last executing test programs: 9.241571697s ago: executing program 3 (id=3440): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.853261675s ago: executing program 3 (id=3441): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) epoll_create1(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x7, 0x0, 0x1, 0x2}}, 0xe8) close(r2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x21, 0x2, 0x10000000000002) pselect6(0x2c, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x400007b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0xfefffffffffffffc, 0x7fffffff}, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd8d76d852d28fccd9d768a83a67c974053e7000fbdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="05002d000100000000003c000700000000003c00800a0000"], 0x34}}, 0x20008001) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x8005, @loopback, 0xbffffffc}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000033de3e732f3c11a0197fe9172bc0c08c53d43ee0b588954083e6e869c58534b9d68c90c05e167d6c2338d8d06f6a866c1bdb3f0ffa719eebc074ff37885fdb5bbc0c448e35c14699dc060790479f5c5cb7437eb976fceebb69cc5a8b82618ad4202c966ed068fe6cfd9888bc8c1b6e17e7f264abf66b05e864c0497ea6198359dd26274328b40bdde675f03aef434dd74aa55cd351ffcb86f692f2", @ANYRES16=r1, @ANYBLOB="000429bd7000fedbdf250f00000008003b0000000000080039007f000000050037000100000008003b0000000100"], 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x881) 7.839220167s ago: executing program 3 (id=3448): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async, rerun: 64) shutdown(r0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) r7 = socket$unix(0x1, 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES16=r4, @ANYBLOB="080428bd7000fcdb00", @ANYRES32=r9, @ANYBLOB="04000380"], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x80) (async) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async, rerun: 32) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x41, @mcast2, @local, 0x7800, 0x0, 0x0, 0x6}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 7.174498552s ago: executing program 3 (id=3453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f880000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYBLOB="dacd8f41"], 0xfdef) 6.838745601s ago: executing program 3 (id=3455): getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x1, 0x6}]}}}}}}}}, 0x0) 6.582111228s ago: executing program 3 (id=3460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000440)=""/135, 0x34, 0x87, 0x0, 0x2}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x7b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xd5, &(0x7f0000000300)=""/213, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x3, 0x2e2, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5]}, 0x94) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0xfd3f5000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0xfef2f000) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r7], 0x104}}, 0x4) 3.169946506s ago: executing program 2 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0], 0x1ac}}, 0x0) 2.941986718s ago: executing program 2 (id=3484): socket(0x1a, 0x5, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/97, 0x61}], 0x1}, 0x7f}], 0x1, 0x10103, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x7) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r3, &(0x7f00000003c0)="11eb534bfc0b", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @local}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20040040) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=r0], 0x48}}, 0x0) 2.573290921s ago: executing program 0 (id=3485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.369379538s ago: executing program 2 (id=3486): syz_emit_ethernet(0x22, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x14, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x20, 0x1391ccd1beaaa42e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x10040080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0) 2.189241739s ago: executing program 0 (id=3488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x7, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56655c4c90c200b1003779d0744c", 0x21) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4010) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) 2.131487867s ago: executing program 4 (id=3489): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (rerun: 32) close(0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r0, 0x2f, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r2}, 0x20) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0x4) (async, rerun: 64) unshare(0x8040480) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r3}, 0xc) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0x1, &(0x7f0000000000), &(0x7f0000000280)=""/63}, 0x20) 2.061689372s ago: executing program 1 (id=3490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="b40000000000000006000000000000f3841000000200317d740cd40fdf94c40de2e7dd7f0009a1a3a5acb409346351e300850000000800000095000000000000009500000000000000d8202631fe8a9a2f736e752c251f71b29c15b6a45cd4567e3c5389e67bf3ad281b38b7dd957d11b73ee7496889fe92c7782e31ef29f08ead3ee7a28dbda95d339db9f06b3d5cb9d35c62fb840d25d6ee"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801200148004000b0004"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x9}, {0x3, 0x1}, {0x5, 0xffe0}}}, 0x24}}, 0x20040054) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000140)}, 0x10) (async, rerun: 32) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) (async, rerun: 32) r10 = socket$key(0xf, 0x3, 0x2) (async) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) (async) setsockopt$inet6_group_source_req(r11, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="0204fd02120000000000000000000000010015004e2400438172c600000004d3ff0b83010000002003000500ff60000002004e2164010102000000000000000005000800f8000000cdd77f1e34a91a731e9b8050dc24a172d03e3b8ec37cb6197be5351d469afd0005001a00fc000000000000000000000000000000000000000000000000000000000000000e001004"], 0x90}, 0x1, 0x7}, 0x4040890) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.981901642s ago: executing program 2 (id=3491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x178, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x41, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (fail_nth: 2) 1.870944501s ago: executing program 1 (id=3492): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x98, 0x4) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x8000000000003, {0x0, 0x0, 0x7}, 0x1}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed000063030000000000000c440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 1.562875775s ago: executing program 0 (id=3493): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000ec000000ec000000060000001000000005000004010000000b00000004000000070000000200000002000000030000000e0000000300000000080000080000000300000002000000090000000500000008000000060000000000000c020000000000000000000001000000000c002b00000000000600000d000000000500000005000000020090584c9b2800000300000003000000000000000100000005000000000000000300000003000000010000000400000000000008020000000a000000020000040000f6000c00000000000000020000000700000002000000272800000c0000000000000b04000000100000000000000e040000000000000000"], &(0x7f0000000140)=""/190, 0x10a, 0xbe, 0x1, 0x7, 0x10000}, 0x28) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@generic={0xf, 0x7, 0x0, 0x3bb, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a00)="213508144002e98ada78d61cf18af0a16522c88c303d9e8a3660ad856e298c57f16acd283abde2c35b7f10e2d7", 0x2d}], 0x1}}], 0x1, 0x40088c5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x4f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa01007b78792b86dd6c2d01000019840100000000000003000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x123, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 1.467000834s ago: executing program 2 (id=3494): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x7}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x8, {{0x36, 0x4, 0x3, 0x3b, 0xd8, 0x66, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @empty, {[@cipso={0x86, 0x61, 0x3, [{0x2, 0xc, "8d556b8f8cc65587cbe4"}, {0x5, 0x2}, {0x5, 0xd, "8360a8d6f49019136915e0"}, {0x5, 0x10, "b91506e53909a4ca8a2252b37423"}, {0x2, 0x12, "5ff890bad7ec4e3fef7384fd95fc1325"}, {0x2, 0xf, "1e14845d40d853188a2489aaff"}, {0x2, 0x6, "bca4329b"}, {0x6, 0x9, "ba0d0be66a4a00"}]}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x1, [{@loopback, 0x1}, {@multicast2, 0xff}]}, @timestamp={0x44, 0x10, 0x30, 0x0, 0xa, [0x6, 0x10000, 0x200000]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x9, [0x7ff]}, @lsrr={0x83, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @local, @private=0xa010101]}, @lsrr={0x83, 0x23, 0xc4, [@loopback, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, @local, @local, @loopback, @private=0xa010100]}]}}}}}) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01801800000000000000c4000000c400000003000000020000000a000000000c00000000000010020000001000000000000012040000000400000000000001000000003500730110000000090000930c0000000d"], &(0x7f0000000600)=""/52, 0x18, 0x34, 0x1, 0x81}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28f2e047afd25fe1032b9a816d7c010026be590c650acabd7000fddbdf2506000000140002000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_GETNSID={0x4c, 0x5a, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r6}]}, 0x4c}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf25"], 0x2c}}, 0x884) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000000000c"], 0x31) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 1.418930059s ago: executing program 4 (id=3495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0x0, 0x2, 0x401}, {0xff8d, 0x0, 0xff, 0x8}, {0x9, 0x48, 0x6, 0xfff}, {0x3ff, 0x5, 0x0, 0x6}]}) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) (rerun: 32) 1.259867167s ago: executing program 0 (id=3496): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.148275974s ago: executing program 0 (id=3497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "cb1883cd5ede02ce", "b0fb9bb76a01b55afd3e0a9a6231f29a", "34b63c89", "17219368e16fa796"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "25e0af6f52bb7edc", "7ec4e0b644bfdf51a2896fa41fa1717bea35535b84d810542e540415a69abaf9", "7c371401", "00000000b55500"}, 0x38) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 990.3334ms ago: executing program 4 (id=3498): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x5b, &(0x7f00000001c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x9, 0x1, 0x0, @empty, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xb, 0x4, 0x3, 0x3a, 0x0, 0xd469, 0x8000, 0x1, 0x89, 0xe, @multicast1, @remote, {[@ssrr={0x89, 0x17, 0x37, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote, @multicast1, @remote, @local]}]}}, "ba980f8d56"}}}}}, 0x0) (rerun: 32) 990.05872ms ago: executing program 1 (id=3499): socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x9) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x4, {0x0, 0x0, 0x4}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {0x0, 0xf0, 0x3}, 0x2}, 0x18) 712.086753ms ago: executing program 1 (id=3500): r0 = socket(0x23, 0xa, 0x6) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@int=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000d0a01080000087dd904bc9e8b868833fc8f21d2cb8a0000050000000a00000a0900020073797a32000000000900010073797a306615c2dd60595c57c289a0c2177c687e96f2401781c33c4e1c5bfd2d4f2a721d92263ba11dba289e5e1874879659e86b00dc5f941870ea56a29af128803d9cf04c906f6ee212be20eef9b5be32a99bff195cf0"], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) r3 = epoll_create1(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000500)={[0x81]}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20040080) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) connect$netlink(r4, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) (async) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) shutdown(r7, 0x1) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x39000, 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000851000000200000085007dff8f000000950000000000000095", @ANYRESDEC=r6, @ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x10000000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3880000093319ef9eb47e74a156f7ed178bb5ef1c47b4d1f8bcacc958ad93d0885848757a02d76d911a17ab541225dc45ab81001bf2a190ddc76c4ddfd1600c737504dc043db0a86b182e9", @ANYRES16=r10, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050004000000"], 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) (async) write$bt_hci(r0, 0x0, 0x0) 499.747001ms ago: executing program 4 (id=3501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x5c, r2, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 326.088887ms ago: executing program 1 (id=3502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x21, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 269.893821ms ago: executing program 4 (id=3503): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) 158.328613ms ago: executing program 1 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x178, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x41, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (fail_nth: 3) 65.714052ms ago: executing program 2 (id=3505): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) unshare(0x6a040000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000900)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "7c087c0a492fe49326f4f576a5b15bf05ed2e8310ede94323ed3b2b32ce6337134743d1709ab3cc73f1e97e7325c5d0f4f91c56477b8cf26a3e437bb6b1173f6"}, 0x80c}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x47, &(0x7f0000003fc0)}, 0xe) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 18.355352ms ago: executing program 4 (id=3506): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) sendfile(r0, r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{r2}, 0x3, &(0x7f00000000c0)=[0x5, 0x7, 0x0], 0x2, 0x4, 0x1}) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x2) r3 = socket(0x15, 0x800, 0x76) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={r4, 0x7}, &(0x7f0000000280)=0x8) r6 = accept$nfc_llcp(r3, 0x0, &(0x7f0000000300)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10, r6}, 0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000380), r7) recvmmsg(r2, &(0x7f0000003040)=[{{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000900)=""/136, 0x88}], 0x7, &(0x7f0000000a40)=""/185, 0xb9}, 0x5}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/121, 0x79}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000dc0)=""/100, 0x64}], 0x4, &(0x7f0000000e80)=""/251, 0xfb}, 0x8}, {{&(0x7f0000000f80)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f0000001000)=""/209, 0xd1}, {&(0x7f0000001100)=""/5, 0x5}, {&(0x7f0000001140)=""/20, 0x14}, {&(0x7f0000001180)=""/176, 0xb0}, {&(0x7f0000001240)=""/110, 0x6e}, {&(0x7f00000012c0)}], 0x6, &(0x7f0000001380)=""/16, 0x10}, 0x9}, {{&(0x7f00000013c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001440)=""/223, 0xdf}, {&(0x7f0000001540)=""/33, 0x21}, {&(0x7f0000001580)=""/226, 0xe2}, {&(0x7f0000001680)=""/216, 0xd8}, {&(0x7f0000001780)=""/158, 0x9e}, {&(0x7f0000001840)=""/62, 0x3e}, {&(0x7f0000001880)=""/222, 0xde}, {&(0x7f0000001980)=""/96, 0x60}, {&(0x7f0000001a00)=""/88, 0x58}, {&(0x7f0000001a80)=""/195, 0xc3}], 0xa}, 0xfffffffb}, {{&(0x7f0000001c40)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/99, 0x63}, {&(0x7f0000002d40)=""/20, 0x14}, {&(0x7f0000002d80)=""/149, 0x95}, {&(0x7f0000002e40)=""/241, 0xf1}], 0x5, &(0x7f0000002fc0)=""/82, 0x52}, 0x2}], 0x5, 0x62, &(0x7f0000003180)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000031c0)={r5, 0xcb7e, 0x30}, &(0x7f0000003200)=0xc) ioctl$SIOCAX25GETINFOOLD(r7, 0x89e9, &(0x7f0000003240)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f0000003340)={&(0x7f0000003280), 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x4001) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x24, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r10 = gettid() sendmsg$nl_generic(r9, &(0x7f00000037c0)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003780)={&(0x7f00000034c0)={0x2ac, 0x1c, 0x200, 0x70bd2c, 0x25dfdbfd, {0x6}, [@generic="624fb6f5119a10f0c51dd3da6079a7c0433e7a3fcd209e15a0090636fd81af270fadf2bbe8f8169994352bde764786672d2a5bbfa52deb379b65d20a6977ca50837cdf5262815e220f0c9fd9060905231ba64c694ef68e23d1b9f1ee4b3508c174edc4af8d02323be0ba0a85ea9c16", @generic="c47568c74281717af96b4091c997a81df70f32893af470508ae91f7df65f01d55b784e07d6b456e616388456aaf284488b9bb364e2da8e221433def83477ba29706db2c23606dea49560d09b1c851430f476bf6189cf88f87f549be156f48f046df3443a82fcd99d7f01ef70ab397589e3d25377051476d0066fca145ba9aaf81d1a21d954b1a222a98de04ca5aa8c2d400a3153776eb682c910a06a5abb022ce55a59031b2502c0b31c2451aea805956615c822ff0c6f11d760792c205d279b9ba1a34be3c6f51a6396a674c0cf38bb2cdfb82f70aaf172fe12f5", @typed={0x8, 