last executing test programs: 14.582505668s ago: executing program 0 (id=4325): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000001300)={0x2, 0x4e23, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1afaff00000000c8a1000000000000070150ddb26181c0940000f5ffffffb702000008000000b70300080400000085000015050000008500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) connect$inet6(r6, &(0x7f00000012c0)={0xa, 0x4e22, 0x80000000, @local, 0x7}, 0x1c) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) recvmsg(0xffffffffffffffff, 0x0, 0x100) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0xe7c}, {&(0x7f0000001200)=""/114, 0x72}], 0x2, 0x0, 0x300}, 0x562a}], 0x3ffffffffffff27, 0x1a000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x20000800) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x84, 0x3, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe02b}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7c477130}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x15}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) socket$alg(0x26, 0x5, 0x0) 10.980067385s ago: executing program 0 (id=4333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c005100736f757263655f6d61635f69735f6d756c01903274696361"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 7.714942048s ago: executing program 0 (id=4355): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa8860000000e517000120010000000000000000000000000000fe8000000000000000000000000000002f02000000000000070800000001"], 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket(0x10, 0x80003, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x40}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x3f, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x8b, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7d, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x9, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x4, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x6}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x4}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0x8, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x2000007, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1, 0x8788e3783f54c030}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 7.291838315s ago: executing program 2 (id=4360): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)}, 0xff0f000020000080) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0x1, 0x6, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="1300010000000000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x24020400) socket(0x2d, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010005000500070000000000080009000300000014002000400000000000e4ff0000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 7.107404264s ago: executing program 2 (id=4362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 6.611639185s ago: executing program 0 (id=4367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x348, 0x1d0, 0x348, 0x348, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {0x308}, [@common=@ttl={{0x28}, {0x3, 0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2ab, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5370bd4294c1", 0x200, 0xe, [0x25, 0x1e, 0x18, 0x2f, 0x38, 0x40, 0x11, 0x23, 0x16, 0x1f, 0x30, 0x38, 0x18, 0x27, 0x15, 0x1], 0x2, 0x0, 0x9}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x7a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 6.227871172s ago: executing program 0 (id=4371): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef1}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x100) shutdown(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000680)={{r0, &(0x7f0000000380)='+.-%,\x00', 0x4100, 0x0, 0x10001, &(0x7f0000000400)={@_ha_fsid}, 0x0}, {[0x4, 0xffffffff, 0xc94, 0x2c]}, 0x4, 0xd6, &(0x7f0000000480)=""/214}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "9a57fb0fc0e00278cd2050893728725f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "313ce444d067adf057f4e047c00c09da"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "113792aa1a260ebcfb8c359607dcf61b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b00d26e3a8b106cf3b4f7a7431d7a06a"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "2c432c3fd1b12cbe2250314c02c3d047"}, @NL80211_ATTR_PMK={0x14, 0xfe, "833886559a2666396a46193688f4caa3"}]}, 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) tee(r7, 0xffffffffffffffff, 0x8, 0xd) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 6.204763884s ago: executing program 2 (id=4372): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08001a00", @ANYRES32=r1, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x3c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5.596590294s ago: executing program 2 (id=4375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3bb, 0xcba, 0x10, 0x800001, 0xb, 0xfff, 0xb146, 0x2, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = accept(r6, 0x0, &(0x7f0000000380)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xb4, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x840) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f00000000c0)='.,\a\xdf@:#\x00', 0x54200, &(0x7f0000000200)={@align=0x8, {0x0, 0x3, 0x8c, 0x9}}, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x4}, {[0x2, 0x0, 0x7f, 0x3]}, 0x4, 0xc, &(0x7f0000000340)=""/12}) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f00000004c0)={{0x16, @private=0xa010102, 0x4e24, 0x3, 'ovf\x00', 0x6, 0xfffff5b3, 0x7f}, {@local, 0x4e20, 0x4, 0x5ff82a4, 0x2, 0x3}}, 0x44) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[], &(0x7f0000000100)=""/238, 0x42, 0xee, 0x1, 0x2}, 0x28) 5.586147531s ago: executing program 1 (id=4377): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xffe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.894690584s ago: executing program 1 (id=4379): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) sendmmsg$inet(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) 2.634964539s ago: executing program 0 (id=4381): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xfff3}, {0x0, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x26}, @TCA_PIE_ALPHA={0x8, 0x4, 0x17}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x200}, @TCA_PIE_LIMIT={0x8, 0x2, 0xfffffffe}, @TCA_PIE_LIMIT={0x8, 0x2, 0xffffffe5}, @TCA_PIE_ALPHA={0x8, 0x4, 0xc}]}}]}, 0x68}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.601318861s ago: executing program 3 (id=4382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 1.597995352s ago: executing program 1 (id=4383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28000000}, 0x80) 1.577702321s ago: executing program 4 (id=4384): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a, 0x44020}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x2}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000280)={0x6, 'rose0\x00', {}, 0x5}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, r4, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "29b3630df2a848cbaeb5fed474d6fd74"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1c95f33411d9628a24ce24e90753f0d3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "215b5c151f4191abe7612ca53ed718a8"}, @NL80211_ATTR_PMK={0x14, 0xfe, "903ad34823ac2474fa43c31a7bce4f70"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000804}, 0x44840) 1.447227511s ago: executing program 2 (id=4385): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x101, 0x5, 0x3ff, 0x8}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x5, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x14, 0x2, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61f0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r10 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ed4d00000000fddbdf253100000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00R\x00', @ANYRES32=r10, @ANYBLOB], 0x24}}, 0xc0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) sendmsg$nl_netfilter(r5, &(0x7f00000019c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001a00)=ANY=[@ANYBLOB="581400000e01050025bd7000fcdbdf25000000014700c580ab8c0ea965ac3f16ddfb05693f60d6b20a8ae459da8ef9c59b7e98bf2630ec1ee7f11a438ee67f115e1c2f218f7ccf13eb5efdd202e8b7fb234030839586c8fcc3a537000800d300", @ANYRES32=r10, @ANYBLOB="8601d9809b44bbf2d7cbabbad17d268ba6cd49b20d0e912e0a72014b70712b471e9a5d34021a755869b0056c1b5cdf0c65f494669e9edee2494708cde9314e4f16cab658f965f03bbc1b6ea57c98a3af8471b974ec4e8f66ccb9e718f398dc89db6cb8995fe5d2f41274c6cb2a08055c2005fafcc3ec6c5b20c34fc35250fc5c86ac3ed5ff4673a5f22d8f7ebf871d70ab89dd96ba40be267f1cb1a233aa4cc74bf9ff5eb91b4c081c6575a8c579c74b3fa055bb8e8c37e0c049c65f7b2b6ab7ddedeaa42db90496ce0c8386a6ebec0b978b2a1de0e55a51261a0f30227d8482948d8a6ff29f1622d32cc7f87ca7fa63040014800422aaea4e0aa3562d218638c93be91774a29461a8126e1e9ca29e78948b20050d201ee75aff3987dfdb2709b821d1a8e024369acbac75d82caea795c1987a662292a505ca8f3d15c4b837fb460be13e56ea58d50babbfffbd615a64d461feec040063000e0066006e732f6367726f7570000000040001000400458008005f00", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000800a300", @ANYRES32, @ANYBLOB="0800f200", @ANYRES32=r12, @ANYBLOB="0e00b2006e732f6367726f75700000006bc590f16fc23b4b176f8d54126f71ab08e189a3ee7f68985fac8662a9ba2108b1fe8368faf547aa59b2259cb9ed608c6a89360f3b7a1e7c15695541a1a3bfd924fecdca66162ad41db06232911a5878bcecc2a26650afe6e2749df7b96eadc6c94b9f05da5e7e961defcb0fd7e0b5a5ff1ad8c4e7d8877d150dd01debd2e18c754b14ac7e6939daf8a55c9bacedc71467065dfaa5f954628b488603b690c9f059f642f48f930600"], 0x1458}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$nl_generic(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x2e, 0x10, 0x70bd25, 0x25dfdbfb, {0x19}, [@generic="81adfcbfd7516cd067547b4f730f9592bc37af203600132502d29d0dfffc99e75b69b01119c4e2004bebea304ad3438210ac7d21c662f47809f49f9f218a870affc8de8602", @typed={0x8, 0x3, 0x0, 0x0, @uid=r12}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x3) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r13, &(0x7f0000000000)={0x40000000}) ppoll(&(0x7f0000000980)=[{r13, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r3, &(0x7f0000000140)={0x4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0) 1.446320235s ago: executing program 1 (id=4386): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000180)="ce11aad6ed8936e7373942f49a0ad53e8ca76fd7e17dc8e2d4d1a3277405556e32fb5f90ba2988fe9373", 0x2a}, {&(0x7f00000001c0)="cb14275c3240f008b07b479e0592be008adf8e835fcfe52b6492516d60aad8aad646c72635c2950a51c9bebbdb64eea90c4cd4878cf18ecc21df03684c6b6aca56db4ff47bb96aeaeb2a6e54e96d6f797f2ed44dfaf69db2f9e300c539", 0x5d}, {&(0x7f0000000240)="761ef9", 0x3}, {&(0x7f0000000280)="18c48455b66d122b102ee16fb2325b40ae64d3227d1216242e1bf9714604b3ce7b36a37f7e872141a5a0508a31d3122c62af27ad91fddbfce352a95a6a13621409b19521ba27a126225bd1a246", 0x4d}, {&(0x7f0000000300)="cb22fc2818ae72e494e0ecaecc9b749923652af4115710ec2a86cd8b50f43d6a3e03058e19eb8f7ecac0838318f60ac9ee59411a42ebd31945bc845e308fe652ed9c82cfc3ca679510ce01b6c1f94a42dfd977fdf32056068f6035aa01e4e8ed5773161d5140e29ee8892f8951", 0x6d}, {&(0x7f0000000380)="005cfd6d4b111e501fabf4ed0c7814151070d432728179a45d227946695b0798434690d118b89ab86685664069081a3fdd2cc4f9a5864b1a9becb4df3140663327878f9ea743cba6135c63e0f24f43e00d9aeb7be541c04fd98c7e1b65db49905543057325185698db047ffdfc902386c9d7f4aec225e5ca651e533ca6454b25eeef783e1786cc664667cc9963f3b5f3bbcbf7e3ac78ba37642b87efada100852498b85e", 0xa4}, {&(0x7f0000000440)}, {&(0x7f0000000c80)="c7dca87481469fb0517fb7cfe56d17883131d941b1c3", 0x16}, {&(0x7f0000000cc0)="9d3ed61b92232385ebd95ade1a9bec", 0xf}, {&(0x7f0000000d00)="a5afce873c6d2c72d9347e39e2d4af5e557c3a8b04fd6b6d2d887c1625995fc2c2798a93bac5ecd4445945605426d86da351976020c15a57630a61918992e4a4845312ea2a80337ab3e8ecf78e38b7064424a1196278e87964bb97536dce8f658b4f6215319a8d9c9b490b488ea70c97aa180a1b25cb4363910f4c5f8c1ae10b07eda451eaa22b062711d8ea5f64aa37c1a6aef8e6d952a3f1ccd75d762208db7284c16231dfcff1784a8d71b5016303ac935444e54c2789a13be8d8e8d3790450f641", 0xc3}], 0xa}, 0x48000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x13, &(0x7f0000000f00)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000080ffff850000000c000000b709000000000000184a0000f8ffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfb200000000000007020000f8ffffffb703000008000000b7040000000000008500000082cde419e10000000000000061880ee05c42fd7c432fd006d8118a0e67136204ec6e14721efca09a1ad2fee5cc7defff3c6ee8cb310dee3765ccd22959dfb3579146ffa1360bed5dd039101a78b2ca07e1c6ace24019aab7d2aea311604515e111af984965e23fc3fd221c57e4a3da51612df8bad2a3d4d0789e99cf6f88b1c26106d5887a5dfc816dd935701a193ae1c3a79a70ca6ac2b0bb92dfc34bdb9b728488a07e5eabf94c7a4901934aae1da3ed350fa85cf966f2"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x6f4, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e6419ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f14d51a61558678c6d8c1f3a53bf88595013e07f6609333f8a0ec6e8ac36"}}, @TIPC_NLA_NODE_ID={0xef, 0x3, "365673525046261fd3e436f7d1d6cbb2b8c1b303d3d35cd1ae0ad9a20d89d61867ecfaf2fcd4255805dae03f34c9e91bae1a95c3d7b39449ee2a128b26b0846bd84bc7b458485ad7b723864d30622faebd79367c6a63cc79c8609524880c62ad51502ed3802e36c503a410d034b586e749f89a1e6cf8a6eabafe74269b1c08cb1b707ec295178b4310094f9b98b1babd6fd0e5a7f31032005a00d72fc0d16156484c66f0a2b8e309a95338f8028c6641b14d5ebb764fc0eb46764d0b501e219a60a6f2f27f6298d7de00585abf100bc7e3a91a8a0f7ad3be7144caaa7976850f370df1605cac649d362c95"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x931}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc32}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x202}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x2}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x873, @dev={0xfe, 0x80, '\x00', 0xb}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1ffc00, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private2, 0xa}}}}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb23b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x20048885}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r8, 0x0, 0x0}, 0x10) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c0000007ca70000e0000009000000000000000002000100000000000000000200000000030005008955280502000000e00000010000001543000000010015004e2000000100141ae8ff0000"], 0x60}}, 0x0) 1.396214598s ago: executing program 4 (id=4387): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="3e8bbce90da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efa978944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb02261", 0x89}], 0x1}, 0x547052430a225ce3) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(r2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x0, @dev}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1800}, 0x94) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r8) socket$nl_xfrm(0x10, 0x3, 0x6) 1.353329909s ago: executing program 1 (id=4388): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="449f6aed247d197178", 0x9}, {&(0x7f0000000780)="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", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}], 0x3, 0x4004) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd70a86e1019d902135c27bafeb900", @ANYRES32=0x0, @ANYBLOB="05002f0000000000"], 0x24}}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r6, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000200)=""/5, 0x5}], 0xa}, 0x40010163) 878.658194ms ago: executing program 4 (id=4389): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xfff3}, {0x0, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x26}, @TCA_PIE_ALPHA={0x8, 0x4, 0x17}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x200}, @TCA_PIE_LIMIT={0x8, 0x2, 0xfffffffe}, @TCA_PIE_LIMIT={0x8, 0x2, 0xffffffe5}, @TCA_PIE_ALPHA={0x8, 0x4, 0xc}]}}]}, 0x68}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 651.662514ms ago: executing program 3 (id=4390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0xfffd}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 559.708727ms ago: executing program 3 (id=4391): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) unshare(0x20000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x4c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x5b640800, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip6tnl0\x00', 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100), 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 541.523596ms ago: executing program 2 (id=4392): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x265) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xfffffffb, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4e24, 0x5, 0x4e24, 0x6a, 0x0, 0x40, 0x20, 0xff, r5, r6}, {0x2, 0x9, 0xff, 0x8000, 0x1, 0x5, 0x8, 0x6}, {0x0, 0x100000000, 0x2, 0x80}, 0x8, 0x6e6bb0, 0x2, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x3, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x2, 0x3, 0x0, 0x3, 0x9, 0x8}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xb}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80) write$tun(r4, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0800080003000400fdff140000004589001c006b00006002907800000000ffffffff14f330"], 0xfdef) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) r10 = socket$netlink(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) splice(r0, 0x0, r10, 0x0, 0x800000000082, 0xf) close(0x4) 439.56708ms ago: executing program 4 (id=4393): socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000f5ffffff0000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 370.49619ms ago: executing program 1 (id=4394): accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000070000000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = socket(0x15, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) unshare(0x2a020400) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000001b00000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x35, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r6, @ANYBLOB="8740b210de7a84585f54f1f46fe746fccce8cf6939002203a2b107697d9ffff1be2a39b22994da1e60345efff009de02a712a97ad14e758c8e8852571b7e6857bea1f54e2e5e380e17c555e3a09f0c7d604aecc3afd0c445a42acca8faefccf130a69f2f96dbeece5abef81b84b06906e556755b61963cfe834e1217e73e6909079fa9011d734503348698e0b615b9086e1e37f221a0"], 0x30}}, 0x80c0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000b141d0626bd7000fcdbdf2508000100"], 0x20}}, 0x44) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, 0x0, 0x62a1}}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0xd1}, 0x80) 369.664251ms ago: executing program 3 (id=4395): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001a00)=0x4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000001"], 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001a00)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000001"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) 207.507216ms ago: executing program 3 (id=4396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x8004}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 156.876639ms ago: executing program 3 (id=4397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r2, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 98.582173ms ago: executing program 4 (id=4398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r1, @ANYBLOB="140001000000000000000000000000000057"], 0x40}, 0x1, 0x0, 0x500, 0x4c051}, 0x8004) 0s ago: executing program 4 (id=4399): socket$inet6(0xa, 0x80000, 0xfffffffd) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) kernel console output (not intermixed with test programs): 000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 577.077439][T16281] RBP: 00007fc1535f6090 R08: 0000000000000000 R09: 0000000000000000 [ 577.077450][T16281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.077461][T16281] R13: 00007fc155616038 R14: 00007fc155615fa0 R15: 00007ffe1b575338 [ 577.077492][T16281] [ 577.668767][T16288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.284975][T16255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.549779][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 579.578153][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 579.855660][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.959980][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 579.971159][T16310] 0ªX¹¦À: left allmulticast mode [ 580.155919][T16310] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 580.181359][T16310] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 580.342385][T16310] vlan3: left promiscuous mode [ 580.347405][T16310] bridge0: left promiscuous mode [ 580.384396][T16297] ip6erspan0: entered allmulticast mode [ 580.439146][T16328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.782497][ T6653] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.801173][ T6653] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.813296][ T6653] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.824328][ T6653] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.109708][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3081'. [ 581.115549][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3082'. [ 581.136192][T16350] ipvlan2: entered allmulticast mode [ 581.142377][T16350] gretap0: entered allmulticast mode [ 581.152245][T16350] batman_adv: batadv0: Adding interface: ipvlan2 [ 581.160292][T16350] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.189571][T16350] batman_adv: batadv0: Interface activated: ipvlan2 [ 581.276014][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 581.304638][T16355] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 581.391367][T16355] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 581.441210][T16359] x_tables: duplicate underflow at hook 1 [ 581.637168][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 581.684935][T16369] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 581.720442][T16369] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 581.930313][T16379] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 581.937105][ T8063] IPVS: starting estimator thread 0... [ 582.037993][T16380] IPVS: using max 32 ests per chain, 76800 per kthread [ 582.056842][T16375] ip6erspan0: entered allmulticast mode [ 582.349428][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'. [ 582.687536][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3093'. [ 583.293820][T16413] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3104'. [ 583.311358][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3105'. [ 583.381361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.431140][T16417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 583.454794][T16417] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3106'. [ 583.478866][T16417] tipc: Invalid UDP bearer configuration [ 583.478971][T16417] tipc: Enabling of bearer rejected, failed to enable media [ 583.501418][T16422] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 583.643438][T16424] netlink: 'syz.3.3108': attribute type 1 has an invalid length. [ 583.675476][T16431] netlink: 'syz.2.3109': attribute type 2 has an invalid length. [ 583.720476][T16424] bond1: entered promiscuous mode [ 583.726190][T16424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.869651][T16436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.053084][T16442] netlink: 'syz.4.3113': attribute type 29 has an invalid length. [ 584.439256][T16456] syzkaller0: entered promiscuous mode [ 584.445055][T16456] syzkaller0: entered allmulticast mode [ 584.616467][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 584.625898][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 584.638211][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 584.832088][T16464] x_tables: duplicate underflow at hook 1 [ 585.449397][T16486] netlink: 'syz.3.3131': attribute type 10 has an invalid length. [ 585.612107][T16495] FAULT_INJECTION: forcing a failure. [ 585.612107][T16495] name failslab, interval 1, probability 0, space 0, times 0 [ 585.625730][T16495] CPU: 1 UID: 0 PID: 16495 Comm: syz.3.3134 Not tainted syzkaller #0 PREEMPT(full) [ 585.625754][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.625764][T16495] Call Trace: [ 585.625771][T16495] [ 585.625779][T16495] dump_stack_lvl+0xe8/0x150 [ 585.625805][T16495] should_fail_ex+0x40c/0x560 [ 585.625838][T16495] should_failslab+0xa8/0x100 [ 585.625855][T16495] ? skb_clone+0x212/0x3a0 [ 585.625875][T16495] kmem_cache_alloc_noprof+0x87/0x650 [ 585.625907][T16495] skb_clone+0x212/0x3a0 [ 585.625930][T16495] __netlink_deliver_tap+0x413/0x860 [ 585.625961][T16495] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.625981][T16495] netlink_deliver_tap+0x19c/0x1b0 [ 585.626002][T16495] netlink_sendskb+0x68/0x140 [ 585.626030][T16495] netlink_rcv_skb+0x2a4/0x4a0 [ 585.626049][T16495] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 585.626079][T16495] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.626116][T16495] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.626134][T16495] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.626155][T16495] xfrm_netlink_rcv+0x79/0x90 [ 585.626181][T16495] netlink_unicast+0x7bb/0x940 [ 585.626217][T16495] netlink_sendmsg+0x813/0xb40 [ 585.626247][T16495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.626270][T16495] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.626297][T16495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.626319][T16495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.626340][T16495] ____sys_sendmsg+0x9b9/0xa20 [ 585.626359][T16495] ? __might_fault+0xaf/0x130 [ 585.626388][T16495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.626416][T16495] ? import_iovec+0x73/0xa0 [ 585.626440][T16495] ___sys_sendmsg+0x2a5/0x360 [ 585.626458][T16495] ? __lock_acquire+0x683/0x2cd0 [ 585.626482][T16495] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.626539][T16495] ? __fget_files+0x2a/0x420 [ 585.626559][T16495] ? __fget_files+0x3a2/0x420 [ 585.626591][T16495] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.626613][T16495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.626642][T16495] ? __pfx_ksys_write+0x10/0x10 [ 585.626676][T16495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.626696][T16495] do_syscall_64+0x174/0x580 [ 585.626725][T16495] ? trace_irq_disable+0x3b/0x140 [ 585.626749][T16495] ? clear_bhb_loop+0x40/0x90 [ 585.626771][T16495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.626789][T16495] RIP: 0033:0x7f0de0b9ce59 [ 585.626806][T16495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.626820][T16495] RSP: 002b:00007f0de19aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.626838][T16495] RAX: ffffffffffffffda RBX: 00007f0de0e15fa0 RCX: 00007f0de0b9ce59 [ 585.626851][T16495] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 585.626862][T16495] RBP: 00007f0de19aa090 R08: 0000000000000000 R09: 0000000000000000 [ 585.626874][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.626884][T16495] R13: 00007f0de0e16038 R14: 00007f0de0e15fa0 R15: 00007ffdb9df1b98 [ 585.626915][T16495] [ 586.236843][T16503] netlink: 'syz.1.3138': attribute type 1 has an invalid length. [ 586.383862][T16510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.506523][T16504] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 586.570436][T16503] bond1: entered promiscuous mode [ 586.586412][T16503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.695667][T16509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.718390][T16509] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 586.728728][T16509] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 586.753422][T16509] bond1: (slave vti0): making interface the new active one [ 586.782990][T16509] vti0: entered promiscuous mode [ 586.809866][T16509] bond1: (slave vti0): Enslaving as an active interface with an up link [ 586.872298][T16529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.048289][T16535] __nla_validate_parse: 7 callbacks suppressed [ 587.048305][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 587.088053][T16535] netlink: 'syz.3.3147': attribute type 9 has an invalid length. [ 587.776625][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.795035][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.823214][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.843044][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.899922][T16556] syzkaller0: entered promiscuous mode [ 587.912715][T16556] syzkaller0: entered allmulticast mode [ 588.021285][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 588.093790][T16563] netlink: 'syz.0.3156': attribute type 1 has an invalid length. [ 588.103096][T16563] netlink: 'syz.0.3156': attribute type 3 has an invalid length. [ 588.228644][T16563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3156'. [ 588.242517][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 588.396885][T16574] netlink: 'syz.1.3160': attribute type 29 has an invalid length. [ 588.655736][T16587] bond0: option arp_validate: invalid value (55553) [ 588.656565][ T132] bond0: (slave bond_slave_0): interface is now down [ 588.674983][ T132] bond0: (slave bond_slave_1): interface is now down [ 588.692172][ T132] bond0: now running without any active interface! [ 588.879299][T16590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3163'. [ 589.380311][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 589.462277][T16605] syzkaller0: entered promiscuous mode [ 589.474429][T16605] syzkaller0: entered allmulticast mode [ 592.285483][T16596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.545604][T16632] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.637050][T16635] netlink: 'syz.1.3174': attribute type 29 has an invalid length. [ 592.751380][T16641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 592.823145][T16641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3176'. [ 592.989237][T16643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.093877][T16649] syzkaller0: entered promiscuous mode [ 593.101085][T16649] syzkaller0: entered allmulticast mode [ 593.323310][T16655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 593.663001][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3187'. [ 593.929215][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.937026][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.786412][T16657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.837727][T16657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.464686][T16682] ÿ: renamed from bond_slave_0 [ 595.913503][ T1128] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.930286][ T1128] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.775224][T16697] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 596.775820][ T1128] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.795430][T16697] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 596.819505][T16697] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 596.826219][ T1128] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.992662][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 597.003400][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 597.403751][T16747] xt_cgroup: xt_cgroup: no path or classid specified [ 597.776436][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3210'. [ 597.832183][T16759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3210'. [ 597.848639][T16757] netlink: 'syz.2.3211': attribute type 21 has an invalid length. [ 597.889195][T16757] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3211'. [ 597.925542][T16757] netlink: 'syz.2.3211': attribute type 4 has an invalid length. [ 597.958334][T16757] netlink: 'syz.2.3211': attribute type 5 has an invalid length. [ 597.987860][T16757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3211'. [ 598.021830][T16763] x_tables: duplicate underflow at hook 1 [ 598.370522][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 598.617980][T16774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.738983][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3221'. [ 599.288549][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 599.475883][T16810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 599.669337][T16815] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3228'. [ 601.707399][T16789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.889445][T16877] netlink: 'syz.2.3240': attribute type 1 has an invalid length. [ 601.905503][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 601.925770][T16877] netlink: 'syz.2.3240': attribute type 1 has an invalid length. [ 601.974159][T16880] bond0: option arp_validate: invalid value (55553) [ 601.983206][T16877] syzkaller1: entered promiscuous mode [ 601.993988][T16877] syzkaller1: entered allmulticast mode [ 602.054590][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 602.106736][T16882] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 602.302180][T16882] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 602.455903][T16893] syzkaller0: entered promiscuous mode [ 602.477943][T16893] syzkaller0: entered allmulticast mode [ 603.255338][T16914] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 603.265734][T16914] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 603.278059][T16914] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 603.360757][T16917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3249'. [ 603.400847][T16922] xt_cgroup: xt_cgroup: no path or classid specified [ 603.465767][T16927] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3251'. [ 603.475801][T16927] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3251'. [ 603.684583][T16938] syzkaller0: entered promiscuous mode [ 603.695257][T16938] syzkaller0: entered allmulticast mode [ 604.560835][T16947] netlink: 'syz.3.3259': attribute type 29 has an invalid length. [ 604.985298][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 604.996818][T16953] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 605.032058][T16953] bond1: entered promiscuous mode [ 605.037323][T16953] bond1: entered allmulticast mode [ 605.043584][T16953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.134697][T16957] bond0: option arp_validate: invalid value (55553) [ 606.215287][T16917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.492122][T16976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.541438][T16979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.919661][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 606.931369][T16987] netlink: 'syz.2.3274': attribute type 9 has an invalid length. [ 606.953658][ T6653] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.963450][ T6653] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.973252][ T6653] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.985497][ T6653] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.263200][T16992] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.299681][T16990] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3276'. [ 607.415602][T16993] openvswitch: netlink: EtherType 50a is less than min 600 [ 607.477004][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3277'. [ 607.490868][T16998] xt_cgroup: xt_cgroup: no path or classid specified [ 607.711987][T17009] syzkaller0: entered promiscuous mode [ 607.718755][T17009] syzkaller0: entered allmulticast mode [ 607.726265][T17005] lo speed is unknown, defaulting to 1000 [ 607.781813][T17009] tipc: Started in network mode [ 607.786944][T17009] tipc: Node identity ba874b85b194, cluster identity 4711 [ 607.799379][T17009] tipc: Enabled bearer , priority 0 [ 607.838408][T17007] tipc: Resetting bearer [ 607.906325][T17007] tipc: Disabling bearer [ 607.980308][T17017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.293935][T17005] Bluetooth: MGMT ver 1.23 [ 608.502445][T17027] tc action pedit unable to extract header offset for header type (0x4) [ 608.852932][T17041] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3294'. [ 608.887266][T17041] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3294'. [ 609.173574][T17051] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3298'. [ 609.198359][T17051] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 609.622339][T17069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.844373][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 609.854142][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3307'. [ 610.330054][ T4947] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 610.365462][T17088] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3308'. [ 610.391750][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 610.524506][T17092] can: request_module (can-proto-0) failed. [ 610.594383][T17098] netlink: 'syz.4.3312': attribute type 1 has an invalid length. [ 610.741133][T17098] bond2: entered promiscuous mode [ 610.764731][T17098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.858258][T17104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.878427][T17104] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 610.895712][T17104] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 610.913036][T17104] bond2: (slave ipip0): making interface the new active one [ 610.920980][T17104] ipip0: entered promiscuous mode [ 610.928658][T17104] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 610.953909][T17107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.180205][T17120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3319'. [ 611.190341][T17120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3319'. [ 611.456276][T17133] syzkaller0: entered promiscuous mode [ 611.473452][T17133] syzkaller0: entered allmulticast mode [ 612.597372][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.628999][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.679370][T17166] ip6erspan0: entered allmulticast mode [ 612.696826][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.732653][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.122200][T17152] netlink: 'syz.0.3322': attribute type 9 has an invalid length. [ 613.288521][T17197] netlink: 'syz.3.3347': attribute type 1 has an invalid length. [ 613.342448][T17204] xt_cgroup: xt_cgroup: no path or classid specified [ 613.349307][T17197] bond2: entered promiscuous mode [ 613.351700][T17197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.451709][T17197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.463026][T17197] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 613.481658][T17197] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 613.497278][T17197] bond2: (slave vti0): making interface the new active one [ 613.505016][T17197] vti0: entered promiscuous mode [ 613.514198][T17197] bond2: (slave vti0): Enslaving as an active interface with an up link [ 613.773801][ T132] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.808248][ T132] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.837082][ T132] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.856430][ T132] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.151901][T17225] __nla_validate_parse: 8 callbacks suppressed [ 614.151920][T17225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3356'. [ 614.179722][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3355'. [ 614.236314][T17226] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 614.264946][T17226] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 614.533258][T17239] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3362'. [ 614.552422][T17239] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3362'. [ 615.217204][T17258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.398534][T17271] netlink: 'syz.4.3373': attribute type 1 has an invalid length. [ 615.463544][T17271] bond3: entered promiscuous mode [ 615.469932][T17271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.729999][T17271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.743928][T17271] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 615.754643][T17271] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 615.773892][T17271] bond3: (slave vti0): making interface the new active one [ 615.781747][T17271] vti0: entered promiscuous mode [ 615.789185][T17271] bond3: (slave vti0): Enslaving as an active interface with an up link [ 615.798218][T17273] lo speed is unknown, defaulting to 1000 [ 615.896849][T17283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.430486][T17293] syzkaller0: entered promiscuous mode [ 616.436285][T17293] syzkaller0: entered allmulticast mode [ 618.259880][T17266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.921977][T17331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3390'. [ 618.941012][T17333] xt_cgroup: xt_cgroup: no path or classid specified [ 619.171439][T17340] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 619.584635][T17351] netlink: 'syz.1.3396': attribute type 2 has an invalid length. [ 619.608166][T17351] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.758980][T17340] bond3: entered promiscuous mode [ 619.766748][T17340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.787622][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.828226][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.847502][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.886477][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.926497][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.945493][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.963223][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 