last executing test programs: 1m0.241065246s ago: executing program 4 (id=1172): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105ffa60000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0ec00004fcff", 0x58}], 0x1) unshare(0x6020480) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) vmsplice(r5, &(0x7f0000001a80)=[{&(0x7f0000000180)='5', 0x1}], 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000004c0)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f142", 0xfee3}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x4, 0x0, 0x8000}, {0x6}]}, 0x10) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000080)="6fa341d8", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000012003b77", @ANYRESHEX=r6, @ANYRES16=r10], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 59.891909447s ago: executing program 4 (id=1177): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b411000000000003611150000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x800, 0x70bd2d, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 59.590446879s ago: executing program 4 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) epoll_create1(0x80000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'bond0\x00'}) 52.272059416s ago: executing program 2 (id=1261): r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) unshare(0x14040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xb, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xc0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000180)={@local, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xb, 0x7c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @empty, {[@noop]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "b3ed3f3eff5dc97c0e6617a580210ec9809bfa714677994cee3213c83202ca3f", "c36db0aa77ffea8b5303ccd0e06692e1", {"0ee9ef2f500c2a6b0d0400156feac886", "fa0e64385c7c64b5a387c641f2aafe69"}}}}}}}, 0x0) 52.244406602s ago: executing program 2 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, 0x0, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x2b8, 0x30, 0x2, 0x70bd29, 0x25dfdbff, {}, [{0x134, 0x1, [@m_mpls={0x130, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x886c}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6002}]}, {0xc9, 0x6, "2621cb10ae519c59208be4f0076a1f4da997ad715af2645fba57b28f84dbc2cdb82a6ee731ad7b531b1e578d8e96f8d1c252afda9e9ad25485bad47fa6824c9821e82b560336dab45c99edd06d3afac811bc3be6eb6f31a31fb790ed2c5ef09274545c6ec5e7828cce5e4fabb3ce6349e01ae8266f1b1a77c00a43d36de405d2e93a0fbb2fea765291190579a4a75c5a426405afb935b08f4abfa970bbbc3f9c424a374f74d59132e14a57fcb947963d2ee1f852104702a94ae5ceaf6fba9b350ce3fbe9e3"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}]}, {0x16c, 0x1, [@m_csum={0x108, 0xf, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff02, 0x3, 0xffffffffffffffff, 0xfffffffd, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x2, 0xffff, 0x101}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x2, 0x80, 0x10}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x0, 0xb648, 0x5}, 0x46}}]}, {0x6c, 0x6, "11975af66a3cba5b328f210395cb5b86b813683e2689780db6f9ecfbcb13d6cca05961a815423e1c8ac57c540181b8e9a88b50de59e7913699fb6f5be468104873e1d5835dbecd6c2064e6022334ce9accee6098757c9cb974764ac1efd70e6a969f857deb609e03"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x60, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x31, 0x6, "d581462e2cb863f1fc78d51d52edea3aadfd1e18e758d28fbf3a28a56dbb6c85def23bded4019aea83102d81ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x4}]}, 0x2b8}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4040005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000020601a7ebcfa9fbe169bffe2b469f07d808000000000000000000080500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d616300"/98], 0xfd0a}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket(0x10, 0x2, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r1, 0x1ad72f7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f00000002c0)={0x7, 'veth1_virt_wifi\x00', {0xa}, 0xfff7}) accept4(r1, 0x0, 0x0, 0x80000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800df00b7030000000000838500000071000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000063d7a8d109aa4ac2df89a25"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='sched_switch\x00', r7, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14e520"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) 52.013095198s ago: executing program 2 (id=1266): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x8c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 49.954923444s ago: executing program 4 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) epoll_create1(0x80000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'bond0\x00'}) 37.151923305s ago: executing program 2 (id=1266): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x8c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 34.07547677s ago: executing program 4 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) epoll_create1(0x80000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'bond0\x00'}) 22.753592425s ago: executing program 2 (id=1266): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x8c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 18.047849648s ago: executing program 4 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) epoll_create1(0x80000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'bond0\x00'}) 3.758680687s ago: executing program 3 (id=1526): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x5, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, 0x0, 0x0, 0x40080) shutdown(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x30}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x5, 0x2) (async) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$sock(r1, 0x0, 0x0, 0x40080) (async) shutdown(r1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x30}}, 0x0) (async) 3.757851846s ago: executing program 1 (id=1527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7}, {0x10, 0x1}, {0x34, 0x7}, {}], "3829b70b8285f0c2"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0x9a61, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.438406047s ago: executing program 1 (id=1528): unshare(0x22020600) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff, 0x2}, 0x20) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) (async) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) bind$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e20, @multicast1}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0x4c) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20040040) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r4, 0x4180}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001e0ffffff00000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400000000008000240000000000800054000000000080003400000000008000640000000fe"], 0x9c}}, 0x0) 3.340572566s ago: executing program 3 (id=1529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@u}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38a5c0a0c25ece1a703d45d83f6241ec"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c0200000500050002000000050001"], 0x6c}}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x7c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3350}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2659}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1a1343d5ff64f993}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.031567193s ago: executing program 1 (id=1531): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt(r2, 0xfffffff0, 0xd, &(0x7f0000000140)=""/76, &(0x7f00000001c0)=0x4c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f0000000240)={0x1394, 0x3e, 0x800, 0x70bd29, 0x25dfdbfd, {0x11}, [@nested={0x67, 0xa0, 0x0, 0x1, [@generic="cf686b76753d389dcbbc6f5471f3370cc31f8cc7666488c04903e59b62f13064f8decaf4f4eb6565278706247e6fef724ea1747214fcbb928960a82f7f166d9432451e817757a4843f0e40ebdcf2b48c31e33c93a3f2701b7ac1c5c89afb6f", @nested={0x4, 0xc0}]}, @generic="281dca94a0b0cb6da7f8f283bdc9f93e356dab40594ceae44d2141c25eac015abb1a8c5bdc2e522027701687c5bdec32efa59deb706868486cb9a28114bdcdff6ac930053e551ab56f6f07a74aff8f5b0808febddf61f9182ad0d1f9cb177910609f3a43a694b54674187743ee92b7a82893cb", @nested={0xc0, 0x31, 0x0, 0x1, [@typed={0x9d, 0xc, 0x0, 0x0, @binary="9ce19e788fc97ebdf56f3a782f60ab3e001200f1bcbf41dca71e21600524980a87a9cb9f8da337b774689260e95ff53b6d3a8432e82bd65ad5ecc36cec9fc43dd5b64fafa6da2db4eb0fbe066f1cc949625506521929bc1064241172ba868aa55adddc43283faabada75e245fa121e388899c3578223453578e8f98be3575da1e9e0b6e4d786a8ca939dcd35449a058051c3a5b77709d89e9d"}, @nested={0x4, 0xd9}, @typed={0x14, 0xed, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x4, 0x8d}]}, @typed={0xe0, 0x10b, 0x0, 0x0, @binary="e7a07a611af89989e93a0dbdab929344c6cc382fd0b87d54f0da2fe281be9af9cfd71cecd60b59141cfbb3a04ead727b14f57bf5f6ef59dc8a2d1350f1c96f84d831c19081d8d1294367e846cf699a765d2d0be3a26b3d493d1051af0236d688d3cb73989575f22468eff1d471272e4ea32ed7e531f992d195c58c3f3aed7db5d9fb34e5f8824b27253e58eb7330ea9e7478f9247cdb9a4eaa58524614ae4fd07b3502c947a1dc46cdba5c211e24fcb487e71b23006cdce4f1487fe5a70d5e26d44ad4493f05b2c9f0d62366298043bc240c3c1ebd1e9a0666baf24e"}, @typed={0x5, 0x113, 0x0, 0x0, @str='\x00'}, @nested={0x106b, 0xb1, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x1000}, @nested={0x4, 0x117}, @nested={0x4, 0x60}, @generic="7c872bbe7db9d74674c15d89b55622626a3f7a7ebfabfb35457392f99c1bf73cc9ffdfe039c04d6139ca426d38b9409b811487becc46274800f290b128c8f3f1c88d30fc5e3fda", @nested={0x4, 0x5d}, @generic="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"]}, @nested={0x8e, 0x98, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x108}, @generic="f2ef99de65ea41471728e40e7fd4d6f1dd392947ba01b8004e1e3e07dd23c3b93dda211c3574fd4d1ebbdae06398a85b119197d584011c8f19c3d5c8843f5227ee7a4f2c935fa8ecdf52e09779359f805ce3d7434ef42713916612776c6701140917d51e76924d0fe4cb43f70ae5", @nested={0x4, 0x124}, @typed={0xb, 0x4c, 0x0, 0x0, @str=',,\'#-\'\x00'}]}]}, 0x1394}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000001) r3 = socket(0x5, 0xa, 0x7) r4 = socket(0x28, 0x3, 0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001680)={0x73, 0x1a, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x9, [0x4, 0xf2, 0x100000001, 0x5, 0x3]}}, @jumbo={0xc2, 0x4, 0x400}, @generic={0xa, 0x80, "f9cc2bc7591cc092aeab5a83c6f54fed8ce67c89cbf2aa701e57f0b07a394ab33564707c85d52a06802bf552a9baa19af23564b8ac0cb1a297fa607cc076714e0342add86d0238617fd4fd1b7eb9df125341c9a68f16a2b22e09cb3d6c043bff2aa625420ae19eddeb9b46c7390e1282dcb1bd8c6507dc776f85f95219833073"}, @pad1, @hao={0xc9, 0x10, @private0}, @pad1, @pad1]}, 0xe0) sendto$inet6(r4, &(0x7f0000001780)="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", 0x1000, 0x20000080, &(0x7f0000002780)={0xa, 0x4e21, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x80000, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, r6, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x30004014) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000002980)={r1, r2, 0x7, 0x61, &(0x7f0000002900)="6372c8b72b6fdbde1bbfc1633b9774026a0cd452f57cff4ec52f6d214e58a7527a03cafa3d4a71e9aaeb4a8c654a1bdc208be9bbd0a6915da5d5809c1e5661d710eacffa19f64c141ca47ff5f9db4e7b5e54b85cb706f013d5b45871210993ffe6", 0xe2, 0x6, 0x1, 0x2a, 0x6, 0x3, 0x18, 'syz1\x00'}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000002a40)={0x0, 0x8, "55929a8561d674f4"}, &(0x7f0000002a80)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000002ac0)={r7, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x3, 0x6, 0x4, 0x7, 0x1, 0x2, 0xa9}, 0x9c) r8 = accept4(r1, &(0x7f0000002b80)=@in={0x2, 0x0, @loopback}, &(0x7f0000002c00)=0x80, 0x80000) recvfrom$unix(r8, &(0x7f0000002c40)=""/58, 0x3a, 0x102, &(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e) socket(0x27, 0x4, 0x5) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002d00)='cpuacct.usage_all\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000002d40)={'batadv_slave_0', 0x32, 0x36}, 0x11) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) preadv(r10, &(0x7f0000003100)=[{&(0x7f0000002d80)=""/234, 0xea}, {&(0x7f0000002e80)=""/86, 0x56}, {&(0x7f0000002f00)=""/243, 0xf3}, {&(0x7f0000003000)=""/237, 0xed}], 0x4, 0x8, 0x6) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000003180)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x0, 0xb8, 0x160, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000003140), {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xffff, {0x6}}}}, {{@ip={@private=0xa010100, @multicast2, 0xff, 0xff000000, 'syzkaller1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x6c, 0x2}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x4}, {0xffffffffffffffff, 0x2}, {0x1, 0x4, 0x1}, 0x80000001, 0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa9d98d7a5d0fa450, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x5, 0x6, 0x5, 0x3], 0x3, 0x6}, {0x3, [0x1, 0x0, 0x5, 0x0, 0x4a2cd4434851f67d, 0x7], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003540), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x64, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x400c000) socket$inet_smc(0x2b, 0x1, 0x0) 2.983065898s ago: executing program 3 (id=1532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x20008010) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x25dfdbfe, {0x2, 0x40, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x20}}, 0x0) 2.372107144s ago: executing program 3 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f0000050025"], 0x60}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x1) 2.285568222s ago: executing program 0 (id=1535): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 1.888084733s ago: executing program 0 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x2, @remote}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x47, &(0x7f0000000000)=""/242, &(0x7f0000000100)=0xf2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) listen(r4, 0xc5) 1.875111089s ago: executing program 1 (id=1537): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) unshare(0x60600) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r2, 0x4, r2}, 0x7) (async) r4 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r5, 0x0) (async) r6 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) (async) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/186, 0xba}, {&(0x7f0000001600)=""/83, 0x53}, {&(0x7f0000001680)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/33, 0xfffffed2}, {&(0x7f0000001780)=""/187, 0xbb}, {&(0x7f0000001840)=""/207, 0xcf}], 0xa, &(0x7f0000001a40)=""/124, 0x7c}, 0x10000) (async) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000700)=0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = getpid() sendmsg$unix(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000f9ffffff00000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32=r13], 0x58, 0x4048000}, 0x40041) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000340)={0x200, 0x2b, 0x400, 0x70bd29, 0x25dfdbfe, "", [@generic="adf1ef3c02f6ef38dd052d6e8b161f51053b35953c0d6b61458aa27c1ded2d0189f9c1ca4463144cff14eed4740a4c45dc064c2ace0c2b2469817109c668882ba4", @nested={0x1ac, 0xb0, 0x0, 0x1, [@generic="be537077fa3e49454e699d4e5047bd3d759da6ba42a967aecc629b7364738f2a912ba492", @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@loopback}, @generic="ebffe36eeb475e89d62be43bc5eea48a4eef899bd62fdce11b6beb5b759688d9a56459d3aa4c021f876eeeae3616439bdeb6a146ddd5370663deb34232b5", @typed={0x8, 0x9e, 0x0, 0x0, @u32=0xd}, @nested={0x4, 0x5a}, @generic="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", @generic="7f2cffb77e3556f232792f3cdccbfa3a0cd964d7a84203e741264334d19c42d7c4f2a35b64afea59b1ae1ac9b7c5392b", @nested={0x4, 0xbd}]}]}, 0x200}, {&(0x7f0000000180)={0x17c, 0x1d, 0x200, 0x70bd27, 0x25dfdbfb, "", [@nested={0x16c, 0xe1, 0x0, 0x1, [@nested={0x4, 0xeb}, @generic="267fef457b62c962b6cd049daea7d2b87d4cab6f65ba8aeb5e4ae94b5091f04030760b05d49a3582ad9f6a6bdf7efa2388dda44201077ddaed457ebcaace3a9e7020ade2c7baeb826f614c356871633adde6d8348843db7460c1d446fb93", @nested={0x4, 0x1f}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r1}, @generic="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"]}]}, 0x17c}, {&(0x7f0000000540)={0x184, 0x2e, 0x100, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0xf6, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@remote}, @nested={0xbb, 0xf6, 0x0, 0x1, [@nested={0x4, 0x117}, @typed={0x8, 0x10c, 0x0, 0x0, @pid=r10}, @generic="a7048085ce790921d3eb52577606d0e9608497e590d5a75b13fb8abe7d7fd9368a68c71b3bcfe535af38ffe8ced81b7d2183d7f6a0561772567012ea4e355884893a2ba8be8d06cddaed65e22967a67aaea28b9a739262e5c7cdd2066e7c7d3a449a97ea0bf2e69890f37479de73e1019bd01db12d1258ececed15c7aca4a01b0c05da409e9c2119664370aa5041e36e42507a17344fbc293cdc0a2edd7b6a15dee49adb2abe7806fafccd"]}, @generic="0e148cc358567c3a187deb543c06f772a1a63b5f772136f29193c80fb357a0b82bf71fca8e15356af7d4425169080c8b24aa91c506b82a7951fd16b6672cbf1b1694feaf5b4f11931a48686c67e963030cbaaa2a5162f5a4bd9677f5922ab8e193dc4ed0e81e2a982b556f07abe2a80684de5bb6e06af4efb76047a5024a9a078854", @nested={0x24, 0x6, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x6}, @generic="52ac6175ad8a259500e3381b"]}]}, 0x184}, {&(0x7f0000000800)={0x148, 0x3d, 0x8, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="e9da500b9cb78ae3dddea3606d0a9b87781d33d4de75c295a7204b4873b896d1efe639160dbae93b7ee34a455868f264604bdef71d111b40a425b2341dd6e4ce4308dfe7d46bd69880ee22cecaf3fa5e75658d16d7924d808f42f20d0540eb3a55f5dafa25fc8407083ea890dfc2696d57d9884d2866d3d819f9ebe53d9b117405fa8218220749fa5686cba31542332ec6ced3019cbbd7568b724f73a49eea225601671011a17ea115f1611699487c76520e19cf89151b9815f9561874a3c6ffe436b3a8eb2279e5ee90e991f24a54e539918ba1b69afa17a33c3bb866cf6964e46df8f0383e73cf9eb3001ec2d56d97b28b59", @generic='t', @generic="d39dec717b7104680653126c4d53392675f424df9283bbb6ad577a1934c42878768e6b5ff033186b91acb35257c431783efc76861183bdddfb01c3b1"]}, 0x148}, {&(0x7f0000000980)={0x1d8, 0x1f, 0x8, 0x70bd25, 0xb31d, "", [@generic="896b005972325f2fff56d8029d577fd15e9768756e72c64f62027b79aae5e4ef57e4a05fe86c515cdbbe739144f10bafcbb146defdcec4698c1055857b315c691bfb5ea718cbe9b804e89771a2074d22ffedfcb5704ad07c788be2a421ab0c40ebab721b0fa490c41c3fd47aa9d5a5e95dc1f197108b23af970521ec736f4448d2b548d5f0f1d246b8e5951f2c91cff016212508f83b6b3980199c2b056e468bc564d4cc62a461deec6f692dd3e1fc59ca82c6d354dd22fc0efa5aa6e687eba1ae0528849eefc9785b320739c5a276129a94252c20d6f70504ce87ed599abc539ae22cca648ec71d96685cad3cb1a2ff881e03ae3c8dc030", @typed={0x6, 0x60, 0x0, 