234] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1553'. [ 268.908499][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 270.660724][T11222] tipc: Enabling of bearer rejected, failed to enable media [ 270.681414][T11223] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 270.955363][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 271.019261][T11274] netlink: 'syz.4.1560': attribute type 12 has an invalid length. [ 271.067035][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 271.140689][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 271.202010][T11274] netlink: 'syz.4.1560': attribute type 12 has an invalid length. [ 271.263260][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 272.074462][ C0] sched: DL replenish lagged too much [ 278.390276][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 287.128683][ T4951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.141588][ T4951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.150277][ T4951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.163651][ T4951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.174535][ T4951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.298360][ T4951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.312324][ T4951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.323646][ T4951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.339447][ T4951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.353298][ T4951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.460345][ T4951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.476566][ T4951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.484666][ T4951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.498624][ T4951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.508284][ T4951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.193766][ T5644] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 288.206365][ T5644] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 288.217561][ T5644] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 288.228207][ T5644] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 288.237816][ T5644] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 288.346332][ T4951] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 288.357967][ T4951] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 288.373662][ T4951] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 288.384263][ T4951] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 288.392055][ T4951] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 288.795197][T11286] team0: Device gtp1 is up. Set it down before adding it as a team port [ 289.263457][ T5644] Bluetooth: hci5: command tx timeout [ 289.423677][ T5644] Bluetooth: hci6: command tx timeout [ 289.582853][ T5644] Bluetooth: hci7: command tx timeout [ 290.303815][ T5644] Bluetooth: hci8: command tx timeout [ 290.462836][ T5644] Bluetooth: hci9: command tx timeout [ 291.342807][ T5644] Bluetooth: hci5: command tx timeout [ 291.502845][ T5644] Bluetooth: hci6: command tx timeout [ 291.662992][ T5644] Bluetooth: hci7: command tx timeout [ 292.382839][ T5644] Bluetooth: hci8: command tx timeout [ 292.544308][ T5644] Bluetooth: hci9: command tx timeout [ 293.424593][ T5644] Bluetooth: hci5: command tx timeout [ 293.582737][ T5644] Bluetooth: hci6: command tx timeout [ 293.742940][ T5644] Bluetooth: hci7: command tx timeout [ 294.462749][ T5644] Bluetooth: hci8: command tx timeout [ 294.622756][ T5644] Bluetooth: hci9: command tx timeout [ 295.504314][ T5644] Bluetooth: hci5: command tx timeout [ 295.662795][ T5644] Bluetooth: hci6: command tx timeout [ 295.822871][ T5644] Bluetooth: hci7: command tx timeout [ 296.543766][ T5644] Bluetooth: hci8: command tx timeout [ 296.702761][ T5644] Bluetooth: hci9: command tx timeout [ 301.589518][T11286] syz_tun (unregistering): left allmulticast mode [ 301.596042][T11286] syz_tun (unregistering): left promiscuous mode [ 301.616500][T11286] bridge0: port 3(syz_tun) entered disabled state [ 302.758591][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.769130][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.869516][T11289] bridge0: port 3(syz_tun) entered disabled state [ 302.919847][T11289] syz_tun (unregistering): left allmulticast mode [ 302.926376][T11289] syz_tun (unregistering): left promiscuous mode [ 302.933317][T11289] bridge0: port 3(syz_tun) entered disabled state [ 307.357299][T11322] xfrm0 speed is unknown, defaulting to 1000 [ 307.408631][T11327] xfrm0 speed is unknown, defaulting to 1000 [ 307.415017][T11322] lo speed is unknown, defaulting to 1000 [ 307.648349][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.658852][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.697314][T11318] xfrm0 speed is unknown, defaulting to 1000 [ 307.704944][T11327] lo speed is unknown, defaulting to 1000 [ 307.727618][T11335] xfrm0 speed is unknown, defaulting to 1000 [ 307.747358][T11318] lo speed is unknown, defaulting to 1000 [ 307.773468][T11338] xfrm0 speed is unknown, defaulting to 1000 [ 307.785495][T11335] lo speed is unknown, defaulting to 1000 [ 307.829464][T11338] lo speed is unknown, defaulting to 1000 [ 308.499033][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 309.317742][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.328769][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.336687][T11322] bridge_slave_0: entered allmulticast mode [ 309.345053][T11322] bridge_slave_0: entered promiscuous mode [ 309.416639][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.424124][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.431628][T11322] bridge_slave_1: entered allmulticast mode [ 309.439995][T11322] bridge_slave_1: entered promiscuous mode [ 309.470998][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.479306][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.487337][T11318] bridge_slave_0: entered allmulticast mode [ 309.495447][T11318] bridge_slave_0: entered promiscuous mode [ 309.503383][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.512438][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.520186][T11327] bridge_slave_0: entered allmulticast mode [ 309.528418][T11327] bridge_slave_0: entered promiscuous mode [ 309.620439][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.628621][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.636268][T11318] bridge_slave_1: entered allmulticast mode [ 309.644562][T11318] bridge_slave_1: entered promiscuous mode [ 309.652786][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.660217][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.667843][T11327] bridge_slave_1: entered allmulticast mode [ 309.676046][T11327] bridge_slave_1: entered promiscuous mode [ 309.738662][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.780174][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.788314][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.796225][T11338] bridge_slave_0: entered allmulticast mode [ 309.804291][T11338] bridge_slave_0: entered promiscuous mode [ 309.848648][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.879566][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.893511][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.902099][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.909893][T11338] bridge_slave_1: entered allmulticast mode [ 309.918476][T11338] bridge_slave_1: entered promiscuous mode [ 309.944001][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.951423][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.959015][T11335] bridge_slave_0: entered allmulticast mode [ 309.967170][T11335] bridge_slave_0: entered promiscuous mode [ 309.998614][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.010629][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.046473][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.059266][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.067899][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.075425][T11335] bridge_slave_1: entered allmulticast mode [ 310.084617][T11335] bridge_slave_1: entered promiscuous mode [ 310.112342][T11322] team0: Port device team_slave_0 added [ 310.121660][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.170822][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.196621][T11322] team0: Port device team_slave_1 added [ 310.250754][T11327] team0: Port device team_slave_0 added [ 310.310228][T11318] team0: Port device team_slave_0 added [ 310.323092][T11327] team0: Port device team_slave_1 added [ 310.349483][T11335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.363269][T11335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.378301][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.385495][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.412695][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.425838][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.439146][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.473079][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.499647][T11318] team0: Port device team_slave_1 added [ 310.521478][T11338] team0: Port device team_slave_0 added [ 310.592309][T11338] team0: Port device team_slave_1 added [ 310.716854][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.724926][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.752159][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.803309][T11335] team0: Port device team_slave_0 added [ 310.825716][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.832756][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.859933][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.961593][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.970173][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.996499][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.019177][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.030195][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.057432][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.070402][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.077644][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.104204][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.123703][T11335] team0: Port device team_slave_1 added [ 311.163855][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.170977][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.197290][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.265863][T11322] hsr_slave_0: entered promiscuous mode [ 311.276357][T11322] hsr_slave_1: entered promiscuous mode [ 311.283194][T11322] debugfs: 'hsr0' already exists in 'hsr' [ 311.289024][T11322] Cannot create hsr debugfs directory [ 311.322131][T11335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.330568][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.367117][T11335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.391590][T11327] hsr_slave_0: entered promiscuous mode [ 311.398493][T11327] hsr_slave_1: entered promiscuous mode [ 311.406255][T11327] debugfs: 'hsr0' already exists in 'hsr' [ 311.412046][T11327] Cannot create hsr debugfs directory [ 311.420403][T11335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.428717][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.469877][T11335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.650898][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.663247][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.715783][T11318] hsr_slave_0: entered promiscuous mode [ 311.724268][T11318] hsr_slave_1: entered promiscuous mode [ 311.730776][T11318] debugfs: 'hsr0' already exists in 'hsr' [ 311.737520][T11318] Cannot create hsr debugfs directory [ 311.791765][T11338] hsr_slave_0: entered promiscuous mode [ 311.802549][T11338] hsr_slave_1: entered promiscuous mode [ 311.809702][T11338] debugfs: 'hsr0' already exists in 'hsr' [ 311.815750][T11338] Cannot create hsr debugfs directory [ 311.851635][T11335] hsr_slave_0: entered promiscuous mode [ 311.859609][T11335] hsr_slave_1: entered promiscuous mode [ 311.867484][T11335] debugfs: 'hsr0' already exists in 'hsr' [ 311.873529][T11335] Cannot create hsr debugfs directory [ 312.999006][T11322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.043203][T11322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.063515][T11322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.089943][T11322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.110075][T11322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.161802][T11322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.177151][T11322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.201169][T11322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.572464][T11335] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 313.603805][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.639085][T11335] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 313.675672][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.438733][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.081045][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.114964][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.376251][T11335] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.434190][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.478335][T11335] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.492216][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.637973][T11338] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 330.693361][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.729229][T11338] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 330.747796][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.755790][T11338] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 330.783253][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.838678][T11338] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 330.861683][T11338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.877760][T11322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.003870][T11322] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.068041][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.075255][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.098774][T11327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.131224][T11327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.172397][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.179612][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.195732][T11327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.227587][T11327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.287375][T11327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.304252][T11327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.339715][T11327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.361053][T11327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.451265][T11335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.584826][T11318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.609273][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.629350][T11335] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.638638][T11318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.669321][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.698136][T11318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.719161][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.741277][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.748490][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.769638][T11318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.788049][T11318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.850560][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.857793][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.002030][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.170868][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.222367][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.229641][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.331144][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.338364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.429278][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.779184][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.129071][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.136272][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.341240][ T47] team0: left allmulticast mode [ 333.353161][ T47] team_slave_0: left allmulticast mode [ 333.378509][ T47] team0: left promiscuous mode [ 333.391104][ T47] team_slave_0: left promiscuous mode [ 333.404814][ T47] bridge0: port 3(team0) entered disabled state [ 333.456991][ T47] bridge_slave_1: left allmulticast mode [ 333.469251][ T47] bridge_slave_1: left promiscuous mode [ 333.492819][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.547460][ T47] bridge_slave_0: left allmulticast mode [ 333.565087][ T47] bridge_slave_0: left promiscuous mode [ 333.584294][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.688164][ T47] batman_adv: batadv0: Interface deactivated: gretap1 [ 338.668922][ T47] gretap0 (unregistering): left promiscuous mode [ 341.270119][ T47] batman_adv: batadv0: Removing interface: gretap1 [ 349.299950][ T4951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.391633][ T4951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.414999][ T4951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.499167][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.509321][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.518484][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.526284][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.539756][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.548723][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.575727][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.668091][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.756103][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.828203][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.884443][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.895364][ T4951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.904237][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.948335][ T4951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.956756][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.964182][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.974411][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.187771][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.234799][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.243733][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.271965][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.280648][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.693758][ T5637] Bluetooth: hci1: command tx timeout [ 351.700029][ T5637] Bluetooth: hci0: command tx timeout [ 352.136423][ T5639] Bluetooth: hci2: command tx timeout [ 352.244563][ T5639] Bluetooth: hci3: command tx timeout [ 352.353936][ T5639] Bluetooth: hci4: command tx timeout [ 353.421631][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.480636][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.496723][ T47] bond0 (unregistering): Released all slaves [ 353.512151][ T47] bond1 (unregistering): (slave bond2): Releasing backup interface [ 353.524020][ T47] bond1 (unregistering): Released all slaves [ 353.543312][ T47] bond2 (unregistering): Released all slaves [ 353.790677][ T5639] Bluetooth: hci0: command tx timeout [ 353.796118][ T5639] Bluetooth: hci1: command tx timeout [ 354.246508][ T5637] Bluetooth: hci2: command tx timeout [ 354.359366][ T5637] Bluetooth: hci3: command tx timeout [ 354.462937][ T5637] Bluetooth: hci4: command tx timeout [ 355.482771][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 355.924891][ T5637] Bluetooth: hci1: command tx timeout [ 355.930334][ T5637] Bluetooth: hci0: command tx timeout [ 356.340526][ T5639] Bluetooth: hci2: command tx timeout [ 356.489927][ T5639] Bluetooth: hci3: command tx timeout [ 356.562957][ T5639] Bluetooth: hci4: command tx timeout [ 357.285588][T11526] xfrm0 speed is unknown, defaulting to 1000 [ 357.309683][T11526] lo speed is unknown, defaulting to 1000 [ 357.403516][T11512] xfrm0 speed is unknown, defaulting to 1000 [ 357.422578][T11515] xfrm0 speed is unknown, defaulting to 1000 [ 357.598907][T11512] lo speed is unknown, defaulting to 1000 [ 357.721709][T11515] lo speed is unknown, defaulting to 1000 [ 357.804014][T11520] xfrm0 speed is unknown, defaulting to 1000 [ 358.006032][ T5639] Bluetooth: hci0: command tx timeout [ 358.011483][ T5639] Bluetooth: hci1: command tx timeout [ 358.180281][T11508] xfrm0 speed is unknown, defaulting to 1000 [ 358.187140][T11520] lo speed is unknown, defaulting to 1000 [ 358.269152][T11508] lo speed is unknown, defaulting to 1000 [ 358.448862][ T5637] Bluetooth: hci2: command tx timeout [ 358.672889][ T5637] Bluetooth: hci3: command tx timeout [ 358.680016][ T5637] Bluetooth: hci4: command tx timeout [ 359.013281][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 359.561903][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.569104][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.576373][T11526] bridge_slave_0: entered allmulticast mode [ 359.610201][T11526] bridge_slave_0: entered promiscuous mode [ 359.673673][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.680878][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.688379][T11526] bridge_slave_1: entered allmulticast mode [ 359.696459][T11526] bridge_slave_1: entered promiscuous mode [ 360.174953][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.694186][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.544190][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 362.709315][T11526] team0: Port device team_slave_0 added [ 362.818362][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.825701][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.832961][T11515] bridge_slave_0: entered allmulticast mode [ 362.870223][T11515] bridge_slave_0: entered promiscuous mode [ 362.883854][T11526] team0: Port device team_slave_1 added [ 362.937546][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.944533][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.158689][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.169984][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.177191][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.184449][T11515] bridge_slave_1: entered allmulticast mode [ 363.248246][T11515] bridge_slave_1: entered promiscuous mode [ 363.337850][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.344833][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.370715][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.508236][T11512] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.515400][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.523049][T11512] bridge_slave_0: entered allmulticast mode [ 363.612324][T11512] bridge_slave_0: entered promiscuous mode [ 363.622154][T11512] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.629304][T11512] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.636547][T11512] bridge_slave_1: entered allmulticast mode [ 363.697227][T11512] bridge_slave_1: entered promiscuous mode [ 363.782590][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.911954][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.036776][T11526] hsr_slave_0: entered promiscuous mode [ 364.043470][T11526] hsr_slave_1: entered promiscuous mode [ 364.049803][T11526] debugfs: 'hsr0' already exists in 'hsr' [ 364.055541][T11526] Cannot create hsr debugfs directory [ 364.259822][T11512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.276899][T11512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.323384][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.381782][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.389083][T11508] bridge_slave_0: entered allmulticast mode [ 364.396918][T11508] bridge_slave_0: entered promiscuous mode [ 364.406895][T11515] team0: Port device team_slave_0 added [ 364.413578][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.454994][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.462352][T11508] bridge_slave_1: entered allmulticast mode [ 364.470131][T11508] bridge_slave_1: entered promiscuous mode [ 364.831048][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 364.842288][T11515] team0: Port device team_slave_1 added [ 365.110084][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.120365][T11520] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.127513][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.134770][T11520] bridge_slave_0: entered allmulticast mode [ 365.143606][T11520] bridge_slave_0: entered promiscuous mode [ 365.156195][T11512] team0: Port device team_slave_0 added [ 365.162804][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.169975][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.177251][T11520] bridge_slave_1: entered allmulticast mode [ 365.185906][T11520] bridge_slave_1: entered promiscuous mode [ 365.358854][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.365836][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.391838][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.410104][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.454390][T11512] team0: Port device team_slave_1 added [ 365.481999][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.488985][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.516515][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.691292][T11520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.719597][T11508] team0: Port device team_slave_0 added [ 365.726076][T11512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.733029][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.787748][T11512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.811280][T11520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.823175][T11508] team0: Port device team_slave_1 added [ 365.850941][T11515] hsr_slave_0: entered promiscuous mode [ 365.884066][T11515] hsr_slave_1: entered promiscuous mode [ 365.890528][T11515] debugfs: 'hsr0' already exists in 'hsr' [ 365.896328][T11515] Cannot create hsr debugfs directory [ 365.911873][T11512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.918842][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.944722][T11512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.124079][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.131060][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.156940][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.288628][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.295609][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.373540][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.763241][T11520] team0: Port device team_slave_0 added [ 366.852578][T11512] hsr_slave_0: entered promiscuous mode [ 366.859331][T11512] hsr_slave_1: entered promiscuous mode [ 366.865730][T11512] debugfs: 'hsr0' already exists in 'hsr' [ 366.871640][T11512] Cannot create hsr debugfs directory [ 366.933539][T11520] team0: Port device team_slave_1 added [ 367.164523][T11508] hsr_slave_0: entered promiscuous mode [ 367.171271][T11508] hsr_slave_1: entered promiscuous mode [ 367.177709][T11508] debugfs: 'hsr0' already exists in 'hsr' [ 367.183449][T11508] Cannot create hsr debugfs directory [ 367.403174][T11520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.410157][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.459736][T11520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.483563][ T47] veth1_to_team: left promiscuous mode [ 367.503889][ T47] dummy0: left promiscuous mode [ 367.540867][ T47] hsr_slave_0: left promiscuous mode [ 367.574997][ T47] hsr_slave_1: left promiscuous mode [ 367.584805][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.592272][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.601024][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.608426][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.633105][ T47] veth1_macvtap: left promiscuous mode [ 367.638852][ T47] veth0_macvtap: left promiscuous mode [ 367.644469][ T47] veth1_vlan: left promiscuous mode [ 367.649760][ T47] veth0_vlan: left promiscuous mode [ 368.275421][ T47] team0 (unregistering): Port device team_slave_0 removed [ 368.535613][T11520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.542599][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.612163][T11520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.784915][T11520] hsr_slave_0: entered promiscuous mode [ 368.815099][T11520] hsr_slave_1: entered promiscuous mode [ 368.823580][T11520] debugfs: 'hsr0' already exists in 'hsr' [ 368.829343][T11520] Cannot create hsr debugfs directory [ 378.871632][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.562528][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.580957][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.594874][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.607875][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.615777][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.807034][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.820723][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.831623][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.849188][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.860748][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.058993][ T5637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 411.077502][ T5637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 411.090545][ T5637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 411.104015][ T5637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 411.113927][ T5637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 411.267987][ T5637] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 411.285127][ T5637] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 411.294657][ T5637] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 411.311201][ T5637] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 411.322340][ T5637] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 411.588663][ T5637] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 411.610709][ T5637] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 411.638996][ T5637] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 411.649449][ T5637] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 411.657537][ T5637] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 412.663105][ T5637] Bluetooth: hci5: command tx timeout [ 412.882994][ T5637] Bluetooth: hci6: command tx timeout [ 413.213085][ T5637] Bluetooth: hci7: command tx timeout [ 413.382939][ T5637] Bluetooth: hci8: command tx timeout [ 413.518915][T11669] xfrm0 speed is unknown, defaulting to 1000 [ 413.580046][T11674] xfrm0 speed is unknown, defaulting to 1000 [ 413.608653][T11669] lo speed is unknown, defaulting to 1000 [ 413.657874][T11674] lo speed is unknown, defaulting to 1000 [ 413.748783][T11679] xfrm0 speed is unknown, defaulting to 1000 [ 413.775743][ T5637] Bluetooth: hci9: command tx timeout [ 413.855346][T11683] xfrm0 speed is unknown, defaulting to 1000 [ 413.861802][T11679] lo speed is unknown, defaulting to 1000 [ 414.017385][T11683] lo speed is unknown, defaulting to 1000 [ 414.122129][T11687] xfrm0 speed is unknown, defaulting to 1000 [ 414.196000][T11687] lo speed is unknown, defaulting to 1000 [ 414.715938][ T5637] Bluetooth: hci5: command tx timeout [ 414.982897][ T5637] Bluetooth: hci6: command tx timeout [ 415.273574][ T5637] Bluetooth: hci7: command tx timeout [ 415.432843][ T5637] Bluetooth: hci8: command tx timeout [ 415.833582][ T5637] Bluetooth: hci9: command tx timeout [ 