last executing test programs: 2.00091521s ago: executing program 3 (id=3486): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003ce400802c000107000000000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e8008000840c0000000"], 0xa0}, 0x1, 0xfffff000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e26, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1.765014868s ago: executing program 4 (id=3487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 1.622318877s ago: executing program 4 (id=3489): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6b00330050100f00ffffffffffff08021100000050505050505035"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$ax25_int(r3, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c4001a"], 0x3c}}, 0x0) 1.571458434s ago: executing program 3 (id=3490): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000001500)='0', 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x9, 0x5a94f2d0, 0xe}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x1, 0xfffffffd, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fff, 0x41}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 1.503021639s ago: executing program 0 (id=3491): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x41c104, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0xf, r5, 0x0, r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000008c0)="794dcf7b7236ad068c03f08c87b0f903afb18568856642b6414f597f16711e573ce151455f755bbcd344224f681367fd7550341c69b84d8938290651c4935c6492efec2ce32e513853cd1277cce37974f706847cd4b857c8e842bf2e2537c54e7e025ab13a673091c9c41b30da28a71b78c1fae810e685d38499f8aec28ea91af1face718886a521fbb01d1331f223f141eb2fe3af21e15c85de0cd3c644151d642c46efdc27d8b3de908dd2d64a66bcea81d7c9fcb142cb9bc4f4551636801bf4e4817fad08d6c1fabc27a59746b67fcb74d58d5c234b190ff4085ed2774ae727034345b8d75469679f3da4cbc4dbb05c04658a29c7798e10902f788b6e136c945279a7dc34a89bc572ac49cfac33120501be1f693def2138b028aee392798df0065a22b4d8423af650fa0418bf2a19a46d5fc6494bae1f3e26c24b875fb49e43d253a7b28928281c6c639c9ba862c0ac257faec018c4e37ef22bb3fd648b9d64a9478a47921249e5b462c735fee072ce785fbab5ab88be45819055c9a3174292d146f3c47f5faeac3951b63adeb253a0b443ec61eede87611c57200f47d354c245ea9c5ec30bcd440d84411f7fad62f4fac07161664d29253e39d97971b612afcb26aa194ff1a79730f4dc31855623d7627afc1c4f2a089bad1baa1b2d9c8dded398b9a665fe782781354b1643a7d26cd7e6c1952bfa76f69874ec8b82cd98189bf10065c32beea36d42760f8c3b82a05be519e856e008d6470d22a97968253c3fa8cefd7543a466bc453431d038f7e6e4e1b8dbc1c8e07987a120d727c7173af95483fca450eac28bc7759a2c0409416a5c3d15bc5abdd0b214ea5e51b9dc0e7ca1f1e46e1e50e76f7eb263f7683b4fea11ccf1894853993f34793854561c531fbebf3010685b0368d1f96931a08d92c7eeb0ab110897d7b38a154a964245438de0261ab22731547394230489bbca5b46c1be54b58bf310033ba978e4ce2c654eabfad892f816ed416f1402218c2ed4aab437909e23754090deb66bdaa0471ea6d30283c27126b8b9c14d9c3f1fdd780eb747db87c284563355fc8f2c600bfeb2c6c3e96ddfd906836a4a36f23fb81aef64eeb2a78fc6b397c359ac8fa72f6721db9222be17dbc5feeca5695ff9349912cc05f2488e53996f1a18ac7cb760fb292a998f302a2f7fb62b6de4b2d7241ba0837e4a7533607bf10452e3ad98995bba123972be581f2f7dfce4969263bedecd9c0b2fd48f57010f1d6144dc845841a90dc5a533c43fa394434d39636efa8ab3e6070ade2fa682c5b358581dcfe45fe66fa03ad43a25043a4f25bdad57ef6bc23ca13fde96a5247f27928890262073a2d0095166fe71a872cb71a859579ca5c40960a661513d987e9738b719631f001a9d78b6ef4dd0ae924719941e2d41fb619234f06149d34310d9d0947093e12363aa150be6550691db75747b3d8e5506bf23282936960517405de3bced04ee8440997e3da34e26f6a774f4df02b37f91e11ef8e24dc7b388e0a807d206ecd80731cb726af0c1b6d4ceba315b534e2437e1ebbfc48aa720c8f4a3b7efb24aefbf0ca0e8417564d6cebd6713df1e2f39f440d4fa8f53c72f663d9fa55efeb8a0fd869b99807278f61346444f327dd46b3d2261e9866d133dc644b41a74007aa8f4df36e2ac5ac9f232493a4d845c26114fbb24845d94910bd71925ae77768a666b0cb4200f5e2f7d14a2328a89f1cb760b856fc29399b998b0ddec03c5ff76abbc638339710ebc54a66977006a58a6f5e6eeca498abf87258339a892afd76371cedc88ace717939e47d734dd5a503bef27e522feca97da660acd85ee594a69f4a4b1b9fcbb214c844686555f04481bd99938772a1c61198fb7d55ddfce7f49d22565e3a1ba54747f6c492e4546f1e465e6bf79a7fa2c7417ea29ca4a5dbb5f4dd6fea4d42da363ada4323fdaa92e6a64df24fa5290d13b176e911714a3874e965acfd3f7b9a72e8c2d53e20904573351b2ca8b8ee20fc611652d5ef0cbeaddcf9568bcf11ab19d93f4f2b199cc4c249548785d8157dfbb44e3369c1efa1df682cb61f49642b6b4c188d3febb41db3568330718e4f49fb5308c310476670e4a0d1f184a14f557d95d2cf32a256734fa005ea26b8e18a1b53e1959c2cf1d393c05dc558f051ec4e48c5fd35f653f06c6ce340b7dc88b7dbdb71e6e69bd6d8071af91f8ee7365c90883d8d53e2e47b0e60eb8ad12605d0c5fe402ddbf0d7967671cf337b02e196a32c821feeef2fefcc04533b89ad4030428b790461ac3b6dad307c890d4848e503305f35f9e4687ec10650cfa27ce0ac4a87bee0216fbc7ae1defa579a238f6dff731bfe285f6165606e07878c8b644805ab76dd65ab50ff12f3a837e3df67ea4c69ae0205fb9431a0e14b08028807cc1d2658897aaa14c173ce4a2e9609ff6bcb689024b497b3d2a56eac3a05c83ea09e51bfe28785cbaf97b32efcfa199566d95c877d18136f43b7a88308101d1820994a0a1e00e9f26e1dceee0948417e9e293e78854a6472c444a8cc100d9ed99afcfbba68581d7dcc96d32dbe82b8d26bafad15950f9f3ae39f67c3401ba810c1f61b960c5d9042dbd5ba2723ce7846e1a60064e7add2a651f5d4d0abe813aeda08fb502c9909dca616d8f21bc6481ec97a36f8ec4237414f1c9faedea8f9f1b68b63ed2784df790f1e0b516c6f7e2f05749ef0244611a44e387b7271ca3bf9a106faf061dc2537660282c455b1a820bb800c7019b1ca0a6f35616fafc253722f3bbb0c4ab6bbc75a368e51355555524e06f7697c77154d0b77c1c099c3bf17132d4241a195fed028bc1b1ba9797162b1896136ee0317db4ed4b2dfc7a5d83a91d7ffbf6d5c14c20d10a0ff0ec731b831f9c8892537adaec4b7725663e16dcf7a426771e2472a16522c616eeb6971ca34d70588fa441c3b21232a039f4cc202cdbea87035ec76002f94616947f16afd9e67c8dad8bea403827beb945decaff2523597a5f1049fb63a22539a39ac39fffd22def89622fd0a49130a19a9f84efffa94ec1ddf88191f585a15bf2dc5df46824ec8f1411a694a877009962292655ee503b4bcdc251da82abff7beed74abd29ccd991adf50fc05036a55ce4df301d873370910e1c5fd27a79fb1fa6ce81b48856f9af0f62f1f3a9860875df3a245f1acd5b5d78adc33902eea62196abd532d068649306a0107643096c392a824edc9786d003eac896416fe428ceab3971dc276fb75f1c568f05672fe6bb90186defdc558525203df5c6f1282f190ec7de0c99ad2e29c2689fafcbbb0d8ab64a3a812689686f800800fbbc2d442170da8d238ec2a462598494bb9b7c817798965198b96e861e6ebb2b102215169e4ec9f5b4e1b90be1ce0657763fae2ee63a7c875d4fcf8ed3740b390c9a11c40c8ac62caaa9fa7ba812d7ec30cbec01d65cad5e6a14cade4c54ed16d452031a73d549ad956f4e5689c6abecb6fadff90a3a6f12385eb982db5a3e93da21bdc6c71949611cb42aa3fe55329173c44474e90a356d9d1c3e94cc275c5a82e4893b1f3bd61c14b663bd5ea1dac8071c8aa5cd3e3a6b6f423f176bb0c9f486d76c35b19544055995974dd19f06693c34c6fa22cbd17194cfe31f7c0b871305a8cf14f911e56e92cf4ccc1ced9191c67d6e4538b64ab94f3f6dd249422255a23b8d6dc8214e60659abc9dd650b186b5e9075b419ccd5e36400dbd9b371bd1b58da68b71630bb2d4b856f61972e896175b993b7ddd64a6ed580830290540a7bc9906c41c9dd2992aaac0271d77b5ceeb1eccb2fd0156e7598694827e06da37ee2912039556725d375191588bd83f2e4efb10bd5f51a049d3b8c9c8b59a0fa6505920199ca4fe0e120a8ba80b3d8a0e376c525f61669e3860c603ec80f7d7c386f8659f67c5682ad6c109cda9ddcef102f9e5239e48622b0a65f2af8a21f3b54ab31b0694a489f7953c1bd0c560c08944bd7dc91a91c5628d8d05285cedfed8e3b630e6a0f14d85f9eac8932fdffd7abc8bb145f4343544885f2ba944cab0cb94b4238fdbe48b7c89b8a301d9e9539899aba7c6974b6f2bf8eb6ac0879ee6f3f59912d6077b0da986a5f86dd9f1c72038e473611b8ad0fa8f293d7b175668af88408bb34a44bb713f9b8731f391a5f07378a6907b67d754c0b4132fa82678b18a1963ed22d88e7a761c2af6db029b96d36aaa899b2ca70b16a5d7afc747034f516411af0b2947542b8cc4ab97bcf186e6fe870754192b5c5ee1985e1d177797a849305fe9289348e25b41acff57e3088e73f93cfc1423d33ea19f562297f3a243061458f8e7f6f79b59bb7c75350ea9b02aad264103b7c1554ebef72b03f39bab028344e363f2e217b730047e8e7e719d282a19f0d65feaa2387f94ba8b397f5f46c6d081cb504afbeb1d894b1f93b8e71e5af1cd154ffbbec9d00fb2a2ddd96f05e1595cdc50c9c08f393c5f8d072327bc9435a1d8eda1796ac574786104ccc908f96d7301f962c9dbf65a68a8e72e2df685c46995fd0ab0ad6dd07415e6472c00e56fb2cac83cee7d51e97f5aac2e9b9275a589f037c5ba84d9c52ef6d3502379f61ceca6de7cc36c9cf122b0dd1aabeba08f8c70cf34ad33bdedb1d763ad1fedc3a4a426b356061e09b6d6d2e563b674fc2e60400fedcf77ddbfb3d98fd131a1768f926f715b24cffa2b2e61c5429e54c373a99931cab06522711684dc5e03d04449ca4012c9cce1f7ca34b6112b07fd61e5ab819c53a81ba4b1fb5551056902c892df580035acab052872897d3c7944696419e3f75bafee9ba7ab3fd5de6c0325ee96560de438da9a956f732b2296eccffcea223fdd56c5b895295e66ebd958a23526ee5ee68b41fdf45476dcc0587a4deda1a84581c2f5853a2419737be3508661a8f51187c254af46b9c7ad7ff3d4c77dba22f5c028593dd888664da2c8ae687c20969abd6bb3f2b3b6f6170b3597db12a7bda16da600e7b3478a5f665b369eead348e10fd03465b07f56c8d726c67e3f0b7b7a730a1a4db1dc4f84707d1a621f06efba8609f96eb9c14e6f623cdc2a12bb3a7a8700fc7fc17231b117a7b004cf9cf0ed5c577510b92d070ac25d8ad79863f69c70ab654014e2ac4eba75375d4b0d3eca7eaee9c7a409df5ee078633fc4a6022c3fd74c0128bf652cc1428d9d624c0fdb93b56b6a10ddb9e88508192966f24d186233f7d1c699630ed6241a31b25fdc04569586c93723a7cf03140472930b85d9001f0bd6b8808df53b061f4bceb8f2f3416ddf7ed15ab8d25b9a3d425377f8f0d051926362e897a11d85d42d235a0aebb65061959d669089755e5ce30a540d37132830286a15bac3e1142f054e13a0206b489c5a505c2fb98c5ce0fb077fd15292bd3d04dac5669ef4d80c35300ad4b869f05c04cd0c897d1f03f2bfeb103eb4740ae3bf9daf959f93dc32f916b899b73df49deda271504c5c02473f90406c259a901462c19191b52ab0212f7bbf164da38fb51c16e7c70f052e7265bd8b1d2c99f58ca97b7d98b18f81eef2d233175e500fd177308985a8ca15060146fb7eda8cf8d7dd8095b917eb564d63f4a60517e5432ac1067daa8f16d48600dc33fb30ad713a37c58d75ad3906dc9651eb0cbb85ac24344841fdca6f80708464b2b04ea32f088729102f963e5ebf2cd8aa84dd28aaec28d3d514b9370a55d0184699e8427b08f7bffccc7c63cd01910af9b2f4c35525257ce1f17b1c5c611da7f75922e360cdd77f69d0ab9cdde241a3fc", 0x1000, 0x800, 0x0, 0x0) 1.400580123s ago: executing program 4 (id=3493): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x1, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x33, 0x0, 0x4000}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044840}, 0x400c014) 1.400075964s ago: executing program 3 (id=3494): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) poll(&(0x7f0000000040), 0x55, 0x0) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x400c0}, 0x46050) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0}}, 0x2400c808) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x135, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300000642020008000d000f00000008000a00", @ANYRES32=r5, @ANYBLOB="ecb0279aa8c7a4fa68ecf1ed4a53c20446c67cb923d5c5fb6f8d8c889e6d106ae0db897fdce4c040ada7d28f8f0e269eee180358c2fad06ba057194e23cdd8db5cb8ce6d25a36c3ed3584b00"/88], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8044) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) 1.378464051s ago: executing program 0 (id=3495): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x10, 0x189, 0xa}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x1c}, 0xc) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$inet6_opts(r0, 0x29, 0x4d, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000040000000061113800000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.322651407s ago: executing program 3 (id=3496): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x0, @broadcast}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80) socket$kcm(0x2, 0xa, 0x73) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xff07}, 0x2000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf250400000047384d4fd7dbd11e6b73babd86ab59af7aac611875e04192112169580867822d1d89342dec105b195b58fd8fe502c98d29ed2490b6af76049d4c8fd7d09a1227671f4ba40412bff735d2da74e00178b796e49c7162a4cd59556a441eeff1975b41be8958e056cb705328de48", @ANYRES8=r7, @ANYRESOCT=r6, @ANYRESHEX, @ANYBLOB="2319f47caddcef667e137f8524c3e8df3cc5f71331e74fd06c4acff4bf46694055cfb41ae9aae9ce810256459e72872ef665cc644f2b7b02000000000000000ecf157a01493235f637409d2bead321b76e5ee5a99f8ad71117b2437e95fa0914a630bd88c10da9b7f9dc74e660add10022a0b43af219b1718a9c1e725475f08734c1d0e4b3c8fcdb0000000000000000000000000000000000000000000046b3c758a6d030d440119815c6702a92fc879f07ce9b0f549e11ba4ab2970e2b9500041d893450e7"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.322057974s ago: executing program 4 (id=3497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x168, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x138, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x6a, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xfc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x78}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000300)=0x9c3cc356e0b08a4a, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.228635661s ago: executing program 0 (id=3498): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x3ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000004040)="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", 0x3f1}], 0x1}}], 0x1, 0x200040c4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.141084078s ago: executing program 0 (id=3501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r7, 0x0) accept4(r3, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80, 0x800) 943.939555ms ago: executing program 3 (id=3502): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x801) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) close(r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xc, 0x6}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x713, 0xd, 0xfff8, 0x400, 0x40, 0x40020000, r5}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000180)='\xff\xff', 0x400000, &(0x7f00000001c0)={@align=0x3, {0x401, 0x2, 0x7054, 0x7}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000300)}, {[0x10001, 0xe602fc6a, 0x2, 0x318f]}, 0xbc, 0x46, &(0x7f0000000340)=""/70}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000440)={0x2, [0x0, 0x0]}, &(0x7f0000000480)=0xc) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000000140)={0x1, 0x1, 0x6, r5, 0xdb}, 0xc) 942.71225ms ago: executing program 1 (id=3503): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000e40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x90) pipe(&(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0xd7, 0x2, 0x0, 0x9, 0x4, 0x23c4}, 0xc) 929.350603ms ago: executing program 4 (id=3504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xbe3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 839.108433ms ago: executing program 1 (id=3505): r0 = socket(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d", 0x2}], 0x1}}], 0x1, 0x40060) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket(0x14, 0x2, 0x4) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x20088845) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48045}, 0x0) (async, rerun: 32) r4 = socket(0xa, 0x2400000001, 0x0) (rerun: 32) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) (async) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@newqdisc={0x23c, 0x24, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff0, 0xa}, {0xf, 0xffff}, {0xf, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x10, 0x8, 0x80000001, 0x0, 0x2, 0x5, 0x1}}, {0x6, 0x2, [0x9081]}}, {{0x1c, 0x1, {0x5, 0xf, 0x5, 0x8c5f, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x2, 0x2, 0x4, 0x3]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ed9}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "55a10361b71d9cc1697ca19136e0d956"}}}, @TCA_RATE={0x6, 0x5, {0x81, 0xff}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xfa, 0x3, 0x7, 0x0, 0x0, 0x9, 0x9}}, {0x16, 0x2, [0x6, 0x4, 0x8, 0x3, 0xfd8a, 0x1, 0xccba, 0x2, 0x935]}}, {{0x1c, 0x1, {0x1, 0x7, 0xff, 0x9, 0x1, 0x7, 0x86, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x9, 0x21, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2}}, {0x8, 0x2, [0x0, 0x2]}}, {{0x1c, 0x1, {0xf1, 0x4, 0x7, 0x4, 0x0, 0x10000, 0x8, 0x4}}, {0xc, 0x2, [0x1, 0x8, 0x8, 0x5]}}, {{0x1c, 0x1, {0xf, 0x1, 0x7, 0x0, 0x3, 0x7fff, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x5, 0xfff]}}, {{0x1c, 0x1, {0x4, 0xf8, 0xd, 0x8, 0x0, 0x8, 0xffff, 0x2}}, {0x8, 0x2, [0x622, 0x2]}}, {{0x1c, 0x1, {0x6, 0x0, 0x53dc, 0x5, 0x1, 0x10000, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1f, 0x33, 0x9, 0x8, 0x1, 0x4, 0x9, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x8, 0xff, 0x10, 0xfa99, 0x1, 0x101, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40040}, 0x4020004) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {0xb, 0xc}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x20048041) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) 792.59753ms ago: executing program 2 (id=3506): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x3, {0x2, 0x1, 0x4}, 0xfd}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) r11 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000000)={r0}) 730.989483ms ago: executing program 2 (id=3507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3}, 0xff, 0x2, 0x7f, 0x9a86, 0xd, 'syz0\x00', "222594798440f178f54c1996367e8548d2f42520daad81c283ec6a7143dd82a7", "1d206a30902bdc634df190b76b099c46caf760ab3d99c21b66216930ad84f241", [{0x2, 0x81, {0x3, 0x9}}, {0x4, 0x4, {0x2, 0x3}}, {0x3, 0x6, {0x2}}, {0x6, 0x8, {0x3, 0xffffff81}}, {0x3ff, 0x694a, {0x3, 0x1}}, {0x4000, 0x40, {0x312aaede4e4f2d9f, 0x2}}, {0x0, 0xe, {0x3, 0x6}}, {0x8, 0x8, {0x0, 0x6}}, {0x0, 0x2, {0x0, 0x2}}, {0x7, 0x81f, {0x1, 0x2}}, {0x8, 0x8, {0x3, 0x7}}, {0x1, 0xf085, {0x1, 0x6}}, {0x8001, 0x4, {0x3, 0x9}}, {0x1, 0x97, {0x2, 0x9}}, {0xfff, 0x5, {0x2, 0xffffffff}}, {0x2, 0x5, {0x0, 0x2}}, {0x8, 0x8, {0x2, 0x8001}}, {0x5, 0xffff, {0x0, 0x8}}, {0x4f6, 0x4, {0x1, 0x5}}, {0x8cfd, 0x8, {0x2, 0x5}}, {0x2, 0x1, {0x2, 0xfffffff7}}, {0x9c1d, 0x0, {0x1, 0xf804}}, {0xa4, 0x1ff, {0x2, 0x6}}, {0xa, 0x0, {0x1, 0x539}}, {0x7, 0x2, {0x2, 0x4}}, {0x9, 0x0, {0x2, 0x3df}}, {0x1, 0x1b, {0x0, 0xc}}, {0x3, 0xa7, {0x1, 0x1d}}, {0x6, 0x7, {0x3, 0x7}}, {0x478, 0x8, {0x1, 0x7}}, {0x2, 0x5}, {0x209, 0x7, {0x3, 0xc}}, {0x8, 0x0, {0x2, 0x8965}}, {0x4, 0x9, {0x0, 0x7f95}}, {0x6, 0x9, {0x3, 0x1}}, {0x42, 0x7, {0x1, 0x5}}, {0x80, 0x5, {0x2, 0x2}}, {0x7, 0x5, {0x1, 0xbd5}}, {0x7d, 0x0, {0x0, 0x1000}}, {0x4, 0x4, {0x0, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x86, &(0x7f0000002600)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/255, 0xff, 0x0, &(0x7f0000000100)=""/49, 0x31}}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 718.049725ms ago: executing program 4 (id=3508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000180)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000002780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x2162, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0x4, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @local}}, 0x5, 0x4, 0x7, 0x1, 0x100}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={r10, 0x90, "d0e35c775605effff66d778bc47c8df711f85420b8fefdde90ff480bb401366d63de92b8ba4409b6e71f6a59884520fcede22e556fe6f49047221a735573b0f9eb3158d184c8100cb0145e8e925e205d0ecf999fefe1eda0cbec55423b4ba3c0682737edd70529ec36465e87518007ffe62ed0c3e445aea6e79ba84f444b965e9ab952595332352b4dafed52ce485c5b"}, &(0x7f00000002c0)=0x98) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xffffffffffffffb9, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) 547.046116ms ago: executing program 2 (id=3509): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x9}, &(0x7f00000001c0)=0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)=ANY=[@ANYRES8=r3, @ANYBLOB="79c5ab1e7b56", @ANYRESOCT=r4], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711036000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x300, &(0x7f0000000000), 0x4) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r11) sendmsg$NFC_CMD_DISABLE_SE(r11, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010100000000b696357dbdbacd66b9455c4baceeeaf91dfa1fb1a6897dfa626a28beab231be4c7232cab2cf81f6697dfe822ab6926bf728b63e451eefedc8af8d8815e2c408503dedb8a5978530bc0e3e35c50f60b5677af7ef0afed2394b9a831cf4698cb5ab24fac90d8624ccccc7dc8703f057a69852d977661a1d69e21c53dacbf3e2311487ca10679bc6e96", @ANYRES32=0x0, @ANYBLOB="0800150000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r13, @ANYBLOB="050003", @ANYBLOB="7717fa4790af660276abffeb65a0bc903af494a98e57ce5b8c4edefc519b56019db5637e23ec3c38"], 