619.990802][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 620.011740][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 620.525217][T17377] macvtap1: entered promiscuous mode [ 620.539570][T17377] macvtap1: entered allmulticast mode [ 620.551559][T17377] veth1_vlan: entered allmulticast mode [ 623.337230][T17370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.560129][T17420] netlink: 'syz.1.3417': attribute type 9 has an invalid length. [ 623.607488][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.627667][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.655474][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.674811][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.902305][T17438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.120708][T17443] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 624.178195][T17443] bond2: entered promiscuous mode [ 624.186631][T17443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.335088][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.531855][T17459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.779968][T17466] __nla_validate_parse: 72 callbacks suppressed [ 624.779986][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3435'. [ 624.919173][T17467] syzkaller1: entered promiscuous mode [ 624.924956][T17467] syzkaller1: entered allmulticast mode [ 624.932454][T17476] bond0: option arp_validate: invalid value (55553) [ 625.227971][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'. [ 625.257166][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 626.015832][T17511] syzkaller0: entered promiscuous mode [ 626.034802][T17511] syzkaller0: entered allmulticast mode [ 626.241448][T17516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.376912][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 626.405910][T17528] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 626.428444][T17528] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 626.681178][T17543] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 626.906145][T17548] netlink: 'syz.4.3459': attribute type 1 has an invalid length. [ 626.925708][T17548] netlink: 'syz.4.3459': attribute type 3 has an invalid length. [ 626.939176][T17548] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3459'. [ 626.957481][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3459'. [ 627.040969][T17554] x_tables: duplicate underflow at hook 1 [ 627.063627][T17554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.282613][T17568] netlink: 'syz.3.3468': attribute type 1 has an invalid length. [ 627.332548][T17568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.418587][T17568] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 627.436401][T17568] bond4: (slave batadv1): making interface the new active one [ 627.446645][T17568] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 628.096171][T17583] syzkaller0: entered promiscuous mode [ 628.110250][T17583] syzkaller0: entered allmulticast mode [ 628.133384][T17583] FAULT_INJECTION: forcing a failure. [ 628.133384][T17583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.159834][T17583] CPU: 0 UID: 0 PID: 17583 Comm: syz.1.3473 Not tainted syzkaller #0 PREEMPT(full) [ 628.159859][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.159870][T17583] Call Trace: [ 628.159878][T17583] [ 628.159886][T17583] dump_stack_lvl+0xe8/0x150 [ 628.159916][T17583] should_fail_ex+0x40c/0x560 [ 628.159950][T17583] _copy_from_user+0x2d/0xb0 [ 628.159972][T17583] ___sys_sendmsg+0x1c6/0x360 [ 628.159994][T17583] ? __lock_acquire+0x683/0x2cd0 [ 628.160020][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.160076][T17583] ? __fget_files+0x2a/0x420 [ 628.160098][T17583] ? __fget_files+0x3a2/0x420 [ 628.160128][T17583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 628.160149][T17583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 628.160176][T17583] ? __pfx_ksys_write+0x10/0x10 [ 628.160210][T17583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.160237][T17583] do_syscall_64+0x174/0x580 [ 628.160262][T17583] ? clear_bhb_loop+0x40/0x90 [ 628.160284][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.160301][T17583] RIP: 0033:0x7fda3599ce59 [ 628.160319][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.160334][T17583] RSP: 002b:00007fda368a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.160354][T17583] RAX: ffffffffffffffda RBX: 00007fda35c15fa0 RCX: 00007fda3599ce59 [ 628.160368][T17583] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000b [ 628.160379][T17583] RBP: 00007fda368a9090 R08: 0000000000000000 R09: 0000000000000000 [ 628.160389][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.160399][T17583] R13: 00007fda35c16038 R14: 00007fda35c15fa0 R15: 00007fff23ae4208 [ 628.160430][T17583] [ 628.456952][T17590] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 628.621552][T17590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.695359][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 628.747179][T17590] tipc: New replicast peer: 255.255.255.255 [ 628.762747][T17590] tipc: Enabled bearer , priority 5 [ 628.780591][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3478'. [ 628.904846][T17601] 8021q: adding VLAN 0 to HW filter on device bond5 [ 628.931677][T17601] bond4: (slave bond5): Enslaving as an active interface with an up link [ 629.003564][T17609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3478'. [ 629.135696][T17601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.363494][T17639] netlink: 'syz.2.3487': attribute type 1 has an invalid length. [ 629.769631][ T8061] tipc: Node number set to 185813893 [ 629.825838][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 629.845113][T17666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.075428][T17665] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 630.084835][T17665] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 630.629942][T17683] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 630.735132][T17687] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3495'. [ 630.752193][T17686] x_tables: duplicate underflow at hook 1 [ 630.794266][T17689] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 630.925614][T17696] syzkaller0: entered promiscuous mode [ 630.939358][T17696] syzkaller0: entered allmulticast mode [ 631.231625][T17706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3505'. [ 631.957091][T17733] netlink: 'syz.1.3514': attribute type 3 has an invalid length. [ 631.966135][T17733] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 631.974330][T17733] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3514'. [ 632.162538][T17741] macsec1: entered allmulticast mode [ 632.168426][T17741] bond0: entered allmulticast mode [ 632.178023][T17741] bond_slave_0: entered allmulticast mode [ 632.186224][T17733] Bluetooth: MGMT ver 1.23 [ 632.190868][T17741] bond_slave_1: entered allmulticast mode [ 632.197720][T17741] bond_slave_0: entered promiscuous mode [ 632.206236][T17741] bond_slave_1: entered promiscuous mode [ 632.213073][T17741] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 632.361114][T17741] bond0: left allmulticast mode [ 632.366486][T17741] bond_slave_0: left allmulticast mode [ 632.374394][T17741] bond_slave_1: left allmulticast mode [ 632.416204][ T8061] bond_slave_0: left promiscuous mode [ 632.423311][ T8061] bond_slave_1: left promiscuous mode [ 633.037892][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3524'. [ 633.542009][T17782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.560340][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 633.574871][T17784] netlink: 'syz.2.3529': attribute type 9 has an invalid length. [ 633.988546][T17792] syzkaller0: entered promiscuous mode [ 634.007856][T17792] syzkaller0: entered allmulticast mode [ 634.161315][T17798] xt_cgroup: xt_cgroup: no path or classid specified [ 634.427440][T17805] netlink: 'syz.4.3537': attribute type 4 has an invalid length. [ 634.567990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.698397][T17818] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3541'. [ 634.786160][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 634.861382][T17821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3541'. [ 635.361057][T17837] syzkaller0: entered promiscuous mode [ 635.367067][T17837] syzkaller0: entered allmulticast mode [ 636.505638][T17868] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3559'. [ 636.585156][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'. [ 636.598913][T17872] syzkaller0: entered promiscuous mode [ 636.604569][T17872] syzkaller0: entered allmulticast mode [ 636.605838][T17868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3559'. [ 636.847540][T17874] syzkaller0: entered promiscuous mode [ 636.863737][T17874] syzkaller0: entered allmulticast mode [ 636.960017][T17882] FAULT_INJECTION: forcing a failure. [ 636.960017][T17882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.979001][T17882] CPU: 0 UID: 0 PID: 17882 Comm: syz.3.3564 Not tainted syzkaller #0 PREEMPT(full) [ 636.979028][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.979038][T17882] Call Trace: [ 636.979046][T17882] [ 636.979054][T17882] dump_stack_lvl+0xe8/0x150 [ 636.979099][T17882] should_fail_ex+0x40c/0x560 [ 636.979132][T17882] _copy_from_user+0x2d/0xb0 [ 636.979153][T17882] bpf_test_init+0xd8/0x150 [ 636.979208][T17882] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 636.979244][T17882] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 636.979269][T17882] ? __fget_files+0x2a/0x420 [ 636.979296][T17882] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 636.979317][T17882] bpf_prog_test_run+0x2c5/0x340 [ 636.979340][T17882] __sys_bpf+0x643/0x950 [ 636.979367][T17882] ? __pfx___sys_bpf+0x10/0x10 [ 636.979407][T17882] ? ksys_write+0x242/0x270 [ 636.979437][T17882] ? __pfx_ksys_write+0x10/0x10 [ 636.979466][T17882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.979486][T17882] __x64_sys_bpf+0x7c/0x90 [ 636.979510][T17882] do_syscall_64+0x174/0x580 [ 636.979530][T17882] ? trace_irq_disable+0x3b/0x140 [ 636.979554][T17882] ? clear_bhb_loop+0x40/0x90 [ 636.979576][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.979593][T17882] RIP: 0033:0x7f0de0b9ce59 [ 636.979610][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.979625][T17882] RSP: 002b:00007f0de19aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.979645][T17882] RAX: ffffffffffffffda RBX: 00007f0de0e15fa0 RCX: 00007f0de0b9ce59 [ 636.979658][T17882] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 636.979668][T17882] RBP: 00007f0de19aa090 R08: 0000000000000000 R09: 0000000000000000 [ 636.979679][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.979689][T17882] R13: 00007f0de0e16038 R14: 00007f0de0e15fa0 R15: 00007ffdb9df1b98 [ 636.979719][T17882] [ 637.867943][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 637.954601][T17885] tap0: tun_chr_ioctl cmd 2147767520 [ 638.619607][T17931] netlink: 'syz.4.3584': attribute type 12 has an invalid length. [ 639.164619][T17944] FAULT_INJECTION: forcing a failure. [ 639.164619][T17944] name failslab, interval 1, probability 0, space 0, times 0 [ 639.189401][T17944] CPU: 0 UID: 0 PID: 17944 Comm: syz.2.3588 Not tainted syzkaller #0 PREEMPT(full) [ 639.189428][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.189439][T17944] Call Trace: [ 639.189453][T17944] [ 639.189460][T17944] dump_stack_lvl+0xe8/0x150 [ 639.189487][T17944] should_fail_ex+0x40c/0x560 [ 639.189516][T17944] should_failslab+0xa8/0x100 [ 639.189533][T17944] __kvmalloc_node_noprof+0x16e/0x890 [ 639.189552][T17944] ? schedule+0x90/0x360 [ 639.189567][T17944] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 639.189590][T17944] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 639.189607][T17944] ? bpf_dispatcher_change_prog+0xc4a/0xf20 [ 639.189628][T17944] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 639.189648][T17944] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 639.189668][T17944] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 639.189700][T17944] ? 0xffffffffa02062dc [ 639.189733][T17944] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 639.189756][T17944] ? _copy_from_user+0x94/0xb0 [ 639.189772][T17944] ? bpf_test_init+0x113/0x150 [ 639.189784][T17944] ? xdp_convert_md_to_buff+0x5b/0x330 [ 639.189801][T17944] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 639.189831][T17944] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 639.189849][T17944] ? __fget_files+0x2a/0x420 [ 639.189870][T17944] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 639.189885][T17944] bpf_prog_test_run+0x2c5/0x340 [ 639.189901][T17944] __sys_bpf+0x643/0x950 [ 639.189923][T17944] ? __pfx___sys_bpf+0x10/0x10 [ 639.189955][T17944] ? ksys_write+0x242/0x270 [ 639.189976][T17944] ? __pfx_ksys_write+0x10/0x10 [ 639.189998][T17944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.190013][T17944] __x64_sys_bpf+0x7c/0x90 [ 639.190032][T17944] do_syscall_64+0x174/0x580 [ 639.190047][T17944] ? trace_irq_disable+0x3b/0x140 [ 639.190066][T17944] ? clear_bhb_loop+0x40/0x90 [ 639.190083][T17944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.190096][T17944] RIP: 0033:0x7fe09599ce59 [ 639.190109][T17944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.190121][T17944] RSP: 002b:00007fe0968cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.190135][T17944] RAX: ffffffffffffffda RBX: 00007fe095c15fa0 RCX: 00007fe09599ce59 [ 639.190145][T17944] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 639.190154][T17944] RBP: 00007fe0968cd090 R08: 0000000000000000 R09: 0000000000000000 [ 639.190162][T17944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.190170][T17944] R13: 00007fe095c16038 R14: 00007fe095c15fa0 R15: 00007ffda9385298 [ 639.190193][T17944] [ 640.083631][T17972] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 640.100543][T17972] netlink: 'syz.4.3595': attribute type 3 has an invalid length. [ 640.109197][T17972] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3595'. [ 640.123467][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3595'. [ 640.479272][T17963] syzkaller0: entered promiscuous mode [ 640.498220][T17963] syzkaller0: entered allmulticast mode [ 641.593042][T18001] netlink: 'syz.4.3605': attribute type 1 has an invalid length. [ 641.658874][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'. [ 643.541798][T18013] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3608'. [ 643.568178][T18013] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3608'. [ 644.431991][T18001] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 644.482336][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3610'. [ 645.460767][T18043] syzkaller0: entered promiscuous mode [ 645.468753][T18043] syzkaller0: entered allmulticast mode [ 645.639715][T18047] FAULT_INJECTION: forcing a failure. [ 645.639715][T18047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.676234][T18047] CPU: 0 UID: 0 PID: 18047 Comm: syz.1.3621 Not tainted syzkaller #0 PREEMPT(full) [ 645.676260][T18047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.676271][T18047] Call Trace: [ 645.676278][T18047] [ 645.676285][T18047] dump_stack_lvl+0xe8/0x150 [ 645.676312][T18047] should_fail_ex+0x40c/0x560 [ 645.676344][T18047] _copy_to_iter+0x1e4/0x1810 [ 645.676368][T18047] ? do_raw_spin_lock+0x12b/0x2f0 [ 645.676400][T18047] ? __pfx__copy_to_iter+0x10/0x10 [ 645.676418][T18047] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 645.676527][T18047] ? lockdep_hardirqs_on+0x7a/0x110 [ 645.676546][T18047] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 645.676563][T18047] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 645.676589][T18047] __skb_datagram_iter+0xf8/0x980 [ 645.676607][T18047] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 645.676630][T18047] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 645.676658][T18047] skb_copy_datagram_iter+0xb5/0x240 [ 645.676683][T18047] netlink_recvmsg+0x2b9/0xa50 [ 645.676714][T18047] ? __pfx_netlink_recvmsg+0x10/0x10 [ 645.676738][T18047] ? aa_sock_msg_perm+0xf1/0x1b0 [ 645.676766][T18047] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 645.676787][T18047] ? security_socket_recvmsg+0x7e/0x2c0 [ 645.676846][T18047] ? __pfx_netlink_recvmsg+0x10/0x10 [ 645.676866][T18047] sock_recvmsg+0x172/0x1b0 [ 645.676891][T18047] __sys_recvfrom+0x240/0x3c0 [ 645.676914][T18047] ? __pfx___sys_recvfrom+0x10/0x10 [ 645.676960][T18047] ? rcu_is_watching+0x15/0xb0 [ 645.676988][T18047] __x64_sys_recvfrom+0xde/0x100 [ 645.677006][T18047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.677026][T18047] do_syscall_64+0x174/0x580 [ 645.677045][T18047] ? trace_irq_disable+0x3b/0x140 [ 645.677070][T18047] ? clear_bhb_loop+0x40/0x90 [ 645.677092][T18047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.677109][T18047] RIP: 0033:0x7fda3595d68e [ 645.677126][T18047] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 645.677141][T18047] RSP: 002b:00007fda368a7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 645.677160][T18047] RAX: ffffffffffffffda RBX: 00007fda368a96c0 RCX: 00007fda3595d68e [ 645.677173][T18047] RDX: 0000000000001000 RSI: 00007fda368a8000 RDI: 0000000000000003 [ 645.677185][T18047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.677202][T18047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 645.677212][T18047] R13: 00007fda368a7f58 R14: 00007fda368a8000 R15: 0000000000000000 [ 645.677246][T18047] [ 646.129827][T18052] FAULT_INJECTION: forcing a failure. [ 646.129827][T18052] name failslab, interval 1, probability 0, space 0, times 0 [ 646.152670][T18052] CPU: 1 UID: 0 PID: 18052 Comm: syz.1.3623 Not tainted syzkaller #0 PREEMPT(full) [ 646.152696][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.152706][T18052] Call Trace: [ 646.152713][T18052] [ 646.152721][T18052] dump_stack_lvl+0xe8/0x150 [ 646.152749][T18052] should_fail_ex+0x40c/0x560 [ 646.152782][T18052] should_failslab+0xa8/0x100 [ 646.152802][T18052] __kmalloc_cache_node_noprof+0x8c/0x690 [ 646.152829][T18052] ? page_pool_create_percpu+0x73/0xc70 [ 646.152947][T18052] ? __kvmalloc_node_noprof+0x53d/0x890 [ 646.152977][T18052] page_pool_create_percpu+0x73/0xc70 [ 646.152998][T18052] ? page_pool_create+0xd/0x20 [ 646.153022][T18052] bpf_test_run_xdp_live+0x23a/0x1c20 [ 646.153048][T18052] ? bpf_dispatcher_change_prog+0xc4a/0xf20 [ 646.153074][T18052] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 646.153102][T18052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.153128][T18052] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 646.153170][T18052] ? 