416.126906][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.152781][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.171036][T11674] bridge_slave_0: entered allmulticast mode [ 416.196683][T11674] bridge_slave_0: entered promiscuous mode [ 416.376786][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.392772][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.409095][T11674] bridge_slave_1: entered allmulticast mode [ 416.426169][T11674] bridge_slave_1: entered promiscuous mode [ 416.715242][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.730333][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.747480][T11669] bridge_slave_0: entered allmulticast mode [ 416.766384][T11669] bridge_slave_0: entered promiscuous mode [ 416.793580][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.812746][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.821646][T11669] bridge_slave_1: entered allmulticast mode [ 416.829307][ T5637] Bluetooth: hci5: command tx timeout [ 416.854762][T11669] bridge_slave_1: entered promiscuous mode [ 416.868778][T11674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.908636][T11674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.054260][ T5637] Bluetooth: hci6: command tx timeout [ 417.374020][ T5637] Bluetooth: hci7: command tx timeout [ 417.502809][ T5637] Bluetooth: hci8: command tx timeout [ 417.943820][ T5637] Bluetooth: hci9: command tx timeout [ 418.872941][ T5639] Bluetooth: hci5: command tx timeout [ 419.103400][ T5639] Bluetooth: hci6: command tx timeout [ 419.423357][ T5639] Bluetooth: hci7: command tx timeout [ 419.582838][ T5639] Bluetooth: hci8: command tx timeout [ 419.984702][ T5639] Bluetooth: hci9: command tx timeout [ 440.309030][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.804214][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.345774][ T5637] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 470.360494][ T5637] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 470.369844][ T5637] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 470.385815][ T5637] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 470.393901][ T5637] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 471.297963][ T5643] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 471.313574][ T5643] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 471.327894][ T5643] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 471.338820][ T5643] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 471.355026][ T5643] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 471.447152][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 471.461091][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 471.470628][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 471.484999][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 471.495798][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 471.630515][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 471.647096][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 471.656695][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 471.676543][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 471.698292][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 471.816047][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 471.840147][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 471.858292][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 471.868654][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 471.879631][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 472.463085][ T5643] Bluetooth: hci10: command tx timeout [ 473.199529][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 473.206561][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 473.219997][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 473.233450][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 473.242900][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 473.423146][ T9208] Bluetooth: hci11: command tx timeout [ 473.583466][ T4951] Bluetooth: hci12: command tx timeout [ 473.742914][ T4951] Bluetooth: hci13: command tx timeout [ 473.983188][ T4951] Bluetooth: hci14: command tx timeout [ 474.526331][T11674] team0: Port device team_slave_0 added [ 474.583913][T11683] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.604974][ T4951] Bluetooth: hci10: command tx timeout [ 474.637071][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.644399][T11683] bridge_slave_0: entered allmulticast mode [ 474.654564][T11683] bridge_slave_0: entered promiscuous mode [ 474.691075][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.747067][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.754376][T11679] bridge_slave_0: entered allmulticast mode [ 474.762166][T11679] bridge_slave_0: entered promiscuous mode [ 475.434251][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.532283][ T4951] Bluetooth: hci11: command tx timeout [ 475.684280][ T9208] Bluetooth: hci12: command tx timeout [ 475.874286][ T4951] Bluetooth: hci13: command tx timeout [ 476.081325][ T4951] Bluetooth: hci14: command tx timeout [ 476.734856][ T4951] Bluetooth: hci10: command tx timeout [ 477.221158][T11825] xfrm0 speed is unknown, defaulting to 1000 [ 477.228868][T11825] lo speed is unknown, defaulting to 1000 [ 477.642186][ T4951] Bluetooth: hci11: command tx timeout [ 477.838169][ T4951] Bluetooth: hci12: command tx timeout [ 477.948435][ T4951] Bluetooth: hci13: command tx timeout [ 478.184885][ T4951] Bluetooth: hci14: command tx timeout [ 478.552340][T11835] xfrm0 speed is unknown, defaulting to 1000 [ 478.560064][T11835] lo speed is unknown, defaulting to 1000 [ 478.814826][T11845] xfrm0 speed is unknown, defaulting to 1000 [ 478.822508][T11845] lo speed is unknown, defaulting to 1000 [ 478.892434][T11842] xfrm0 speed is unknown, defaulting to 1000 [ 478.899312][ T4951] Bluetooth: hci10: command tx timeout [ 479.002247][T11842] lo speed is unknown, defaulting to 1000 [ 479.735285][ T4951] Bluetooth: hci11: command tx timeout [ 479.759923][T11838] xfrm0 speed is unknown, defaulting to 1000 [ 479.767593][T11838] lo speed is unknown, defaulting to 1000 [ 479.952393][ T9208] Bluetooth: hci12: command tx timeout [ 480.064796][ T9208] Bluetooth: hci13: command tx timeout [ 480.098618][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.105862][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.113201][T11835] bridge_slave_0: entered allmulticast mode [ 480.177774][T11835] bridge_slave_0: entered promiscuous mode [ 480.207398][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.214572][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.221868][T11825] bridge_slave_0: entered allmulticast mode [ 480.234109][T11825] bridge_slave_0: entered promiscuous mode [ 480.254862][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.262036][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.326194][ T9208] Bluetooth: hci14: command tx timeout [ 480.334159][T11835] bridge_slave_1: entered allmulticast mode [ 480.342355][T11835] bridge_slave_1: entered promiscuous mode [ 480.370626][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.377787][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.420051][T11825] bridge_slave_1: entered allmulticast mode [ 480.427952][T11825] bridge_slave_1: entered promiscuous mode [ 480.637759][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.663921][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.748503][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.883061][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.997899][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.005202][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.012503][T11842] bridge_slave_0: entered allmulticast mode [ 481.020762][T11842] bridge_slave_0: entered promiscuous mode [ 481.041259][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.074449][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.082006][T11842] bridge_slave_1: entered allmulticast mode [ 481.090026][T11842] bridge_slave_1: entered promiscuous mode [ 481.099957][T11835] team0: Port device team_slave_0 added [ 481.234198][T11835] team0: Port device team_slave_1 added [ 481.308814][T11825] team0: Port device team_slave_0 added [ 481.413796][T11825] team0: Port device team_slave_1 added [ 481.422646][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.437472][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.570777][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.578324][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.633035][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.708089][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.715069][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.768319][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.782052][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.789823][T11845] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.797141][T11845] bridge_slave_0: entered allmulticast mode [ 481.805090][T11845] bridge_slave_0: entered promiscuous mode [ 481.827665][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.834705][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.882893][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.905525][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.912775][T11845] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.920082][T11845] bridge_slave_1: entered allmulticast mode [ 481.930490][T11845] bridge_slave_1: entered promiscuous mode [ 482.380982][T11842] team0: Port device team_slave_0 added [ 482.409437][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.437425][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.463344][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.497202][T11842] team0: Port device team_slave_1 added [ 482.608861][T11825] hsr_slave_0: entered promiscuous mode [ 482.615666][T11825] hsr_slave_1: entered promiscuous mode [ 482.622079][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 482.627817][T11825] Cannot create hsr debugfs directory [ 482.704025][T11845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.767823][T11835] hsr_slave_0: entered promiscuous mode [ 482.774818][T11835] hsr_slave_1: entered promiscuous mode [ 482.782448][T11835] debugfs: 'hsr0' already exists in 'hsr' [ 482.788262][T11835] Cannot create hsr debugfs directory [ 482.809625][T11845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.960090][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.967071][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.146268][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.189248][T11838] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.196410][T11838] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.203711][T11838] bridge_slave_0: entered allmulticast mode [ 483.211509][T11838] bridge_slave_0: entered promiscuous mode [ 483.311905][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.318889][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.422681][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.451975][T11845] team0: Port device team_slave_0 added [ 483.524664][T11838] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.531831][T11838] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.539149][T11838] bridge_slave_1: entered allmulticast mode [ 483.547788][T11838] bridge_slave_1: entered promiscuous mode [ 483.721764][T11845] team0: Port device team_slave_1 added [ 484.493029][T11845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.500018][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.527849][T11845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.542999][T11845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.549966][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.604636][T11845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.623677][T11842] hsr_slave_0: entered promiscuous mode [ 484.630616][T11842] hsr_slave_1: entered promiscuous mode [ 484.637097][T11842] debugfs: 'hsr0' already exists in 'hsr' [ 484.642845][T11842] Cannot create hsr debugfs directory [ 484.670109][T11838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.892810][T11838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.124770][T11838] team0: Port device team_slave_0 added [ 485.160305][T11845] hsr_slave_0: entered promiscuous mode [ 485.167624][T11845] hsr_slave_1: entered promiscuous mode [ 485.175115][T11845] debugfs: 'hsr0' already exists in 'hsr' [ 485.180865][T11845] Cannot create hsr debugfs directory [ 485.197063][T11838] team0: Port device team_slave_1 added [ 485.290755][T11838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.297744][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.324365][T11838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.401108][T11838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.408101][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.433981][T11838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.631803][T11838] hsr_slave_0: entered promiscuous mode [ 485.638725][T11838] hsr_slave_1: entered promiscuous mode [ 485.645256][T11838] debugfs: 'hsr0' already exists in 'hsr' [ 485.651000][T11838] Cannot create hsr debugfs directory [ 490.085892][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 490.669103][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 491.463780][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 492.175883][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 500.611198][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 501.215240][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 502.135381][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.347536][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.358055][ T47] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.469117][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.479428][ T47] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.394176][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.429840][ T47] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.886041][ T47] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.933766][ T47] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.877651][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 515.593359][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 516.238894][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 516.906665][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 517.510743][ T47] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.520522][ T47] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.307793][ T47] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.317583][ T47] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.892586][ T31] INFO: task syz-executor:11526 blocked for more than 143 seconds. [ 522.900533][ T31] Not tainted syzkaller #0 [ 522.905476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.914148][ T31] task:syz-executor state:D stack:22664 pid:11526 tgid:11526 ppid:1 task_flags:0x400140 flags:0x00080002 [ 522.926098][ T31] Call Trace: [ 522.929411][ T31] [ 522.932351][ T31] __schedule+0x1840/0x57a0 [ 522.974528][ T31] ? __lock_acquire+0x683/0x2cd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.036359][ T31] ? __pfx___schedule+0x10/0x10 [ 523.041279][ T31] ? schedule+0x90/0x360 [ 523.045871][ T31] schedule+0x164/0x360 [ 523.050064][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.055549][ T31] __mutex_lock+0x7c5/0x1590 [ 523.060243][ T31] ? __mutex_lock+0x5c5/0x1590 [ 523.065026][ T31] ? new_device_store+0x13c/0x710 [ 523.070201][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.075263][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 523.080179][ T31] new_device_store+0x13c/0x710 [ 523.085067][ T31] ? __pfx_new_device_store+0x10/0x10 [ 523.090460][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 523.095357][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 523.133823][ T31] ? sysfs_kf_write+0x166/0x260 [ 523.156307][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 523.161567][ T31] kernfs_fop_write_iter+0x3a4/0x540 [ 523.166898][ T31] vfs_write+0x612/0xba0 [ 523.171210][ T31] ? __pfx_vfs_write+0x10/0x10 [ 523.175992][ T31] ? do_sys_openat2+0x14c/0x200 [ 523.180863][ T31] ? kmem_cache_free+0x182/0x650 [ 523.185854][ T31] ? fd_install+0x94/0x3d0 [ 523.190321][ T31] ksys_write+0x150/0x270 [ 523.194674][ T31] ? __pfx_ksys_write+0x10/0x10 [ 523.199549][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.205676][ T31] do_syscall_64+0x174/0x580 [ 523.210341][ T31] ? trace_irq_disable+0x3b/0x140 [ 523.381527][ T31] ? clear_bhb_loop+0x40/0x90 [ 523.386275][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.392188][ T31] RIP: 0033:0x7f070595d68e [ 523.396616][ T31] RSP: 002b:00007fff049b9158 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.405148][ T31] RAX: ffffffffffffffda RBX: 0000555590f59500 RCX: 00007f070595d68e [ 523.413165][ T31] RDX: 0000000000000003 RSI: 00007fff049b91e0 RDI: 0000000000000005 [ 523.421150][ T31] RBP: 00007f0705a33616 R08: 0000000000000000 R09: 0000000000000000 [ 523.429137][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 523.463411][ T31] R13: 00007fff049b91e0 R14: 00007f0706744620 R15: 0000000000000003 [ 523.471455][ T31] [ 523.484262][ T31] [ 523.484262][ T31] Showing all locks held in the system: [ 523.523598][ T31] 1 lock held by khungtaskd/31: [ 523.530308][ T31] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 523.542049][ T31] 6 locks held by kworker/u8:3/47: [ 523.547195][ T31] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 523.615315][ T31] #1: ffffc90000b77c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 523.625915][ T31] #2: ffffffff8fdb19a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 523.635392][ T31] #3: ffff88807b852128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 523.645616][ T31] #4: ffff88807b851258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 523.656272][ T31] #5: ffffffff8e962978 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 523.666605][ T31] 2 locks held by getty/5396: [ 523.697735][ T31] #0: ffff8880369380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 523.707692][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 523.717831][ T31] 3 locks held by kworker/1:9/11487: [ 523.723126][ T31] 7 locks held by syz-executor/11520: [ 523.728495][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 523.737415][ T31] #1: ffff888036948c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 523.747192][ T31] #2: ffff888029de34b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 523.757238][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 523.767537][ T31] #4: ffff888060111128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 523.778567][ T31] #5: ffff888025a70258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 523.809104][ T31] #6: ffffffff8e962978 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 523.819111][ T31] 4 locks held by syz-executor/11526: [ 523.824484][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 523.833413][ T31] #1: ffff888072d81880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 523.843190][ T31] #2: ffff888029de35a8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 523.853246][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 523.863647][ T31] 4 locks held by syz-executor/11825: [ 523.869392][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 523.878328][ T31] #1: ffff88805326f080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 523.888116][ T31] #2: ffff888029de34b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 523.898165][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 523.926735][ T31] 4 locks held by syz-executor/11835: [ 523.932150][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 523.941071][ T31] #1: ffff88805037c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 523.950852][ T31] #2: ffff888029de34b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 523.960897][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 523.971200][ T31] 4 locks held by syz-executor/11838: [ 523.976908][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 523.985845][ T31] #1: ffff88807449f480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 523.995628][ T31] #2: ffff888029de34b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 524.005684][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 524.016197][ T31] 4 locks held by syz-executor/11842: [ 524.042618][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 524.051576][ T31] #1: ffff8880340bc480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 524.061354][ T31] #2: ffff888029de34b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 524.071756][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 524.082075][ T31] 4 locks held by syz-executor/11845: [ 524.087480][ T31] #0: ffff888033b0a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 524.096417][ T31] #1: ffff888037e2b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 524.106203][ T31] #2: ffff888029de34b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 524.123978][ T31] #3: ffffffff8f64dc00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 524.160612][ T31] 9 locks held by dhcpcd-run-hook/12407: [ 524.166351][ T31] [ 524.168680][ T31] ============================================= [ 524.168680][ T31] [ 524.177100][ T31] NMI backtrace for cpu 0 [ 524.177125][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.177152][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.177161][ T31] Call Trace: [ 524.177168][ T31] [ 524.177176][ T31] dump_stack_lvl+0xe8/0x150 [ 524.177231][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 524.177312][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 524.177355][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 524.177378][ T31] sys_info+0x135/0x170 [ 524.177427][ T31] watchdog+0xfd7/0x1030 [ 524.177464][ T31] ? watchdog+0x1c7/0x1030 [ 524.177493][ T31] kthread+0x389/0x470 [ 524.177516][ T31] ? __pfx_watchdog+0x10/0x10 [ 524.177537][ T31] ? __pfx_kthread+0x10/0x10 [ 524.177560][ T31] ret_from_fork+0x514/0xb70 [ 524.177596][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 524.177614][ T31] ? __switch_to+0xc89/0x1420 [ 524.177641][ T31] ? __pfx_kthread+0x10/0x10 [ 524.177664][ T31] ret_from_fork_asm+0x1a/0x30 [ 524.177699][ T31] [ 524.177706][ T31] Sending NMI from CPU 0 to CPUs 1: [ 524.298135][ C1] NMI backtrace for cpu 1 [ 524.298151][ C1] CPU: 1 UID: 0 PID: 12407 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) [ 524.298168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.298177][ C1] RIP: 0010:memset_orig+0x33/0xb0 [ 524.298200][ C1] Code: 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 524.298213][ C1] RSP: 0018:ffffc90000a07fb8 EFLAGS: 00000206 [ 524.298227][ C1] RAX: 0000000000000000 RBX: 0000000000000820 RCX: 0000000000000005 [ 524.298238][ C1] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffc90000a08040 [ 524.298248][ C1] RBP: ffffc90000a081e8 R08: ffffffff8224e00a R09: 0000000000000000 [ 524.298258][ C1] R10: ffffc90000a07fc0 R11: ffff8880b87436b0 R12: ffff888062a87500 [ 524.298270][ C1] R13: 00000000000000f0 R14: ffff888062a875f0 R15: ffffc90000a07fc0 [ 524.298281][ C1] FS: 0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000 [ 524.298293][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.298304][ C1] CR2: 00007f081eaf2fe8 CR3: 0000000047d8e000 CR4: 00000000003526f0 [ 524.298318][ C1] Call Trace: [ 524.298324][ C1] [ 524.298330][ C1] kasan_save_track+0x2f/0x80 [ 524.298394][ C1] ? __lock_acquire+0x683/0x2cd0 [ 524.298412][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 524.298432][ C1] ? kfree+0x1c5/0x640 [ 524.298450][ C1] ? stack_depot_save_flags+0x33/0x800 [ 524.298544][ C1] ? kmem_cache_alloc_node_noprof+0x23a/0x680 [ 524.298562][ C1] ? lock_acquire+0x106/0x350 [ 524.298582][ C1] __kasan_slab_alloc+0x6c/0x80 [ 524.298602][ C1] kmem_cache_alloc_node_noprof+0x380/0x680 [ 524.298622][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 524.298681][ C1] ? kmem_cache_alloc_node_noprof+0x23a/0x680 [ 524.298701][ C1] __alloc_skb+0x1d7/0x7a0 [ 524.298722][ C1] synproxy_send_client_synack+0x175/0xde0 [ 524.298780][ C1] ? lock_acquire+0x106/0x350 [ 524.298794][ C1] ? synproxy_pernet+0x45/0x270 [ 524.298837][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 524.298852][ C1] ? nft_tproxy_eval+0x1400/0x1c80 [ 524.298866][ C1] ? synproxy_pernet+0x45/0x270 [ 524.298884][ C1] nft_synproxy_eval_v4+0x37b/0x530 [ 524.298902][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 524.298919][ C1] ? nf_ip_checksum+0x13c/0x510 [ 524.298972][ C1] nft_synproxy_do_eval+0x335/0x550 [ 524.298989][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 524.299004][ C1] ? nft_trace_init+0x280/0x4d0 [ 524.299072][ C1] nft_do_chain+0x48d/0x1ad0 [ 524.299123][ C1] ? __pfx_nft_osf_eval+0x10/0x10 [ 524.299138][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 524.299153][ C1] ? trace_packet+0x32b/0x4a0 [ 524.299237][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 524.299266][ C1] nft_do_chain_inet+0x360/0x4b0 [ 524.299284][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 524.299299][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 524.299319][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 524.299365][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 524.299381][ C1] nf_hook_slow+0xc5/0x220 [ 524.299398][ C1] NF_HOOK+0x21f/0x3c0 [ 524.299473][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 524.299492][ C1] ? NF_HOOK+0x9e/0x3c0 [ 524.299509][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 524.299529][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 524.299550][ C1] ? ip_local_deliver+0x113/0x190 [ 524.299570][ C1] NF_HOOK+0x336/0x3c0 [ 524.299589][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 524.299607][ C1] ? NF_HOOK+0x9e/0x3c0 [ 524.299624][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 524.299643][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 524.299661][ C1] ? ip_rcv_core+0x88d/0xd50 [ 524.299687][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 524.299705][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 524.299724][ C1] process_backlog+0xa34/0x1860 [ 524.299791][ C1] ? process_backlog+0x3c3/0x1860 [ 524.299815][ C1] __napi_poll+0xaa/0x330 [ 524.299833][ C1] net_rx_action+0x61d/0xf50 [ 524.299857][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 524.299881][ C1] ? ktime_get+0x1f5/0x220 [ 524.299902][ C1] ? lapic_next_event+0x11/0x20 [ 524.299922][ C1] handle_softirqs+0x225/0x840 [ 524.299945][ C1] ? __irq_exit_rcu+0xca/0x220 [ 524.299962][ C1] __irq_exit_rcu+0xca/0x220 [ 524.299977][ C1] irq_exit_rcu+0x9/0x30 [ 524.299989][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 524.300011][ C1] [ 524.300016][ C1] [ 524.300022][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.300039][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 524.300061][ C1] Code: f7 e8 4d e0 fc f5 f7 c3 00 02 00 00 74 05 e8 c0 66 28 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 6d ee f5 65 8b 05 cd 67 91 07 85 c0 74 18 5b 41 5e c3 cc cc [ 524.300073][ C1] RSP: 0018:ffffc90004e2efb8 EFLAGS: 00000206 [ 524.300088][ C1] RAX: 0000000000000002 RBX: 0000000000000286 RCX: 0000000080000001 [ 524.300098][ C1] RDX: 0000000000000007 RSI: ffffffff8dfa1aa8 RDI: 0000000000000001 [ 524.300108][ C1] RBP: 0000000000000000 R08: ffffffff902f89f7 R09: 1ffffffff205f13e [ 524.300118][ C1] R10: dffffc0000000000 R11: fffffbfff205f13f R12: 0000000000000002 [ 524.300129][ C1] R13: ffff888033ff0000 R14: ffffffff9a697248 R15: 000000000000000f [ 524.300149][ C1] debug_check_no_obj_freed+0x483/0x530 [ 524.300202][ C1] __free_frozen_pages+0x5a1/0xd20 [ 524.300226][ C1] __slab_free+0x274/0x2c0 [ 524.300248][ C1] ? qlist_free_all+0x8e/0x100 [ 524.300268][ C1] qlist_free_all+0x99/0x100 [ 524.300286][ C1] ? vm_area_dup+0x28/0x670 [ 524.300305][ C1] kasan_quarantine_reduce+0x148/0x160 [ 524.300325][ C1] __kasan_slab_alloc+0x22/0x80 [ 524.300345][ C1] kmem_cache_alloc_noprof+0x2b8/0x650 [ 524.300363][ C1] ? vm_area_dup+0x28/0x670 [ 524.300381][ C1] ? kmem_cache_alloc_noprof+0x156/0x650 [ 524.300402][ C1] vm_area_dup+0x28/0x670 [ 524.300420][ C1] ? __split_vma+0x1cd/0xa50 [ 524.300437][ C1] __split_vma+0x1dc/0xa50 [ 524.300459][ C1] ? __pfx___split_vma+0x10/0x10 [ 524.300479][ C1] ? mas_find+0xab1/0xcf0 [ 524.300531][ C1] vms_gather_munmap_vmas+0x4e3/0x1370 [ 524.300553][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 524.300573][ C1] ? mas_find+0xa23/0xcf0 [ 524.300595][ C1] mmap_region+0x909/0x2340 [ 524.300614][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 524.300632][ C1] ? __pfx_mmap_region+0x10/0x10 [ 524.300650][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 524.300678][ C1] ? rcu_is_watching+0x15/0xb0 [ 524.300700][ C1] ? process_measurement+0x139d/0x1c10 [ 524.300793][ C1] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 524.300816][ C1] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 524.300834][ C1] ? cap_mmap_addr+0xaf/0x100 [ 524.300884][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 524.300920][ C1] ? shmem_mapping+0xd/0x50 [ 524.300942][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 524.300966][ C1] do_mmap+0xc3b/0x10c0 [ 524.300987][ C1] ? __pfx_do_mmap+0x10/0x10 [ 524.301002][ C1] ? down_write_killable+0x180/0x240 [ 524.301020][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 524.301036][ C1] ? apparmor_mmap_file+0x2da/0x3e0 [ 524.301104][ C1] vm_mmap_pgoff+0x272/0x4e0 [ 524.301123][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 524.301139][ C1] ? __fget_files+0x2a/0x420 [ 524.301159][ C1] ? __fget_files+0x3a2/0x420 [ 524.301175][ C1] ? __fget_files+0x2a/0x420 [ 524.301194][ C1] ksys_mmap_pgoff+0x4dc/0x760 [ 524.301212][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.301227][ C1] do_syscall_64+0x174/0x580 [ 524.301241][ C1] ? trace_irq_disable+0x3b/0x140 [ 524.301260][ C1] ? clear_bhb_loop+0x40/0x90 [ 524.301277][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.301291][ C1] RIP: 0033:0x7f081edc4242 [ 524.301305][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 524.301318][ C1] RSP: 002b:00007ffc97ae7f18 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 524.301332][ C1] RAX: ffffffffffffffda RBX: 00007f081eae2000 RCX: 00007f081edc4242 [ 524.301344][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f081eae2000 [ 524.301353][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000004000 [ 524.301363][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc97ae7fa0 [ 524.301373][ C1] R13: 00007f081ed99050 R14: 00007ffc97ae8350 R15: 00000fff92f5cfe6 [ 524.301392][ C1] [ 525.251809][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 525.258710][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.267830][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.277888][ T31] Call Trace: [ 525.281171][ T31] [ 525.284110][ T31] vpanic+0x56c/0xa60 [ 525.288108][ T31] ? __pfx___schedule+0x10/0x10 [ 525.292975][ T31] ? __pfx_vpanic+0x10/0x10 [ 525.297496][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 525.303670][ T31] panic+0xc5/0xd0 [ 525.307400][ T31] ? __pfx_panic+0x10/0x10 [ 525.311822][ T31] ? preempt_schedule_common+0x82/0xd0 [ 525.317296][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 525.322688][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 525.328853][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 525.335020][ T31] watchdog+0x1030/0x1030 [ 525.339372][ T31] ? watchdog+0x1c7/0x1030 [ 525.343807][ T31] kthread+0x389/0x470 [ 525.347886][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.352570][ T31] ? __pfx_kthread+0x10/0x10 [ 525.357173][ T31] ret_from_fork+0x514/0xb70 [ 525.361772][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 525.366887][ T31] ? __switch_to+0xc89/0x1420 [ 525.371577][ T31] ? __pfx_kthread+0x10/0x10 [ 525.376176][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.380964][ T31] [ 525.384276][ T31] Kernel Offset: disabled [ 525.388679][ T31] Rebooting in 86400 seconds..