last executing test programs: 6.051713012s ago: executing program 1 (id=3160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000a80)={0x244, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0xa8, 0x13, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, 'GPL\x00'}, {0x6, 0x1, ':%'}, {0x8, 0x1, 'GPL\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x3c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x9, 0x1, '-].+]'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, ')'}]}, {0x34, 0x0, 0x0, 0x1, [{0x4}, {0xffffffffffffff9b, 0x1, 'GPL\x00'}, {0x10, 0x1, '\x03(}}+,:!\\-)+'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, 'GPL\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x168, 0x13, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [{0x8, 0x1, 'GPL\x00'}, {0x5, 0x1, '{'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x11, 0x1, '802.15.4 MAC\x00'}]}, {0xcc, 0x0, 0x0, 0x1, [{0x77, 0x1, '\xa5\x7fm\xb7t\x04\xd7&\xff\'\xa0\xd3\xc3\x94O\x15=j\xfb\\\xc2N\xb2\x8elz\xa2T\xa4\xd3\x1a*\xab\x90a\xc3\xe2\"\xd0\x19S\xeb\x9d\x9cfWRW\x80Z\xa4V\t\x0f\xe6IUi\x06\xda^Kw\xeb\x80K\xd0\x1e\xa8\x80/\x0f\xbe\xa6$\xd9\x1d\xd39\x88pu@D\x84\x01\xd7\x90\xa1\x10\xe9u%8Ue\xb4\x8e\xe1\xf1\xa3p\x86-j\xe4\xed*\xc8P8e\x00b\xd6'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xd, 0x1, '\'-}%^*!-{'}, {0xa, 0x1, '//%}:\''}, {0x6, 0x1, '),'}]}, {0x30, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, 'GPL\x00'}, {0x4}, {0xa, 0x1, ':,-,]@'}, {0x4}, {0x4}]}, {0x18, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xa, 0x1, '\xff\xff\xff\x00\xff\xff'}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000844) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) setsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r13, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.631342248s ago: executing program 3 (id=3163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)="7feb68f216a099ddafceff71fbe753854301942b7c8bf81e3564e763d41c5cb8ac6f2b", 0x23}], 0x1}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8000000000000000000000080001"], 0x24}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000cd000000000000000000", @ANYRESOCT=r1], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000180100060000000000000000002020607b1af8ff00000000bfa100000000000007010000f8ff7d36b702000008000000b70300000000000085003e00b0000000181100"/84, @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r8, &(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000280)={r10, 0x0, 0x0}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r11, 0xd7735000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@call={0x85, 0x0, 0x0, 0x6b}, @generic={0x8, 0xe, 0x3, 0xa, 0x10}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd0b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r9}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd700000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="020407030000002913ad25eacc337cae27799e0014000300626f6e64f6148471247293ae312402e187065b18666b1885d339e03fc79d6c3efc570de8733afd8add1ca8ef9cebdf832d7524eed0b67fdc7687730f1e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) 5.375931304s ago: executing program 3 (id=3166): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0b050000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190000000000"], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r2, 0x3000}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, r2, 0x10, 0x40, 0x9}, [@NDA_CACHEINFO={0x14, 0x3, {0x4, 0x80000001, 0x1, 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 5.258493883s ago: executing program 3 (id=3168): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) 5.095261926s ago: executing program 2 (id=3170): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x2de89ed507d52c2, 0xe, 0x0, 0xfffffffb}, 0xc) openat$cgroup_int(r0, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) 4.968901819s ago: executing program 2 (id=3171): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8, 0x5) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x9}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20aa208}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf250400000006000b0005e57788d9769b6b3830322e31352e34204d41430000000008000400fcffffff14000600fc000000000000000000000000000001140005000000000000ffffac1414aa08000700ac1414bb08000800e000000208000700ac14147144f037a2e29c409ad31f7c040f080004000300000014000500fc01000000000000000000000000000008000c0000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4028005) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028008001a007f00000108001c001900000006001900030000000800efff05"], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x1e) 4.795933863s ago: executing program 3 (id=3172): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4477d795d976f9c0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4477d795d976f9c0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r9 = getpid() syz_open_procfs$namespace(r9, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(r9, &(0x7f0000000080)='ns/ipc\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 2.930799605s ago: executing program 0 (id=3173): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (async) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010200000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x24}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}}, 0x4044000) (async) unshare(0x46000480) 2.929364499s ago: executing program 3 (id=3174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x17, 0x1}, @decl_tag={0x7fff, 0x0, 0x0, 0x11, 0x2, 0x3}]}, {0x0, [0x0, 0x51, 0x30, 0x0]}}, &(0x7f0000000240)=""/185, 0x3e, 0xb9, 0x1, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, r3, 0x3, 0x1, 0x1}, 0x50) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2.843630021s ago: executing program 1 (id=3175): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0xc11, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x876, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x43}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20048185}, 0x4040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x288, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1d}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4cfb}, {0x8, 0xb, 0xfffffffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x4}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x516aea36}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xfe01}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xffff0220}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xfc39}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x818}}]}, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbd05}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x811) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000e40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000ec0)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000fc0)=0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000037c0)={0x0}, &(0x7f0000003800)=0xc) r11 = getuid() r12 = getgid() r13 = getpid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000003840)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003880)={0x0, 0x0, 0x0}, &(0x7f00000038c0)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003900)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000003940)=0x0) sendmsg$netlink(r3, &(0x7f0000003a80)={&(0x7f0000000a40)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc, &(0x7f0000003780)=[{&(0x7f0000000a80)={0x29c, 0x34, 0x20, 0x70bd2c, 0x25dfdbff, "", [@nested={0x87, 0xf2, 0x0, 0x1, [@generic="b6b40b856f82b635b4658e7bc7f43fa175df4c782bd4f3efd980a8583f090f5fb0026f65366767d2ec0b90a153771da20dbc4ad16f6d8ac8d4dda11e0649e458434377391c0a1047e140de093fdc5c9ed404c199a6da6977bbdfcc150a009cd43d492bcbe0284e1a5f65e09eee33214fda4ed38c7f17ca47a201f7743b88e7", @generic, @nested={0x4, 0xb0}]}, @generic="f62572779cff6b783e173e199c84749a80034cad4f3d38baf2a237bd50d6fb7c02cc65a1d6dd9123784124a4f774b45cbd7059887d2e44c086a132b39675e969655a21c78b14c7a81b", @generic="6f6aa6b6ceeabb176ede87089efa4c83718790247f1dc905f117bc27e3be435ab4771e3b09d63df2c89f509f3e9992df1ebfeaba56ea4776135d2701aea8533be2811adae2d90b90f9a773bf24440dce6a417a2fe3e1688b0e973c0aec9814b9a09274a0abc384e2f983649661ef3d58e8a8cfaf859c11c276f39aa3", @typed={0x8, 0x151, 0x0, 0x0, @fd=r0}, @generic="7f63b1b9d52e0f4f881c945b98c848c7f085236447a8e9dfccd629b64a743e6d512d1d7f19e87990b731db1ba99430e36107a3f1dcb606f840d6424bd0475e17845e91b221137ada2bf202f2beb4985984535dbc864bbe1d286c3ad008b59fe0c89c66f832dbc932108d0036172645c25aad474521d9fe4a5a2c7eaed727c4b3b4b6f70dcb381cf1f305fc69a5b5bfa46868b8e141d2ed58c2042bb3cc57051c60c058db27", @nested={0x8e, 0x11d, 0x0, 0x1, [@generic="a18f4982b80425ded4fd9e67c5c35181dd6726499dbfb376676717596e6942ed8b746c9bbc1267b4f88558e4a9905db7a4bb07300bad31ecfcd89e5cda34f41ec8f72b59291edf57c3c7537328acd01adcd0e073ea2b5e759f689acd757a090de7359ec565cf62c6a5bea218e29ab8347a4ef741e9c7f029b02e6cf9c1ae5a786174", @nested={0x4, 0xe}, @nested={0x4, 0xc1}]}]}, 0x29c}, {&(0x7f0000000e80)={0x18, 0x15, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x150, 0x0, 0x0, @uid=r7}]}, 0x18}, {&(0x7f0000001000)={0x159c, 0x36, 0x200, 0x70bd2c, 0x25dfdbff, "", [@generic="751210df330eb557f19ed63ea24d3fa45436af7f69efbcef2ee7970c36e8eef83cd98b3348dfa330937f7b55c16970a494ed80cd4f80430ba66fa440100abcc258b3c57b6b32251f2c07d1721b3945e12e5601b8601384449f982f382ddfe1e2c9b056e3951c7f72a8b1fee41c67383242c3a51e9b2efeb28ea3d804481158fe1c7f5dc01dee550fa2d85b75df4ba7abe3c4b017b7c4bec132ef155b1ae2a7b19467a193a2f08c4e1e27513a85a2a8daa58959319e", @nested={0x114a, 0x91, 0x0, 0x1, [@generic="377466427176f9e89d24c39f3d0b945b13aff1acbedde88969c4583214a641823ba86eaf6ff1b5164342980546b1369aad7e010678a4fccc95c2d73d7d388a8295b06a8ffb0bd7217864e055c39290b1dcbad56b8d7a54d731f0e9316a20fc16cb19e9633660fd87274ad88b12325194adfc7ef49b00c0e40281d83d5aed1d3cfb9a0ae08ea85b6aafaa4e6864dd166978161e481dfa7ba8d7312cb04619d7ada6f1a78396c839cde25f4ca5a094f73a5133f3446f09881b2eba19b3dda2c01cdbd3215cc256362ebe3cd5c40021b0b5d950747c88141aae39c1b8b339a69f1ad39094caf488a432ab5d4e8afb827d74270f71ae7bd78e51b4ee8a18e04444c0bc3f418eabec8bf5cc6f98873cff3bbf24e5cfdea4e676bae08edd30b30cbab4c74186af783d3cb93234d5520fbf25d67e4ee6ad81e8e2cd18f5aba552888e772ded96725613a3ba4b55bc7c4d96fac17a86f4c309cac08154607110ce74120fc027720f623a2d1137222d4d281c14466df62a4a672a90c445029e88cfee2b373c3020c433e14bc49e1793d5f7d3cd2dc6c3f9aebf7d45f718f4dfe0c1fe938b7c88f65256d2516d47ae70cefe86bd2ce35671117352b767b47a6c828e8e8c3314dd663b2312391c9aaa10da1d4d46540a5ca171dc0662dd9e627ce5cebce408689eccdfaeae3446b50a33d3ec7e87cd70d448f5de78cd44cadb967b6adc6546257ef206cbfa493703b2d3a67f18768784625edcbda99e1a99a474e19894fd573e82a5edcdf9f518923c03bc7b5ab89e7977583e7336fe6ea9478fef35b771ba3e1fe1899e0e3701f469303148fa623300871f340609f54c62a9e18c4a13f83236e0c8653a03b25ea517ffae1b62d025bfb2d431ed4bc496d6905441f46a9e4feedba69a3c1d40d307dd08e5390589d8b53e3698682faee1877654110d825562dd3052f5b9969fbe5cf84aa27251b06f4552f383ccaaaa825d30dfdbeffb9c8945ccb9a77270d9dfb28d057eb5df223a3092d1023ce4f63c9e72e76bc73a8a41ee153d2f1a38711187eccae1c3e5265c1f87e7e9da2a570b78e2bb7aecc32b2ebf1858dfbd1746afa31681360f6117b67a18c2610f531578f11c65b0484035525aa6bf2133f3d85c566e6974024949d7a7b3ff2e01e7a72fda4bef3d631a758b2f0d424cc61869aaccf7d28b71b22b99c9afce5c612d5febef7f8110758dbb1f734215ca2092ffc2bcfa301e8b86d21d1706bf6c4cb0bd93ed8348b2bbd617986645614c6e2a05f6caabe263011a401c9dd58928831eea58c9b2835a6dc77cb6c64bb18dab0ce9f93743f2a1a70843d0e8d1f45cbf7a17f31ecd09181784617096b76256bef9bce2a58b7e07f703420a7f701721d102351fe15115d46ce0165f6a505605e487a995533147de3f95685005e8c3fcac5f2f890667cc8cdf5670a3e516d93dbc2c989eb9e9b1ba01aaf00f84302acb31747ffb2910990fc59b952b93e154e6734970af2202f683fe8f9540affb189c2895d076bfd2543731e652b1767392addd352e5d390e1fdbbbebe8e660780320c5945c338662733c67d6f95117bbb69957aa64629dc3260129ec143f82d21fd374bfac986630dbc9b289dd119fbdf38c6642c950cff140c30d7375900fbf84d5836d98ae3e5a9a181a73d47f3c7f5e2736ba20dfc2f9e4cb55d0fb7d3de580b796a1594ba318d03db5a03a7ab1b1372e5f72d8bd0b1d7c247be8aa21236be850a282909273f9cd7371955331e6260a533e12d63cfce9364fdaf5b9cb9ea0e9bf349268300ba842556194f7458158de7d924c1e8b82510a3ede90c6b6f5d999a5e866aef6cf98c4a0b69d3335dc3ed79c3b0b5332892f8e4fefe8d5c5be65e390ca6a850e220a6dbebd88d18455ec2a32d499a758638ab3171d584371385d5d6cd83441a63ff5890c9fe71aa7ffb857c0380b43004a0799829e7f8d7369da1dc6ed6c23567f03736e425e3f6ee641f452c64d1c0206cfa5de12fc6085c59eecf5730e71a39bbf2ea3de83ffa49e510b4aeeec1864a611e50cca460c9d2f0adcbf5495a5105e4309595810f06fbf53b0a14a96631546d4375cc488bd5280701e84df1c05c54053d037fb9280116685b7577aa7795a3d555dcf8db2b2f0066f4e8e72296a9fef7f43a41656ac7f174f2d95cc1e8c9f74fe4ae95ea565e01776b49ef7aa403c598b6a22c340015d6d5830589fa54954814d9fbba4f8a7b3a5f360a99e702a35839f04fb3006483f16156ac8187400d93f6ae9ac5425d9d66c19e8d7910422aebf2f16936e8dfb2887129b199970d2fa8ff0af8ab68ff69ed729848835b7066d10e4175e1e34aa2054bdc0910f5d1c4658768672fed79fee6afedd1ce897c4dcd55b07d7c565add6f9574cc92ba16cabb1bb9ae98fc66a5f1ca172d0df4a209ec7194d4de3c3972459e5a4336ab8f843d3844533456c507242df262561f62fca46229ee9e5a19a5d1074fd84c6a86cd5b68117deab702390d0ea5a3bc51256b8b5d86e78426231ee6f6596844892092d99d34a997512d4e9659807c437256a2fb8443cff89991f17924fa41410d0684b5ad5afe50b6d6124c856a8d2da2f37bc4e4fc11051f7298dd9b0479ebb75ad261ebaeedef0e9d2e6e000d49f5a80a40c8282bf4a414c6b5b2e4b967b24b090a4ffc96ef5243443f10121b883804766a19254916527e9c5d2ddafc6bf9389ea909d9e330647f4fa6885384e8bfb956c3e50c53544facf5bf4da9530b2b58fef27668972243008d6e63456c425fd6c48aba03ac73ad1a96d69187361aadc234b6ba6619beccc703701fe77ac919f8e0f784647f3879184db36b33631ed727df9359aec00b1e545265ffcfc697093374b0894e524f561aa15c1e2dc354927de77fcc99be538bf4f0060f84c25eb1aeea26870a32ca3a96681943d153a515b9b3bb104efa0008747eba087b0d384301695a99f2b0cab788c7ec8a980ae227a538a7512ab1e4ec303e830fd273eb9c726159ca5625f05349c69e9350e95a0bee720190acc6b1eefa72c83d1e2e98e2664ece92f69ec31352591b14a32795729c99ce8ef3210365ecf9c6ac53d586430bebe6e2fa199640c8f34107ef00066fffb6faba83972896ad4a5c80ec36dc2b6d73eaf567d1ce0b22c305ef9cf705d96d067d89c50c47dcac74844939cfc9761e3905b4fbdc0ba2077918bbfbe08bcefbcd467eecdb9f15e3073463491521a84365acf91a2c3c516931c20b749c59412ffe2fdc32fcfb3bbcc0a326254ad1593477c3f1517e8c9fb57735a469d7f90a4133176edb6d67210f9d8c373633a9b488a6681d3a2d986a221a4fb148435992c9deb4c2ab609b81c9b1c4fb304bb7435d00c404e802460b1f4f1589693ac874cd153ae6ff0fbd4170886ce823dd3cdc52817d95d47ccf5b70ebebed276f6f95e8eaf47bedf4ff79e964a5908f20454876085ea37b043612e885c761a0ddc13dadde4dc281e7f8a4ede751410528f5be7a407f12e6883b4d5d62fd313a43e9172477c3d79c4734114f61d3280b153f0a5fc71f92c2eb6ec678f9925f3595c90204c732dfa83c307ae1ae017c40d4a04525bfb252d2311b4c1ba254ddb654307a9745dc15803c7f4ceec7a50767b6ec2015aab83378a6aa05d293523a6c4fe8938dfb222a0b103b53a325871d1f22f1f1fb38b78bde13d68f7eb308cfaa550ad1942c0006ed453beccc981a0f87df5c8d177a680324fac6b63315dfe2be94de252acccd5db34b8e4afb155eaa4bc7fc775ef39c4519b93a53a999cc3e4bc8f2e6801da1bc9fe48543ca3ae456fa6fa2710f4384f72cb8bc8831d5ef3d9b7157fa712d6979655ff066516b8599e59c6a439ef798a3f8723b427b7c8ab23a6f34e4308bd12be9986735b025901b6fd3365f55f30aca765f6a866a6a76864f9097cb942e5612c3c6514bb04fa5f634cbe8d4edebaa3cf94e8cf97e22b5e07c5744affc107a45f9fac7c88668334104827fadfe723b43e75e47920fe4b7320e6d90492683248d3fc083467a56ec9bfa25c606dc93a02df606b242dcbbe1730d9af1fdbf41a7a4576d29c986a32641e4cbfd5e3731151a2329a6952e8e938eabd1207c8b47569af010367376d63c053d9fee12acfece2edc4fdb43b220c9c87234d23daa765267a280da39e135d10261f57d7b9ce82adbea285ea76e19ec3caa43f26c5fb4162067c83a7639f6d12f8952b4a50b3522517bbb6b1fb576f4fed4ae013758d9de97b3b5c3bbcad864ae9f773b9775ae11b5a8b8f3e8119c12c77acf691f3a4a7ee8bf75c943fb0ffb05a694e91dd3e2c1c12709e939c187a156c3f5f986a33bbe2c14e1e36ae0cf73cb197215bee07b3350ce3538152b83997d94fd999415c259d78b2b6f96f3d31cb2473d77f0104625f768ae86fc401cb61221c337cace1f73586a3681a3f0de283257ade017ad619489d572a9457beb70dc96254694a41346a5569266856cc3960b4588014627337adf41aa160906d910985516336c0ddf18c93f17937e79394dd8fb7426cd7661f2207b890048fcea057b577cc711a79cff181116151b3f7819741c06d119e6b7c73b1b2e8e6d8c09e99fb45787df71d892d59d09f66635041130b6d125502ae51ef840ee097d559716a077825dcba5176aa1aa2dfcbe1305f30d272d406852bf419ba17bfdfb29ea4d9676fe9f5a3b3d6c372127603aa5572186e33e49987e4befa6ae50246ed76b81be2a4e56464ac1a72cf9356af84abb9ef940cb4cef97208cd026e5a1d9f17a596c52ef090c1e6668f9cdc9ea473be602eaee0a9825a6684c6c96e73fffd6a6cea489ac4ddc2827a79e84ad4b3fadaf2c855f15c34516ef573df39e34667a24059478d5d127c95bb0ba9fd4e0905fe3651abe1b1d0fffbe0d1edff15a603a6abc4b73ed61e60f2e06599da54296fc133bea4744dafe42cca72231b7bb33a9d2f6c5454c736c513d52c74b51a20543b80f172f927a24ce3ff76f25784da896fecc9375991edfc68d4cc1792b27eab326a978a5f50dfab3dfe344d9f8c56ac80f32ad512999902c68efa963dbe227f1fb09d6f92ba39a9f5d9ee7e29c4725a1aa460634f46592624cd3935c720bff374c1a112565d5dbf45c774fd5ed2d7c845d7319c8b9da873a06094c45f039ace9ec7000013bfcdcfee0379ff3b703bbceed3cd6e0d7914b516494614e8a4210cf4a71d826af6b3e576b8875c3ccb266b3471cc182f8b9e91770b6e2596325283986d64cd1e0d5f17dff43295926d120bd060596ddf5d5eb1f6306675561955b4e529d03f953f51f57a3a7ebdc36eabe727cffd20f9de97f1189620db4984d18074fde3c4d46829a9fcc0ca461615ab8de6440643d52fe7803e7093676b8e6c6d1d4c7b807ac568531c8bdc84a797424d4b8a1f0f56d06a587a2e8046aef1404d2e1734ea432337047f3a40ad7e2496e31eb8abe2e70fb156332332bf1d8f27c39c2eb0cd75a4490778145247165ff61964dec81a373317ae35f0e117dd2ab3082775aaa3709123d468ba1bab843eb63973782e70e9096281a6b1768b763f1a902f06420052a700f87311b42b162e9297c40f8ac268ce5a5f00e8881bb2eb4fd2242405d8ccfe841099440ddd80b3d16a292f3392bdaecf467e6e910f3436e0d06cff0e391661b8c536bdfad5e85616c021d0726b047302d370f322c891766886daef25ef7d2d2f05e68c7659bf8feb73c0cd447122e7e5be65086ac795201baac437f0e7f4a52fe360105e927d12911219e203", @generic="265a348124b6d8d00604810a2f945c06b49623ec519cc1622cdd7d9a6b88b179e94bdaabaff5c79f79d1640f2ba50a895c9556aa158944f81896af6565095e62a1b2dc442be5fa940a2883fc68286b16de54ad6a3d81a333d633fb514bbc3c0a94ea6262505869a7bed6ea10e7c02a23b3585a95309f50e89a35358f699147abcd25c6ac477b4cd62206596621e01fc58e9f2674e6e7ed89", @generic="55c19176757125712e096ce11a8270312a3047518a7ebe4af76dcc7f70f3cea4396e1cb22a16ce0e7cd1e27a09620b673e52dc61b758788cf74f5e94b7e29df7a608547a1bbfa61054b10c8b121384e1259a627f82ffc4b3989dfd34a72bec0a1da4cf4453572613c785b4abd2c7773bea2199f9a78ea095b33ee82584b82dd37f2b2872f4f7cd2d43c89a2093e2a0db605f40f1db23e50ca4f2c60b732d5f166a5200d5f1099b05e911", @nested={0x4, 0x59}]}, @nested={0xfc, 0x4f, 0x0, 0x1, [@generic="d66f59822db0eb73e480044b303c8ee0740f1324a310cf7d008adc8f96f3ced0dc7ae77b8c544e2e77ab3663e55cde3691b3463919f45dda42ef87e5218159143773c38f088bc311a091db0b54f932229949d9df8cda8dab9754f5e9609a1951b40b246fc083e40b9a0122d5e63ac1c3b3238ae0c2a7e8110ca0271af100baabbb1659611512014ae48a06c1fd7fd452ff2c58eb1e3231c05d7c3db315b858114ec87d3245a7d234157897ec1957bb31fd188de30d9c6d0ac292e848ae55250cfb7bfe94b87bd05f8d0a931df96ea856a2f9dd5aa39c87290c07a36e1fd28128d69a88ee766c87e6261df196075147a604d46aab637b8f94"]}, @nested={0x1f9, 0x45, 0x0, 0x1, [@generic="a1a483416460e23869c5ad6d9345d4ca724d9fc2fe9fb6b9ed08c9c0e9bfd498d86ff6d1efebba3bfd582d71d09191169846470d5b9cc8efbb40d743908a65feeff2e56a73844e4aec70f28b202ecc8a2ff7e7d48d2d5611363cb783ac3c30e54435696e3e05d021c53d050c65b9a0", @typed={0xee, 0x152, 0x0, 