0xfb, 0x0, 0x0, @pid=r10}, @generic="426a284fa31c052dcc2bf91817c534d040c71050891a2df85a9aecb161367ba24cd5990d79c179cf70c253744c7f49516a39d49585bca59e79bb460f7f2a7a94e8511e336ba29be48c15bc8130b583ed561b126f3b48f424292ca27a23e17070d2", @generic="058f91b0da591d0f4304265a279dfee134ebfaf2a35aff8a4cd84b28095fec189711dc408932807f35f4466bd3f380a3f97bcda967fd6daf12993d0ab907473ad03660500ab83305ff5f522843ad60db021774126d8b1ef37ceb519930e92406611de7fd28c1f1611b095219feeac0a3c0ffb777fa26b1329bf8e6f8157b4cf89a136278fd9b60c54981466a0d8d0e1aaafa14f0b77b67a1214fc38b2e462bf236202e9ca033e884ace022388851171a0a8c141cc7606024f78e0dbb386ef26c0f2f471830f500bebccbad45f2cf51795fdc43d8f280cef34e53894e7486e021fed4b234c2"]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4040050}, 0x48084) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r7, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000038c0)={&(0x7f0000003840)=@getchain={0x44, 0x66, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffff}, {0xfff2, 0xa}, {0x10, 0xfff3}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7f0}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003980), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000039c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000003a80)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x3c, r11, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004021) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r7) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x24, r13, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r14 = accept(r0, &(0x7f0000003c00)=@caif=@rfm, &(0x7f0000003c80)=0x80) sendmsg$NL80211_CMD_GET_WOWLAN(r14, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x1c, r13, 0x208, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xc}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40840) 0s ago: executing program 0 (id=3507): socket(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xa2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): de [ 374.101036][T16251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2608'. [ 374.215067][T16256] netlink: 'syz.3.2610': attribute type 13 has an invalid length. [ 374.248080][T16256] netlink: 'syz.3.2610': attribute type 17 has an invalid length. [ 374.367297][T16256] bridge0: left allmulticast mode [ 374.378056][T16256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.386855][T16256] team0: left promiscuous mode [ 374.391832][T16256] team_slave_1: left promiscuous mode [ 374.398154][T16256] bond0: left promiscuous mode [ 374.404320][T16256] bond_slave_0: left promiscuous mode [ 374.410162][T16256] bond_slave_1: left promiscuous mode [ 374.416603][T16256] team0: left allmulticast mode [ 374.421741][T16256] team_slave_1: left allmulticast mode [ 374.427957][T16256] bond0: left allmulticast mode [ 374.433639][T16256] bond_slave_0: left allmulticast mode [ 374.439308][T16256] bond_slave_1: left allmulticast mode [ 374.454190][T16256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.887440][T16281] wg1 speed is unknown, defaulting to 1000 [ 374.968007][T16281] lo speed is unknown, defaulting to 1000 [ 374.993736][ T6317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 375.026706][T16281] lo speed is unknown, defaulting to 1000 [ 375.203638][T16296] vlan7: entered promiscuous mode [ 375.208731][T16296] bridge0: entered promiscuous mode [ 375.405707][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 375.442972][ T30] audit: type=1800 audit(1772822800.970:9): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2621" name="memory.events" dev="tmpfs" ino=2750 res=0 errno=0 [ 375.578825][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 375.590704][T16311] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2623'. [ 375.861134][T16322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.967184][T16336] syzkaller0: left promiscuous mode [ 375.976947][T16336] syzkaller0: left allmulticast mode [ 376.021235][T16336] pim6reg1: entered promiscuous mode [ 376.028646][T16336] pim6reg1: entered allmulticast mode [ 376.162877][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.171023][ C1] lec:lec_tx_timeout: lec0 [ 376.175778][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.268215][T16343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2630'. [ 376.650388][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 376.826523][T16353] netlink: 'syz.1.2633': attribute type 9 has an invalid length. [ 376.872207][T16353] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2633'. [ 376.956443][T16353] tipc: Enabling of bearer rejected, failed to enable media [ 377.199883][T16376] wg1 speed is unknown, defaulting to 1000 [ 377.212376][T16376] lo speed is unknown, defaulting to 1000 [ 377.220104][T16376] lo speed is unknown, defaulting to 1000 [ 377.509658][T16391] Bluetooth: MGMT ver 1.23 [ 377.643928][T16396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2646'. [ 377.668925][T16365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.805747][T16405] ip6erspan0: entered promiscuous mode [ 377.833386][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 377.915692][T16409] team0: entered promiscuous mode [ 377.921064][T16409] team_slave_0: entered promiscuous mode [ 377.927315][T16409] žÿ: entered promiscuous mode [ 377.933937][T16409] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.941568][T16409] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 378.216088][T16426] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 378.479252][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2657'. [ 378.549161][T16442] lo: Caught tx_queue_len zero misconfig [ 378.679878][T16442] netlink: 'syz.2.2656': attribute type 4 has an invalid length. [ 378.698031][T16442] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2656'. [ 378.871850][T16454] netlink: 'syz.3.2661': attribute type 15 has an invalid length. [ 379.142645][T16480] netlink: 'syz.0.2667': attribute type 10 has an invalid length. [ 379.176930][T16476] __nla_validate_parse: 3 callbacks suppressed [ 379.176946][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 379.202460][T16480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.229447][T16480] team0: Port device bond0 added [ 379.235747][T16486] netlink: 'syz.4.2671': attribute type 2 has an invalid length. [ 379.260386][T16486] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2671'. [ 379.273056][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.294573][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2671'. [ 379.559343][T16502] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 379.567615][T16500] wg1 speed is unknown, defaulting to 1000 [ 379.612429][T16500] lo speed is unknown, defaulting to 1000 [ 379.632518][T16508] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2679'. [ 379.655199][T16508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2679'. [ 379.707503][T16500] lo speed is unknown, defaulting to 1000 [ 379.796198][T16502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2675'. [ 379.999676][T16524] netlink: 'syz.4.2680': attribute type 4 has an invalid length. [ 380.127318][T16528] dummy0: entered promiscuous mode [ 380.167134][T16528] vlan5: entered promiscuous mode [ 380.342323][T16536] syzkaller0: entered promiscuous mode [ 380.355284][T16536] syzkaller0: entered allmulticast mode [ 380.509762][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 380.635799][T16538] tipc: Enabled bearer , priority 0 [ 380.824724][T16536] tipc: Enabling of bearer rejected, already enabled [ 380.870856][T16544] wg1 speed is unknown, defaulting to 1000 [ 380.890572][T16544] lo speed is unknown, defaulting to 1000 [ 381.037417][T16544] lo speed is unknown, defaulting to 1000 [ 381.053933][T16558] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.185735][T16562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.193222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 381.202630][ C1] lec:lec_tx_timeout: lec0 [ 381.212953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.415258][T16617] "syz.1.2703" (16617) uses obsolete ecb(arc4) skcipher [ 382.493739][ T5967] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 382.613420][T16634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2708'. [ 382.635847][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 382.665558][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 382.933124][ T5967] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 383.300384][ T6306] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.398879][ T6306] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.421857][ T6306] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.452256][ T6306] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.471512][ T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 383.636532][T16686] "syz.2.2720" (16686) uses obsolete ecb(arc4) skcipher [ 383.963823][T16707] netlink: 'syz.1.2725': attribute type 2 has an invalid length. [ 383.998169][T16707] : entered promiscuous mode [ 384.124560][T16725] wg1 speed is unknown, defaulting to 1000 [ 384.136278][T16725] lo speed is unknown, defaulting to 1000 [ 384.147222][T16725] lo speed is unknown, defaulting to 1000 [ 384.188871][T16731] __nla_validate_parse: 5 callbacks suppressed [ 384.188889][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 384.204686][T16731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2731'. [ 384.336663][T16733] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.373638][T16733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.396736][ T5967] lo speed is unknown, defaulting to 1000 [ 384.404352][ T5967] syz2: Port: 1 Link ACTIVE [ 384.410412][T16734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.452431][T16728] netlink: 'syz.1.2729': attribute type 30 has an invalid length. [ 384.543536][T16715] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.551585][T16715] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.630288][T16743] geneve3: entered promiscuous mode [ 384.643222][ T9482] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.680783][T16743] geneve3: entered allmulticast mode [ 384.698174][T16710] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 384.724997][T16710] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 384.878839][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.885337][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.910039][T16710] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 384.919090][T16710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 384.936962][T16766] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2739'. [ 385.053515][T16774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2740'. [ 385.461757][T16794] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2747'. [ 385.557959][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2749'. [ 385.945471][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 386.173139][T16846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2764'. [ 386.194936][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 386.399111][T16857] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.710818][T16874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2772'. [ 386.725991][T16874] netlink: 'syz.4.2772': attribute type 16 has an invalid length. [ 386.734818][T16874] netlink: 'syz.4.2772': attribute type 17 has an invalid length. [ 386.788945][T16874] sit0: left promiscuous mode [ 386.813129][T16874] 8021q: adding VLAN 0 to HW filter on device .` [ 386.825864][T16874] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.836641][T16874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.854073][T13697] lo speed is unknown, defaulting to 1000 [ 386.870843][T13697] sqz0: Port: 1 Link ACTIVE [ 386.901136][ T9482] lo speed is unknown, defaulting to 1000 [ 387.032867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 387.040925][ C1] lec:lec_tx_timeout: lec0 [ 387.045929][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 387.155058][T16891] syzkaller1: left promiscuous mode [ 387.163023][T16891] syzkaller1: left allmulticast mode [ 387.174266][T16895] rds_sendmsg: 23 callbacks suppressed [ 387.174283][T16895] atomic_op ffff88803244d198 conn xmit_atomic 0000000000000000 [ 387.180100][T16892] wg1 speed is unknown, defaulting to 1000 [ 387.217422][T16892] lo speed is unknown, defaulting to 1000 [ 387.239425][T16892] lo speed is unknown, defaulting to 1000 [ 387.250415][T16895] atomic_op ffff8880779f2198 conn xmit_atomic 0000000000000000 [ 387.425253][T16910] netlink: 'syz.2.2781': attribute type 1 has an invalid length. [ 387.611905][T16920] gre0: entered promiscuous mode [ 387.618550][T16920] gre0: entered allmulticast mode [ 388.083082][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.728179][T16963] wg1 speed is unknown, defaulting to 1000 [ 388.735936][T16963] lo speed is unknown, defaulting to 1000 [ 388.744136][T16963] lo speed is unknown, defaulting to 1000 [ 388.873237][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 390.646574][T16934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.940602][T16992] netlink: 'syz.1.2797': attribute type 32 has an invalid length. [ 390.962967][T16992] __nla_validate_parse: 3 callbacks suppressed [ 390.962986][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 391.136652][T16992] bond6: Setting coupled_control to off (0) [ 391.186902][T17004] bond11: option resend_igmp: invalid value (2878) [ 391.198617][T17004] bond11: option resend_igmp: allowed values 0 - 255 [ 391.208491][T17004] bond11 (unregistering): Released all slaves [ 391.280827][T17012] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2803'. [ 391.290621][T17012] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 391.298808][T17012] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2803'. [ 391.542679][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 391.561829][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2809'. [ 391.805332][T17048] sctp: [Deprecated]: syz.4.2814 (pid 17048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.805332][T17048] Use struct sctp_sack_info instead [ 392.052879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 392.061005][ C1] lec:lec_tx_timeout: lec0 [ 392.065815][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.193545][T17073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.395074][T17078] bridge_slave_0: invalid flags given to default FDB implementation [ 392.458125][T17046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.468081][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 392.549931][T17082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2823'. [ 392.729325][T17097] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 392.752522][T17097] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 392.826538][T17101] nft_compat: unsupported protocol 14 [ 392.881471][T17086] wg1 speed is unknown, defaulting to 1000 [ 392.891808][T17086] lo speed is unknown, defaulting to 1000 [ 392.899979][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2826'. [ 392.909395][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 392.919441][T17104] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2826'. [ 392.931444][T17086] lo speed is unknown, defaulting to 1000 [ 393.288124][T17108] macvlan1: left allmulticast mode [ 393.307464][T17108] hsr0: left allmulticast mode [ 393.319076][T17108] hsr_slave_0: left allmulticast mode [ 393.332443][T17108] hsr_slave_1: left allmulticast mode [ 394.996180][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054efc800: rx timeout, send abort [ 395.335185][T17219] wg1 speed is unknown, defaulting to 1000 [ 395.373415][T17219] lo speed is unknown, defaulting to 1000 [ 395.409409][T17219] lo speed is unknown, defaulting to 1000 [ 395.496363][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054efcc00: rx timeout, send abort [ 395.508770][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054efc800: abort rx timeout. Force session deactivation [ 395.909413][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.924926][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.934244][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.960371][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.971390][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.005470][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054efcc00: abort rx timeout. Force session deactivation [ 396.236877][T17243] xt_socket: unknown flags 0x50 [ 396.288045][T17246] __nla_validate_parse: 8 callbacks suppressed [ 396.288066][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2864'. [ 396.319853][T17238] wg1 speed is