0xffffffffa02062d0 [ 646.153213][T18052] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 646.153245][T18052] ? _copy_from_user+0x94/0xb0 [ 646.153265][T18052] ? bpf_test_init+0x113/0x150 [ 646.153282][T18052] ? xdp_convert_md_to_buff+0x5b/0x330 [ 646.153304][T18052] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 646.153339][T18052] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 646.153364][T18052] ? __fget_files+0x2a/0x420 [ 646.153394][T18052] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 646.153415][T18052] bpf_prog_test_run+0x2c5/0x340 [ 646.153437][T18052] __sys_bpf+0x643/0x950 [ 646.153472][T18052] ? __pfx___sys_bpf+0x10/0x10 [ 646.153511][T18052] ? ksys_write+0x242/0x270 [ 646.153538][T18052] ? __pfx_ksys_write+0x10/0x10 [ 646.153568][T18052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.153588][T18052] __x64_sys_bpf+0x7c/0x90 [ 646.153612][T18052] do_syscall_64+0x174/0x580 [ 646.153630][T18052] ? trace_irq_disable+0x3b/0x140 [ 646.153654][T18052] ? clear_bhb_loop+0x40/0x90 [ 646.153676][T18052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.153693][T18052] RIP: 0033:0x7fda3599ce59 [ 646.153709][T18052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.153724][T18052] RSP: 002b:00007fda368a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.153744][T18052] RAX: ffffffffffffffda RBX: 00007fda35c15fa0 RCX: 00007fda3599ce59 [ 646.153756][T18052] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 646.153767][T18052] RBP: 00007fda368a9090 R08: 0000000000000000 R09: 0000000000000000 [ 646.153778][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.153789][T18052] R13: 00007fda35c16038 R14: 00007fda35c15fa0 R15: 00007fff23ae4208 [ 646.153820][T18052] [ 646.261144][T18061] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3622'. [ 646.449773][T18061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3622'. [ 646.484509][T18060] netlink: 'syz.3.3624': attribute type 89 has an invalid length. [ 646.501665][T18057] netlink: 'syz.2.3625': attribute type 1 has an invalid length. [ 646.511751][T18057] netlink: 'syz.2.3625': attribute type 3 has an invalid length. [ 646.556432][T18057] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3625'. [ 646.584869][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 646.674534][T18072] xt_cgroup: xt_cgroup: no path or classid specified [ 646.912037][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3633'. [ 646.934569][T18081] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 646.945475][T18081] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 647.395892][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 647.702181][T18098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3639'. [ 648.220099][T18110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.357018][T18120] sctp: [Deprecated]: syz.3.3649 (pid 18120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.357018][T18120] Use struct sctp_sack_info instead [ 648.851414][T18125] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3651'. [ 648.860936][T18125] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3651'. [ 649.163152][T18143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3658'. [ 649.603695][T18158] tipc: Enabling of bearer rejected, failed to enable media [ 649.939732][T18174] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 650.226060][T18178] bond2: (slave veth5): Enslaving as an active interface with a down link [ 650.359444][T18174] bond2: (slave veth7): Enslaving as an active interface with a down link [ 650.380182][T18190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.800525][T18213] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 650.833810][T18213] bond5 (unregistering): Released all slaves [ 651.425856][T18227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.496223][T18233] __nla_validate_parse: 5 callbacks suppressed [ 651.496241][T18233] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3685'. [ 651.535119][T18233] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3685'. [ 651.723681][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3688'. [ 652.151046][T18257] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 652.210129][T18257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.329324][T18260] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 652.369135][T18261] bond4: (slave geneve3): making interface the new active one [ 652.380661][T18261] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 654.678004][T18239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.958421][T18271] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 655.050060][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.182188][T18275] pimreg: entered allmulticast mode [ 655.936905][T18304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3711'. [ 655.977908][T18303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3711'. [ 655.980885][T18305] netlink: 'syz.2.3711': attribute type 10 has an invalid length. [ 656.734164][T18315] syzkaller0: entered promiscuous mode [ 656.750663][T18315] syzkaller0: entered allmulticast mode [ 656.772116][T18323] ipt_REJECT: TCP_RESET invalid for non-tcp [ 656.809652][T18327] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 656.871330][T18326] FAULT_INJECTION: forcing a failure. [ 656.871330][T18326] name failslab, interval 1, probability 0, space 0, times 0 [ 656.914065][T18326] CPU: 1 UID: 0 PID: 18326 Comm: syz.3.3719 Not tainted syzkaller #0 PREEMPT(full) [ 656.914091][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 656.914101][T18326] Call Trace: [ 656.914108][T18326] [ 656.914117][T18326] dump_stack_lvl+0xe8/0x150 [ 656.914142][T18326] should_fail_ex+0x40c/0x560 [ 656.914174][T18326] should_failslab+0xa8/0x100 [ 656.914194][T18326] __kmalloc_cache_noprof+0x88/0x660 [ 656.914221][T18326] ? __xdp_reg_mem_model+0x1e2/0x5a0 [ 656.914337][T18326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 656.914365][T18326] __xdp_reg_mem_model+0x1e2/0x5a0 [ 656.914392][T18326] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 656.914423][T18326] xdp_reg_mem_model+0x22/0x40 [ 656.914443][T18326] bpf_test_run_xdp_live+0x292/0x1c20 [ 656.914468][T18326] ? bpf_dispatcher_change_prog+0xc4a/0xf20 [ 656.914494][T18326] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 656.914521][T18326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 656.914547][T18326] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 656.914588][T18326] ? 0xffffffffa02062d0 [ 656.914630][T18326] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 656.914661][T18326] ? _copy_from_user+0x94/0xb0 [ 656.914682][T18326] ? bpf_test_init+0x113/0x150 [ 656.914699][T18326] ? xdp_convert_md_to_buff+0x5b/0x330 [ 656.914722][T18326] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 656.914763][T18326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 656.914788][T18326] ? __fget_files+0x2a/0x420 [ 656.914814][T18326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 656.914835][T18326] bpf_prog_test_run+0x2c5/0x340 [ 656.914857][T18326] __sys_bpf+0x643/0x950 [ 656.914884][T18326] ? __pfx___sys_bpf+0x10/0x10 [ 656.914924][T18326] ? ksys_write+0x242/0x270 [ 656.914951][T18326] ? __pfx_ksys_write+0x10/0x10 [ 656.914980][T18326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.915001][T18326] __x64_sys_bpf+0x7c/0x90 [ 656.915025][T18326] do_syscall_64+0x174/0x580 [ 656.915044][T18326] ? trace_irq_disable+0x3b/0x140 [ 656.915068][T18326] ? clear_bhb_loop+0x40/0x90 [ 656.915090][T18326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.915108][T18326] RIP: 0033:0x7f0de0b9ce59 [ 656.915123][T18326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.915139][T18326] RSP: 002b:00007f0de19aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.915158][T18326] RAX: ffffffffffffffda RBX: 00007f0de0e15fa0 RCX: 00007f0de0b9ce59 [ 656.915172][T18326] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 656.915183][T18326] RBP: 00007f0de19aa090 R08: 0000000000000000 R09: 0000000000000000 [ 656.915195][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.915206][T18326] R13: 00007f0de0e16038 R14: 00007f0de0e15fa0 R15: 00007ffdb9df1b98 [ 656.915236][T18326] [ 657.325263][T18334] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3722'. [ 657.349578][T18334] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3722'. [ 660.566284][T18337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3724'. [ 660.699725][T18346] x_tables: duplicate underflow at hook 1 [ 660.731591][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3727'. [ 660.812671][T18356] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3731'. [ 660.832388][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3731'. [ 661.029581][T18366] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 661.103665][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3736'. [ 661.151867][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'. [ 661.184166][T18375] FAULT_INJECTION: forcing a failure. [ 661.184166][T18375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.222510][T18375] CPU: 1 UID: 0 PID: 18375 Comm: syz.4.3738 Not tainted syzkaller #0 PREEMPT(full) [ 661.222538][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.222549][T18375] Call Trace: [ 661.222556][T18375] [ 661.222565][T18375] dump_stack_lvl+0xe8/0x150 [ 661.222592][T18375] should_fail_ex+0x40c/0x560 [ 661.222626][T18375] _copy_to_user+0x31/0xb0 [ 661.222653][T18375] simple_read_from_buffer+0xe1/0x170 [ 661.222681][T18375] proc_fail_nth_read+0x1bb/0x230 [ 661.222709][T18375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.222736][T18375] ? rw_verify_area+0x24a/0x4c0 [ 661.222762][T18375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.222785][T18375] vfs_read+0x213/0xa80 [ 661.222815][T18375] ? __pfx___mutex_lock+0x10/0x10 [ 661.222838][T18375] ? __pfx_vfs_read+0x10/0x10 [ 661.222865][T18375] ? __fget_files+0x2a/0x420 [ 661.222898][T18375] ? __fget_files+0x3a2/0x420 [ 661.222918][T18375] ? __fget_files+0x2a/0x420 [ 661.222949][T18375] ksys_read+0x150/0x270 [ 661.222976][T18375] ? __pfx_ksys_read+0x10/0x10 [ 661.223009][T18375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.223030][T18375] do_syscall_64+0x174/0x580 [ 661.223049][T18375] ? trace_irq_disable+0x3b/0x140 [ 661.223073][T18375] ? clear_bhb_loop+0x40/0x90 [ 661.223092][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.223109][T18375] RIP: 0033:0x7f1b92f5d68e [ 661.223126][T18375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.223141][T18375] RSP: 002b:00007f1b93deafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.223159][T18375] RAX: ffffffffffffffda RBX: 00007f1b93deb6c0 RCX: 00007f1b92f5d68e [ 661.223173][T18375] RDX: 000000000000000f RSI: 00007f1b93deb0a0 RDI: 0000000000000003 [ 661.223184][T18375] RBP: 00007f1b93deb090 R08: 0000000000000000 R09: 0000000000000000 [ 661.223195][T18375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.223206][T18375] R13: 00007f1b93216038 R14: 00007f1b93215fa0 R15: 00007ffd4d4ddf48 [ 661.223238][T18375] [ 661.224539][T18376] FAULT_INJECTION: forcing a failure. [ 661.224539][T18376] name failslab, interval 1, probability 0, space 0, times 0 [ 661.328744][T18382] FAULT_INJECTION: forcing a failure. [ 661.328744][T18382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.352745][T18376] CPU: 0 UID: 0 PID: 18376 Comm: syz.2.3737 Not tainted syzkaller #0 PREEMPT(full) [ 661.352772][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.352783][T18376] Call Trace: [ 661.352790][T18376] [ 661.352798][T18376] dump_stack_lvl+0xe8/0x150 [ 661.352825][T18376] should_fail_ex+0x40c/0x560 [ 661.352858][T18376] should_failslab+0xa8/0x100 [ 661.352877][T18376] ? vm_area_dup+0x28/0x670 [ 661.352901][T18376] kmem_cache_alloc_noprof+0x87/0x650 [ 661.352933][T18376] vm_area_dup+0x28/0x670 [ 661.352954][T18376] ? __split_vma+0x1c6/0xa50 [ 661.352977][T18376] __split_vma+0x1dc/0xa50 [ 661.353015][T18376] ? __pfx___split_vma+0x10/0x10 [ 661.353046][T18376] ? mas_find+0xab1/0xcf0 [ 661.353163][T18376] vms_gather_munmap_vmas+0x4e3/0x1370 [ 661.353198][T18376] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 661.353216][T18376] ? rcu_is_watching+0x15/0xb0 [ 661.353240][T18376] ? vm_unmapped_area+0xde/0x230 [ 661.353277][T18376] do_vmi_align_munmap+0x2b4/0x4b0 [ 661.353314][T18376] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 661.353365][T18376] do_vmi_munmap+0x252/0x2d0 [ 661.353390][T18376] __vm_munmap+0x241/0x3e0 [ 661.353412][T18376] ? __pfx___vm_munmap+0x10/0x10 [ 661.353429][T18376] ? vm_mmap_pgoff+0x35a/0x4e0 [ 661.353469][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.353489][T18376] __x64_sys_munmap+0x60/0x70 [ 661.353511][T18376] do_syscall_64+0x174/0x580 [ 661.353530][T18376] ? trace_irq_disable+0x3b/0x140 [ 661.353555][T18376] ? clear_bhb_loop+0x40/0x90 [ 661.353577][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.353595][T18376] RIP: 0033:0x7fe09599cc87 [ 661.353611][T18376] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.353626][T18376] RSP: 002b:00007fe0968cbd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 661.353645][T18376] RAX: ffffffffffffffda RBX: 00007fe08c000000 RCX: 00007fe09599cc87 [ 661.353658][T18376] RDX: 0000000000000000 RSI: 0000000000600000 RDI: 00007fe08ba00000 [ 661.353670][T18376] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 661.353681][T18376] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 661.353692][T18376] R13: 0000000000001000 R14: 00007fe090000000 R15: 0000000000600000 [ 661.353722][T18376] [ 661.395271][T18379] syzkaller0: entered promiscuous mode [ 661.434551][T18382] CPU: 1 UID: 0 PID: 18382 Comm: syz.3.3740 Not tainted syzkaller #0 PREEMPT(full) [ 661.434575][T18382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.434587][T18382] Call Trace: [ 661.434594][T18382] [ 661.434602][T18382] dump_stack_lvl+0xe8/0x150 [ 661.434629][T18382] should_fail_ex+0x40c/0x560 [ 661.434662][T18382] _copy_from_user+0x2d/0xb0 [ 661.434684][T18382] ___sys_sendmsg+0x1c6/0x360 [ 661.434702][T18382] ? __lock_acquire+0x683/0x2cd0 [ 661.434726][T18382] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.434780][T18382] ? __fget_files+0x2a/0x420 [ 661.434800][T18382] ? __fget_files+0x3a2/0x420 [ 661.434831][T18382] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.434852][T18382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.434889][T18382] ? __pfx_ksys_write+0x10/0x10 [ 661.434922][T18382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.434941][T18382] do_syscall_64+0x174/0x580 [ 661.434962][T18382] ? trace_irq_disable+0x3b/0x140 [ 661.434986][T18382] ? clear_bhb_loop+0x40/0x90 [ 661.435008][T18382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.435025][T18382] RIP: 0033:0x7f0de0b9ce59 [ 661.435042][T18382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.435057][T18382] RSP: 002b:00007f0de1989028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.435075][T18382] RAX: ffffffffffffffda RBX: 00007f0de0e16090 RCX: 00007f0de0b9ce59 [ 661.435088][T18382] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 661.435100][T18382] RBP: 00007f0de1989090 R08: 0000000000000000 R09: 0000000000000000 [ 661.435111][T18382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.435121][T18382] R13: 00007f0de0e16128 R14: 00007f0de0e16090 R15: 00007ffdb9df1b98 [ 661.435150][T18382] [ 661.875543][T18393] netlink: 'syz.4.3741': attribute type 3 has an invalid length. [ 661.880734][T18379] syzkaller0: entered allmulticast mode [ 661.905853][T18393] netlink: 'syz.4.3741': attribute type 3 has an invalid length. [ 661.916372][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3741'. [ 662.401435][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'. [ 662.559857][T18413] netlink: 'syz.4.3751': attribute type 10 has an invalid length. [ 662.582781][T18413] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 662.596368][T18416] netlink: 'syz.4.3751': attribute type 10 has an invalid length. [ 663.094118][T18430] xt_cgroup: xt_cgroup: no path or classid specified [ 663.224834][T18434] syzkaller0: entered promiscuous mode [ 663.231375][T18434] syzkaller0: entered allmulticast mode [ 663.332859][T18438] syzkaller1: entered promiscuous mode [ 663.339162][T18438] syzkaller1: entered allmulticast mode [ 663.463094][T18443] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3762'. [ 663.472736][T18443] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3762'. [ 663.562552][T18445] pimreg: entered allmulticast mode [ 663.578444][T18447] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3764'. [ 663.795955][T18455] x_tables: duplicate underflow at hook 1 [ 664.194084][T18467] syzkaller0: entered promiscuous mode [ 664.208534][T18467] syzkaller0: entered allmulticast mode [ 664.630210][T18474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.830595][T18483] FAULT_INJECTION: forcing a failure. [ 664.830595][T18483] name failslab, interval 1, probability 0, space 0, times 0 [ 664.865553][T18483] CPU: 0 UID: 0 PID: 18483 Comm: syz.4.3779 Not tainted syzkaller #0 PREEMPT(full) [ 664.865579][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.865590][T18483] Call Trace: [ 664.865596][T18483] [ 664.865604][T18483] dump_stack_lvl+0xe8/0x150 [ 664.865630][T18483] should_fail_ex+0x40c/0x560 [ 664.865661][T18483] should_failslab+0xa8/0x100 [ 664.865679][T18483] ? mas_alloc_nodes+0x291/0x350 [ 664.865733][T18483] kmem_cache_alloc_noprof+0x87/0x650 [ 664.865765][T18483] mas_alloc_nodes+0x291/0x350 [ 664.865789][T18483] mas_preallocate+0x2cf/0x630 [ 664.865810][T18483] ? rcu_is_watching+0x15/0xb0 [ 664.865832][T18483] ? __pfx_mas_preallocate+0x10/0x10 [ 664.865860][T18483] ? anon_vma_name+0x61/0x210 [ 664.865889][T18483] ? __mas_set_range+0x11a/0x3a0 [ 664.865913][T18483] __split_vma+0x318/0xa50 [ 664.865947][T18483] ? __pfx___split_vma+0x10/0x10 [ 664.865979][T18483] ? mas_find+0xab1/0xcf0 [ 664.866006][T18483] vms_gather_munmap_vmas+0x4e3/0x1370 [ 664.866043][T18483] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 664.866061][T18483] ? rcu_is_watching+0x15/0xb0 [ 664.866082][T18483] ? vm_unmapped_area+0xde/0x230 [ 664.866121][T18483] do_vmi_align_munmap+0x2b4/0x4b0 [ 664.866160][T18483] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 664.866214][T18483] do_vmi_munmap+0x252/0x2d0 [ 664.866239][T18483] __vm_munmap+0x241/0x3e0 [ 664.866262][T18483] ? __pfx___vm_munmap+0x10/0x10 [ 664.866280][T18483] ? vm_mmap_pgoff+0x35a/0x4e0 [ 664.866322][T18483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.866342][T18483] __x64_sys_munmap+0x60/0x70 [ 664.866366][T18483] do_syscall_64+0x174/0x580 [ 664.866386][T18483] ? trace_irq_disable+0x3b/0x140 [ 664.866409][T18483] ? clear_bhb_loop+0x40/0x90 [ 664.866431][T18483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.866448][T18483] RIP: 0033:0x7f1b92f9cc87 [ 664.866464][T18483] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.866480][T18483] RSP: 002b:00007f1b93de9d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 664.866500][T18483] RAX: ffffffffffffffda RBX: 00007f1b8c000000 RCX: 00007f1b92f9cc87 [ 664.866514][T18483] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 00007f1b89000000 [ 664.866526][T18483] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 664.866539][T18483] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 664.866551][T18483] R13: 0000000000001000 R14: 00007f1b90000000 R15: 0000000003000000 [ 664.866580][T18483] [ 665.148919][T18489] FAULT_INJECTION: forcing a failure. [ 665.148919][T18489] name failslab, interval 1, probability 0, space 0, times 0 [ 665.221443][T18489] CPU: 1 UID: 0 PID: 18489 Comm: syz.2.3781 Not tainted syzkaller #0 PREEMPT(full) [ 665.221469][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.221479][T18489] Call Trace: [ 665.221487][T18489] [ 665.221495][T18489] dump_stack_lvl+0xe8/0x150 [ 665.221524][T18489] should_fail_ex+0x40c/0x560 [ 665.221557][T18489] should_failslab+0xa8/0x100 [ 665.221578][T18489] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 665.221603][T18489] ? __alloc_skb+0x189/0x7a0 [ 665.221637][T18489] ? __alloc_skb+0x1d7/0x7a0 [ 665.221659][T18489] ? __local_bh_enable_ip+0xd0/0x130 [ 665.221683][T18489] __alloc_skb+0x1d7/0x7a0 [ 665.221712][T18489] netlink_sendmsg+0x5d4/0xb40 [ 665.221742][T18489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.221766][T18489] ? aa_sock_msg_perm+0xf1/0x1b0 [ 665.221794][T18489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 665.221815][T18489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.221838][T18489] ____sys_sendmsg+0x9b9/0xa20 [ 665.221858][T18489] ? __might_fault+0xaf/0x130 [ 665.221886][T18489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 665.221916][T18489] ? import_iovec+0x73/0xa0 [ 665.221940][T18489] ___sys_sendmsg+0x2a5/0x360 [ 665.221958][T18489] ? __lock_acquire+0x683/0x2cd0 [ 665.221983][T18489] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.222041][T18489] ? __fget_files+0x2a/0x420 [ 665.222062][T18489] ? __fget_files+0x3a2/0x420 [ 665.222094][T18489] __x64_sys_sendmsg+0x1bd/0x2a0 [ 665.222116][T18489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 665.222146][T18489] ? __pfx_ksys_write+0x10/0x10 [ 665.222180][T18489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.222200][T18489] do_syscall_64+0x174/0x580 [ 665.222221][T18489] ? trace_irq_disable+0x3b/0x140 [ 665.222246][T18489] ? clear_bhb_loop+0x40/0x90 [ 665.222269][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.222287][T18489] RIP: 0033:0x7fe09599ce59 [ 665.222305][T18489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.222320][T18489] RSP: 002b:00007fe0968ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.222341][T18489] RAX: ffffffffffffffda RBX: 00007fe095c16090 RCX: 00007fe09599ce59 [ 665.222355][T18489] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 665.222366][T18489] RBP: 00007fe0968ac090 R08: 0000000000000000 R09: 0000000000000000 [ 665.222378][T18489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.222389][T18489] R13: 00007fe095c16128 R14: 00007fe095c16090 R15: 00007ffda9385298 [ 665.222420][T18489] [ 665.482634][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 665.684432][T18507] xt_TPROXY: Can be used only with -p tcp or -p udp [ 666.021011][T18522] bond0: option arp_validate: invalid value (55553) [ 666.055054][T18525] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3787'. [ 666.339537][T18536] xt_cgroup: xt_cgroup: no path or classid specified [ 666.745941][T18553] x_tables: duplicate underflow at hook 1 [ 667.001988][T18560] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3801'. [ 667.153779][ T6653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.162512][ T6653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.199261][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 667.517236][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 667.785084][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 