0x0, @binary="37273ef3be3413f98e3cd22080395a3dcd47fc008bfe79345c828ef54ac4249d87f58b134c43cdae67e35d0ae2900c1275a011264227e41dd15a360ae647cc2609b5f016766dcdfa279a8ab6dd657307f5e4171088412b023a254de8c415490a320bb028993d90e9c809825204279a4e208c74a12f1213280f3bd7969afe2be831311827615b21fd693a80dfe40696b79d7e4b94265db014e38b0aaa5dbc7b9ad60e6eeb05303f9d5ffef7aac92bafcc8eb19aa34b9c55e85a3ebb10ef62c977baa3122e48ac7df08782a8be83f695814953387b2cd43b1e16900d42c2e04b0e4edfb7fd1478ec1fbe69"}, @nested={0x4, 0x2e}, @nested={0x4, 0x148}, @generic="4a78dc321c0f1dad1320d712032c841935aebbf81b0f96e657f3fdea46590b0da01dda848856b4b18e939e0329618336aba038b60e02fdafbeeeb47cd3f8841dc0434ab9030b1bfabd0ad2ace9b19d01231794e8eb28553671f3bed51d08e661f41248ec00bafaa0e7f06e3428643d7186167a43ff816194a0cca5cd93c85ea8b6a7aaff4267f70893b28b0ef6cd"]}, @nested={0x8d, 0x87, 0x0, 0x1, [@generic="4faa2231f1ce0e5133604d5799d53d739698f70dd4adbd3180", @generic="b39d43fb3880ca688eecefac856115c4cc74da3632a6d80a2b96d76dbf21b3a5e1d5e3b8f4ddfe6d389b004efad3f02f7391e31952059dd6768cd67757edba6a358a7ce7256e5816af31b711f6f81f13887e1909a634d558d378fb0bca5d8557b1627702", @typed={0x8, 0x65, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x10e}]}]}, 0x159c}, {&(0x7f00000025c0)={0x11a8, 0x2b, 0x100, 0x70bd28, 0x25dfdbff, "", [@nested={0xf2, 0xd3, 0x0, 0x1, [@typed={0xc, 0xc5, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xf6}, @nested={0x4, 0x66}, @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x14a}, @typed={0x8, 0x75, 0x0, 0x0, @pid}, @generic="d429b79c6793de919d28c742205f41acfea5f35d9302fa0894d0584ca328495d7f532e4d1a3baf821b260bf9578f6bc94a9f51045836dd74d58ace2221186936c43c168b700baefe0a707222e55ae88b43212b37eee053495bfba4c94d541bd8fab5b07e484b39bf38d055a8bee824f2620b6ecf9e7ae2956971c08b363c34ba8e273371ea78e616b53727226af3a152467c0bc016c99ec2960b1529a1a963a8f8365841da0bf12f2d32bca49fc96db678e6", @typed={0x8, 0xbc, 0x0, 0x0, @u32=0xcfd}]}, @generic="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", @generic="6bb6063bfcc02c575ca38206f2a2e5cbee741f778f4e6504bd115fe93cdf3b316dc50089f7c64017a9f268b352fa0a270e95ad0b3b56459a85cff31321fa0307f2094938f55bcada6cd09997c00e8e4f88974062cc1a81f55ab64e74f038b451b1c4970735e86ab2dd39c35a89daebb60abda989a573a16d8abdb993ee1805c44b51d9248195f6d44f4b6090b35dfe267e1e7cf9a20fe890eebc9031eef500f94666c5"]}, 0x11a8}], 0x4, &(0x7f0000003980)=[@rights={{0x1c, 0x1, 0x1, [r9, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x34, 0x1, 0x1, [r3, r0, r3, r0, r3, r0, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0xd0, 0x20008080}, 0x20000801) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003b40)=@nat={'nat\x00', 0x1b, 0x5, 0x580, 0x1c0, 0x1c0, 0xffffffff, 0x0, 0x1c0, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, &(0x7f0000003ac0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010101, 0xff, 0xff000000, 'dummy0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x4d}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x804, 0x44, 0x1, 0x1}}, @common=@ah={{0x30}, {[0x6, 0x8000]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv6=@remote, @ipv4=@empty, @gre_key, @port=0x4e20}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @remote, @rand_addr=0x64010102, @port=0x4e24, @icmp_id=0x64}}}}, {{@ip={@private=0xa010102, @empty, 0xff000000, 0xff, 'nicvf0\x00', 'gre0\x00', {}, {}, 0x84, 0x1, 0x30}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e22], [0x4e23, 0x4e20], [0x4, 0x1, 0x7fabba90, 0x1, 0xffffffff, 0x7, 0xa, 0x8, 0x3, 0x400, 0x4, 0x841, 0x1, 0x0, 0x2, 0xf4, 0x6641, 0x5, 0x8, 0x8, 0x3, 0x81, 0x7, 0xd, 0x401, 0x8000, 0x3ff, 0x8, 0xefe, 0x7fffffff, 0xff, 0x8, 0x1, 0x9, 0x829, 0xb, 0x40, 0x80000001, 0xe, 0x0, 0x80, 0x9, 0x2, 0x7ff, 0x1000, 0x3, 0x4, 0x1, 0x7000, 0x8000, 0x81, 0x7, 0x75b2, 0x8, 0x9, 0x8, 0x3ff, 0x2, 0x7fffffff, 0x6, 0xffffff00, 0x0, 0x2, 0x946d], 0x8, [{0x8, 0x80, 0x1}, {0x6, 0x50, 0x81}, {0x6, 0x1, 0x4}, {0x9, 0x67, 0x10}], 0x3, 0x1, 0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x0, 0x1, 0x2, 0x2, 0x1], 0x1, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x5, @multicast1, @multicast1, @gre_key=0x5, @port=0x4e21}}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x1c}, 0xff000000, 0xff, 'bridge0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x3, 0xc0}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x7, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @gre_key=0x81, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e0) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000004140), &(0x7f0000004180)=0x4) r18 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000004300)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x50, r18, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_PAGE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) r19 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_pktinfo(r19, 0x0, 0x8, &(0x7f0000004340)={r6, @broadcast, @empty}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000004400)={'erspan0\x00', &(0x7f0000004380)={'gretap0\x00', 0x0, 0x80, 0x1, 0x10001, 0x100, {{0xe, 0x4, 0x2, 0x2, 0x38, 0x64, 0x0, 0x6, 0x29, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x1b, 0x48, [@multicast1, @multicast2, @empty, @multicast2, @rand_addr=0x64010102, @broadcast]}, @generic={0x94, 0x7, "85e3531de3"}]}}}}}) 2.691721535s ago: executing program 3 (id=3176): unshare(0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20502, 0x0) unshare(0x4000080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.670912525s ago: executing program 1 (id=3177): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket(0x1, 0x803, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x8) 2.629929056s ago: executing program 4 (id=3082): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0x400400, &(0x7f00000000c0)={@align=0x100000001, {0xfe00, 0x6, 0xa9a, 0x66dc}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x1, 0x3, 0x3, 0x4, 0x9, 0xc, 0x4}, @generic={0x0, 0xd, 0x6, 0x100, 0x28847b3f}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0xf5, &(0x7f00000004c0)=""/245, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x7, 0x8, 0x7}, 0x10, 0x28833, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000640)=[{0x0, 0x3, 0x8, 0x5}, {0x5, 0x4, 0xb, 0xc}, {0x1, 0x1, 0x6, 0x1}, {0x0, 0x1, 0x4, 0x9}], 0x10, 0x6}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xd, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xa, &(0x7f0000000280)=""/10, 0x40f00, 0x19, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x1, 0x5b21}, 0x10, 0x116ed, r2, 0x8, &(0x7f00000007c0)=[0x1, r3], &(0x7f0000000800)=[{0x0, 0x4, 0x9, 0x7}, {0x0, 0x2, 0x4, 0x2}, {0x2, 0x4, 0xe, 0xc}, {0x0, 0x5, 0x3, 0x5}, {0x0, 0x4, 0x5, 0x2}, {0x1, 0x5, 0x0, 0x4}, {0x3, 0x2, 0xa, 0x6}, {0x4, 0x5, 0x4}], 0x10, 0x3}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0x400400, &(0x7f00000000c0)={@align=0x100000001, {0xfe00, 0x6, 0xa9a, 0x66dc}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x1, 0x3, 0x3, 0x4, 0x9, 0xc, 0x4}, @generic={0x0, 0xd, 0x6, 0x100, 0x28847b3f}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0xf5, &(0x7f00000004c0)=""/245, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x7, 0x8, 0x7}, 0x10, 0x28833, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000640)=[{0x0, 0x3, 0x8, 0x5}, {0x5, 0x4, 0xb, 0xc}, {0x1, 0x1, 0x6, 0x1}, {0x0, 0x1, 0x4, 0x9}], 0x10, 0x6}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xd, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xa, &(0x7f0000000280)=""/10, 0x40f00, 0x19, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x1, 0x5b21}, 0x10, 0x116ed, r2, 0x8, &(0x7f00000007c0)=[0x1, r3], &(0x7f0000000800)=[{0x0, 0x4, 0x9, 0x7}, {0x0, 0x2, 0x4, 0x2}, {0x2, 0x4, 0xe, 0xc}, {0x0, 0x5, 0x3, 0x5}, {0x0, 0x4, 0x5, 0x2}, {0x1, 0x5, 0x0, 0x4}, {0x3, 0x2, 0xa, 0x6}, {0x4, 0x5, 0x4}], 0x10, 0x3}, 0x94) (async) 2.513706702s ago: executing program 4 (id=3178): r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r3, 0x8001}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0xfffffff9}, &(0x7f00000000c0)=0x8) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 2.512413775s ago: executing program 1 (id=3179): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x110}}, 0x20000800) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) 2.239754219s ago: executing program 4 (id=3181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000400007012dbd7000ffdbdf25047c00000400c3000c00018008001600e0000001", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 2.182166347s ago: executing program 1 (id=3182): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r3 = socket$inet(0x2, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x5, 0xb, 0x14, 0xd}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4be207ffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c010000100001718d7c2c0999f009dc321dc1039648f2ca000000000000000000ac1414bb000000000000000000000000ac14e5a6b3b5dd6c0814aa00"/73, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000000000004c001400736d3300"/244], 0x13c}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf250d0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$xdp(0xffffffffffffffff, &(0x7f0000000540)={0x2c, 0xc, r5}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r6], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) socket$inet6(0xa, 0x3, 0xa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080a000000e8c94ef564bcee54be0e1c2074ed27a855f8ed5b3065", 0x1d) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000180)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330f70000008000100", @ANYBLOB="1ee69e585c0d1c30a774ccef7b9b81b410688f9ed51683fda5664b6f009cff18d0eb9cb0fcfde998e2d1e024d6af7eeb01ae652da035259c1ded2a76f527"], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) close(r0) 2.014393384s ago: executing program 4 (id=3183): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x2000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x70}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x8094) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r4, @ANYBLOB="04"], 0xc4}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socketpair(0x6, 0x2, 0x6, &(0x7f00000000c0)) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.867663334s ago: executing program 2 (id=3184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="0300010071f11791e3c80de8e62c571b61a30bb224915f9056120fe7965accd535c6c1ef531230d7863f586bf2"], 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r3 = socket$nl_rdma(0x10, 0x3, 0x14) read(r3, &(0x7f0000000580)=""/63, 0x3f) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r5, 0x80000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xbec, @private2, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) 1.820332779s ago: executing program 1 (id=3185): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket(0x2d, 0x2, 0x0) accept$nfc_llcp(r2, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0xc4, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x190ad186}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x94c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0xc4}}, 0x8000002) 1.448961491s ago: executing program 2 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40e040, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000180)={r2, 0x0, 0xe001, 0x0, 0x980, &(0x7f0000000040), 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r5, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 1.254406499s ago: executing program 2 (id=3187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028005001600010000000400120008001500000013"], 0x54}}, 0x0) 1.063448969s ago: executing program 2 (id=3188): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000030601020000000000000000000000a4f351a2c9f73f7178e52b7a2e00"], 0x14}}, 0x8081) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async) r2 = socket$kcm(0x29, 0x5, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r2, r3, 0x0, 0xffffffff000) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 919.948982ms ago: executing program 4 (id=3189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000003340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000048c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000400000000000000010ff02000000000000000000000000000189"], 0x340a) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) 824.818202ms ago: executing program 0 (id=3190): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07000000000000000000020000000c00018006000100020000000a3fa2980f8776ed867d8005"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x2, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0xa, 0xa, 0x1, 0x1, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x24041804) 673.342063ms ago: executing program 0 (id=3191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000", @ANYRES32=r3, @ANYBLOB="0c0099000002000042000000"], 0x28}}, 0x8000) 463.467409ms ago: executing program 0 (id=3192): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x23}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r1, 0x4, r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0x40000000}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x44}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="170000005600230d000000000000000000800000", @ANYRES32=0x0], 0x18}}, 0x0) 390.557491ms ago: executing program 4 (id=3193): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close(0x5) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8, 0x5) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x9}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20aa208}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf250400000006000b0005e57788d9769b6b3830322e31352e34204d41430000000008000400fcffffff14000600fc000000000000000000000000000001140005000000000000ffffac1414aa08000700ac1414bb08000800e000000208000700ac14147144f037a2e29c409ad31f7c040f080004000300000014000500fc01000000000000000000000000000008000c0000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4028005) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028008001a007f00000108001c001900000006001900030000000800efff05"], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x1e) 294.531401ms ago: executing program 0 (id=3194): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x38}}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000100)) 0s ago: executing program 0 (id=3195): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24004000) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000003c0)=@hopopts={0x16}, 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x40, 0x3a, 0xff, @remote, @mcast2, {[@dstopts={0x5e, 0x1, '\x00', [@ra={0x5, 0x2, 0x990}, @pad1, @generic={0x4}]}], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2}}, 0x1, 0x8001, 0x20009, 0x1fb40bb6, 0x90, 0x4, 0x69}, 0x9c) kernel console output (not intermixed with test programs): __pfx_nl802154_set_ackreq_default+0x10/0x10 [ 257.111828][T14153] ? __pfx_nl802154_post_doit+0x10/0x10 [ 257.111864][T14153] netlink_rcv_skb+0x226/0x4a0 [ 257.111886][T14153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.111911][T14153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.111945][T14153] ? down_read+0x2be/0x330 [ 257.111967][T14153] genl_rcv+0x28/0x40 [ 257.111989][T14153] netlink_unicast+0x7bb/0x940 [ 257.112027][T14153] netlink_sendmsg+0x813/0xb40 [ 257.112057][T14153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.112081][T14153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 257.112107][T14153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.112126][T14153] sock_sendmsg_nosec+0x13a/0x180 [ 257.112157][T14153] ____sys_sendmsg+0x54e/0x850 [ 257.112181][T14153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.112211][T14153] ? import_iovec+0x73/0xa0 [ 257.112234][T14153] ___sys_sendmsg+0x2a5/0x360 [ 257.112253][T14153] ? __lock_acquire+0x683/0x2cf0 [ 257.112278][T14153] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.112333][T14153] ? __fget_files+0x2a/0x420 [ 257.112351][T14153] ? __fget_files+0x3a2/0x420 [ 257.112378][T14153] __x64_sys_sendmsg+0x1b1/0x290 [ 257.112400][T14153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.112437][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.112457][T14153] do_syscall_64+0x174/0x580 [ 257.112474][T14153] ? trace_irq_disable+0x3b/0x140 [ 257.112490][T14153] ? clear_bhb_loop+0x40/0x90 [ 257.112511][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.112528][T14153] RIP: 0033:0x7f1d2bf9ce59 [ 257.112545][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.112559][T14153] RSP: 002b:00007f1d2ceb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.112579][T14153] RAX: ffffffffffffffda RBX: 00007f1d2c216090 RCX: 00007f1d2bf9ce59 [ 257.112591][T14153] RDX: 000000000c000800 RSI: 0000200000000140 RDI: 0000000000000004 [ 257.112601][T14153] RBP: 00007f1d2ceb8090 R08: 0000000000000000 R09: 0000000000000000 [ 257.112612][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.112622][T14153] R13: 00007f1d2c216128 R14: 00007f1d2c216090 R15: 00007ffe32d01268 [ 257.112650][T14153] [ 257.143691][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 257.285458][T14140] bond6: (slave bridge4): making interface the new active one [ 257.497103][T14140] bridge4: entered promiscuous mode [ 257.529467][T14140] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 257.789587][T14178] FAULT_INJECTION: forcing a failure. [ 257.789587][T14178] name failslab, interval 1, probability 0, space 0, times 0 [ 257.841423][T14178] CPU: 0 UID: 0 PID: 14178 Comm: syz.0.2278 Not tainted syzkaller #0 PREEMPT(full) [ 257.841447][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.841455][T14178] Call Trace: [ 257.841461][T14178] [ 257.841468][T14178] dump_stack_lvl+0xe8/0x150 [ 257.841492][T14178] should_fail_ex+0x40c/0x560 [ 257.841515][T14178] should_failslab+0xa8/0x100 [ 257.841534][T14178] __kmalloc_cache_noprof+0xa8/0x660 [ 257.841554][T14178] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 257.841573][T14178] ? __kmalloc_cache_noprof+0x150/0x660 [ 257.841593][T14178] ? sctp_add_bind_addr+0x8c/0x370 [ 257.841610][T14178] ? sctp_add_bind_addr+0x8c/0x370 [ 257.841632][T14178] sctp_add_bind_addr+0x8c/0x370 [ 257.841658][T14178] sctp_copy_local_addr_list+0x31a/0x4e0 [ 257.841679][T14178] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 257.841698][T14178] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 257.841718][T14178] ? sctp_v6_is_any+0x64/0x80 [ 257.841739][T14178] ? sctp_copy_one_addr+0x93/0x360 [ 257.841760][T14178] sctp_bind_addr_copy+0xb3/0x3c0 [ 257.841780][T14178] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 257.841800][T14178] sctp_connect_new_asoc+0x2ff/0x6b0 [ 257.841818][T14178] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 257.841838][T14178] ? __local_bh_enable_ip+0xd0/0x130 [ 257.841858][T14178] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 257.841880][T14178] ? security_sctp_bind_connect+0x7e/0x2c0 [ 257.841900][T14178] sctp_sendmsg+0x159b/0x2d00 [ 257.841929][T14178] ? __pfx_sctp_sendmsg+0x10/0x10 [ 257.841949][T14178] ? aa_sk_perm+0x6d5/0x900 [ 257.841969][T14178] ? __might_fault+0xaf/0x130 [ 257.841991][T14178] ? sock_rps_record_flow+0x19/0x350 [ 257.842014][T14178] ? inet_sendmsg+0x298/0x320 [ 257.842036][T14178] ? __pfx_inet_sendmsg+0x10/0x10 [ 257.842056][T14178] sock_sendmsg_nosec+0x10e/0x180 [ 257.842078][T14178] __sys_sendto+0x408/0x5a0 [ 257.842092][T14178] ? ksys_write+0x1e6/0x270 [ 257.842114][T14178] ? __pfx___sys_sendto+0x10/0x10 [ 257.842129][T14178] ? __mutex_unlock_slowpath+0x731/0x900 [ 257.842182][T14178] ? __pfx_ksys_write+0x10/0x10 [ 257.842203][T14178] __x64_sys_sendto+0xde/0x100 [ 257.842219][T14178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.842238][T14178] do_syscall_64+0x174/0x580 [ 257.842251][T14178] ? trace_irq_disable+0x3b/0x140 [ 257.842264][T14178] ? clear_bhb_loop+0x40/0x90 [ 257.842282][T14178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.842297][T14178] RIP: 0033:0x7f536d99ce59 [ 257.842313][T14178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.842326][T14178] RSP: 002b:00007f536e895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 257.842343][T14178] RAX: ffffffffffffffda RBX: 00007f536dc15fa0 RCX: 00007f536d99ce59 [ 257.842354][T14178] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 257.842362][T14178] RBP: 00007f536e895090 R08: 0000200000000140 R09: 000000000000001c [ 257.842373][T14178] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 257.842383][T14178] R13: 00007f536dc16038 R14: 00007f536dc15fa0 R15: 00007fff643a4e58 [ 257.842409][T14178] [ 258.277152][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 258.407951][T14191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.418686][T14191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.439610][T14191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34071 - 0 [ 258.450137][T14191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 258.588030][T14204] FAULT_INJECTION: forcing a failure. [ 258.588030][T14204] name failslab, interval 1, probability 0, space 0, times 0 [ 258.631551][T14204] CPU: 0 UID: 0 PID: 14204 Comm: syz.2.2283 Not tainted syzkaller #0 PREEMPT(full) [ 258.631577][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.631588][T14204] Call Trace: [ 258.631595][T14204] [ 258.631603][T14204] dump_stack_lvl+0xe8/0x150 [ 258.631632][T14204] should_fail_ex+0x40c/0x560 [ 258.631663][T14204] should_failslab+0xa8/0x100 [ 258.631687][T14204] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 258.631714][T14204] ? local_lock_release+0x9c/0x160 [ 258.631745][T14204] ? __alloc_skb+0x1d7/0x7a0 [ 258.631759][T14204] ? __alloc_skb+0x1d7/0x7a0 [ 258.631783][T14204] __alloc_skb+0x1d7/0x7a0 [ 258.631806][T14204] netlink_ack+0x136/0xb30 [ 258.631825][T14204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.631851][T14204] ? __pfx_nl802154_post_doit+0x10/0x10 [ 258.631901][T14204] netlink_rcv_skb+0x2a4/0x4a0 [ 258.631924][T14204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.631952][T14204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.631989][T14204] ? down_read+0x2be/0x330 [ 258.632013][T14204] genl_rcv+0x28/0x40 [ 258.632036][T14204] netlink_unicast+0x7bb/0x940 [ 258.632067][T14204] netlink_sendmsg+0x813/0xb40 [ 258.632099][T14204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.632126][T14204] ? aa_sock_msg_perm+0xf1/0x1b0 [ 258.632154][T14204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.632175][T14204] sock_sendmsg_nosec+0x13a/0x180 [ 258.632204][T14204] ____sys_sendmsg+0x54e/0x850 [ 258.632230][T14204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.632261][T14204] ? import_iovec+0x73/0xa0 [ 258.632285][T14204] ___sys_sendmsg+0x2a5/0x360 [ 258.632304][T14204] ? __lock_acquire+0x683/0x2cf0 [ 258.632329][T14204] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.632389][T14204] ? __fget_files+0x2a/0x420 [ 258.632406][T14204] ? __fget_files+0x3a2/0x420 [ 258.632436][T14204] __x64_sys_sendmsg+0x1b1/0x290 [ 258.632460][T14204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.632500][T14204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.632522][T14204] do_syscall_64+0x174/0x580 [ 258.632538][T14204] ? trace_irq_disable+0x3b/0x140 [ 258.632557][T14204] ? clear_bhb_loop+0x40/0x90 [ 258.632580][T14204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.632599][T14204] RIP: 0033:0x7f6fd059ce59 [ 258.632616][T14204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.632633][T14204] RSP: 002b:00007f6fd14fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.632653][T14204] RAX: ffffffffffffffda RBX: 00007f6fd0816090 RCX: 00007f6fd059ce59 [ 258.632667][T14204] RDX: 000000000c000800 RSI: 0000200000000140 RDI: 0000000000000004 [ 258.632679][T14204] RBP: 00007f6fd14fe090 R08: 0000000000000000 R09: 0000000000000000 [ 258.632691][T14204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.632703][T14204] R13: 00007f6fd0816128 R14: 00007f6fd0816090 R15: 00007ffff6dbd4c8 [ 258.632735][T14204] [ 259.543157][T14191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.556623][T14191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.569931][T14191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34071 - 0 [ 259.584452][T14191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 259.763530][T14207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.772059][T14207] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.786037][T14207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.818021][T14207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.828205][T14207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.843127][T14207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.854057][T14207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.867890][T14207] veth0_vlan: left promiscuous mode [ 259.874548][T14207] veth0_vlan: entered promiscuous mode [ 259.882654][T14207] veth1_vlan: entered promiscuous mode [ 259.892893][T14207] veth0_macvtap: left promiscuous mode [ 259.899343][T14207] veth0_macvtap: entered promiscuous mode [ 259.906237][T14207] veth1_macvtap: entered promiscuous mode [ 259.916592][T14207] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 259.940281][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.947472][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.002414][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.009593][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.095004][T14235] netlink: 'syz.3.2290': attribute type 7 has an invalid length. [ 260.106163][T14237] FAULT_INJECTION: forcing a failure. [ 260.106163][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 260.130193][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.1.2292 Not tainted syzkaller #0 PREEMPT(full) [ 260.130218][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.130228][T14237] Call Trace: [ 260.130247][T14237] [ 260.130255][T14237] dump_stack_lvl+0xe8/0x150 [ 260.130282][T14237] should_fail_ex+0x40c/0x560 [ 260.130312][T14237] should_failslab+0xa8/0x100 [ 260.130335][T14237] __kmalloc_cache_noprof+0xa8/0x660 [ 260.130387][T14237] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 260.130414][T14237] ? __kmalloc_cache_noprof+0x150/0x660 [ 260.130442][T14237] ? sctp_add_bind_addr+0x8c/0x370 [ 260.130466][T14237] ? sctp_add_bind_addr+0x8c/0x370 [ 260.130498][T14237] sctp_add_bind_addr+0x8c/0x370 [ 260.130529][T14237] sctp_copy_local_addr_list+0x31a/0x4e0 [ 260.130558][T14237] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 260.130585][T14237] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 260.130614][T14237] ? sctp_v6_is_any+0x64/0x80 [ 260.130642][T14237] ? sctp_copy_one_addr+0x93/0x360 [ 260.130672][T14237] sctp_bind_addr_copy+0xb3/0x3c0 [ 260.130700][T14237] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 260.130728][T14237] sctp_connect_new_asoc+0x2ff/0x6b0 [ 260.130751][T14237] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 260.130778][T14237] ? __local_bh_enable_ip+0xd0/0x130 [ 260.130804][T14237] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 260.130830][T14237] ? security_sctp_bind_connect+0x7e/0x2c0 [ 260.130853][T14237] sctp_sendmsg+0x159b/0x2d00 [ 260.130889][T14237] ? __pfx_sctp_sendmsg+0x10/0x10 [ 260.130915][T14237] ? aa_sk_perm+0x6d5/0x900 [ 260.130944][T14237] ? __might_fault+0xaf/0x130 [ 260.130975][T14237] ? sock_rps_record_flow+0x19/0x350 [ 260.131007][T14237] ? inet_sendmsg+0x298/0x320 [ 260.131036][T14237] ? __pfx_inet_sendmsg+0x10/0x10 [ 260.131062][T14237] sock_sendmsg_nosec+0x10e/0x180 [ 260.131092][T14237] __sys_sendto+0x408/0x5a0 [ 260.131110][T14237] ? ksys_write+0x1e6/0x270 [ 260.131137][T14237] ? __pfx___sys_sendto+0x10/0x10 [ 260.131153][T14237] ? __mutex_unlock_slowpath+0x731/0x900 [ 260.131205][T14237] ? __pfx_ksys_write+0x10/0x10 [ 260.131231][T14237] __x64_sys_sendto+0xde/0x100 [ 260.131257][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.131277][T14237] do_syscall_64+0x174/0x580 [ 260.131294][T14237] ? trace_irq_disable+0x3b/0x140 [ 260.131310][T14237] ? clear_bhb_loop+0x40/0x90 [ 260.131333][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.131351][T14237] RIP: 0033:0x7f8f8879ce59 [ 260.131369][T14237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.131385][T14237] RSP: 002b:00007f8f8967b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 260.131405][T14237] RAX: ffffffffffffffda RBX: 00007f8f88a15fa0 RCX: 00007f8f8879ce59 [ 260.131418][T14237] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 260.131430][T14237] RBP: 00007f8f8967b090 R08: 0000200000000140 R09: 000000000000001c [ 260.131443][T14237] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 260.131455][T14237] R13: 00007f8f88a16038 R14: 00007f8f88a15fa0 R15: 00007ffeb7481f38 [ 260.131488][T14237] [ 260.491120][T10294] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.603272][T14191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.620191][T14191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.631974][T14191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34071 - 0 [ 260.642706][T14191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 260.759603][T14244] pim6reg: entered allmulticast mode [ 260.797328][T10294] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.808213][T10294] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.816744][T10294] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.837131][T14247] pim6reg: left allmulticast mode [ 260.889907][T14251] veth1_to_bridge: mtu less than device minimum [ 260.939512][T14191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.954209][T14191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.987745][T14191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34071 - 0 [ 261.002750][T14191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 261.042035][T14262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2296'. [ 261.363344][T14286] FAULT_INJECTION: forcing a failure. [ 261.363344][T14286] name failslab, interval 1, probability 0, space 0, times 0 [ 261.374854][T14280] netlink: 'syz.1.2302': attribute type 2 has an invalid length. [ 261.398011][T14286] CPU: 1 UID: 0 PID: 14286 Comm: syz.3.2304 Not tainted syzkaller #0 PREEMPT(full) [ 261.398039][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.398049][T14286] Call Trace: [ 261.398055][T14286] [ 261.398063][T14286] dump_stack_lvl+0xe8/0x150 [ 261.398092][T14286] should_fail_ex+0x40c/0x560 [ 261.398124][T14286] should_failslab+0xa8/0x100 [ 261.398147][T14286] __kmalloc_cache_noprof+0xa8/0x660 [ 261.398174][T14286] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 261.398198][T14286] ? __kmalloc_cache_noprof+0x150/0x660 [ 261.398225][T14286] ? sctp_add_bind_addr+0x8c/0x370 [ 261.398248][T14286] ? sctp_add_bind_addr+0x8c/0x370 [ 261.398279][T14286] sctp_add_bind_addr+0x8c/0x370 [ 261.398309][T14286] sctp_copy_local_addr_list+0x31a/0x4e0 [ 261.398338][T14286] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 261.398364][T14286] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 261.398391][T14286] ? sctp_v6_is_any+0x64/0x80 [ 261.398417][T14286] ? sctp_copy_one_addr+0x93/0x360 [ 261.398446][T14286] sctp_bind_addr_copy+0xb3/0x3c0 [ 261.398472][T14286] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 261.398500][T14286] sctp_connect_new_asoc+0x2ff/0x6b0 [ 261.398531][T14286] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 261.398557][T14286] ? __local_bh_enable_ip+0xd0/0x130 [ 261.398583][T14286] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 261.398607][T14286] ? security_sctp_bind_connect+0x7e/0x2c0 [ 261.398629][T14286] sctp_sendmsg+0x159b/0x2d00 [ 261.398664][T14286] ? __pfx_sctp_sendmsg+0x10/0x10 [ 261.398688][T14286] ? aa_sk_perm+0x6d5/0x900 [ 261.398712][T14286] ? __might_fault+0xaf/0x130 [ 261.398733][T14286] ? sock_rps_record_flow+0x19/0x350 [ 261.398756][T14286] ? inet_sendmsg+0x298/0x320 [ 261.398776][T14286] ? __pfx_inet_sendmsg+0x10/0x10 [ 261.398794][T14286] sock_sendmsg_nosec+0x10e/0x180 [ 261.398815][T14286] __sys_sendto+0x408/0x5a0 [ 261.398828][T14286] ? ksys_write+0x1e6/0x270 [ 261.398847][T14286] ? __pfx___sys_sendto+0x10/0x10 [ 261.398858][T14286] ? __mutex_unlock_slowpath+0x731/0x900 [ 261.398901][T14286] ? __pfx_ksys_write+0x10/0x10 [ 261.398921][T14286] __x64_sys_sendto+0xde/0x100 [ 261.398936][T14286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.398951][T14286] do_syscall_64+0x174/0x580 [ 261.398965][T14286] ? clear_bhb_loop+0x40/0x90 [ 261.398983][T14286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.398997][T14286] RIP: 0033:0x7f1d2bf9ce59 [ 261.399010][T14286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.399024][T14286] RSP: 002b:00007f1d2ced9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.399041][T14286] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9ce59 [ 261.399051][T14286] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 261.399060][T14286] RBP: 00007f1d2ced9090 R08: 0000200000000140 R09: 000000000000001c [ 261.399069][T14286] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 261.399077][T14286] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffe32d01268 [ 261.399101][T14286] [ 261.399515][T14279] netlink: 'syz.2.2301': attribute type 18 has an invalid length. [ 261.408322][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 261.458477][T10294] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.598725][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 261.612582][T10294] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 261.787318][T10294] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.798080][T10294] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 34071 - 0 [ 261.906198][T14300] netlink: 'syz.4.2307': attribute type 21 has an invalid length. [ 262.001871][T14301] bond8: Unable to set down delay as MII monitoring is disabled [ 262.022779][T14301] bond8 (unregistering): Released all slaves [ 262.145501][T10323] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.158140][T14300] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 262.233882][T10323] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.344317][T10323] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.374566][T10323] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.399833][T14324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2315'. [ 262.412749][T10323] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 262.436093][T10323] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.469995][T10323] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 34071 - 0 [ 262.505127][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 262.536680][T14322] vlan0: Caught tx_queue_len zero misconfig [ 262.552689][T10323] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.566817][T10323] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 262.576096][T10323] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.584574][T10323] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 34071 - 0 [ 262.662810][T10323] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.676996][T10323] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 262.699317][T10323] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.708118][T10323] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 34071 - 0 [ 262.716878][T14335] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2318'. [ 262.751822][T14335] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 263.272433][T14362] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2329'. [ 263.286000][T14362] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2329'. [ 263.296604][T14362] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2329'. [ 263.309271][T14362] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 263.318932][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 263.328570][T14365] netlink: 'syz.1.2330': attribute type 18 has an invalid length. [ 263.365938][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 263.415562][T14365] netlink: 'syz.1.2330': attribute type 18 has an invalid length. [ 263.431415][T10323] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 263.464484][T10323] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 263.493140][T10323] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 263.513852][T10323] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 264.279198][T14418] xt_CT: No such helper "snmp" [ 264.371871][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 264.421331][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.428973][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.666981][T14405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.792202][T14405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.856703][T14405] veth1_vlan: left promiscuous mode [ 264.980692][T14410] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 264.982674][T10294] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.050180][T10294] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 265.084679][T10294] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.141859][T10294] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 265.193567][T10294] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.242854][T10294] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 265.270328][T10294] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.298515][T10294] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 265.321804][T14462] FAULT_INJECTION: forcing a failure. [ 265.321804][T14462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.337733][T14460] netlink: 'syz.4.2348': attribute type 2 has an invalid length. [ 265.369080][T14462] CPU: 1 UID: 0 PID: 14462 Comm: syz.2.2349 Not tainted syzkaller #0 PREEMPT(full) [ 265.369108][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.369119][T14462] Call Trace: [ 265.369127][T14462] [ 265.369135][T14462] dump_stack_lvl+0xe8/0x150 [ 265.369162][T14462] should_fail_ex+0x40c/0x560 [ 265.369194][T14462] _copy_to_user+0x31/0xb0 [ 265.369217][T14462] simple_read_from_buffer+0xe1/0x170 [ 265.369243][T14462] proc_fail_nth_read+0x1bb/0x230 [ 265.369266][T14462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.369290][T14462] ? rw_verify_area+0x24a/0x4c0 [ 265.369314][T14462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.369332][T14462] vfs_read+0x213/0xa80 [ 265.369361][T14462] ? __pfx___mutex_lock+0x10/0x10 [ 265.369380][T14462] ? __pfx_vfs_read+0x10/0x10 [ 265.369403][T14462] ? __fget_files+0x2a/0x420 [ 265.369429][T14462] ? __fget_files+0x3a2/0x420 [ 265.369446][T14462] ? __fget_files+0x2a/0x420 [ 265.369474][T14462] ksys_read+0x150/0x270 [ 265.369500][T14462] ? __pfx_ksys_read+0x10/0x10 [ 265.369531][T14462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.369552][T14462] do_syscall_64+0x174/0x580 [ 265.369569][T14462] ? trace_irq_disable+0x3b/0x140 [ 265.369587][T14462] ? clear_bhb_loop+0x40/0x90 [ 265.369611][T14462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.369630][T14462] RIP: 0033:0x7f6fd055d68e [ 265.369648][T14462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.369664][T14462] RSP: 002b:00007f6fd151efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.369684][T14462] RAX: ffffffffffffffda RBX: 00007f6fd151f6c0 RCX: 00007f6fd055d68e [ 265.369698][T14462] RDX: 000000000000000f RSI: 00007f6fd151f0a0 RDI: 0000000000000004 [ 265.369710][T14462] RBP: 00007f6fd151f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.369722][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.369733][T14462] R13: 