unknown, defaulting to 1000 [ 396.330335][T17238] lo speed is unknown, defaulting to 1000 [ 396.339857][T17247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2865'. [ 396.376053][T16712] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.468403][T17238] lo speed is unknown, defaulting to 1000 [ 396.537082][T17258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'. [ 396.564384][T16712] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.636906][T17265] 8021q: VLANs not supported on syzkaller1 [ 396.714596][T16712] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.728429][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 396.783417][T17270] bridge0: port 4(macvtap1) entered blocking state [ 396.801962][T17270] bridge0: port 4(macvtap1) entered disabled state [ 396.823373][T17270] macvtap1: entered allmulticast mode [ 396.828870][T17270] bridge0: entered allmulticast mode [ 396.860070][T17270] macvtap1: left allmulticast mode [ 396.866284][T17270] bridge0: left allmulticast mode [ 396.984766][T16712] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.053078][T17284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2875'. [ 397.072931][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 397.081160][ C1] lec:lec_tx_timeout: lec0 [ 397.085869][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.121888][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 397.205305][T17293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.311139][ T6300] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 397.383481][T16713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 397.435940][T17302] team0: No ports can be present during mode change [ 397.453607][ T6300] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 397.462333][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 397.517693][T16713] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 397.630499][T17313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2883'. [ 397.651007][T16712] pimreg: left allmulticast mode [ 397.672997][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 397.917654][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 397.993145][ T5841] Bluetooth: hci5: command tx timeout [ 398.167843][T16712] bond3 (unregistering): (slave bridge4): Releasing active interface [ 398.291655][T16712] team0: Port device bond0 removed [ 398.300130][T16712] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 398.318448][T16712] bond0 (unregistering): Released all slaves [ 398.331752][T16712] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 398.341534][T16712] bond1 (unregistering): Released all slaves [ 398.356664][T16712] bond2 (unregistering): Released all slaves [ 398.374886][T16712] bond3 (unregistering): Released all slaves [ 398.391857][T16712] bond4 (unregistering): Released all slaves [ 398.409358][T16712] bond5 (unregistering): (slave macvlan0): Releasing backup interface [ 398.418890][T16712] veth0_to_bond: left allmulticast mode [ 398.425719][T16712] bond5 (unregistering): Released all slaves [ 398.442286][T16712] bond6 (unregistering): (slave veth7): Releasing active interface [ 398.455402][T16712] bond6 (unregistering): Released all slaves [ 398.585488][T17325] veth0_macvtap: left promiscuous mode [ 398.622079][T17338] netlink: 'syz.4.2886': attribute type 11 has an invalid length. [ 398.754408][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2889'. [ 398.776958][T16712] !: left promiscuous mode [ 398.856414][T17238] chnl_net:caif_netlink_parms(): no params data found [ 398.933406][T16712] tipc: Disabling bearer [ 398.942501][T16712] tipc: Left network mode [ 399.257888][T17238] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.287670][T17238] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.305537][T17238] bridge_slave_0: entered allmulticast mode [ 399.328470][T17238] bridge_slave_0: entered promiscuous mode [ 399.461691][T17238] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.480089][T17238] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.489333][T17238] bridge_slave_1: entered allmulticast mode [ 399.573718][T17238] bridge_slave_1: entered promiscuous mode [ 399.620973][T17376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.785599][T17238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.859922][T17238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.075509][ T5841] Bluetooth: hci5: command tx timeout [ 400.109665][T17402] wg1 speed is unknown, defaulting to 1000 [ 400.117719][T17402] lo speed is unknown, defaulting to 1000 [ 400.187125][T17402] lo speed is unknown, defaulting to 1000 [ 400.453788][T17413] netlink: 'syz.3.2902': attribute type 5 has an invalid length. [ 400.530894][T17238] team0: Port device team_slave_0 added [ 400.551926][T17238] team0: Port device team_slave_1 added [ 400.995376][T17437] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 401.189379][T17238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.211633][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.240163][T17238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.410822][T16712] hsr_slave_0: left promiscuous mode [ 401.423781][T16712] hsr_slave_1: left promiscuous mode [ 401.442740][T17457] __nla_validate_parse: 6 callbacks suppressed [ 401.442761][T17457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2911'. [ 401.485003][T17457] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2911'. [ 401.540368][T16712] team0 (unregistering): Port device veth3 removed [ 401.921789][T17238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.939248][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.976205][T17238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.989743][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2912'. [ 402.008258][ T9053] lo speed is unknown, defaulting to 1000 [ 402.029313][ T9053] infiniband syz2: ib_query_port failed (-19) [ 402.092887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 402.101005][ C1] lec:lec_tx_timeout: lec0 [ 402.105823][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 402.153355][ T5841] Bluetooth: hci5: command tx timeout [ 402.370727][T17470] syzkaller1: entered promiscuous mode [ 402.401112][T17470] syzkaller1: entered allmulticast mode [ 402.450566][T17238] hsr_slave_0: entered promiscuous mode [ 402.458113][T17238] hsr_slave_1: entered promiscuous mode [ 402.558454][T17485] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2915'. [ 402.648814][T17482] tipc: Enabled bearer , priority 14 [ 402.720771][T17485] 0ªX¹¦À: renamed from caif0 [ 402.729790][T17485] tipc: Disabling bearer [ 402.741064][T17485] 0ªX¹¦À: entered allmulticast mode [ 402.755313][T17485] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 402.777846][T17491] wg1: Master is either lo or non-ether device [ 402.842603][T16712] IPVS: stop unused estimator thread 0... [ 403.509435][T17238] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 403.616457][T17519] syzkaller1: entered promiscuous mode [ 403.650985][T17519] syzkaller1: entered allmulticast mode [ 403.789426][T17533] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 403.837750][ T5967] wg1 speed is unknown, defaulting to 1000 [ 403.864194][ T5967] syz0: Port: 1 Link ACTIVE [ 403.909840][T17238] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 404.027241][T17545] xfrm1: entered allmulticast mode [ 404.049177][T17553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2928'. [ 404.064717][T17553] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2928'. [ 404.079316][T17552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2929'. [ 404.228427][T17238] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 404.238262][ T5841] Bluetooth: hci5: command tx timeout [ 404.271707][T17565] netlink: 'syz.2.2931': attribute type 6 has an invalid length. [ 404.455078][T17238] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 404.527757][T17570] netlink: 'syz.4.2933': attribute type 2 has an invalid length. [ 404.572447][T17571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2932'. [ 404.601570][T17571] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2932'. [ 404.986251][T17583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2936'. [ 405.026630][T17238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.064823][T17589] gre0: entered promiscuous mode [ 405.082725][T17589] gre0: entered allmulticast mode [ 405.110900][T17238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.142680][T17238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.190004][T17238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 405.427859][T17238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.473067][T17238] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.514733][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.521989][T16710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.584612][T16715] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.591855][T16715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.993042][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 406.064666][T16715] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.084113][T16715] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.099963][T16715] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.128332][T16715] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.272280][T17238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.419999][T17651] syzkaller1: entered promiscuous mode [ 406.432605][T17651] syzkaller1: entered allmulticast mode [ 406.450488][T17238] veth0_vlan: entered promiscuous mode [ 406.474808][T17238] veth1_vlan: entered promiscuous mode [ 406.541574][T17238] veth0_macvtap: entered promiscuous mode [ 406.816865][T17238] veth1_macvtap: entered promiscuous mode [ 406.961396][T17238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.031353][T17669] netlink: 'syz.4.2953': attribute type 2 has an invalid length. [ 407.066526][T17238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.095826][T16714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.113094][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 407.121139][ C1] lec:lec_tx_timeout: lec0 [ 407.125951][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 407.161846][T16709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.186345][T16709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.256145][T16709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.266942][T17674] __nla_validate_parse: 6 callbacks suppressed [ 407.266961][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 407.295657][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 407.299353][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 407.586352][T17677] wg1 speed is unknown, defaulting to 1000 [ 407.629938][T17677] lo speed is unknown, defaulting to 1000 [ 407.675070][T16714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.703182][T16714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.816467][T16712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.860301][T16712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.879039][T17700] syzkaller1: entered promiscuous mode [ 407.893274][T17700] syzkaller1: entered allmulticast mode [ 407.983746][T17703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.236137][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 408.293078][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 408.332518][T17717] netlink: 'syz.1.2964': attribute type 14 has an invalid length. [ 408.433121][T17717] netlink: 'syz.1.2964': attribute type 11 has an invalid length. [ 408.503776][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.514596][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.523118][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.531964][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.542436][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.788566][T17722] wg1 speed is unknown, defaulting to 1000 [ 408.987925][T17722] lo speed is unknown, defaulting to 1000 [ 409.133206][T17743] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2969'. [ 409.164191][T17743] 8021q: VLANs not supported on ip6_vti0 [ 409.383067][T17760] netlink: 187980 bytes leftover after parsing attributes in process `syz.1.2972'. [ 409.718492][T17778] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2976'. [ 409.754809][T17778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 409.974302][T17784] netlink: 'syz.3.2977': attribute type 8 has an invalid length. [ 410.236858][T17794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2980'. [ 410.633244][ T5838] Bluetooth: hci0: command tx timeout [ 410.826830][T17722] chnl_net:caif_netlink_parms(): no params data found [ 411.126113][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.133680][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.141339][T17722] bridge_slave_0: entered allmulticast mode [ 411.149813][T17722] bridge_slave_0: entered promiscuous mode [ 411.159259][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.167055][T17722] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.174657][T17722] bridge_slave_1: entered allmulticast mode [ 411.182620][T17722] bridge_slave_1: entered promiscuous mode [ 411.224545][T17722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.237737][T17722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.316491][T17722] team0: Port device team_slave_0 added [ 411.335860][T17722] team0: Port device team_slave_1 added [ 411.427028][T17722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.440683][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.507265][T17722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.522713][T17722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.530277][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.580323][T17722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.692609][T13697] lo speed is unknown, defaulting to 1000 [ 411.700741][T13697] sqz0: Port: 1 Link DOWN [ 411.710566][ T9053] lo speed is unknown, defaulting to 1000 [ 411.847063][T17722] hsr_slave_0: entered promiscuous mode [ 411.874247][T17722] hsr_slave_1: entered promiscuous mode [ 411.891047][T17722] debugfs: 'hsr0' already exists in 'hsr' [ 411.901269][T17722] Cannot create hsr debugfs directory [ 412.132877][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 412.140964][ C1] lec:lec_tx_timeout: lec0 [ 412.145661][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.264625][T17866] syzkaller1: left promiscuous mode [ 412.277854][T17866] syzkaller1: left allmulticast mode [ 412.290984][T17857] syzkaller1: entered promiscuous mode [ 412.306072][T17857] syzkaller1: entered allmulticast mode [ 412.540740][T17722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 412.713345][ T5838] Bluetooth: hci0: command tx timeout [ 412.775008][ T5967] wg1 speed is unknown, defaulting to 1000 [ 412.781010][T16709] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.790057][ T5967] syz0: Port: 1 Link DOWN [ 412.797153][T16709] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.824908][T17722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 412.874460][T16709] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.889089][T16709] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.914687][T17722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 412.984957][T17722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 413.200484][T17722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.218451][T17722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.229627][T17722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.254296][T17722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.291601][T17896] bond11: entered promiscuous mode [ 413.445476][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.478909][T17722] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.498490][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.505672][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.526611][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.533842][T16712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.940002][T17925] syzkaller1: entered promiscuous mode [ 413.949578][T17925] syzkaller1: entered allmulticast mode [ 414.111184][T17722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.313028][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 414.404592][T17722] veth0_vlan: entered promiscuous mode [ 414.424752][T17722] veth1_vlan: entered promiscuous mode [ 414.548352][T17722] veth0_macvtap: entered promiscuous mode [ 414.635208][T17722] veth1_macvtap: entered promiscuous mode [ 414.643788][T17944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3008'. [ 414.667103][T17942] wg1 speed is unknown, defaulting to 1000 [ 414.685005][T17947] netlink: 'syz.3.3010': attribute type 1 has an invalid length. [ 