0x0, @str='[\x00'}, @generic="f6079410e41d8c4711d5f295fef94ee6cb38672f864eaf847f81389e815fc4f03e4ce2bc45eb3ee08a62771b639943790ee19499f54ebde5a3303f249044a749fc4f637a70c3352ea27b058478da64af0c8e0d3a43f1906b70cc008094204db18bcfaa58024ba45cccf698f559cd658e1341fad1c7eb1a28ae2bf8925ca8b71685877c017b16a9f28e8e1e0e70076f9f356dda3977266f094c0db8212e8d8d1b088f073cb6e2e5312e77fa84856284ec559f20ca66fd87fcc94575f4e9eb8f787935f5943eb9"]}, 0x1d8}, {&(0x7f0000002f80)=ANY=[@ANYBLOB="f00600003600020025bd7000fedbdf259e137bfa226bb5909f2c7d74249ee9d0cacc8d8b1b3496b2a6c9f9155b2c40a83155f7c72850af39fa632cb6c676374a5d5249eaed6449b04730dc3ee6051e4fd433d6ef88e9a6c628ea57019f58390de27a75a2a41561cbabf2072b9bf6cca44285bb63d3e3f6945da1d1de861632e3806a2575afb16457a7d2cf7cfa3f0632a1e2b34ab8ebb8f5b9a8b50c869ebe703edef241b0c5badf913a3b4e17d7da1380a082daa993e292aa9277b57f130ebdc1355bd6efe7713f85c5999ac650389a5cf33a7957c68775f54ab7ceff2e382ad5b26112627689aaa30c0000d4c04bea3d6a2eaae3875d49079302d4446e1f67a00771ce904a8f4f15ff72a9340321f695fdf75c85d47a38fa1c7c7a7d33699542cd7749d88cae26d81a0a25d47179d1b50fba23602b02fc004e21ceb7baccea1df44927a63fff32b3a32010f49ef83476b451f211cdde9939eb22b7c04e5d52da9dc47766f649d5cf757bff2608eadbf28bff421190fb25bbf5b5bcc2acd6962a076a5036d0d7d4fdfd1be89aacc45f36e4d8f37050dcbf2f447f849ef835f6cb425731c418a5ca17cc52d378e7906eaa5d10d15ecc92bf20d663e31bf39edec1840eb016ef90e4c21b31cf6f9fc88052e10b86452dbb1402c369064b3dc5fb3f013780a9004400f3a7409873df5b3d4d665413203972a56bba0f02a20ab24858dfc7767a1a9e02b17da38c8db1c30b5dad78e3288afcceffbe5da168d01d5333fc3f5474131e02a210c3aa839f0a660e0f6e20fbc8c49d76d244c29fd7fe36cb63b0185a36dcb8d39fee91986c865e2ac82ed84780da5fcd42d26bfb55d3ca5774465255179374bdfa6d5e4cc9f39575f72622b2e9da891080e8365eee18a49ebff0309a246a9606fd460f1f00000009005900aaaaaaaaaa000000040095801b006200fdf9c25f64635c1e47eed694731f26e08e9d05c2c74285000800790022bd8532193166eaad883160112083644c64654cab6c0b36f1c12e598d7906a8152b8aa65678b1a2655f8e57467feaa005afc200d4054da4d7a1610a1146c242910778", @ANYRES32=r11, @ANYBLOB="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"], 0x6f0}, {&(0x7f0000001280)={0x155c, 0x1f, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@generic="329b4cebca7cac7f161be4facc5389e17172ff4bc15e6005b6b653bb33c3bdd62741f4a8110cfadb4755940f3a2392e4c3680a31883701f55250cde9ab92e684e4f08998447cd947b5a841d36da71b6da19ea2d9051bf47e0020b077091327e1cee815fd9728af709e9bf53fccfd0f9d3997d30dc28b878990b45455d0abd799a34c2ea8754249e0dc9307268756a007ddda6c252b62b50d2ec65d7f650a7cd4ecc5a3de", @generic="a279204a0d151ec79cb0c7a2bbf90d07f2eae32817d2de82e178b61258c127d65e688736b0b47e6c80ad66af83199358e0118a5fd2f00fe98107fdd34aef2405", @typed={0x52, 0x17, 0x0, 0x0, @binary="0dd310676357a939e4cd23a2bcfc034aa4e7605d74b83c86852baf6d76f3af7ddb83723609c11b71f8885ff9abef0c30f7994e72b427c96b25d4ee58bd8586c680c9dd29232b81488110f685e9ff"}, @typed={0x8, 0xe2, 0x0, 0x0, @pid=r13}, @nested={0x111f, 0xa, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="0598c145779b01d31c79a0f1cd6b5a680a707386d7578e0c42739eadea95db353f71bed90c3466cdb90ab5fc3989d322dd747727c136fa073f6fdd79578937d39fb9769bb5bf2a731c0926411c9cd40e7aa6845307746c04ab8c049ad07a31478828578864c73e64cdeb51717b40316609f2f6f1ce87f73ca2600765836dbd38680358432c760d2c68262b70bcc614a4f8f57a91f769df64c28eb8bd044fc6fd2a1c9acaa80f065271d0020c", @generic="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", @nested={0x4, 0x9a}, @generic="1c9619e165342f15348fd13b8db845e27078d2abf9be0b080267cd66e8a1c19198dc61affec23476a9da682a8e31b4852ccb77adc9afe249f3565f7b7bb15b21da27eb1f6bbf724605d19a71c4960bc0a5d8c2ea72bcaaa5a18370e71012c9a06a214c3b9017a3"]}, @nested={0x128, 0xa6, 0x0, 0x1, [@nested={0x4, 0x127}, @nested={0x4, 0xd5}, @generic="6dddab6a00b6f8892cf5f8380adcf1cd3e6be680174b17a6a750c4c978990b259e53449515af0ee75c6c92433a63157b9a8991e1958d1521400ca440411a7b2c9bc9be81e7466147c79cc9", @typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}, @generic="d0e42814129149ce2e8ade173e4bb29b7d09d72c4b9e0b1096781a5e36d49bb05d771d1ceb6acac85bd185de6d904897132c456a24250c05e3e36fe920d96e0f1cc342a11557fcb958355e945d498b8cbfe559a883316d01231af0e4d3205b9a280b6c1c3a373eec5a00ce8b6b9ff749d76dc68572d17afe39e0f0d9bb68d61cf05bb6c938659e8a56c410130cd6ba07417d0f4735f844d9f06635e4d340914f893013c8a811fb04495f9a6e3d601a05afe042da85083806087058b1f0aa7158707a6f6cc08172d6ed"]}, @generic="57a90fbfb0a808d6aaeed0370d20032ebd6a1edf253ad5045cf45f7cd1edd7492673e8c5fdb16e0485bd6a3c82101e194a134c541c947fea2eca00c13f0cf1828f22e4ec4488f855f58243d85eee686f504fd96ac03489f057b206b292e9e885e960a36318949e1874e5f606ff6273d96456837d6c54eb93051365b181b2c040bf3f3b775b10ae889b3720d3e8a7a7e2e342dc448ca85afa73dab0d2078b8d1a1fe880668853cf9e5a8374e134c09bb42bd8a8a8543eb8b3ea770b8ce997c770d883bec29f6af9f73767b8730ed6414d63e1a9a79e78e97e71a56814ff94b68a84a6e8ac8f7a0333d52b347f052dafa61fd64a51067091c8", @generic="5aca6e9a4f13dbe0617f7e8922ddf83aa1efd1cd6f2937473a8a1fefbaf1f349087e434773b16775d8dd9e9431f20af17d86dd36949594509330fd68668eb1b262748ced10e7887f33d533e09790d61bc58bb7a6fda72d7528825a38073c52efd61c98527debebd86b4c56c19f1197beaaf3d40463b2842962e4ffdbff5f3b82bf809714f9ff83ed8da610706a05e5657c2f4ed58910a3674f8aed5a7db6261638123459425fed1a09902bb46a91ebf40f08db273d7797059d51f21d98f92c09524fc40832c8581d13cd79"]}, 0x155c}], 0x7, &(0x7f0000002800)=[@rights={{0x20, 0x1, 0x1, [r14, r0, r0, r0]}}], 0x20, 0x24000004}, 0x4008001) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x2, @private2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffffab}}, @flowinfo={{0x14, 0x29, 0xb, 0x4610}}], 0x30}}], 0x1, 0x8c1) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) 1.812883151s ago: executing program 3 (id=1538): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000280), 0x4) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0080010000008228083ed9b39fff058c", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e23, @local}, 0x4, 0x0, 0x0, 0x0, 0x728, 0x0, 0x4, 0x1c0, 0x16}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6}, @NHA_OIF={0x8}]}, 0x3c}}, 0x0) accept(r6, 0x0, &(0x7f0000000300)) 1.417689957s ago: executing program 1 (id=1539): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000b92c0a91332eec66c413eecf2b7040a3d485cd3dd4ddd5b1f9db52a6f5080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001b00010000000001000000001b00000014000800fc020000008000000000000000000001"], 0x28}}, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 1.178851743s ago: executing program 0 (id=1540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000640)={0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'sed\x00', 0x1, 0x6, 0x69}, 0x2c) bind$tipc(r5, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async, rerun: 64) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket(0x1d, 0x5, 0x5) 920.517279ms ago: executing program 3 (id=1541): unshare(0x22020600) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x6000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "f534cc59a2d2b34ef2abd5dae0eb826139f37110f57c9857", "4520ca9fb65afad42f39a86745ab85fcbf44af747ebabf7d803eb753ac447514"}}}}}}}, 0x6e) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r1, 0x4, r0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) 601.559451ms ago: executing program 0 (id=1542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x922, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb15e}}]}, 0x50}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd0d000000201b2f24990100000002fe8000000000b814f79ce5fef232e8000000000000000000b50000400100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000013022204a85b1e0c070002000000000000000000"], 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xb0, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000855}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x41}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x922, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb15e}}]}, 0x50}}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd0d000000201b2f24990100000002fe8000000000b814f79ce5fef232e8000000000000000000b50000400100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000013022204a85b1e0c070002000000000000000000"], 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xb0, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000855}, 0x4040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x41}}) (async) 378.942237ms ago: executing program 0 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000ec0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000002c0)={r4, 0x29, "bf6eda6aeecbc81a75b6a8570d8a68c49501a6dbce543deb1fa92bf6f8c57da9c210ac189738459c36"}, &(0x7f0000000300)=0x31) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x42) sendmsg(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="3b1d593ac0453a63e0000102bf84f45e946b0aaad4330c32acadf378b7cfd1a65059456208fdfe9a31e50560f9b60c8e9b7fc1ea54d2b88001bb736b5d3e952445447228b80fc6a3b7397df8d2adb9fce48a2952f4fe9f572a8728f85daf", 0x5e}, {&(0x7f0000000280)="c7bde1763719567233a9ade7fedd6cd0e0a8e3fe809b87518b09eaa7f967ad34ca5d", 0x22}], 0x2}, 0x4) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000680)={0xa, 0x4e1e, 0xffff198c, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000a00)="aff619", 0x3}], 0x1}}], 0x1, 0x4c040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x68}}, 0x0) 260.481694ms ago: executing program 1 (id=1544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0xf9}, @val={0x3, 0x3, 0xa, 0x4, 0xe62, 0x9}, @ipv6=@generic={0x4, 0x6, "d3977b", 0xac, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, {[@srh={0x0, 0x8, 0x4, 0x4, 0x6, 0x40, 0x9, [@dev={0xfe, 0x80, '\x00', 0x1c}, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], "1c146f4ff9c9820ec4b7f288ce75eb675bc6f73cb42203b1446f4781d7ccd97918b17e2e859ac1b578c597f20b58a51c08dab09e8235d083c89a000b9f85f5df05b93e44c7723588b327dfcf11f16839e212ff0a360a8630e563427c3727030c9b734412"}}}, 0xe2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) 115.874438ms ago: executing program 0 (id=1545): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0xa502}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20090}}}}}}]}, 0x48}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x98, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4d, 0xa8, @random="05237e28abad5402dd0b39bc5383470c666238ced76c1a75319d1c41c290802c1a9d5bfa29ac66355cda98e5d47936c06ccd65e57997bc00239075e61d8760598e8da2b308420876af"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x100000001}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x800) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000ac0)=0x9e9c, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettaction={0x18, 0x32, 0x1, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000780)="89d50e3c4a0f792496502bb00e728b4a", 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000b00), {[{{@ip={@rand_addr=0x64010101, @private=0xa010101, 0xffff00, 0xffffff00, 'sit0\x00', 'netpci0\x00', {}, {}, 0x16, 0x0, 0x5}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x2, 0x0, 0x4], 0x3}, {0x3, [0x1, 0x3, 0x3, 0x1, 0x1], 0x4, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "49e2"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x8, 0x3, 0x4, 0x3, 0x4, 0x3], 0x1, 0x1}, {0x0, [0x6, 0x0, 0x2, 0x0, 0x2, 0x6], 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2780, 0x6c0a4}}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004814) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afcee67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="2d2b8a001a54a51dbb1eed801b791bd081871df5f77568044a02b922673e4638e6b8479f5b23b2b762d7544050ca07f783c88f6d4aa8cf2d4fa81f59b66ac5bc507ea60c2188dae429914eb4a1d13fb5de5b537ae927c022ae42f39b21c7cef48d2586d575a8206e7e7b0b7dd162a8025790ea94515adfa5ad0fc75b496022511642249db30252a70889697afc1a8379e07a325d0feb7ce6", 0x98}, {&(0x7f0000000100)="f3ac8c392f00c6ff656c0d94532a4582253ed23fcd24b700ff9c9e3581b5b08e9007905bddb5c0b6b915b2868babc57dd574c91ad5c51b8abf0677fe169a02b69ea9b7c1a56a3e517087af420da74845b111ee2cc0c848369fafae2a9732ba77260a293e849c08cff030253347430d9506a86f6a917b03145e9eb089a15f4649da26e6a14bb2e5b6f813eff420c617e98ed99fdf821d760e5f7a301e6568baca25e73c", 0xa3}, {&(0x7f00000001c0)="0f20aee5389498cc5aaf3642b5f59678ae6254ce5fa34a2a623e468fca5210b2d5c55b5191e863132435fa684630743c3843bd59a087fc7c9bff1a65fff352573414499cbd9a6b7cf1601a4b926bab04d5fcc278c833d2584c90c78854a1896b8dd08398a30f1d6c60a52b7eafa09ff97a2f8b42b13cf6df42113b7a7c50c2b81a", 0x81}, {&(0x7f0000000280)="7c712151eab9cb0b2d32e92ad2945ea35d6caf32", 0x14}, {&(0x7f00000002c0)="809cff518c9b383e62deb51482eefe531564693951418736fffdf6eb8fa2d783aaffc3d0ebc1f368f042b4ead84a2e440e7f704aa1be6b6a309921c2b7acb676c936b7162f0920e56602ed2c82c7671a00cac17761525f10ae1d49fe842ac1974c4047b40c6ebf4e4973c5257a96c72794ca4d2d77133cbeef433935d86ea9226eac4e23c202ae7ca8747c5f6817e35abfaa9ad398cfcabdd0b9953266cd479c38ae7e172c83d79fe10b58e9d3d1dc4fe46df6", 0xb3}, {&(0x7f0000000380)="a25ff16cebea139c4b1685114fbb29aae21e4b53ad5c64a6013198c80980e5bf08baab59c5be6060fcc7f34ca42ec58050a434621fba71ebc0e29d227ea853a2afe847f4211f311945022c2e7f482c4e6f4860f50474399b67dace0415dfccbff9482adfc4849425e2abe04f946aff51a7f4449350213012c71655eacde787ebc0900625c36a9b66db35d5695c250b5778811cb724cc8734812b3fe40c7c31bac9265d6419872f386511d2c16f2cb5b3c2e7c0f12af146cadbd38579010ffd420e6ffd730af8dff1bdd251d24ee93647036de4228b7c426d745191d93dca26d7614d2d3115dca6", 0xe7}], 0x6, &(0x7f00000005c0)=[@ip_retopts={{0xe4, 0x0, 0x7, {[@end, @lsrr={0x83, 0x7, 0xbf, [@local]}, @generic={0x86, 0xc, "51d00071c1a49df6c38b"}, @rr={0x7, 0x13, 0x5e, [@multicast2, @private=0xa010100, @empty, @multicast2]}, @end, @generic={0x86, 0x10, "d9bb55aa1a594b94bcd9e2955b64"}, @cipso={0x86, 0x28, 0xfffffffffffffffe, [{0x1, 0xe, "d6dc67ec4ca6e2609e119134"}, {0x1, 0xc, "11e81193c85dc0c963f0"}, {0x7, 0x2}, {0x2, 0x6, "80ef8de4"}]}, @lsrr={0x83, 0x1b, 0x2c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x20, 0x6c, 0x0, 0x3, [0x8, 0x2, 0x5, 0x4, 0x7, 0xfffffffc, 0x3]}, @cipso={0x86, 0x39, 0xfffffffffffffff8, [{0x7, 0x10, "f9e33e8849ef6dd447bcc74f1b5d"}, {0x0, 0x7, "d858a0185f"}, {0x0, 0xb, "e7a76282cd3d0a4d8a"}, {0x1, 0x11, "c58b8dd9f9ed8bc3fb85cbd0bbdd25"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x94, 0xa, "0144acffafb40d34"}, @noop, @end]}}}], 0x1c0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)="24eb64124eff27b00820ca2f97782e9a575e14e25080d568e71611e4fda0f3213fb606", 0x23}, {&(0x7f0000000800)="5811", 0x2}, {&(0x7f0000000840)}], 0x3}}, {{&(0x7f00000008c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000ec0), 0x0, &(0x7f0000000f40)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0xe, [@rand_addr=0x64010101, @local, @private=0xa010100, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xa1, 0x0, 0x2, [0x6, 0x9, 0x70]}, @end, @timestamp_addr={0x44, 0x44, 0x44, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8000}, {@rand_addr=0x64010101}, {@local, 0x200}, {@broadcast, 0xbcc}, {@broadcast, 0x1}, {@multicast1, 0x9}, {@broadcast, 0x9}]}, @rr={0x7, 0x7, 0x8b, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0x6, [{@local, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x8, [{@loopback, 0x6}]}, @rr={0x7, 0x13, 0xfb, [@loopback, @remote, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xe3, 0x0, 0x7, [0x6, 0x2a7cd254, 0x80000001]}]}}}], 0xc0}}, {{&(0x7f0000001000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001040)="a635e5d010d3644b76bfa8da7f618e8cb1e8730b83e40fb87273b42365dd757e9c61310f0e4398934a4c50ad546634e6d549a6a1d4e40487d646e0381d2ef24058", 0x41}, {&(0x7f00000010c0)="537b3025288aa26f46f80ccc4069edae3f4a7c01", 0x14}], 0x2, &(0x7f0000001140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x779bc727}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x15, 0x3, 0x8, [{@multicast1, 0x9}, {@multicast1, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff}, {@rand_addr=0x64010101, 0xffffffff}, {@remote, 0x9}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x91, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x1}, {@loopback, 0xda2e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x40800}, {@remote, 0x200}, {@rand_addr=0x64010102, 0x322}, {@loopback, 0x7}]}, @lsrr={0x83, 0x27, 0xf2, [@multicast1, @local, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @multicast2, @remote, @private=0xa010100]}, @timestamp={0x44, 0x8, 0x92, 0x0, 0x4, [0x101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xed30}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x128}}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r11, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x40000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x30}, 0x4, 0x700000000000000}, 0x8850) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r11, 0x2, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000004) 0s ago: executing program 2 (id=1266): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x8c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, 0x0, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) kernel console output (not intermixed with test programs): tbf: burst 43029 is lower than device ip6gre0 mtu (65485) ! [ 144.463074][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 144.691900][ T7384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.726313][ T7386] netlink: 'syz.3.453': attribute type 11 has an invalid length. [ 144.841051][ T7393] sctp: [Deprecated]: syz.0.455 (pid 7393) Use of int in max_burst socket option. [ 144.841051][ T7393] Use struct sctp_assoc_value instead [ 145.280540][ T7410] netlink: 'syz.4.460': attribute type 4 has an invalid length. [ 145.333481][ T7413] netlink: 'syz.4.460': attribute type 4 has an invalid length. [ 145.378873][ T7414] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 145.418745][ T7410] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 145.619374][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 146.148707][ T7429] bond0: option resend_igmp: invalid value (44132) [ 146.177421][ T7429] bond0: option resend_igmp: allowed values 0 - 255 [ 146.415928][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 146.818166][ T6488] wlan1: Trigger new scan to find an IBSS to join [ 147.508448][ T7470] __nla_validate_parse: 2 callbacks suppressed [ 147.508468][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 148.612571][ T7497] netlink: 332 bytes leftover after parsing attributes in process `syz.4.485'. [ 148.650801][ T7497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.485'. [ 148.688988][ T7497] netlink: 32 bytes leftover after parsing attributes in process `syz.4.485'. [ 149.000371][ T5918] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 149.140049][ T5918] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 149.855667][ T6484] wlan1: Trigger