667.801497][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 667.829496][T18595] netlink: 'syz.2.3814': attribute type 1 has an invalid length. [ 667.884134][T18595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.514599][T18622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.576176][T18545] syzkaller0: entered promiscuous mode [ 668.581962][T18545] syzkaller0: entered allmulticast mode [ 672.880296][T18631] bond0: option arp_validate: invalid value (55553) [ 674.028541][T18675] syzkaller0: entered promiscuous mode [ 674.045113][T18675] syzkaller0: entered allmulticast mode [ 674.157678][T18678] xt_CT: No such helper "snmp" [ 674.534074][T18696] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 674.833782][T18705] FAULT_INJECTION: forcing a failure. [ 674.833782][T18705] name failslab, interval 1, probability 0, space 0, times 0 [ 674.898090][T18705] CPU: 0 UID: 0 PID: 18705 Comm: syz.1.3843 Not tainted syzkaller #0 PREEMPT(full) [ 674.898115][T18705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.898126][T18705] Call Trace: [ 674.898133][T18705] [ 674.898142][T18705] dump_stack_lvl+0xe8/0x150 [ 674.898169][T18705] should_fail_ex+0x40c/0x560 [ 674.898201][T18705] should_failslab+0xa8/0x100 [ 674.898221][T18705] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 674.898247][T18705] ? __alloc_skb+0x1d7/0x7a0 [ 674.898270][T18705] ? __local_bh_enable_ip+0xd0/0x130 [ 674.898293][T18705] __alloc_skb+0x1d7/0x7a0 [ 674.898319][T18705] netlink_ack+0x136/0xb30 [ 674.898335][T18705] ? __pfx___mutex_trylock_common+0x10/0x10 [ 674.898360][T18705] ? rcu_is_watching+0x15/0xb0 [ 674.898379][T18705] ? trace_contention_end+0x3d/0x140 [ 674.898406][T18705] netlink_rcv_skb+0x2a4/0x4a0 [ 674.898426][T18705] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 674.898455][T18705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.898490][T18705] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.898508][T18705] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.898529][T18705] xfrm_netlink_rcv+0x79/0x90 [ 674.898555][T18705] netlink_unicast+0x7bb/0x940 [ 674.898593][T18705] netlink_sendmsg+0x813/0xb40 [ 674.898630][T18705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.898652][T18705] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.898679][T18705] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.898700][T18705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.898718][T18705] ____sys_sendmsg+0x9b9/0xa20 [ 674.898736][T18705] ? __might_fault+0xaf/0x130 [ 674.898763][T18705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.898791][T18705] ? import_iovec+0x73/0xa0 [ 674.898815][T18705] ___sys_sendmsg+0x2a5/0x360 [ 674.898831][T18705] ? __lock_acquire+0x683/0x2cd0 [ 674.898854][T18705] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.898907][T18705] ? __fget_files+0x2a/0x420 [ 674.898928][T18705] ? __fget_files+0x3a2/0x420 [ 674.898958][T18705] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.898981][T18705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.899010][T18705] ? __pfx_ksys_write+0x10/0x10 [ 674.899045][T18705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.899066][T18705] do_syscall_64+0x174/0x580 [ 674.899088][T18705] ? trace_irq_disable+0x3b/0x140 [ 674.899115][T18705] ? clear_bhb_loop+0x40/0x90 [ 674.899136][T18705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.899154][T18705] RIP: 0033:0x7fda3599ce59 [ 674.899171][T18705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.899186][T18705] RSP: 002b:00007fda36888028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.899206][T18705] RAX: ffffffffffffffda RBX: 00007fda35c16090 RCX: 00007fda3599ce59 [ 674.899219][T18705] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 674.899231][T18705] RBP: 00007fda36888090 R08: 0000000000000000 R09: 0000000000000000 [ 674.899243][T18705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.899254][T18705] R13: 00007fda35c16128 R14: 00007fda35c16090 R15: 00007fff23ae4208 [ 674.899284][T18705] [ 675.254162][T18711] netlink: 'syz.3.3844': attribute type 11 has an invalid length. [ 675.268168][T18711] netlink: 'syz.3.3844': attribute type 4 has an invalid length. [ 675.284459][T18711] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.3844'. [ 675.337486][T18711] ip6gre1: entered promiscuous mode [ 675.350630][T18711] ip6gre1: entered allmulticast mode [ 675.675225][T18722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.997693][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 676.087517][T18729] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.095126][T18732] (: renamed from bridge_slave_0 [ 676.272226][T18733] bond5: (slave veth7): Enslaving as an active interface with an up link [ 676.290745][T18745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3853'. [ 676.361184][T18745] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 676.452684][T18750] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3858'. [ 676.772069][T18729] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3853'. [ 676.958303][T18767] syzkaller0: entered promiscuous mode [ 676.971107][T18767] syzkaller0: entered allmulticast mode [ 677.136190][T18778] netlink: 'syz.3.3866': attribute type 1 has an invalid length. [ 677.155957][T18778] netlink: 'syz.3.3866': attribute type 3 has an invalid length. [ 677.166435][T18778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3866'. [ 677.185391][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3866'. [ 677.238894][T18781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.722332][T18801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3875'. [ 677.731788][T18801] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3875'. [ 677.889346][T18805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 678.053816][T18791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.102025][T18791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.192578][T18809] 8021q: VLANs not supported on lo [ 678.522446][T18791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.544277][T18791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.747501][T18791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.776848][T18791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.089746][T18791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.100822][T18791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.326644][T18849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3889'. [ 679.716672][ T6645] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.746595][ T6645] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.842611][ T6645] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.859764][ T6645] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.885831][ T6645] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.894363][ T6645] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.923040][ T6645] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.931989][ T6645] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.269815][T18849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.576166][T18889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.843680][T18894] bond0: option arp_validate: invalid value (55553) [ 682.944609][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3905'. [ 682.996378][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3905'. [ 683.435036][T18921] netlink: 'syz.4.3911': attribute type 49 has an invalid length. [ 683.583562][T18928] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 683.596637][T18928] netlink: 'syz.0.3910': attribute type 3 has an invalid length. [ 683.606527][T18928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3910'. [ 683.624243][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'. [ 683.723325][T18934] FAULT_INJECTION: forcing a failure. [ 683.723325][T18934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.739092][T18934] CPU: 1 UID: 0 PID: 18934 Comm: syz.3.3914 Not tainted syzkaller #0 PREEMPT(full) [ 683.739117][T18934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.739129][T18934] Call Trace: [ 683.739137][T18934] [ 683.739146][T18934] dump_stack_lvl+0xe8/0x150 [ 683.739174][T18934] should_fail_ex+0x40c/0x560 [ 683.739209][T18934] _copy_from_user+0x2d/0xb0 [ 683.739231][T18934] ___sys_sendmsg+0x1c6/0x360 [ 683.739251][T18934] ? __lock_acquire+0x683/0x2cd0 [ 683.739276][T18934] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.739328][T18934] ? __fget_files+0x2a/0x420 [ 683.739350][T18934] ? __fget_files+0x3a2/0x420 [ 683.739390][T18934] __x64_sys_sendmsg+0x1bd/0x2a0 [ 683.739411][T18934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.739438][T18934] ? __pfx_ksys_write+0x10/0x10 [ 683.739471][T18934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.739491][T18934] do_syscall_64+0x174/0x580 [ 683.739511][T18934] ? trace_irq_disable+0x3b/0x140 [ 683.739535][T18934] ? clear_bhb_loop+0x40/0x90 [ 683.739556][T18934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.739573][T18934] RIP: 0033:0x7f0de0b9ce59 [ 683.739590][T18934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.739605][T18934] RSP: 002b:00007f0de19aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.739625][T18934] RAX: ffffffffffffffda RBX: 00007f0de0e15fa0 RCX: 00007f0de0b9ce59 [ 683.739638][T18934] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 683.739649][T18934] RBP: 00007f0de19aa090 R08: 0000000000000000 R09: 0000000000000000 [ 683.739660][T18934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.739670][T18934] R13: 00007f0de0e16038 R14: 00007f0de0e15fa0 R15: 00007ffdb9df1b98 [ 683.739700][T18934] [ 683.842956][T18931] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 684.007681][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3913'. [ 684.048243][T18931] netlink: 'syz.4.3913': attribute type 3 has an invalid length. [ 684.090321][T18931] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3913'. [ 684.186949][T18945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.216964][T18945] batadv_slave_1: entered promiscuous mode [ 684.294516][T18949] xt_TPROXY: Can be used only with -p tcp or -p udp [ 685.062857][T18978] bond0: option arp_validate: invalid value (55553) [ 685.079963][T18979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.226792][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3928'. [ 685.255215][T18990] x_tables: duplicate underflow at hook 1 [ 685.290466][T18992] bond0: option arp_validate: invalid value (55553) [ 685.772671][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.947350][T19017] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 685.984546][T19017] bond3: entered promiscuous mode [ 685.990409][T19017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.151651][T18983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.353158][T19041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.608105][T19052] netlink: 'syz.2.3948': attribute type 1 has an invalid length. [ 688.774800][T19052] bond4: entered promiscuous mode [ 688.811141][T19052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.921522][T19063] pimreg: entered allmulticast mode [ 689.139786][T19073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.280968][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'. [ 689.309775][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 689.777233][T19095] xt_cgroup: xt_cgroup: no path or classid specified [ 689.971699][T19098] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3960'. [ 690.001284][T19098] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3960'. [ 690.031420][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3960'. [ 690.148871][T19105] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 690.262194][T19105] bond4: entered promiscuous mode [ 690.291519][T19105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.657543][T19131] xt_l2tp: invalid flags combination: 0 [ 691.127231][T19145] bond0: option arp_validate: invalid value (55553) [ 691.329021][T19147] netlink: 'syz.1.3977': attribute type 1 has an invalid length. [ 691.349264][T19147] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3977'. [ 691.373063][T19147] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3977'. [ 691.515798][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3981'. [ 691.544058][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3980'. [ 691.590502][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3980'. [ 692.173924][T19187] FAULT_INJECTION: forcing a failure. [ 692.173924][T19187] name failslab, interval 1, probability 0, space 0, times 0 [ 692.200321][T19187] CPU: 1 UID: 0 PID: 19187 Comm: syz.2.3986 Not tainted syzkaller #0 PREEMPT(full) [ 692.200347][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.200357][T19187] Call Trace: [ 692.200365][T19187] [ 692.200374][T19187] dump_stack_lvl+0xe8/0x150 [ 692.200402][T19187] should_fail_ex+0x40c/0x560 [ 692.200436][T19187] should_failslab+0xa8/0x100 [ 692.200453][T19187] ? __anon_vma_prepare+0xc3/0x4e0 [ 692.200477][T19187] kmem_cache_alloc_noprof+0x87/0x650 [ 692.200508][T19187] __anon_vma_prepare+0xc3/0x4e0 [ 692.200535][T19187] do_pte_missing+0x3004/0x3540 [ 692.200564][T19187] ? lock_vma_under_rcu+0x1d1/0x500 [ 692.200600][T19187] handle_mm_fault+0x1b38/0x3080 [ 692.200633][T19187] ? handle_mm_fault+0xec/0x3080 [ 692.200661][T19187] ? __pfx_handle_mm_fault+0x10/0x10 [ 692.200680][T19187] ? lock_vma_under_rcu+0x45a/0x500 [ 692.200729][T19187] do_user_addr_fault+0xa4d/0x1340 [ 692.200797][T19187] ? trace_page_fault_user+0x84/0x1e0 [ 692.200826][T19187] exc_page_fault+0x6a/0xc0 [ 692.200851][T19187] asm_exc_page_fault+0x26/0x30 [ 692.200869][T19187] RIP: 0033:0x7fe09595ed82 [ 692.200887][T19187] Code: 8d 15 9e 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 692.200903][T19187] RSP: 002b:00007fe0968cbd20 EFLAGS: 00010286 [ 692.200919][T19187] RAX: ffffffffffffffff RBX: 00007fe08c000000 RCX: 00007fe09599cc57 [ 692.200934][T19187] RDX: 00007fe095a4f2fc RSI: 0000000000021000 RDI: 00007fe08c000000 [ 692.200947][T19187] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 692.200959][T19187] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 692.200971][T19187] R13: 0000000000001000 R14: 00007fe090000000 R15: 0000000000600000 [ 692.201003][T19187] [ 692.201556][T19187] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 692.695115][T19202] syzkaller0: entered promiscuous mode [ 692.712841][T19202] syzkaller0: entered allmulticast mode [ 692.837303][T19206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.865739][T19206] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.881548][T19209] FAULT_INJECTION: forcing a failure. [ 692.881548][T19209] name failslab, interval 1, probability 0, space 0, times 0 [ 692.920035][T19206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.927978][T19209] CPU: 1 UID: 0 PID: 19209 Comm: syz.3.3990 Not tainted syzkaller #0 PREEMPT(full) [ 692.928004][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.928015][T19209] Call Trace: [ 692.928022][T19209] [ 692.928030][T19209] dump_stack_lvl+0xe8/0x150 [ 692.928058][T19209] should_fail_ex+0x40c/0x560 [ 692.928091][T19209] should_failslab+0xa8/0x100 [ 692.928111][T19209] __kmalloc_cache_node_noprof+0x8c/0x690 [ 692.928134][T19209] ? unwind_next_frame+0x8f/0x2550 [ 692.928156][T19209] ? __get_vm_area_node+0x136/0x300 [ 692.928183][T19209] __get_vm_area_node+0x136/0x300 [ 692.928210][T19209] __vmalloc_node_range_noprof+0x358/0x1730 [ 692.928235][T19209] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 692.928290][T19209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 692.928313][T19209] ? __lock_acquire+0x683/0x2cd0 [ 692.928342][T19209] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 692.928365][T19209] __vmalloc_noprof+0xd2/0x120 [ 692.928389][T19209] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 692.928417][T19209] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 692.928442][T19209] ? bpf_prog_alloc+0x2a/0x1a0 [ 692.928470][T19209] bpf_prog_alloc+0x3c/0x1a0 [ 692.928498][T19209] bpf_prog_load+0x788/0x1a10 [ 692.928532][T19209] ? get_pid_task+0x20/0x1f0 [ 692.928588][T19209] ? __pfx_bpf_prog_load+0x10/0x10 [ 692.928614][T19209] ? __might_fault+0xaf/0x130 [ 692.928651][T19209] ? bpf_lsm_bpf+0x9/0x20 [ 692.928666][T19209] ? security_bpf+0x7e/0x2d0 [ 692.928691][T19209] __sys_bpf+0x618/0x950 [ 692.928716][T19209] ? __pfx___sys_bpf+0x10/0x10 [ 692.928755][T19209] ? ksys_write+0x242/0x270 [ 692.928782][T19209] ? __pfx_ksys_write+0x10/0x10 [ 692.928811][T19209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.928835][T19209] __x64_sys_bpf+0x7c/0x90 [ 692.928859][T19209] do_syscall_64+0x174/0x580 [ 692.928887][T19209] ? trace_irq_disable+0x3b/0x140 [ 692.928912][T19209] ? clear_bhb_loop+0x40/0x90 [ 692.928935][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.928953][T19209] RIP: 0033:0x7f0de0b9ce59 [ 692.928971][T19209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.928987][T19209] RSP: 002b:00007f0de19aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 692.929007][T19209] RAX: ffffffffffffffda RBX: 00007f0de0e15fa0 RCX: 00007f0de0b9ce59 [ 692.929021][T19209] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 692.929032][T19209] RBP: 00007f0de19aa090 R08: 0000000000000000 R09: 0000000000000000 [ 692.929044][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.929055][T19209] R13: 00007f0de0e16038 R14: 00007f0de0e15fa0 R15: 00007ffdb9df1b98 [ 692.929086][T19209] [ 692.929341][T19209] syz.3.3990: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 693.261711][T19209] CPU: 1 UID: 0 PID: 19209 Comm: syz.3.3990 Not tainted syzkaller #0 PREEMPT(full) [ 693.261738][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.261750][T19209] Call Trace: [ 693.261757][T19209] [ 693.261766][T19209] dump_stack_lvl+0xe8/0x150 [ 693.261794][T19209] warn_alloc+0x249/0x340 [ 693.261826][T19209] ? __pfx_warn_alloc+0x10/0x10 [ 693.261861][T19209] ? __get_vm_area_node+0x136/0x300 [ 693.261889][T19209] ? __get_vm_area_node+0x2af/0x300 [ 693.261918][T19209] __vmalloc_node_range_noprof+0x37d/0x1730 [ 693.261972][T19209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 693.261996][T19209] ? __lock_acquire+0x683/0x2cd0 [ 693.262025][T19209] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 693.262053][T19209] __vmalloc_noprof+0xd2/0x120 [ 693.262077][T19209] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 693.262105][T19209] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 693.262129][T19209] ? bpf_prog_alloc+0x2a/0x1a0 [ 693.262157][T19209] bpf_prog_alloc+0x3c/0x1a0 [ 693.262185][T19209] bpf_prog_load+0x788/0x1a10 [ 693.262218][T19209] ? get_pid_task+0x20/0x1f0 [ 693.262246][T19209] ? __pfx_bpf_prog_load+0x10/0x10 [ 693.262272][T19209] ? __might_fault+0xaf/0x130 [ 693.262310][T19209] ? bpf_lsm_bpf+0x9/0x20 [ 693.262326][T19209] ? security_bpf+0x7e/0x2d0 [ 693.262351][T19209] __sys_bpf+0x618/0x950 [ 693.262378][T19209] ? __pfx___sys_bpf+0x10/0x10 [ 693.262418][T19209] ? ksys_write+0x242/0x270 [ 693.262444][T19209] ? __pfx_ksys_write+0x10/0x10 [ 693.262473][T19209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.262493][T19209] __x64_sys_bpf+0x7c/0x90 [ 693.262518][T19209] do_syscall_64+0x174/0x580 [ 693.262539][T19209] ? trace_irq_disable+0x3b/0x140 [ 693.262563][T19209] ? clear_bhb_loop+0x40/0x90 [ 693.262585][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.262601][T19209] RIP: 0033:0x7f0de0b9ce59 [ 693.262619][T19209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.262634][T19209] RSP: 002b:00007f0de19aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.262654][T19209] RAX: ffffffffffffffda RBX: 00007f0de0e15fa0 RCX: 00007f0de0b9ce59 [ 693.262668][T19209] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 693.262680][T19209] RBP: 00007f0de19aa090 R08: 0000000000000000 R09: 0000000000000000 [ 693.262690][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.262701][T19209] R13: 00007f0de0e16038 R14: 00007f0de0e15fa0 R15: 00007ffdb9df1b98 [ 693.262732][T19209] [ 693.262773][T19209] Mem-Info: [ 693.552285][T19209] active_anon:5527 inactive_anon:0 isolated_anon:0 [ 693.552285][T19209] active_file:3685 inactive_file:40195 isolated_file:0 [ 693.552285][T19209] unevictable:768 dirty:339 writeback:0 [ 693.552285][T19209] slab_reclaimable:22445 slab_unreclaimable:109077 [ 693.552285][T19209] mapped:29934 shmem:1289 pagetables:1313 [ 693.552285][T19209] sec_pagetables:0 bounce:0 [ 693.552285][T19209] kernel_misc_reclaimable:0 [ 693.552285][T19209] free:1284290 free_pcp:26436 free_cma:0 [ 693.600123][T19209] Node 0 active_anon:22108kB inactive_anon:0kB active_file:14740kB inactive_file:160568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119736kB dirty:1356kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15020kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 