00007f6fd0816038 R14: 00007f6fd0815fa0 R15: 00007ffff6dbd4c8 [ 265.369763][T14462] [ 265.410507][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 265.851976][T14481] netlink: 'syz.4.2353': attribute type 12 has an invalid length. [ 265.869714][T14481] netlink: 'syz.4.2353': attribute type 29 has an invalid length. [ 266.413292][T14519] vlan2: entered promiscuous mode [ 266.428929][T14519] hsr0: entered promiscuous mode [ 266.449330][T14519] vlan2: entered allmulticast mode [ 266.458026][T14519] hsr0: entered allmulticast mode [ 266.483391][T14519] hsr_slave_0: entered allmulticast mode [ 266.501735][T14519] hsr_slave_1: entered allmulticast mode [ 266.723668][T14536] __nla_validate_parse: 10 callbacks suppressed [ 266.723686][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2366'. [ 266.807795][T14536] IPVS: Unknown mcast interface: vcan0 [ 266.892580][T14536] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 267.254704][T14568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2377'. [ 267.379058][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 267.393487][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 267.723132][T14583] netlink: 'syz.1.2381': attribute type 1 has an invalid length. [ 267.734717][T14583] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 267.999133][T14604] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 268.017651][T14604] bridge_slave_1: left promiscuous mode [ 268.023666][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.036349][T14604] bridge_slave_0: left allmulticast mode [ 268.055328][T14604] bridge_slave_0: left promiscuous mode [ 268.094008][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.450176][T14628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2390'. [ 268.472210][T14626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2388'. [ 268.570918][T14615] netlink: 'syz.3.2388': attribute type 33 has an invalid length. [ 268.608491][T14615] batadv0: entered promiscuous mode [ 268.873884][T14650] xt_hashlimit: size too large, truncated to 1048576 [ 269.257453][T14660] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2398'. [ 269.538614][T14680] netlink: 'syz.2.2403': attribute type 32 has an invalid length. [ 269.557283][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 269.638400][T14690] xt_cgroup: invalid path, errno=-2 [ 269.659353][T14680] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 269.727172][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2405'. [ 270.235309][T14729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2414'. [ 270.819549][T14763] netlink: 'syz.2.2428': attribute type 21 has an invalid length. [ 271.249617][T14776] block nbd1: Unsupported socket: should be TCP or UNIX. [ 271.422608][T14785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.160572][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.169880][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.202938][T14822] __nla_validate_parse: 7 callbacks suppressed [ 272.202956][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 272.234083][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 272.426866][T14837] netlink: 'syz.1.2455': attribute type 29 has an invalid length. [ 272.438172][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 272.746361][T14851] netlink: 'syz.2.2461': attribute type 1 has an invalid length. [ 272.755366][T14851] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2461'. [ 272.855467][T14863] x_tables: duplicate underflow at hook 3 [ 272.977441][T14869] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#­¦ûËŒ [ 272.977441][T14869] d]WÊ”+NC”m­÷Y<ƒ­9Åê [ 273.079114][T14874] bond0: (slave bond_slave_0): Releasing backup interface [ 273.304370][T14886] syzkaller1: entered promiscuous mode [ 273.347456][T14886] syzkaller1: entered allmulticast mode [ 273.491586][T14896] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2472'. [ 273.646519][T14900] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 273.669617][T14900] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2474'. [ 273.902560][T14904] bond8: Unable to set down delay as MII monitoring is disabled [ 273.958251][T14904] bond8 (unregistering): Released all slaves [ 274.112902][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2482'. [ 274.127784][T14932] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 274.152165][T14922] netlink: 'syz.3.2480': attribute type 4 has an invalid length. [ 274.470997][T14949] netlink: 'syz.2.2488': attribute type 1 has an invalid length. [ 274.499888][T14949] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2488'. [ 274.660948][T14953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2489'. [ 274.807623][T14958] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 274.847950][T14958] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 274.897389][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 274.911762][T10246] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 274.921749][T14963] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.011004][T10246] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 275.619980][T14986] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 275.745663][T14990] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 275.969373][T15001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 276.231412][T15022] sctp: [Deprecated]: syz.3.2508 (pid 15022) Use of int in maxseg socket option. [ 276.231412][T15022] Use struct sctp_assoc_value instead [ 276.653369][T15041] netlink: 'syz.4.2512': attribute type 1 has an invalid length. [ 277.251821][T15076] FAULT_INJECTION: forcing a failure. [ 277.251821][T15076] name failslab, interval 1, probability 0, space 0, times 0 [ 277.279246][T15076] CPU: 1 UID: 0 PID: 15076 Comm: syz.0.2525 Not tainted syzkaller #0 PREEMPT(full) [ 277.279271][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 277.279281][T15076] Call Trace: [ 277.279287][T15076] [ 277.279296][T15076] dump_stack_lvl+0xe8/0x150 [ 277.279333][T15076] should_fail_ex+0x40c/0x560 [ 277.279361][T15076] should_failslab+0xa8/0x100 [ 277.279384][T15076] __kmalloc_cache_noprof+0xa8/0x660 [ 277.279409][T15076] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 277.279433][T15076] ? __kmalloc_cache_noprof+0x150/0x660 [ 277.279458][T15076] ? sctp_add_bind_addr+0x8c/0x370 [ 277.279479][T15076] ? sctp_add_bind_addr+0x8c/0x370 [ 277.279509][T15076] sctp_add_bind_addr+0x8c/0x370 [ 277.279538][T15076] sctp_copy_local_addr_list+0x31a/0x4e0 [ 277.279566][T15076] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 277.279592][T15076] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 277.279621][T15076] ? sctp_v6_is_any+0x64/0x80 [ 277.279648][T15076] ? sctp_copy_one_addr+0x93/0x360 [ 277.279676][T15076] sctp_bind_addr_copy+0xb3/0x3c0 [ 277.279704][T15076] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 277.279730][T15076] sctp_connect_new_asoc+0x2ff/0x6b0 [ 277.279754][T15076] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 277.279781][T15076] ? __local_bh_enable_ip+0xd0/0x130 [ 277.279805][T15076] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 277.279830][T15076] ? security_sctp_bind_connect+0x7e/0x2c0 [ 277.279853][T15076] sctp_sendmsg+0x159b/0x2d00 [ 277.279889][T15076] ? __pfx_sctp_sendmsg+0x10/0x10 [ 277.279915][T15076] ? aa_sk_perm+0x6d5/0x900 [ 277.279943][T15076] ? __might_fault+0xaf/0x130 [ 277.279973][T15076] ? sock_rps_record_flow+0x19/0x350 [ 277.280003][T15076] ? inet_sendmsg+0x298/0x320 [ 277.280033][T15076] ? __pfx_inet_sendmsg+0x10/0x10 [ 277.280061][T15076] sock_sendmsg_nosec+0x10e/0x180 [ 277.280089][T15076] __sys_sendto+0x408/0x5a0 [ 277.280107][T15076] ? ksys_write+0x1e6/0x270 [ 277.280133][T15076] ? __pfx___sys_sendto+0x10/0x10 [ 277.280148][T15076] ? __mutex_unlock_slowpath+0x731/0x900 [ 277.280208][T15076] ? __pfx_ksys_write+0x10/0x10 [ 277.280236][T15076] __x64_sys_sendto+0xde/0x100 [ 277.280252][T15076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.280271][T15076] do_syscall_64+0x174/0x580 [ 277.280287][T15076] ? trace_irq_disable+0x3b/0x140 [ 277.280312][T15076] ? clear_bhb_loop+0x40/0x90 [ 277.280336][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.280355][T15076] RIP: 0033:0x7f536d99ce59 [ 277.280373][T15076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.280389][T15076] RSP: 002b:00007f536e895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 277.280409][T15076] RAX: ffffffffffffffda RBX: 00007f536dc15fa0 RCX: 00007f536d99ce59 [ 277.280422][T15076] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 277.280435][T15076] RBP: 00007f536e895090 R08: 0000200000000140 R09: 000000000000001c [ 277.280447][T15076] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 277.280459][T15076] R13: 00007f536dc16038 R14: 00007f536dc15fa0 R15: 00007fff643a4e58 [ 277.280492][T15076] [ 277.592505][T15077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.788815][T15080] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 277.891103][T15080] __nla_validate_parse: 9 callbacks suppressed [ 277.891123][T15080] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2527'. [ 278.068672][T15088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2530'. [ 278.127312][T15085] syzkaller0: left promiscuous mode [ 278.147418][T15085] syzkaller0: left allmulticast mode [ 278.216095][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 278.367815][T15097] geneve5: entered promiscuous mode [ 278.534140][T15112] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.627257][T15118] netlink: 'syz.2.2541': attribute type 1 has an invalid length. [ 278.653741][T15118] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2541'. [ 278.702310][T15121] netlink: 'syz.0.2542': attribute type 11 has an invalid length. [ 278.776222][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 278.819908][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 278.864127][T15131] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 279.213654][T15160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.413807][T15166] FAULT_INJECTION: forcing a failure. [ 279.413807][T15166] name failslab, interval 1, probability 0, space 0, times 0 [ 279.427418][T15166] CPU: 1 UID: 0 PID: 15166 Comm: syz.4.2557 Not tainted syzkaller #0 PREEMPT(full) [ 279.427444][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.427454][T15166] Call Trace: [ 279.427462][T15166] [ 279.427470][T15166] dump_stack_lvl+0xe8/0x150 [ 279.427496][T15166] should_fail_ex+0x40c/0x560 [ 279.427525][T15166] should_failslab+0xa8/0x100 [ 279.427547][T15166] __kmalloc_cache_noprof+0xa8/0x660 [ 279.427578][T15166] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 279.427603][T15166] ? __kmalloc_cache_noprof+0x150/0x660 [ 279.427628][T15166] ? sctp_add_bind_addr+0x8c/0x370 [ 279.427648][T15166] ? sctp_add_bind_addr+0x8c/0x370 [ 279.427677][T15166] sctp_add_bind_addr+0x8c/0x370 [ 279.427707][T15166] sctp_copy_local_addr_list+0x31a/0x4e0 [ 279.427733][T15166] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 279.427760][T15166] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 279.427789][T15166] ? sctp_v6_is_any+0x64/0x80 [ 279.427816][T15166] ? sctp_copy_one_addr+0x93/0x360 [ 279.427845][T15166] sctp_bind_addr_copy+0xb3/0x3c0 [ 279.427872][T15166] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 279.427898][T15166] sctp_connect_new_asoc+0x2ff/0x6b0 [ 279.427921][T15166] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 279.427948][T15166] ? __local_bh_enable_ip+0xd0/0x130 [ 279.427972][T15166] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 279.427998][T15166] ? security_sctp_bind_connect+0x7e/0x2c0 [ 279.428020][T15166] sctp_sendmsg+0x159b/0x2d00 [ 279.428054][T15166] ? __pfx_sctp_sendmsg+0x10/0x10 [ 279.428081][T15166] ? aa_sk_perm+0x6d5/0x900 [ 279.428109][T15166] ? __might_fault+0xaf/0x130 [ 279.428147][T15166] ? sock_rps_record_flow+0x19/0x350 [ 279.428178][T15166] ? inet_sendmsg+0x298/0x320 [ 279.428206][T15166] ? __pfx_inet_sendmsg+0x10/0x10 [ 279.428231][T15166] sock_sendmsg_nosec+0x10e/0x180 [ 279.428261][T15166] __sys_sendto+0x408/0x5a0 [ 279.428279][T15166] ? ksys_write+0x1e6/0x270 [ 279.428305][T15166] ? __pfx___sys_sendto+0x10/0x10 [ 279.428321][T15166] ? __mutex_unlock_slowpath+0x731/0x900 [ 279.428379][T15166] ? __pfx_ksys_write+0x10/0x10 [ 279.428406][T15166] __x64_sys_sendto+0xde/0x100 [ 279.428426][T15166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.428447][T15166] do_syscall_64+0x174/0x580 [ 279.428463][T15166] ? trace_irq_disable+0x3b/0x140 [ 279.428482][T15166] ? clear_bhb_loop+0x40/0x90 [ 279.428505][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.428524][T15166] RIP: 0033:0x7fb77179ce59 [ 279.428542][T15166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.428558][T15166] RSP: 002b:00007fb7725d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 279.428578][T15166] RAX: ffffffffffffffda RBX: 00007fb771a15fa0 RCX: 00007fb77179ce59 [ 279.428592][T15166] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 279.428604][T15166] RBP: 00007fb7725d6090 R08: 0000200000000140 R09: 000000000000001c [ 279.428616][T15166] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 279.428628][T15166] R13: 00007fb771a16038 R14: 00007fb771a15fa0 R15: 00007ffdaaef94c8 [ 279.428660][T15166] [ 281.204139][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 281.939067][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'. [ 281.959554][T15169] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 281.961723][T15172] netlink: 64995 bytes leftover after parsing attributes in process `syz.3.2558'. [ 281.992112][T15185] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 282.082677][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 282.208669][T15197] netlink: 'syz.0.2567': attribute type 21 has an invalid length. [ 282.267318][T15197] mac80211_hwsim hwsim13 ÿ: renamed from wlan1 [ 282.692637][T15219] smbdirect: ib_dev[syz1] removed [ 282.914632][T15243] __nla_validate_parse: 1 callbacks suppressed [ 282.914652][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 283.136940][T15257] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2578'. [ 283.176738][T15237] sctp: [Deprecated]: syz.3.2576 (pid 15237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.176738][T15237] Use struct sctp_sack_info instead [ 283.300507][T15248] tipc: Enabled bearer , priority 11 [ 283.393186][T15228] syzkaller0: entered promiscuous mode [ 283.398822][T15228] syzkaller0: entered allmulticast mode [ 283.601593][T15265] netlink: zone id is out of range [ 283.624555][T15265] netlink: zone id is out of range [ 283.642983][T15265] netlink: zone id is out of range [ 286.489513][T15272] vlan4: entered allmulticast mode [ 286.580612][T15279] sctp: [Deprecated]: syz.0.2586 (pid 15279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.580612][T15279] Use struct sctp_sack_info instead [ 286.828750][T15293] ip6tnl1: entered allmulticast mode [ 286.930994][T15299] FAULT_INJECTION: forcing a failure. [ 286.930994][T15299] name failslab, interval 1, probability 0, space 0, times 0 [ 287.008628][T15299] CPU: 1 UID: 0 PID: 15299 Comm: syz.4.2593 Not tainted syzkaller #0 PREEMPT(full) [ 287.008654][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.008665][T15299] Call Trace: [ 287.008672][T15299] [ 287.008680][T15299] dump_stack_lvl+0xe8/0x150 [ 287.008708][T15299] should_fail_ex+0x40c/0x560 [ 287.008739][T15299] should_failslab+0xa8/0x100 [ 287.008763][T15299] __kmalloc_cache_noprof+0xa8/0x660 [ 287.008794][T15299] ? ovs_flow_cmd_new+0x356/0xe80 [ 287.008818][T15299] ? ovs_flow_cmd_new+0x356/0xe80 [ 287.008851][T15299] ovs_flow_cmd_new+0x356/0xe80 [ 287.008876][T15299] ? __kmalloc_noprof+0x1ad/0x720 [ 287.008905][T15299] ? kasan_save_track+0x3e/0x80 [ 287.008927][T15299] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 287.008995][T15299] ? __kmalloc_noprof+0x396/0x720 [ 287.009027][T15299] ? __nla_parse+0x40/0x60 [ 287.009058][T15299] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 287.009085][T15299] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 287.009119][T15299] genl_family_rcv_msg_doit+0x233/0x340 [ 287.009153][T15299] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 287.009193][T15299] ? bpf_lsm_capable+0x9/0x20 [ 287.009210][T15299] ? security_capable+0x7e/0x2c0 [ 287.009238][T15299] genl_rcv_msg+0x614/0x7a0 [ 287.009271][T15299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.009296][T15299] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 287.009336][T15299] netlink_rcv_skb+0x226/0x4a0 [ 287.009359][T15299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.009386][T15299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.009421][T15299] ? down_read+0x2be/0x330 [ 287.009443][T15299] genl_rcv+0x28/0x40 [ 287.009465][T15299] netlink_unicast+0x7bb/0x940 [ 287.009492][T15299] netlink_sendmsg+0x813/0xb40 [ 287.009522][T15299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.009547][T15299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 287.009575][T15299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.009602][T15299] sock_sendmsg_nosec+0x13a/0x180 [ 287.009631][T15299] ____sys_sendmsg+0x54e/0x850 [ 287.009657][T15299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.009687][T15299] ? import_iovec+0x73/0xa0 [ 287.009710][T15299] ___sys_sendmsg+0x2a5/0x360 [ 287.009729][T15299] ? __lock_acquire+0x683/0x2cf0 [ 287.009753][T15299] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.009811][T15299] ? __fget_files+0x2a/0x420 [ 287.009829][T15299] ? __fget_files+0x3a2/0x420 [ 287.009858][T15299] __x64_sys_sendmsg+0x1b1/0x290 [ 287.009882][T15299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.009919][T15299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.009939][T15299] do_syscall_64+0x174/0x580 [ 287.009956][T15299] ? trace_irq_disable+0x3b/0x140 [ 287.009974][T15299] ? clear_bhb_loop+0x40/0x90 [ 287.009997][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.010016][T15299] RIP: 0033:0x7fb77179ce59 [ 287.010034][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.010050][T15299] RSP: 002b:00007fb7725d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.010070][T15299] RAX: ffffffffffffffda RBX: 00007fb771a15fa0 RCX: 00007fb77179ce59 [ 287.010083][T15299] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 287.010095][T15299] RBP: 00007fb7725d6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.010106][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.010117][T15299] R13: 00007fb771a16038 R14: 00007fb771a15fa0 R15: 00007ffdaaef94c8 [ 287.010150][T15299] [ 287.460509][T15304] veth0: entered promiscuous mode [ 287.471750][T15304] veth0: left promiscuous mode [ 287.529081][T15307] block nbd0: Unsupported socket: should be TCP or UNIX. [ 287.750509][T15321] netlink: 'syz.0.2601': attribute type 39 has an invalid length. [ 287.865899][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2600'. [ 288.147938][T15349] syzkaller1: entered promiscuous mode [ 288.289887][T15355] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 288.376790][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2613'. [ 288.398458][T15355] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.414554][T15366] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 288.437436][T15362] bond8: (slave geneve3): making interface the new active one [ 288.452554][T15362] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 288.548364][T15366] 8021q: adding VLAN 0 to HW filter on device bond9 [ 288.558317][T15364] veth0_to_bond: left allmulticast mode [ 288.564289][T15364] veth0_to_bond: left promiscuous mode [ 288.571364][T15364] bridge3: port 2(veth0_to_bond) entered disabled state [ 288.653901][T15364] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 288.668953][T15376] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 288.758766][T15366] macvlan1: entered promiscuous mode [ 288.762330][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 288.774839][T15366] macvlan1: entered allmulticast mode [ 288.809066][T15374] netlink: 524 bytes leftover after parsing attributes in process `syz.2.2614'. [ 288.821989][T15366] bond9: entered promiscuous mode [ 288.828541][T15366] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 288.839796][T15366] bond9: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 288.857082][T15366] bond9: left promiscuous mode [ 288.885888][ T5629] block nbd1: Receive control failed (result -32) [ 289.068531][T15389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.878277][T15434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2632'. [ 290.089191][T15446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.217176][T15451] geneve5: entered promiscuous mode [ 290.253028][T15451] team0: Port device geneve5 added [ 290.311537][T10298] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 290.353199][T10298] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 290.380201][T10298] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 290.399950][T10298] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 290.411498][T15459] syzkaller0: entered promiscuous mode [ 290.421314][T15459] syzkaller0: entered allmulticast mode [ 290.447639][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'. [ 290.579270][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2645'. [ 290.643080][T15475] tipc: Enabling of bearer rejected, already enabled [ 290.851693][T15485] SET target dimension over the limit! [ 290.887657][T15480] can: request_module (can-proto-5) failed. [ 290.898218][T15487] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 291.103109][T15502] bridge0: port 1(veth1_to_bridge) entered blocking state [ 291.124766][T15502] bridge0: port 1(veth1_to_bridge) entered disabled state [ 291.154310][T15502] veth1_to_bridge: entered allmulticast mode [ 291.194304][T15502] veth1_to_bridge: entered promiscuous mode [ 291.211932][T15502] bridge0: port 1(veth1_to_bridge) entered blocking state [ 291.219212][T15502] bridge0: port 1(veth1_to_bridge) entered listening state [ 291.232702][T15509] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2655'. [ 291.268923][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 291.322644][T15514] netlink: zone id is out of range [ 291.333894][T15514] netlink: set zone limit has 4 unknown bytes [ 291.341122][T15501] xfrm0 speed is unknown, defaulting to 1000 [ 291.509235][T15523] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 292.011276][T15554] netlink: 'syz.2.2668': attribute type 1 has an invalid length. [ 292.048832][T15554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2668'. [ 292.102186][T15561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.151574][T15561] FAULT_INJECTION: forcing a failure. [ 292.151574][T15561] name failslab, interval 1, probability 0, space 0, times 0 [ 292.172380][T15561] CPU: 1 UID: 0 PID: 15561 Comm: syz.0.2671 Not tainted syzkaller #0 PREEMPT(full) [ 292.172414][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.172424][T15561] Call Trace: [ 292.172432][T15561] [ 292.172440][T15561] dump_stack_lvl+0xe8/0x150 [ 292.172467][T15561] should_fail_ex+0x40c/0x560 [ 292.172498][T15561] should_failslab+0xa8/0x100 [ 292.172519][T15561] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 292.172545][T15561] ? skb_clone+0x212/0x3a0 [ 292.172574][T15561] ? skb_clone+0x212/0x3a0 [ 292.172600][T15561] skb_clone+0x212/0x3a0 [ 292.172624][T15561] __netlink_deliver_tap+0x413/0x860 [ 292.172657][T15561] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.172679][T15561] netlink_deliver_tap+0x19c/0x1b0 [ 292.172702][T15561] netlink_sendskb+0x68/0x140 [ 292.172723][T15561] netlink_rcv_skb+0x2a4/0x4a0 [ 292.172743][T15561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.172771][T15561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.172807][T15561] ? down_read+0x2be/0x330 [ 292.172833][T15561] genl_rcv+0x28/0x40 [ 292.172854][T15561] netlink_unicast+0x7bb/0x940 [ 292.172883][T15561] netlink_sendmsg+0x813/0xb40 [ 292.172914][T15561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.172940][T15561] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.172969][T15561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.172990][T15561] sock_sendmsg_nosec+0x13a/0x180 [ 292.173018][T15561] ____sys_sendmsg+0x54e/0x850 [ 292.173045][T15561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.173076][T15561] ? import_iovec+0x73/0xa0 [ 292.173098][T15561] ___sys_sendmsg+0x2a5/0x360 [ 292.173116][T15561] ? __lock_acquire+0x683/0x2cf0 [ 292.173139][T15561] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.173197][T15561] ? __fget_files+0x2a/0x420 [ 292.173214][T15561] ? __fget_files+0x3a2/0x420 [ 292.173251][T15561] __x64_sys_sendmsg+0x1b1/0x290 [ 292.173275][T15561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.173315][T15561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.173336][T15561] do_syscall_64+0x174/0x580 [ 292.173352][T15561] ? trace_irq_disable+0x3b/0x140 [ 292.173371][T15561] ? clear_bhb_loop+0x40/0x90 [ 292.173394][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.173412][T15561] RIP: 0033:0x7f536d99ce59 [ 292.173430][T15561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.173446][T15561] RSP: 002b:00007f536e895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.173466][T15561] RAX: ffffffffffffffda RBX: 00007f536dc15fa0 RCX: 00007f536d99ce59 [ 292.173479][T15561] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 292.173491][T15561] RBP: 00007f536e895090 R08: 0000000000000000 R09: 0000000000000000 [ 292.173503][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.173514][T15561] R13: 00007f536dc16038 R14: 00007f536dc15fa0 R15: 00007fff643a4e58 [ 292.173547][T15561] [ 292.855974][T15595] FAULT_INJECTION: forcing a failure. [ 292.855974][T15595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.869250][T15595] CPU: 1 UID: 0 PID: 15595 Comm: syz.4.2680 Not tainted syzkaller #0 PREEMPT(full) [ 292.869277][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.869285][T15595] Call Trace: [ 292.869292][T15595] [ 292.869299][T15595] dump_stack_lvl+0xe8/0x150 [ 292.869323][T15595] should_fail_ex+0x40c/0x560 [ 292.869348][T15595] _copy_from_iter+0x1d3/0x1660 [ 292.869369][T15595] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 292.869393][T15595] ? rcu_is_watching+0x15/0xb0 [ 292.869412][T15595] ? trace_kmem_cache_alloc+0x29/0xe0 [ 292.869435][T15595] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 292.869457][T15595] ? __pfx__copy_from_iter+0x10/0x10 [ 292.869477][T15595] ? __alloc_skb+0x276/0x7a0 [ 292.869491][T15595] ? __alloc_skb+0x276/0x7a0 [ 292.869509][T15595] ? netlink_sendmsg+0x650/0xb40 [ 292.869525][T15595] ? skb_put+0x112/0x210 [ 292.869542][T15595] netlink_sendmsg+0x6c0/0xb40 [ 292.869566][T15595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.869587][T15595] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.869616][T15595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.869632][T15595] sock_sendmsg_nosec+0x13a/0x180 [ 292.869655][T15595] ____sys_sendmsg+0x54e/0x850 [ 292.869676][T15595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.869699][T15595] ? import_iovec+0x73/0xa0 [ 292.869717][T15595] ___sys_sendmsg+0x2a5/0x360 [ 292.869733][T15595] ? __lock_acquire+0x683/0x2cf0 [ 292.869752][T15595] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.869795][T15595] ? __fget_files+0x2a/0x420 [ 292.869809][T15595] ? __fget_files+0x3a2/0x420 [ 292.869831][T15595] __x64_sys_sendmsg+0x1b1/0x290 [ 292.869850][T15595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.869880][T15595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.869896][T15595] do_syscall_64+0x174/0x580 [ 292.869912][T15595] ? clear_bhb_loop+0x40/0x90 [ 292.869930][T15595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.869945][T15595] RIP: 0033:0x7fb77179ce59 [ 292.869959][T15595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.869973][T15595] RSP: 002b:00007fb7725d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.869989][T15595] RAX: ffffffffffffffda RBX: 00007fb771a15fa0 RCX: 00007fb77179ce59 [ 292.870000][T15595] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 292.870010][T15595] RBP: 00007fb7725d6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.870019][T15595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.870028][T15595] R13: 00007fb771a16038 R14: 00007fb771a15fa0 R15: 00007ffdaaef94c8 [ 292.870052][T15595] [ 293.251125][ C1] bridge0: port 1(veth1_to_bridge) entered learning state [ 293.309414][T15608] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.651612][T15622] syzkaller0: entered promiscuous mode [ 293.666559][T15622] syzkaller0: entered allmulticast mode [ 293.863050][T15634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.188048][T15644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 294.212947][T15647] FAULT_INJECTION: forcing a failure. [ 294.212947][T15647] name failslab, interval 1, probability 0, space 0, times 0 [ 294.257498][T15650] openvswitch: netlink: Missing key (keys=40, expected=100) [ 294.259319][T15647] CPU: 0 UID: 0 PID: 15647 Comm: syz.4.2693 Not tainted syzkaller #0 PREEMPT(full) [ 294.259345][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.259357][T15647] Call Trace: [ 294.259365][T15647] [ 294.259373][T15647] dump_stack_lvl+0xe8/0x150 [ 294.259402][T15647] should_fail_ex+0x40c/0x560 [ 294.259433][T15647] should_failslab+0xa8/0x100 [ 294.259456][T15647] __kmalloc_cache_noprof+0xa8/0x660 [ 294.259484][T15647] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 294.259509][T15647] ? __kmalloc_cache_noprof+0x150/0x660 [ 294.259540][T15647] ? sctp_add_bind_addr+0x8c/0x370 [ 294.259561][T15647] ? sctp_add_bind_addr+0x8c/0x370 [ 294.259592][T15647] sctp_add_bind_addr+0x8c/0x370 [ 294.259628][T15647] sctp_copy_local_addr_list+0x31a/0x4e0 [ 294.259656][T15647] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 294.259682][T15647] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 294.259709][T15647] ? sctp_v6_is_any+0x64/0x80 [ 294.259737][T15647] ? sctp_copy_one_addr+0x93/0x360 [ 294.259765][T15647] sctp_bind_addr_copy+0xb3/0x3c0 [ 294.259791][T15647] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 294.259818][T15647] sctp_connect_new_asoc+0x2ff/0x6b0 [ 294.259841][T15647] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 294.259866][T15647] ? __local_bh_enable_ip+0xd0/0x130 [ 294.259891][T15647] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 294.259915][T15647] ? security_sctp_bind_connect+0x7e/0x2c0 [ 294.259937][T15647] sctp_sendmsg+0x159b/0x2d00 [ 294.259972][T15647] ? __pfx_sctp_sendmsg+0x10/0x10 [ 294.259997][T15647] ? aa_sk_perm+0x6d5/0x900 [ 294.260024][T15647] ? __might_fault+0xaf/0x130 [ 294.260054][T15647] ? sock_rps_record_flow+0x19/0x350 [ 294.260084][T15647] ? inet_sendmsg+0x298/0x320 [ 294.260113][T15647] ? __pfx_inet_sendmsg+0x10/0x10 [ 294.260137][T15647] sock_sendmsg_nosec+0x10e/0x180 [ 294.260165][T15647] __sys_sendto+0x408/0x5a0 [ 294.260183][T15647] ? ksys_write+0x1e6/0x270 [ 294.260212][T15647] ? __pfx___sys_sendto+0x10/0x10 [ 294.260227][T15647] ? __mutex_unlock_slowpath+0x731/0x900 [ 294.260285][T15647] ? __pfx_ksys_write+0x10/0x10 [ 294.260311][T15647] __x64_sys_sendto+0xde/0x100 [ 294.260329][T15647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.260350][T15647] do_syscall_64+0x174/0x580 [ 294.260367][T15647] ? trace_irq_disable+0x3b/0x140 [ 294.260384][T15647] ? clear_bhb_loop+0x40/0x90 [ 294.260407][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.260426][T15647] RIP: 0033:0x7fb77179ce59 [ 294.260443][T15647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.260459][T15647] RSP: 002b:00007fb7725d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 294.260478][T15647] RAX: ffffffffffffffda RBX: 00007fb771a15fa0 RCX: 00007fb77179ce59 [ 294.260491][T15647] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 294.260503][T15647] RBP: 00007fb7725d6090 R08: 0000200000000140 R09: 000000000000001c [ 294.260515][T15647] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 294.260527][T15647] R13: 00007fb771a16038 R14: 00007fb771a15fa0 R15: 00007ffdaaef94c8 [ 294.260557][T15647] [ 294.361546][T15652] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 294.813161][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.833885][T15677] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 294.941215][ T5746] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 294.983049][T15680] Can't find ip_set type hash:ip [ 295.061728][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'. [ 295.151400][ T5731] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 295.234157][T15697] netlink: 'syz.0.2709': attribute type 64 has an invalid length. [ 295.237481][T15700] openvswitch: netlink: Missing key (keys=40, expected=100) [ 295.332474][ C1] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 295.341316][ C1] bridge0: topology change detected, propagating [ 295.505746][ T5746] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 295.695877][T15722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2717'. [ 295.717067][T15722] syzkaller0: entered promiscuous mode [ 295.733035][T15722] syzkaller0: entered allmulticast mode [ 295.806445][T15727] blkio.reset_stats is deprecated [ 296.098316][T15729] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 296.119728][T15729] bond7 (unregistering): Released all slaves [ 296.195632][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 296.234233][T15742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2722'. [ 296.507435][T15752] syzkaller0: entered promiscuous mode [ 296.527472][T15755] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2725'. [ 296.539136][T15752] syzkaller0: entered allmulticast mode [ 296.697106][T15761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2728'. [ 296.707242][T15761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2728'. [ 296.720088][T15761] netlink: 'syz.1.2728': attribute type 5 has an invalid length. [ 296.940230][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2731'. [ 297.298823][T15795] netlink: 'syz.1.2738': attribute type 1 has an invalid length. [ 297.359086][T15798] netlink: 'syz.2.2739': attribute type 2 has an invalid length. [ 297.363723][T15799] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2740'. [ 297.402430][T15798] netlink: 'syz.2.2739': attribute type 2 has an invalid length. [ 297.436591][T15798] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2739'. [ 297.722573][T15826] netlink: 'syz.2.2748': attribute type 2 has an invalid length. [ 297.730839][T15826] netlink: 'syz.2.2748': attribute type 2 has an invalid length. [ 297.738623][T15826] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 298.015621][T15845] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 298.071763][T15851] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.259048][T15914] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 299.507078][T15928] FAULT_INJECTION: forcing a failure. [ 299.507078][T15928] name failslab, interval 1, probability 0, space 0, times 0 [ 299.535647][T15928] CPU: 0 UID: 0 PID: 15928 Comm: syz.4.2780 Not tainted syzkaller #0 PREEMPT(full) [ 299.535681][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.535691][T15928] Call Trace: [ 299.535699][T15928] [ 299.535707][T15928] dump_stack_lvl+0xe8/0x150 [ 299.535736][T15928] should_fail_ex+0x40c/0x560 [ 299.535766][T15928] should_failslab+0xa8/0x100 [ 299.535789][T15928] __kmalloc_cache_noprof+0xa8/0x660 [ 299.535815][T15928] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 299.535838][T15928] ? __kmalloc_cache_noprof+0x150/0x660 [ 299.535863][T15928] ? sctp_add_bind_addr+0x8c/0x370 [ 299.535884][T15928] ? sctp_add_bind_addr+0x8c/0x370 [ 299.535913][T15928] sctp_add_bind_addr+0x8c/0x370 [ 299.535941][T15928] sctp_copy_local_addr_list+0x31a/0x4e0 [ 299.535967][T15928] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 299.535993][T15928] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 299.536019][T15928] ? sctp_v6_is_any+0x64/0x80 [ 299.536046][T15928] ? sctp_copy_one_addr+0x93/0x360 [ 299.536073][T15928] sctp_bind_addr_copy+0xb3/0x3c0 [ 299.536099][T15928] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 299.536127][T15928] sctp_connect_new_asoc+0x2ff/0x6b0 [ 299.536149][T15928] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 299.536175][T15928] ? __local_bh_enable_ip+0xd0/0x130 [ 299.536198][T15928] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 299.536221][T15928] ? security_sctp_bind_connect+0x7e/0x2c0 [ 299.536242][T15928] sctp_sendmsg+0x159b/0x2d00 [ 299.536276][T15928] ? __pfx_sctp_sendmsg+0x10/0x10 [ 299.536302][T15928] ? aa_sk_perm+0x6d5/0x900 [ 299.536330][T15928] ? __might_fault+0xaf/0x130 [ 299.536360][T15928] ? sock_rps_record_flow+0x19/0x350 [ 299.536389][T15928] ? inet_sendmsg+0x298/0x320 [ 299.536418][T15928] ? __pfx_inet_sendmsg+0x10/0x10 [ 299.536443][T15928] sock_sendmsg_nosec+0x10e/0x180 [ 299.536469][T15928] __sys_sendto+0x408/0x5a0 [ 299.536485][T15928] ? ksys_write+0x1e6/0x270 [ 299.536510][T15928] ? __pfx___sys_sendto+0x10/0x10 [ 299.536529][T15928] ? __mutex_unlock_slowpath+0x731/0x900 [ 299.536588][T15928] ? __pfx_ksys_write+0x10/0x10 [ 299.536615][T15928] __x64_sys_sendto+0xde/0x100 [ 299.536635][T15928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.536655][T15928] do_syscall_64+0x174/0x580 [ 299.536680][T15928] ? trace_irq_disable+0x3b/0x140 [ 299.536698][T15928] ? clear_bhb_loop+0x40/0x90 [ 299.536721][T15928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.536740][T15928] RIP: 0033:0x7fb77179ce59 [ 299.536758][T15928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.536773][T15928] RSP: 002b:00007fb7725d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 299.536793][T15928] RAX: ffffffffffffffda RBX: 00007fb771a15fa0 RCX: 00007fb77179ce59 [ 299.536807][T15928] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 299.536819][T15928] RBP: 00007fb7725d6090 R08: 0000200000000140 R09: 000000000000001c [ 299.536831][T15928] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 299.536843][T15928] R13: 00007fb771a16038 R14: 00007fb771a15fa0 R15: 00007ffdaaef94c8 [ 299.536875][T15928] [ 300.038019][T15937] nftables ruleset with unbound chain [ 300.209152][T15937] __nla_validate_parse: 8 callbacks suppressed [ 300.209192][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 300.827891][T15972] FAULT_INJECTION: forcing a failure. [ 300.827891][T15972] name failslab, interval 1, probability 0, space 0, times 0 [ 300.846102][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.873902][T15972] CPU: 1 UID: 0 PID: 15972 Comm: syz.0.2795 Not tainted syzkaller #0 PREEMPT(full) [ 300.873928][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.873938][T15972] Call Trace: [ 300.873945][T15972] [ 300.873953][T15972] dump_stack_lvl+0xe8/0x150 [ 300.873980][T15972] should_fail_ex+0x40c/0x560 [ 300.874011][T15972] should_failslab+0xa8/0x100 [ 300.874034][T15972] __kmalloc_cache_noprof+0xa8/0x660 [ 300.874069][T15972] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 300.874093][T15972] ? __kmalloc_cache_noprof+0x150/0x660 [ 300.874117][T15972] ? sctp_add_bind_addr+0x8c/0x370 [ 300.874138][T15972] ? sctp_add_bind_addr+0x8c/0x370 [ 