new scan to find an IBSS to join [ 149.932504][ T7536] syz_tun: entered allmulticast mode [ 149.972605][ T7531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.496'. [ 150.062332][ T7531] dvmrp1: entered allmulticast mode [ 150.133775][ T7536] netlink: 14 bytes leftover after parsing attributes in process `syz.1.496'. [ 150.230491][ T7536] syz_tun (unregistering): left allmulticast mode [ 150.461413][ T7553] tipc: Started in network mode [ 150.472262][ T7553] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 150.488137][ T7553] tipc: Enabled bearer , priority 10 [ 150.524603][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 150.655156][ T7562] openvswitch: netlink: Message has 16 unknown bytes. [ 150.721442][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 150.820934][ T12] wlan1: Creating new IBSS network, BSSID 12:bf:0d:e3:1b:67 [ 150.922744][ T7568] delete_channel: no stack [ 151.183480][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 151.386995][ T6488] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 151.573477][ T7592] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 151.603905][ T7592] netlink: 17 bytes leftover after parsing attributes in process `syz.3.514'. [ 151.626053][ T5888] tipc: Node number set to 9611946 [ 152.015998][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 152.202803][ T7623] netlink: 'syz.3.523': attribute type 10 has an invalid length. [ 152.222939][ T7623] netlink: 'syz.3.523': attribute type 10 has an invalid length. [ 152.388797][ T7631] ªªªªªª: renamed from vlan0 [ 152.835145][ T7647] openvswitch: netlink: Message has 24 unknown bytes. [ 152.853260][ T7647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.234004][ T7657] delete_channel: no stack [ 155.010427][ T7672] tc_dump_action: action bad kind [ 155.242619][ T7694] __nla_validate_parse: 6 callbacks suppressed [ 155.242638][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 155.294446][ T7693] hsr0: entered promiscuous mode [ 155.345894][ T7693] macvtap1: entered promiscuous mode [ 155.347836][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 155.365624][ T7693] macvtap1: entered allmulticast mode [ 155.371147][ T7693] hsr0: entered allmulticast mode [ 155.406158][ T7693] hsr_slave_0: entered allmulticast mode [ 155.434403][ T7693] hsr_slave_1: entered allmulticast mode [ 155.462763][ T7693] hsr0: left allmulticast mode [ 155.477662][ T7693] hsr_slave_0: left allmulticast mode [ 155.488824][ T7693] hsr_slave_1: left allmulticast mode [ 155.769278][ T7682] infiniband syz1: set down [ 155.785366][ T7682] infiniband syz1: added ipvlan0 [ 155.803845][ T7682] syz1: rxe_create_cq: returned err = -12 [ 155.862122][ T7682] infiniband syz1: Couldn't create ib_mad CQ [ 155.873914][ T7682] infiniband syz1: Couldn't open port 1 [ 156.000220][ T7682] RDS/IB: syz1: added [ 156.005143][ T7682] smc: adding ib device syz1 with port count 1 [ 156.020183][ T7682] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 156.020882][ T7715] syzkaller0: entered promiscuous mode [ 156.040317][ T7715] syzkaller0: entered allmulticast mode [ 157.153275][ T6488] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 157.688236][ T7738] netlink: 'syz.4.554': attribute type 10 has an invalid length. [ 157.778004][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 157.782474][ T6488] wlan1: Selected IBSS BSSID 12:bf:0d:e3:1b:67 based on configured SSID [ 157.806655][ T7744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.557'. [ 157.812813][ T7738] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.069845][ T7749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.558'. [ 158.093371][ T7749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.558'. [ 159.251568][ T7783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.572'. [ 159.387026][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.573'. [ 159.396680][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.573'. [ 159.407243][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.573'. [ 159.748812][ T7795] IPv6: addrconf: prefix option has invalid lifetime [ 159.882204][ T7799] netlink: 'syz.1.577': attribute type 32 has an invalid length. [ 159.912147][ T7799] netlink: 84 bytes leftover after parsing attributes in process `syz.1.577'. [ 160.152705][ T7809] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 160.167907][ T7806] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 160.858920][ T7832] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 162.286383][ T7837] ipvlan2: entered promiscuous mode [ 162.310266][ T7837] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 162.320975][ T7837] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.362574][ T7843] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 162.620589][ T43] IPVS: starting estimator thread 0... [ 162.637226][ T7853] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:19999 [ 162.685975][ T7853] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20000 [ 162.746687][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 162.785553][ T7854] IPVS: using max 25 ests per chain, 60000 per kthread [ 162.810469][ T7860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 162.823671][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.597'. [ 162.854694][ T7853] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.900753][ T5890] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 162.978158][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 163.004083][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 163.204872][ T7865] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 163.367747][ T7874] netlink: 'syz.3.604': attribute type 4 has an invalid length. [ 163.404146][ T7874] netlink: 'syz.3.604': attribute type 4 has an invalid length. [ 163.617518][ T7885] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 163.913197][ T7897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.081125][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 164.349568][ T7909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.618'. [ 164.677084][ T7923] Set syz1 is full, maxelem 0 reached [ 164.759843][ T7925] netlink: 'syz.0.621': attribute type 12 has an invalid length. [ 164.816476][ T7925] netlink: 248 bytes leftover after parsing attributes in process `syz.0.621'. [ 164.877734][ T7932] netlink: 72 bytes leftover after parsing attributes in process `syz.1.625'. [ 164.982638][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 165.105739][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.629'. [ 165.145740][ T7943] x_tables: duplicate underflow at hook 1 [ 165.392050][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 165.520113][ T7950] veth0: entered promiscuous mode [ 165.558943][ T7950] veth0: left promiscuous mode [ 167.956454][ T8028] sctp: [Deprecated]: syz.3.657 (pid 8028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.956454][ T8028] Use struct sctp_sack_info instead [ 168.021777][ T9] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 168.061578][ T8030] __nla_validate_parse: 4 callbacks suppressed [ 168.061597][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'. [ 168.114098][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 168.307623][ T8044] Set syz1 is full, maxelem 0 reached [ 168.463055][ T8049] tipc: Started in network mode [ 168.483013][ T8049] tipc: Node identity bac82a720b0c, cluster identity 4711 [ 168.494281][ T8049] tipc: Enabled bearer , priority 0 [ 168.552485][ T8046] tipc: Resetting bearer [ 168.657883][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 168.658654][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 169.211802][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 169.221037][ T8064] netlink: 'syz.1.666': attribute type 3 has an invalid length. [ 169.568507][ T43] tipc: Node number set to 2982423154 [ 169.948634][ T8046] tipc: Disabling bearer [ 170.127591][ T8072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.669'. [ 170.207832][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 171.228041][ T8122] tls_set_device_offload: netdev not found [ 171.408460][ T8130] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 171.474733][ T8130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.684'. [ 171.568133][ T8130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.588757][ T8134] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 172.033870][ T8154] Set syz1 is full, maxelem 0 reached [ 172.254706][ T8165] C: renamed from team_slave_0 (while UP) [ 172.289266][ T8165] netlink: 'syz.4.694': attribute type 8 has an invalid length. [ 172.334487][ T8167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.695'. [ 172.358718][ T8165] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.627543][ T8174] netlink: 248 bytes leftover after parsing attributes in process `syz.0.697'. [ 173.083509][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 173.111285][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 173.139809][ T8190] netlink: 'syz.2.702': attribute type 5 has an invalid length. [ 173.160389][ T8190] netlink: 'syz.2.702': attribute type 6 has an invalid length. [ 173.566366][ T8210] FAULT_INJECTION: forcing a failure. [ 173.566366][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 173.613434][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.2.705 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 173.613465][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.613479][ T8210] Call Trace: [ 173.613487][ T8210] [ 173.613496][ T8210] dump_stack_lvl+0x189/0x250 [ 173.613536][ T8210] ? __pfx____ratelimit+0x10/0x10 [ 173.613562][ T8210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.613607][ T8210] ? __pfx__printk+0x10/0x10 [ 173.613644][ T8210] should_fail_ex+0x414/0x560 [ 173.613676][ T8210] should_failslab+0xa8/0x100 [ 173.613709][ T8210] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 173.613745][ T8210] ? __alloc_skb+0x112/0x2d0 [ 173.613782][ T8210] __alloc_skb+0x112/0x2d0 [ 173.613817][ T8210] rose_write_internal+0x100/0x1ac0 [ 173.613847][ T8210] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.613873][ T8210] ? __local_bh_enable_ip+0x12d/0x1c0 [ 173.613903][ T8210] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 173.613937][ T8210] ? __pfx_rose_write_internal+0x10/0x10 [ 173.613965][ T8210] ? rose_route_free_lci+0x140/0x170 [ 173.613991][ T8210] ? rose_connect+0x775/0x10a0 [ 173.614016][ T8210] rose_connect+0x8ee/0x10a0 [ 173.614037][ T8210] ? __pfx_current_check_access_socket+0x10/0x10 [ 173.614071][ T8210] ? aa_sk_perm+0x81e/0x950 [ 173.614096][ T8210] ? __pfx_rose_connect+0x10/0x10 [ 173.614116][ T8210] ? aa_af_perm+0x240/0x2b0 [ 173.614138][ T8210] ? tomoyo_socket_connect_permission+0x164/0x290 [ 173.614179][ T8210] ? bpf_lsm_socket_connect+0x9/0x20 [ 173.614207][ T8210] __sys_connect+0x313/0x440 [ 173.614237][ T8210] ? __fget_files+0x3a0/0x420 [ 173.614269][ T8210] ? __pfx___sys_connect+0x10/0x10 [ 173.614313][ T8210] ? __pfx_ksys_write+0x10/0x10 [ 173.614337][ T8210] ? rcu_is_watching+0x15/0xb0 [ 173.614374][ T8210] __x64_sys_connect+0x7a/0x90 [ 173.614405][ T8210] do_syscall_64+0xfa/0x3b0 [ 173.614430][ T8210] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.614453][ T8210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.614473][ T8210] ? clear_bhb_loop+0x60/0xb0 [ 173.614508][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.614528][ T8210] RIP: 0033:0x7fce7958e969 [ 173.614546][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.614563][ T8210] RSP: 002b:00007fce7a4bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 173.614585][ T8210] RAX: ffffffffffffffda RBX: 00007fce797b5fa0 RCX: 00007fce7958e969 [ 173.614600][ T8210] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 173.614612][ T8210] RBP: 00007fce7a4bb090 R08: 0000000000000000 R09: 0000000000000000 [ 173.614643][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.614655][ T8210] R13: 0000000000000000 R14: 00007fce797b5fa0 R15: 00007fff2158a088 [ 173.614688][ T8210] [ 173.901148][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 173.957672][ T8213] FAULT_INJECTION: forcing a failure. [ 173.957672][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.028574][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.1.706 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 174.028605][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.028618][ T8213] Call Trace: [ 174.028626][ T8213] [ 174.028635][ T8213] dump_stack_lvl+0x189/0x250 [ 174.028673][ T8213] ? __pfx____ratelimit+0x10/0x10 [ 174.028699][ T8213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.028733][ T8213] ? __pfx__printk+0x10/0x10 [ 174.028756][ T8213] ? __might_fault+0xb0/0x130 [ 174.028801][ T8213] should_fail_ex+0x414/0x560 [ 174.028834][ T8213] _copy_from_iter+0x1db/0x16f0 [ 174.028871][ T8213] ? rcu_is_watching+0x15/0xb0 [ 174.028903][ T8213] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 174.028936][ T8213] ? __pfx__copy_from_iter+0x10/0x10 [ 174.028969][ T8213] ? __build_skb_around+0x257/0x3e0 [ 174.029005][ T8213] ? netlink_sendmsg+0x642/0xb30 [ 174.029023][ T8213] ? skb_put+0x11b/0x210 [ 174.029060][ T8213] netlink_sendmsg+0x6b2/0xb30 [ 174.029090][ T8213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.029113][ T8213] ? aa_sock_msg_perm+0x94/0x160 [ 174.029142][ T8213] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.029174][ T8213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.029195][ T8213] __sock_sendmsg+0x219/0x270 [ 174.029226][ T8213] ____sys_sendmsg+0x505/0x830 [ 174.029253][ T8213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.029284][ T8213] ? import_iovec+0x74/0xa0 [ 174.029309][ T8213] ___sys_sendmsg+0x21f/0x2a0 [ 174.029333][ T8213] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.029399][ T8213] ? __fget_files+0x2a/0x420 [ 174.029429][ T8213] ? __fget_files+0x3a0/0x420 [ 174.029473][ T8213] __x64_sys_sendmsg+0x19b/0x260 [ 174.029498][ T8213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.029531][ T8213] ? __pfx_ksys_write+0x10/0x10 [ 174.029560][ T8213] ? rcu_is_watching+0x15/0xb0 [ 174.029600][ T8213] ? do_syscall_64+0xbe/0x3b0 [ 174.029632][ T8213] do_syscall_64+0xfa/0x3b0 [ 174.029657][ T8213] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.029682][ T8213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.029703][ T8213] ? clear_bhb_loop+0x60/0xb0 [ 174.029737][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.029758][ T8213] RIP: 0033:0x7f854978e969 [ 174.029777][ T8213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.029794][ T8213] RSP: 002b:00007f854a5a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.029816][ T8213] RAX: ffffffffffffffda RBX: 00007f85499b5fa0 RCX: 00007f854978e969 [ 174.029832][ T8213] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 174.029845][ T8213] RBP: 00007f854a5a0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.029858][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.029870][ T8213] R13: 0000000000000000 R14: 00007f85499b5fa0 R15: 00007ffe53bf4078 [ 174.029903][ T8213] [ 174.416601][ T6484] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 174.692720][ T8234] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 175.417596][ T8253] netlink: 'syz.0.716': attribute type 28 has an invalid length. [ 175.746510][ T8267] FAULT_INJECTION: forcing a failure. [ 175.746510][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 175.757334][ T8268] veth1_macvtap: left promiscuous mode [ 175.799003][ T8268] macsec0: entered allmulticast mode [ 175.805421][ T8267] CPU: 1 UID: 0 PID: 8267 Comm: syz.4.720 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 175.805450][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.805463][ T8267] Call Trace: [ 175.805471][ T8267] [ 175.805480][ T8267] dump_stack_lvl+0x189/0x250 [ 175.805521][ T8267] ? __pfx____ratelimit+0x10/0x10 [ 175.805548][ T8267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.805581][ T8267] ? __pfx__printk+0x10/0x10 [ 175.805612][ T8267] ? ref_tracker_alloc+0x318/0x460 [ 175.805645][ T8267] should_fail_ex+0x414/0x560 [ 175.805677][ T8267] should_failslab+0xa8/0x100 [ 175.805711][ T8267] kmem_cache_alloc_noprof+0x73/0x3c0 [ 175.805740][ T8267] ? skb_clone+0x212/0x3a0 [ 175.805768][ T8267] skb_clone+0x212/0x3a0 [ 175.805795][ T8267] __netlink_deliver_tap+0x404/0x850 [ 175.805843][ T8267] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.805877][ T8267] netlink_deliver_tap+0x19c/0x1b0 [ 175.805910][ T8267] netlink_unicast+0x72f/0x8d0 [ 175.805953][ T8267] netlink_sendmsg+0x805/0xb30 [ 175.805984][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.806007][ T8267] ? aa_sock_msg_perm+0x94/0x160 [ 175.806036][ T8267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.806060][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.806081][ T8267] __sock_sendmsg+0x219/0x270 [ 175.806111][ T8267] ____sys_sendmsg+0x505/0x830 [ 175.806139][ T8267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.806171][ T8267] ? import_iovec+0x74/0xa0 [ 175.806196][ T8267] ___sys_sendmsg+0x21f/0x2a0 [ 175.806220][ T8267] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.806291][ T8267] ? __fget_files+0x2a/0x420 [ 175.806321][ T8267] ? __fget_files+0x3a0/0x420 [ 175.806365][ T8267] __x64_sys_sendmsg+0x19b/0x260 [ 175.806389][ T8267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.806422][ T8267] ? __pfx_ksys_write+0x10/0x10 [ 175.806451][ T8267] ? rcu_is_watching+0x15/0xb0 [ 175.806487][ T8267] ? do_syscall_64+0xbe/0x3b0 [ 175.806519][ T8267] do_syscall_64+0xfa/0x3b0 [ 175.806544][ T8267] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.806568][ T8267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.806589][ T8267] ? clear_bhb_loop+0x60/0xb0 [ 175.806615][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.806635][ T8267] RIP: 0033:0x7fad5758e969 [ 175.806653][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.806671][ T8267] RSP: 002b:00007fad5836c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.806693][ T8267] RAX: ffffffffffffffda RBX: 00007fad577b5fa0 RCX: 00007fad5758e969 [ 175.806708][ T8267] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 175.806721][ T8267] RBP: 00007fad5836c090 R08: 0000000000000000 R09: 0000000000000000 [ 175.806734][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.806746][ T8267] R13: 0000000000000000 R14: 00007fad577b5fa0 R15: 00007ffc45d6db68 [ 175.806780][ T8267] [ 175.847367][ T8266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.848599][ T8267] Set syz1 is full, maxelem 0 reached [ 175.860070][ T8266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.930332][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 176.010284][ T8266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.154891][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.172799][ T8266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.184355][ T8270] veth1_macvtap: entered promiscuous mode [ 176.198091][ T8270] veth1_macvtap: entered allmulticast mode [ 176.204130][ T8270] macsec0: left allmulticast mode [ 176.211019][ T8270] veth1_macvtap: left allmulticast mode [ 176.775074][ T8295] tun0: tun_chr_ioctl cmd 1074025681 [ 176.810946][ T8295] tun0: tun_chr_ioctl cmd 35108 [ 177.144420][ T8305] batadv0: mtu less than device minimum [ 177.178348][ T8307] Set syz1 is full, maxelem 0 reached [ 177.184878][ T8305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.196968][ T8305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.209004][ T8305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.221016][ T8305] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.511289][ T8318] netlink: 104 bytes leftover after parsing attributes in process `syz.3.739'. [ 177.991008][ T8335] netlink: 542 bytes leftover after parsing attributes in process `syz.1.743'. [ 178.279127][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 178.291467][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 178.585261][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 178.651341][ T8355] macsec1: entered allmulticast mode [ 178.666806][ T8355] team0: entered allmulticast mode [ 178.672364][ T8355] team_slave_0: entered allmulticast mode [ 178.687639][ T8355] team_slave_1: entered allmulticast mode [ 178.727868][ T8355] team0: left allmulticast mode [ 178.738658][ T8355] team_slave_0: left allmulticast mode [ 178.755647][ T8355] team_slave_1: left allmulticast mode [ 178.976887][ T49] net_ratelimit: 16 callbacks suppressed [ 178.976908][ T49] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 179.027700][ T8360] netlink: 'syz.2.751': attribute type 26 has an invalid length. [ 179.561947][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 180.180380][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 181.083528][ T8403] Set syz1 is full, maxelem 0 reached [ 181.501664][ T8407] Set syz1 is full, maxelem 0 reached [ 181.556066][ T8407] FAULT_INJECTION: forcing a failure. [ 181.556066][ T8407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.634480][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.0.764 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 181.634511][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.634524][ T8407] Call Trace: [ 181.634533][ T8407] [ 181.634542][ T8407] dump_stack_lvl+0x189/0x250 [ 181.634581][ T8407] ? __pfx____ratelimit+0x10/0x10 [ 181.634608][ T8407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.634641][ T8407] ? __pfx__printk+0x10/0x10 [ 181.634665][ T8407] ? __might_fault+0xb0/0x130 [ 181.634710][ T8407] should_fail_ex+0x414/0x560 [ 181.634744][ T8407] _copy_from_user+0x2d/0xb0 [ 181.634776][ T8407] kstrtouint_from_user+0xc4/0x170 [ 181.634810][ T8407] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 181.634861][ T8407] proc_fail_nth_write+0x88/0x240 [ 181.634883][ T8407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.634912][ T8407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.634935][ T8407] vfs_write+0x27e/0xa90 [ 181.634974][ T8407] ? __pfx_vfs_write+0x10/0x10 [ 181.635005][ T8407] ? __fget_files+0x2a/0x420 [ 181.635042][ T8407] ? __fget_files+0x3a0/0x420 [ 181.635073][ T8407] ? __fget_files+0x2a/0x420 [ 181.635115][ T8407] ksys_write+0x145/0x250 [ 181.635147][ T8407] ? __pfx_ksys_write+0x10/0x10 [ 181.635172][ T8407] ? rcu_is_watching+0x15/0xb0 [ 181.635208][ T8407] ? do_syscall_64+0xbe/0x3b0 [ 181.635240][ T8407] do_syscall_64+0xfa/0x3b0 [ 181.635266][ T8407] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.635295][ T8407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.635315][ T8407] ? clear_bhb_loop+0x60/0xb0 [ 181.635342][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.635362][ T8407] RIP: 0033:0x7f0107d8d41f [ 181.635381][ T8407] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 181.635398][ T8407] RSP: 002b:00007f0108b38030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 181.635420][ T8407] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0107d8d41f [ 181.635435][ T8407] RDX: 0000000000000001 RSI: 00007f0108b380a0 RDI: 0000000000000004 [ 181.635448][ T8407] RBP: 00007f0108b38090 R08: 0000000000000000 R09: 0000000000000000 [ 181.635461][ T8407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 181.635473][ T8407] R13: 0000000000000000 R14: 00007f0107fb5fa0 R15: 00007fff6b4a4368 [ 181.635508][ T8407] [ 181.890565][ T8411] netlink: 72 bytes leftover after parsing attributes in process `syz.4.766'. [ 181.899640][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 181.910703][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 181.937117][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 181.990084][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.765'. [ 182.044034][ T8415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.768'. [ 183.268194][ T8444] Set syz1 is full, maxelem 0 reached [ 183.919368][ T8455] __nla_validate_parse: 1 callbacks suppressed [ 183.919389][ T8455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.781'. [ 184.045852][ T8455] netlink: 56 bytes leftover after parsing attributes in process `syz.3.781'. [ 184.098959][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 184.184975][ T8459] ip6gre1: entered allmulticast mode [ 184.262578][ T6484] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.324440][ T8459] netlink: 'syz.2.783': attribute type 12 has an invalid length. [ 184.425656][ T8466] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 185.501284][ T6484] sched: DL replenish lagged too much [ 185.548624][ T8491] nftables ruleset with unbound chain [ 185.937965][ T6484] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 186.233065][ T8507] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 186.279137][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.368421][ T8507] bond0: (slave team0): Enslaving as an active interface with an up link [ 186.835952][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 187.107116][ T8518] netlink: 248 bytes leftover after parsing attributes in process `syz.1.799'. [ 187.200502][ T8524] FAULT_INJECTION: forcing a failure. [ 187.200502][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.293003][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.2.800 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 187.293034][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.293047][ T8524] Call Trace: [ 187.293056][ T8524] [ 187.293066][ T8524] dump_stack_lvl+0x189/0x250 [ 187.293106][ T8524] ? __pfx____ratelimit+0x10/0x10 [ 187.293133][ T8524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.293166][ T8524] ? __pfx__printk+0x10/0x10 [ 187.293190][ T8524] ? __might_fault+0xb0/0x130 [ 187.293242][ T8524] should_fail_ex+0x414/0x560 [ 187.293277][ T8524] _copy_from_user+0x2d/0xb0 [ 187.293300][ T8524] ___sys_sendmsg+0x158/0x2a0 [ 187.293326][ T8524] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.293391][ T8524] ? __fget_files+0x2a/0x420 [ 187.293432][ T8524] ? __fget_files+0x3a0/0x420 [ 187.293475][ T8524] __x64_sys_sendmsg+0x19b/0x260 [ 187.293500][ T8524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.293532][ T8524] ? __pfx_ksys_write+0x10/0x10 [ 187.293556][ T8524] ? rcu_is_watching+0x15/0xb0 [ 187.293592][ T8524] ? do_syscall_64+0xbe/0x3b0 [ 187.293623][ T8524] do_syscall_64+0xfa/0x3b0 [ 187.293648][ T8524] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.293672][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.293693][ T8524] ? clear_bhb_loop+0x60/0xb0 [ 187.293718][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.293738][ T8524] RIP: 0033:0x7fce7958e969 [ 187.293757][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.293774][ T8524] RSP: 002b:00007fce7a49a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.293796][ T8524] RAX: ffffffffffffffda RBX: 00007fce797b6080 RCX: 00007fce7958e969 [ 187.293811][ T8524] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 187.293824][ T8524] RBP: 00007fce7a49a090 R08: 0000000000000000 R09: 0000000000000000 [ 187.293837][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.293848][ T8524] R13: 0000000000000000 R14: 00007fce797b6080 R15: 00007fff2158a088 [ 187.293882][ T8524] [ 187.547138][ T8528] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 187.554993][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.0.802'. [ 188.415664][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.077470][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 189.413561][ T8555] 8021q: adding VLAN 0 to HW filter on device team1 [ 189.780494][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 190.054558][ T8577] FAULT_INJECTION: forcing a failure. [ 190.054558][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 190.134795][ T8577] CPU: 0 UID: 0 PID: 8577 Comm: syz.2.816 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 190.134825][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.134838][ T8577] Call Trace: [ 190.134846][ T8577] [ 190.134855][ T8577] dump_stack_lvl+0x189/0x250 [ 190.134894][ T8577] ? __pfx____ratelimit+0x10/0x10 [ 190.134921][ T8577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.134954][ T8577] ? __pfx__printk+0x10/0x10 [ 190.134983][ T8577] ? __pfx___might_resched+0x10/0x10 [ 190.135020][ T8577] should_fail_ex+0x414/0x560 [ 190.135053][ T8577] should_failslab+0xa8/0x100 [ 190.135088][ T8577] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 190.135120][ T8577] ? __alloc_skb+0x112/0x2d0 [ 190.135156][ T8577] __alloc_skb+0x112/0x2d0 [ 190.135193][ T8577] netlink_sendmsg+0x5c6/0xb30 [ 190.135224][ T8577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.135256][ T8577] ? aa_sock_msg_perm+0x94/0x160 [ 190.135288][ T8577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.135312][ T8577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.135333][ T8577] __sock_sendmsg+0x219/0x270 [ 190.135365][ T8577] ____sys_sendmsg+0x505/0x830 [ 190.135392][ T8577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.135423][ T8577] ? import_iovec+0x74/0xa0 [ 190.135449][ T8577] ___sys_sendmsg+0x21f/0x2a0 [ 190.135473][ T8577] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.135534][ T8577] ? __fget_files+0x2a/0x420 [ 190.135565][ T8577] ? __fget_files+0x3a0/0x420 [ 190.135608][ T8577] __x64_sys_sendmsg+0x19b/0x260 [ 190.135634][ T8577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.135666][ T8577] ? __pfx_ksys_write+0x10/0x10 [ 190.135691][ T8577] ? rcu_is_watching+0x15/0xb0 [ 190.135727][ T8577] ? do_syscall_64+0xbe/0x3b0 [ 190.135759][ T8577] do_syscall_64+0xfa/0x3b0 [ 190.135785][ T8577] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.135810][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.135830][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 190.135857][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.135903][ T8577] RIP: 0033:0x7fce7958e969 [ 190.135923][ T8577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.135940][ T8577] RSP: 002b:00007fce7a49a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.135963][ T8577] RAX: ffffffffffffffda RBX: 00007fce797b6080 RCX: 00007fce7958e969 [ 190.135979][ T8577] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 190.135991][ T8577] RBP: 00007fce7a49a090 R08: 0000000000000000 R09: 0000000000000000 [ 190.136004][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.136017][ T8577] R13: 0000000000000000 R14: 00007fce797b6080 R15: 00007fff2158a088 [ 190.136050][ T8577] [ 190.402635][ T8575] netlink: 248 bytes leftover after parsing attributes in process `syz.4.818'. [ 191.698391][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 192.051696][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.060299][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.699261][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.742384][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.220473][ T8597] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.235062][ T8597] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.246645][ T8597] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.255694][ T8597] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.404908][ T8599] macsec1: entered promiscuous mode [ 193.417534][ T8599] dummy0: entered promiscuous mode [ 193.423980][ T8599] macsec1: entered allmulticast mode [ 193.429918][ T8599] dummy0: entered allmulticast mode [ 193.444936][ T8599] dummy0: left allmulticast mode [ 193.458676][ T8599] dummy0: left promiscuous mode [ 193.521881][ T8603] vlan3: entered promiscuous mode [ 193.528225][ T8603] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 193.536476][ T8603] vlan3: entered allmulticast mode [ 193.541668][ T8603] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 193.565370][ T8619] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.830'. [ 194.260695][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.267234][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.764865][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.790879][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 194.801274][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 194.815537][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 195.537278][ T6488] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 195.642077][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 195.771366][ T8686] Set syz1 is full, maxelem 0 reached [ 195.924690][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'. [ 196.393636][ T8714] netlink: 428 bytes leftover after parsing attributes in process `syz.2.852'. [ 196.428654][ T8714] netlink: 'syz.2.852': attribute type 2 has an invalid length. [ 196.473956][ T8714] netlink: 64 bytes leftover after parsing attributes in process `syz.2.852'. [ 196.580169][ T8726] syzkaller1: entered promiscuous mode [ 196.592017][ T8726] syzkaller1: entered allmulticast mode [ 196.815516][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.916104][ T8738] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 196.934140][ T8738] netlink: 224 bytes leftover after parsing attributes in process `syz.3.862'. [ 196.944021][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 196.958225][ T8740] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 197.183623][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 197.312989][ T8753] FAULT_INJECTION: forcing a failure. [ 197.312989][ T8753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.330091][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.1.867 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 197.330120][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.330133][ T8753] Call Trace: [ 197.330141][ T8753] [ 197.330150][ T8753] dump_stack_lvl+0x189/0x250 [ 197.330188][ T8753] ? __pfx____ratelimit+0x10/0x10 [ 197.330214][ T8753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.330247][ T8753] ? __pfx__printk+0x10/0x10 [ 197.330283][ T8753] should_fail_ex+0x414/0x560 [ 197.330316][ T8753] _copy_to_user+0x31/0xb0 [ 197.330339][ T8753] simple_read_from_buffer+0xe1/0x170 [ 197.330375][ T8753] proc_fail_nth_read+0x1df/0x250 [ 197.330400][ T8753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.330425][ T8753] ? rw_verify_area+0x258/0x650 [ 197.330450][ T8753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.330473][ T8753] vfs_read+0x200/0x980 [ 197.330506][ T8753] ? __pfx___mutex_lock+0x10/0x10 [ 197.330533][ T8753] ? __pfx_vfs_read+0x10/0x10 [ 197.330561][ T8753] ? __fget_files+0x2a/0x420 [ 197.330597][ T8753] ? __fget_files+0x3a0/0x420 [ 197.330626][ T8753] ? __fget_files+0x2a/0x420 [ 197.330678][ T8753] ksys_read+0x145/0x250 [ 197.330707][ T8753] ? __pfx_ksys_read+0x10/0x10 [ 197.330730][ T8753] ? rcu_is_watching+0x15/0xb0 [ 197.330767][ T8753] ? do_syscall_64+0xbe/0x3b0 [ 197.330797][ T8753] do_syscall_64+0xfa/0x3b0 [ 197.330822][ T8753] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.330846][ T8753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.330867][ T8753] ? clear_bhb_loop+0x60/0xb0 [ 197.330905][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.330924][ T8753] RIP: 0033:0x7f854978d37c [ 197.330941][ T8753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.330958][ T8753] RSP: 002b:00007f854a5a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.330979][ T8753] RAX: ffffffffffffffda RBX: 00007f85499b5fa0 RCX: 00007f854978d37c [ 197.330994][ T8753] RDX: 000000000000000f RSI: 00007f854a5a00a0 RDI: 0000000000000004 [ 197.331006][ T8753] RBP: 00007f854a5a0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.331018][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.331030][ T8753] R13: 0000000000000000 R14: 00007f85499b5fa0 R15: 00007ffe53bf4078 [ 197.331066][ T8753] [ 197.587913][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 197.764122][ T8764] batadv_slave_0: entered promiscuous mode [ 197.786197][ T8754] block nbd0: server does not support multiple connections per device. [ 197.877664][ T8754] block nbd0: shutting down sockets [ 198.998315][ T8801] Set syz1 is full, maxelem 0 reached [ 199.153104][ T8807] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 199.286373][ T8813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.593470][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.601384][ T8817] batadv0: mtu less than device minimum [ 199.609123][ T8817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.621345][ T8817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.632932][ T8817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.644388][ T8817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.656281][ T8817] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 199.700741][ T8817] batadv_slave_0: entered promiscuous mode [ 199.706781][ T8817] batadv_slave_0: entered allmulticast mode [ 199.727953][ T8817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.893153][ T8821] __nla_validate_parse: 6 callbacks suppressed [ 199.893173][ T8821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.887'. [ 200.015743][ T8834] netlink: 64 bytes leftover after parsing attributes in process `syz.3.890'. [ 200.114962][ T8846] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 200.129066][ T5888] IPVS: starting estimator thread 0... [ 200.261618][ T8849] IPVS: using max 27 ests per chain, 64800 per kthread [ 200.468598][ T8865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.895'. [ 200.504519][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'. [ 200.969225][ T8873] net_ratelimit: 15 callbacks suppressed [ 200.969246][ T8873] Set syz1 is full, maxelem 0 reached [ 201.295875][ T8702] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 201.557468][ T8905] netlink: 64 bytes leftover after parsing attributes in process `syz.2.909'. [ 201.576355][ T8905] netlink: 64 bytes leftover after parsing attributes in process `syz.2.909'. [ 201.767546][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 201.784483][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.821029][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.853696][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.883369][ T8919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.919087][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.947484][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.026722][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 202.110106][ T8925] sctp: [Deprecated]: syz.4.914 (pid 8925) Use of int in max_burst socket option. [ 202.110106][ T8925] Use struct sctp_assoc_value instead [ 202.137531][ T8927] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 202.149641][ T8927] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 202.249623][ T8925] syzkaller0: entered promiscuous mode [ 202.268336][ T8925] syzkaller0: entered allmulticast mode [ 202.277359][ T8934] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 202.613777][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 202.627996][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 203.224947][ T6484] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 204.213760][ T8942] bond0: entered promiscuous mode [ 204.219014][ T8942] bond_slave_0: entered promiscuous mode [ 204.224838][ T8942] bond_slave_1: entered promiscuous mode [ 204.230877][ T8942] team0: entered promiscuous mode [ 204.236201][ T8942] team_slave_0: entered promiscuous mode [ 204.242370][ T8942] team_slave_1: entered promiscuous mode [ 204.252918][ T8942] bond0: left promiscuous mode [ 204.265350][ T8942] bond_slave_0: left promiscuous mode [ 204.270941][ T8942] bond_slave_1: left promiscuous mode [ 204.285605][ T8942] team0: left promiscuous mode [ 204.290418][ T8942] team_slave_0: left promiscuous mode [ 204.297425][ T8942] team_slave_1: left promiscuous mode [ 205.000816][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 205.026303][ T8992] netlink: 211456 bytes leftover after parsing attributes in process `syz.0.931'. [ 205.069085][ T8992] netlink: zone id is out of range [ 205.081003][ T8992] netlink: get zone limit has 8 unknown bytes [ 205.120318][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 205.171740][ T8987] netlink: 68 bytes leftover after parsing attributes in process `syz.1.930'. [ 205.211646][ T5843] Bluetooth: hci4: link tx timeout [ 205.218115][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.228487][ T5843] Bluetooth: hci4: link tx timeout [ 205.233640][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.340777][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 206.023906][ T9021] Set syz1 is full, maxelem 0 reached [ 206.051279][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'. [ 206.126549][ T9027] FAULT_INJECTION: forcing a failure. [ 206.126549][ T9027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.166496][ T9027] CPU: 0 UID: 0 PID: 9027 Comm: syz.2.940 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 206.166527][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.166540][ T9027] Call Trace: [ 206.166548][ T9027] [ 206.166557][ T9027] dump_stack_lvl+0x189/0x250 [ 206.166597][ T9027] ? __pfx____ratelimit+0x10/0x10 [ 206.166624][ T9027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.166656][ T9027] ? __pfx__printk+0x10/0x10 [ 206.166680][ T9027] ? __might_fault+0xb0/0x130 [ 206.166723][ T9027] should_fail_ex+0x414/0x560 [ 206.166756][ T9027] _copy_from_user+0x2d/0xb0 [ 206.166778][ T9027] __sys_connect+0x123/0x440 [ 206.166810][ T9027] ? __fget_files+0x3a0/0x420 [ 206.166842][ T9027] ? __pfx___sys_connect+0x10/0x10 [ 206.166892][ T9027] ? __pfx_ksys_write+0x10/0x10 [ 206.166924][ T9027] ? rcu_is_watching+0x15/0xb0 [ 206.166963][ T9027] __x64_sys_connect+0x7a/0x90 [ 206.166995][ T9027] do_syscall_64+0xfa/0x3b0 [ 206.167020][ T9027] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.167045][ T9027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.167065][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 206.167091][ T9027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.167112][ T9027] RIP: 0033:0x7fce7958e969 [ 206.167130][ T9027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.167148][ T9027] RSP: 002b:00007fce7a4bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 206.167172][ T9027] RAX: ffffffffffffffda RBX: 00007fce797b5fa0 RCX: 00007fce7958e969 [ 206.167187][ T9027] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 206.167200][ T9027] RBP: 00007fce7a4bb090 R08: 0000000000000000 R09: 0000000000000000 [ 206.167213][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.167225][ T9027] R13: 0000000000000000 R14: 00007fce797b5fa0 R15: 00007fff2158a088 [ 206.167258][ T9027] [ 206.380087][ T9028] netlink: 'syz.1.939': attribute type 12 has an invalid length. [ 206.388355][ T9028] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.939'. [ 206.467293][ T9032] Set syz1 is full, maxelem 0 reached [ 206.616023][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.943'. [ 206.738463][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 206.774165][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 207.058428][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 207.297809][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 207.479509][ T9062] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 207.637968][ T9064] Set syz1 is full, maxelem 0 reached [ 207.676051][ T9070] FAULT_INJECTION: forcing a failure. [ 207.676051][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.727783][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.2.953 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 207.727814][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.727827][ T9070] Call Trace: [ 207.727835][ T9070] [ 207.727845][ T9070] dump_stack_lvl+0x189/0x250 [ 207.727883][ T9070] ? __pfx____ratelimit+0x10/0x10 [ 207.727908][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.727941][ T9070] ? __pfx__printk+0x10/0x10 [ 207.727982][ T9070] should_fail_ex+0x414/0x560 [ 207.728014][ T9070] _copy_to_user+0x31/0xb0 [ 207.728039][ T9070] simple_read_from_buffer+0xe1/0x170 [ 207.728074][ T9070] proc_fail_nth_read+0x1df/0x250 [ 207.728099][ T9070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.728132][ T9070] ? rw_verify_area+0x258/0x650 [ 207.728158][ T9070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.728180][ T9070] vfs_read+0x200/0x980 [ 207.728213][ T9070] ? __pfx___mutex_lock+0x10/0x10 [ 207.728240][ T9070] ? __pfx_vfs_read+0x10/0x10 [ 207.728269][ T9070] ? __fget_files+0x2a/0x420 [ 207.728305][ T9070] ? __fget_files+0x3a0/0x420 [ 207.728334][ T9070] ? __fget_files+0x2a/0x420 [ 207.728376][ T9070] ksys_read+0x145/0x250 [ 207.728406][ T9070] ? __pfx_ksys_read+0x10/0x10 [ 207.728429][ T9070] ? rcu_is_watching+0x15/0xb0 [ 207.728461][ T9070] ? do_syscall_64+0xbe/0x3b0 [ 207.728498][ T9070] do_syscall_64+0xfa/0x3b0 [ 207.728523][ T9070] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.728548][ T9070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.728569][ T9070] ? clear_bhb_loop+0x60/0xb0 [ 207.728595][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.728616][ T9070] RIP: 0033:0x7fce7958d37c [ 207.728635][ T9070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.728651][ T9070] RSP: 002b:00007fce7a4bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.728673][ T9070] RAX: ffffffffffffffda RBX: 00007fce797b5fa0 RCX: 00007fce7958d37c [ 207.728688][ T9070] RDX: 000000000000000f RSI: 00007fce7a4bb0a0 RDI: 0000000000000003 [ 207.728701][ T9070] RBP: 00007fce7a4bb090 R08: 0000000000000000 R09: 0000000000000000 [ 207.728714][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.728726][ T9070] R13: 0000000000000000 R14: 00007fce797b5fa0 R15: 00007fff2158a088 [ 207.728759][ T9070] [ 208.546461][ T9096] netlink: 'syz.0.962': attribute type 13 has an invalid length. [ 208.781254][ T9102] ip6gre1: entered allmulticast mode [ 208.811283][ T1100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.831008][ T9104] batman_adv: batadv0: Interface deactivated: dummy0 [ 208.859529][ T9104] batman_adv: batadv0: Removing interface: dummy0 [ 208.890025][ T9102] netlink: 'syz.0.965': attribute type 12 has an invalid length. [ 208.910022][ T9104] Set syz1 is full, maxelem 0 reached [ 208.971239][ T9112] Set syz1 is full, maxelem 0 reached [ 208.987571][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 209.102001][ T9114] netlink: 'syz.2.969': attribute type 6 has an invalid length. [ 209.907796][ T9139] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.917008][ T9139] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.925935][ T9139] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.934670][ T9139] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.980021][ T9139] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.989303][ T9139] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.998250][ T9139] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.007731][ T9139] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.284111][ T9149] __nla_validate_parse: 5 callbacks suppressed [ 210.284129][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 210.337478][ T9151] Set syz1 is full, maxelem 0 reached [ 210.539403][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 210.576397][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 210.717482][ T9162] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 210.728096][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'. [ 210.756051][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'. [ 210.862080][ T9175] erspan0: entered promiscuous mode [ 210.900364][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 210.910972][ T9175] gretap0: entered promiscuous mode [ 210.975603][ T9175] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 210.996455][ T9175] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 211.281936][ T9201] netlink: 'syz.0.989': attribute type 39 has an invalid length. [ 211.440129][ T9205] netlink: 312 bytes leftover after parsing attributes in process `syz.3.994'. [ 211.613011][ T9214] Set syz1 is full, maxelem 0 reached [ 211.992689][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1001'. [ 212.341028][ T9240] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 212.365599][ T9240] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 212.671567][ T9249] Set syz1 is full, maxelem 0 reached [ 212.735514][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.819832][ T8702] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 212.948764][ T9255] set match dimension is over the limit! [ 213.018028][ T9255] pim6reg: entered allmulticast mode [ 213.047162][ T9259] dummy0: entered promiscuous mode [ 213.052643][ T9259] macsec1: entered promiscuous mode [ 213.059950][ T9259] macsec1: entered allmulticast mode [ 213.065507][ T9259] dummy0: entered allmulticast mode [ 213.077958][ T9259] dummy0: left allmulticast mode [ 213.086977][ T9255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 213.103784][ T9259] dummy0: left promiscuous mode [ 213.210442][ T9261] vlan1: entered promiscuous mode [ 213.217389][ T9261] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 213.219092][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 213.224817][ T9261] vlan1: entered allmulticast mode [ 213.247799][ T9261] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 213.796455][ T9279] Set syz1 is full, maxelem 0 reached [ 213.873654][ T9281] Set syz1 is full, maxelem 0 reached [ 214.095952][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.379613][ T9293] team_slave_0: entered promiscuous mode [ 214.385737][ T9293] team_slave_1: entered promiscuous mode [ 214.410005][ T9293] vlan2: entered promiscuous mode [ 214.423584][ T9293] team0: entered promiscuous mode [ 214.533955][ T9294] macsec1: entered allmulticast mode [ 214.539938][ T9294] bond0: entered allmulticast mode [ 214.553558][ T9294] bond_slave_0: entered allmulticast mode [ 214.561922][ T9294] bond_slave_1: entered allmulticast mode [ 214.625935][ T9299] veth0_vlan: left allmulticast mode [ 214.642563][ T9299] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 214.686414][ T9299] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.705900][ T9299] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.714835][ T9299] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.739678][ T9299] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.749031][ T1100] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 215.121901][ T9323] Set syz1 is full, maxelem 0 reached [ 215.409836][ T9335] __nla_validate_parse: 1 callbacks suppressed [ 215.409856][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1038'. [ 215.653442][ T9348] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 215.740673][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 215.850985][ T9355] Set syz1 is full, maxelem 0 reached [ 216.193957][ T9372] Set syz1 is full, maxelem 0 reached [ 216.305874][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 216.333293][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 216.418664][ T9375] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 216.450299][ T9382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'. [ 216.795469][ T9394] Set syz1 is full, maxelem 0 reached [ 216.819988][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 216.820007][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 216.820051][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 216.826599][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 217.171653][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1062'. [ 217.195409][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1062'. [ 217.487186][ T9420] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1065'. [ 217.712713][ T30] audit: type=1107 audit(1748697173.388:2): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 217.774404][ T9428] xt_CT: No such helper "pptp" [ 218.047363][ T9448] Set syz1 is full, maxelem 0 reached [ 218.094451][ T9450] xt_hashlimit: max too large, truncated to 1048576 [ 218.139704][ T9450] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 218.179029][ T9453] xt_TCPMSS: Only works on TCP SYN packets [ 218.414697][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 218.449957][ T9462] 8021q: VLANs not supported on ip6_vti0 [ 218.576063][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 218.920598][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 219.631237][ T9491] Set syz1 is full, maxelem 0 reached [ 219.858838][ T8702] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 219.909239][ T9499] xt_hashlimit: size too large, truncated to 1048576 [ 220.495499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.540112][ T9514] Set syz1 is full, maxelem 0 reached [ 220.700862][ T9518] __nla_validate_parse: 1 callbacks suppressed [ 220.700882][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 220.777122][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 220.807614][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 221.180953][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 221.238514][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 221.265412][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 221.351286][ T9539] 8021q: adding VLAN 0 to HW filter on device team1 [ 221.367401][ T9540] hsr0: left promiscuous mode [ 221.372519][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 221.386315][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'. [ 221.481238][ T9549] syzkaller0: create flow: hash 2573580063 index 1 [ 221.551374][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 221.647985][ T8696] syzkaller0: tun_net_xmit 76 [ 221.653178][ T8696] syzkaller0: tun_net_xmit 48 [ 221.660080][ T9541] syzkaller0: delete flow: hash 2573580063 index 1 [ 221.933895][ T9568] Set syz1 is full, maxelem 0 reached [ 223.381968][ T9570] bridge2: entered promiscuous mode [ 223.392065][ T9570] bridge2: entered allmulticast mode [ 223.587318][ T9578] netlink: 'syz.4.1111': attribute type 5 has an invalid length. [ 223.796615][ T9587] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1112'. [ 223.842058][ T9587] 0ªX¹¦D: renamed from gretap0 [ 223.868688][ T9587] 0ªX¹¦D: entered allmulticast mode [ 223.886614][ T9587] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 224.336118][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 224.457851][ T9612] Set syz1 is full, maxelem 0 reached [ 224.900281][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 224.958648][ T9620] netlink: 'syz.2.1123': attribute type 303 has an invalid length. [ 225.107835][ T9638] tipc: New replicast peer: 10.1.1.0 [ 225.126667][ T9638] tipc: Enabled bearer , priority 10 [ 225.343585][ T9620] syz.2.1123 (9620) used greatest stack depth: 17992 bytes left [ 225.381956][ T9653] Set syz1 is full, maxelem 0 reached [ 225.403276][ T9651] syzkaller1: entered promiscuous mode [ 225.427734][ T9651] syzkaller1: entered allmulticast mode [ 225.475849][ T9651] syzkaller1: left promiscuous mode [ 225.500021][ T9651] syzkaller1: left allmulticast mode [ 225.606614][ T9664] Set syz1 is full, maxelem 0 reached [ 225.845758][ T9673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.854061][ T9673] batadv_slave_1: entered promiscuous mode [ 226.298589][ T9684] syzkaller0: entered promiscuous mode [ 226.323533][ T9684] syzkaller0: entered allmulticast mode [ 226.347545][ T9685] netlink: 'syz.0.1140': attribute type 6 has an invalid length. [ 226.887881][ T9694] Set syz1 is full, maxelem 0 reached [ 228.937548][ T9741] __nla_validate_parse: 4 callbacks suppressed [ 228.937571][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 229.179552][ T9744] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50406 - 0 [ 229.209825][ T9744] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50406 - 0 [ 229.236742][ T9744] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50406 - 0 [ 229.261017][ T9744] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50406 - 0 [ 229.279290][ T9744] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 33808 - 0 [ 229.297657][ T9744] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 33808 - 0 [ 229.335442][ T9744] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 33808 - 0 [ 229.377846][ T9744] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 