0x28}}, 0x80) bind$bt_hci(r7, &(0x7f0000000000)={0x2}, 0x62) 529.890967ms ago: executing program 1 (id=3510): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007"], 0x5c}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r6 = socket(0x14, 0x2, 0x4) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000080)={r7}) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, &(0x7f0000001c40)) (rerun: 32) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, {0xa, 0x4e23, 0x23c, @private0, 0x40}, 0x1, {[0x2, 0x9, 0x9, 0x2, 0x1570, 0x5, 0x2, 0x3ff]}}, 0x5c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000006a00000225bd7000ffdb0300000000000000000008000a77abb5d9b1c6be000100000004000b000000535bb6d8000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x8, 0x82, 0x8c, 0xda, 0x4, 0x0, 0x2, 0x0, 0x2a, 0x3, 0x5, 0x1, 0x7}, 0xe) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000840)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, &(0x7f0000000300), 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x4, 0xa, 0x7ffd}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x742d98a2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000300000000000000ff000000046e030009000000950000000000000085100000070000008510000005000000181100001f34e91a22c3fee4e62052ce42542af970933381dd8779b52f88aa53ef1dcfbd3571b9c191a6a0b1cd906cee1c29add010c97d25039c28237194af1a9d90246dc4490d0ccb1e57", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000dca80400080000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000085200000010000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0xa00000, 0x2, &(0x7f0000000b40)=""/2, 0x41100, 0x1, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000b80)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000bc0)=[{0x1, 0x4, 0xe, 0x5}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x0, 0xf8, 0xcc, &(0x7f0000000a00)="2b7bea12515af2f385b7ff1c5cc97868d2877f845a5a722bd5b3d63dc27282a6cd7fa247cc01781bee7040e14c98b773ad0ae7f070324e7f6ce1f3b891a57ce04a753f430a1fa89873941a82840a15903ad20c431c2c83e8da07a991f0f1614841f4771491a6ae934002bdb5e389dbd64b5204c0338f803ee342ec3de9dd9fc87c7148274cde25d23e39f99fd9bf9e8bc1625abb30f1994fea1de4b7f0189789ac5be90c63d5d825a3a707ea9b266770dd9cb2c1ac12fc4503490466f19887804a3670857648eee6a9c504e0a73b76449710348772e5f32c22a01992f7c4983612e37a636be7ef877a94e91c507572c266bcc1f54b5e5edc", &(0x7f00000005c0)=""/204, 0x1, 0x0, 0x7c, 0x43, &(0x7f00000006c0)="1ef524d8d601d36952eb97111edb33866bd674795c2d6b300a6766cc435094cbd8b456a0b84e79720a9a5d8e7baf572d4a5b9d4c6a0605af391037a034b046f35f4603a8de72917a8ae258f3b4a751d17508f0d57d0761df02658a38d862f1a92672cb0a259fcf2d18bf2d4c8f0325302a0daf7db227734df7ca96d3", &(0x7f0000000740)="9fcf8dbd839265ccf6aaa2e60a88dd451dbc6cc48ab86b65c86b17038456b33e377c5aecb152e0faa1b22acf5ee51aaa1e79a3a2ce5f0586327dc7afaf7eec95cd9d47", 0x1, 0x0, 0x80000001}, 0x50) (async) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000f40)={0x40000014}) r11 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r12 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 389.594527ms ago: executing program 3 (id=3511): r0 = socket$kcm(0x11, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{r0, &(0x7f0000000280)='team\x00', 0x2, &(0x7f00000002c0)={@_ha_fsid={[0x65, 0x9]}, {0x200, 0x7, 0x5, 0x7}}, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x7ff}, 0x0, &(0x7f0000000d00)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r1, &(0x7f0000000980)="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", &(0x7f0000000800)=""/210}, 0x20) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x891b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'xfrm0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800ecff00000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001180)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fbdbdf250200000008000600000001007e01fd235fbc6469da16bde99cb054889be6a187163cbeee13f2ffc8739019ff25cf39142651cb8f02340eb6c6b2209b1e75ea6dae07e5acb79cc510fb516b1ff1a3d6a4778749641bbebd437c1fcb109dc517bac9d16bffa0257fc2"], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe89) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b6d8646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r6) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000000000000000000000080000c133a12a91872b3730467c92a3a5050f02b82b7e452f3e6b500000000000000012010000ff030000ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167332a0000000038000000000000000a010000630a0000fa08ab919987305c8ad63785f4a4bc84cb79f70a5d7698a3"], 0x1c8}, 0x4000c010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES8=r5, @ANYRESHEX=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000ee1500020028bd7000ffdbdf250a0000ff", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa14000600030000000d00000000000100e102000014000100fc02000000000000000000000000000108000900fbffffff080008000c01000008000a0003000000080009000c000000080008000000000014000600ff0000000002000001000080770d0000"], 0x90}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r3, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000000000000800450000200000000000739078000800000000000000000300e000000100000000"], 0x0) 299.522104ms ago: executing program 1 (id=3512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040080}, 0x404c040) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4094) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x4}, 0x90) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40088c8) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000880)) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r10, 0x8008f511, &(0x7f00000008c0)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x44800) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r4, 0x69512000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r14 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000a80)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r12, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r14}, @NL802154_ATTR_PID={0x8, 0x1c, r15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44800) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x5, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 298.885186ms ago: executing program 2 (id=3513): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0xffffffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x3, 0x4}, &(0x7f0000000100)=0x10) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800800130000000000080012400000000005000500020000000500e6522970c18fd3630300686173683a69702c6d61726b00000000"], 0x60}}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0xffffffff}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x3, 0x4}, &(0x7f0000000100)=0x10) (async) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800800130000000000080012400000000005000500020000000500e6522970c18fd3630300686173683a69702c6d61726b00000000"], 0x60}}, 0x0) (async) 284.716961ms ago: executing program 0 (id=3514): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYBLOB="5e017b"], 0x4) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000080)=""/133, 0x85}, &(0x7f0000000140), 0x15}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 147.002623ms ago: executing program 0 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000006a00000328bd7000ffdbdf25020000000000000004000b00080001000000000004000b0008000500", @ANYRES32=0x0, @ANYBLOB="26ff0a8233adccb24c4dc54607ab12068fd9a2e9ae6a9d704f1b12b22b0b8dd7be49225306dee6f7a9971139d1bc4e29021c63cc1c0aca8e849dee716102182b50d15e8827bdf5528d38f44380589b382eb80b5fd181cec83a80f547d3b5f226"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x4084) 100.623631ms ago: executing program 1 (id=3516): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000040)={0x1, 0x1, 0xc, 0x6e40, 0x10001, 0x6d95}) (async) r1 = socket(0x1, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x1ff) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) 90.390182ms ago: executing program 2 (id=3517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a31000000002800048008000240000000000800014000291b051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000ecf74d3b8fba71457511000100000000"], 0xe8}}, 0x0) 63.409982ms ago: executing program 1 (id=3518): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}, {&(0x7f00000001c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 0s ago: executing program 2 (id=3519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) (async) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) write(r1, &(0x7f00000033c0)="af96028107c41e173e514e657049e030cfe70ca028ce73b34fec11eb8049487c2c09b9f72de08bf14e6bef1993c3e3745fc6c2c5f2fc6fa5813bdcf9b5578386900e1ea11bd7e42864c6a7b7bf56a6026574bca0cc3161a92d3bfc94c400dc04a28395c0ef16ff935569b12f8f9cf5d5eb02dd2290faa2960169f3a38ee11d62ce45df133ca60589018a9272ba313add056f72c718b497920049f842a95f29cb4eda29454bcbb90fc716c074cbc8d9df2a346a489fefad0bd6ab488ca83a0cc80cf6094b8acfd27a111a76c5d0a142081bfb2bc75863f38c01d656074982dda139b4a85dcb5db308040f53ad9a89b007584581ac4fcae44143ab10fea2e89531e3bb084f59d666515373e992b7838a31aaec48311b17787019c3180c57925283b866a75e5917141ef447aa8502886f89ea07664e6cab5aa125733ea71eff5f3a0fffbbaf72425dfe940b00b5500fa0459c297db37f555dac45540d0d81acea85e81dd578e9faf86234176a817ae2c2547916f8c396d628ed41f0ac9dece5bf6229361dea8ebfd7fe8d0cc16bf06b251ec0fda49bdf6b446375dc4b43287fa2fad0452adba5b0800acffe957115432199e9c7e49e0280eec5f88e662e76daef156d770f479a7ee310988e89e175801e9daa30bdf8aaaa8a0d0fae5edd683e3d882a39eca6cb7ab7f1cecd9101349744e931964564c69e4e9c2684993a59bc4c162e6c4a03af6a1655a9422177da2ecdd35aab31857e77606ecdd541a4cb357032439dc47c7486201f68b1271110aecb8b77efa74c68c33083831b665421e85d383ffdfcb08525bde3e18e1a574fa92fea16b3c0a17b1d33fe294f8f3809aeb8a06dcc65b82596cdcd207e8a4c0aaf15ba14fc080fd70a6cf56c1150dc9eaa84779e6d9cfe94ba7e5761ddba6df5befd475dad474e4603ebcbc35eef5e330e26a422c8765831094061d05a1e28eb31181b30a326d6bb64fabbf962db514721bdd2b46e8fa14c683f617500fae5d1e3edca4b7111d9fe15b2c6d49209b10b9bde2c6d0b65b04cae73ac8e6475e453a3ae984cc7bf619d4e19ee2d102d224752792f30c3ed305eec722308048908ad20d500adc06c94fbf113767e7491fca01f79998d69724745f3422848ad00760f14d55fe04f746fc5002e5b2b30be1d1b5b389b5df200c2c32d93d1c58b36627fe941c02cccfed3068c6f40c182c8cfffad748c9e1fb7d0f528b7bdae31a7d4bab5fe8385af0f10c92438b563516146545908eb20664f7bf86ac2ef7f9dbc3c25d0c69cf00e865f16a11210a9e59621145418155b7ca28ff9cb06743a4d48f7c5817ad2ffc3eeea97d8283fc00a691ee49ba35b792e3832d771b5095b3fff04cffaa0133061b4e4ae5ae9ec4bfaea17bb4acde8c2ada629437f909588290c1faacf32b5545a4d555dea9a596bf08de0097163ac3de7a62aa601c4f5397039acc54123bf590b689db069bb70b87a19cd2946099de54cc2ed82c1e9a1dcacea6bebb68df1a8d404f12b558bd0b229238095adbe061dd9f91efad310dcba0998fd5ba386728704bd7a7ab4fcba555ec6901fcc006f2d76cfae3e1de11882e3faa2fecd81cf38cfa4364755978593efd6730a2ae84221492c8496e944a0668a6371f420e580dac8b2b83f29ed450be6f1dd2582090599edbf0b85d384f39fc43ce6ca443f2ec81c1d1dac2dc930c3c98651a67d22e89f657c138064a648be4a5674cdfa56b757813e103c4367211bac1b9eaf53723f80cc5f489e2db14bca0667e0d6b9912a960afcec2c2f4b54f477873f2dd174547ecbb37e5e9d4b6bb38a197911218d945063be628fa0bcbd5715c280ce8213d82ee9acb406f0ca3171b260ebb11711550ef625c0033587be34e55ef607cae3fafc0d84519f9f021935270d762444450bcedc3a976d13c13dede72ce04fd5d2b63574351b67ecd705bedf6774b0f4ccae309a0acba05193608c13e09ac278660e39aa17ea2a897edf329366e687df8ac89195b9f284c5456fd125a87ecd2cbb4372db8b75e6d2fab3d1414971c6664335d198c1c698f413467667933c933fd1dd4d80ec124664ea77616b9e4107a401a798ae754537b819099a1f91abced6e5771da6fd367aff33e6bfd7e9406f75ef624d062c76eab13d5b3060277c34eeceeda73899f6b733a385a13d6f4cc1a8a374186cb54a5687dd0b751da9fd15b47d06c2889696d444aa18fd571a917a6f96433ae2cd5b0ff0dd162b5bca1b367e00d402b420694093ca10e7410509c6398037544963e23c3af86e0ac20716e787f182f37506e1993108fbae2693f12173942cc29d12e585225d8f7fd8ac91baba92b1faf2888d8c89f3700c777fcc514f690fe23d9b4340b55a30085514fb9346e5a7a28bb3b3c594a2ff796a220321549e42473056052ae28d501298d2693dc7d671aca047ffe37a0d9629700a910a150f09adf1b73468dde97d6738dea86befe622f1c4330c2f7c598094fd9185ccb357c03fd05f3c6068443ecdb1b50ec3787b894f0d12b1496fa4dd1f6d47f2c0741c970ac45646238063664f278f15cae39142d9948035affccf9b56cc9277f86c6cd4880099d2d93b65c5c418f5cae5ecae1610992b6c88c03ba71c933ca1d4c8a996deffa04d988be7bf886f8133da3b8dfe0307c8c27f87a5acf9233c1838741c42e6b1d7958155ef601170a66174354bc2156e5218d64f53ce42dfc35da9cb0fa0a81fb38bc2144827556b6e87963449661d678f3be342ce8f5716cb3840d851b383dc2321c786d28fe6a54a72d8f40bd4b77c4cbdf201e74c30790c825e0a75060bb66be75077da99a9090bcc0a712348b3c5dbe1bde6bc1c11cd1e6687f6b878b7aab6b7d175eb2aa63d7c5eb187f6ca9ccb46450f5b1b158017227c7506ad4c2210d3aba65db51a45b2a9da3292516917f7d79cab0ef8c5d2ed6896b9cb8b29f14fdab8eec90669bbe778604edee3897b853713d10d22249dae596440d54ffc1d3c0f151dc61b6c084410718fa3b650cf78f558803b1188fcf7bc42dc7eafa66bb8521e495d931bcaa22152cdb57bdecb7c48acd92b6eedb72b0221d00a7985a5e2ca6108b3657f2a0dfafadca99f1255c889f41e8d2430685b7435c0176c9eb08049cb76dcb0d8525e2cb3c0315b44288abdbc53cf8280b57a976ce56d20cd71ca62d1e04f916724dd0bc63df0bc6ff99444f87144e7e71129d55c1c748006864f081c961816c57125c9b2ac6d9d5a046b5e7c4c73746495c9409eb350ca3dfaf2d170289cab2dae52805f434c7759ed690fb626b3f3de8a4f44b4f0419bff5bcf2b3f7a948b5ffdb196d485a0ee7cee245b0a34474a9b674c6d4413a59e235adac2977b164bf0d553bc1cddbb5f9e092fee5984c1a33ada4f36d1e5ab3ac01525be18d9e4a260b08b0c87266dc1893bebee011b19f9eae75c1919be398a03df644f22e73ff13305adf6e80d7f20891fd04e5222445b821366aecfc2853f7e11f616217f054cada0ed7ade25fd46ea8e4e714e1670a67843c9521c88aafc8f776528dc7341f600203f12432f93f15cdb0ba23130353cc3e33820341ed446e83ab4924d91648fac1f060cb96c3d5280b06c9166da9e6e158bec5e65a86ddb3c5e0a8afe212037278c25021e035a0adf3b1992be2482ba46b0c37210e8dca7bad5de69b95383105950602e004d9ce8951c4e25138a4fc437b1e92636b09d2d1c171eca3e19a626a5dc2d801f72f0d8e3ab1ecc0a6f3beea020d1f2972ccb07f8cf32238a0781afdcdb95b639dce8ed832a6863371552b8edc16926d1a9754e1822c653b197b3d816a3dcca2283b4d25fbc68f7a1c306881777212f0a648fe15f1236bd5c7b3dc62fe56b193db163c623d73d7279d50ff6064e965d918e48a45c2c6acd21f48128f8978c27e637534d1de1441ba3bb3ebd3eadf96b8030e7bff37dac151bb6d5180625ebec86b449e141e2175d3260e62d18a03e9331ead599c6b57184fe048b1fb7e001c80f3efacc08ef1f3ce5434aabf5e3e0f5859eb9d4a14c2186b28b964c1c18911304770db9b38112ce25284c185451c1a515e85fc6bef239c2a61a109ecd5348013cfc22c3f6cec48c68981d11852129a1f48407b919825e6f97486a2dbf11486e9ec5da1e8857137e9be3f4ebbf930148a918673832381aaafe367021e32c3bfeb230a726e5eda867412d86d83320d72414bdea003fa4d00d96c51ee14aaef3377afa39e29e7ceff11dfb846db5896a2dbc788bb3fdf4bde9ad3aeb34b51f287b00f23ed4b1e352d88eaa306d17fab3a620d11faf67379f7ea6a79aa30c6094395db33594b5dc8b2c35a5d6a5675947304809c7b09011a59c9db071dd443a2044e0de8abf271526bf9a6eab043a8a436e17fbaf27394bcb34f52324189015b0acee52b6e8c85a305438c531d8bef5f4671360608ab8f9375b5e7b11533adf762a849f9d4588252ab9b2ada9aad85e210159c2ad89cf449eab2447a44f8fe7f532141c941902b1de838459577b6d94f366c1ccd11ff44e3c20c101964601fd55805e2e344dfba8d3cc5272af4f5dc43d03b7e680e7542bb461a0f7970596ceac5e70da7dd1b4bf9beba18a63460231b2d09f79f99faa60484a3fa30aa5660fdd6557f4fffff2d8f61f46f925764057f67736037041824611f4c5d529d4a37f6bcf2f4142ac2fb11a2d909f9ded9595a6ec99e87f0d33af29dd1f741ba7736c058ad37285e1acd0eb88cd841e72aca7782cda98b1d32882e7eb92e247b41c97a49befa81a55a407586b8889bbb6eee478f8c5a076530bd883935dc20a098c01ce7f1b41bf7a7bbaffd70bc545c047b8d19a76ee8f66e6ec0195e7af82a4286440062b82c1eba477e04e403d3f06f834c4277ea0a9e65d24313316b9c7a82a661ec96f9688d0643420150635e7f51e37489ffec5d7eaf50cbff08e43044844ecc8fb1bce8f6fd1135493028f1f7e9df9d94cdd02957c9fbfaf500acd0722e7ff74d04a8a40503e648a89c54f3b5dee8a6af34992e9bc72de9847f810562b6f21d505321ef829cc9c26449ede7830f619b666e918da9313d5e2243cdcc506608d7a600e640a99d7cf331196ddb6e32be1218ef4002ffe6c5fcde045b731585de15d97545599a311fd34cb3e6b71f2e48aae9f4f95c9eb75536e8f0a062f625191f0d98dfefd2a89a08e5f1f89f8afe0316828c74c89c9422b4a117da763f63224fc0bbabbcf6ef1a51417bca749f04f2dc7c13949d47b252ebb4f663ced664043fff91da1c4c27673d4dd226970b0708496730235c8618f59288729669672ad176fa3fe79d62b25d483ea742de049d16a1682adc8783a47303555edc53da84ee197847125a6e40c87b4e2652762212598def755a3e1bbbdd357f14b91205a523cc68ab54b2830bd6f3319a52644a42618f4a257a5ce488791da29fb855f8522ce1707e1b0df29e2814094175a97bb1f8e970299c8519b098203b110d7558e8c296bce980bd5647b3c32373ab6314a35d77dde4d7a0fe468f3ac0241dbb2742a9ba26424bf9d8ef5bf3dbe4c49dc9203ac1e692c9ceabf1e477af907316b1be5bb3b9b4c2d35992db318959b1a109eaa51d7a46c8ef8f1d890a7fa035c6688f3c9b76a549f78827e9943d921f3db4bb83cc59993f5d09bfa0732a02c73fcb13f04b2b5c1af431c8f31334c6e27dd2a7eb1e5928ddfbc1727696b99f7d109ae117042056fb41cb1287f76922ccb35dd130915251a0c04083dbacb9c2cd08c8743614d8edd7446f0dde95e2632863e919adcc44f8c351e3c7d5fc15caa6f8991ef130f70e7149f5cdb849acbed5b269b0c381ccefa819980fc15026ff55629ae4e6f20c68ce5a09bb1f44f63f5351e14a980473b88e71f3c75a1ead5030faf6435f22332503027c0152a3cf440142f94fedf4e8583b384b4af7b4e05bd8d04e9340ca9a07ed18cbb80a1ec6f2982ae0288f4b648ad7c36163b666242087c596a7771195c5f6dbf2403e84e28a953174e5283ad76eb2522070d1beae514b8ecc26916c61258807da7a57d0abf24a2c12f46477fd5", 0x1110) (async) write(r1, &(0x7f00000033c0)="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", 0x1110) kernel console output (not intermixed with test programs): ] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.071193][T15556] RSP: 002b:00007f33c8709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 365.071218][T15556] RAX: ffffffffffffffda RBX: 00007f33c7a15fa0 RCX: 00007f33c779c819 [ 365.071235][T15556] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 365.071249][T15556] RBP: 00007f33c8709090 R08: 0000000000000000 R09: 0000000000000000 [ 365.071262][T15556] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 365.071275][T15556] R13: 00007f33c7a16038 R14: 00007f33c7a15fa0 R15: 00007ffdc1b95278 [ 365.071309][T15556] [ 365.356557][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.440959][T15562] bond8 (unregistering): Released all slaves [ 365.548725][T15563] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 365.627781][T15563] bond8 (unregistering): Released all slaves [ 365.836638][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.879746][T15597] Bluetooth: MGMT ver 1.23 [ 365.900367][T15597] syzkaller0: entered promiscuous mode [ 365.905920][T15597] syzkaller0: entered allmulticast mode [ 366.011508][T15603] FAULT_INJECTION: forcing a failure. [ 366.011508][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 366.040161][T15603] CPU: 1 UID: 0 PID: 15603 Comm: syz.4.2698 Not tainted syzkaller #0 PREEMPT(full) [ 366.040195][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.040210][T15603] Call Trace: [ 366.040218][T15603] [ 366.040229][T15603] dump_stack_lvl+0xe8/0x150 [ 366.040267][T15603] should_fail_ex+0x412/0x560 [ 366.040308][T15603] should_failslab+0xa8/0x100 [ 366.040340][T15603] __kmalloc_cache_noprof+0x88/0x660 [ 366.040368][T15603] ? sctp_association_new+0x89/0x25e0 [ 366.040406][T15603] sctp_association_new+0x89/0x25e0 [ 366.040441][T15603] ? sctp_has_association+0x1cd/0x1f0 [ 366.040473][T15603] ? sctp_has_association+0x2f/0x1f0 [ 366.040509][T15603] ? __ipv6_addr_type+0x247/0x2f0 [ 366.040546][T15603] sctp_connect_new_asoc+0x2e4/0x6b0 [ 366.040580][T15603] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 366.040613][T15603] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 366.040643][T15603] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 