693.643004][T19209] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 693.677193][T19209] Node 0 DMA free:15272kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:84kB free_cma:0kB [ 693.708582][T19209] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 693.714886][T19209] Node 0 DMA32 free:1253616kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22108kB inactive_anon:0kB active_file:14740kB inactive_file:160568kB unevictable:1536kB writepending:1356kB zspages:0kB present:3129332kB managed:2552916kB mlocked:0kB bounce:0kB free_pcp:40768kB local_pcp:17344kB free_cma:0kB [ 693.758398][T19209] lowmem_reserve[]: 0 0 0 0 0 [ 693.763371][T19209] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.793208][T19209] lowmem_reserve[]: 0 0 0 0 0 [ 693.798322][T19209] Node 1 Normal free:3868272kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:65444kB local_pcp:33224kB free_cma:0kB [ 693.853228][T19209] lowmem_reserve[]: 0 0 0 0 0 [ 693.858510][T19209] Node 0 DMA: 2*4kB (U) 2*8kB (U) 1*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15272kB [ 693.874348][T19209] Node 0 DMA32: 532*4kB (UM) 5250*8kB (UME) 3524*16kB (UME) 685*32kB (UM) 1252*64kB (UME) 1003*128kB (UME) 669*256kB (UME) 419*512kB (UME) 278*1024kB (UME) 123*2048kB (UM) 0*4096kB = 1253312kB [ 693.895523][T19209] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 693.907611][T19209] Node 1 Normal: 3*4kB (U) 6*8kB (UM) 11*16kB (UM) 15*32kB (UM) 11*64kB (UM) 7*128kB (UM) 6*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 940*4096kB (UM) = 3868428kB [ 693.925410][T19209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.946670][T19209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 693.984733][T19209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.014836][T19209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 694.030399][T19206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.039738][T19209] 45164 total pagecache pages [ 694.045159][T19206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.053520][T19209] 0 pages in swap cache [ 694.068007][T19209] Free swap = 124996kB [ 694.076982][T19206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.088085][T19209] Total swap = 124996kB [ 694.095448][T19209] 2097051 pages RAM [ 694.100243][T19209] 0 pages HighMem/MovableOnly [ 694.104985][T19206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.116107][T19209] 427036 pages reserved [ 694.120792][T19209] 0 pages cma reserved [ 694.138792][T19206] veth1_macvtap: left promiscuous mode [ 694.147571][T19206] veth0_macvtap: left promiscuous mode [ 694.161479][T19206] veth0_macvtap: entered promiscuous mode [ 694.169697][T19206] veth1_macvtap: entered promiscuous mode [ 694.187310][T19206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.219266][T19206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.231620][T19206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.241647][T19206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.282840][ T6645] bridge0: port 1(() entered blocking state [ 694.288948][ T6645] bridge0: port 1(() entered forwarding state [ 694.324276][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.331507][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.466261][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.476439][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.486869][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.533867][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.577563][ T12] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 694.642183][ T12] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 694.656846][ T12] bond2: (slave veth5): making interface the new active one [ 694.685421][ T12] bond2: active interface up! [ 694.756496][T19219] __nla_validate_parse: 2 callbacks suppressed [ 694.756515][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'. [ 694.882788][T19233] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 694.950690][ T186] ip6_tunnel: €Â xmit: Local address not yet configured! [ 694.980008][T15023] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 695.096675][T19238] syzkaller0: entered promiscuous mode [ 695.108626][T19238] syzkaller0: entered allmulticast mode [ 695.157400][T19254] netlink: 'syz.2.4003': attribute type 30 has an invalid length. [ 695.200275][ T8086] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 695.240208][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4005'. [ 695.310963][T19259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.078746][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4009'. [ 698.094631][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4009'. [ 698.888081][ C0] ip6_tunnel: €Â xmit: Local address not yet configured! [ 699.173702][T19254] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 699.175317][T19255] tipc: Started in network mode [ 699.198173][T19255] tipc: Node identity , cluster identity 4711 [ 699.210677][T19255] tipc: Failed to obtain node identity [ 699.228268][T19255] tipc: Enabling of bearer rejected, failed to enable media [ 699.575478][ T1128] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 700.556180][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 700.587676][T19328] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4024'. [ 700.617580][T19327] vlan3: entered allmulticast mode [ 700.632140][T19327] macvtap0: entered allmulticast mode [ 700.649581][ T1128] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 700.658781][ T1128] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 700.878379][T15023] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 701.291103][T19351] netlink: 'syz.3.4033': attribute type 4 has an invalid length. [ 701.395208][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 701.659436][T19355] xt_hashlimit: size too large, truncated to 1048576 [ 701.719245][T19358] netlink: 'syz.3.4036': attribute type 1 has an invalid length. [ 701.735324][T19358] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4036'. [ 701.766005][T19358] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4036'. [ 702.178801][T19370] syzkaller0: entered promiscuous mode [ 702.199115][T19370] syzkaller0: entered allmulticast mode [ 702.262703][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4040'. [ 702.592273][T19386] FAULT_INJECTION: forcing a failure. [ 702.592273][T19386] name failslab, interval 1, probability 0, space 0, times 0 [ 702.617459][T19386] CPU: 0 UID: 0 PID: 19386 Comm: syz.2.4043 Not tainted syzkaller #0 PREEMPT(full) [ 702.617486][T19386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 702.617497][T19386] Call Trace: [ 702.617505][T19386] [ 702.617513][T19386] dump_stack_lvl+0xe8/0x150 [ 702.617541][T19386] should_fail_ex+0x40c/0x560 [ 702.617573][T19386] should_failslab+0xa8/0x100 [ 702.617594][T19386] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 702.617619][T19386] ? __alloc_skb+0x189/0x7a0 [ 702.617645][T19386] ? __alloc_skb+0x1d7/0x7a0 [ 702.617668][T19386] ? __local_bh_enable_ip+0xd0/0x130 [ 702.617695][T19386] __alloc_skb+0x1d7/0x7a0 [ 702.617721][T19386] alloc_skb_with_frags+0xc6/0x760 [ 702.617742][T19386] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 702.617774][T19386] sock_alloc_send_pskb+0x878/0x990 [ 702.617814][T19386] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 702.617842][T19386] ? aa_sk_perm+0x6d5/0x900 [ 702.617872][T19386] hci_sock_sendmsg+0x208/0xf50 [ 702.618037][T19386] ? __pfx_aa_sk_perm+0x10/0x10 [ 702.618061][T19386] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 702.618091][T19386] ? aa_sock_msg_perm+0xf1/0x1b0 [ 702.618115][T19386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 702.618139][T19386] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 702.618159][T19386] sock_write_iter+0x498/0x4e0 [ 702.618183][T19386] ? __pfx_sock_write_iter+0x10/0x10 [ 702.618212][T19386] ? bpf_lsm_file_permission+0x9/0x20 [ 702.618236][T19386] ? security_file_permission+0x75/0x260 [ 702.618266][T19386] vfs_write+0x612/0xba0 [ 702.618298][T19386] ? __pfx_vfs_write+0x10/0x10 [ 702.618330][T19386] ? __fget_files+0x2a/0x420 [ 702.618358][T19386] ksys_write+0x150/0x270 [ 702.618386][T19386] ? __pfx_ksys_write+0x10/0x10 [ 702.618416][T19386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.618434][T19386] do_syscall_64+0x174/0x580 [ 702.618456][T19386] ? clear_bhb_loop+0x40/0x90 [ 702.618478][T19386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.618495][T19386] RIP: 0033:0x7fe09599ce59 [ 702.618512][T19386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.618528][T19386] RSP: 002b:00007fe0968cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.618546][T19386] RAX: ffffffffffffffda RBX: 00007fe095c15fa0 RCX: 00007fe09599ce59 [ 702.618560][T19386] RDX: 0000000000000008 RSI: 0000200000000500 RDI: 0000000000000009 [ 702.618570][T19386] RBP: 00007fe0968cd090 R08: 0000000000000000 R09: 0000000000000000 [ 702.618582][T19386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.618592][T19386] R13: 00007fe095c16038 R14: 00007fe095c15fa0 R15: 00007ffda9385298 [ 702.618621][T19386] [ 703.243709][T19400] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 703.369365][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4046'. [ 703.650445][T19415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.677329][T19417] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 703.726488][T19417] bond6: entered promiscuous mode [ 703.741723][T19417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.424121][T19442] syzkaller1: entered promiscuous mode [ 704.439713][T19442] syzkaller1: entered allmulticast mode [ 704.568242][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 704.677609][T19449] netlink: 'syz.1.4061': attribute type 1 has an invalid length. [ 704.766911][T19449] bond5: entered promiscuous mode [ 704.772688][T19449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 704.783252][T19446] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4060'. [ 704.793479][T19446] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4060'. [ 705.327438][T19471] xt_cgroup: xt_cgroup: no path or classid specified [ 705.470379][T19477] FAULT_INJECTION: forcing a failure. [ 705.470379][T19477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.515940][T19477] CPU: 0 UID: 0 PID: 19477 Comm: syz.4.4071 Not tainted syzkaller #0 PREEMPT(full) [ 705.515966][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.515977][T19477] Call Trace: [ 705.515985][T19477] [ 705.515993][T19477] dump_stack_lvl+0xe8/0x150 [ 705.516021][T19477] should_fail_ex+0x40c/0x560 [ 705.516055][T19477] _copy_from_user+0x2d/0xb0 [ 705.516076][T19477] ___sys_sendmsg+0x1c6/0x360 [ 705.516096][T19477] ? __lock_acquire+0x683/0x2cd0 [ 705.516120][T19477] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.516146][T19477] ? kstrtouint+0x6e/0xe0 [ 705.516198][T19477] ? __fget_files+0x2a/0x420 [ 705.516220][T19477] ? __fget_files+0x3a2/0x420 [ 705.516250][T19477] __sys_sendmmsg+0x27c/0x4e0 [ 705.516272][T19477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 705.516288][T19477] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 705.516337][T19477] ? ksys_write+0x242/0x270 [ 705.516365][T19477] ? __pfx_ksys_write+0x10/0x10 [ 705.516397][T19477] __x64_sys_sendmmsg+0xa0/0xc0 [ 705.516425][T19477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.516445][T19477] do_syscall_64+0x174/0x580 [ 705.516465][T19477] ? trace_irq_disable+0x3b/0x140 [ 705.516491][T19477] ? clear_bhb_loop+0x40/0x90 [ 705.516514][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.516532][T19477] RIP: 0033:0x7f1b92f9ce59 [ 705.516550][T19477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.516565][T19477] RSP: 002b:00007f1b93dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 705.516585][T19477] RAX: ffffffffffffffda RBX: 00007f1b93216090 RCX: 00007f1b92f9ce59 [ 705.516599][T19477] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000005 [ 705.516611][T19477] RBP: 00007f1b93dca090 R08: 0000000000000000 R09: 0000000000000000 [ 705.516623][T19477] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 705.516634][T19477] R13: 00007f1b93216128 R14: 00007f1b93216090 R15: 00007ffd4d4ddf48 [ 705.516667][T19477] [ 706.505611][T19505] x_tables: duplicate underflow at hook 1 [ 706.543363][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 706.578098][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4084'. [ 706.888149][ C0] ip6_tunnel: €Â xmit: Local address not yet configured! [ 707.342946][T19550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 707.502100][T19533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4089'. [ 707.543957][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 707.779651][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'. [ 707.790676][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4098'. [ 707.866901][T19533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4089'. [ 708.094123][T19563] : entered promiscuous mode [ 708.138864][T19575] bridge0: port 3(ipvlan3) entered blocking state [ 708.158211][T19575] bridge0: port 3(ipvlan3) entered disabled state [ 708.169337][T19575] ipvlan3: entered allmulticast mode [ 708.175766][T19575] bridge0: entered allmulticast mode [ 708.197190][T19575] ipvlan3: left allmulticast mode [ 708.211707][T19575] bridge0: left allmulticast mode [ 708.219616][T19585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4103'. [ 708.428176][T19589] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 708.543865][T19594] FAULT_INJECTION: forcing a failure. [ 708.543865][T19594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.551581][T19589] bond6: entered promiscuous mode [ 708.558852][T19594] CPU: 1 UID: 0 PID: 19594 Comm: syz.2.4107 Not tainted syzkaller #0 PREEMPT(full) [ 708.558877][T19594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.558888][T19594] Call Trace: [ 708.558896][T19594] [ 708.558904][T19594] dump_stack_lvl+0xe8/0x150 [ 708.558931][T19594] should_fail_ex+0x40c/0x560 [ 708.558964][T19594] _copy_to_user+0x31/0xb0 [ 708.558988][T19594] simple_read_from_buffer+0xe1/0x170 [ 708.559015][T19594] proc_fail_nth_read+0x1bb/0x230 [ 708.559041][T19594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.559070][T19594] ? rw_verify_area+0x24a/0x4c0 [ 708.559105][T19594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.559126][T19594] vfs_read+0x213/0xa80 [ 708.559155][T19594] ? __pfx___mutex_lock+0x10/0x10 [ 708.559177][T19594] ? __pfx_vfs_read+0x10/0x10 [ 708.559224][T19594] ? __fget_files+0x2a/0x420 [ 708.559252][T19594] ? __fget_files+0x3a2/0x420 [ 708.559273][T19594] ? __fget_files+0x2a/0x420 [ 708.559302][T19594] ksys_read+0x150/0x270 [ 708.559329][T19594] ? __pfx_ksys_read+0x10/0x10 [ 708.559360][T19594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.559380][T19594] do_syscall_64+0x174/0x580 [ 708.559399][T19594] ? trace_irq_disable+0x3b/0x140 [ 708.559423][T19594] ? clear_bhb_loop+0x40/0x90 [ 708.559446][T19594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.559463][T19594] RIP: 0033:0x7fe09595d68e [ 708.559481][T19594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.559496][T19594] RSP: 002b:00007fe0968ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.559515][T19594] RAX: ffffffffffffffda RBX: 00007fe0968cd6c0 RCX: 00007fe09595d68e [ 708.559529][T19594] RDX: 000000000000000f RSI: 00007fe0968cd0a0 RDI: 0000000000000004 [ 708.559540][T19594] RBP: 00007fe0968cd090 R08: 0000000000000000 R09: 0000000000000000 [ 708.559552][T19594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.559563][T19594] R13: 00007fe095c16038 R14: 00007fe095c15fa0 R15: 00007ffda9385298 [ 708.559594][T19594] [ 708.787005][T19589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 708.870124][T19612] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4112'. [ 708.897559][T19612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4112'. [ 709.115062][T19622] x_tables: duplicate underflow at hook 1 [ 709.310091][T19631] : entered promiscuous mode [ 709.652778][T19636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 709.766278][T19650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.888460][T19654] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 710.436510][T19662] syzkaller0: entered promiscuous mode [ 710.453246][T19662] syzkaller0: entered allmulticast mode [ 711.174000][T19686] syzkaller0: entered promiscuous mode [ 711.180281][T19686] syzkaller0: entered allmulticast mode [ 711.649207][T19706] x_tables: duplicate underflow at hook 1 [ 711.710755][T19708] xt_TPROXY: Can be used only with -p tcp or -p udp [ 712.028602][T19723] __nla_validate_parse: 5 callbacks suppressed [ 712.028623][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4155'. [ 712.338811][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4155'. [ 712.369814][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4155'. [ 712.399783][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4155'. [ 712.436233][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4155'. [ 712.650356][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 712.664766][T19739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.990533][T19754] netlink: 'syz.4.4165': attribute type 1 has an invalid length. [ 712.998722][T19754] netlink: 'syz.4.4165': attribute type 3 has an invalid length. [ 713.011515][T19754] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4165'. [ 713.025930][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4165'. [ 713.214958][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'. [ 713.230391][T19762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4169'. [ 713.240575][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'. [ 713.675648][T19779] syzkaller0: entered promiscuous mode [ 713.683427][T19779] syzkaller0: entered allmulticast mode [ 714.156668][T19794] syz_tun: entered allmulticast mode [ 714.223131][T19798] syzkaller1: entered promiscuous mode [ 714.238280][T19798] syzkaller1: entered allmulticast mode [ 714.558432][T19818] bond0: (slave dummy0): Releasing backup interface [ 714.562228][T19819] x_tables: duplicate underflow at hook 1 [ 714.624897][T19818] bridge_slave_0: left allmulticast mode [ 714.681072][T19818] bridge_slave_0: left promiscuous mode [ 714.711637][T19818] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.751629][T19818] bridge_slave_1: left promiscuous mode [ 714.767626][T19818] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.803073][T19818] bond0: (slave bond_slave_0): Releasing backup interface [ 714.830890][T19818] bond0: (slave bond_slave_1): Releasing backup interface [ 714.863135][T19818] team0: Port device team_slave_0 removed [ 714.892887][T19818] team0: Port device team_slave_1 removed [ 714.912285][T19818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.934790][T19818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.956463][T19818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 715.401464][T19844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.644034][T19856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.325379][T19886] xt_cgroup: xt_cgroup: no path or classid specified [ 717.077299][T19904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.151139][T19906] __nla_validate_parse: 10 callbacks suppressed [ 717.151160][T19906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4216'. [ 717.254153][T19906] xt_hashlimit: size too large, truncated to 1048576 [ 717.335181][T19911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.478898][T19917] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4220'. [ 717.498510][T19917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4220'. [ 718.020442][T19940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4224'. [ 718.164184][T19943] netlink: 'syz.3.4225': attribute type 1 has an invalid length. [ 718.192957][T19943] netlink: 'syz.3.4225': attribute type 3 has an invalid length. [ 718.219291][T19943] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4225'. [ 718.235108][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'. [ 718.323179][T19945] IPVS: Scheduler module ip_vs_ not found [ 721.529077][T20025] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4240'. [ 722.894516][ C0] ip6_tunnel: €Â xmit: Local address not yet configured! [ 723.246725][T19982] syzkaller0: entered promiscuous mode [ 723.252447][T19982] syzkaller0: entered allmulticast mode [ 723.479174][T20036] siw: device registration error -23 [ 723.485360][T20036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4244'. [ 724.357213][T20063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4251'. [ 724.538440][T20069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4252'. [ 724.706828][T20075] syzkaller0: entered promiscuous