33808 - 0 [ 229.403721][ T9744] geneve3: entered promiscuous mode [ 229.429010][ T9744] geneve3: entered allmulticast mode [ 229.734797][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 229.762262][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1167'. [ 229.874298][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 229.884780][ T9782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1167'. [ 230.099309][ T5889] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.107259][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 230.134142][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.141907][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.156135][ T9791] bridge0: entered allmulticast mode [ 230.208147][ T9791] bridge_slave_1: left allmulticast mode [ 230.225635][ T9791] bridge_slave_1: left promiscuous mode [ 230.232790][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.262884][ T9791] bridge_slave_0: left allmulticast mode [ 230.270740][ T9791] bridge_slave_0: left promiscuous mode [ 230.281423][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.738641][ T1100] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 231.164657][ T9812] delete_channel: no stack [ 231.619649][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 231.933856][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 231.969835][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 232.012776][ T9837] batadv_slave_0: left allmulticast mode [ 232.204868][ T9845] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 232.414188][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.432506][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.440861][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.451206][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.462504][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.671950][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 232.729643][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 232.804850][ T9872] Set syz1 is full, maxelem 0 reached [ 232.993897][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 233.040454][ T9880] ipvlan2: entered promiscuous mode [ 233.678095][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 234.019082][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.047844][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.055104][ T9848] bridge_slave_0: entered allmulticast mode [ 234.088294][ T9848] bridge_slave_0: entered promiscuous mode [ 234.148090][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.192558][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.207739][ T9848] bridge_slave_1: entered allmulticast mode [ 234.224190][ T9848] bridge_slave_1: entered promiscuous mode [ 234.239716][ T9932] netlink: 'syz.3.1210': attribute type 27 has an invalid length. [ 234.333106][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.402593][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.498725][ T5855] Bluetooth: hci3: command tx timeout [ 234.604378][ T9848] team0: Port device team_slave_0 added [ 234.654735][ T9848] team0: Port device team_slave_1 added [ 234.706557][ T9946] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 234.731505][ T9946] __nla_validate_parse: 1 callbacks suppressed [ 234.731523][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1218'. [ 234.763691][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.770963][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.798443][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.814240][ T9946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.829208][ T9946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.838203][ T9946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.847063][ T9946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.870397][ T9946] team0: Port device geneve0 added [ 234.923389][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.934422][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.965057][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.108310][ T9848] hsr_slave_0: entered promiscuous mode [ 235.120096][ T9848] hsr_slave_1: entered promiscuous mode [ 235.128270][ T9848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.137545][ T9848] Cannot create hsr debugfs directory [ 235.218280][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 235.276274][ T9957] Set syz1 is full, maxelem 0 reached [ 235.501783][ T9848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.531268][ T9848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.707661][ T9848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.722263][ T9848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.859333][ T9848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.865505][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.888251][ T9848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.029299][ T9848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.039838][ T9848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.276851][ T9990] Set syz1 is full, maxelem 0 reached [ 236.347177][ T9993] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 236.406421][ T9973] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1228'. [ 236.424295][ T9993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.463092][ T9992] netpci0: tun_chr_ioctl cmd 1074025681 [ 236.498325][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 236.580968][ T5855] Bluetooth: hci3: command tx timeout [ 236.890543][ T9848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.938812][ T9848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.971786][ T9848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.028288][ T9848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.162752][T10019] veth2: entered allmulticast mode [ 237.198384][T10019] veth3: entered promiscuous mode [ 237.269387][T10019] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1239'. [ 237.311136][T10028] Set syz1 is full, maxelem 0 reached [ 237.390648][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.473036][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.493569][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.500825][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.557292][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.564504][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.668845][ T9848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.719004][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 237.769692][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1250'. [ 237.815480][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 237.842566][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1250'. [ 237.877906][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 238.109078][T10066] Bluetooth: MGMT ver 1.23 [ 238.227525][T10073] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1258'. [ 238.230519][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.655749][ T5855] Bluetooth: hci3: command tx timeout [ 238.869948][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 239.021885][ T9848] veth0_vlan: entered promiscuous mode [ 239.042653][ T9848] veth1_vlan: entered promiscuous mode [ 239.114052][ T9848] veth0_macvtap: entered promiscuous mode [ 239.131737][ T9848] veth1_macvtap: entered promiscuous mode [ 239.177336][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.198162][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.232077][ T9848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.251706][ T9848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.275410][ T9848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.284353][ T9848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.399712][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.419964][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.505607][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.529407][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.672029][T10110] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.931742][T10120] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 239.948195][T10120] netlink: 'syz.0.1274': attribute type 4 has an invalid length. [ 239.975422][T10120] __nla_validate_parse: 1 callbacks suppressed [ 239.975440][T10120] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1274'. [ 240.013837][T10111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1270'. [ 240.062989][T10122] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 240.075687][T10122] netlink: 'syz.0.1274': attribute type 4 has an invalid length. [ 240.120785][T10122] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1274'. [ 240.140061][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.148884][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.161070][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.170044][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.183923][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.339102][ T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 240.383136][T10130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1277'. [ 240.609509][T10135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.696343][T10139] syzkaller0: entered promiscuous mode [ 240.701888][T10139] syzkaller0: entered allmulticast mode [ 240.891093][T10148] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 240.991820][ T8702] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 241.737920][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.751331][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.778133][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.800786][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.819677][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.257558][ T8702] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 242.264866][ T5846] Bluetooth: hci1: command tx timeout [ 242.923149][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.022634][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.240754][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.345579][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 243.483729][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.836458][T10123] chnl_net:caif_netlink_parms(): no params data found [ 243.856214][ T5846] Bluetooth: hci3: command tx timeout [ 244.335758][ T5846] Bluetooth: hci1: command tx timeout [ 244.542834][T10201] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.585082][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.592769][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.601096][T10123] bridge_slave_0: entered allmulticast mode [ 244.609329][T10123] bridge_slave_0: entered promiscuous mode [ 244.634915][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.644723][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.652533][T10123] bridge_slave_1: entered allmulticast mode [ 244.661003][T10123] bridge_slave_1: entered promiscuous mode [ 244.694741][ T49] bridge_slave_1: left allmulticast mode [ 244.702813][ T49] bridge_slave_1: left promiscuous mode [ 244.709523][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.721693][ T49] bridge_slave_0: left allmulticast mode [ 244.727780][ T49] bridge_slave_0: left promiscuous mode [ 244.733496][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.102689][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.115365][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.126421][ T49] bond0 (unregistering): Released all slaves [ 245.157332][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.198653][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.329199][T10123] team0: Port device team_slave_0 added [ 245.342581][T10123] team0: Port device team_slave_1 added [ 245.469861][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.469944][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 245.482221][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.526017][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.539591][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.546828][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.573701][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.941395][ T5846] Bluetooth: hci3: command tx timeout [ 246.186071][T10123] hsr_slave_0: entered promiscuous mode [ 246.193435][T10123] hsr_slave_1: entered promiscuous mode [ 246.207264][T10123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.215087][T10123] Cannot create hsr debugfs directory [ 246.271948][T10160] chnl_net:caif_netlink_parms(): no params data found [ 246.405453][ T49] hsr_slave_0: left promiscuous mode [ 246.413002][ T49] hsr_slave_1: left promiscuous mode [ 246.425405][ T5846] Bluetooth: hci1: command tx timeout [ 246.432453][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.441283][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.459630][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.475389][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.534083][ T49] veth1_macvtap: left promiscuous mode [ 246.540245][ T49] veth0_macvtap: left promiscuous mode [ 246.546101][ T49] veth1_vlan: left promiscuous mode [ 246.551579][ T49] veth0_vlan: left promiscuous mode [ 246.735966][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.736111][ T1100] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 247.149629][ T49] team0 (unregistering): Port device team_slave_1 removed [ 247.188669][ T49] team0 (unregistering): Port device team_slave_0 removed [ 248.015933][ T5846] Bluetooth: hci3: command tx timeout [ 248.028859][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 248.050492][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.065117][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.083816][T10160] bridge_slave_0: entered allmulticast mode [ 248.096977][T10160] bridge_slave_0: entered promiscuous mode [ 248.112994][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.121402][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.139898][T10160] bridge_slave_1: entered allmulticast mode [ 248.149732][T10160] bridge_slave_1: entered promiscuous mode [ 248.276866][T10160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.304713][T10160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.404806][T10160] team0: Port device team_slave_0 added [ 248.451158][T10160] team0: Port device team_slave_1 added [ 248.495415][ T5846] Bluetooth: hci1: command tx timeout [ 248.583237][T10123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.610167][T10123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50406 - 0 [ 248.640246][T10123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 33808 - 0 [ 248.669351][T10160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.676707][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.704758][T10160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.728361][T10160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.740225][T10160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.771602][T10160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.785664][T10267] block nbd0: server does not support multiple connections per device. [ 248.794447][T10267] block nbd0: shutting down sockets [ 248.920178][T10123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.945310][T10123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50406 - 0 [ 248.962839][T10123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 33808 - 0 [ 248.994344][T10274] veth2: left allmulticast mode [ 249.006290][T10274] veth3: left promiscuous mode [ 249.114196][T10123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.135643][T10123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50406 - 0 [ 249.149290][T10123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 33808 - 0 [ 249.169830][T10285] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1319'. [ 249.306858][T10123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.342261][T10123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50406 - 0 [ 249.361298][T10123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 33808 - 0 [ 249.428425][T10160] hsr_slave_0: entered promiscuous mode [ 249.446682][T10160] hsr_slave_1: entered promiscuous mode [ 249.453203][T10160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.478559][T10160] Cannot create hsr debugfs directory [ 249.688435][T10123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.717839][T10123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.739320][T10314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.771236][T10123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.814117][T10123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.863680][T10319] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 249.877790][T10319] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 249.887327][T10319] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 249.901054][T10319] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 249.925541][T10319] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 249.936832][T10319] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 249.944869][T10319] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 249.952854][T10319] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 249.959193][T10322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1333'. [ 249.983258][T10319] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 249.991472][T10319] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 250.011042][T10322] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1333'. [ 250.108398][ T5846] Bluetooth: hci3: command tx timeout [ 250.139920][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1334'. [ 250.173085][T10330] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 250.221762][T10123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.262557][T10123] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.297282][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.304478][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.393452][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.400700][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.440148][T10337] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1338'. [ 250.642848][T10160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.721014][T10160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.006815][T10160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.023312][T10160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.065455][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 251.233831][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1347'. [ 