300.874165][T15972] sctp_add_bind_addr+0x8c/0x370 [ 300.874193][T15972] sctp_copy_local_addr_list+0x31a/0x4e0 [ 300.874220][T15972] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 300.874246][T15972] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 300.874275][T15972] ? sctp_v6_is_any+0x64/0x80 [ 300.874304][T15972] ? sctp_copy_one_addr+0x93/0x360 [ 300.874333][T15972] sctp_bind_addr_copy+0xb3/0x3c0 [ 300.874361][T15972] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 300.874388][T15972] sctp_connect_new_asoc+0x2ff/0x6b0 [ 300.874412][T15972] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 300.874440][T15972] ? __local_bh_enable_ip+0xd0/0x130 [ 300.874466][T15972] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 300.874491][T15972] ? security_sctp_bind_connect+0x7e/0x2c0 [ 300.874514][T15972] sctp_sendmsg+0x159b/0x2d00 [ 300.874550][T15972] ? __pfx_sctp_sendmsg+0x10/0x10 [ 300.874576][T15972] ? aa_sk_perm+0x6d5/0x900 [ 300.874604][T15972] ? __might_fault+0xaf/0x130 [ 300.874635][T15972] ? sock_rps_record_flow+0x19/0x350 [ 300.874666][T15972] ? inet_sendmsg+0x298/0x320 [ 300.874696][T15972] ? __pfx_inet_sendmsg+0x10/0x10 [ 300.874722][T15972] sock_sendmsg_nosec+0x10e/0x180 [ 300.874751][T15972] __sys_sendto+0x408/0x5a0 [ 300.874770][T15972] ? ksys_write+0x1e6/0x270 [ 300.874796][T15972] ? __pfx___sys_sendto+0x10/0x10 [ 300.874812][T15972] ? __mutex_unlock_slowpath+0x731/0x900 [ 300.874872][T15972] ? __pfx_ksys_write+0x10/0x10 [ 300.874900][T15972] __x64_sys_sendto+0xde/0x100 [ 300.874920][T15972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.874941][T15972] do_syscall_64+0x174/0x580 [ 300.874957][T15972] ? trace_irq_disable+0x3b/0x140 [ 300.874975][T15972] ? clear_bhb_loop+0x40/0x90 [ 300.874999][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.875017][T15972] RIP: 0033:0x7f536d99ce59 [ 300.875036][T15972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.875052][T15972] RSP: 002b:00007f536e895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 300.875078][T15972] RAX: ffffffffffffffda RBX: 00007f536dc15fa0 RCX: 00007f536d99ce59 [ 300.875092][T15972] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 300.875105][T15972] RBP: 00007f536e895090 R08: 0000200000000140 R09: 000000000000001c [ 300.875117][T15972] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 300.875129][T15972] R13: 00007f536dc16038 R14: 00007f536dc15fa0 R15: 00007fff643a4e58 [ 300.875162][T15972] [ 301.469829][T15967] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.566277][T15987] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2798'. [ 302.008671][T16014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.255135][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 302.311550][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 302.488598][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 302.553026][T16045] tipc: Enabling of bearer rejected, already enabled [ 302.593528][T16045] tipc: Resetting bearer [ 302.681215][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 302.687851][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 303.279056][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.297954][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.311468][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.324542][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.336083][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.373683][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.382471][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.390758][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.426324][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.434170][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.763656][T16097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2825'. [ 303.901913][T16101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2826'. [ 304.147884][T16108] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2828'. [ 304.157850][T10294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 304.193926][T10294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 304.205455][T10294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.219066][T10294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42077 - 0 [ 304.309311][T16116] validate_nla: 2 callbacks suppressed [ 304.309331][T16116] netlink: 'syz.4.2829': attribute type 12 has an invalid length. [ 304.309965][T16080] xfrm0 speed is unknown, defaulting to 1000 [ 304.401600][T10294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 304.413479][T10294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 304.434307][T10294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.463925][T10294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42077 - 0 [ 304.665010][T16129] openvswitch: netlink: Flow actions attr not present in new flow. [ 304.682770][T10294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 304.727020][T10294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 304.738075][T10294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.749779][T10294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42077 - 0 [ 304.879988][T16138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.915258][T10294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 304.952465][T10294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 304.979748][T10294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.002291][T10294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42077 - 0 [ 305.475673][T16162] __nla_validate_parse: 2 callbacks suppressed [ 305.475691][T16162] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2840'. [ 305.500522][ T5633] Bluetooth: hci5: command tx timeout [ 305.531731][T16171] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2842'. [ 305.585347][T16162] lo: entered promiscuous mode [ 305.634913][T16178] syzkaller1: entered promiscuous mode [ 305.647373][T16178] syzkaller1: entered allmulticast mode [ 305.689176][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.696923][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.704868][T16080] bridge_slave_0: entered allmulticast mode [ 305.726857][T16080] bridge_slave_0: entered promiscuous mode [ 305.928700][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.947535][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.958541][T16080] bridge_slave_1: entered allmulticast mode [ 305.967062][T16080] bridge_slave_1: entered promiscuous mode [ 306.025218][T10294] gretap0: left allmulticast mode [ 306.046199][T10294] gretap0: left promiscuous mode [ 306.061618][T10294] bridge0: port 3(gretap0) entered disabled state [ 306.095621][T10294] bridge_slave_1: left allmulticast mode [ 306.102380][T10294] bridge_slave_1: left promiscuous mode [ 306.110015][T10294] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.162759][T10294] bridge_slave_0: left promiscuous mode [ 306.168596][T10294] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.218889][T16199] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.334220][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2850'. [ 306.628193][T10294] bond5 (unregistering): (slave gretap1): Releasing active interface [ 306.654688][T10294] bond8 (unregistering): (slave geneve3): Releasing active interface [ 306.708231][T10294] bond4 (unregistering): (slave bridge3): Releasing active interface [ 306.772746][T10294]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.788415][T10294]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.799166][T10294]  (unregistering): (slave veth0_to_bond): Releasing backup interface [ 306.811758][T10294]  (unregistering): Released all slaves [ 306.822236][T10294] bond1 (unregistering): Released all slaves [ 306.848461][T10294] bond0 (unregistering): (slave bond6): Releasing active interface [ 306.858740][T10294] bond0 (unregistering): Released all slaves [ 306.878120][T10294] bond2 (unregistering): Released all slaves [ 306.892567][T10294] bond3 (unregistering): Released all slaves [ 306.907911][T10294] bond4 (unregistering): Released all slaves [ 306.927801][T10294] bond5 (unregistering): Released all slaves [ 306.934476][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 306.956120][T10294] bond6 (unregistering): Released all slaves [ 306.984933][T10294] bond7 (unregistering): Released all slaves [ 306.999181][T10294] bond8 (unregistering): Released all slaves [ 307.153786][T16080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.218443][T16209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 307.336270][T16080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.474090][T10294] tipc: Left network mode [ 307.506411][T16226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.550488][T16080] team0: Port device team_slave_0 added [ 307.570462][ T5633] Bluetooth: hci5: command tx timeout [ 307.593334][T16080] team0: Port device team_slave_1 added [ 307.638353][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 307.665055][T16080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.678945][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.776551][T16080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.889527][T16250] raw_sendmsg: syz.2.2859 forgot to set AF_INET. Fix it! [ 307.970448][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 308.119486][T16080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.148034][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.297615][T16080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.370600][T16266] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2863'. [ 308.652355][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2867'. [ 308.662049][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2865'. [ 308.699828][T16080] hsr_slave_0: entered promiscuous mode [ 308.718623][T16080] hsr_slave_1: entered promiscuous mode [ 308.725806][T16080] debugfs: 'hsr0' already exists in 'hsr' [ 308.732286][T16080] Cannot create hsr debugfs directory [ 308.746462][T16275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2866'. [ 308.825502][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 308.907850][T16291] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2869'. [ 309.010452][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 309.046656][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2871'. [ 309.056036][T16300] openvswitch: netlink: Flow actions attr not present in new flow. [ 309.111159][T16298] netlink: 'syz.0.2870': attribute type 1 has an invalid length. [ 309.277743][T16298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 309.452790][T10294] hsr_slave_0: left promiscuous mode [ 309.459849][T10294] hsr_slave_1: left promiscuous mode [ 309.467360][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.476694][T10294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.494730][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.510435][T10294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.545573][T16331] openvswitch: netlink: Message has 8 unknown bytes. [ 309.567302][T10294] veth0_macvtap: left promiscuous mode [ 309.578846][T10294] veth1_vlan: left promiscuous mode [ 309.585369][T10294] veth0_vlan: left promiscuous mode [ 309.650546][ T5633] Bluetooth: hci5: command tx timeout [ 309.985121][T10294] team0 (unregistering): Port device team_slave_1 removed [ 310.008942][T10294] team0 (unregistering): Port device team_slave_0 removed [ 310.163228][T16330] tipc: Started in network mode [ 310.171376][T16330] tipc: Node identity c2c1d489e3a, cluster identity 4711 [ 310.194921][T16330] tipc: Enabled bearer , priority 0 [ 310.442891][T16334] syzkaller0: entered promiscuous mode [ 310.460082][T16334] syzkaller0: entered allmulticast mode [ 310.488856][T16334] tipc: Resetting bearer [ 310.582261][T16325] tipc: Resetting bearer [ 310.625603][T16363] __nla_validate_parse: 1 callbacks suppressed [ 310.625624][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 311.733546][ T5633] Bluetooth: hci5: command tx timeout [ 313.144120][T16325] tipc: Disabling bearer [ 313.226672][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 313.247002][ T5359] tipc: Node number set to 560059529 [ 313.318743][T16369] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.341515][T16369] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.364491][T16369] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.389067][T16369] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 313.437613][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 313.545711][T16369] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.588247][T16369] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.619565][T16369] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 313.637914][T16369] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 313.735687][ T4993] udevd[4993]: worker [5631] /devices/virtual/block/nbd0 is taking a long time [ 313.954640][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 313.990072][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 314.037707][T16369] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.041724][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 314.058283][T16369] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.071915][T16369] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 314.084014][T16369] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 314.148422][T16407] bond19: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 314.168612][T16407] bond19 (unregistering): Released all slaves [ 314.283406][T16408] bond19: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 314.297985][T16408] bond19 (unregistering): Released all slaves [ 314.539193][T16369] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.555989][T16369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.568078][T16369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 314.578646][T16369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 315.213145][T10294] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.242058][T10294] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 315.266030][T10294] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.290463][T10294] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 34071 - 0 [ 315.349103][T10298] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.384726][T10298] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 315.420365][T10298] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.437024][T10298] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 34071 - 0 [ 315.448036][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2909'. [ 315.493910][T16472] nft_compat: unsupported protocol 0 [ 315.503806][T10293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.515144][T10293] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 315.538660][T10293] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.547382][T10293] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 34071 - 0 [ 315.635139][T10298] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.662444][T10298] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 315.691937][T10298] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.713652][T10298] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 34071 - 0 [ 315.739440][T16482] IPv6: sit2: Disabled Multicast RS [ 315.785139][T16482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 315.839854][T16485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 315.876011][T16482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2911'. [ 315.909629][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2914'. [ 315.922744][T16492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2914'. [ 315.958360][T16489] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 316.218148][T16494] bond8: (slave bridge7): making interface the new active one [ 316.250151][T16494] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 316.340002][T16516] FAULT_INJECTION: forcing a failure. [ 316.340002][T16516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.400013][T16516] CPU: 0 UID: 0 PID: 16516 Comm: syz.3.2919 Not tainted syzkaller #0 PREEMPT(full) [ 316.400039][T16516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.400049][T16516] Call Trace: [ 316.400057][T16516] [ 316.400063][T16516] dump_stack_lvl+0xe8/0x150 [ 316.400091][T16516] should_fail_ex+0x40c/0x560 [ 316.400121][T16516] _copy_from_iter+0x1d3/0x1660 [ 316.400148][T16516] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 316.400177][T16516] ? rcu_is_watching+0x15/0xb0 [ 316.400200][T16516] ? trace_kmem_cache_alloc+0x29/0xe0 [ 316.400226][T16516] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 316.400298][T16516] ? __pfx__copy_from_iter+0x10/0x10 [ 316.400324][T16516] ? __alloc_skb+0x276/0x7a0 [ 316.400340][T16516] ? __alloc_skb+0x276/0x7a0 [ 316.400363][T16516] ? netlink_sendmsg+0x650/0xb40 [ 316.400384][T16516] ? skb_put+0x112/0x210 [ 316.400404][T16516] netlink_sendmsg+0x6c0/0xb40 [ 316.400436][T16516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.400462][T16516] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.400491][T16516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.400511][T16516] sock_sendmsg_nosec+0x13a/0x180 [ 316.400539][T16516] ____sys_sendmsg+0x54e/0x850 [ 316.400565][T16516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.400595][T16516] ? import_iovec+0x73/0xa0 [ 316.400618][T16516] ___sys_sendmsg+0x2a5/0x360 [ 316.400638][T16516] ? __lock_acquire+0x683/0x2cf0 [ 316.400662][T16516] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.400718][T16516] ? __fget_files+0x2a/0x420 [ 316.400736][T16516] ? __fget_files+0x3a2/0x420 [ 316.400765][T16516] __x64_sys_sendmsg+0x1b1/0x290 [ 316.400788][T16516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.400834][T16516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.400855][T16516] do_syscall_64+0x174/0x580 [ 316.400873][T16516] ? trace_irq_disable+0x3b/0x140 [ 316.400890][T16516] ? clear_bhb_loop+0x40/0x90 [ 316.400914][T16516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.400933][T16516] RIP: 0033:0x7f1d2bf9ce59 [ 316.400950][T16516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.400966][T16516] RSP: 002b:00007f1d2ced9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.400986][T16516] RAX: ffffffffffffffda RBX: 00007f1d2c215fa0 RCX: 00007f1d2bf9ce59 [ 316.400999][T16516] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 316.401012][T16516] RBP: 00007f1d2ced9090 R08: 0000000000000000 R09: 0000000000000000 [ 316.401023][T16516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.401034][T16516] R13: 00007f1d2c216038 R14: 00007f1d2c215fa0 R15: 00007ffe32d01268 [ 316.401063][T16516] [ 316.417429][T16080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.727827][T16528] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 316.841962][T16080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.874907][T16080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.927211][T16080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.980134][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 317.006587][T16080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 317.038751][T16080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.051250][T16080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 317.064930][T16080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.494481][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.556104][T16080] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.579962][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.587212][T10326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.651570][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.658802][T10323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.730478][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 