414.702049][T17722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.730443][T17942] lo speed is unknown, defaulting to 1000 [ 414.736755][T17722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.756124][T17949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3009'. [ 414.793812][ T5838] Bluetooth: hci0: command tx timeout [ 415.449412][T16710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.458284][T16710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.489604][T17945] wg1 speed is unknown, defaulting to 1000 [ 415.590400][T16710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.601700][T17945] lo speed is unknown, defaulting to 1000 [ 415.645375][T16710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.869944][T16710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.891068][T16710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.968245][T16714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.983722][T16714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.523479][T17970] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3014'. [ 416.532499][T17970] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3014'. [ 416.544454][T17975] wg1 speed is unknown, defaulting to 1000 [ 416.556161][T17975] lo speed is unknown, defaulting to 1000 [ 416.630119][T17978] 8021q: VLANs not supported on sit0 [ 416.876739][ T5838] Bluetooth: hci0: command tx timeout [ 417.152910][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 417.161006][ C1] lec:lec_tx_timeout: lec0 [ 417.166230][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.238174][T18000] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3019'. [ 417.294459][T17992] wg1 speed is unknown, defaulting to 1000 [ 417.436797][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.452365][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.464230][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.484211][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.492208][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.842936][T17992] lo speed is unknown, defaulting to 1000 [ 417.875716][T18002] wg1 speed is unknown, defaulting to 1000 [ 417.909281][T18013] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3024'. [ 417.935720][T18013] netlink: 'syz.2.3024': attribute type 11 has an invalid length. [ 417.943995][T18013] netlink: 'syz.2.3024': attribute type 23 has an invalid length. [ 417.952348][T18013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3024'. [ 417.986295][ T5914] IPVS: starting estimator thread 0... [ 417.994218][T18013] gretap1: entered promiscuous mode [ 418.073163][T18015] IPVS: using max 26 ests per chain, 62400 per kthread [ 418.202172][T18018] netlink: 'syz.2.3025': attribute type 1 has an invalid length. [ 418.274300][T18002] lo speed is unknown, defaulting to 1000 [ 418.353553][T18026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 418.368441][T18026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.777520][T18034] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3029'. [ 419.275709][T18002] chnl_net:caif_netlink_parms(): no params data found [ 419.594581][ T5841] Bluetooth: hci1: command tx timeout [ 419.621926][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.630977][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.638785][T18002] bridge_slave_0: entered allmulticast mode [ 419.647071][T18002] bridge_slave_0: entered promiscuous mode [ 419.657633][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.669068][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.679853][T18002] bridge_slave_1: entered allmulticast mode [ 419.689464][T18002] bridge_slave_1: entered promiscuous mode [ 419.767795][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.805384][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.829969][T18073] FAULT_INJECTION: forcing a failure. [ 419.829969][T18073] name failslab, interval 1, probability 0, space 0, times 0 [ 419.872238][T18073] CPU: 1 UID: 0 PID: 18073 Comm: syz.3.3039 Not tainted syzkaller #0 PREEMPT(full) [ 419.872267][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.872281][T18073] Call Trace: [ 419.872289][T18073] [ 419.872299][T18073] dump_stack_lvl+0xe8/0x150 [ 419.872337][T18073] should_fail_ex+0x412/0x560 [ 419.872372][T18073] should_failslab+0xa8/0x100 [ 419.872402][T18073] __kvmalloc_node_noprof+0x178/0x8a0 [ 419.872430][T18073] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 419.872554][T18073] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 419.872586][T18073] bpf_test_run_xdp_live+0x223/0x1cf0 [ 419.872624][T18073] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 419.872686][T18073] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 419.872728][T18073] ? __pfx_autoremove_wake_function+0x10/0x10 [ 419.872766][T18073] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 419.872832][T18073] ? 0xffffffffa02019d4 [ 419.872880][T18073] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 419.872922][T18073] ? _copy_from_user+0x94/0xb0 [ 419.872956][T18073] ? bpf_test_init+0x113/0x150 [ 419.872981][T18073] ? xdp_convert_md_to_buff+0x5b/0x330 [ 419.873013][T18073] bpf_prog_test_run_xdp+0x81c/0x1160 [ 419.873058][T18073] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 419.873092][T18073] ? __fget_files+0x2a/0x420 [ 419.873129][T18073] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 419.873160][T18073] bpf_prog_test_run+0x2c7/0x340 [ 419.873186][T18073] __sys_bpf+0x643/0x950 [ 419.873222][T18073] ? __pfx___sys_bpf+0x10/0x10 [ 419.873271][T18073] ? ksys_write+0x242/0x270 [ 419.873297][T18073] ? __pfx_ksys_write+0x10/0x10 [ 419.873328][T18073] __x64_sys_bpf+0x7c/0x90 [ 419.873359][T18073] do_syscall_64+0x14d/0xf80 [ 419.873380][T18073] ? trace_irq_disable+0x3b/0x150 [ 419.873410][T18073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.873432][T18073] ? clear_bhb_loop+0x40/0x90 [ 419.873460][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.873482][T18073] RIP: 0033:0x7f0a66d9c799 [ 419.873503][T18073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.873522][T18073] RSP: 002b:00007f0a67c12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.873546][T18073] RAX: ffffffffffffffda RBX: 00007f0a67015fa0 RCX: 00007f0a66d9c799 [ 419.873562][T18073] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 419.873576][T18073] RBP: 00007f0a67c12090 R08: 0000000000000000 R09: 0000000000000000 [ 419.873589][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.873601][T18073] R13: 00007f0a67016038 R14: 00007f0a67015fa0 R15: 00007ffe2eb8b938 [ 419.873635][T18073] [ 420.177521][T18002] team0: Port device team_slave_0 added [ 420.187466][T18002] team0: Port device team_slave_1 added [ 420.231978][T18065] wg1 speed is unknown, defaulting to 1000 [ 420.266444][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.293032][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.326917][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.346728][T18065] lo speed is unknown, defaulting to 1000 [ 420.377472][T18078] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 420.423998][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.431020][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.463345][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.560598][T18085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3042'. [ 420.663525][T18087] bridge0: entered allmulticast mode [ 420.677909][T18087] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 420.732718][T18002] hsr_slave_0: entered promiscuous mode [ 420.743997][T18002] hsr_slave_1: entered promiscuous mode [ 420.758675][T18002] debugfs: 'hsr0' already exists in 'hsr' [ 420.772932][T18002] Cannot create hsr debugfs directory [ 420.831331][T18092] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3045'. [ 420.846855][T18092] ip6tnl0: mtu less than device minimum [ 420.923839][T18095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3046'. [ 421.313321][T18002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.341955][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3049'. [ 421.362937][T18106] netlink: 'syz.2.3049': attribute type 12 has an invalid length. [ 421.404489][T16711] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.414020][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3049'. [ 421.428575][T16711] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.442956][T18106] netlink: 'syz.2.3049': attribute type 12 has an invalid length. [ 421.461335][T16711] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.478753][T18108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3050'. [ 421.492975][T16711] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.515999][T18108] netlink: 'syz.0.3050': attribute type 7 has an invalid length. [ 421.553292][T18108] netlink: 'syz.0.3050': attribute type 8 has an invalid length. [ 421.561110][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 421.577428][T18002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.677480][ T5841] Bluetooth: hci1: command tx timeout [ 421.722661][T18110] FAULT_INJECTION: forcing a failure. [ 421.722661][T18110] name failslab, interval 1, probability 0, space 0, times 0 [ 421.753052][T18110] CPU: 0 UID: 0 PID: 18110 Comm: syz.2.3051 Not tainted syzkaller #0 PREEMPT(full) [ 421.753081][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.753095][T18110] Call Trace: [ 421.753103][T18110] [ 421.753111][T18110] dump_stack_lvl+0xe8/0x150 [ 421.753146][T18110] should_fail_ex+0x412/0x560 [ 421.753178][T18110] should_failslab+0xa8/0x100 [ 421.753208][T18110] __kvmalloc_node_noprof+0x178/0x8a0 [ 421.753234][T18110] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 421.753265][T18110] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 421.753295][T18110] bpf_test_run_xdp_live+0x223/0x1cf0 [ 421.753331][T18110] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 421.753373][T18110] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 421.753406][T18110] ? __pfx_autoremove_wake_function+0x10/0x10 [ 421.753432][T18110] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 421.753509][T18110] ? 0xffffffffa02019f0 [ 421.753527][T18110] ? 0xffffffffa020375c [ 421.753573][T18110] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 421.753628][T18110] ? _copy_from_user+0x94/0xb0 [ 421.753677][T18110] ? bpf_test_init+0x113/0x150 [ 421.753703][T18110] ? xdp_convert_md_to_buff+0x5b/0x330 [ 421.753735][T18110] bpf_prog_test_run_xdp+0x81c/0x1160 [ 421.753782][T18110] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 421.753830][T18110] ? __fget_files+0x2a/0x420 [ 421.753866][T18110] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 421.753896][T18110] bpf_prog_test_run+0x2c7/0x340 [ 421.753921][T18110] __sys_bpf+0x643/0x950 [ 421.753955][T18110] ? __pfx___sys_bpf+0x10/0x10 [ 421.754003][T18110] ? ksys_write+0x242/0x270 [ 421.754028][T18110] ? __pfx_ksys_write+0x10/0x10 [ 421.754058][T18110] __x64_sys_bpf+0x7c/0x90 [ 421.754088][T18110] do_syscall_64+0x14d/0xf80 [ 421.754108][T18110] ? trace_irq_disable+0x3b/0x150 [ 421.754137][T18110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.754158][T18110] ? clear_bhb_loop+0x40/0x90 [ 421.754184][T18110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.754204][T18110] RIP: 0033:0x7f7fa919c799 [ 421.754222][T18110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.754241][T18110] RSP: 002b:00007f7fa9f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.754263][T18110] RAX: ffffffffffffffda RBX: 00007f7fa9415fa0 RCX: 00007f7fa919c799 [ 421.754295][T18110] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 421.754309][T18110] RBP: 00007f7fa9f93090 R08: 0000000000000000 R09: 0000000000000000 [ 421.754322][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.754335][T18110] R13: 00007f7fa9416038 R14: 00007f7fa9415fa0 R15: 00007ffd8d136f08 [ 421.754369][T18110] [ 422.125122][T18002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.172942][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 422.181082][ C1] lec:lec_tx_timeout: lec0 [ 422.186580][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.264109][T18002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.354937][T18121] wg1 speed is unknown, defaulting to 1000 [ 422.394224][T18121] lo speed is unknown, defaulting to 1000 [ 422.868043][T18002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.896686][T18002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.924385][T18002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.952184][T18002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 423.351808][T18154] FAULT_INJECTION: forcing a failure. [ 423.351808][T18154] name failslab, interval 1, probability 0, space 0, times 0 [ 423.364991][T18154] CPU: 1 UID: 0 PID: 18154 Comm: syz.0.3063 Not tainted syzkaller #0 PREEMPT(full) [ 423.365019][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.365032][T18154] Call Trace: [ 423.365041][T18154] [ 423.365049][T18154] dump_stack_lvl+0xe8/0x150 [ 423.365083][T18154] should_fail_ex+0x412/0x560 [ 423.365115][T18154] should_failslab+0xa8/0x100 [ 423.365142][T18154] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 423.365166][T18154] ? trace_kmalloc+0x2a/0x110 [ 423.365185][T18154] ? page_pool_create_percpu+0x76/0xb80 [ 423.365297][T18154] page_pool_create_percpu+0x76/0xb80 [ 423.365320][T18154] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 423.365349][T18154] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 423.365393][T18154] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 423.365435][T18154] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 423.365467][T18154] ? __pfx_autoremove_wake_function+0x10/0x10 [ 423.365492][T18154] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 423.365541][T18154] ? 0xffffffffa02019f0 [ 423.365558][T18154] ? 0xffffffffa0203754 [ 423.365602][T18154] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 423.365644][T18154] ? _copy_from_user+0x94/0xb0 [ 423.365677][T18154] ? bpf_test_init+0x113/0x150 [ 423.365703][T18154] ? xdp_convert_md_to_buff+0x5b/0x330 [ 423.365735][T18154] bpf_prog_test_run_xdp+0x81c/0x1160 [ 423.365781][T18154] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.365815][T18154] ? __fget_files+0x2a/0x420 [ 423.365853][T18154] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.365881][T18154] bpf_prog_test_run+0x2c7/0x340 [ 423.365907][T18154] __sys_bpf+0x643/0x950 [ 423.365941][T18154] ? __pfx___sys_bpf+0x10/0x10 [ 423.365991][T18154] ? ksys_write+0x242/0x270 [ 423.366017][T18154] ? __pfx_ksys_write+0x10/0x10 [ 423.366048][T18154] __x64_sys_bpf+0x7c/0x90 [ 423.366079][T18154] do_syscall_64+0x14d/0xf80 [ 423.366099][T18154] ? trace_irq_disable+0x3b/0x150 [ 423.366129][T18154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.366151][T18154] ? clear_bhb_loop+0x40/0x90 [ 423.366177][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.366199][T18154] RIP: 0033:0x7fa68ff9c799 [ 423.366219][T18154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.366237][T18154] RSP: 002b:00007fa690d71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.366260][T18154] RAX: ffffffffffffffda RBX: 00007fa690215fa0 RCX: 00007fa68ff9c799 [ 423.366275][T18154] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 423.366288][T18154] RBP: 00007fa690d71090 R08: 0000000000000000 R09: 0000000000000000 [ 423.366300][T18154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.366311][T18154] R13: 00007fa690216038 R14: 00007fa690215fa0 R15: 00007ffc8420fae8 [ 423.366342][T18154] [ 423.757150][ T5841] Bluetooth: hci1: command tx timeout [ 425.018579][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3061'. [ 425.029446][T18149] batadv_slave_1: entered promiscuous mode [ 425.035649][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3061'. [ 425.241007][T18002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.303386][T18002] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.337255][T16711] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.344515][T16711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.401528][T16711] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.408725][T16711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.820427][T18181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3071'. [ 425.833251][ T5841] Bluetooth: hci1: command tx timeout [ 425.846778][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 425.857308][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3071'. [ 425.873673][T18190] FAULT_INJECTION: forcing a failure. [ 425.873673][T18190] name failslab, interval 1, probability 0, space 0, times 0 [ 425.923826][T18190] CPU: 1 UID: 0 PID: 18190 Comm: syz.0.3073 Not tainted syzkaller #0 PREEMPT(full) [ 425.923856][T18190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.923870][T18190] Call Trace: [ 425.923878][T18190] [ 425.923887][T18190] dump_stack_lvl+0xe8/0x150 [ 425.923923][T18190] should_fail_ex+0x412/0x560 [ 425.923955][T18190] should_failslab+0xa8/0x100 [ 425.923984][T18190] __kvmalloc_node_noprof+0x178/0x8a0 [ 425.924010][T18190] ? page_pool_create_percpu+0x2dd/0xb80 [ 425.924036][T18190] ? page_pool_create_percpu+0xaf/0xb80 [ 425.924082][T18190] page_pool_create_percpu+0x2dd/0xb80 [ 425.924123][T18190] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 425.924155][T18190] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 425.924197][T18190] ? wake_up_q+0x99/0xd0 [ 425.924233][T18190] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 425.924267][T18190] ? __pfx_autoremove_wake_function+0x10/0x10 [ 425.924294][T18190] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 425.924348][T18190] ? 