251.318112][T10123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.386813][T10160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.453524][T10160] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.483840][T10123] veth0_vlan: entered promiscuous mode [ 251.500576][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.507908][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.550135][T10123] veth1_vlan: entered promiscuous mode [ 251.589853][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.597127][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.738583][T10123] veth0_macvtap: entered promiscuous mode [ 251.762233][T10389] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1352'. [ 251.763997][T10123] veth1_macvtap: entered promiscuous mode [ 251.819686][T10123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.842861][T10123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.860988][T10123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.869979][T10123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.880665][T10123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.891319][T10123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.059620][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.080722][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.161918][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.184600][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.273026][T10160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.503218][ T49] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 253.001425][T10422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1359'. [ 253.710110][T10160] veth0_vlan: entered promiscuous mode [ 253.794127][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 253.904905][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.961295][T10160] veth1_vlan: entered promiscuous mode [ 254.053941][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.127831][T10160] veth0_macvtap: entered promiscuous mode [ 254.139352][T10160] veth1_macvtap: entered promiscuous mode [ 254.212478][T10160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.368608][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.447323][T10160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.481447][T10160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.506080][T10160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.514987][T10160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.524298][T10160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.618352][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.682479][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 254.713994][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 254.970037][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 255.017711][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.038043][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.051384][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.060765][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.085969][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.176224][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.196525][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.241249][T10473] Set syz1 is full, maxelem 0 reached [ 255.280301][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 255.326053][T10477] vlan3: entered promiscuous mode [ 255.331146][T10477] erspan0: entered promiscuous mode [ 255.369769][ T1100] bridge_slave_1: left allmulticast mode [ 255.377826][ T1100] bridge_slave_1: left promiscuous mode [ 255.384499][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.395958][ T1100] bridge_slave_0: left allmulticast mode [ 255.402674][ T1100] bridge_slave_0: left promiscuous mode [ 255.411637][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.702715][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.800914][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.812716][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.827486][ T1100] bond0 (unregistering): Released all slaves [ 255.842796][T10476] syzkaller1: entered promiscuous mode [ 255.848562][T10476] syzkaller1: entered allmulticast mode [ 255.864295][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.884870][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.400090][T10495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1376'. [ 256.754386][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 256.806296][T10503] validate_nla: 121 callbacks suppressed [ 256.806331][T10503] netlink: 'syz.1.1379': attribute type 10 has an invalid length. [ 256.829412][T10505] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1380'. [ 256.887041][ T1100] hsr_slave_0: left promiscuous mode [ 256.893125][ T1100] hsr_slave_1: left promiscuous mode [ 256.904846][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.913202][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.926289][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.942164][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.957440][T10508] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1379'. [ 256.988767][ T1100] veth1_macvtap: left promiscuous mode [ 256.994455][ T1100] veth0_macvtap: left promiscuous mode [ 257.000537][ T1100] veth1_vlan: left promiscuous mode [ 257.006190][ T1100] veth0_vlan: left promiscuous mode [ 257.136665][ T5846] Bluetooth: hci1: command tx timeout [ 257.527517][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.537248][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.549922][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.573467][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.585862][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.800117][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 257.842891][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 258.257596][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 258.397940][T10508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.409159][T10508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.422855][T10508] bond0 (unregistering): Released all slaves [ 258.621374][T10467] chnl_net:caif_netlink_parms(): no params data found [ 258.670480][T10527] Set syz1 is full, maxelem 0 reached [ 258.914399][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 259.112148][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.132267][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.161440][T10467] bridge_slave_0: entered allmulticast mode [ 259.182683][T10467] bridge_slave_0: entered promiscuous mode [ 259.191874][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.214869][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.222420][ T5846] Bluetooth: hci1: command tx timeout [ 259.236985][T10467] bridge_slave_1: entered allmulticast mode [ 259.245213][T10467] bridge_slave_1: entered promiscuous mode [ 259.401068][T10467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.454467][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.488555][T10467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.554322][ T6484] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 259.601338][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.652323][T10467] team0: Port device team_slave_0 added [ 259.671983][T10467] team0: Port device team_slave_1 added [ 259.711347][ T5846] Bluetooth: hci3: command tx timeout [ 259.723659][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.806522][T10467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.813844][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.847593][T10467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.941305][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.964971][T10467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.974552][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.005474][T10467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.066756][ T30] audit: type=1800 audit(1748697215.778:3): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1399" name="memory.events" dev="tmpfs" ino=1473 res=0 errno=0 [ 260.197817][T10581] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.253995][T10467] hsr_slave_0: entered promiscuous mode [ 260.284658][T10467] hsr_slave_1: entered promiscuous mode [ 260.302249][T10467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.325109][T10467] Cannot create hsr debugfs directory [ 260.349155][T10518] chnl_net:caif_netlink_parms(): no params data found [ 260.403667][T10583] macsec2: entered promiscuous mode [ 260.409028][T10583] macsec2: entered allmulticast mode [ 260.669066][ T1100] bridge_slave_1: left allmulticast mode [ 260.675221][ T1100] bridge_slave_1: left promiscuous mode [ 260.681519][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.691648][ T1100] bridge_slave_0: left allmulticast mode [ 260.698473][ T1100] bridge_slave_0: left promiscuous mode [ 260.704367][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.162617][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.176483][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.189817][ T1100] bond0 (unregistering): Released all slaves [ 261.299941][ T5846] Bluetooth: hci1: command tx timeout [ 261.340157][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.349953][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.381850][T10518] bridge_slave_0: entered allmulticast mode [ 261.397635][T10518] bridge_slave_0: entered promiscuous mode [ 261.418502][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.428372][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.436197][T10518] bridge_slave_1: entered allmulticast mode [ 261.443711][T10518] bridge_slave_1: entered promiscuous mode [ 261.775703][ T5846] Bluetooth: hci3: command tx timeout [ 261.814334][T10518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.851996][T10627] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 261.898891][T10518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.932016][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 261.977812][T10627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.252357][T10641] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1419'. [ 262.300206][T10518] team0: Port device team_slave_0 added [ 262.331718][T10639] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 262.424011][T10518] team0: Port device team_slave_1 added [ 262.508706][ T1100] hsr_slave_0: left promiscuous mode [ 262.523963][ T1100] hsr_slave_1: left promiscuous mode [ 262.532735][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.565438][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.603442][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.623279][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.674870][ T1100] veth1_macvtap: left promiscuous mode [ 262.687393][ T1100] veth0_macvtap: left promiscuous mode [ 262.693132][ T1100] veth1_vlan: left promiscuous mode [ 262.703153][ T1100] veth0_vlan: left promiscuous mode [ 263.190570][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 263.235984][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 263.376455][ T5846] Bluetooth: hci1: command tx timeout [ 263.746781][T10518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.753952][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.813270][T10518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.835057][T10518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.844052][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.871363][ T5846] Bluetooth: hci3: command tx timeout [ 263.883019][T10518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.008260][T10518] hsr_slave_0: entered promiscuous mode [ 264.021374][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 264.030577][T10518] hsr_slave_1: entered promiscuous mode [ 264.037961][T10518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.055996][T10518] Cannot create hsr debugfs directory [ 264.171592][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'. [ 264.182363][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'. [ 264.204236][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'. [ 264.213621][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'. [ 264.320828][T10467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.333903][T10467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.352577][T10688] netlink: 'syz.0.1432': attribute type 4 has an invalid length. [ 264.380012][T10467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.422273][T10467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.828824][T10467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.892459][T10467] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.911513][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.919784][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.970997][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.978197][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.068386][T10467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.208075][T10703] netlink: 'syz.1.1436': attribute type 4 has an invalid length. [ 265.296772][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 265.417816][T10518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.535377][T10518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.579299][T10518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.676454][T10518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.759594][T10467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.936291][ T5846] Bluetooth: hci3: command tx timeout [ 266.045192][T10467] veth0_vlan: entered promiscuous mode [ 266.084740][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.132748][T10467] veth1_vlan: entered promiscuous mode [ 266.221847][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.297567][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.304766][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.323041][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.330269][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.363728][T10467] veth0_macvtap: entered promiscuous mode [ 266.403327][T10467] veth1_macvtap: entered promiscuous mode [ 266.529831][T10467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.575497][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.597282][T10467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.650868][T10467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.679480][T10467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.705583][T10467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.734877][T10467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.007067][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.025834][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.125179][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.154014][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.243359][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.947368][T10518] veth0_vlan: entered promiscuous mode [ 268.215923][ T8696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.317904][T10518] veth1_vlan: entered promiscuous mode [ 268.406380][ T8696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.453930][T10757] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 268.473839][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1450'. [ 268.498901][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 268.537826][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 268.622590][ T8696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.661927][T10757] 8021q: VLANs not supported on nlmon0 [ 268.788499][ T8696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.866028][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 269.044520][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.062457][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.071216][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.081852][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.091508][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.091989][T10518] veth0_macvtap: entered promiscuous mode [ 269.139650][T10518] veth1_macvtap: entered promiscuous mode [ 269.207281][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.261925][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.378600][T10518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.390728][T10518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.399797][T10518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.411272][T10518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.502108][ T8696] bridge_slave_1: left allmulticast mode [ 269.510336][ T8696] bridge_slave_1: left promiscuous mode [ 269.526032][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.538341][ T8696] bridge_slave_0: left allmulticast mode [ 269.544200][ T8696] bridge_slave_0: left promiscuous mode [ 269.572852][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.804855][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 270.097050][ T8696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.109528][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.121260][ T8696] bond0 (unregistering): Released all slaves [ 270.573139][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.598215][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.641832][T10798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 270.728886][T10795] netlink: 'syz.0.1461': attribute type 3 has an invalid length. [ 270.940217][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.950770][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.027694][ T8696] hsr_slave_0: left promiscuous mode [ 271.048657][ T8696] hsr_slave_1: left promiscuous mode [ 271.054832][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.067720][ T6483] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 271.095986][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.131908][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.173309][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.222332][ T5855] Bluetooth: hci1: command tx timeout [ 271.250231][ T8696] veth1_macvtap: left promiscuous mode [ 271.258267][ T8696] veth0_macvtap: left promiscuous mode [ 271.264244][ T8696] veth1_vlan: left promiscuous mode [ 271.270279][ T8696] veth0_vlan: left promiscuous mode [ 271.512588][T10811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1464'. [ 271.921261][ T8696] team0 (unregistering): Port device team_slave_1 removed [ 271.974718][ T8696] team0 (unregistering): Port device team_slave_0 removed [ 272.459403][T10807] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 272.718246][T10771] chnl_net:caif_netlink_parms(): no params data found [ 272.771904][T10822] netdevsim