366.040681][T15603] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 366.040712][T15603] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 366.040740][T15603] ? security_sctp_bind_connect+0x7e/0x2c0 [ 366.040774][T15603] sctp_sendmsg+0x1528/0x2c10 [ 366.040821][T15603] ? __pfx_sctp_sendmsg+0x10/0x10 [ 366.040855][T15603] ? aa_sk_perm+0x6d5/0x900 [ 366.040897][T15603] ? __pfx_aa_sk_perm+0x10/0x10 [ 366.040933][T15603] ? sock_rps_record_flow+0x19/0x400 [ 366.040968][T15603] ? inet_sendmsg+0x2f4/0x370 [ 366.040997][T15603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.041027][T15603] ____sys_sendmsg+0x80a/0x9f0 [ 366.041068][T15603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.041109][T15603] ? import_iovec+0x73/0xa0 [ 366.041140][T15603] ___sys_sendmsg+0x2a5/0x360 [ 366.041178][T15603] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.041215][T15603] ? kstrtouint+0x6e/0xe0 [ 366.041278][T15603] ? __fget_files+0x2a/0x420 [ 366.041297][T15603] ? __fget_files+0x3a0/0x420 [ 366.041329][T15603] __sys_sendmmsg+0x27c/0x4e0 [ 366.041367][T15603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 366.041395][T15603] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 366.041457][T15603] ? ksys_write+0x242/0x270 [ 366.041486][T15603] ? __pfx_ksys_write+0x10/0x10 [ 366.041518][T15603] __x64_sys_sendmmsg+0xa0/0xc0 [ 366.041551][T15603] do_syscall_64+0x14d/0xf80 [ 366.041582][T15603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.041605][T15603] ? clear_bhb_loop+0x40/0x90 [ 366.041632][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.041660][T15603] RIP: 0033:0x7f33c779c819 [ 366.041682][T15603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.041702][T15603] RSP: 002b:00007f33c8709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.041726][T15603] RAX: ffffffffffffffda RBX: 00007f33c7a15fa0 RCX: 00007f33c779c819 [ 366.041743][T15603] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 366.041756][T15603] RBP: 00007f33c8709090 R08: 0000000000000000 R09: 0000000000000000 [ 366.041770][T15603] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 366.041783][T15603] R13: 00007f33c7a16038 R14: 00007f33c7a15fa0 R15: 00007ffdc1b95278 [ 366.041819][T15603] [ 366.496625][T15601] tipc: Enabled bearer , priority 27 [ 366.643510][T15615] syzkaller0: entered promiscuous mode [ 366.650010][T15615] syzkaller0: entered allmulticast mode [ 366.715905][T15609] vlan3: entered allmulticast mode [ 366.739933][T15609] bond0: entered allmulticast mode [ 366.745154][T15609] bond_slave_0: entered allmulticast mode [ 366.751199][T15609] bond_slave_1: entered allmulticast mode [ 366.898578][T15613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.927577][T15613] bond_slave_0: left allmulticast mode [ 366.974669][T15613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.994136][T15613] bond_slave_1: left allmulticast mode [ 367.002316][T15613] bond0 (unregistering): Released all slaves [ 367.110048][T15627] bridge6: entered promiscuous mode [ 367.115911][T15627] bridge6: entered allmulticast mode [ 367.167698][T15643] __nla_validate_parse: 5 callbacks suppressed [ 367.167720][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'. [ 367.205093][T15643] net_ratelimit: 13 callbacks suppressed [ 367.205116][T15643] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 367.367270][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.378028][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.506739][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.516138][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.559153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.797996][T15655] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2709'. [ 368.877576][T11765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.983392][T15669] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2715'. [ 368.992610][T15676] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2715'. [ 369.087788][T15680] ip6gre1: entered allmulticast mode [ 369.129802][T15684] FAULT_INJECTION: forcing a failure. [ 369.129802][T15684] name failslab, interval 1, probability 0, space 0, times 0 [ 369.153754][T15686] netlink: 'syz.0.2719': attribute type 11 has an invalid length. [ 369.163388][T15686] netlink: 'syz.0.2719': attribute type 4 has an invalid length. [ 369.172136][T15684] CPU: 0 UID: 0 PID: 15684 Comm: syz.1.2720 Not tainted syzkaller #0 PREEMPT(full) [ 369.172166][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.172179][T15684] Call Trace: [ 369.172188][T15684] [ 369.172198][T15684] dump_stack_lvl+0xe8/0x150 [ 369.172235][T15684] should_fail_ex+0x412/0x560 [ 369.172277][T15684] should_failslab+0xa8/0x100 [ 369.172310][T15684] __kmalloc_cache_noprof+0x88/0x660 [ 369.172340][T15684] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 369.172366][T15684] ? __genradix_ptr+0x1e1/0x220 [ 369.172398][T15684] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 369.172444][T15684] sctp_association_new+0x15d3/0x25e0 [ 369.172494][T15684] sctp_connect_new_asoc+0x2e4/0x6b0 [ 369.172529][T15684] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 369.172561][T15684] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 369.172592][T15684] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 369.172620][T15684] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 369.172653][T15684] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 369.172681][T15684] ? security_sctp_bind_connect+0x7e/0x2c0 [ 369.172715][T15684] sctp_sendmsg+0x1528/0x2c10 [ 369.172763][T15684] ? __pfx_sctp_sendmsg+0x10/0x10 [ 369.172796][T15684] ? aa_sk_perm+0x6d5/0x900 [ 369.172839][T15684] ? __pfx_aa_sk_perm+0x10/0x10 [ 369.172876][T15684] ? sock_rps_record_flow+0x19/0x400 [ 369.172911][T15684] ? inet_sendmsg+0x2f4/0x370 [ 369.172942][T15684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.172972][T15684] ____sys_sendmsg+0x80a/0x9f0 [ 369.173013][T15684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.173055][T15684] ? import_iovec+0x73/0xa0 [ 369.173090][T15684] ___sys_sendmsg+0x2a5/0x360 [ 369.173127][T15684] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.173162][T15684] ? kstrtouint+0x6e/0xe0 [ 369.173224][T15684] ? __fget_files+0x2a/0x420 [ 369.173244][T15684] ? __fget_files+0x3a0/0x420 [ 369.173276][T15684] __sys_sendmmsg+0x27c/0x4e0 [ 369.173314][T15684] ? __pfx___sys_sendmmsg+0x10/0x10 [ 369.173342][T15684] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 369.173406][T15684] ? ksys_write+0x242/0x270 [ 369.173442][T15684] ? __pfx_ksys_write+0x10/0x10 [ 369.173475][T15684] __x64_sys_sendmmsg+0xa0/0xc0 [ 369.173508][T15684] do_syscall_64+0x14d/0xf80 [ 369.173538][T15684] ? trace_irq_disable+0x3b/0x150 [ 369.173558][T15684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.173580][T15684] ? clear_bhb_loop+0x40/0x90 [ 369.173607][T15684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.173630][T15684] RIP: 0033:0x7f415d99c819 [ 369.173651][T15684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.173671][T15684] RSP: 002b:00007f415e7cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.173694][T15684] RAX: ffffffffffffffda RBX: 00007f415dc15fa0 RCX: 00007f415d99c819 [ 369.173710][T15684] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 369.173724][T15684] RBP: 00007f415e7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 369.173738][T15684] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 369.173751][T15684] R13: 00007f415dc16038 R14: 00007f415dc15fa0 R15: 00007fff7de87cc8 [ 369.173787][T15684] [ 369.173975][T15686] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.2719'. [ 369.729652][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.756698][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.770918][T15707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2727'. [ 369.837660][ T8685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.914536][T15715] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2730'. [ 369.999482][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2732'. [ 370.064613][T15719] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 370.224474][T15740] netlink: 'syz.2.2738': attribute type 13 has an invalid length. [ 370.250916][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2737'. [ 370.261406][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 370.277305][T15740] gretap0: refused to change device tx_queue_len [ 370.411151][T15752] tipc: Enabling of bearer rejected, already enabled [ 370.478008][T15752] tipc: Enabling of bearer rejected, already enabled [ 370.668791][T15771] netlink: 'syz.0.2747': attribute type 8 has an invalid length. [ 370.995985][T15793] FAULT_INJECTION: forcing a failure. [ 370.995985][T15793] name failslab, interval 1, probability 0, space 0, times 0 [ 371.017041][T15793] CPU: 1 UID: 0 PID: 15793 Comm: syz.0.2754 Not tainted syzkaller #0 PREEMPT(full) [ 371.017074][T15793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 371.017089][T15793] Call Trace: [ 371.017107][T15793] [ 371.017117][T15793] dump_stack_lvl+0xe8/0x150 [ 371.017155][T15793] should_fail_ex+0x412/0x560 [ 371.017198][T15793] should_failslab+0xa8/0x100 [ 371.017230][T15793] __kmalloc_cache_noprof+0x88/0x660 [ 371.017255][T15793] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 371.017282][T15793] ? sctp_add_bind_addr+0x8c/0x370 [ 371.017321][T15793] sctp_add_bind_addr+0x8c/0x370 [ 371.017352][T15793] sctp_copy_local_addr_list+0x314/0x4f0 [ 371.017381][T15793] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 371.017407][T15793] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 371.017435][T15793] ? sctp_v6_is_any+0x64/0x80 [ 371.017462][T15793] ? sctp_copy_one_addr+0x93/0x360 [ 371.017491][T15793] sctp_bind_addr_copy+0xb3/0x3c0 [ 371.017517][T15793] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 371.017557][T15793] sctp_connect_new_asoc+0x2ff/0x6b0 [ 371.017592][T15793] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 371.017623][T15793] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 371.017654][T15793] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 371.017683][T15793] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 371.017715][T15793] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 371.017744][T15793] ? security_sctp_bind_connect+0x7e/0x2c0 [ 371.017778][T15793] sctp_sendmsg+0x1528/0x2c10 [ 371.017827][T15793] ? __pfx_sctp_sendmsg+0x10/0x10 [ 371.017861][T15793] ? aa_sk_perm+0x6d5/0x900 [ 371.017903][T15793] ? __pfx_aa_sk_perm+0x10/0x10 [ 371.017941][T15793] ? sock_rps_record_flow+0x19/0x400 [ 371.017983][T15793] ? inet_sendmsg+0x2f4/0x370 [ 371.018013][T15793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.018043][T15793] ____sys_sendmsg+0x80a/0x9f0 [ 371.018085][T15793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.018127][T15793] ? import_iovec+0x73/0xa0 [ 371.018158][T15793] ___sys_sendmsg+0x2a5/0x360 [ 371.018196][T15793] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.018233][T15793] ? kstrtouint+0x6e/0xe0 [ 371.018298][T15793] ? __fget_files+0x2a/0x420 [ 371.018318][T15793] ? __fget_files+0x3a0/0x420 [ 371.018352][T15793] __sys_sendmmsg+0x27c/0x4e0 [ 371.018390][T15793] ? __pfx___sys_sendmmsg+0x10/0x10 [ 371.018418][T15793] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 371.018482][T15793] ? ksys_write+0x242/0x270 [ 371.018519][T15793] ? __pfx_ksys_write+0x10/0x10 [ 371.018560][T15793] __x64_sys_sendmmsg+0xa0/0xc0 [ 371.018594][T15793] do_syscall_64+0x14d/0xf80 [ 371.018624][T15793] ? trace_irq_disable+0x3b/0x150 [ 371.018643][T15793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.018666][T15793] ? clear_bhb_loop+0x40/0x90 [ 371.018694][T15793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.018716][T15793] RIP: 0033:0x7f148339c819 [ 371.018744][T15793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.018764][T15793] RSP: 002b:00007f1484264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.018788][T15793] RAX: ffffffffffffffda RBX: 00007f1483615fa0 RCX: 00007f148339c819 [ 371.018805][T15793] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 371.018818][T15793] RBP: 00007f1484264090 R08: 0000000000000000 R09: 0000000000000000 [ 371.018832][T15793] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 371.018845][T15793] R13: 00007f1483616038 R14: 00007f1483615fa0 R15: 00007fff6cf6d8d8 [ 371.018882][T15793] [ 372.123163][T15835] bond7 (unregistering): Released all slaves [ 372.161576][T15839] ip6erspan1: entered allmulticast mode [ 372.247555][T10896] net_ratelimit: 7 callbacks suppressed [ 372.247590][T10896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.285799][T10896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.301227][T15847] FAULT_INJECTION: forcing a failure. [ 372.301227][T15847] name failslab, interval 1, probability 0, space 0, times 0 [ 372.354219][T15847] CPU: 0 UID: 0 PID: 15847 Comm: syz.1.2768 Not tainted syzkaller #0 PREEMPT(full) [ 372.354258][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.354275][T15847] Call Trace: [ 372.354287][T15847] [ 372.354296][T15847] dump_stack_lvl+0xe8/0x150 [ 372.354334][T15847] should_fail_ex+0x412/0x560 [ 372.354374][T15847] should_failslab+0xa8/0x100 [ 372.354407][T15847] __kmalloc_cache_noprof+0x88/0x660 [ 372.354433][T15847] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 372.354459][T15847] ? sctp_add_bind_addr+0x8c/0x370 [ 372.354490][T15847] sctp_add_bind_addr+0x8c/0x370 [ 372.354521][T15847] sctp_copy_local_addr_list+0x314/0x4f0 [ 372.354550][T15847] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 372.354576][T15847] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 372.354604][T15847] ? sctp_v6_is_any+0x64/0x80 [ 372.354631][T15847] ? sctp_copy_one_addr+0x93/0x360 [ 372.354660][T15847] sctp_bind_addr_copy+0xb3/0x3c0 [ 372.354685][T15847] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 372.354725][T15847] sctp_connect_new_asoc+0x2ff/0x6b0 [ 372.354760][T15847] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 372.354792][T15847] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 372.354822][T15847] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 372.354851][T15847] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 372.354882][T15847] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 372.354910][T15847] ? security_sctp_bind_connect+0x7e/0x2c0 [ 372.354944][T15847] sctp_sendmsg+0x1528/0x2c10 [ 372.354991][T15847] ? __pfx_sctp_sendmsg+0x10/0x10 [ 372.355025][T15847] ? aa_sk_perm+0x6d5/0x900 [ 372.355067][T15847] ? __pfx_aa_sk_perm+0x10/0x10 [ 372.355111][T15847] ? sock_rps_record_flow+0x19/0x400 [ 372.355147][T15847] ? inet_sendmsg+0x2f4/0x370 [ 372.355176][T15847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.355206][T15847] ____sys_sendmsg+0x80a/0x9f0 [ 372.355247][T15847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.355289][T15847] ? import_iovec+0x73/0xa0 [ 372.355320][T15847] ___sys_sendmsg+0x2a5/0x360 [ 372.355357][T15847] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.355393][T15847] ? kstrtouint+0x6e/0xe0 [ 372.355458][T15847] ? __fget_files+0x2a/0x420 [ 372.355478][T15847] ? __fget_files+0x3a0/0x420 [ 372.355511][T15847] __sys_sendmmsg+0x27c/0x4e0 [ 372.355549][T15847] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.355578][T15847] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 372.355639][T15847] ? ksys_write+0x242/0x270 [ 372.355666][T15847] ? __pfx_ksys_write+0x10/0x10 [ 372.355698][T15847] __x64_sys_sendmmsg+0xa0/0xc0 [ 372.355730][T15847] do_syscall_64+0x14d/0xf80 [ 372.355759][T15847] ? trace_irq_disable+0x3b/0x150 [ 372.355778][T15847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.355800][T15847] ? clear_bhb_loop+0x40/0x90 [ 372.355827][T15847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.355849][T15847] RIP: 0033:0x7f415d99c819 [ 372.355870][T15847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.355889][T15847] RSP: 002b:00007f415e7cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.355911][T15847] RAX: ffffffffffffffda RBX: 00007f415dc15fa0 RCX: 00007f415d99c819 [ 372.355927][T15847] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 372.355941][T15847] RBP: 00007f415e7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 372.355954][T15847] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 372.355967][T15847] R13: 00007f415dc16038 R14: 00007f415dc15fa0 R15: 00007fff7de87cc8 [ 372.356002][T15847] [ 372.846197][T15860] netlink: 'syz.2.2771': attribute type 1 has an invalid length. [ 372.882700][T15860] bond12: entered promiscuous mode [ 372.888837][T15860] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.903576][T15863] netlink: 'syz.0.2773': attribute type 5 has an invalid length. [ 372.927115][T15867] __nla_validate_parse: 2 callbacks suppressed [ 372.927139][T15867] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2772'. [ 372.946905][T15861] block nbd2: server does not support multiple connections per device. [ 372.976892][T15861] block nbd2: shutting down sockets [ 372.998964][T15869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2772'. [ 373.050321][T15871] Unsupported ieee802154 address type: 0 [ 373.059805][T15871] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 373.139425][T15881] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 373.153890][T15871] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.177797][T15880] syzkaller0: entered promiscuous mode [ 373.183378][T15880] syzkaller0: entered allmulticast mode [ 373.218116][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 373.289035][T15880] bond7 (unregistering): Released all slaves [ 373.487649][T15901] FAULT_INJECTION: forcing a failure. [ 373.487649][T15901] name failslab, interval 1, probability 0, space 0, times 0 [ 373.515446][T15901] CPU: 0 UID: 0 PID: 15901 Comm: syz.2.2782 Not tainted syzkaller #0 PREEMPT(full) [ 373.515478][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.515492][T15901] Call Trace: [ 373.515501][T15901] [ 373.515510][T15901] dump_stack_lvl+0xe8/0x150 [ 373.515547][T15901] should_fail_ex+0x412/0x560 [ 373.515587][T15901] should_failslab+0xa8/0x100 [ 373.515619][T15901] __kmalloc_cache_noprof+0x88/0x660 [ 373.515643][T15901] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 373.515671][T15901] ? sctp_add_bind_addr+0x8c/0x370 [ 373.515702][T15901] sctp_add_bind_addr+0x8c/0x370 [ 373.515732][T15901] sctp_copy_local_addr_list+0x314/0x4f0 [ 373.515761][T15901] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 373.515786][T15901] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 373.515813][T15901] ? sctp_v6_is_any+0x64/0x80 [ 373.515840][T15901] ? sctp_copy_one_addr+0x93/0x360 [ 373.515870][T15901] sctp_bind_addr_copy+0xb3/0x3c0 [ 373.515896][T15901] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 373.515934][T15901] sctp_connect_new_asoc+0x2ff/0x6b0 [ 373.515970][T15901] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 373.516010][T15901] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 373.516042][T15901] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 373.516071][T15901] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 373.516101][T15901] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 373.516130][T15901] ? security_sctp_bind_connect+0x7e/0x2c0 [ 373.516164][T15901] sctp_sendmsg+0x1528/0x2c10 [ 373.516211][T15901] ? __pfx_sctp_sendmsg+0x10/0x10 [ 373.516245][T15901] ? aa_sk_perm+0x6d5/0x900 [ 373.516292][T15901] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.516328][T15901] ? sock_rps_record_flow+0x19/0x400 [ 373.516364][T15901] ? inet_sendmsg+0x2f4/0x370 [ 373.516393][T15901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.516422][T15901] ____sys_sendmsg+0x80a/0x9f0 [ 373.516462][T15901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.516502][T15901] ? import_iovec+0x73/0xa0 [ 373.516532][T15901] ___sys_sendmsg+0x2a5/0x360 [ 373.516570][T15901] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.516606][T15901] ? kstrtouint+0x6e/0xe0 [ 373.516670][T15901] ? __fget_files+0x2a/0x420 [ 373.516689][T15901] ? __fget_files+0x3a0/0x420 [ 373.516723][T15901] __sys_sendmmsg+0x27c/0x4e0 [ 373.516760][T15901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 373.516788][T15901] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 373.516849][T15901] ? ksys_write+0x242/0x270 [ 373.516878][T15901] ? __pfx_ksys_write+0x10/0x10 [ 373.516911][T15901] __x64_sys_sendmmsg+0xa0/0xc0 [ 373.516945][T15901] do_syscall_64+0x14d/0xf80 [ 373.516974][T15901] ? trace_irq_disable+0x3b/0x150 [ 373.516993][T15901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.517022][T15901] ? clear_bhb_loop+0x40/0x90 [ 373.517049][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.517071][T15901] RIP: 0033:0x7f297539c819 [ 373.517092][T15901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.517111][T15901] RSP: 002b:00007f2976207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 373.517134][T15901] RAX: ffffffffffffffda RBX: 00007f2975615fa0 RCX: 00007f297539c819 [ 373.517149][T15901] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 373.517163][T15901] RBP: 00007f2976207090 R08: 0000000000000000 R09: 0000000000000000 [ 373.517176][T15901] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 373.517188][T15901] R13: 00007f2975616038 R14: 00007f2975615fa0 R15: 00007ffc39dd09c8 [ 373.517224][T15901] [ 373.900413][T15904] "syz.0.2784" (15904) uses obsolete ecb(arc4) skcipher [ 373.933629][T15906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2785'. [ 373.970814][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.980055][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.059469][T15897] syzkaller1: entered promiscuous mode [ 374.065189][T15897] syzkaller1: entered allmulticast mode [ 374.093470][T15897] netlink: 'syz.3.2781': attribute type 25 has an invalid length. [ 374.224801][T15924] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 374.232944][T15924] netlink: 'syz.1.2787': attribute type 2 has an invalid length. [ 374.241104][T15924] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 374.250510][T15924] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 374.335206][T15916] syzkaller0: entered promiscuous mode [ 374.341823][T15916] syzkaller0: entered allmulticast mode [ 374.355846][T15927] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2789'. [ 374.428183][T15936] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2789'. [ 374.902208][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 374.956512][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.043044][ T6268] lec:lec_start_xmit: lec0:No lecd attached [ 375.049886][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.128617][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.137293][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.598786][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.114770][T15965] FAULT_INJECTION: forcing a failure. [ 376.114770][T15965] name failslab, interval 1, probability 0, space 0, times 0 [ 376.152303][T15965] CPU: 0 UID: 0 PID: 15965 Comm: syz.3.2796 Not tainted syzkaller #0 PREEMPT(full) [ 376.152331][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.152343][T15965] Call Trace: [ 376.152351][T15965] [ 376.152359][T15965] dump_stack_lvl+0xe8/0x150 [ 376.152390][T15965] should_fail_ex+0x412/0x560 [ 376.152424][T15965] should_failslab+0xa8/0x100 [ 376.152450][T15965] __kmalloc_cache_noprof+0x88/0x660 [ 376.152470][T15965] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 376.152492][T15965] ? sctp_add_bind_addr+0x8c/0x370 [ 376.152516][T15965] sctp_add_bind_addr+0x8c/0x370 [ 376.152540][T15965] sctp_copy_local_addr_list+0x314/0x4f0 [ 376.152563][T15965] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 376.152592][T15965] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 376.152615][T15965] ? sctp_v6_is_any+0x64/0x80 [ 376.152637][T15965] ? sctp_copy_one_addr+0x93/0x360 [ 376.152659][T15965] sctp_bind_addr_copy+0xb3/0x3c0 [ 376.152680][T15965] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 376.152711][T15965] sctp_connect_new_asoc+0x2ff/0x6b0 [ 376.152739][T15965] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 376.152765][T15965] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 376.152790][T15965] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 376.152815][T15965] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 376.152843][T15965] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 376.152868][T15965] ? security_sctp_bind_connect+0x7e/0x2c0 [ 376.152897][T15965] sctp_sendmsg+0x1528/0x2c10 [ 376.152937][T15965] ? __pfx_sctp_sendmsg+0x10/0x10 [ 376.152964][T15965] ? aa_sk_perm+0x6d5/0x900 [ 376.152998][T15965] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.153028][T15965] ? sock_rps_record_flow+0x19/0x400 [ 376.153058][T15965] ? inet_sendmsg+0x2f4/0x370 [ 376.153084][T15965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.153109][T15965] ____sys_sendmsg+0x80a/0x9f0 [ 376.153147][T15965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.153188][T15965] ? import_iovec+0x73/0xa0 [ 376.153219][T15965] ___sys_sendmsg+0x2a5/0x360 [ 376.153255][T15965] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.153292][T15965] ? kstrtouint+0x6e/0xe0 [ 376.153354][T15965] ? __fget_files+0x2a/0x420 [ 376.153373][T15965] ? __fget_files+0x3a0/0x420 [ 376.153404][T15965] __sys_sendmmsg+0x27c/0x4e0 [ 376.153441][T15965] ? __pfx___sys_sendmmsg+0x10/0x10 [ 376.153469][T15965] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 376.153534][T15965] ? ksys_write+0x242/0x270 [ 376.153563][T15965] ? __pfx_ksys_write+0x10/0x10 [ 376.153608][T15965] __x64_sys_sendmmsg+0xa0/0xc0 [ 376.153641][T15965] do_syscall_64+0x14d/0xf80 [ 376.153671][T15965] ? trace_irq_disable+0x3b/0x150 [ 376.153690][T15965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.153712][T15965] ? clear_bhb_loop+0x40/0x90 [ 376.153741][T15965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.153761][T15965] RIP: 0033:0x7f6e2eb9c819 [ 376.153783][T15965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.153801][T15965] RSP: 002b:00007f6e2fa2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 376.153825][T15965] RAX: ffffffffffffffda RBX: 00007f6e2ee15fa0 RCX: 00007f6e2eb9c819 [ 376.153840][T15965] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 376.153854][T15965] RBP: 00007f6e2fa2b090 R08: 0000000000000000 R09: 0000000000000000 [ 376.153867][T15965] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 376.153879][T15965] R13: 00007f6e2ee16038 R14: 00007f6e2ee15fa0 R15: 00007ffd3d112ba8 [ 376.153915][T15965] [ 376.504453][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.513193][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.795949][T15983] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2801'. [ 376.807114][T15983] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2801'. [ 376.816209][T15983] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2801'. [ 377.084561][T16002] FAULT_INJECTION: forcing a failure. [ 377.084561][T16002] name failslab, interval 1, probability 0, space 0, times 0 [ 377.117205][T16002] CPU: 1 UID: 0 PID: 16002 Comm: syz.4.2810 Not tainted syzkaller #0 PREEMPT(full) [ 377.117236][T16002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.117250][T16002] Call Trace: [ 377.117258][T16002] [ 377.117267][T16002] dump_stack_lvl+0xe8/0x150 [ 377.117304][T16002] should_fail_ex+0x412/0x560 [ 377.117345][T16002] should_failslab+0xa8/0x100 [ 377.117377][T16002] __kmalloc_cache_noprof+0x88/0x660 [ 377.117401][T16002] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 377.117437][T16002] ? sctp_add_bind_addr+0x8c/0x370 [ 377.117468][T16002] sctp_add_bind_addr+0x8c/0x370 [ 377.117498][T16002] sctp_copy_local_addr_list+0x314/0x4f0 [ 377.117528][T16002] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 377.117553][T16002] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 377.117581][T16002] ? sctp_v6_is_any+0x64/0x80 [ 377.117609][T16002] ? sctp_copy_one_addr+0x93/0x360 [ 377.117638][T16002] sctp_bind_addr_copy+0xb3/0x3c0 [ 377.117664][T16002] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 377.117704][T16002] sctp_connect_new_asoc+0x2ff/0x6b0 [ 377.117739][T16002] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 377.117771][T16002] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 377.117802][T16002] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 377.117830][T16002] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 377.117862][T16002] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 377.117891][T16002] ? security_sctp_bind_connect+0x7e/0x2c0 [ 377.117931][T16002] sctp_sendmsg+0x1528/0x2c10 [ 377.117978][T16002] ? __pfx_sctp_sendmsg+0x10/0x10 [ 377.118013][T16002] ? aa_sk_perm+0x6d5/0x900 [ 377.118055][T16002] ? __pfx_aa_sk_perm+0x10/0x10 [ 377.118092][T16002] ? sock_rps_record_flow+0x19/0x400 [ 377.118136][T16002] ? inet_sendmsg+0x2f4/0x370 [ 377.118172][T16002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.118201][T16002] ____sys_sendmsg+0x80a/0x9f0 [ 377.118243][T16002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.118285][T16002] ? import_iovec+0x73/0xa0 [ 377.118316][T16002] ___sys_sendmsg+0x2a5/0x360 [ 377.118354][T16002] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.118391][T16002] ? kstrtouint+0x6e/0xe0 [ 377.118477][T16002] ? __fget_files+0x2a/0x420 [ 377.118497][T16002] ? __fget_files+0x3a0/0x420 [ 377.118529][T16002] __sys_sendmmsg+0x27c/0x4e0 [ 377.118567][T16002] ? __pfx___sys_sendmmsg+0x10/0x10 [ 377.118595][T16002] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 377.118659][T16002] ? ksys_write+0x242/0x270 [ 377.118687][T16002] ? __pfx_ksys_write+0x10/0x10 [ 377.118721][T16002] __x64_sys_sendmmsg+0xa0/0xc0 [ 377.118754][T16002] do_syscall_64+0x14d/0xf80 [ 377.118784][T16002] ? trace_irq_disable+0x3b/0x150 [ 377.118803][T16002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.118826][T16002] ? clear_bhb_loop+0x40/0x90 [ 377.118854][T16002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.118876][T16002] RIP: 0033:0x7f33c779c819 [ 377.118896][T16002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.118915][T16002] RSP: 002b:00007f33c8709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 377.118939][T16002] RAX: ffffffffffffffda RBX: 00007f33c7a15fa0 RCX: 00007f33c779c819 [ 377.118955][T16002] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 377.118968][T16002] RBP: 00007f33c8709090 R08: 0000000000000000 R09: 0000000000000000 [ 377.118981][T16002] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 377.118993][T16002] R13: 00007f33c7a16038 R14: 00007f33c7a15fa0 R15: 00007ffdc1b95278 [ 377.119030][T16002] [ 377.585238][T16019] validate_nla: 1 callbacks suppressed [ 377.585259][T16019] netlink: 'syz.3.2813': attribute type 3 has an invalid length. [ 377.764697][T16027] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 377.940378][ T8687] net_ratelimit: 10 callbacks suppressed [ 377.940408][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.957256][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.081109][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.368846][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.392796][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.401764][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.426519][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.435444][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.458422][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.465915][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.473509][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.485345][T16067] FAULT_INJECTION: forcing a failure. [ 378.485345][T16067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.507391][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.517521][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.550330][T16066] syzkaller0: entered promiscuous mode [ 378.555882][T16066] syzkaller0: entered allmulticast mode [ 378.576663][T16067] CPU: 0 UID: 0 PID: 16067 Comm: syz.4.2825 Not tainted syzkaller #0 PREEMPT(full) [ 378.576694][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.576708][T16067] Call Trace: [ 378.576717][T16067] [ 378.576726][T16067] dump_stack_lvl+0xe8/0x150 [ 378.576762][T16067] should_fail_ex+0x412/0x560 [ 378.576804][T16067] _copy_from_user+0x2d/0xb0 [ 378.576833][T16067] ___sys_sendmsg+0x1c6/0x360 [ 378.576870][T16067] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.576941][T16067] ? __fget_files+0x2a/0x420 [ 378.576961][T16067] ? __fget_files+0x3a0/0x420 [ 378.576993][T16067] __x64_sys_sendmsg+0x1bd/0x2a0 [ 378.577027][T16067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.577068][T16067] ? __pfx_ksys_write+0x10/0x10 [ 378.577107][T16067] do_syscall_64+0x14d/0xf80 [ 378.577146][T16067] ? trace_irq_disable+0x3b/0x150 [ 378.577165][T16067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.577188][T16067] ? clear_bhb_loop+0x40/0x90 [ 378.577217][T16067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.577240][T16067] RIP: 0033:0x7f33c779c819 [ 378.577259][T16067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.577278][T16067] RSP: 002b:00007f33c86e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.577302][T16067] RAX: ffffffffffffffda RBX: 00007f33c7a16090 RCX: 00007f33c779c819 [ 378.577318][T16067] RDX: 0000000000008850 RSI: 0000200000000040 RDI: 000000000000000c [ 378.577333][T16067] RBP: 00007f33c86e8090 R08: 0000000000000000 R09: 0000000000000000 [ 378.577347][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.577360][T16067] R13: 00007f33c7a16128 R14: 00007f33c7a16090 R15: 00007ffdc1b95278 [ 378.577395][T16067] [ 378.807093][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.041720][T16060] hsr0 speed is unknown, defaulting to 1000 [ 379.118780][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.130325][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.176990][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42833 - 0 [ 379.227268][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.235744][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.329588][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.341329][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.354664][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42833 - 0 [ 379.355316][T16109] __nla_validate_parse: 3 callbacks suppressed [ 379.355363][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 379.497981][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.565314][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.588116][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42833 - 0 [ 379.662703][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 379.825663][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.847600][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.858842][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42833 - 0 [ 379.881216][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 379.918339][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 380.077157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 380.085364][ C1] lec:lec_tx_timeout: lec0 [ 380.090153][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.227683][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57657 - 0 [ 380.274180][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57657 - 0 [ 380.322730][T16160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2848'. [ 380.366800][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.375206][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.404722][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57657 - 0 [ 380.425340][T16163] netlink: 'syz.2.2851': attribute type 3 has an invalid length. [ 380.474341][T16160] bond7: entered promiscuous mode [ 380.479982][T16160] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.488709][T16060] chnl_net:caif_netlink_parms(): no params data found [ 380.579021][T16166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.587512][T16166] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 380.599951][T16166] bond7: (slave ip6gre2): Error -95 calling set_mac_address [ 380.636469][ T51] Bluetooth: hci5: command tx timeout [ 380.727524][ T49] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 57657 - 0 [ 380.745202][T16177] set match dimension is over the limit! [ 380.771818][ T13] gretap0: left allmulticast mode [ 380.781624][ T13] gretap0: left promiscuous mode [ 380.798476][ T13] bridge0: port 3(gretap0) entered disabled state [ 380.831634][ T13] bridge_slave_1: left allmulticast mode [ 380.842299][ T13] bridge_slave_1: left promiscuous mode [ 380.850878][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.930126][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2857'. [ 381.318017][ T13] bond4 (unregistering): (slave geneve3): Releasing active interface [ 381.326271][ T13] geneve3 (unregistering): left allmulticast mode [ 381.366574][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 381.662539][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.674644][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.686133][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 381.696242][ T13] bond0 (unregistering): Released all slaves [ 381.709179][ T13] bond1 (unregistering): Released all slaves [ 381.724219][ T13] bond2 (unregistering): Released all slaves [ 381.746101][ T13] bond3 (unregistering): Released all slaves [ 381.767051][ T13] bond4 (unregistering): Released all slaves [ 381.790905][ T13] bond5 (unregistering): Released all slaves [ 381.805882][ T13] bond6 (unregistering): Released all slaves [ 381.820579][T16173] bridge0: port 3(syz_tun) entered blocking state [ 381.827679][T16173] bridge0: port 3(syz_tun) entered disabled state [ 381.834274][T16173] syz_tun: entered allmulticast mode [ 381.841816][T16173] syz_tun: entered promiscuous mode [ 381.994986][ T13] : left promiscuous mode [ 382.110959][ T13] tipc: Disabling bearer [ 382.171752][ T13] tipc: Left network mode [ 382.302365][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.312673][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.351573][T16060] bridge_slave_0: entered allmulticast mode [ 382.368139][T16060] bridge_slave_0: entered promiscuous mode [ 382.521060][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.532582][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.540953][T16060] bridge_slave_1: entered allmulticast mode [ 382.549837][T16060] bridge_slave_1: entered promiscuous mode [ 382.726698][ T51] Bluetooth: hci5: command tx timeout [ 382.780273][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.804848][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.942448][T16254] netem: change failed [ 382.981002][T16060] team0: Port device team_slave_0 added [ 383.128449][T16060] team0: Port device team_slave_1 added [ 383.141232][T16247] netlink: 'syz.4.2868': attribute type 1 has an invalid length. [ 383.235623][T16269] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 383.259453][T16269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.376850][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 383.427294][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.436175][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.466707][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.509092][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.539780][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.566842][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.791103][ T13] hsr_slave_0: left promiscuous mode [ 383.805160][ T13] hsr_slave_1: left promiscuous mode [ 383.814529][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.831493][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.850490][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.865085][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.883218][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 383.902869][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 383.980436][ T13] vlan0: left allmulticast mode [ 384.005861][ T13] veth0_vlan: left allmulticast mode [ 384.012862][ T13] vlan0: left promiscuous mode [ 384.020230][ T13] veth1_macvtap: left promiscuous mode [ 384.027939][ T13] veth1_vlan: left promiscuous mode [ 384.787207][ T13] team0 (unregistering): Port device team_slave_1 removed [ 384.803398][ T13] team0 (unregistering): Port device team_slave_0 removed [ 384.810740][ T51] Bluetooth: hci5: command tx timeout [ 385.000851][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 385.023269][T16060] hsr_slave_0: entered promiscuous mode [ 385.030556][T16060] hsr_slave_1: entered promiscuous mode [ 385.096340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.104406][ C1] lec:lec_tx_timeout: lec0 [ 385.157071][T16325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2887'. [ 385.321357][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 385.355551][T16339] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2889'. [ 385.405685][T16334] bond0: entered promiscuous mode [ 385.442499][T16334] bond0: left promiscuous mode [ 385.497845][T16338] netlink: 'syz.1.2890': attribute type 4 has an invalid length. [ 385.549215][T16355] netlink: 'syz.1.2890': attribute type 4 has an invalid length. [ 385.651748][T16060] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 385.775516][ T13] IPVS: stop unused estimator thread 0... [ 385.829600][T16060] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 385.959957][T16363] bond8: Unable to set down delay as MII monitoring is disabled [ 385.972247][T16363] bond8 (unregistering): Released all slaves [ 386.234490][T16060] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 386.281406][T16375] syzkaller0: entered promiscuous mode [ 386.292242][T16375] syzkaller0: entered allmulticast mode [ 386.390952][T16060] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 386.581340][T16387] netlink: 'syz.1.2896': attribute type 4 has an invalid length. [ 386.589921][T16387] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2896'. [ 386.725184][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 386.756461][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2900'. [ 386.785193][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 386.825705][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 386.839615][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 386.849959][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 386.877037][ T51] Bluetooth: hci5: command tx timeout [ 387.021748][T16408] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 387.050834][T16060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.094040][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.114834][T16421] netlink: 'syz.2.2904': attribute type 1 has an invalid length. [ 387.144554][T16060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.173458][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.208023][T16060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.236230][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.266917][T16426] wg1: entered promiscuous mode [ 387.267226][T16429] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 387.279704][T16426] wg1: entered allmulticast mode [ 387.291507][T16060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.316241][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.605170][T16450] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 387.630360][T16450] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 387.673621][T16454] openvswitch: netlink: IP tunnel dst address not specified [ 387.689710][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.758103][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.800928][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.808183][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.852828][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.860074][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.354038][T16492] netlink: 'syz.4.2920': attribute type 2 has an invalid length. [ 388.600865][T16509] FAULT_INJECTION: forcing a failure. [ 388.600865][T16509] name failslab, interval 1, probability 0, space 0, times 0 [ 388.614937][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.671859][T16509] CPU: 1 UID: 0 PID: 16509 Comm: syz.4.2924 Not tainted syzkaller #0 PREEMPT(full) [ 388.671889][T16509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 388.671902][T16509] Call Trace: [ 388.671911][T16509] [ 388.671920][T16509] dump_stack_lvl+0xe8/0x150 [ 388.671958][T16509] should_fail_ex+0x412/0x560 [ 388.672010][T16509] should_failslab+0xa8/0x100 [ 388.672042][T16509] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 388.672070][T16509] ? __alloc_skb+0x1d0/0x7d0 [ 388.672095][T16509] ? __local_bh_enable_ip+0xd0/0x130 [ 388.672130][T16509] __alloc_skb+0x1d0/0x7d0 [ 388.672162][T16509] netlink_dump+0x1ef/0xe80 [ 388.672196][T16509] ? rcu_is_watching+0x15/0xb0 [ 388.672230][T16509] ? __pfx_netlink_dump+0x10/0x10 [ 388.672252][T16509] ? __kasan_kmalloc+0x93/0xb0 [ 388.672299][T16509] ? netlink_lookup+0x30/0x200 [ 388.672320][T16509] ? netlink_lookup+0x30/0x200 [ 388.672350][T16509] __netlink_dump_start+0x5cb/0x7e0 [ 388.672385][T16509] inet_diag_rcv_msg_compat+0x214/0x420 [ 388.672422][T16509] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 388.672467][T16509] ? __pfx___dev_queue_xmit+0x10/0x10 [ 388.672504][T16509] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 388.672535][T16509] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 388.672565][T16509] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 388.672603][T16509] ? sock_diag_rcv_msg+0x188/0x600 [ 388.672634][T16509] sock_diag_rcv_msg+0x4cc/0x600 [ 388.672664][T16509] netlink_rcv_skb+0x232/0x4b0 [ 388.672690][T16509] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 388.672718][T16509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.672756][T16509] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.672791][T16509] netlink_unicast+0x80f/0x9b0 [ 388.672823][T16509] ? __pfx_netlink_unicast+0x10/0x10 [ 388.672848][T16509] ? netlink_sendmsg+0x650/0xb40 [ 388.672872][T16509] ? skb_put+0x11b/0x210 [ 388.672903][T16509] netlink_sendmsg+0x813/0xb40 [ 388.672940][T16509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.672970][T16509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.673007][T16509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.673037][T16509] ____sys_sendmsg+0x972/0x9f0 [ 388.673079][T16509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.673120][T16509] ? import_iovec+0x73/0xa0 [ 388.673151][T16509] ___sys_sendmsg+0x2a5/0x360 [ 388.673188][T16509] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.673259][T16509] ? __fget_files+0x2a/0x420 [ 388.673279][T16509] ? __fget_files+0x3a0/0x420 [ 388.673312][T16509] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.673346][T16509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.673389][T16509] ? __pfx_ksys_write+0x10/0x10 [ 388.673438][T16509] do_syscall_64+0x14d/0xf80 [ 388.673478][T16509] ? trace_irq_disable+0x3b/0x150 [ 388.673497][T16509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.673520][T16509] ? clear_bhb_loop+0x40/0x90 [ 388.673547][T16509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.673570][T16509] RIP: 0033:0x7f33c779c819 [ 388.673591][T16509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.673611][T16509] RSP: 002b:00007f33c86e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.673634][T16509] RAX: ffffffffffffffda RBX: 00007f33c7a16090 RCX: 00007f33c779c819 [ 388.673650][T16509] RDX: 0000000000008850 RSI: 0000200000000040 RDI: 000000000000000c [ 388.673664][T16509] RBP: 00007f33c86e8090 R08: 0000000000000000 R09: 0000000000000000 [ 388.673678][T16509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.673691][T16509] R13: 00007f33c7a16128 R14: 00007f33c7a16090 R15: 00007ffdc1b95278 [ 388.673723][T16509] [ 389.050612][T16060] veth0_vlan: entered promiscuous mode [ 389.062952][T16060] veth1_vlan: entered promiscuous mode [ 389.077768][ T51] Bluetooth: hci5: command tx timeout [ 389.156571][T16060] veth0_macvtap: entered promiscuous mode [ 389.166915][T16060] veth1_macvtap: entered promiscuous mode [ 389.203612][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.234835][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.308847][ T8688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.323591][ T8688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.337636][ T8688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.348351][ T8688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.503157][T16525] netlink: 'syz.3.2927': attribute type 1 has an invalid length. [ 389.650946][T16525] 8021q: adding VLAN 0 to HW filter on device bond8 [ 389.695841][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.719308][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.729103][T16542] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 389.777457][T16529] bond9: option all_slaves_active: invalid value (222) [ 389.793479][T16529] bond9 (unregistering): Released all slaves [ 389.822288][T16540] netlink: 'syz.2.2929': attribute type 2 has an invalid length. [ 389.932514][T10896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.946839][T10896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.206690][T16567] __nla_validate_parse: 66 callbacks suppressed [ 390.206715][T16567] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.2933'. [ 390.465955][T16583] netlink: 'syz.0.2938': attribute type 1 has an invalid length. [ 390.485109][T16585] netlink: 'syz.4.2937': attribute type 25 has an invalid length. [ 390.510661][T16583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2938'. [ 390.526481][T16585] netlink: 'syz.4.2937': attribute type 28 has an invalid length. [ 391.161963][T16622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2948'. [ 391.188432][T16615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2946'. [ 391.455583][T16636] sock: sock_set_timeout: `syz.2.2952' (pid 16636) tries to set negative timeout [ 391.785352][T16656] bridge0: port 3(gretap0) entered blocking state [ 391.811658][T16656] bridge0: port 3(gretap0) entered disabled state [ 391.833634][T16656] gretap0: entered allmulticast mode [ 391.850522][T16656] gretap0: entered promiscuous mode [ 391.856528][T16656] bridge0: port 3(gretap0) entered blocking state [ 391.863151][T16656] bridge0: port 3(gretap0) entered forwarding state [ 392.111384][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.122359][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.135557][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.144849][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.152890][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.195167][T16676] nft_compat: unsupported protocol 5 [ 392.203091][T16676] nft_compat: unsupported protocol 5 [ 392.210236][T16676] nft_compat: unsupported protocol 5 [ 392.215877][T16676] nft_compat: unsupported protocol 5 [ 392.221599][T16676] nft_compat: unsupported protocol 5 [ 392.228376][T16676] nft_compat: unsupported protocol 5 [ 392.234708][T16676] nft_compat: unsupported protocol 5 [ 392.240636][T16676] nft_compat: unsupported protocol 5 [ 392.267766][T16676] nft_compat: unsupported protocol 5 [ 392.289238][T16676] nft_compat: unsupported protocol 5 [ 392.303892][T16671] hsr0 speed is unknown, defaulting to 1000 [ 392.309321][T16676] nft_compat: unsupported protocol 5 [ 392.333169][T16676] nft_compat: unsupported protocol 5 [ 392.351615][T16676] nft_compat: unsupported protocol 5 [ 392.369214][T16676] nft_compat: unsupported protocol 5 [ 392.382785][T16676] nft_compat: unsupported protocol 5 [ 392.395364][T16676] nft_compat: unsupported protocol 5 [ 392.408740][T16676] nft_compat: unsupported protocol 5 [ 392.420337][T16676] nft_compat: unsupported protocol 5 [ 392.432722][T16676] nft_compat: unsupported protocol 5 [ 392.448969][T16676] nft_compat: unsupported protocol 5 [ 392.461975][T16676] nft_compat: unsupported protocol 5 [ 392.480114][T16676] nft_compat: unsupported protocol 5 [ 392.491386][T16676] nft_compat: unsupported protocol 5 [ 392.516829][T16676] nft_compat: unsupported protocol 5 [ 392.522541][T16676] nft_compat: unsupported protocol 5 [ 392.569680][T16676] nft_compat: unsupported protocol 5 [ 392.575171][T16676] nft_compat: unsupported protocol 5 [ 392.598803][T16676] nft_compat: unsupported protocol 5 [ 392.604413][T16676] nft_compat: unsupported protocol 5 [ 392.641399][T16676] nft_compat: unsupported protocol 5 [ 392.656698][T16676] nft_compat: unsupported protocol 5 [ 392.662266][T16676] nft_compat: unsupported protocol 5 [ 392.723296][T16676] nft_compat: unsupported protocol 5 [ 392.789955][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2966'. [ 392.914910][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.929966][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.030285][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.045037][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.077870][T16671] chnl_net:caif_netlink_parms(): no params data found [ 393.122124][T16706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2970'. [ 393.170933][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.181510][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.249962][T16708] syzkaller0: entered promiscuous mode [ 393.255691][T16708] syzkaller0: entered allmulticast mode [ 393.273725][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.285519][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.302940][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.310714][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.318995][T16671] bridge_slave_0: entered allmulticast mode [ 393.328523][T16671] bridge_slave_0: entered promiscuous mode [ 393.339549][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.347094][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.354702][T16671] bridge_slave_1: entered allmulticast mode [ 393.363118][T16671] bridge_slave_1: entered promiscuous mode [ 393.423706][T16671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.438679][T16671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.503520][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 57657 - 0 [ 393.541142][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 57657 - 0 [ 393.552142][T16671] team0: Port device team_slave_0 added [ 393.563295][T16671] team0: Port device team_slave_1 added [ 393.610640][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 57657 - 0 [ 393.662596][T10896] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 57657 - 0 [ 393.672863][T16671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.698174][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.724394][T16671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.749666][ T12] bridge_slave_1: left allmulticast mode [ 393.758037][ T12] bridge_slave_1: left promiscuous mode [ 393.765332][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.781341][ T12] bridge_slave_0: left allmulticast mode [ 393.790134][ T12] bridge_slave_0: left promiscuous mode [ 393.796159][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.833226][ T12] tipc: Resetting bearer [ 393.981704][ T12] erspan0 (unregistering): left promiscuous mode [ 394.025081][ T12] dvmrp0 (unregistering): left allmulticast mode [ 394.043141][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 394.201957][ T12] tipc: Disabling bearer [ 394.237818][ T51] Bluetooth: hci2: command tx timeout [ 394.304069][ T12] bond3 (unregistering): (slave bridge3): Releasing active interface [ 394.312385][ T12] bridge3 (unregistering): left promiscuous mode [ 394.319899][ T12] bridge3 (unregistering): left allmulticast mode [ 394.381714][ T12] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 394.440605][ T12] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 394.563347][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.572412][ T12] bond_slave_0: left promiscuous mode [ 394.579500][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.588568][ T12] bond_slave_1: left promiscuous mode [ 394.595346][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 394.605041][ T12] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 394.612633][ T12] bond0 (unregistering): Released all slaves [ 394.623791][ T12] bond1 (unregistering): Released all slaves [ 394.639739][ T12] bond2 (unregistering): Released all slaves [ 394.662281][ T12] bond3 (unregistering): Released all slaves [ 394.684201][ T12] bond4 (unregistering): Released all slaves [ 394.708660][ T12] bond5 (unregistering): Released all slaves [ 394.741842][ T12] bond6 (unregistering): (slave veth7): Releasing active interface [ 394.754029][ T12] bond6 (unregistering): Released all slaves [ 394.773405][ T12] bond7 (unregistering): Released all slaves [ 394.794669][ T12] bond8 (unregistering): Released all slaves [ 394.817023][ T12] bond9 (unregistering): Released all slaves [ 394.832622][ T12] bond10 (unregistering): Released all slaves [ 394.849008][ T12] bond11 (unregistering): Released all slaves [ 394.869085][ T12] bond12 (unregistering): Released all slaves [ 394.884037][T16671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.894353][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.922214][T16671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.003403][T16671] hsr_slave_0: entered promiscuous mode [ 395.010599][T16671] hsr_slave_1: entered promiscuous mode [ 395.018065][T16671] debugfs: 'hsr0' already exists in 'hsr' [ 395.024010][T16671] Cannot create hsr debugfs directory [ 395.073415][ T12] tipc: Disabling bearer [ 395.088748][ T12] tipc: Left network mode [ 395.124665][ T12] IPVS: stopping backup sync thread 13587 ... [ 395.275301][T16671] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 395.340166][T16671] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 395.368133][ T12] hsr_slave_0: left promiscuous mode [ 395.374340][ T12] hsr_slave_1: left promiscuous mode [ 395.409482][ T12] team0 (unregistering): Port device batadv1 removed [ 395.511213][T16681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.523378][T16693] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 395.550908][T16726] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2975'. [ 395.715683][ T12] team0 (unregistering): Port device team_slave_1 removed [ 395.793486][ T12] team0 (unregistering): Port device team_slave_0 removed [ 396.055897][ T12] smc: removing net device team0 with user defined pnetid SYZ2 [ 396.083242][T16671] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 396.126472][T16746] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 396.135055][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'. [ 396.211450][T16671] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 396.317314][ T51] Bluetooth: hci2: command tx timeout [ 396.714616][T16671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.735022][T16671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.749465][T16671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.781943][T16671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.816843][T16671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.850837][T16671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.861159][T16671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.902532][T16671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.991413][T16785] netlink: 