0xffffffffa02019f0 [ 425.924366][T18190] ? 0xffffffffa0203c54 [ 425.924413][T18190] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 425.924455][T18190] ? _copy_from_user+0x94/0xb0 [ 425.924489][T18190] ? bpf_test_init+0x113/0x150 [ 425.924514][T18190] ? xdp_convert_md_to_buff+0x5b/0x330 [ 425.924547][T18190] bpf_prog_test_run_xdp+0x81c/0x1160 [ 425.924594][T18190] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.924629][T18190] ? __fget_files+0x2a/0x420 [ 425.924666][T18190] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.924698][T18190] bpf_prog_test_run+0x2c7/0x340 [ 425.924725][T18190] __sys_bpf+0x643/0x950 [ 425.924760][T18190] ? __pfx___sys_bpf+0x10/0x10 [ 425.924810][T18190] ? ksys_write+0x242/0x270 [ 425.924836][T18190] ? __pfx_ksys_write+0x10/0x10 [ 425.924868][T18190] __x64_sys_bpf+0x7c/0x90 [ 425.924899][T18190] do_syscall_64+0x14d/0xf80 [ 425.924920][T18190] ? trace_irq_disable+0x3b/0x150 [ 425.924950][T18190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.924973][T18190] ? clear_bhb_loop+0x40/0x90 [ 425.925000][T18190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.925022][T18190] RIP: 0033:0x7fa68ff9c799 [ 425.925042][T18190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.925061][T18190] RSP: 002b:00007fa690d71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.925085][T18190] RAX: ffffffffffffffda RBX: 00007fa690215fa0 RCX: 00007fa68ff9c799 [ 425.925109][T18190] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 425.925123][T18190] RBP: 00007fa690d71090 R08: 0000000000000000 R09: 0000000000000000 [ 425.925136][T18190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.925149][T18190] R13: 00007fa690216038 R14: 00007fa690215fa0 R15: 00007ffc8420fae8 [ 425.925184][T18190] [ 425.925193][T18190] page_pool_create_percpu() gave up with errno -12 [ 426.237651][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.450174][T18199] sctp: [Deprecated]: syz.3.3076 (pid 18199) Use of int in max_burst socket option. [ 426.450174][T18199] Use struct sctp_assoc_value instead [ 426.528193][T18199] block nbd3: not configured, cannot reconfigure [ 427.022371][T18002] veth0_vlan: entered promiscuous mode [ 427.056402][T18002] veth1_vlan: entered promiscuous mode [ 427.147510][T18002] veth0_macvtap: entered promiscuous mode [ 427.189706][T18002] veth1_macvtap: entered promiscuous mode [ 427.196083][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 427.204174][ C1] lec:lec_tx_timeout: lec0 [ 427.208800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.240495][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.254629][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.385638][T16709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.404607][T16709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.457077][T16709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.492356][T16709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.702333][T16712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.743199][T16712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.842257][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.867402][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.879077][T18259] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3092'. [ 428.055095][T18265] wg1 speed is unknown, defaulting to 1000 [ 428.062786][T18265] lo speed is unknown, defaulting to 1000 [ 428.201943][T18271] can: request_module (can-proto-0) failed. [ 428.287719][T18279] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3096'. [ 428.965621][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.977201][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.992178][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.007718][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.016610][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.312707][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 429.361817][T18303] macvtap0: entered promiscuous mode [ 429.515985][T18311] veth0_macvtap: left promiscuous mode [ 429.663217][T18311] macvtap0 (unregistering): left promiscuous mode [ 429.832180][T18297] wg1 speed is unknown, defaulting to 1000 [ 429.878273][T18297] lo speed is unknown, defaulting to 1000 [ 430.086011][T18335] syzkaller1: entered promiscuous mode [ 430.094674][T18335] syzkaller1: entered allmulticast mode [ 430.499069][ T9482] IPVS: starting estimator thread 0... [ 430.593375][T18353] IPVS: using max 28 ests per chain, 67200 per kthread [ 430.606764][T18354] wg1 speed is unknown, defaulting to 1000 [ 430.710427][T18360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.713005][T16713] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.792005][T18354] lo speed is unknown, defaulting to 1000 [ 430.839468][T18364] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 430.868185][T18364] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 430.886724][T18364] netlink: 'syz.2.3119': attribute type 4 has an invalid length. [ 430.899244][T18364] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3119'. [ 430.911487][T18364] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 430.920897][T18364] netlink: 'syz.2.3119': attribute type 4 has an invalid length. [ 430.929072][T18364] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3119'. [ 430.977667][T16713] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.005945][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'. [ 431.017243][T18367] openvswitch: netlink: ufid size 292 bytes exceeds the range (1, 16) [ 431.088316][T16713] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.118668][ T5838] Bluetooth: hci2: command tx timeout [ 431.125563][T18369] netlink: 'syz.0.3121': attribute type 10 has an invalid length. [ 431.167366][T18369] team0: Port device syz_tun added [ 431.215475][T16713] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.486347][T18373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.503976][T18380] syzkaller0: entered promiscuous mode [ 431.514291][T18380] syzkaller0: entered allmulticast mode [ 431.522309][T18375] syzkaller1: entered promiscuous mode [ 431.534022][T18375] syzkaller1: entered allmulticast mode [ 431.714199][T16712] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 431.886320][T16712] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 431.900854][T18399] netlink: 'syz.0.3127': attribute type 2 has an invalid length. [ 431.995613][T18399] !©9: entered promiscuous mode [ 432.013049][T16712] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 432.033560][T18399] netlink: 'syz.0.3127': attribute type 2 has an invalid length. [ 432.065786][ T6300] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 432.090405][T18402] IPVS: length: 24 != 4632 [ 432.107640][T18399] !©9: left promiscuous mode [ 432.223600][T16713] bridge_slave_1: left allmulticast mode [ 432.229305][T16713] bridge_slave_1: left promiscuous mode [ 432.257562][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.366192][T16713] ¾x9ÿ: left allmulticast mode [ 432.381223][T16713] ¾x9ÿ: left promiscuous mode [ 432.391534][T16713] bridge0: port 1(1¾x9ÿ) entered disabled state [ 433.053242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5840 ms [ 433.061305][ C1] lec:lec_tx_timeout: lec0 [ 433.161684][T16713] pimreg: left allmulticast mode [ 433.168492][T16713] tipc: Resetting bearer [ 433.194877][ T5838] Bluetooth: hci2: command tx timeout [ 433.762683][T16713] bond6 (unregistering): (slave geneve3): Releasing active interface [ 434.012220][T16713] tipc: Disabling bearer [ 434.511489][T16713] team0: Port device bond0 removed [ 434.520478][T16713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.531293][T16713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.541614][T16713] bond0 (unregistering): Released all slaves [ 434.554454][T16713] bond1 (unregistering): Released all slaves [ 434.569886][T16713] bond2 (unregistering): Released all slaves [ 434.584647][T16713] bond3 (unregistering): Released all slaves [ 434.600589][T16713] bond4 (unregistering): Released all slaves [ 434.622369][T16713] team0: Port device macvlan2 removed [ 434.641361][T16713] bond5 (unregistering): Released all slaves [ 434.656530][T16713] bond6 (unregistering): Released all slaves [ 434.670637][T16713] bond7 (unregistering): Released all slaves [ 434.690623][T16713] bond8 (unregistering): Released all slaves [ 434.705958][T16713] bond9 (unregistering): Released all slaves [ 434.730239][T16713] bond10 (unregistering): Released all slaves [ 434.750896][T16713] bond11 (unregistering): Released all slaves [ 434.765116][T18297] chnl_net:caif_netlink_parms(): no params data found [ 434.820600][T18421] wg1 speed is unknown, defaulting to 1000 [ 434.917896][T18421] lo speed is unknown, defaulting to 1000 [ 435.017645][T16713] tipc: Disabling bearer [ 435.031417][T16713] tipc: Left network mode [ 435.273274][ T5838] Bluetooth: hci2: command tx timeout [ 435.423292][T18455] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 435.443672][T18455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 435.673458][T18476] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 435.745641][T18297] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.773896][T18297] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.798476][T18297] bridge_slave_0: entered allmulticast mode [ 435.825109][T18297] bridge_slave_0: entered promiscuous mode [ 435.928148][T18297] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.939113][T18297] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.947486][T18297] bridge_slave_1: entered allmulticast mode [ 435.956018][T18297] bridge_slave_1: entered promiscuous mode [ 436.201409][T18297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.284267][T18505] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3143'. [ 436.286110][T18504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3144'. [ 436.351124][T18297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.401108][T18509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3145'. [ 436.451397][T18499] wg1 speed is unknown, defaulting to 1000 [ 436.475141][T18297] team0: Port device team_slave_0 added [ 436.487405][T18499] lo speed is unknown, defaulting to 1000 [ 436.496176][T18297] team0: Port device team_slave_1 added [ 436.591539][T18297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.608881][T18297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.663514][T18297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.676470][T18297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.683625][T18297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.711128][T18297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.906488][T18297] hsr_slave_0: entered promiscuous mode [ 436.924207][T18297] hsr_slave_1: entered promiscuous mode [ 436.945446][T18297] debugfs: 'hsr0' already exists in 'hsr' [ 436.951241][T18297] Cannot create hsr debugfs directory [ 436.992662][T18523] macvlan0: entered promiscuous mode [ 437.002947][T18526] sctp: [Deprecated]: syz.1.3147 (pid 18526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.002947][T18526] Use struct sctp_sack_info instead [ 437.024301][T18523] netlink: 'syz.1.3147': attribute type 2 has an invalid length. [ 437.036797][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 437.084497][T18519] sctp: [Deprecated]: syz.1.3147 (pid 18519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.084497][T18519] Use struct sctp_sack_info instead [ 437.176104][T18523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3147'. [ 437.227819][T18517] wg1 speed is unknown, defaulting to 1000 [ 437.353936][ T5838] Bluetooth: hci2: command tx timeout [ 437.647755][T18517] lo speed is unknown, defaulting to 1000 [ 437.968630][T16713] hsr_slave_0: left promiscuous mode [ 437.975727][T16713] hsr_slave_1: left promiscuous mode [ 438.060903][T16713] veth1_macvtap (unregistering): left allmulticast mode [ 438.157586][T16713] team0 (unregistering): Port device team_slave_1 removed [ 438.349670][T18543] wg1 speed is unknown, defaulting to 1000 [ 438.376152][T18543] lo speed is unknown, defaulting to 1000 [ 438.565082][T18297] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 438.816026][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 438.831083][T18297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.015946][T18554] hsr_slave_0: left promiscuous mode [ 439.045437][T18554] hsr_slave_1: left promiscuous mode [ 439.212482][T18297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.278418][T16713] IPVS: stop unused estimator thread 0... [ 439.326995][T18568] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3152'. [ 439.395950][T18297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.614825][T18575] netlink: 'syz.2.3153': attribute type 29 has an invalid length. [ 440.059959][T18577] netlink: 'syz.2.3153': attribute type 29 has an invalid length. [ 440.072445][T18586] xt_limit: Overflow, try lower: 271964/0 [ 440.187460][T18297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.258606][T18297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.304288][T18297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.357233][T18297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.365647][ T9489] IPVS: starting estimator thread 0... [ 440.473416][T18595] IPVS: using max 25 ests per chain, 60000 per kthread [ 440.589881][T18608] netlink: 'syz.1.3159': attribute type 39 has an invalid length. [ 440.617141][T18612] netlink: 'syz.2.3160': attribute type 4 has an invalid length. [ 441.021172][T18620] netlink: 'syz.4.3161': attribute type 3 has an invalid length. [ 441.072627][T18617] wg1 speed is unknown, defaulting to 1000 [ 441.096530][T18617] lo speed is unknown, defaulting to 1000 [ 441.130718][T18620] block nbd4: NBD_DISCONNECT [ 441.206793][T18297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.267163][T18297] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.497845][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.505071][T16712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.584553][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.591801][T16712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.760120][T18297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.075503][T18638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.486468][T18662] syz.4.3167: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 442.493551][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 442.552169][T18662] CPU: 0 UID: 0 PID: 18662 Comm: syz.4.3167 Not tainted syzkaller #0 PREEMPT(full) [ 442.552199][T18662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.552212][T18662] Call Trace: [ 442.552221][T18662] [ 442.552229][T18662] dump_stack_lvl+0xe8/0x150 [ 442.552267][T18662] warn_alloc+0x249/0x340 [ 442.552332][T18662] ? stack_trace_save+0xa9/0x100 [ 442.552359][T18662] ? __pfx_warn_alloc+0x10/0x10 [ 442.552391][T18662] ? kasan_save_track+0x4f/0x80 [ 442.552412][T18662] ? kasan_save_track+0x3e/0x80 [ 442.552431][T18662] ? __kasan_kmalloc+0x93/0xb0 [ 442.552453][T18662] ? __kmalloc_cache_noprof+0x31c/0x660 [ 442.552475][T18662] ? xskq_create+0x56/0x170 [ 442.552644][T18662] ? xsk_setsockopt+0x54c/0x990 [ 442.552670][T18662] ? do_sock_setsockopt+0x17c/0x1b0 [ 442.552740][T18662] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 442.552772][T18662] ? do_syscall_64+0x14d/0xf80 [ 442.552801][T18662] __vmalloc_node_range_noprof+0x132/0x1730 [ 442.552860][T18662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 442.552905][T18662] ? __kasan_kmalloc+0x93/0xb0 [ 442.552935][T18662] vmalloc_user_noprof+0xad/0xe0 [ 442.552959][T18662] ? xskq_create+0xbf/0x170 [ 442.552989][T18662] xskq_create+0xbf/0x170 [ 442.553021][T18662] xsk_init_queue+0x8a/0xe0 [ 442.553053][T18662] xsk_setsockopt+0x54c/0x990 [ 442.553083][T18662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 442.553111][T18662] ? __pfx_aa_sk_perm+0x10/0x10 [ 442.553141][T18662] ? aa_sock_opt_perm+0xff/0x1a0 [ 442.553171][T18662] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 442.553196][T18662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 