mode [ 724.726307][T20075] syzkaller0: entered allmulticast mode [ 724.781457][T20077] netlink: 'syz.4.4255': attribute type 1 has an invalid length. [ 724.805622][T20077] netlink: 'syz.4.4255': attribute type 3 has an invalid length. [ 724.835926][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4255'. [ 724.863266][T20077] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4255'. [ 724.885738][T20084] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4258'. [ 724.896284][T20084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4258'. [ 725.080104][T20091] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4261'. [ 725.117181][T20091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4261'. [ 726.271035][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'. [ 726.562379][T20139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.167489][T20165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.648230][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 728.674821][T20214] __nla_validate_parse: 1 callbacks suppressed [ 728.674839][T20214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4303'. [ 728.952771][T20222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4307'. [ 728.973473][T20222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4307'. [ 729.177346][T20234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.312332][T20239] netlink: 'syz.0.4309': attribute type 1 has an invalid length. [ 730.444327][T20239] bond5: entered promiscuous mode [ 730.480496][T20239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 730.750190][T20248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 730.766904][T20248] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 730.811416][T20248] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 730.831688][T20248] bond5: (slave vti0): making interface the new active one [ 730.840461][T20248] vti0: entered promiscuous mode [ 730.847447][T20248] bond5: (slave vti0): Enslaving as an active interface with an up link [ 730.927760][T20259] syzkaller0: entered promiscuous mode [ 730.933421][T20259] syzkaller0: entered allmulticast mode [ 730.981254][T20282] syzkaller1: entered promiscuous mode [ 730.994516][T20282] syzkaller1: entered allmulticast mode [ 734.717287][T20246] lo speed is unknown, defaulting to 1000 [ 734.966143][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4329'. [ 735.005162][T20319] netlink: 'syz.3.4330': attribute type 10 has an invalid length. [ 735.013312][T20319] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4330'. [ 735.276199][T20328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 735.480392][T20330] syzkaller0: entered promiscuous mode [ 735.499757][T20330] syzkaller0: entered allmulticast mode [ 735.747619][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'. [ 735.759759][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4336'. [ 735.849934][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'. [ 737.952327][T20313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.172067][T20399] bond0: option arp_validate: invalid value (55553) [ 739.266754][T20436] syzkaller0: entered promiscuous mode [ 739.279658][T20436] syzkaller0: entered allmulticast mode [ 739.452865][T20452] xt_cgroup: xt_cgroup: no path or classid specified [ 739.536814][T20457] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4365'. [ 739.558286][T20457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4365'. [ 739.749723][T20462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4366'. [ 739.942585][T20467] netlink: 'syz.4.4366': attribute type 2 has an invalid length. [ 740.038950][T20466] syzkaller0: entered promiscuous mode [ 740.055150][T20478] netlink: 'syz.3.4368': attribute type 1 has an invalid length. [ 740.064403][T20466] syzkaller0: entered allmulticast mode [ 740.090347][T20479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.193927][T20482] xt_TPROXY: Can be used only with -p tcp or -p udp [ 740.245523][T20484] netlink: 'syz.3.4368': attribute type 10 has an invalid length. [ 740.290407][T20484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4368'. [ 740.333273][T20488] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4372'. [ 740.378297][T20478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 740.470471][T20492] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 740.491722][T20492] bond5 (unregistering): Released all slaves [ 740.560304][T20498] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 740.568604][T20498] netlink: 'syz.1.4373': attribute type 3 has an invalid length. [ 740.576455][T20498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4373'. [ 740.589041][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4373'. [ 740.776746][T20481] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 740.791003][T20484] dummy0: entered promiscuous mode [ 740.817491][T20484] bond7: (slave dummy0): Releasing backup interface [ 745.005271][T20541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.353239][T20562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4388'. [ 746.134452][T20573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4392'. [ 746.233025][T20578] netlink: 'syz.1.4394': attribute type 1 has an invalid length. [ 746.250988][T20578] netlink: 'syz.1.4394': attribute type 3 has an invalid length. [ 746.267656][T20578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4394'. [ 746.284123][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 746.536776][T20593] erspan0: entered promiscuous mode [ 746.631415][ T186] bond0: (slave vlan2): interface is now down [ 746.643288][T20593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.659152][ T6653] bond0: (slave vlan2): interface is now down [ 746.663683][T20593] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.678108][ T6653] bond0: (slave vlan2): interface is now down [ 746.694206][T20593] [ 746.696576][T20593] ============================================ [ 746.702824][T20593] WARNING: possible recursive locking detected [ 746.709130][T20593] syzkaller #0 Not tainted [ 746.713585][T20593] -------------------------------------------- [ 746.719830][T20593] syz.4.4399/20593 is trying to acquire lock: [ 746.725906][T20593] ffff88805e5c2e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 746.737243][T20593] [ 746.737243][T20593] but task is already holding lock: [ 746.744616][T20593] ffff88805e5c2e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 746.749774][ T12] bond0: (slave vlan2): interface is now down [ 746.754379][T20593] and the lock comparison function returns 0: [ 746.754393][T20593] [ 746.754393][T20593] other info that might help us debug this: [ 746.754401][T20593] Possible unsafe locking scenario: [ 746.754401][T20593] [ 746.781982][T20593] CPU0 [ 746.785275][T20593] ---- [ 746.788537][T20593] lock(&dev_instance_lock_key#3); [ 746.793745][T20593] lock(&dev_instance_lock_key#3); [ 746.798943][T20593] [ 746.798943][T20593] *** DEADLOCK *** [ 746.798943][T20593] [ 746.807175][T20593] May be due to missing lock nesting notation [ 746.807175][T20593] [ 746.815494][T20593] 2 locks held by syz.4.4399/20593: [ 746.820693][T20593] #0: ffffffff8fdbd5c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 746.829816][T20593] #1: ffff88805e5c2e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 746.839903][T20593] [ 746.839903][T20593] stack backtrace: [ 746.845786][T20593] CPU: 0 UID: 0 PID: 20593 Comm: syz.4.4399 Not tainted syzkaller #0 PREEMPT(full) [ 746.845806][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.845816][T20593] Call Trace: [ 746.845822][T20593] [ 746.845831][T20593] dump_stack_lvl+0xe8/0x150 [ 746.845852][T20593] print_deadlock_bug+0x279/0x290 [ 746.845875][T20593] __lock_acquire+0x24bf/0x2cd0 [ 746.845892][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.845907][T20593] ? rtnl_newlink+0x148e/0x1bd0 [ 746.845935][T20593] ? rtnetlink_rcv_msg+0x802/0xc00 [ 746.845956][T20593] ? netlink_rcv_skb+0x226/0x4a0 [ 746.845971][T20593] ? netlink_unicast+0x7bb/0x940 [ 746.845992][T20593] ? netlink_sendmsg+0x813/0xb40 [ 746.846007][T20593] ? ____sys_sendmsg+0x9b9/0xa20 [ 746.846023][T20593] ? ___sys_sendmsg+0x2a5/0x360 [ 746.846037][T20593] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 746.846051][T20593] ? do_syscall_64+0x174/0x580 [ 746.846071][T20593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.846091][T20593] ? __ethtool_get_link_ksettings+0x109/0x250 [ 746.846111][T20593] lock_acquire+0x106/0x350 [ 746.846125][T20593] ? __ethtool_get_link_ksettings+0x109/0x250 [ 746.846151][T20593] __mutex_lock+0x19d/0x1590 [ 746.846169][T20593] ? __ethtool_get_link_ksettings+0x109/0x250 [ 746.846188][T20593] ? lockdep_hardirqs_on+0x7a/0x110 [ 746.846205][T20593] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 746.846221][T20593] ? __wake_up_common_lock+0x195/0x1f0 [ 746.846244][T20593] ? __ethtool_get_link_ksettings+0x109/0x250 [ 746.846264][T20593] ? __pfx___mutex_lock+0x10/0x10 [ 746.846285][T20593] ? igmp_group_added+0x238/0x910 [ 746.846374][T20593] ? igmpv3_del_delrec+0x204/0x710 [ 746.846392][T20593] __ethtool_get_link_ksettings+0x109/0x250 [ 746.846414][T20593] bond_netdev_event+0x643/0xf80 [ 746.846491][T20593] ? __pfx_bond_netdev_event+0x10/0x10 [ 746.846517][T20593] ? ipmr_device_event+0x1f6/0x220 [ 746.846641][T20593] notifier_call_chain+0x1a5/0x3d0 [ 746.846665][T20593] __dev_notify_flags+0x1aa/0x310 [ 746.846682][T20593] ? __pfx___dev_notify_flags+0x10/0x10 [ 746.846696][T20593] ? __dev_change_flags+0x5f1/0x820 [ 746.846712][T20593] ? __pfx___dev_change_flags+0x10/0x10 [ 746.846730][T20593] netif_change_flags+0xde/0x1b0 [ 746.846746][T20593] dev_change_flags+0x128/0x260 [ 746.846770][T20593] vlan_device_event+0x1b4e/0x1f00 [ 746.846843][T20593] ? packet_notifier+0xf1b/0xf70 [ 746.846891][T20593] ? br_device_event+0x282/0x9c0 [ 746.846953][T20593] ? __pfx_phonet_device_notify+0x10/0x10 [ 746.846994][T20593] ? __pfx_vlan_device_event+0x10/0x10 [ 746.847010][T20593] ? bcm_notifier+0xa9/0x890 [ 746.847054][T20593] ? raw_notifier+0x9d/0x7d0 [ 746.847109][T20593] ? cgw_notifier+0x314/0x380 [ 746.847126][T20593] notifier_call_chain+0x1a5/0x3d0 [ 746.847147][T20593] __dev_notify_flags+0x1aa/0x310 [ 746.847163][T20593] ? __pfx___dev_notify_flags+0x10/0x10 [ 746.847176][T20593] ? __dev_change_flags+0x5f1/0x820 [ 746.847193][T20593] ? __pfx___dev_change_flags+0x10/0x10 [ 746.847209][T20593] ? __local_bh_enable_ip+0xd0/0x130 [ 746.847225][T20593] netif_change_flags+0xde/0x1b0 [ 746.847241][T20593] do_setlink+0xdd6/0x4670 [ 746.847263][T20593] ? __pfx_do_setlink+0x10/0x10 [ 746.847277][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.847303][T20593] ? __mutex_trylock_common+0x15f/0x270 [ 746.847328][T20593] ? __pfx___mutex_trylock_common+0x10/0x10 [ 746.847349][T20593] ? rcu_is_watching+0x15/0xb0 [ 746.847366][T20593] ? trace_contention_end+0x3d/0x140 [ 746.847386][T20593] ? __mutex_lock+0x30f/0x1590 [ 746.847408][T20593] ? rtnl_newlink+0x8a3/0x1bd0 [ 746.847432][T20593] ? __pfx___mutex_lock+0x10/0x10 [ 746.847453][T20593] ? ns_capable+0x89/0xe0 [ 746.847468][T20593] ? rtnl_link_get_net_capable+0xd3/0x310 [ 746.847485][T20593] rtnl_newlink+0x148e/0x1bd0 [ 746.847512][T20593] ? __pfx_rtnl_newlink+0x10/0x10 [ 746.847537][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.847555][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.847575][T20593] ? unwind_next_frame+0x8f/0x2550 [ 746.847597][T20593] ? is_bpf_text_address+0x26/0x2b0 [ 746.847620][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.847637][T20593] ? kernel_text_address+0xa5/0xe0 [ 746.847658][T20593] ? __kernel_text_address+0xd/0x30 [ 746.847679][T20593] ? unwind_get_return_address+0x4d/0x90 [ 746.847698][T20593] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.847723][T20593] ? arch_stack_walk+0xfb/0x150 [ 746.847764][T20593] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 746.847790][T20593] ? __pfx_rtnl_newlink+0x10/0x10 [ 746.847821][T20593] ? __pfx_rtnl_newlink+0x10/0x10 [ 746.847847][T20593] rtnetlink_rcv_msg+0x802/0xc00 [ 746.847874][T20593] ? kasan_save_track+0x3e/0x80 [ 746.847900][T20593] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 746.847934][T20593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.847961][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.847988][T20593] netlink_rcv_skb+0x226/0x4a0 [ 746.848009][T20593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.848041][T20593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.848069][T20593] ? netlink_deliver_tap+0x2e/0x1b0 [ 746.848089][T20593] ? netlink_deliver_tap+0x2e/0x1b0 [ 746.848113][T20593] netlink_unicast+0x7bb/0x940 [ 746.848150][T20593] netlink_sendmsg+0x813/0xb40 [ 746.848176][T20593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.848200][T20593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 746.848232][T20593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.848256][T20593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.848274][T20593] ____sys_sendmsg+0x9b9/0xa20 [ 746.848292][T20593] ? __might_fault+0xaf/0x130 [ 746.848314][T20593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.848333][T20593] ? import_iovec+0x73/0xa0 [ 746.848352][T20593] ___sys_sendmsg+0x2a5/0x360 [ 746.848367][T20593] ? __lock_acquire+0x683/0x2cd0 [ 746.848384][T20593] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.848402][T20593] ? futex_wait+0x2a2/0x390 [ 746.848434][T20593] ? __fget_files+0x2a/0x420 [ 746.848452][T20593] ? __fget_files+0x3a2/0x420 [ 746.848474][T20593] __x64_sys_sendmsg+0x1bd/0x2a0 [ 746.848491][T20593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.848516][T20593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.848532][T20593] do_syscall_64+0x174/0x580 [ 746.848550][T20593] ? trace_irq_disable+0x3b/0x140 [ 746.848571][T20593] ? clear_bhb_loop+0x40/0x90 [ 746.848588][T20593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.848604][T20593] RIP: 0033:0x7f1b92f9ce59 [ 746.848620][T20593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.848635][T20593] RSP: 002b:00007f1b93deb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.848653][T20593] RAX: ffffffffffffffda RBX: 00007f1b93215fa0 RCX: 00007f1b92f9ce59 [ 746.848665][T20593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 746.848676][T20593] RBP: 00007f1b93032d6f R08: 0000000000000000 R09: 0000000000000000 [ 746.848686][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.848696][T20593] R13: 00007f1b93216038 R14: 00007f1b93215fa0 R15: 00007ffd4d4ddf48 [ 746.848715][T20593] [ 746.899742][ T6653] bond0: (slave vlan2): interface is now down [ 747.230282][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.266842][ T6653] bond0: (slave vlan2): interface is now down [ 747.637778][ T6653] bond0: (slave vlan2): interface is now down [ 747.668039][ T6653] bond0: (slave vlan2): interface is now down [ 747.708667][ T35] bond0: (slave vlan2): interface is now down [ 747.728671][ T6653] bond0: (slave vlan2): interface is now down [ 747.749465][ T6653] bond0: (slave vlan2): interface is now down [ 747.768727][ T6653] bond0: (slave vlan2): interface is now down [ 747.790672][ T186] bond0: (slave vlan2): interface is now down [ 747.808116][ T35] bond0: (slave vlan2): interface is now down [ 747.827911][ T6653] bond0: (slave vlan2): interface is now down [ 747.851331][ T6653] bond0: (slave vlan2): interface is now down [ 747.880372][ T6653] bond0: (slave vlan2): interface is now down [ 747.898745][ T186] bond0: (slave vlan2): interface is now down [ 747.917944][ T186] bond0: (slave vlan2): interface is now down [ 747.938080][ T12] bond0: (slave vlan2): interface is now down [ 747.957874][ T12] bond0: (slave vlan2): interface is now down [ 747.977963][ T12] bond0: (slave vlan2): interface is now down [ 747.998421][ T12] bond0: (slave vlan2): interface is now down [ 748.018004][ T12] bond0: (slave vlan2): interface is now down [ 748.038008][ T12] bond0: (slave vlan2): interface is now down [ 748.059089][ T12] bond0: (slave vlan2): interface is now down [ 748.078178][ T12] bond0: (slave vlan2): interface is now down [ 748.101115][ T12] bond0: (slave vlan2): interface is now down [ 748.118838][ T12] bond0: (slave vlan2): interface is now down [ 748.139092][ T12] bond0: (slave vlan2): interface is now down [ 748.158037][ T12] bond0: (slave vlan2): interface is now down [ 748.178096][ T186] bond0: (slave vlan2): interface is now down [ 748.207855][ T186] bond0: (slave vlan2): interface is now down [ 748.234817][ T186] bond0: (slave vlan2): interface is now down [ 748.260206][ T12] bond0: (slave vlan2): interface is now down [ 748.278017][ T186] bond0: (slave vlan2): interface is now down [ 748.297854][ T186] bond0: (slave vlan2): interface is now down [ 748.319053][ T186] bond0: (slave vlan2): interface is now down [ 748.338951][ T186] bond0: (slave vlan2): interface is now down [ 748.369184][ T186] bond0: (slave vlan2): interface is now down [ 748.389548][ T186] bond0: (slave vlan2): interface is now down [ 748.408278][ T186] bond0: (slave vlan2): interface is now down [ 748.428451][ T186] bond0: (slave vlan2): interface is now down [ 748.447870][ T6653] bond0: (slave vlan2): interface is now down [ 748.468152][ T6653] bond0: (slave vlan2): interface is now down [ 748.491353][ T6653] bond0: (slave vlan2): interface is now down [ 748.507922][ T186] bond0: (slave vlan2): interface is now down [ 748.528159][ T186] bond0: (slave vlan2): interface is now down [ 748.550080][ T186] bond0: (slave vlan2): interface is now down [ 748.572714][ T186] bond0: (slave vlan2): interface is now down [ 748.597961][ T7194] bond0: (slave vlan2): interface is now down [ 748.618128][ T186] bond0: (slave vlan2): interface is now down [ 748.637780][ T7194] bond0: (slave vlan2): interface is now down [ 748.658692][ T7194] bond0: (slave vlan2): interface is now down [ 748.693596][ T7194] bond0: (slave vlan2): interface is now down [ 748.718054][ T7194] bond0: (slave vlan2): interface is now down [ 748.737795][ T7194] bond0: (slave vlan2): interface is now down [ 748.757828][ T7194] bond0: (slave vlan2): interface is now down [ 748.778058][ T7194] bond0: (slave vlan2): interface is now down [ 748.798645][ T7194] bond0: (slave vlan2): interface is now down [ 748.817773][ T7194] bond0: (slave vlan2): interface is now down [ 748.838133][ T7194] bond0: (slave vlan2): interface is now down [ 748.857792][ T7194] bond0: (slave vlan2): interface is now down [ 748.879186][ T7194] bond0: (slave vlan2): interface is now down [ 748.898566][ T7194] bond0: (slave vlan2): interface is now down [ 748.917887][ T7194] bond0: (slave vlan2): interface is now down [ 748.937935][ T7194] bond0: (slave vlan2): interface is now down [ 748.958151][ T7194] bond0: (slave vlan2): interface is now down [ 748.978594][ T7194] bond0: (slave vlan2): interface is now down [ 748.997956][ T7194] bond0: (slave vlan2): interface is now down [ 749.018875][ T7194] bond0: (slave vlan2): interface is now down [ 749.039467][ T7194] bond0: (slave vlan2): interface is now down [ 749.068007][ T7194] bond0: (slave vlan2): interface is now down [ 749.087915][ T7194] bond0: (slave vlan2): interface is now down [ 749.108210][ T7194] bond0: (slave vlan2): interface is now down [ 749.132407][ T12] bond0: (slave vlan2): interface is now down [ 749.157985][ T7194] bond0: (slave vlan2): interface is now down [ 749.188273][ T7194] bond0: (slave vlan2): interface is now down [ 749.208060][ T6645] bond0: (slave vlan2): interface is now down [ 749.228174][ T6645] bond0: (slave vlan2): interface is now down [ 749.248628][ T6645] bond0: (slave vlan2): interface is now down [ 749.278511][ T6645] bond0: (slave vlan2): interface is now down [ 749.297939][ T6645] bond0: (slave vlan2): interface is now down [ 749.319249][ T6645] bond0: (slave vlan2): interface is now down [ 749.348247][ T6645] bond0: (slave vlan2): interface is now down [ 749.369674][ T7194] bond0: (slave vlan2): interface is now down [ 749.398064][ T7194] bond0: (slave vlan2): interface is now down [ 749.417981][ T7194] bond0: (slave vlan2): interface is now down [ 749.438374][ T7194] bond0: (slave vlan2): interface is now down [ 749.457984][ T7194] bond0: (slave vlan2): interface is now down [ 749.478733][ T6645] bond0: (slave vlan2): interface is now down [ 749.498241][ T6645] bond0: (slave vlan2): interface is now down [ 749.518081][ T6645] bond0: (slave vlan2): interface is now down [ 749.539002][ T6645] bond0: (slave vlan2): interface is now down [ 749.558283][ T6645] bond0: (slave vlan2): interface is now down [ 749.578654][ T6645] bond0: (slave vlan2): interface is now down [ 749.598029][ T6645] bond0: (slave vlan2): interface is now down [ 749.618214][ T6645] bond0: (slave vlan2): interface is now down [ 749.638140][ T6645] bond0: (slave vlan2): interface is