41 bytes leftover after parsing attributes in process `syz.1.2989'. [ 397.025642][T16785] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2989'. [ 397.082049][ T12] IPVS: stop unused estimator thread 0... [ 397.357015][T16812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2994'. [ 397.378695][T16812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2994'. [ 397.379820][T16671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.451358][T16671] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.511771][T16812] gretap1: entered promiscuous mode [ 397.518947][T16812] gretap1: entered allmulticast mode [ 397.569064][T16820] netlink: 'syz.0.2998': attribute type 4 has an invalid length. [ 397.594791][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.602054][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.638848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.646044][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.898368][T16836] hsr0 speed is unknown, defaulting to 1000 [ 397.959653][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3002'. [ 397.984493][T16843] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 398.396512][ T51] Bluetooth: hci2: command tx timeout [ 398.479345][T16857] syzkaller0: entered promiscuous mode [ 398.484977][T16857] syzkaller0: entered allmulticast mode [ 398.528603][T16856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.572150][T16671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.693392][T16868] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3007'. [ 398.789235][T16671] veth0_vlan: entered promiscuous mode [ 398.826106][T16671] veth1_vlan: entered promiscuous mode [ 398.923714][T16671] veth0_macvtap: entered promiscuous mode [ 399.007588][T16671] veth1_macvtap: entered promiscuous mode [ 399.067487][T16671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.101327][T16671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.153877][ T8687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.182680][ T8687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.220580][ T8687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.235292][ T8687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.253951][T16882] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3011'. [ 399.339237][T16883] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.417646][ T8685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.425543][ T8685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.516917][ T8688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.545855][ T8688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.651874][T16902] netlink: 'syz.4.3018': attribute type 10 has an invalid length. [ 399.660752][T16900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3017'. [ 399.685364][T16902] veth0_macvtap: left promiscuous mode [ 399.996585][T16919] xt_socket: unknown flags 0x50 [ 400.017276][T16922] netlink: 'syz.3.3022': attribute type 12 has an invalid length. [ 400.072633][T16923] openvswitch: netlink: IP tunnel dst address not specified [ 400.128058][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.138311][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.146306][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.155005][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.164029][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.323539][T16927] hsr0 speed is unknown, defaulting to 1000 [ 400.480817][ T5831] Bluetooth: hci2: command tx timeout [ 400.519805][T16945] netlink: 'syz.2.3028': attribute type 4 has an invalid length. [ 400.962563][T16963] __nla_validate_parse: 6 callbacks suppressed [ 400.962585][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 400.986023][T16963] netlink: 'syz.4.3033': attribute type 30 has an invalid length. [ 401.029872][T16962] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3033'. [ 401.305459][ T8687] bond0: (slave netdevsim0): Releasing backup interface [ 401.375634][T16982] hsr0 speed is unknown, defaulting to 1000 [ 401.383309][T16927] chnl_net:caif_netlink_parms(): no params data found [ 401.697913][T10849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 57657 - 0 [ 401.866114][T10896] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 57657 - 0 [ 401.945152][T10896] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 57657 - 0 [ 401.960250][T16927] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.979015][T16927] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.998338][T16927] bridge_slave_0: entered allmulticast mode [ 402.008563][T16927] bridge_slave_0: entered promiscuous mode [ 402.028226][T16927] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.037518][T16927] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.044803][T16927] bridge_slave_1: entered allmulticast mode [ 402.053237][T16927] bridge_slave_1: entered promiscuous mode [ 402.204631][T10896] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 57657 - 0 [ 402.229337][T16927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.239665][ T5831] Bluetooth: hci1: command tx timeout [ 402.249725][T17027] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3047'. [ 402.287847][ T8687] bridge_slave_1: left allmulticast mode [ 402.306691][ T8687] bridge_slave_1: left promiscuous mode [ 402.313518][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.367637][ T8687] bridge_slave_0: left promiscuous mode [ 402.373483][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.408149][T17033] netlink: 'syz.3.3051': attribute type 4 has an invalid length. [ 402.416072][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3051'. [ 402.544145][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3055'. [ 402.560153][T17043] openvswitch: netlink: IP tunnel dst address not specified [ 402.667740][T17050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.847386][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'. [ 403.063258][ T8687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.074660][ T8687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.084414][ T8687] bond0 (unregistering): Released all slaves [ 403.095379][ T8687] bond1 (unregistering): Released all slaves [ 403.112748][ T8687] bond2 (unregistering): Released all slaves [ 403.135912][ T8687] bond3 (unregistering): Released all slaves [ 403.154402][ T8687] bond4 (unregistering): Released all slaves [ 403.174930][ T8687] bond5 (unregistering): Released all slaves [ 403.191791][ T8687] bond6 (unregistering): Released all slaves [ 403.209007][ T8687] bond7 (unregistering): Released all slaves [ 403.229837][T16927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.239670][T17037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3053'. [ 403.288383][T17040] hsr0 speed is unknown, defaulting to 1000 [ 403.464050][ T8687] tipc: Disabling bearer [ 403.492621][ T8687] tipc: Disabling bearer [ 403.518112][ T8687] tipc: Left network mode [ 403.552920][T16927] team0: Port device team_slave_0 added [ 403.594431][T16927] team0: Port device team_slave_1 added [ 403.930559][T17081] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 403.931179][T16927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.962102][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.992187][T16927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.008342][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 404.040529][T16927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.048050][T17081] netlink: 'syz.3.3063': attribute type 12 has an invalid length. [ 404.061294][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.088423][T16927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.115724][T17081] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 404.317230][ T5831] Bluetooth: hci1: command tx timeout [ 404.341667][T16927] hsr_slave_0: entered promiscuous mode [ 404.357669][T16927] hsr_slave_1: entered promiscuous mode [ 404.364275][T16927] debugfs: 'hsr0' already exists in 'hsr' [ 404.371242][T16927] Cannot create hsr debugfs directory [ 404.475037][T17105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3068'. [ 404.555038][T17105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3068'. [ 404.813296][T17118] xt_hashlimit: size too large, truncated to 1048576 [ 404.888447][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 405.429229][ T8685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.474323][ T5959] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.482281][ T8685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.612653][ T8687] hsr_slave_1: left promiscuous mode [ 405.627397][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.679226][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.744802][ T8687] pimreg3 (unregistering): left allmulticast mode [ 405.786692][ T5959] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.799078][ T5959] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.224305][T17153] F: renamed from gre0 (while UP) [ 406.246099][T17153] F: entered allmulticast mode [ 406.396482][ T5831] Bluetooth: hci1: command tx timeout [ 406.502004][T17182] __nla_validate_parse: 4 callbacks suppressed [ 406.502025][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 406.560528][T16927] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 406.620262][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.634681][T17182] bond0: entered promiscuous mode [ 406.642891][T17182] bond_slave_0: entered promiscuous mode [ 406.649135][T17182] bond_slave_1: entered promiscuous mode [ 406.666102][T17182] bond0: left promiscuous mode [ 406.699661][T17182] bond_slave_0: left promiscuous mode [ 406.709957][T17182] bond_slave_1: left promiscuous mode [ 406.741591][T16927] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 406.874121][ T8687] IPVS: stop unused estimator thread 0... [ 406.941567][T16927] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 407.071521][T16927] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57657 - 0 [ 407.754578][T17233] tipc: Started in network mode [ 407.762141][T17233] tipc: Node identity 66eceb81be51, cluster identity 4711 [ 407.772628][T17233] tipc: Enabled bearer , priority 0 [ 407.794900][T17239] tipc: Enabling of bearer rejected, already enabled [ 407.811385][T17238] syzkaller0: entered promiscuous mode [ 407.824842][T17241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3100'. [ 407.834598][T17238] syzkaller0: entered allmulticast mode [ 407.841180][T17241] netlink: 'syz.0.3100': attribute type 7 has an invalid length. [ 407.859817][T16927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.867695][T17241] netlink: 'syz.0.3100': attribute type 8 has an invalid length. [ 407.881740][T16927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.889243][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 407.900958][T16927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.913988][T16927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.932339][T17239] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3098'. [ 407.957698][T17245] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 408.125029][T17239] +: renamed from syzkaller0 [ 408.131567][T17239] tipc: Disabling bearer [ 408.140615][T16927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.165557][T16927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.223968][T17245] bond10: entered promiscuous mode [ 408.233162][T17245] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.273114][T17248] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.281918][T17248] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 408.293351][T17248] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 408.311064][T17248] bond10: (slave vti0): making interface the new active one [ 408.344796][T17248] vti0: entered promiscuous mode [ 408.358192][T17248] bond10: (slave vti0): Enslaving as an active interface with an up link [ 408.419803][T16927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.464296][T16927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.476959][ T5831] Bluetooth: hci1: command tx timeout [ 408.596121][T17275] netlink: 'syz.2.3104': attribute type 1 has an invalid length. [ 408.729070][T17283] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 408.779560][T17283] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 408.938938][T16927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.993972][T17293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.017286][T17293] SET target dimension over the limit! [ 409.049886][T16927] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.077673][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.084901][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.136196][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'. [ 409.147019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.154217][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.226249][T17307] blkio.reset_stats is deprecated [ 409.276942][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'. [ 409.335914][T17315] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 409.345390][T17315] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3113'. [ 409.450177][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 409.545864][T17329] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 409.568028][T17326] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 409.677763][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.012201][T17353] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3121'. [ 410.147371][T17344] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3119'. [ 410.312595][T16927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.448253][T16927] veth0_vlan: entered promiscuous mode [ 410.484861][T16927] veth1_vlan: entered promiscuous mode [ 410.584419][T16927] veth0_macvtap: entered promiscuous mode [ 410.618642][T16927] veth1_macvtap: entered promiscuous mode [ 410.680916][T16927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.703782][T16927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.750676][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.803920][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.818435][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.890994][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.129519][ T8685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.153666][ T8685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.253042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.269075][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.315204][T17415] netlink: 'syz.4.3136': attribute type 1 has an invalid length. [ 411.801445][T17438] tipc: Started in network mode [ 411.846687][T17438] tipc: Node identity 16eca32d231a, cluster identity 4711 [ 411.854043][T17438] tipc: Enabled bearer , priority 0 [ 411.932431][T17437] tipc: Enabling of bearer rejected, already enabled [ 412.048125][T17443] netlink: 'syz.2.3141': attribute type 10 has an invalid length. [ 412.102141][T17437] tipc: Disabling bearer [ 412.188701][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.200928][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.212362][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.230047][T17443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.246511][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.263247][T17443] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 412.272151][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.303964][T17453] __nla_validate_parse: 2 callbacks suppressed [ 412.303984][T17453] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3142'. [ 412.396821][T17450] hsr0 speed is unknown, defaulting to 1000 [ 412.500328][T17456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.602090][T17464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3146'. [ 412.836483][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3147'. [ 412.892791][T17475] TCP: TCP_TX_DELAY enabled [ 412.937286][T17474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3147'. [ 413.130365][T17450] chnl_net:caif_netlink_parms(): no params data found [ 413.272953][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 413.363978][T17499] syzkaller1: entered promiscuous mode [ 413.375155][T17499] syzkaller1: entered allmulticast mode [ 413.625482][T17526] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 413.654170][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3157'. [ 413.688599][T17450] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.695964][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.719327][T17450] bridge_slave_0: entered allmulticast mode [ 413.734167][T17450] bridge_slave_0: entered promiscuous mode [ 413.753106][T17450] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.771321][T17529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3157'. [ 413.779480][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.790879][T17450] bridge_slave_1: entered allmulticast mode [ 413.802152][T17450] bridge_slave_1: entered promiscuous mode [ 413.817215][T17526] netlink: 'syz.4.3157': attribute type 5 has an invalid length. [ 413.852086][T17529] nbd: device at index 64 is going down [ 413.990077][T17532] syzkaller0: entered promiscuous mode [ 414.005264][T17532] syzkaller0: entered allmulticast mode [ 414.100030][T17450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.161389][T17450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.200701][T17546] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3160'. [ 414.227795][T17450] team0: Port device team_slave_0 added [ 414.236991][T17450] team0: Port device team_slave_1 added [ 414.282686][T17450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.295159][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.326117][ T5831] Bluetooth: hci0: command tx timeout [ 414.333355][T17450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.353666][T17450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.360988][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.389619][T17450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.467509][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c304400: rx timeout, send abort [ 414.476352][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c304400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 414.667729][T17562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3167'. [ 416.000596][T17450] hsr_slave_0: entered promiscuous mode [ 416.009363][T17450] hsr_slave_1: entered promiscuous mode [ 416.020486][T17567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 416.030034][T17450] debugfs: 'hsr0' already exists in 'hsr' [ 416.035822][T17450] Cannot create hsr debugfs directory [ 416.090335][T17567] syzkaller0: entered promiscuous mode [ 416.103070][T17567] syzkaller0: entered allmulticast mode [ 416.298527][T17581] hsr0 speed is unknown, defaulting to 1000 [ 416.397580][ T5831] Bluetooth: hci0: command tx timeout [ 416.435516][T17587] syzkaller0: entered promiscuous mode [ 416.446923][T17587] syzkaller0: entered allmulticast mode [ 416.636085][T17587] 0: renamed from hsr_slave_1 (while UP) [ 416.655778][T17587] 0: entered allmulticast mode [ 416.667389][T17587] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 416.903999][T17603] tipc: New replicast peer: 255.255.255.255 [ 416.911249][T17603] tipc: Enabled bearer , priority 10 [ 416.987223][T17608] tipc: Disabling bearer [ 417.013786][T17611] netlink: 'syz.0.3181': attribute type 7 has an invalid length. [ 417.042711][T17611] netlink: 