442.553225][T18662] do_sock_setsockopt+0x17c/0x1b0 [ 442.553261][T18662] __x64_sys_setsockopt+0x13d/0x1b0 [ 442.553300][T18662] do_syscall_64+0x14d/0xf80 [ 442.553318][T18662] ? trace_irq_disable+0x3b/0x150 [ 442.553349][T18662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.553370][T18662] ? clear_bhb_loop+0x40/0x90 [ 442.553395][T18662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.553415][T18662] RIP: 0033:0x7f213179c799 [ 442.553434][T18662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.553452][T18662] RSP: 002b:00007f21326d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 442.553474][T18662] RAX: ffffffffffffffda RBX: 00007f2131a16090 RCX: 00007f213179c799 [ 442.553490][T18662] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 442.553502][T18662] RBP: 00007f2131832bd9 R08: 0000000000000004 R09: 0000000000000000 [ 442.553515][T18662] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.553527][T18662] R13: 00007f2131a16128 R14: 00007f2131a16090 R15: 00007ffecf480898 [ 442.553561][T18662] [ 442.921423][T18662] Mem-Info: [ 442.949127][T18662] active_anon:10345 inactive_anon:0 isolated_anon:0 [ 442.949127][T18662] active_file:4038 inactive_file:40079 isolated_file:0 [ 442.949127][T18662] unevictable:768 dirty:220 writeback:0 [ 442.949127][T18662] slab_reclaimable:12970 slab_unreclaimable:120664 [ 442.949127][T18662] mapped:33391 shmem:2067 pagetables:1461 [ 442.949127][T18662] sec_pagetables:0 bounce:0 [ 442.949127][T18662] kernel_misc_reclaimable:0 [ 442.949127][T18662] free:1298573 free_pcp:10178 free_cma:0 [ 443.016741][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 443.057180][T18658] wg1 speed is unknown, defaulting to 1000 [ 443.092405][T18658] lo speed is unknown, defaulting to 1000 [ 443.121756][T18662] Node 0 active_anon:44044kB inactive_anon:0kB active_file:16152kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133640kB dirty:904kB writeback:0kB shmem:9580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15200kB pagetables:5632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 443.176111][T18662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 443.274020][T18662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.323338][T18297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.325378][T18662] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 443.367044][T18662] Node 0 DMA32 free:1237388kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46744kB inactive_anon:0kB active_file:16152kB inactive_file:160112kB unevictable:1536kB writepending:904kB zspages:0kB present:3129332kB managed:2552728kB mlocked:0kB bounce:0kB free_pcp:36624kB local_pcp:16012kB free_cma:0kB [ 443.473449][T18662] lowmem_reserve[]: 0 0 0 0 0 [ 443.478257][T18662] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 443.573776][T18662] lowmem_reserve[]: 0 0 0 0 0 [ 443.578693][T18662] Node 1 Normal free:3935680kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:4028kB free_cma:0kB [ 443.634402][T18662] lowmem_reserve[]: 0 0 0 0 0 [ 443.653386][T18662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 443.732922][T18662] Node 0 DMA32: 6013*4kB (UME) 3967*8kB (UME) 1772*16kB (UM) 608*32kB (UME) 189*64kB (UM) 196*128kB (UME) 327*256kB (UM) 249*512kB (UM) 178*1024kB (UM) 97*2048kB (UM) 124*4096kB (UM) = 1240812kB [ 443.804999][T18662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 443.811234][T18297] veth0_vlan: entered promiscuous mode [ 443.829687][T18678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3171'. [ 443.840660][T18662] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 5*16kB (ME) 5*32kB (UME) 5*64kB (UME) 3*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 959*4096kB (UM) = 3935680kB [ 443.881202][T18297] veth1_vlan: entered promiscuous mode [ 443.908509][T18662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.944389][T18662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.984239][T18662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.038839][T18662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.087418][T18662] 45482 total pagecache pages [ 444.108233][T18662] 0 pages in swap cache [ 444.125731][T18662] Free swap = 124996kB [ 444.130446][T18297] veth0_macvtap: entered promiscuous mode [ 444.139953][T18662] Total swap = 124996kB [ 444.157510][T18662] 2097051 pages RAM [ 444.162702][T18297] veth1_macvtap: entered promiscuous mode [ 444.175623][T18662] 0 pages HighMem/MovableOnly [ 444.180424][T18662] 427033 pages reserved [ 444.193222][T18662] 0 pages cma reserved [ 444.265682][T18297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.342606][T18297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.383992][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 444.418681][T16709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.460249][T16709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.495871][T18690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 444.525696][T16709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.644583][T16709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.769257][T18703] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3176'. [ 445.001067][T18709] syzkaller1: entered promiscuous mode [ 445.019505][T18709] syzkaller1: entered allmulticast mode [ 445.133519][T16712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.151922][T16712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.283942][T16712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.301694][T16712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.731967][T18733] netlink: 'syz.2.3182': attribute type 29 has an invalid length. [ 445.821684][T18738] wg1 speed is unknown, defaulting to 1000 [ 445.858919][T18737] syzkaller0: entered promiscuous mode [ 445.864721][T18737] syzkaller0: entered allmulticast mode [ 445.894914][T18738] lo speed is unknown, defaulting to 1000 [ 445.958574][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3182'. [ 445.968112][T18737] openvswitch: netlink: Unknown nsh attribute 0 [ 446.240363][T18750] netlink: 'syz.0.3184': attribute type 2 has an invalid length. [ 446.317310][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.329726][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.345279][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 446.796477][T18758] wg1 speed is unknown, defaulting to 1000 [ 446.914148][T18758] lo speed is unknown, defaulting to 1000 [ 446.945432][T18773] syzkaller1: entered promiscuous mode [ 446.950970][T18773] syzkaller1: entered allmulticast mode [ 447.185648][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 447.388877][T18782] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 447.631318][T18774] wg1 speed is unknown, defaulting to 1000 [ 447.681562][T18774] lo speed is unknown, defaulting to 1000 [ 448.135088][T18764] infiniband !yz!: set down [ 448.143580][T18764] infiniband !yz!: added team_slave_0 [ 448.151201][T18764] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 448.165609][T18764] infiniband !yz!: Couldn't open port 1 [ 448.205687][T18803] syzkaller1: entered promiscuous mode [ 448.211605][T18803] syzkaller1: entered allmulticast mode [ 448.317213][T18804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3195'. [ 448.467195][T18764] RDS/IB: !yz!: added [ 448.486977][T18764] smc: adding ib device !yz! with port count 1 [ 448.502159][T18764] smc: ib device !yz! port 1 has no pnetid [ 449.087663][T18814] wg1 speed is unknown, defaulting to 1000 [ 450.425625][T18867] netlink: 'syz.4.3204': attribute type 15 has an invalid length. [ 450.504377][T18867] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.683856][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 450.692771][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'. [ 450.870239][T18877] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3205'. [ 451.611339][T18892] netlink: 'syz.2.3206': attribute type 62 has an invalid length. [ 451.630944][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 451.823249][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 451.860028][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 451.992912][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 452.001000][ C1] lec:lec_tx_timeout: lec0 [ 452.005953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.147066][T18905] tipc: Started in network mode [ 452.157183][T18905] tipc: Node identity 82a6db92ed81, cluster identity 4711 [ 452.177582][T18905] tipc: Enabled bearer , priority 0 [ 452.198078][T18905] syzkaller0: entered promiscuous mode [ 452.213052][T18905] syzkaller0: entered allmulticast mode [ 452.227959][T18905] tipc: Resetting bearer [ 452.303377][T18904] tipc: Resetting bearer [ 452.333514][T18904] tipc: Disabling bearer [ 452.513571][T18914] netlink: 'syz.2.3209': attribute type 13 has an invalid length. [ 452.757785][T18922] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 452.767205][T18922] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3210'. [ 452.777938][T18922] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3210'. [ 452.787129][T18922] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 452.796889][T18922] netlink: 634 bytes leftover after parsing attributes in process `syz.2.3210'. [ 452.832947][T18922] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 453.069408][T18928] tap0: tun_chr_ioctl cmd 2147767521 [ 453.602051][T18880] wg1 speed is unknown, defaulting to 1000 [ 453.609038][T18814] lo speed is unknown, defaulting to 1000 [ 453.773324][T18936] syzkaller1: entered promiscuous mode [ 453.778852][T18936] syzkaller1: entered allmulticast mode [ 453.919247][T18880] lo speed is unknown, defaulting to 1000 [ 454.020051][T18938] macvlan0: left promiscuous mode [ 454.099653][T18940] wg1 speed is unknown, defaulting to 1000 [ 454.387997][T18940] lo speed is unknown, defaulting to 1000 [ 455.265327][T18961] sctp: [Deprecated]: syz.0.3219 (pid 18961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.265327][T18961] Use struct sctp_sack_info instead [ 455.342133][T18964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3221'. [ 455.569149][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3222'. [ 455.591949][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3222'. [ 456.846606][T18983] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3225'. [ 456.888772][T18985] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3224'. [ 457.032940][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 457.040995][ C1] lec:lec_tx_timeout: lec0 [ 457.217569][T18996] netlink: 'syz.0.3228': attribute type 21 has an invalid length. [ 457.276515][T18996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3228'. [ 457.424765][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3230'. [ 457.517377][T19008] veth1_to_bond: entered promiscuous mode [ 457.544848][T19008] macsec1: entered promiscuous mode [ 457.592050][T19008] veth1_to_bond: left promiscuous mode [ 457.714562][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 457.734945][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 457.744861][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 457.889408][T19009] wg1 speed is unknown, defaulting to 1000 [ 457.919629][T19009] lo speed is unknown, defaulting to 1000 [ 458.218059][T19029] tipc: Can't bind to reserved service type 1 [ 458.593703][T19039] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 458.669917][T19042] macsec0: entered promiscuous mode [ 459.007463][T19054] wg1 speed is unknown, defaulting to 1000 [ 459.034768][T19054] lo speed is unknown, defaulting to 1000 [ 459.125254][T19056] wg1 speed is unknown, defaulting to 1000 [ 459.744903][T19074] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 459.951289][T19079] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 459.992033][T19056] lo speed is unknown, defaulting to 1000 [ 460.265191][T19097] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 460.366723][T19097] __nla_validate_parse: 5 callbacks suppressed [ 460.366741][T19097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 460.397068][T19097] bond1: (slave bridge1): making interface the new active one [ 460.406533][T19097] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 460.421500][T19097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3255'. [ 460.433703][T19097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.450333][T19097] macvlan2: entered promiscuous mode [ 460.455976][T19097] macvlan2: entered allmulticast mode [ 460.462244][T19097] bond1: entered promiscuous mode [ 460.468066][T19097] bridge1: entered promiscuous mode [ 460.488804][T19097] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.506523][T19097] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 460.542357][T19097] bond1: left promiscuous mode [ 460.564627][T19097] bridge1: left promiscuous mode [ 461.138370][T19116] syzkaller1: entered promiscuous mode [ 461.148285][T19116] syzkaller1: entered allmulticast mode [ 461.398360][T19122] tc_dump_action: action bad kind [ 461.612402][T19130] ip6tnl1: entered promiscuous mode [ 461.628119][T19132] sctp: [Deprecated]: syz.0.3266 (pid 19132) Use of int in max_burst socket option deprecated. [ 461.628119][T19132] Use struct sctp_assoc_value instead [ 461.814624][T19136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3267'. [ 462.126252][T19143] team0 (unregistering): Port device team_slave_0 removed [ 462.175801][T19143] team0 (unregistering): Port device team_slave_1 removed [ 462.370015][T19146] veth0: entered promiscuous mode [ 462.403459][T19146] bond0: entered promiscuous mode [ 462.415087][T19146] bond_slave_0: entered promiscuous mode [ 462.440644][T19146] bond_slave_1: entered promiscuous mode [ 462.477163][T19145] bond0: left promiscuous mode [ 462.481967][T19145] bond_slave_0: left promiscuous mode [ 462.504670][T19151] FAULT_INJECTION: forcing a failure. [ 462.504670][T19151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.520291][T19145] bond_slave_1: left promiscuous mode [ 462.537695][T19151] CPU: 0 UID: 0 PID: 19151 Comm: syz.2.3272 Not tainted syzkaller #0 PREEMPT(full) [ 462.537720][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.537733][T19151] Call Trace: [ 462.537740][T19151] [ 462.537749][T19151] dump_stack_lvl+0xe8/0x150 [ 462.537782][T19151] should_fail_ex+0x412/0x560 [ 462.537821][T19151] _copy_from_user+0x2d/0xb0 [ 462.537852][T19151] ___sys_sendmsg+0x1c6/0x360 [ 462.537877][T19151] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.537930][T19151] ? __fget_files+0x2a/0x420 [ 462.537958][T19151] ? __fget_files+0x3a0/0x420 [ 462.537996][T19151] __x64_sys_sendmsg+0x1bd/0x2a0 [ 462.538018][T19151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.538046][T19151] ? __pfx_ksys_write+0x10/0x10 [ 462.538078][T19151] do_syscall_64+0x14d/0xf80 [ 462.538097][T19151] ? trace_irq_disable+0x3b/0x150 [ 462.538126][T19151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.538145][T19151] ? clear_bhb_loop+0x40/0x90 [ 462.538169][T19151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.538188][T19151] RIP: 0033:0x7f7fa919c799 [ 462.538206][T19151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.538224][T19151] RSP: 002b:00007f7fa9f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.538245][T19151] RAX: ffffffffffffffda RBX: 00007f7fa9415fa0 RCX: 00007f7fa919c799 [ 462.538259][T19151] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 462.538271][T19151] RBP: 00007f7fa9f93090 R08: 0000000000000000 R09: 0000000000000000 [ 462.538283][T19151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.538295][T19151] R13: 00007f7fa9416038 R14: 00007f7fa9415fa0 R15: 00007ffd8d136f08 [ 462.538326][T19151] [ 462.547352][T19145] veth0: left promiscuous mode [ 463.170326][T19167] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 463.330714][T19163] vlan2: entered allmulticast mode [ 463.584592][T19164] wg1 speed is unknown, defaulting to 1000 [ 463.592131][T19164] lo speed is unknown, defaulting to 1000 [ 463.935846][T19180] mac80211_hwsim hwsim43 ªªªªª;: renamed from wlan0 (while UP) [ 463.980324][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 464.015280][T19182] bond0: entered promiscuous mode [ 464.028796][T19182] bond_slave_0: entered promiscuous mode [ 464.055138][T19182] bond_slave_1: entered promiscuous mode [ 464.061566][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3281'. [ 464.136985][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.147171][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.161309][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.170327][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.183405][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.276983][T19180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.472887][T19180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.608763][T19180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.729474][T19180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.748594][T19184] wg1 