318.076776][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2933'. [ 318.414193][T16595] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2934'. [ 318.696973][T16609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2936'. [ 318.770619][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 319.297581][T16080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.403759][T16636] netlink: 'syz.3.2941': attribute type 1 has an invalid length. [ 319.460437][T16636] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2941'. [ 319.497344][T16080] veth0_vlan: entered promiscuous mode [ 319.504036][T16636] netlink: 'syz.3.2941': attribute type 1 has an invalid length. [ 319.594431][T16080] veth1_vlan: entered promiscuous mode [ 319.754646][T16080] veth0_macvtap: entered promiscuous mode [ 319.795340][T16080] veth1_macvtap: entered promiscuous mode [ 319.913996][T16080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.952095][T16080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.990944][T10294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.014670][T10294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.051744][T10294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.143276][T10294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.516208][T16668] gre2: entered promiscuous mode [ 320.526609][T16668] gre2: entered allmulticast mode [ 320.561261][T16671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.736487][T16705] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 322.962105][T16653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.155014][T10293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.213273][T10293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.329267][T16754] __nla_validate_parse: 2 callbacks suppressed [ 323.329286][T16754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2950'. [ 323.350210][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'. [ 323.385181][T10293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.396687][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'. [ 323.419222][T10293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.445222][T16755] vlan0: entered promiscuous mode [ 324.511369][T16800] netlink: 'syz.4.2960': attribute type 1 has an invalid length. [ 324.557846][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.573146][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.583897][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.592508][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.600163][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.988614][T16800] bond19: entered promiscuous mode [ 325.017765][T16800] 8021q: adding VLAN 0 to HW filter on device bond19 [ 325.155617][T16804] 8021q: adding VLAN 0 to HW filter on device bond19 [ 325.199548][T16804] bond19: (slave vti1): The slave device specified does not support setting the MAC address [ 325.241423][T16804] bond19: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 325.300523][T16804] bond19: (slave vti1): making interface the new active one [ 325.336332][T16804] vti1: entered promiscuous mode [ 325.356931][T16804] bond19: (slave vti1): Enslaving as an active interface with an up link [ 325.537195][T10326] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.606111][T10326] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 325.655940][T10326] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 325.698770][T10326] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 325.830009][T16829] syzkaller0: entered promiscuous mode [ 325.839525][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 325.851132][T16829] syzkaller0: entered allmulticast mode [ 326.007527][T16853] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2974'. [ 326.059474][T10326] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.108843][T10326] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.186756][T10326] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.236702][T10326] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 326.498498][T10326] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.525100][T10326] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.581955][T10326] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.622618][T10326] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 326.690690][ T5633] Bluetooth: hci1: command tx timeout [ 326.764941][T16799] xfrm0 speed is unknown, defaulting to 1000 [ 326.775550][T16873] team0: Cannot enslave team device to itself [ 326.883804][T10326] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.935838][T10326] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.996522][T10326] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.021398][T10326] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 34071 - 0 [ 327.258803][T16889] netlink: 'syz.1.2981': attribute type 2 has an invalid length. [ 327.286302][T16902] sctp: [Deprecated]: syz.2.2985 (pid 16902) Use of int in max_burst socket option. [ 327.286302][T16902] Use struct sctp_assoc_value instead [ 327.838405][T16914] syzkaller1: entered promiscuous mode [ 327.844160][T16914] syzkaller1: entered allmulticast mode [ 328.093294][T16926] netlink: 'syz.3.2990': attribute type 7 has an invalid length. [ 328.161032][T16926] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2990'. [ 328.355693][T16941] xt_l2tp: v2 tid > 0xffff: 1114244 [ 328.774797][ T5633] Bluetooth: hci1: command tx timeout [ 328.966161][T10326] bridge_slave_1: left promiscuous mode [ 329.052368][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.267196][T10326] bridge_slave_0: left allmulticast mode [ 329.311213][T10326] bridge_slave_0: left promiscuous mode [ 329.351604][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.468651][T10326] tipc: Resetting bearer [ 329.486162][T10326] tipc: Resetting bearer [ 329.856736][T10326] tipc: Disabling bearer [ 329.937416][T10316] smbdirect: ib_dev[syz2] removed [ 330.332423][T10326] team0: Port device geneve1 removed [ 330.440401][T10326] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 330.468982][T10326] bridge1 (unregistering): left promiscuous mode [ 330.529766][T10326] tipc: Disabling bearer [ 330.610086][T10326] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 330.619045][T10326] bridge4 (unregistering): left promiscuous mode [ 330.672073][T10326] bond8 (unregistering): (slave bridge7): Releasing active interface [ 330.706950][T10326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.736731][T10326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.748523][T10326] bond0 (unregistering): Released all slaves [ 330.762634][T10326] bond1 (unregistering): Released all slaves [ 330.784460][T10326] bond2 (unregistering): Released all slaves [ 330.829222][T10326] bond3 (unregistering): Released all slaves [ 330.852165][ T5633] Bluetooth: hci1: command tx timeout [ 330.858424][T10326] bond4 (unregistering): Released all slaves [ 330.883448][T10326] bond5 (unregistering): Released all slaves [ 330.903498][T10326] bond6 (unregistering): Released all slaves [ 330.931443][T10326] bond7 (unregistering): Released all slaves [ 330.951191][T10326] bond8 (unregistering): Released all slaves [ 331.043328][ T5731] xfrm0 speed is unknown, defaulting to 1000 [ 331.065016][ T5731] infiniband syz2: ib_query_port failed (-19) [ 331.068450][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 331.405506][T10326] tipc: Left network mode [ 331.737237][T16799] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.759636][T16799] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.806837][T16799] bridge_slave_0: entered allmulticast mode [ 331.838424][T16799] bridge_slave_0: entered promiscuous mode [ 331.877538][T17013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3002'. [ 331.926053][T17019] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 331.979557][T16799] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.015073][T16799] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.025000][T16799] bridge_slave_1: entered allmulticast mode [ 332.046290][T16799] bridge_slave_1: entered promiscuous mode [ 332.599299][T16799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.692702][T16799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.896577][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 332.930341][ T5633] Bluetooth: hci1: command tx timeout [ 332.951569][T10326] hsr_slave_0: left promiscuous mode [ 332.991305][T10326] hsr_slave_1: left promiscuous mode [ 333.032052][T10326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.069770][T10326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.114250][T10326] veth1_macvtap: left promiscuous mode [ 333.140551][T10326] veth0_macvtap: left allmulticast mode [ 333.152204][T10326] veth0_macvtap: left promiscuous mode [ 333.166224][T10326] veth1_vlan: left promiscuous mode [ 333.971744][T10326] team0 (unregistering): Port device team_slave_1 removed [ 333.986785][T10326] team0 (unregistering): Port device team_slave_0 removed [ 334.083985][T16799] team0: Port device team_slave_0 added [ 334.093116][T16799] team0: Port device team_slave_1 added [ 334.101241][T17058] lo: left allmulticast mode [ 334.107736][T17058] tunl0: left allmulticast mode [ 334.135110][T17058] gre0: left allmulticast mode [ 334.142014][T17058] gretap0: left allmulticast mode [ 334.148657][T17058] erspan0: left allmulticast mode [ 334.157694][T17058] ip_vti0: left allmulticast mode [ 334.164826][T17058] ip6_vti0: left allmulticast mode [ 334.178383][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 334.269134][T16799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.290486][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.317732][T16799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.336716][T16799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.367840][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.398930][T16799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.706518][T16799] hsr_slave_0: entered promiscuous mode [ 334.744561][T16799] hsr_slave_1: entered promiscuous mode [ 334.946699][T17118] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3023'. [ 335.316863][T10326] IPVS: stop unused estimator thread 0... [ 335.894882][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 336.289357][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 336.315444][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'. [ 336.554692][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 336.587933][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 336.795659][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'. [ 336.847620][T17207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3041'. [ 336.897296][T17212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3041'. [ 337.285412][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 337.318463][T17228] netlink: 'syz.3.3046': attribute type 15 has an invalid length. [ 337.361973][T16799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.370515][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3046'. [ 337.403907][T17167] infiniband syz2: set active [ 337.410809][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.431128][T17167] infiniband syz2: added vxcan1 [ 337.442934][ T1589] vxcan1 speed is unknown, defaulting to 1000 [ 337.451801][T16799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.473204][T17167] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 337.478971][T17167] infiniband syz2: Couldn't open port 1 [ 337.497478][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.509163][T16799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.531182][T17167] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 337.540674][T17241] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3048'. [ 337.561101][T17167] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 337.592080][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.610437][T17167] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 337.622006][T16799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.650873][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 337.688380][T16799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.745653][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3049'. [ 337.774323][T17167] RDS/IB: syz2: added [ 337.795219][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3049'. [ 337.798801][T17167] smc: adding ib device syz2 with port count 1 [ 337.848140][T17167] smc: ib device syz2 port 1 has no pnetid [ 337.893549][T14425] vxcan1 speed is unknown, defaulting to 1000 [ 337.916619][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 338.028420][T16799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.124605][T16799] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.169835][T10294] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.177427][T10294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.257848][T10294] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.265051][T10294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.670086][T17278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 338.762185][T17278] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 338.822905][T17278] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.841726][T17278] gretap0: entered promiscuous mode [ 338.856785][T17278] gretap0: entered allmulticast mode [ 338.895314][T17288] tipc: Enabling of bearer rejected, failed to enable media [ 338.924757][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3054'. [ 338.940059][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 339.588441][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3060'. [ 339.646540][T17318] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 339.686539][T17318] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3060'. [ 339.701868][T17318] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 339.784184][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 339.980393][T16799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.143139][T16799] veth0_vlan: entered promiscuous mode [ 340.188157][T16799] veth1_vlan: entered promiscuous mode [ 340.329966][T16799] veth0_macvtap: entered promiscuous mode [ 340.375630][T16799] veth1_macvtap: entered promiscuous mode [ 340.515250][T17355] bond20: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 340.589917][T17355] bond20 (unregistering): Released all slaves [ 340.709204][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 340.806460][T16799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.893568][T16799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.940472][T10321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.974154][T10321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.024144][T10321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.056970][T10321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.360844][T17382] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 341.373572][T10326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.394346][T10326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.515405][T10317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.532272][T17167] vxcan1 speed is unknown, defaulting to 1000 [ 341.542128][T10317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.546120][T17387] openvswitch: netlink: Missing key (keys=40, expected=100) [ 341.789029][T17395] tipc: Started in network mode [ 341.802058][T17395] tipc: Node identity 86aa5b464972, cluster identity 4711 [ 341.841967][T17395] tipc: Enabled bearer , priority 0 [ 342.075452][T17402] syzkaller0: entered promiscuous mode [ 342.088493][T17402] syzkaller0: entered allmulticast mode [ 342.102003][T17402] tipc: Resetting bearer [ 342.345969][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.359363][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.369530][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.386560][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.395291][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.478349][T10293] tipc: Resetting bearer [ 342.512959][T17394] tipc: Resetting bearer [ 342.686930][T17422] netlink: 'syz.2.3085': attribute type 1 has an invalid length. [ 342.695365][T17422] __nla_validate_parse: 3 callbacks suppressed [ 342.695382][T17422] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3085'. [ 342.711261][T17422] netlink: 'syz.2.3085': attribute type 1 has an invalid length. [ 344.461735][ T5633] Bluetooth: hci3: command tx timeout [ 345.012375][T17394] tipc: Disabling bearer [ 345.121611][T10256] tipc: Node number set to 3487062854 [ 345.128151][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 345.151099][T17429] netlink: 'syz.2.3087': attribute type 22 has an invalid length. [ 345.174932][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 345.225773][T17437] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3090'. [ 345.563230][T17454] netlink: 'syz.0.3094': attribute type 12 has an invalid length. [ 345.585339][T17454] netlink: 'syz.0.3094': attribute type 29 has an invalid length. [ 345.593817][T17454] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3094'. [ 345.603363][T17454] netlink: 'syz.0.3094': attribute type 1 has an invalid length. [ 345.660312][T17454] netlink: 'syz.0.3094': attribute type 2 has an invalid length. [ 345.688573][T17454] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3094'. [ 345.821213][T17412] vxcan1 speed is unknown, defaulting to 1000 [ 345.909778][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 345.946431][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 346.071511][T17473] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 346.099821][T17473] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3101'. [ 346.120084][T17473] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 346.275152][T17478] syzkaller0: entered promiscuous mode [ 346.285851][T17478] syzkaller0: entered allmulticast mode [ 346.387390][T17482] tipc: Enabled bearer , priority 0 [ 346.395519][T17483] syzkaller0: entered promiscuous mode [ 346.401873][T17483] syzkaller0: entered allmulticast mode [ 346.430650][T17481] tipc: Resetting bearer [ 346.444566][T17486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3106'. [ 346.486542][T17488] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 346.514329][T17481] tipc: Disabling bearer [ 346.530484][ T5633] Bluetooth: hci3: command tx timeout [ 346.636392][T17486] bond1: entered promiscuous mode [ 346.657335][T17492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.253883][T17533] netlink: 'syz.2.3119': attribute type 21 has an invalid length. [ 347.348267][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.373196][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.403616][T17412] bridge_slave_0: entered allmulticast mode [ 347.416930][T17412] bridge_slave_0: entered promiscuous mode [ 347.426234][T17412] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.445085][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.464500][T17412] bridge_slave_1: entered allmulticast mode [ 347.473753][T17412] bridge_slave_1: entered promiscuous mode [ 347.535434][T17538] pim6reg: entered allmulticast mode [ 347.643457][T17412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.673094][T17412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.721894][T17553] bridge_slave_1: default FDB implementation