'syz.0.3181': attribute type 8 has an invalid length. [ 417.222043][T17622] openvswitch: netlink: IPv6 tunnel dst address is zero [ 417.352261][T17628] __nla_validate_parse: 7 callbacks suppressed [ 417.352286][T17628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3185'. [ 417.408746][T17450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 417.431135][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.450094][T17450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 417.470797][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.479711][T17450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 417.495604][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.517988][T17450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.542729][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.623434][T17636] dvmrp0: entered allmulticast mode [ 417.810725][T17450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.836556][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.863364][T17450] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.881837][T17656] xt_hashlimit: size too large, truncated to 1048576 [ 417.923284][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.930842][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.998430][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 418.012362][ T8685] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.019650][ T8685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.477121][ T5831] Bluetooth: hci0: command tx timeout [ 419.024928][T17676] netlink: 'syz.4.3198': attribute type 16 has an invalid length. [ 419.056903][T17676] netlink: 'syz.4.3198': attribute type 17 has an invalid length. [ 419.095438][T17676] bridge0: port 3(syz_tun) entered blocking state [ 419.102126][T17676] bridge0: port 3(syz_tun) entered listening state [ 419.151717][T17676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.311414][T17683] syzkaller0: entered promiscuous mode [ 419.317045][T17683] syzkaller0: entered allmulticast mode [ 419.504524][T17702] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 419.561139][T17707] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 420.560380][ T5831] Bluetooth: hci0: command tx timeout [ 421.246759][T17450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.394168][T17450] veth0_vlan: entered promiscuous mode [ 421.423915][T17450] veth1_vlan: entered promiscuous mode [ 421.508695][T17450] veth0_macvtap: entered promiscuous mode [ 421.532563][T17450] veth1_macvtap: entered promiscuous mode [ 421.589511][T17450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.623248][T17450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.645067][T17747] netlink: 'syz.1.3215': attribute type 1 has an invalid length. [ 421.664057][ T8672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.696661][ T8672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.771768][T17754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3217'. [ 421.797021][ T8672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.819274][ T8672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.884727][T17748] bond1: (slave geneve2): making interface the new active one [ 421.906247][T17748] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 421.937494][ T8685] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 421.950788][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 421.957275][ T8685] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.081933][ T8685] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.159640][ T8685] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.349017][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.358719][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.406636][T17778] lo: entered allmulticast mode [ 422.437998][T17778] tunl0: entered allmulticast mode [ 422.455877][T17778] gre0: entered allmulticast mode [ 422.475980][T17778] gretap0: entered allmulticast mode [ 422.496874][T17778] erspan0: entered allmulticast mode [ 422.519872][T17778] ip_vti0: entered allmulticast mode [ 422.529849][T17778] ip6_vti0: entered allmulticast mode [ 422.556652][T17778] sit0: entered allmulticast mode [ 422.577817][T17778] ip6tnl0: entered allmulticast mode [ 422.598170][T17778] ip6gre0: entered allmulticast mode [ 422.619639][T17778] syz_tun: entered allmulticast mode [ 422.641652][T17778] ip6gretap0: entered allmulticast mode [ 422.677663][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.685416][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.703119][T17778] bridge0: entered allmulticast mode [ 422.724886][T17778] vcan0: entered allmulticast mode [ 422.732026][T17778] bond0: entered allmulticast mode [ 422.739368][T17778] bond_slave_0: entered allmulticast mode [ 422.745582][T17778] bond_slave_1: entered allmulticast mode [ 422.761214][T17778] team0: entered allmulticast mode [ 422.770393][T17778] team_slave_0: entered allmulticast mode [ 422.782436][T17778] team_slave_1: entered allmulticast mode [ 422.817410][T17778] dummy0: entered allmulticast mode [ 422.840256][T17778] nlmon0: entered allmulticast mode [ 422.848612][T17778] caif0: entered allmulticast mode [ 422.854087][T17778] batadv0: entered allmulticast mode [ 422.863326][T17778] vxcan0: entered allmulticast mode [ 422.873679][T17778] vxcan1: entered allmulticast mode [ 422.886056][T17778] veth0: entered allmulticast mode [ 422.894837][T17778] veth1: entered allmulticast mode [ 422.905074][T17778] wg0: entered allmulticast mode [ 422.913006][T17778] wg1: entered allmulticast mode [ 422.925355][T17778] wg2: entered allmulticast mode [ 422.934905][T17778] veth0_to_bridge: entered allmulticast mode [ 422.950081][T17778] veth1_to_bridge: entered allmulticast mode [ 422.963329][T17778] veth0_to_bond: entered allmulticast mode [ 422.972649][T17778] veth1_to_bond: entered allmulticast mode [ 422.982130][T17778] veth0_to_team: entered allmulticast mode [ 422.993681][T17778] veth1_to_team: entered allmulticast mode [ 423.005223][T17778] veth0_to_batadv: entered allmulticast mode [ 423.017963][T17778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.025573][T17778] batadv_slave_0: entered allmulticast mode [ 423.036987][T17778] veth1_to_batadv: entered allmulticast mode [ 423.045721][T17778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.055677][T17778] batadv_slave_1: entered allmulticast mode [ 423.064793][T17778] xfrm0: entered allmulticast mode [ 423.072174][T17778] veth0_to_hsr: entered allmulticast mode [ 423.081232][T17778] hsr_slave_0: entered allmulticast mode [ 423.088917][T17778] veth1_to_hsr: entered allmulticast mode [ 423.098630][T17778] hsr_slave_1: entered allmulticast mode [ 423.107914][T17778] hsr0: entered allmulticast mode [ 423.115700][T17778] veth1_virt_wifi: entered allmulticast mode [ 423.125385][T17778] veth0_virt_wifi: entered allmulticast mode [ 423.135890][T17778] virt_wifi0: entered allmulticast mode [ 423.142455][T17778] veth1_vlan: entered allmulticast mode [ 423.151731][T17778] veth0_vlan: entered allmulticast mode [ 423.169850][T17778] vlan0: entered allmulticast mode [ 423.175218][T17778] vlan1: entered allmulticast mode [ 423.181108][T17778] macvlan0: entered allmulticast mode [ 423.189932][T17778] macvlan1: entered allmulticast mode [ 423.199924][T17778] ipvlan0: entered allmulticast mode [ 423.205427][T17778] ipvlan1: entered allmulticast mode [ 423.211242][T17778] veth1_macvtap: entered allmulticast mode [ 423.219678][T17778] veth0_macvtap: entered allmulticast mode [ 423.232075][T17778] macvtap0: entered allmulticast mode [ 423.241129][T17778] macsec0: entered allmulticast mode [ 423.250776][T17778] geneve0: entered allmulticast mode [ 423.259800][T17778] geneve1: entered allmulticast mode [ 423.276917][T17778] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 423.290194][T17778] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 423.304333][T17778] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 423.315298][T17778] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 423.339827][T17778] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 423.359233][T17778] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 423.369184][T17778] bond1: entered allmulticast mode [ 423.374533][T17778] geneve2: entered allmulticast mode [ 423.397979][ T8688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.416331][ T8688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.610888][ T8672] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.621564][T11767] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.629315][ T8672] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.704216][ T8672] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.723087][ T8672] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.777004][ T8672] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.785961][ T8672] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.821036][ T8672] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.842214][ T8672] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.940239][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 424.197740][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.222169][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.233205][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.241518][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.250315][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.258886][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.332649][T17820] hsr0 speed is unknown, defaulting to 1000 [ 424.707178][ T5834] bridge0: port 3(syz_tun) entered disabled state [ 424.785723][ T5834] syz_tun (unregistering): left allmulticast mode [ 424.826371][ T5834] syz_tun (unregistering): left promiscuous mode [ 424.832870][ T5834] bridge0: port 3(syz_tun) entered disabled state [ 425.031596][T17854] xt_cgroup: xt_cgroup: no path or classid specified [ 425.058500][T17854] netlink: 'syz.2.3243': attribute type 9 has an invalid length. [ 425.104928][T17820] chnl_net:caif_netlink_parms(): no params data found [ 425.300379][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 425.329104][T17820] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.336692][T17820] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.344063][T17820] bridge_slave_0: entered allmulticast mode [ 425.352149][T17820] bridge_slave_0: entered promiscuous mode [ 425.362037][T17820] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.369378][T17820] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.377549][T17820] bridge_slave_1: entered allmulticast mode [ 425.385918][T17876] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 425.392965][T17820] bridge_slave_1: entered promiscuous mode [ 425.464050][T17885] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3249'. [ 425.494625][T17820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.508473][T17820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.562528][T17820] team0: Port device team_slave_0 added [ 425.571507][T17820] team0: Port device team_slave_1 added [ 425.621109][T17820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.661433][T17820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.691950][T17820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.739954][T17820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.756604][T17820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.805032][T17820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.960686][T17820] hsr_slave_0: entered promiscuous mode [ 425.986914][T17820] hsr_slave_1: entered promiscuous mode [ 426.004253][T17820] debugfs: 'hsr0' already exists in 'hsr' [ 426.021571][T17820] Cannot create hsr debugfs directory [ 426.052068][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3257'. [ 426.261626][T17923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'. [ 426.316385][ T5831] Bluetooth: hci4: command tx timeout [ 426.339221][T17925] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3262'. [ 426.511017][T17820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.522801][T17820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.534100][T17820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0 [ 426.581303][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 426.601074][T17941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 426.669034][T17941] bond1: entered promiscuous mode [ 426.696852][T17941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.804595][T17820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.818453][T17820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.856984][T17820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0 [ 426.925013][T17946] bridge2: entered promiscuous mode [ 426.947636][T17946] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 427.021002][T17820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.054126][T17820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.086411][T17820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0 [ 427.119344][T17972] syzkaller0: entered promiscuous mode [ 427.125945][T17972] syzkaller0: entered allmulticast mode [ 427.257381][T17820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.272662][T17820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.287697][T17820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54384 - 0 [ 427.373587][T17989] netlink: 'syz.1.3278': attribute type 1 has an invalid length. [ 428.053978][T18024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3286'. [ 428.158211][T17820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.202470][T17820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.219250][T17820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.226181][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3287'. [ 428.250462][T17820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.271928][T17820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.297827][T17820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.305900][T17820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.343021][T17820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.405417][ T5831] Bluetooth: hci4: command tx timeout [ 428.532862][T18048] veth0: entered promiscuous mode [ 428.584797][T18046] veth0: left promiscuous mode [ 428.638887][T18053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.671568][T18058] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 428.776198][T17820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.831897][T17820] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.873412][ T8685] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.880687][ T8685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.952954][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.960228][ T8672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.190982][T18075] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 429.191895][T18074] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 429.240179][T18075] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.258837][T18080] netem: change failed [ 429.284605][T18074] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.524441][T17820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.875510][T18126] __nla_validate_parse: 3 callbacks suppressed [ 429.875533][T18126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 429.910174][T18126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 430.112079][T17820] veth0_vlan: entered promiscuous mode [ 430.134223][T17820] veth1_vlan: entered promiscuous mode [ 430.182360][T17820] veth0_macvtap: entered promiscuous mode [ 430.193453][T17820] veth1_macvtap: entered promiscuous mode [ 430.225099][T17820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.257550][T17820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.278248][T18146] bridge1: entered promiscuous mode [ 430.283640][T18146] bridge1: entered allmulticast mode [ 430.295548][T18146] team0: Port device bridge1 added [ 430.321169][ T8685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.335991][ T8685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.359896][ T8685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.370838][ T8685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.480160][ T5831] Bluetooth: hci4: command tx timeout [ 430.512488][T18155] syzkaller0: entered promiscuous mode [ 430.520423][T18155] syzkaller0: entered allmulticast mode [ 430.571965][T10849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.595825][T10849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.648096][ T8672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.660925][ T8672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.850813][T18172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3322'. [ 430.909779][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3323'. [ 431.055911][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 431.087786][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3324'. [ 431.184619][T18182] netlink: 'syz.2.3325': attribute type 2 has an invalid length. [ 431.213042][T18182] 9: entered promiscuous mode [ 431.291556][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3327'. [ 431.316595][T18188] bridge0: entered promiscuous mode [ 431.329087][T18188] macsec1: entered promiscuous mode [ 431.334554][T18188] macsec1: entered allmulticast mode [ 431.353228][T18188] bridge0: entered allmulticast mode [ 431.360324][T18188] bridge0: port 4(macsec1) entered blocking state [ 431.367436][T18188] bridge0: port 4(macsec1) entered disabled state [ 431.385838][T18188] bridge0: left allmulticast mode [ 431.391819][T18188] bridge0: left promiscuous mode [ 431.459638][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3327'. [ 431.504273][T18188] bridge0: entered promiscuous mode [ 431.513551][T18188] macsec1: entered promiscuous mode [ 431.520041][T18188] macsec1: entered allmulticast mode [ 431.550193][T18188] bridge0: entered allmulticast mode [ 431.580058][T18188] bridge0: port 4(macsec1) entered blocking state [ 431.607933][T18188] bridge0: port 4(macsec1) entered disabled state [ 431.630946][T18188] bridge0: left allmulticast mode [ 431.636415][T18188] bridge0: left promiscuous mode [ 431.663601][T18204] mac80211_hwsim hwsim32 : renamed from wlan1 [ 431.697384][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3327'. [ 431.739128][T18188] bridge0: entered promiscuous mode [ 431.757704][T18188] macsec1: entered promiscuous mode [ 431.763673][T18188] macsec1: entered allmulticast mode [ 431.814533][T18188] bridge0: entered allmulticast mode [ 431.822056][T18188] bridge0: port 4(macsec1) entered blocking state [ 431.838384][T18188] bridge0: port 4(macsec1) entered disabled state [ 431.868046][T18188] bridge0: left allmulticast mode [ 431.881391][T18188] bridge0: left promiscuous mode [ 431.894277][T18219] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3334'. [ 431.948874][T18218] bridge_slave_0: invalid flags given to default FDB implementation [ 432.017633][T18188] bridge0: entered promiscuous mode [ 432.053684][T18188] macsec1: entered promiscuous mode [ 432.070186][T18188] macsec1: entered allmulticast mode [ 432.107163][T18188] bridge0: entered allmulticast mode [ 432.121285][T18188] bridge0: port 4(macsec1) entered blocking state [ 432.142229][T18188] bridge0: port 4(macsec1) entered disabled state [ 432.158394][T18188] bridge0: left allmulticast mode [ 432.168357][T18188] bridge0: left promiscuous mode [ 432.223444][T18226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.306729][T18237] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 432.399637][T18244] tipc: Enabled bearer , priority 24 [ 432.407042][T18244] netlink: 'syz.1.3343': attribute