speed is unknown, defaulting to 1000 [ 464.756610][T19184] lo speed is unknown, defaulting to 1000 [ 464.910774][T16711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.942491][T16711] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.971822][T16711] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.020872][T16711] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.129827][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 465.950496][T19222] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.993061][T19222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.000319][T19222] IPv6: NLM_F_CREATE should be set when creating new route [ 466.007617][T19222] IPv6: NLM_F_CREATE should be set when creating new route [ 466.025472][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3289'. [ 466.232959][ T5841] Bluetooth: hci4: command tx timeout [ 466.259290][T19222] bond1: invalid ARP target 0.0.0.0 specified for addition [ 466.323250][T19222] bond1: option arp_ip_target: invalid value (0) [ 466.345749][T19222] bond1 (unregistering): Released all slaves [ 466.738058][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 467.056667][T19256] netlink: 'syz.4.3297': attribute type 2 has an invalid length. [ 467.088186][T19184] chnl_net:caif_netlink_parms(): no params data found [ 467.124462][T19256] netlink: 'syz.4.3297': attribute type 11 has an invalid length. [ 467.230495][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3297'. [ 467.264150][T19269] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3299'. [ 467.349620][T19272] netlink: 'syz.0.3300': attribute type 1 has an invalid length. [ 467.651803][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.673120][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.694311][T19184] bridge_slave_0: entered allmulticast mode [ 467.715342][T19184] bridge_slave_0: entered promiscuous mode [ 467.740300][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.762977][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.783164][T19184] bridge_slave_1: entered allmulticast mode [ 467.813541][T19184] bridge_slave_1: entered promiscuous mode [ 467.976328][T19184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.013627][T19184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.119735][T19184] team0: Port device team_slave_0 added [ 468.148959][T19184] team0: Port device team_slave_1 added [ 468.286942][T19184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.314393][ T5841] Bluetooth: hci4: command tx timeout [ 468.327041][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.393023][T19184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.393478][T19290] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3303'. [ 468.408613][T19184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.424433][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.453226][T19184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.667752][T19184] hsr_slave_0: entered promiscuous mode [ 468.685635][T19184] hsr_slave_1: entered promiscuous mode [ 468.710849][T19184] debugfs: 'hsr0' already exists in 'hsr' [ 468.733787][T19184] Cannot create hsr debugfs directory [ 469.074772][T19318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3309'. [ 469.160757][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 469.279795][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 469.359302][T19320] tipc: Started in network mode [ 469.372954][T19320] tipc: Node identity 06a6be25a04a, cluster identity 4711 [ 469.388032][T19320] tipc: Enabled bearer , priority 0 [ 469.408502][T19329] netlink: 'syz.3.3313': attribute type 1 has an invalid length. [ 469.489557][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3313'. [ 469.515779][T19324] syzkaller0: entered promiscuous mode [ 469.521432][T19324] syzkaller0: entered allmulticast mode [ 469.532290][T19324] tipc: Resetting bearer [ 469.607040][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3315'. [ 469.642985][T19332] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 469.718287][T19319] tipc: Resetting bearer [ 469.893478][T19346] netlink: 'syz.2.3317': attribute type 142 has an invalid length. [ 470.398839][ T5841] Bluetooth: hci4: command tx timeout [ 470.711884][T19352] delete_channel: no stack [ 471.653000][T19319] tipc: Disabling bearer [ 471.752546][ T9053] tipc: Node number set to 2800533029 [ 471.987280][T19377] __nla_validate_parse: 1 callbacks suppressed [ 471.987298][T19377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3321'. [ 472.117029][T19377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3321'. [ 472.365746][T19184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.386684][T19184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.402502][T19392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.520205][ T5841] Bluetooth: hci4: command tx timeout [ 472.546775][T19184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.640701][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3323'. [ 472.857575][T19184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.237757][T19184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.268225][T19184] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.284971][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.292157][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.306743][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.313924][T16710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.556680][T19184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.606429][T19184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.667030][T19413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3327'. [ 473.723221][T19424] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 473.800645][T19442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3331'. [ 473.834698][T19442] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3331'. [ 473.860571][T19442] netlink: 'syz.2.3331': attribute type 5 has an invalid length. [ 473.870866][T19445] xt_TCPMSS: Only works on TCP SYN packets [ 473.880890][T19442] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3331'. [ 474.147586][T19184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.297202][ T5841] block nbd1: Receive control failed (result -32) [ 474.312644][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 474.393367][T19184] veth0_vlan: entered promiscuous mode [ 474.410202][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3338'. [ 474.432763][T19184] veth1_vlan: entered promiscuous mode [ 474.466033][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.474053][T19468] bridge0: port 1(1¾x9ÿ) entered disabled state [ 474.608342][T19184] veth0_macvtap: entered promiscuous mode [ 474.692379][T19481] bond2: ARP target 9.0.0.0 is already present [ 474.702376][T19481] bond2: option arp_ip_target: invalid value (9) [ 474.716717][T19481] bond2 (unregistering): Released all slaves [ 474.816019][T19184] veth1_macvtap: entered promiscuous mode [ 474.890819][T19184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.927028][T19184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.952019][T16715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.987718][T19492] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 475.022217][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3346'. [ 475.040422][T16715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.064473][T16715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.091993][T16715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.170008][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.217614][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.334884][T16715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.359709][T16715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.084299][T19509] lo speed is unknown, defaulting to 1000 [ 476.097087][T19509] lo speed is unknown, defaulting to 1000 [ 476.115656][T19509] lo speed is unknown, defaulting to 1000 [ 476.174626][T19513] wg1 speed is unknown, defaulting to 1000 [ 476.201258][T19509] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 476.218275][T19513] lo speed is unknown, defaulting to 1000 [ 476.280555][T19509] lo speed is unknown, defaulting to 1000 [ 476.307404][T19509] lo speed is unknown, defaulting to 1000 [ 476.341523][T19509] lo speed is unknown, defaulting to 1000 [ 476.371761][T19521] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 476.377613][T19509] lo speed is unknown, defaulting to 1000 [ 476.493371][T19509] lo speed is unknown, defaulting to 1000 [ 476.524358][T19509] lo speed is unknown, defaulting to 1000 [ 476.543508][T19521] bond1 (unregistering): Released all slaves [ 476.644368][T19509] lo speed is unknown, defaulting to 1000 [ 476.664182][T19509] lo speed is unknown, defaulting to 1000 [ 476.808594][T19509] lo speed is unknown, defaulting to 1000 [ 476.816241][T19509] lo speed is unknown, defaulting to 1000 [ 477.022325][T19538] __nla_validate_parse: 7 callbacks suppressed [ 477.022348][T19538] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.3358'. [ 477.069858][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'. [ 477.120890][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3358'. [ 477.214559][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3361'. [ 477.276073][T19538] bond2: entered promiscuous mode [ 477.299218][T19538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.314550][T19553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'. [ 477.366599][T19553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'. [ 477.618099][T19569] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 477.647844][T19569] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 477.682995][T19569] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3364'. [ 477.694985][T19572] ieee802154 phy0 wpan0: encryption failed: -22 [ 477.715218][T19567] wg1 speed is unknown, defaulting to 1000 [ 477.731165][T19569] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3364'. [ 477.769858][T19567] lo speed is unknown, defaulting to 1000 [ 477.947723][T19578] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3368'. [ 478.177926][T19586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3370'. [ 478.768467][T19567] lo speed is unknown, defaulting to 1000 [ 478.803377][T19583] siw: device registration error -23 [ 478.994155][ T9489] IPVS: starting estimator thread 0... [ 479.005554][T19600] IPVS: ip_vs_edit_dest(): server weight less than zero [ 479.093197][T19601] IPVS: using max 33 ests per chain, 79200 per kthread [ 479.805197][T19613] gtp0: entered promiscuous mode [ 479.823284][T19613] gtp0: entered allmulticast mode [ 479.979621][T19618] netlink: 'syz.0.3381': attribute type 10 has an invalid length. [ 479.999057][T19617] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 480.147853][T19617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.216120][T19622] bond2: (slave veth9): Enslaving as an active interface with a down link [ 480.300976][T19625] bond2: (slave dummy0): making interface the new active one [ 480.324104][T19625] dummy0: entered promiscuous mode [ 480.329671][T19625] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 480.350002][T19617] bond2: (slave dummy0): Releasing active interface [ 480.359420][T19617] dummy0 (unregistering): left promiscuous mode [ 480.447828][T19627] batman_adv: batadv0: Adding interface: wlan1 [ 480.467620][T19627] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.543608][T19627] batman_adv: batadv0: Interface activated: wlan1 [ 480.710952][T19636] netlink: 'syz.1.3386': attribute type 4 has an invalid length. [ 480.733085][T19636] .`: renamed from bond0 (while UP) [ 480.765703][T19639] netlink: 'syz.2.3388': attribute type 4 has an invalid length. [ 480.801653][T19639] netlink: 'syz.2.3388': attribute type 4 has an invalid length. [ 480.810805][T19642] netlink: 'syz.4.3387': attribute type 4 has an invalid length. [ 480.861767][T13696] lo speed is unknown, defaulting to 1000 [ 480.871068][T13696] syz2: Port: 1 Link ACTIVE [ 480.956719][T19635] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.967878][T19647] wg1 speed is unknown, defaulting to 1000 [ 480.995133][T19647] lo speed is unknown, defaulting to 1000 [ 481.452503][T19647] lo speed is unknown, defaulting to 1000 [ 481.900150][T19652] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.907909][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.048285][T19652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.073813][T19669] __nla_validate_parse: 6 callbacks suppressed [ 482.073833][T19669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'. [ 482.079863][T19652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.264968][T19652] batman_adv: batadv0: Interface deactivated: wlan1 [ 482.398391][T16711] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.438087][T16711] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.516125][T16711] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.543525][T16711] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.641322][T19672] syzkaller1: entered promiscuous mode [ 482.673055][T19672] syzkaller1: entered allmulticast mode [ 483.337669][T19689] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3398'. [ 483.661664][T19697] syzkaller0: entered promiscuous mode [ 483.680928][T19697] syzkaller0: entered allmulticast mode [ 483.935124][T19704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3403'. [ 483.962124][T19706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3403'. [ 483.973790][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'. [ 483.983609][T19710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3405'. [ 484.785928][T19727] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3410'. [ 485.060517][T19740] wg1 speed is unknown, defaulting to 1000 [ 485.068662][T19740] lo speed is unknown, defaulting to 1000 [ 485.159297][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 485.831393][T19740] lo speed is unknown, defaulting to 1000 [ 486.076283][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 486.083631][T19704] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 486.090014][T19704] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 486.764106][T19782] Bluetooth: MGMT ver 1.23 [ 486.781331][T19704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.802263][T19704] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 486.885749][T19704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 486.901922][T19704] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 487.022984][T19704] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.038119][T19704] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 487.465609][T19801] tipc: Enabling of bearer rejected, failed to enable media [ 487.588245][T19808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3423'. [ 487.627587][T19808] batadv0: entered promiscuous mode [ 488.006105][T19822] wg1 speed is unknown, defaulting to 1000 [ 488.028694][T19822] lo speed is unknown, defaulting to 1000 [ 488.078192][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 488.408344][T19830] tun0: tun_chr_ioctl cmd 1074025672 [ 488.420024][T19830] tun0: ignored: set checksum disabled [ 488.431039][T19830] tun0: tun_chr_ioctl cmd 1342215183 [ 488.458255][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3431'. [ 488.483564][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3431'. [ 488.788321][T19846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3435'. [ 488.815966][T19843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3434'. [ 489.010297][T19851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3436'. [ 489.052937][T19851] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3436'. [ 489.082293][T19851] netlink: 'syz.1.3436': attribute type 5 has an invalid length. [ 489.118210][T19851] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3436'. [ 490.348833][T19822] lo speed is unknown, defaulting to 1000 [ 490.425155][T19890] netlink: 'syz.1.3442': attribute type 2 has an invalid length. [ 490.488731][T19890] hmac(sha224: entered promiscuous mode [ 490.506958][T19893] syzkaller1: entered promiscuous mode [ 490.512747][T19893] syzkaller1: entered allmulticast mode [ 490.619919][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3443'. [ 490.682230][T19893] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 490.756879][T19898] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 490.758930][T19897] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 490.981495][T19903] bond0: (slave veth3): Enslaving as an active interface with a down link [ 491.093745][T19893] bond0: (slave dummy0): making interface the new active