only supports local addresses [ 347.745629][T17559] __nla_validate_parse: 6 callbacks suppressed [ 347.745646][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 347.769959][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'. [ 347.781103][T17555] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 347.795355][T17555] bond8 (unregistering): Released all slaves [ 347.817749][T17563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 347.897902][T17412] team0: Port device team_slave_0 added [ 347.907755][T17412] team0: Port device team_slave_1 added [ 347.952498][T17561] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3126'. [ 348.042015][T17412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.078080][T17412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.128072][T17412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.147180][T17412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.157460][T17412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.172427][T17574] xt_l2tp: invalid flags combination: 0 [ 348.186911][T17412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.232290][T17573] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 348.292636][T17412] hsr_slave_0: entered promiscuous mode [ 348.304063][T17412] hsr_slave_1: entered promiscuous mode [ 348.314214][T17412] debugfs: 'hsr0' already exists in 'hsr' [ 348.323428][T17412] Cannot create hsr debugfs directory [ 348.338711][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.347359][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.354216][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.361118][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.366144][T17577] syzkaller0: entered promiscuous mode [ 348.367882][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.367919][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.374569][T17577] syzkaller0: entered allmulticast mode [ 348.393800][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.400584][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.407354][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.414153][T17573] tc action pedit offset must be on 32 bit boundaries [ 348.420969][T17573] 0: reclassify loop, rule prio 0, protocol 800 [ 348.610678][ T5633] Bluetooth: hci3: command tx timeout [ 348.685130][T17412] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 348.727811][T17584] macvlan0: entered promiscuous mode [ 348.848000][T17412] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 348.980182][T17412] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 349.024674][T17593] syzkaller0: entered promiscuous mode [ 349.051593][T17593] syzkaller0: entered allmulticast mode [ 349.064520][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 349.094305][T17412] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 349.202409][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3138'. [ 349.222880][T17608] openvswitch: netlink: Missing key (keys=40, expected=100) [ 350.122055][T17649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3145'. [ 350.227359][T17412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.259646][T17412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.315624][T17412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.343622][T17412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.361406][T17412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.403775][T17412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.427688][T17412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.449223][T17412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.549176][T17661] syzkaller0: entered promiscuous mode [ 350.573220][T17661] syzkaller0: entered allmulticast mode [ 350.595304][T17661] veth1_macvtap: left promiscuous mode [ 350.602779][T17661] macsec0: entered promiscuous mode [ 350.608069][T17661] macsec0: entered allmulticast mode [ 350.664153][T17676] syzkaller1: entered promiscuous mode [ 350.669747][T17676] syzkaller1: entered allmulticast mode [ 350.677658][T17661] veth1_macvtap: entered promiscuous mode [ 350.686272][T17661] veth1_macvtap: entered allmulticast mode [ 350.693939][T17661] macsec0: left promiscuous mode [ 350.699304][T17661] macsec0: left allmulticast mode [ 350.705735][ T5629] Bluetooth: hci3: command tx timeout [ 350.712716][T17661] veth1_macvtap: left allmulticast mode [ 350.723070][T17679] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.3152'. [ 350.735978][T17682] openvswitch: netlink: Key type 30 is not supported [ 350.767919][T17679] xt_nat: multiple ranges no longer supported [ 350.859474][T17688] bond2 (unregistering): Released all slaves [ 350.918291][T17690] netlink: zone id is out of range [ 350.934288][T17693] xt_l2tp: missing protocol rule (udp|l2tpip) [ 350.936440][T17690] netlink: set zone limit has 4 unknown bytes [ 351.063082][T17412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.115730][T17412] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.143553][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 351.154799][T17703] openvswitch: netlink: Flow actions attr not present in new flow. [ 351.169681][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.176893][T10317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.229727][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3160'. [ 351.274995][T10294] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.282205][T10294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.400106][T17716] validate_nla: 3 callbacks suppressed [ 351.400125][T17716] netlink: 'syz.3.3161': attribute type 3 has an invalid length. [ 351.526442][T17721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.722390][T17739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 351.796235][T17742] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 352.295243][T17412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.445840][T17774] syzkaller0: entered promiscuous mode [ 352.454480][T17774] syzkaller0: entered allmulticast mode [ 352.495424][T17774] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 352.507566][T17774] bond8 (unregistering): Released all slaves [ 352.653886][T17412] veth0_vlan: entered promiscuous mode [ 352.665417][T17412] veth1_vlan: entered promiscuous mode [ 352.696964][T17412] veth0_macvtap: entered promiscuous mode [ 352.708371][T17412] veth1_macvtap: entered promiscuous mode [ 352.725805][T17412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.739095][T17412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.754263][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.763983][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.776577][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.786166][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.210118][T17709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.350597][T10317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.361126][T10317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.499394][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.510116][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.511487][T17789] vxcan1 speed is unknown, defaulting to 1000 [ 355.103742][T17815] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 355.181763][T17817] __nla_validate_parse: 4 callbacks suppressed [ 355.181781][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'. [ 355.221596][T17817] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3182'. [ 355.244700][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.257393][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.267531][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.286553][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.294748][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.448152][T17825] netlink: 'syz.4.3183': attribute type 1 has an invalid length. [ 355.510751][T17827] netlink: 'syz.1.3185': attribute type 29 has an invalid length. [ 355.558799][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3185'. [ 355.998749][T10321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.067231][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 356.376076][T10321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.510431][T17818] vxcan1 speed is unknown, defaulting to 1000 [ 356.585394][T10321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.754369][T10321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.151574][T17861] syzkaller0: entered promiscuous mode [ 357.161536][T17861] syzkaller0: entered allmulticast mode [ 357.392330][T17861] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 357.413364][ T5629] Bluetooth: hci0: command tx timeout [ 357.441349][T17861] bond1 (unregistering): Released all slaves [ 357.493131][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 357.519706][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.546131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.588129][ T31] task:kworker/1:0H state:D stack:26920 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 357.630186][ T31] Workqueue: kblockd blk_mq_run_work_fn [ 357.671608][ T31] Call Trace: [ 357.688112][ T31] [ 357.711082][ T31] __schedule+0x17d9/0x56c0 [ 357.741930][ T31] ? __lock_acquire+0x683/0x2cf0 [ 357.760358][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 357.772453][ T31] ? __pfx___schedule+0x10/0x10 [ 357.777806][ T31] ? schedule+0x90/0x2b0 [ 357.792321][ T31] schedule+0x164/0x2b0 [ 357.798426][ T31] schedule_timeout+0x152/0x2c0 [ 357.812717][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 357.821705][ T31] ? __pfx_process_timeout+0x10/0x10 [ 357.841133][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.847279][ T31] ? prepare_to_wait_event+0x436/0x480 [ 357.860376][ T31] nbd_queue_rq+0x889/0x1150 [ 357.866580][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 357.881651][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 357.901304][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 357.906967][ T31] ? sbitmap_get+0x229/0x390 [ 357.911748][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 357.931111][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 357.938559][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 357.951922][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 357.970781][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 357.981423][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 357.991198][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 358.003061][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 358.021166][ T31] blk_mq_run_work_fn+0x16c/0x300 [ 358.026291][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 358.040420][ T31] process_scheduled_works+0xa8e/0x14e0 [ 358.047623][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.070449][ T31] ? assign_work+0x3cf/0x5d0 [ 358.075215][ T31] worker_thread+0xa47/0xfb0 [ 358.090437][ T31] kthread+0x388/0x470 [ 358.094591][ T31] ? __pfx_worker_thread+0x10/0x10 [ 358.099729][ T31] ? __pfx_kthread+0x10/0x10 [ 358.120424][ T31] ret_from_fork+0x514/0xb70 [ 358.125103][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 358.160369][ T31] ? __switch_to+0xc89/0x1420 [ 358.166938][ T31] ? __pfx_kthread+0x10/0x10 [ 358.180438][ T31] ret_from_fork_asm+0x1a/0x30 [ 358.186883][ T31] [ 358.201387][ T31] [ 358.201387][ T31] Showing all locks held in the system: [ 358.209426][ T31] 4 locks held by kworker/1:0H/25: [ 358.233963][ T31] #0: ffff88801e2e0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.286960][ T31] #1: ffffc900001f7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.319064][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 358.342977][ T31] #2: ffff888026772398 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 358.361990][ T31] #3: ffff888026c551f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 358.382168][ T31] 1 lock held by khungtaskd/31: [ 358.407404][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.444713][ T31] 2 locks held by kworker/0:3/5359: [ 358.469576][ T31] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.503487][ T31] #1: ffffc9000350fc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.548829][ T31] 2 locks held by getty/5381: [ 358.562644][ T31] #0: ffff888031ba80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.614333][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 358.640376][ T31] 1 lock held by udevd/5631: [ 358.649568][ T31] #0: ffff888020fc4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 358.670628][ T31] 2 locks held by kworker/0:12/10246: [ 358.681484][ T31] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.710319][ T31] #1: ffffc9001b017c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.747823][ T31] 4 locks held by kworker/u8:17/10298: [ 358.760207][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 358.783509][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 358.822457][ T31] #2: ffff888057e83080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 358.871138][ T31] #3: ffff8880b8626058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 358.892143][ T31] 3 locks held by kworker/u8:40/10321: [ 358.911943][ T31] #0: ffff88801be9e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.932766][ T31] #1: ffffc9000cc4fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 358.961030][ T31] #2: ffffffff8fddc068 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 358.980327][ T31] 1 lock held by syz-executor/17818: [ 358.985679][ T31] #0: ffffffff8fddc068 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 359.022028][ T31] 2 locks held by syz.2.3188/17844: [ 359.031972][ T31] #0: ffff88807750de40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 359.057387][ T31] #1: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 359.082237][ T31] 2 locks held by syz.4.3193/17861: [ 359.087504][ T31] #0: ffffffff90330cc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 359.097303][ T31] #1: ffffffff8e95fdf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 359.109864][ T31] 1 lock held by syz.0.3195/17866: [ 359.115870][ T31] #0: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 359.136623][ T31] [ 359.138991][ T31] ============================================= [ 359.138991][ T31] [ 359.159199][ T31] NMI backtrace for cpu 0 [ 359.159218][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 359.159239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.159249][ T31] Call Trace: [ 359.159256][ T31] [ 359.159264][ T31] dump_stack_lvl+0xe8/0x150 [ 359.159292][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 359.159318][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.159340][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 359.159366][ T31] sys_info+0x135/0x170 [ 359.159389][ T31] watchdog+0xfd7/0x1030 [ 359.159424][ T31] ? watchdog+0x1c7/0x1030 [ 359.159457][ T31] kthread+0x388/0x470 [ 359.159477][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.159501][ T31] ? __pfx_kthread+0x10/0x10 [ 359.159523][ T31] ret_from_fork+0x514/0xb70 [ 359.159547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.159567][ T31] ? __switch_to+0xc89/0x1420 [ 359.159597][ T31] ? __pfx_kthread+0x10/0x10 [ 359.159618][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.159656][ T31] [ 359.159677][ T31] Sending NMI from CPU 0 to CPUs 1: [ 359.277132][ C1] NMI backtrace for cpu 1 [ 359.277150][ C1] CPU: 1 UID: 0 PID: 10298 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 359.277170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.277181][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 359.277209][ C1] RIP: 0010:unwind_next_frame+0xcfd/0x2550 [ 359.277234][ C1] Code: 80 3c 20 00 49 8d 5e 38 4c 8b 6c 24 18 74 08 48 89 df e8 c6 05 bd 00 48 8b 04 24 48 89 03 ba 10 00 00 00 49 8d 5e 50 48 89 df <31> f6 e8 8c 07 bd 00 48 8b 54 24 08 e9 c7 04 00 00 48 89 5c 24 48 [ 359.277249][ C1] RSP: 0018:ffffc9001afc74e0 EFLAGS: 00000246 [ 359.277263][ C1] RAX: ffffc9001afc7908 RBX: ffffc9001afc75d8 RCX: 1ffff920035f8e01 [ 359.277276][ C1] RDX: 0000000000000010 RSI: 0000000000000002 RDI: ffffc9001afc75d8 [ 359.277288][ C1] RBP: 1ffffffff21aca7b R08: ffffc9001afc7908 R09: 0000000000000000 [ 359.277300][ C1] R10: 0000000000000000 R11: ffffffff8e959c20 R12: dffffc0000000000 [ 359.277312][ C1] R13: ffffffff90d653d4 R14: ffffc9001afc7588 R15: ffffc9001afc75d0 [ 359.277325][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 359.277339][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.277351][ C1] CR2: 000055bba8db1e50 CR3: 0000000054112000 CR4: 00000000003526f0 [ 359.277366][ C1] Call Trace: [ 359.277372][ C1] [ 359.277384][ C1] ? kasan_save_free_info+0x40/0x50 [ 359.277407][ C1] ? unwind_next_frame+0x8f/0x2550 [ 359.277430][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.277457][ C1] arch_stack_walk+0x11b/0x150 [ 359.277482][ C1] ? __kasan_slab_free+0x5c/0x80 [ 359.277501][ C1] stack_trace_save+0xa9/0x100 [ 359.277525][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 359.277551][ C1] ? __lock_acquire+0x683/0x2cf0 [ 359.277571][ C1] kasan_save_track+0x3e/0x80 [ 359.277585][ C1] ? kasan_save_track+0x3e/0x80 [ 359.277606][ C1] ? kasan_save_free_info+0x40/0x50 [ 359.277656][ C1] kasan_save_free_info+0x40/0x50 [ 359.277677][ C1] __kasan_slab_free+0x5c/0x80 [ 359.277694][ C1] kfree+0x1c5/0x640 [ 359.277715][ C1] ? skb_release_data+0x85e/0xab0 [ 359.277736][ C1] skb_release_data+0x85e/0xab0 [ 359.277759][ C1] __kfree_skb+0x5d/0x210 [ 359.277776][ C1] nsim_dev_trap_report_work+0x7ac/0xb40 [ 359.277805][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 359.277828][ C1] process_scheduled_works+0xa8e/0x14e0 [ 359.277867][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.277894][ C1] ? assign_work+0x3cf/0x5d0 [ 359.277918][ C1] worker_thread+0xa47/0xfb0 [ 359.277957][ C1] kthread+0x388/0x470 [ 359.277974][ C1] ? __pfx_worker_thread+0x10/0x10 [ 359.277997][ C1] ? __pfx_kthread+0x10/0x10 [ 359.278015][ C1] ret_from_fork+0x514/0xb70 [ 359.278034][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 359.278052][ C1] ? __switch_to+0xc89/0x1420 [ 359.278078][ C1] ? __pfx_kthread+0x10/0x10 [ 359.278096][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.278126][ C1] [ 359.500662][ T5629] Bluetooth: hci0: command tx timeout [ 359.711486][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 359.718374][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 359.727581][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.737636][ T31] Call Trace: [ 359.740909][ T31] [ 359.743840][ T31] vpanic+0x56c/0xa60 [ 359.747825][ T31] ? __pfx___schedule+0x10/0x10 [ 359.752679][ T31] ? __pfx_vpanic+0x10/0x10 [ 359.757181][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 359.763335][ T31] panic+0xc5/0xd0 [ 359.767052][ T31] ? __pfx_panic+0x10/0x10 [ 359.771466][ T31] ? preempt_schedule_common+0x82/0xd0 [ 359.776934][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 359.782310][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 359.788469][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 359.794623][ T31] watchdog+0x1030/0x1030 [ 359.798959][ T31] ? watchdog+0x1c7/0x1030 [ 359.803386][ T31] kthread+0x388/0x470 [ 359.807449][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.812127][ T31] ? __pfx_kthread+0x10/0x10 [ 359.816717][ T31] ret_from_fork+0x514/0xb70 [ 359.821302][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.826422][ T31] ? __switch_to+0xc89/0x1420 [ 359.831097][ T31] ? __pfx_kthread+0x10/0x10 [ 359.835682][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.840461][ T31] [ 359.843861][ T31] Kernel Offset: disabled [ 359.848196][ T31] Rebooting in 86400 seconds..