now down [ 749.657852][ T35] bond0: (slave vlan2): interface is now down [ 749.678442][ T35] bond0: (slave vlan2): interface is now down [ 749.697941][ T35] bond0: (slave vlan2): interface is now down [ 749.718032][ T35] bond0: (slave vlan2): interface is now down [ 749.747872][ T35] bond0: (slave vlan2): interface is now down [ 749.767986][ T186] bond0: (slave vlan2): interface is now down [ 749.788186][ T186] bond0: (slave vlan2): interface is now down [ 749.807914][ T7194] bond0: (slave vlan2): interface is now down [ 749.827903][ T7194] bond0: (slave vlan2): interface is now down [ 749.857968][ T7194] bond0: (slave vlan2): interface is now down [ 749.884409][ T7194] bond0: (slave vlan2): interface is now down [ 749.909331][ T7194] bond0: (slave vlan2): interface is now down [ 749.927869][ T186] bond0: (slave vlan2): interface is now down [ 749.947771][ T7194] bond0: (slave vlan2): interface is now down [ 749.968069][ T186] bond0: (slave vlan2): interface is now down [ 749.989213][ T186] bond0: (slave vlan2): interface is now down [ 750.007810][ T186] bond0: (slave vlan2): interface is now down [ 750.028094][ T35] bond0: (slave vlan2): interface is now down [ 750.047833][ T186] bond0: (slave vlan2): interface is now down [ 750.067776][ T35] bond0: (slave vlan2): interface is now down [ 750.088139][ T186] bond0: (slave vlan2): interface is now down [ 750.107770][ T35] bond0: (slave vlan2): interface is now down [ 750.128476][ T186] bond0: (slave vlan2): interface is now down [ 750.157856][ T35] bond0: (slave vlan2): interface is now down [ 750.186442][ T35] bond0: (slave vlan2): interface is now down [ 750.207801][ T35] bond0: (slave vlan2): interface is now down [ 750.238900][ T35] bond0: (slave vlan2): interface is now down [ 750.258116][ T186] bond0: (slave vlan2): interface is now down [ 750.278333][ T35] bond0: (slave vlan2): interface is now down [ 750.307863][ T35] bond0: (slave vlan2): interface is now down [ 750.328312][ T35] bond0: (slave vlan2): interface is now down [ 750.348125][ T35] bond0: (slave vlan2): interface is now down [ 750.367927][ T35] bond0: (slave vlan2): interface is now down [ 750.397997][ T35] bond0: (slave vlan2): interface is now down [ 750.426900][ T35] bond0: (slave vlan2): interface is now down [ 750.459695][ T35] bond0: (slave vlan2): interface is now down [ 750.478221][ T35] bond0: (slave vlan2): interface is now down [ 750.508214][ T35] bond0: (slave vlan2): interface is now down [ 750.538371][ T35] bond0: (slave vlan2): interface is now down [ 750.563907][ T35] bond0: (slave vlan2): interface is now down [ 750.587894][ T7194] bond0: (slave vlan2): interface is now down [ 750.607878][ T7194] bond0: (slave vlan2): interface is now down [ 750.629271][ T7194] bond0: (slave vlan2): interface is now down [ 750.649092][ T7194] bond0: (slave vlan2): interface is now down [ 750.667888][ T35] bond0: (slave vlan2): interface is now down [ 750.688256][ T7194] bond0: (slave vlan2): interface is now down [ 750.707888][ T7194] bond0: (slave vlan2): interface is now down [ 750.738271][ T7194] bond0: (slave vlan2): interface is now down [ 750.767888][ T35] bond0: (slave vlan2): interface is now down [ 750.788035][ T35] bond0: (slave vlan2): interface is now down [ 750.809302][ T6653] bond0: (slave vlan2): interface is now down [ 750.827813][ T35] bond0: (slave vlan2): interface is now down [ 750.847869][ T6653] bond0: (slave vlan2): interface is now down [ 750.869165][ T35] bond0: (slave vlan2): interface is now down [ 750.887832][ T186] bond0: (slave vlan2): interface is now down [ 750.908446][ T186] bond0: (slave vlan2): interface is now down [ 750.927794][ T6653] bond0: (slave vlan2): interface is now down [ 750.948047][ T186] bond0: (slave vlan2): interface is now down [ 750.981596][ T35] bond0: (slave vlan2): interface is now down [ 751.008082][ T186] bond0: (slave vlan2): interface is now down [ 751.028833][ T186] bond0: (slave vlan2): interface is now down [ 751.049762][ T186] bond0: (slave vlan2): interface is now down [ 751.067948][ T186] bond0: (slave vlan2): interface is now down [ 751.089210][ T186] bond0: (slave vlan2): interface is now down [ 751.108257][ T186] bond0: (slave vlan2): interface is now down [ 751.128138][ T186] bond0: (slave vlan2): interface is now down [ 751.147936][ T7194] bond0: (slave vlan2): interface is now down [ 751.168054][ T7194] bond0: (slave vlan2): interface is now down [ 751.187871][ T7194] bond0: (slave vlan2): interface is now down [ 751.222957][ T7194] bond0: (slave vlan2): interface is now down [ 751.247834][ T186] bond0: (slave vlan2): interface is now down [ 751.268221][ T186] bond0: (slave vlan2): interface is now down [ 751.288835][ T7194] bond0: (slave vlan2): interface is now down [ 751.308067][ T7194] bond0: (slave vlan2): interface is now down [ 751.328224][ T7194] bond0: (slave vlan2): interface is now down [ 751.347907][ T7194] bond0: (slave vlan2): interface is now down [ 751.371739][ T7194] bond0: (slave vlan2): interface is now down [ 751.397847][ T7194] bond0: (slave vlan2): interface is now down [ 751.419142][ T7194] bond0: (slave vlan2): interface is now down [ 751.437820][ T7194] bond0: (slave vlan2): interface is now down [ 751.457823][ T186] bond0: (slave vlan2): interface is now down [ 751.478129][ T186] bond0: (slave vlan2): interface is now down [ 751.497789][ T186] bond0: (slave vlan2): interface is now down [ 751.528619][ T186] bond0: (slave vlan2): interface is now down [ 751.547916][ T186] bond0: (slave vlan2): interface is now down [ 751.567994][ T186] bond0: (slave vlan2): interface is now down [ 751.587954][ T186] bond0: (slave vlan2): interface is now down [ 751.619063][ T186] bond0: (slave vlan2): interface is now down [ 751.638845][ T186] bond0: (slave vlan2): interface is now down [ 751.658198][ T186] bond0: (slave vlan2): interface is now down [ 751.678068][ T186] bond0: (slave vlan2): interface is now down [ 751.697924][ T186] bond0: (slave vlan2): interface is now down [ 751.718320][ T186] bond0: (slave vlan2): interface is now down [ 751.737984][ T186] bond0: (slave vlan2): interface is now down [ 751.757980][ T186] bond0: (slave vlan2): interface is now down [ 751.778207][ T186] bond0: (slave vlan2): interface is now down [ 751.798662][ T186] bond0: (slave vlan2): interface is now down [ 751.818331][ T186] bond0: (slave vlan2): interface is now down [ 751.848738][ T186] bond0: (slave vlan2): interface is now down [ 751.868667][ T35] bond0: (slave vlan2): interface is now down [ 751.888446][ T35] bond0: (slave vlan2): interface is now down [ 751.908007][ T35] bond0: (slave vlan2): interface is now down [ 751.937872][ T6645] bond0: (slave vlan2): interface is now down [ 751.957880][ T35] bond0: (slave vlan2): interface is now down [ 751.977801][ T35] bond0: (slave vlan2): interface is now down [ 752.008156][ T35] bond0: (slave vlan2): interface is now down [ 752.028856][ T35] bond0: (slave vlan2): interface is now down [ 752.047826][ T6645] bond0: (slave vlan2): interface is now down [ 752.067750][ T186] bond0: (slave vlan2): interface is now down [ 752.089150][ T6645] bond0: (slave vlan2): interface is now down [ 752.118294][ T6645] bond0: (slave vlan2): interface is now down [ 752.139870][ T6645] bond0: (slave vlan2): interface is now down [ 752.157932][ T6645] bond0: (slave vlan2): interface is now down [ 752.188345][ T6645] bond0: (slave vlan2): interface is now down [ 752.207839][ T12] bond0: (slave vlan2): interface is now down [ 752.238002][ T35] bond0: (slave vlan2): interface is now down [ 752.257823][ T35] bond0: (slave vlan2): interface is now down [ 752.278122][ T35] bond0: (slave vlan2): interface is now down [ 752.308307][ T35] bond0: (slave vlan2): interface is now down [ 752.327936][ T35] bond0: (slave vlan2): interface is now down [ 752.348105][ T12] bond0: (slave vlan2): interface is now down [ 752.367869][ T12] bond0: (slave vlan2): interface is now down [ 752.387917][ T12] bond0: (slave vlan2): interface is now down [ 752.420728][ T6645] bond0: (slave vlan2): interface is now down [ 752.440300][ T12] bond0: (slave vlan2): interface is now down [ 752.457909][ T12] bond0: (slave vlan2): interface is now down [ 752.481458][ T12] bond0: (slave vlan2): interface is now down [ 752.509272][ T7194] bond0: (slave vlan2): interface is now down [ 752.527957][ T7194] bond0: (slave vlan2): interface is now down [ 752.548319][ T35] bond0: (slave vlan2): interface is now down [ 752.568644][ T35] bond0: (slave vlan2): interface is now down [ 752.587955][ T35] bond0: (slave vlan2): interface is now down [ 752.608213][ T35] bond0: (slave vlan2): interface is now down [ 752.627939][ T35] bond0: (slave vlan2): interface is now down [ 752.647954][ T35] bond0: (slave vlan2): interface is now down [ 752.668194][ T35] bond0: (slave vlan2): interface is now down [ 752.687849][ T35] bond0: (slave vlan2): interface is now down [ 752.707920][ T35] bond0: (slave vlan2): interface is now down [ 752.737761][ T35] bond0: (slave vlan2): interface is now down [ 752.758198][ T35] bond0: (slave vlan2): interface is now down [ 752.777824][ T35] bond0: (slave vlan2): interface is now down [ 752.797754][ T35] bond0: (slave vlan2): interface is now down [ 752.818149][ T35] bond0: (slave vlan2): interface is now down [ 752.848430][ T35] bond0: (slave vlan2): interface is now down [ 752.867965][ T35] bond0: (slave vlan2): interface is now down [ 752.888174][ T186] bond0: (slave vlan2): interface is now down [ 752.907972][ T186] bond0: (slave vlan2): interface is now down [ 752.938145][ T186] bond0: (slave vlan2): interface is now down [ 752.958017][ T186] bond0: (slave vlan2): interface is now down [ 752.977891][ T186] bond0: (slave vlan2): interface is now down [ 753.010349][ T186] bond0: (slave vlan2): interface is now down [ 753.028108][ T186] bond0: (slave vlan2): interface is now down [ 753.047773][ T186] bond0: (slave vlan2): interface is now down [ 753.067833][ T186] bond0: (slave vlan2): interface is now down [ 753.088256][ T186] bond0: (slave vlan2): interface is now down [ 753.107826][ T186] bond0: (slave vlan2): interface is now down [ 753.128217][ T186] bond0: (slave vlan2): interface is now down [ 753.148140][ T186] bond0: (slave vlan2): interface is now down [ 753.167813][ T186] bond0: (slave vlan2): interface is now down [ 753.188855][ T186] bond0: (slave vlan2): interface is now down [ 753.208174][ T186] bond0: (slave vlan2): interface is now down [ 753.228743][ T186] bond0: (slave vlan2): interface is now down [ 753.247779][ T12] bond0: (slave vlan2): interface is now down [ 753.268130][ T12] bond0: (slave vlan2): interface is now down [ 753.288046][ T12] bond0: (slave vlan2): interface is now down [ 753.307799][ T12] bond0: (slave vlan2): interface is now down [ 753.327769][ T186] bond0: (slave vlan2): interface is now down [ 753.348072][ T186] bond0: (slave vlan2): interface is now down [ 753.368129][ T186] bond0: (slave vlan2): interface is now down [ 753.388088][ T6653] bond0: (slave vlan2): interface is now down [ 753.408059][ T6653] bond0: (slave vlan2): interface is now down [ 753.428197][ T6653] bond0: (slave vlan2): interface is now down [ 753.451032][ T6653] bond0: (slave vlan2): interface is now down [ 753.478236][ T6653] bond0: (slave vlan2): interface is now down [ 753.497984][ T6653] bond0: (slave vlan2): interface is now down [ 753.518770][ T6653] bond0: (slave vlan2): interface is now down [ 753.538218][ T6653] bond0: (slave vlan2): interface is now down [ 753.558847][ T6653] bond0: (slave vlan2): interface is now down [ 753.577943][ T6653] bond0: (slave vlan2): interface is now down [ 753.598365][ T6653] bond0: (slave vlan2): interface is now down [ 753.617876][ T6653] bond0: (slave vlan2): interface is now down [ 753.638189][ T6653] bond0: (slave vlan2): interface is now down [ 753.657890][ T6653] bond0: (slave vlan2): interface is now down [ 753.677900][ T6653] bond0: (slave vlan2): interface is now down [ 753.698183][ T6653] bond0: (slave vlan2): interface is now down [ 753.717953][ T6653] bond0: (slave vlan2): interface is now down [ 753.738972][ T6653] bond0: (slave vlan2): interface is now down [ 753.767869][ T6653] bond0: (slave vlan2): interface is now down [ 753.788565][ T6653] bond0: (slave vlan2): interface is now down [ 753.808223][ T6653] bond0: (slave vlan2): interface is now down [ 753.839799][ T6653] bond0: (slave vlan2): interface is now down [ 753.860120][ T35] bond0: (slave vlan2): interface is now down [ 753.887908][ T6653] bond0: (slave vlan2): interface is now down [ 753.907787][ T35] bond0: (slave vlan2): interface is now down [ 753.928258][ T35] bond0: (slave vlan2): interface is now down [ 753.958226][ T35] bond0: (slave vlan2): interface is now down [ 753.978094][ T35] bond0: (slave vlan2): interface is now down [ 754.018068][ T12] bond0: (slave vlan2): interface is now down [ 754.040397][ T12] bond0: (slave vlan2): interface is now down [ 754.057853][ T12] bond0: (slave vlan2): interface is now down [ 754.079019][ T12] bond0: (slave vlan2): interface is now down [ 754.098197][ T12] bond0: (slave vlan2): interface is now down [ 754.128505][ T12] bond0: (slave vlan2): interface is now down [ 754.147906][ T12] bond0: (slave vlan2): interface is now down [ 754.168194][ T12] bond0: (slave vlan2): interface is now down [ 754.188642][ T12] bond0: (slave vlan2): interface is now down [ 754.207948][ T12] bond0: (slave vlan2): interface is now down [ 754.228252][ T12] bond0: (slave vlan2): interface is now down [ 754.248082][ T35] bond0: (slave vlan2): interface is now down [ 754.267971][ T12] bond0: (slave vlan2): interface is now down [ 754.287891][ T12] bond0: (slave vlan2): interface is now down [ 754.308208][ T12] bond0: (slave vlan2): interface is now down [ 754.337819][ T12] bond0: (slave vlan2): interface is now down [ 754.357932][ T35] bond0: (slave vlan2): interface is now down [ 754.377935][ T35] bond0: (slave vlan2): interface is now down [ 754.398324][ T35] bond0: (slave vlan2): interface is now down [ 754.417927][ T35] bond0: (slave vlan2): interface is now down [ 754.447927][ T35] bond0: (slave vlan2): interface is now down [ 754.468621][ T35] bond0: (slave vlan2): interface is now down [ 754.490236][ T6653] bond0: (slave vlan2): interface is now down [ 754.528209][ T6653] bond0: (slave vlan2): interface is now down [ 754.547996][ T6653] bond0: (slave vlan2): interface is now down [ 754.568083][ T6653] bond0: (slave vlan2): interface is now down [ 754.588165][ T6653] bond0: (slave vlan2): interface is now down [ 754.607854][ T35] bond0: (slave vlan2): interface is now down [ 754.637851][ T35] bond0: (slave vlan2): interface is now down [ 754.657925][ T35] bond0: (slave vlan2): interface is now down [ 754.678334][ T35] bond0: (slave vlan2): interface is now down [ 754.698388][ T35] bond0: (slave vlan2): interface is now down [ 754.717897][ T35] bond0: (slave vlan2): interface is now down [ 754.738083][ T35] bond0: (slave vlan2): interface is now down [ 754.768184][ T6653] bond0: (slave vlan2): interface is now down [ 754.788073][ T6653] bond0: (slave vlan2): interface is now down [ 754.807894][ T35] bond0: (slave vlan2): interface is now down [ 754.828240][ T35] bond0: (slave vlan2): interface is now down [ 754.848039][ T35] bond0: (slave vlan2): interface is now down [ 754.867936][ T6653] bond0: (slave vlan2): interface is now down [ 754.889723][ T6645] bond0: (slave vlan2): interface is now down [ 754.918210][ T35] bond0: (slave vlan2): interface is now down [ 754.937792][ T35] bond0: (slave vlan2): interface is now down [ 754.967826][ T6645] bond0: (slave vlan2): interface is now down [ 754.988179][ T35] bond0: (slave vlan2): interface is now down [ 755.018225][ T35] bond0: (slave vlan2): interface is now down [ 755.037773][ T35] bond0: (slave vlan2): interface is now down [ 755.057796][ T35] bond0: (slave vlan2): interface is now down [ 755.087920][ T35] bond0: (slave vlan2): interface is now down [ 755.109983][ T6645] bond0: (slave vlan2): interface is now down [ 755.128140][ T6645] bond0: (slave vlan2): interface is now down [ 755.148237][ T6645] bond0: (slave vlan2): interface is now down [ 755.179277][ T6645] bond0: (slave vlan2): interface is now down [ 755.201357][ T6645] bond0: (slave vlan2): interface is now down [ 755.228032][ T6645] bond0: (slave vlan2): interface is now down [ 755.248149][ T6645] bond0: (slave vlan2): interface is now down [ 755.267788][ T6645] bond0: (slave vlan2): interface is now down [ 755.287984][ T12] bond0: (slave vlan2): interface is now down [ 755.317935][ T35] bond0: (slave vlan2): interface is now down [ 755.338224][ T6645] bond0: (slave vlan2): interface is now down [ 755.358585][ T6645] bond0: (slave vlan2): interface is now down [ 755.377873][ T6645] bond0: (slave vlan2): interface is now down [ 755.397965][ T7194] bond0: (slave vlan2): interface is now down [ 755.422362][ T7194] bond0: (slave vlan2): interface is now down [ 755.449525][ T12] bond0: (slave vlan2): interface is now down [ 755.468389][ T12] bond0: (slave vlan2): interface is now down [ 755.497862][ T12] bond0: (slave vlan2): interface is now down [ 755.518257][ T12] bond0: (slave vlan2): interface is now down [ 755.539127][ T12] bond0: (slave vlan2): interface is now down [ 755.558015][ T35] bond0: (slave vlan2): interface is now down [ 755.578787][ T35] bond0: (slave vlan2): interface is now down [ 755.598515][ T35] bond0: (slave vlan2): interface is now down [ 755.617940][ T35] bond0: (slave vlan2): interface is now down [ 755.637863][ T35] bond0: (slave vlan2): interface is now down [ 755.670112][ T7194] bond0: (slave vlan2): interface is now down [ 755.690399][ T6645] bond0: (slave vlan2): interface is now down [ 755.707779][ T35] bond0: (slave vlan2): interface is now down [ 755.728031][ T6645] bond0: (slave vlan2): interface is now down [ 755.747797][ T6645] bond0: (slave vlan2): interface is now down [ 755.767791][ T35] bond0: (slave vlan2): interface is now down [ 755.788237][ T35] bond0: (slave vlan2): interface is now down [ 755.807799][ T35] bond0: (slave vlan2): interface is now down [ 755.827811][ T35] bond0: (slave vlan2): interface is now down [ 755.848577][ T35] bond0: (slave vlan2): interface is now down [ 755.868443][ T35] bond0: (slave vlan2): interface is now down [ 755.887989][ T35] bond0: (slave vlan2): interface is now down [ 755.908911][ T35] bond0: (slave vlan2): interface is now down [ 755.928035][ T12] bond0: (slave vlan2): interface is now down [ 755.947781][ T35] bond0: (slave vlan2): interface is now down [ 755.968109][ T35] bond0: (slave vlan2): interface is now down [ 755.988361][ T35] bond0: (slave vlan2): interface is now down [ 756.007968][ T35] bond0: (slave vlan2): interface is now down [ 756.028070][ T35] bond0: (slave vlan2): interface is now down [ 756.048375][ T35] bond0: (slave vlan2): interface is now down [ 756.067785][ T12] bond0: (slave vlan2): interface is now down [ 756.088176][ T12] bond0: (slave vlan2): interface is now down [ 756.108179][ T35] bond0: (slave vlan2): interface is now down [ 756.128279][ T35] bond0: (slave vlan2): interface is now down [ 756.157826][ T35] bond0: (slave vlan2): interface is now down [ 756.168248][ C0] ip6_tunnel: €Â xmit: Local address not yet configured! [ 756.178463][ T35] bond0: (slave vlan2): interface is now down [ 756.198013][ T35] bond0: (slave vlan2): interface is now down [ 756.217911][ T35] bond0: (slave vlan2): interface is now down [ 756.238116][ T35] bond0: (slave vlan2): interface is now down [ 756.257898][ T6653] bond0: (slave vlan2): interface is now down [ 756.278225][ T35] bond0: (slave vlan2): interface is now down [ 756.298009][ T35] bond0: (slave vlan2): interface is now down [ 756.329459][ T35] bond0: (slave vlan2): interface is now down [ 756.358663][ T35] bond0: (slave vlan2): interface is now down [ 756.377949][ T35] bond0: (slave vlan2): interface is now down [ 756.398209][ T35] bond0: (slave vlan2): interface is now down [ 756.427774][ T35] bond0: (slave vlan2): interface is now down [ 756.448207][ T6653] bond0: (slave vlan2): interface is now down [ 756.469976][ T6653] bond0: (slave vlan2): interface is now down [ 756.488573][ T6653] bond0: (slave vlan2): interface is now down [ 756.508234][ T6653] bond0: (slave vlan2): interface is now down [ 756.527847][ T6653] bond0: (slave vlan2): interface is now down [ 756.548013][ T6653] bond0: (slave vlan2): interface is now down [ 756.577910][ T12] bond0: (slave vlan2): interface is now down [ 756.598319][ T12] bond0: (slave vlan2): interface is now down [ 756.618151][ T12] bond0: (slave vlan2): interface is now down [ 756.637888][ T12] bond0: (slave vlan2): interface is now down [ 756.658174][ T35] bond0: (slave vlan2): interface is now down [ 756.688844][ T35] bond0: (slave vlan2): interface is now down