one [ 491.133608][T19893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 491.900280][T19939] syzkaller1: entered promiscuous mode [ 491.919738][T19939] syzkaller1: entered allmulticast mode [ 492.449305][T19952] netlink: 'syz.1.3459': attribute type 1 has an invalid length. [ 492.529977][T19952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.626672][T19958] bond1: entered promiscuous mode [ 492.647643][T19958] bond1: entered allmulticast mode [ 492.673678][T19963] __nla_validate_parse: 3 callbacks suppressed [ 492.673696][T19963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3461'. [ 492.710165][T19959] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 492.724020][T19952] bond0: (slave dummy0): Releasing active interface [ 492.768505][T19952] bond1: (slave dummy0): making interface the new active one [ 492.815674][T19952] dummy0: entered promiscuous mode [ 492.836860][T19952] dummy0: entered allmulticast mode [ 492.865313][T19952] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 492.902898][T19966] netlink: 'syz.4.3462': attribute type 29 has an invalid length. [ 492.921100][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.957256][T19967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 493.184730][T19973] netlink: 'syz.2.3465': attribute type 29 has an invalid length. [ 493.199444][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 493.231094][T19973] netlink: 'syz.2.3465': attribute type 29 has an invalid length. [ 493.251538][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 493.285269][T19977] syzkaller1: entered promiscuous mode [ 493.310813][T19977] syzkaller1: entered allmulticast mode [ 493.383987][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 493.479947][T19975] wg1 speed is unknown, defaulting to 1000 [ 493.521857][T19975] lo speed is unknown, defaulting to 1000 [ 493.656816][T19989] team0: entered promiscuous mode [ 493.703978][T19989] team_slave_0: entered promiscuous mode [ 493.720779][T19989] team_slave_1: entered promiscuous mode [ 493.766781][T19989] syz_tun: entered promiscuous mode [ 493.798561][T19989] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.831705][T19989] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 494.129146][T20003] syzkaller1: entered promiscuous mode [ 494.153048][T20003] syzkaller1: entered allmulticast mode [ 494.202666][T20003] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3471'. [ 494.269528][T20003] vlan2: entered promiscuous mode [ 494.282908][T20003] geneve1: entered promiscuous mode [ 494.478292][T19975] lo speed is unknown, defaulting to 1000 [ 494.694817][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 494.810482][T20025] bridge2: entered promiscuous mode [ 495.391347][T20035] FAULT_INJECTION: forcing a failure. [ 495.391347][T20035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.404810][T20035] CPU: 1 UID: 0 PID: 20035 Comm: syz.4.3479 Not tainted syzkaller #0 PREEMPT(full) [ 495.404839][T20035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.404852][T20035] Call Trace: [ 495.404860][T20035] [ 495.404869][T20035] dump_stack_lvl+0xe8/0x150 [ 495.404903][T20035] should_fail_ex+0x412/0x560 [ 495.404943][T20035] _copy_from_user+0x2d/0xb0 [ 495.404975][T20035] ___sys_sendmsg+0x1c6/0x360 [ 495.405002][T20035] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.405055][T20035] ? __fget_files+0x2a/0x420 [ 495.405084][T20035] ? __fget_files+0x3a0/0x420 [ 495.405123][T20035] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.405146][T20035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.405176][T20035] ? __pfx_ksys_write+0x10/0x10 [ 495.405209][T20035] do_syscall_64+0x14d/0xf80 [ 495.405228][T20035] ? trace_irq_disable+0x3b/0x150 [ 495.405257][T20035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.405279][T20035] ? clear_bhb_loop+0x40/0x90 [ 495.405303][T20035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.405324][T20035] RIP: 0033:0x7f213179c799 [ 495.405343][T20035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.405362][T20035] RSP: 002b:00007f21326f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.405384][T20035] RAX: ffffffffffffffda RBX: 00007f2131a15fa0 RCX: 00007f213179c799 [ 495.405399][T20035] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 495.405413][T20035] RBP: 00007f21326f4090 R08: 0000000000000000 R09: 0000000000000000 [ 495.405426][T20035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.405438][T20035] R13: 00007f2131a16038 R14: 00007f2131a15fa0 R15: 00007ffecf480898 [ 495.405470][T20035] [ 496.107996][T20046] netlink: 'syz.4.3483': attribute type 13 has an invalid length. [ 496.347072][T20046] bond0: left promiscuous mode [ 496.363053][T20046] rose0: left promiscuous mode [ 496.378982][T20046] bond0: left allmulticast mode [ 496.409497][T20046] rose0: left allmulticast mode [ 496.438246][T20046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.479699][T20046] eql: remember to turn off Van-Jacobson compression on your slave devices [ 496.518148][T20046] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 496.778002][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 496.924335][T20062] gretap0: entered promiscuous mode [ 496.937679][T20066] netlink: 'syz.0.3488': attribute type 1 has an invalid length. [ 496.983667][T20070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.024347][T20076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3488'. [ 497.104012][T20079] FAULT_INJECTION: forcing a failure. [ 497.104012][T20079] name failslab, interval 1, probability 0, space 0, times 0 [ 497.190708][T20079] CPU: 0 UID: 0 PID: 20079 Comm: syz.2.3491 Not tainted syzkaller #0 PREEMPT(full) [ 497.190737][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.190750][T20079] Call Trace: [ 497.190758][T20079] [ 497.190767][T20079] dump_stack_lvl+0xe8/0x150 [ 497.190801][T20079] should_fail_ex+0x412/0x560 [ 497.190832][T20079] should_failslab+0xa8/0x100 [ 497.190861][T20079] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 497.190884][T20079] ? __alloc_skb+0x186/0x7d0 [ 497.190911][T20079] ? __alloc_skb+0x1d0/0x7d0 [ 497.190937][T20079] ? __local_bh_enable_ip+0xd0/0x130 [ 497.191003][T20079] __alloc_skb+0x1d0/0x7d0 [ 497.191037][T20079] netlink_sendmsg+0x5d4/0xb40 [ 497.191077][T20079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.191109][T20079] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.191139][T20079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.191166][T20079] ____sys_sendmsg+0x972/0x9f0 [ 497.191224][T20079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.191257][T20079] ? import_iovec+0x73/0xa0 [ 497.191295][T20079] ___sys_sendmsg+0x2a5/0x360 [ 497.191324][T20079] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.191385][T20079] ? __fget_files+0x2a/0x420 [ 497.191414][T20079] ? __fget_files+0x3a0/0x420 [ 497.191456][T20079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.191480][T20079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.191513][T20079] ? __pfx_ksys_write+0x10/0x10 [ 497.191550][T20079] do_syscall_64+0x14d/0xf80 [ 497.191571][T20079] ? trace_irq_disable+0x3b/0x150 [ 497.191602][T20079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.191626][T20079] ? clear_bhb_loop+0x40/0x90 [ 497.191653][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.191675][T20079] RIP: 0033:0x7f7fa919c799 [ 497.191697][T20079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.191716][T20079] RSP: 002b:00007f7fa9f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.191758][T20079] RAX: ffffffffffffffda RBX: 00007f7fa9415fa0 RCX: 00007f7fa919c799 [ 497.191774][T20079] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 497.191790][T20079] RBP: 00007f7fa9f93090 R08: 0000000000000000 R09: 0000000000000000 [ 497.191803][T20079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.191816][T20079] R13: 00007f7fa9416038 R14: 00007f7fa9415fa0 R15: 00007ffd8d136f08 [ 497.191853][T20079] [ 497.608678][T20084] vcan0: tx drop: invalid sa for name 0x0008000000000003 [ 497.987531][T20096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.460288][T20109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3500'. [ 498.619676][T20113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'. [ 499.023795][T20119] FAULT_INJECTION: forcing a failure. [ 499.023795][T20119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.042948][T20119] CPU: 0 UID: 0 PID: 20119 Comm: syz.1.3504 Not tainted syzkaller #0 PREEMPT(full) [ 499.042974][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.042987][T20119] Call Trace: [ 499.042996][T20119] [ 499.043005][T20119] dump_stack_lvl+0xe8/0x150 [ 499.043038][T20119] should_fail_ex+0x412/0x560 [ 499.043076][T20119] _copy_from_iter+0x1d3/0x1670 [ 499.043108][T20119] ? rcu_is_watching+0x15/0xb0 [ 499.043142][T20119] ? __pfx__copy_from_iter+0x10/0x10 [ 499.043176][T20119] ? netlink_sendmsg+0x650/0xb40 [ 499.043203][T20119] ? skb_put+0x11b/0x210 [ 499.043236][T20119] netlink_sendmsg+0x6c0/0xb40 [ 499.043273][T20119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.043322][T20119] ? aa_sock_msg_perm+0xf1/0x1b0 [ 499.043352][T20119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.043380][T20119] ____sys_sendmsg+0x972/0x9f0 [ 499.043411][T20119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.043442][T20119] ? import_iovec+0x73/0xa0 [ 499.043477][T20119] ___sys_sendmsg+0x2a5/0x360 [ 499.043505][T20119] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.043561][T20119] ? __fget_files+0x2a/0x420 [ 499.043592][T20119] ? __fget_files+0x3a0/0x420 [ 499.043634][T20119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 499.043658][T20119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.043690][T20119] ? __pfx_ksys_write+0x10/0x10 [ 499.043725][T20119] do_syscall_64+0x14d/0xf80 [ 499.043746][T20119] ? trace_irq_disable+0x3b/0x150 [ 499.043777][T20119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.043800][T20119] ? clear_bhb_loop+0x40/0x90 [ 499.043826][T20119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.043848][T20119] RIP: 0033:0x7f6f23b9c799 [ 499.043868][T20119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.043887][T20119] RSP: 002b:00007f6f21df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.043909][T20119] RAX: ffffffffffffffda RBX: 00007f6f23e15fa0 RCX: 00007f6f23b9c799 [ 499.043925][T20119] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 499.043939][T20119] RBP: 00007f6f21df6090 R08: 0000000000000000 R09: 0000000000000000 [ 499.043953][T20119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.043966][T20119] R13: 00007f6f23e16038 R14: 00007f6f23e15fa0 R15: 00007ffd47b0b2c8 [ 499.043999][T20119] [ 499.314122][T16713] ------------[ cut here ]------------ [ 499.319634][T16713] conntrack cleanup blocked for 60s [ 499.319653][T16713] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#0: kworker/u8:31/16713 [ 499.337802][T16713] Modules linked in: [ 499.342107][T16713] CPU: 0 UID: 0 PID: 16713 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 499.351894][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.362124][T16713] Workqueue: netns cleanup_net [ 499.367074][T16713] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 499.373922][T16713] Code: 08 48 89 df e8 bd c5 65 f8 4c 8b 3b 49 39 df 74 69 e8 10 84 fb f7 45 31 e4 e9 8e fe ff ff e8 03 84 fb f7 48 8d 3d 7c 56 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 499.394715][T16713] RSP: 0018:ffffc9000d23f8d0 EFLAGS: 00010293 [ 499.400822][T16713] RAX: ffffffff89ca156d RBX: ffffc9000d23fa70 RCX: ffff888050803d00 [ 499.408884][T16713] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90206bf0 [ 499.416920][T16713] RBP: 0000000000000001 R08: ffff88802903e403 R09: 1ffff11005207c80 [ 499.424975][T16713] R10: dffffc0000000000 R11: ffffed1005207c81 R12: 0000000000000001 [ 499.433357][T16713] R13: dffffc0000000000 R14: 0000000100004cb3 R15: 0000000100004cb4 [ 499.441382][T16713] FS: 0000000000000000(0000) GS:ffff888125465000(0000) knlGS:0000000000000000 [ 499.453214][T16713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.459843][T16713] CR2: 00007f6f2494da08 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 499.468845][T16713] Call Trace: [ 499.472159][T16713] [ 499.475178][T16713] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 499.481278][T16713] ops_undo_list+0x52b/0x940 [ 499.485971][T16713] ? __pfx_ops_undo_list+0x10/0x10 [ 499.491144][T16713] ? idr_destroy+0x227/0x290 [ 499.495917][T16713] cleanup_net+0x56b/0x800 [ 499.500386][T16713] ? __pfx_cleanup_net+0x10/0x10 [ 499.505417][T16713] ? process_scheduled_works+0xa25/0x1830 [ 499.511180][T16713] ? process_scheduled_works+0xa25/0x1830 [ 499.517041][T16713] process_scheduled_works+0xb02/0x1830 [ 499.522668][T16713] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.528747][T16713] ? assign_work+0x3d5/0x5e0 [ 499.533433][T16713] worker_thread+0xa50/0xfc0 [ 499.538101][T16713] kthread+0x388/0x470 [ 499.542211][T16713] ? __pfx_worker_thread+0x10/0x10 [ 499.547412][T16713] ? __pfx_kthread+0x10/0x10 [ 499.552042][T16713] ret_from_fork+0x51e/0xb90 [ 499.556825][T16713] ? __pfx_ret_from_fork+0x10/0x10 [ 499.561988][T16713] ? __switch_to+0xc7d/0x1450 [ 499.566930][T16713] ? __pfx_kthread+0x10/0x10 [ 499.571570][T16713] ret_from_fork_asm+0x1a/0x30 [ 499.576452][T16713] [ 499.579534][T16713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 499.586849][T16713] CPU: 0 UID: 0 PID: 16713 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 499.596506][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.606599][T16713] Workqueue: netns cleanup_net [ 499.611421][T16713] Call Trace: [ 499.614737][T16713] [ 499.617696][T16713] vpanic+0x56c/0xa60 [ 499.621765][T16713] ? __pfx__printk+0x10/0x10 [ 499.626395][T16713] ? __pfx_vpanic+0x10/0x10 [ 499.630951][T16713] ? is_bpf_text_address+0x292/0x2b0 [ 499.636284][T16713] ? is_bpf_text_address+0x26/0x2b0 [ 499.641540][T16713] panic+0xc5/0xd0 [ 499.645304][T16713] ? __pfx_panic+0x10/0x10 [ 499.649784][T16713] ? ret_from_fork_asm+0x1a/0x30 [ 499.654770][T16713] __warn+0x315/0x4f0 [ 499.658788][T16713] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 499.664983][T16713] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 499.671166][T16713] __report_bug+0x29a/0x540 [ 499.675785][T16713] ? __lock_acquire+0x6b5/0x2cf0 [ 499.680752][T16713] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 499.686936][T16713] ? __pfx___report_bug+0x10/0x10 [ 499.692014][T16713] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 499.698200][T16713] report_bug_entry+0x19a/0x290 [ 499.703080][T16713] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 499.709265][T16713] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 499.715444][T16713] handle_bug+0xce/0x200 [ 499.719719][T16713] exc_invalid_op+0x1a/0x50 [ 499.724244][T16713] asm_exc_invalid_op+0x1a/0x20 [ 499.729116][T16713] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 499.735903][T16713] Code: 08 48 89 df e8 bd c5 65 f8 4c 8b 3b 49 39 df 74 69 e8 10 84 fb f7 45 31 e4 e9 8e fe ff ff e8 03 84 fb f7 48 8d 3d 7c 56 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 499.755527][T16713] RSP: 0018:ffffc9000d23f8d0 EFLAGS: 00010293 [ 499.761616][T16713] RAX: ffffffff89ca156d RBX: ffffc9000d23fa70 RCX: ffff888050803d00 [ 499.769602][T16713] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90206bf0 [ 499.777594][T16713] RBP: 0000000000000001 R08: ffff88802903e403 R09: 1ffff11005207c80 [ 499.785584][T16713] R10: dffffc0000000000 R11: ffffed1005207c81 R12: 0000000000000001 [ 499.793573][T16713] R13: dffffc0000000000 R14: 0000000100004cb3 R15: 0000000100004cb4 [ 499.801574][T16713] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 499.807767][T16713] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 499.813855][T16713] ops_undo_list+0x52b/0x940 [ 499.818478][T16713] ? __pfx_ops_undo_list+0x10/0x10 [ 499.823619][T16713] ? idr_destroy+0x227/0x290 [ 499.828246][T16713] cleanup_net+0x56b/0x800 [ 499.832693][T16713] ? __pfx_cleanup_net+0x10/0x10 [ 499.837670][T16713] ? process_scheduled_works+0xa25/0x1830 [ 499.843413][T16713] ? process_scheduled_works+0xa25/0x1830 [ 499.849153][T16713] process_scheduled_works+0xb02/0x1830 [ 499.854769][T16713] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.860774][T16713] ? assign_work+0x3d5/0x5e0 [ 499.865388][T16713] worker_thread+0xa50/0xfc0 [ 499.870026][T16713] kthread+0x388/0x470 [ 499.874109][T16713] ? __pfx_worker_thread+0x10/0x10 [ 499.879242][T16713] ? __pfx_kthread+0x10/0x10 [ 499.883854][T16713] ret_from_fork+0x51e/0xb90 [ 499.888476][T16713] ? __pfx_ret_from_fork+0x10/0x10 [ 499.893646][T16713] ? __switch_to+0xc7d/0x1450 [ 499.898343][T16713] ? __pfx_kthread+0x10/0x10 [ 499.902959][T16713] ret_from_fork_asm+0x1a/0x30 [ 499.907763][T16713] [ 499.911390][T16713] Kernel Offset: disabled [ 499.915736][T16713] Rebooting in 86400 seconds..