type 32 has an invalid length. [ 432.460472][T18244] bond4: option coupled_control: invalid value (64) [ 432.472253][T18244] bond4 (unregistering): Released all slaves [ 432.564537][ T51] Bluetooth: hci4: command tx timeout [ 432.573877][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.612535][T18257] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 432.627739][T18256] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 432.700119][T18257] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 432.708197][T18256] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 432.803032][T18256] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 433.409009][T18299] netlink: 'syz.1.3359': attribute type 1 has an invalid length. [ 433.450229][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.520548][T11765] tipc: Node number set to 905356077 [ 433.875177][T18328] ksmbd: Unknown IPC event: 1, ignore. [ 433.927439][T18331] IPv4: Oversized IP packet from 127.202.26.0 [ 434.071768][T18342] bond1: entered allmulticast mode [ 434.094307][T18342] bridge1: entered promiscuous mode [ 434.100046][T18342] bridge1: entered allmulticast mode [ 434.111153][T18342] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 434.310790][T18357] netlink: 'syz.3.3377': attribute type 3 has an invalid length. [ 434.368913][T18357] netlink: 'syz.3.3377': attribute type 10 has an invalid length. [ 434.441581][T18357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 434.476558][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.640122][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 434.775532][ T8672] bond0: (slave bond_slave_0): interface is now down [ 434.793058][ T8672] bond0: (slave bond_slave_1): interface is now down [ 435.085400][T18408] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 435.107414][T18410] __nla_validate_parse: 14 callbacks suppressed [ 435.107436][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3391'. [ 435.133686][T18413] netlink: 79 bytes leftover after parsing attributes in process `syz.1.3392'. [ 435.144172][T18416] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3392'. [ 435.155172][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3391'. [ 435.175763][T18415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.197870][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3391'. [ 435.207940][T18415] batadv_slave_1: entered allmulticast mode [ 435.565491][T18433] syzkaller0: entered promiscuous mode [ 435.574502][T18433] syzkaller0: entered allmulticast mode [ 435.603544][T18446] x_tables: duplicate underflow at hook 2 [ 435.814415][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'. [ 435.825849][T18457] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 435.918981][T18464] bond4: (slave gretap1): making interface the new active one [ 435.958880][T18464] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 436.015039][T18466] macvlan2: entered promiscuous mode [ 436.020812][T18466] macvlan2: entered allmulticast mode [ 436.027248][T18466] bond4: entered promiscuous mode [ 436.033903][T18466] gretap1: entered promiscuous mode [ 436.040286][T18466] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.048839][T18466] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 436.068951][T18466] bond4: left promiscuous mode [ 436.073875][T18466] gretap1: left promiscuous mode [ 436.099781][T18475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.121168][T18475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.268831][T18484] validate_nla: 1 callbacks suppressed [ 436.268852][T18484] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 436.368711][T18484] bond5: entered promiscuous mode [ 436.374342][T18484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.419455][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'. [ 436.446195][T18490] bond5: (slave bridge2): making interface the new active one [ 436.454027][T18490] bridge2: entered promiscuous mode [ 436.462630][T18501] netlink: 'syz.0.3416': attribute type 32 has an invalid length. [ 436.471124][T18490] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 436.486192][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 436.498035][T18495] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 436.514079][T18495] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 436.642090][T18501] bond2: option coupled_control: invalid value (192) [ 436.671471][T18501] bond2 (unregistering): Released all slaves [ 437.004846][T18520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3423'. [ 437.018749][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 437.365515][T18526] syzkaller0: entered promiscuous mode [ 437.371966][T18526] syzkaller0: entered allmulticast mode [ 437.528316][T18555] xt_HMARK: spi-set and port-set can't be combined [ 439.444370][ T6268] lec:lec_start_xmit: lec0:No lecd attached [ 439.629115][ T5831] block nbd2: Receive control failed (result -107) [ 439.658548][T18605] nbd2: detected capacity change from 0 to 127 [ 439.691641][T18615] block nbd2: Dead connection, failed to find a fallback [ 439.713901][T18615] block nbd2: shutting down sockets [ 439.727903][T18615] blk_print_req_error: 286 callbacks suppressed [ 439.727924][T18615] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 439.744349][T18615] buffer_io_error: 286 callbacks suppressed [ 439.744367][T18615] Buffer I/O error on dev nbd2, logical block 0, async page read [ 439.758999][T18615] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 439.770373][T18615] Buffer I/O error on dev nbd2, logical block 1, async page read [ 439.801041][T18615] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 439.855447][T18615] Buffer I/O error on dev nbd2, logical block 2, async page read [ 439.895014][T18615] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 439.909204][T18615] Buffer I/O error on dev nbd2, logical block 3, async page read [ 439.929088][T18615] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 439.959329][T18625] tipc: Enabling of bearer rejected, failed to enable media [ 439.966894][T18615] Buffer I/O error on dev nbd2, logical block 0, async page read [ 439.998495][T18615] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.008559][T18615] Buffer I/O error on dev nbd2, logical block 1, async page read [ 440.055453][T18615] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.075266][T18615] Buffer I/O error on dev nbd2, logical block 2, async page read [ 440.119293][T18615] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.151524][T18615] Buffer I/O error on dev nbd2, logical block 3, async page read [ 440.175484][T18615] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.185538][T18640] x9: renamed from bridge_slave_0 [ 440.215736][T18615] Buffer I/O error on dev nbd2, logical block 0, async page read [ 440.248260][T18615] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 440.283309][T18615] Buffer I/O error on dev nbd2, logical block 1, async page read [ 440.308188][T18615] ldm_validate_partition_table(): Disk read failed. [ 440.346400][T18615] Dev nbd2: unable to read RDB block 0 [ 440.352656][T18615] nbd2: unable to read partition table [ 440.382373][T18615] ldm_validate_partition_table(): Disk read failed. [ 440.400677][T18615] Dev nbd2: unable to read RDB block 0 [ 440.426426][T18615] nbd2: unable to read partition table [ 440.535685][T18654] syzkaller1: entered promiscuous mode [ 440.543624][T18654] syzkaller1: entered allmulticast mode [ 440.813109][T18674] netlink: 'syz.3.3463': attribute type 4 has an invalid length. [ 441.021399][T18690] netlink: 'syz.3.3466': attribute type 21 has an invalid length. [ 441.032329][T18690] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 441.063066][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 441.213415][T18696] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 441.288764][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 441.314581][T18704] batman_adv: batadv0: Adding interface: dummy0 [ 441.322131][T18704] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.349022][T18704] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 441.512755][T18715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3474'. [ 441.548074][T18717] syzkaller0: entered promiscuous mode [ 441.553630][T18717] syzkaller0: entered allmulticast mode [ 441.592399][T18717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.639152][T18726] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 441.778484][T18735] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 441.887981][T18732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.944136][T18735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.020744][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 442.073910][T18740] gretap0: left allmulticast mode [ 442.092478][T18740] gretap0: left promiscuous mode [ 442.102189][T18744] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 442.120765][T18740] bridge0: port 3(gretap0) entered disabled state [ 442.133124][T18740] bridge_slave_1: left allmulticast mode [ 442.152041][T18740] bridge_slave_1: left promiscuous mode [ 442.165745][T18749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.179277][T18749] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3483'. [ 442.200761][T18740] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.209000][T18751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3485'. [ 442.231122][T18740] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.243265][T18751] netlink: 193712 bytes leftover after parsing attributes in process `syz.4.3485'. [ 442.276969][T18754] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3486'. [ 442.364650][T18758] vcan1: entered promiscuous mode [ 442.386531][T18758] vcan1: entered allmulticast mode [ 442.451418][T18754] vcan1: entered promiscuous mode [ 442.480164][ T12] bond0: (slave wlan1): interface is now down [ 442.488744][T18754] vcan1: entered allmulticast mode [ 442.538930][T18763] netlink: 'syz.0.3488': attribute type 2 has an invalid length. [ 442.547467][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'. [ 442.628652][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3489'. [ 442.881320][T18786] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 442.958571][T18790] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 443.602750][T18825] netlink: 'syz.4.3508': attribute type 2 has an invalid length. [ 444.075277][T18854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.195516][T18854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.244433][T18864] netlink: 'syz.1.3518': attribute type 11 has an invalid length. [ 444.253163][T18863] ================================================================== [ 444.261297][T18863] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 444.269154][T18863] Read of size 8 at addr ffff888033bccb60 by task syz.2.3519/18863 [ 444.277121][T18863] [ 444.279484][T18863] CPU: 1 UID: 0 PID: 18863 Comm: syz.2.3519 Not tainted syzkaller #0 PREEMPT(full) [ 444.279512][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.279532][T18863] Call Trace: [ 444.279540][T18863] [ 444.279546][T18863] dump_stack_lvl+0xe8/0x150 [ 444.279598][T18863] print_report+0xba/0x230 [ 444.279625][T18863] ? af_alg_pull_tsgl+0x1c6/0x740 [ 444.279658][T18863] kasan_report+0x117/0x150 [ 444.279694][T18863] ? af_alg_pull_tsgl+0x1c6/0x740 [ 444.279721][T18863] af_alg_pull_tsgl+0x1c6/0x740 [ 444.279751][T18863] skcipher_recvmsg+0x5df/0x1140 [ 444.279776][T18863] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 444.279793][T18863] ? aa_sock_msg_perm+0xf1/0x1b0 [ 444.279817][T18863] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 444.279836][T18863] ? security_socket_recvmsg+0x7e/0x2c0 [ 444.279854][T18863] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 444.279871][T18863] sock_recvmsg+0x172/0x1b0 [ 444.279889][T18863] sock_read_iter+0x251/0x320 [ 444.279914][T18863] ? __pfx_sock_read_iter+0x10/0x10 [ 444.279943][T18863] ? bpf_lsm_file_permission+0x9/0x20 [ 444.279962][T18863] ? security_file_permission+0x75/0x260 [ 444.279986][T18863] vfs_read+0x582/0xa70 [ 444.280001][T18863] ? cgroup1_freezing+0x20/0x350 [ 444.280026][T18863] ? __pfx_vfs_read+0x10/0x10 [ 444.280046][T18863] ? __fget_files+0x2a/0x420 [ 444.280063][T18863] ksys_read+0x150/0x270 [ 444.280081][T18863] ? __pfx_ksys_read+0x10/0x10 [ 444.280102][T18863] do_syscall_64+0x14d/0xf80 [ 444.280124][T18863] ? trace_irq_disable+0x3b/0x150 [ 444.280137][T18863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.280153][T18863] ? clear_bhb_loop+0x40/0x90 [ 444.280170][T18863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.280186][T18863] RIP: 0033:0x7f8f4659c819 [ 444.280201][T18863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.280214][T18863] RSP: 002b:00007f8f473b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.280231][T18863] RAX: ffffffffffffffda RBX: 00007f8f46816090 RCX: 00007f8f4659c819 [ 444.280243][T18863] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000004 [ 444.280253][T18863] RBP: 00007f8f46632c91 R08: 0000000000000000 R09: 0000000000000000 [ 444.280263][T18863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.280272][T18863] R13: 00007f8f46816128 R14: 00007f8f46816090 R15: 00007fff31298038 [ 444.280291][T18863] [ 444.280296][T18863] [ 444.523724][T18863] Allocated by task 18863: [ 444.528391][T18863] kasan_save_track+0x3e/0x80 [ 444.533117][T18863] __kasan_kmalloc+0x93/0xb0 [ 444.537830][T18863] __kmalloc_noprof+0x35c/0x760 [ 444.542715][T18863] sock_kmalloc+0xd6/0x160 [ 444.547283][T18863] skcipher_recvmsg+0x54d/0x1140 [ 444.552816][T18863] sock_recvmsg+0x172/0x1b0 [ 444.557341][T18863] sock_read_iter+0x251/0x320 [ 444.562055][T18863] vfs_read+0x582/0xa70 [ 444.566226][T18863] ksys_read+0x150/0x270 [ 444.570486][T18863] do_syscall_64+0x14d/0xf80 [ 444.575104][T18863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.581051][T18863] [ 444.583396][T18863] The buggy address belongs to the object at ffff888033bccb40 [ 444.583396][T18863] which belongs to the cache kmalloc-32 of size 32 [ 444.597384][T18863] The buggy address is located 0 bytes to the right of [ 444.597384][T18863] allocated 32-byte region [ffff888033bccb40, ffff888033bccb60) [ 444.611813][T18863] [ 444.614165][T18863] The buggy address belongs to the physical page: [ 444.620604][T18863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33bcc [ 444.629486][T18863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 444.636622][T18863] page_type: f5(slab) [ 444.640673][T18863] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 444.649447][T18863] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 444.658097][T18863] page dumped because: kasan: bad access detected [ 444.664538][T18863] page_owner tracks the page as allocated [ 444.670266][T18863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8507, tgid 8505 (syz.4.670), ts 173429146734, free_ts 173428862878 [ 444.690968][T18863] post_alloc_hook+0x231/0x280 [ 444.695785][T18863] get_page_from_freelist+0x24dc/0x2580 [ 444.701414][T18863] __alloc_frozen_pages_noprof+0x18d/0x380 [ 444.707344][T18863] allocate_slab+0x77/0x660 [ 444.711881][T18863] refill_objects+0x331/0x3c0 [ 444.716606][T18863] __pcs_replace_empty_main+0x2e6/0x730 [ 444.722196][T18863] __kmalloc_cache_noprof+0x392/0x660 [ 444.727596][T18863] ref_tracker_alloc+0x15a/0x4c0 [ 444.732592][T18863] get_net_track+0x16e/0x230 [ 444.737350][T18863] sk_alloc+0x1d6/0x390 [ 444.741635][T18863] inet_create+0x7a0/0x1000 [ 444.746169][T18863] __sock_create+0x4b2/0x9d0 [ 444.750778][T18863] __sys_socket+0xd6/0x1b0 [ 444.755219][T18863] __x64_sys_socket+0x7a/0x90 [ 444.759921][T18863] do_syscall_64+0x14d/0xf80 [ 444.764538][T18863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.770456][T18863] page last free pid 5924 tgid 5924 stack trace: [ 444.776815][T18863] __free_frozen_pages+0xc2b/0xdb0 [ 444.781967][T18863] vfree+0x25a/0x400 [ 444.785894][T18863] process_scheduled_works+0xb6e/0x18c0 [ 444.791473][T18863] worker_thread+0xa53/0xfc0 [ 444.796088][T18863] kthread+0x388/0x470 [ 444.800531][T18863] ret_from_fork+0x51e/0xb90 [ 444.805155][T18863] ret_from_fork_asm+0x1a/0x30 [ 444.809957][T18863] [ 444.812298][T18863] Memory state around the buggy address: [ 444.817944][T18863] ffff888033bcca00: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 444.826022][T18863] ffff888033bcca80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 444.834102][T18863] >ffff888033bccb00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 444.842178][T18863] ^ [ 444.849399][T18863] ffff888033bccb80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 444.857479][T18863] ffff888033bccc00: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 444.865554][T18863] ================================================================== [ 444.887715][T18863] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 444.895001][T18863] CPU: 0 UID: 0 PID: 18863 Comm: syz.2.3519 Not tainted syzkaller #0 PREEMPT(full) [ 444.904602][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.914710][T18863] Call Trace: [ 444.918019][T18863] [ 444.920974][T18863] vpanic+0x56c/0xa60 [ 444.924992][T18863] ? __pfx_vpanic+0x10/0x10 [ 444.929771][T18863] ? __pfx___schedule+0x10/0x10 [ 444.934665][T18863] panic+0xc5/0xd0 [ 444.938429][T18863] ? __pfx_panic+0x10/0x10 [ 444.942975][T18863] ? preempt_schedule_common+0x82/0xd0 [ 444.948480][T18863] ? af_alg_pull_tsgl+0x1c6/0x740 [ 444.953549][T18863] check_panic_on_warn+0x89/0xb0 [ 444.958525][T18863] ? af_alg_pull_tsgl+0x1c6/0x740 [ 444.963613][T18863] end_report+0x73/0x180 [ 444.967906][T18863] ? af_alg_pull_tsgl+0x1c6/0x740 [ 444.972975][T18863] kasan_report+0x128/0x150 [ 444.977507][T18863] ? af_alg_pull_tsgl+0x1c6/0x740 [ 444.982582][T18863] af_alg_pull_tsgl+0x1c6/0x740 [ 444.987479][T18863] skcipher_recvmsg+0x5df/0x1140 [ 444.992454][T18863] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 444.997875][T18863] ? aa_sock_msg_perm+0xf1/0x1b0 [ 445.003030][T18863] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 445.008350][T18863] ? security_socket_recvmsg+0x7e/0x2c0 [ 445.014032][T18863] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 445.019449][T18863] sock_recvmsg+0x172/0x1b0 [ 445.023986][T18863] sock_read_iter+0x251/0x320 [ 445.028706][T18863] ? __pfx_sock_read_iter+0x10/0x10 [ 445.034021][T18863] ? bpf_lsm_file_permission+0x9/0x20 [ 445.039516][T18863] ? security_file_permission+0x75/0x260 [ 445.045189][T18863] vfs_read+0x582/0xa70 [ 445.049377][T18863] ? cgroup1_freezing+0x20/0x350 [ 445.054360][T18863] ? __pfx_vfs_read+0x10/0x10 [ 445.059166][T18863] ? __fget_files+0x2a/0x420 [ 445.063799][T18863] ksys_read+0x150/0x270 [ 445.068090][T18863] ? __pfx_ksys_read+0x10/0x10 [ 445.072892][T18863] do_syscall_64+0x14d/0xf80 [ 445.077515][T18863] ? trace_irq_disable+0x3b/0x150 [ 445.082571][T18863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.088663][T18863] ? clear_bhb_loop+0x40/0x90 [ 445.093365][T18863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.099281][T18863] RIP: 0033:0x7f8f4659c819 [ 445.103720][T18863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.123356][T18863] RSP: 002b:00007f8f473b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.131806][T18863] RAX: ffffffffffffffda RBX: 00007f8f46816090 RCX: 00007f8f4659c819 [ 445.139808][T18863] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000004 [ 445.147814][T18863] RBP: 00007f8f46632c91 R08: 0000000000000000 R09: 0000000000000000 [ 445.155815][T18863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.163822][T18863] R13: 00007f8f46816128 R14: 00007f8f46816090 R15: 00007fff31298038 [ 445.171846][T18863] [ 445.175510][T18863] Kernel Offset: disabled [ 445.179851][T18863] Rebooting in 86400 seconds..