netdevsim3: Direct firmware load for .Q failed with error -2 [ 272.802777][T10823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1466'. [ 272.814352][T10822] netdevsim netdevsim3: Falling back to sysfs fallback for: .Q [ 273.031258][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.065586][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.101168][T10771] bridge_slave_0: entered allmulticast mode [ 273.170150][T10771] bridge_slave_0: entered promiscuous mode [ 273.237931][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.260536][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.268968][T10771] bridge_slave_1: entered allmulticast mode [ 273.281408][T10771] bridge_slave_1: entered promiscuous mode [ 273.306475][ T5855] Bluetooth: hci1: command tx timeout [ 273.342424][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.370404][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.422597][T10771] team0: Port device team_slave_0 added [ 273.437624][T10771] team0: Port device team_slave_1 added [ 273.522069][ T8696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.564377][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.572152][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.604095][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.756937][ T8696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.813967][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.834410][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.894377][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.008524][ T8696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.173586][ T8696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.200839][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.211274][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.221127][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.230488][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.241311][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.276758][T10771] hsr_slave_0: entered promiscuous mode [ 274.283912][T10771] hsr_slave_1: entered promiscuous mode [ 274.300345][T10771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.309218][T10771] Cannot create hsr debugfs directory [ 274.317017][T10839] sctp: [Deprecated]: syz.3.1471 (pid 10839) Use of int in maxseg socket option. [ 274.317017][T10839] Use struct sctp_assoc_value instead [ 274.648122][ T8696] bridge_slave_1: left allmulticast mode [ 274.653835][ T8696] bridge_slave_1: left promiscuous mode [ 274.670673][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.720607][ T8696] bridge_slave_0: left allmulticast mode [ 274.737067][ T8696] bridge_slave_0: left promiscuous mode [ 274.760342][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.379201][ T5855] Bluetooth: hci1: command tx timeout [ 275.392601][ T8696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.404335][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.415196][ T8696] bond0 (unregistering): Released all slaves [ 275.539171][ T1100] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 275.686174][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 276.243515][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.253674][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.257097][ T5855] Bluetooth: hci3: command tx timeout [ 276.314588][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.493727][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.515690][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.574901][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.596402][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.617402][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 276.781308][ T8696] hsr_slave_0: left promiscuous mode [ 276.792656][ T8696] hsr_slave_1: left promiscuous mode [ 276.801503][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.810969][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.818551][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 276.834211][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.845316][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.874238][ T8696] veth1_macvtap: left promiscuous mode [ 276.886651][ T8696] veth0_macvtap: left promiscuous mode [ 276.892277][ T8696] veth1_vlan: left promiscuous mode [ 276.898376][ T8696] veth0_vlan: left promiscuous mode [ 277.344256][ T8696] team0 (unregistering): Port device team_slave_1 removed [ 277.391759][ T8696] team0 (unregistering): Port device team_slave_0 removed [ 277.455663][ T5855] Bluetooth: hci1: command tx timeout [ 277.789014][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1482'. [ 278.078693][T10771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.123042][T10836] chnl_net:caif_netlink_parms(): no params data found [ 278.165727][T10771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.296695][T10771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.365315][ T5855] Bluetooth: hci3: command tx timeout [ 278.391272][T10900] netlink: 'syz.3.1487': attribute type 5 has an invalid length. [ 278.442885][T10771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.781605][T10836] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.830289][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.856241][T10836] bridge_slave_0: entered allmulticast mode [ 278.874811][T10836] bridge_slave_0: entered promiscuous mode [ 278.958981][T10836] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.977424][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.984727][T10836] bridge_slave_1: entered allmulticast mode [ 279.032973][T10836] bridge_slave_1: entered promiscuous mode [ 279.840549][T10923] netlink: 'syz.1.1494': attribute type 303 has an invalid length. [ 279.915706][T10836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.298361][T10931] tc_dump_action: action bad kind [ 280.332952][T10836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.415829][ T5855] Bluetooth: hci3: command tx timeout [ 280.436582][T10923] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 280.511813][T10923] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 280.543762][T10923] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 280.637995][T10836] team0: Port device team_slave_0 added [ 280.660329][ T8696] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 280.692409][T10836] team0: Port device team_slave_1 added [ 280.978706][T10950] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 280.989722][T10836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.997281][T10836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.083500][T10836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.116653][T10957] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 281.155104][T10957] __nla_validate_parse: 2 callbacks suppressed [ 281.155124][T10957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1498'. [ 281.234592][T10836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.272671][T10836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.322080][T10836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.349166][T10957] batman_adv: batadv0: Adding interface: virt_wifi0 [ 281.363093][T10957] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.440783][T10957] batman_adv: batadv0: Interface activated: virt_wifi0 [ 281.457596][T10964] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1501'. [ 281.698631][T10964] 0ªX¹¦D: renamed from gretap0 [ 281.711599][T10964] 0ªX¹¦D: entered allmulticast mode [ 281.767608][T10964] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 281.820180][T10771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.935058][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'. [ 281.945426][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 281.952751][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 282.461165][T10771] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.496183][ T5855] Bluetooth: hci3: command tx timeout [ 282.524847][T10836] hsr_slave_0: entered promiscuous mode [ 282.656682][T10836] hsr_slave_1: entered promiscuous mode [ 282.679264][T10836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.725823][T10836] Cannot create hsr debugfs directory [ 283.218953][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.226263][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.287847][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.295049][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.363798][T10999] tipc: New replicast peer: 255.255.255.255 [ 283.376746][T10999] tipc: Enabled bearer , priority 10 [ 283.405792][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 283.436101][T11001] tipc: Disabling bearer [ 284.678080][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 285.056459][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1514'. [ 285.545085][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 285.866710][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.149084][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 286.253480][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 286.298012][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'. [ 286.353953][T10771] veth0_vlan: entered promiscuous mode [ 286.394083][T10836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.418741][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 286.429136][ T49] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 286.505416][T10836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.558942][T10771] veth1_vlan: entered promiscuous mode [ 286.599375][T10836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.642549][T11060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1523'. [ 286.664400][T10836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.743606][T11059] bridge2: entered promiscuous mode [ 286.941884][T10771] veth0_macvtap: entered promiscuous mode [ 287.023265][T10771] veth1_macvtap: entered promiscuous mode [ 287.170173][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.270337][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.356042][T10771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.401315][T10771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.445573][T10771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.454430][T10771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.701105][ T64] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 287.967261][T10836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.231211][T10836] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.272610][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.339311][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.392613][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.399888][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.506282][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 288.562995][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.570258][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.682203][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.737577][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.346762][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1538'. [ 289.384950][T11107] netlink: del zone limit has 4 unknown bytes [ 290.261581][T10836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.171251][T11154] netlink: 'syz.0.1545': attribute type 2 has an invalid length. [ 291.202323][T11154] netlink: 'syz.0.1545': attribute type 1 has an invalid length. [ 291.261579][T11154] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1545'. [ 291.390897][T11154] x_tables: duplicate underflow at hook 3 [ 291.432281][ T6484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.542942][T11143] syzkaller0: entered promiscuous mode [ 291.549269][T11143] syzkaller0: entered allmulticast mode [ 291.585922][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 291.592330][ C0] CPU: 0 UID: 0 PID: 11156 Comm: modprobe Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 291.603906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.613988][ C0] RIP: 0010:llc_ui_setsockopt+0x3a2/0x5f0 [ 291.619734][ C0] Code: 00 e8 32 45 55 f8 41 be ea ff ff ff e9 83 01 00 00 e8 22 45 55 f8 41 be a4 ff ff ff e9 73 01 00 00 e8 12 45 55 f8 4d 8d b7 08 <07> 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 84 a2 00 00 [ 291.639374][ C0] RSP: 0018:ffffc90000007b98 EFLAGS: 00010246 [ 291.645475][ C0] RAX: ffffffff81adc4b5 RBX: 0000000000000801 RCX: ffff88801c3f9e00 [ 291.653568][ C0] RDX: 0000000000000100 RSI: ffffffff8be263e0 RDI: ffff8880493b5410 [ 291.661568][ C0] RBP: ffffc90000007c90 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 291.669565][ C0] R10: dffffc0000000000 R11: ffffffff896ab5e0 R12: 1ffff92000000f78 [ 291.677570][ C0] R13: ffff8880493b5410 R14: 0000000000000001 R15: 0000000000000000 [ 291.685564][ C0] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 291.694521][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.701126][ C0] CR2: 00007ff0d0a43e9c CR3: 000000007f194000 CR4: 00000000003526f0 [ 291.709128][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.717141][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.725133][ C0] Call Trace: [ 291.728447][ C0] [ 291.731311][ C0] ? call_timer_fn+0x17e/0x5f0 [ 291.736119][ C0] ? llc_ui_setsockopt+0x3a0/0x5f0 [ 291.741254][ C0] ? call_timer_fn+0xbe/0x5f0 [ 291.746048][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 291.751194][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.756417][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.761651][ C0] ? llc_ui_setsockopt+0x3a0/0x5f0 [ 291.766875][ C0] __run_timer_base+0x61a/0x860 [ 291.771748][ C0] ? ktime_get+0x3e/0x1f0 [ 291.776104][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 291.781504][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 291.787875][ C0] run_timer_softirq+0xb7/0x180 [ 291.792761][ C0] handle_softirqs+0x286/0x870 [ 291.797561][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 291.802365][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 291.807687][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 291.812917][ C0] __irq_exit_rcu+0xca/0x1f0 [ 291.817540][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 291.822768][ C0] irq_exit_rcu+0x9/0x30 [ 291.827047][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 291.832728][ C0] [ 291.835691][ C0] [ 291.838643][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.844665][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 291.851198][ C0] Code: 74 05 e8 2b 61 61 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 03 77 2a f6 65 8b 05 0c 86 35 07 85 c0 74 40 48 c7 04 24 0e 36 [ 291.870832][ C0] RSP: 0018:ffffc90003a9f820 EFLAGS: 00000206 [ 291.876932][ C0] RAX: 13492951226e0300 RBX: 0000000000000a02 RCX: 13492951226e0300 [ 291.884921][ C0] RDX: 0000000000000006 RSI: ffffffff8d96be2f RDI: 0000000000000001 [ 291.892930][ C0] RBP: ffffc90003a9f8b0 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 291.900933][ C0] R10: dffffc0000000000 R11: fffffbfff1f41637 R12: dffffc0000000000 [ 291.908948][ C0] R13: 1ffff92000753f24 R14: ffffffff99c98b50 R15: 1ffff92000753f04 [ 291.916961][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.923328][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 291.929519][ C0] call_rcu+0xae/0x990 [ 291.933652][ C0] ? __pfx_call_rcu+0x10/0x10 [ 291.938373][ C0] ? exit_mmap+0x593/0xba0 [ 291.942866][ C0] kmem_cache_free+0x309/0x400 [ 291.947676][ C0] exit_mmap+0x593/0xba0 [ 291.951962][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 291.956888][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 291.962646][ C0] ? __pfx_exit_aio+0x10/0x10 [ 291.967368][ C0] ? uprobe_clear_state+0x274/0x290 [ 291.972604][ C0] __mmput+0x118/0x420 [ 291.976706][ C0] exit_mm+0x1da/0x2c0 [ 291.980813][ C0] ? __pfx_exit_mm+0x10/0x10 [ 291.985431][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 291.990930][ C0] ? rcu_is_watching+0x15/0xb0 [ 291.995746][ C0] do_exit+0x864/0x2550 [ 291.999932][ C0] ? do_raw_spin_lock+0x121/0x290 [ 292.004984][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 292.010392][ C0] ? __pfx_do_exit+0x10/0x10 [ 292.015023][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.020251][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.025485][ C0] do_group_exit+0x21c/0x2d0 [ 292.030118][ C0] __x64_sys_exit_group+0x3f/0x40 [ 292.035177][ C0] x64_sys_call+0x21ba/0x21c0 [ 292.039983][ C0] do_syscall_64+0xfa/0x3b0 [ 292.044521][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.049754][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.055850][ C0] ? clear_bhb_loop+0x60/0xb0 [ 292.060558][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.066475][ C0] RIP: 0033:0x7ff0d0ba26c5 [ 292.070927][ C0] Code: Unable to access opcode bytes at 0x7ff0d0ba269b. [ 292.078136][ C0] RSP: 002b:00007fff67556408 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 292.086599][ C0] RAX: ffffffffffffffda RBX: 00007ff0d0ca3fe8 RCX: 00007ff0d0ba26c5 [ 292.094604][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 292.102681][ C0] RBP: 0000000000000001 R08: 00007fff67556398 R09: 0000000000000000 [ 292.110668][ C0] R10: 00007fff67556230 R11: 0000000000000206 R12: 0000000000000000 [ 292.118660][ C0] R13: 0000000000000001 R14: 00007ff0d0ca2680 R15: 00007ff0d0ca4000 [ 292.126668][ C0] [ 292.129702][ C0] Modules linked in: [ 292.133790][ C0] ---[ end trace 0000000000000000 ]--- [ 292.139375][ C0] RIP: 0010:llc_ui_setsockopt+0x3a2/0x5f0 [ 292.145124][ C0] Code: 00 e8 32 45 55 f8 41 be ea ff ff ff e9 83 01 00 00 e8 22 45 55 f8 41 be a4 ff ff ff e9 73 01 00 00 e8 12 45 55 f8 4d 8d b7 08 <07> 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 84 a2 00 00 [ 292.164778][ C0] RSP: 0018:ffffc90000007b98 EFLAGS: 00010246 [ 292.170890][ C0] RAX: ffffffff81adc4b5 RBX: 0000000000000801 RCX: ffff88801c3f9e00 [ 292.178905][ C0] RDX: 0000000000000100 RSI: ffffffff8be263e0 RDI: ffff8880493b5410 [ 292.186917][ C0] RBP: ffffc90000007c90 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 292.194911][ C0] R10: dffffc0000000000 R11: ffffffff896ab5e0 R12: 1ffff92000000f78 [ 292.202929][ C0] R13: ffff8880493b5410 R14: 0000000000000001 R15: 0000000000000000 [ 292.210942][ C0] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 292.219947][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.226581][ C0] CR2: 00007ff0d0a43e9c CR3: 000000007f194000 CR4: 00000000003526f0 [ 292.234589][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.242619][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.250639][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 292.258187][ C0] Kernel Offset: disabled [ 292.262513][ C0] Rebooting in 86400 seconds..