last executing test programs: 2.580549201s ago: executing program 2 (id=4441): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pim6reg0\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7f, 0x7f, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x8}}, @datasec={0x8, 0x4, 0x0, 0xf, 0x3, [{0x3, 0x8, 0x4}, {0x3, 0xfc1, 0x1}, {0x2, 0x7fff, 0xa7fe}, {0x2, 0x7fffffff, 0x8}], "c519b4"}, @var={0x4, 0x0, 0x0, 0xe, 0x3}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @const={0x10, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000280)=""/194, 0x9d, 0xc2, 0x0, 0x1}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="d68edfd2b219cc740000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="010000000200"/28], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000009c0)={0x28, r4, 0xa16, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x28}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000740)={r8, @in={{0x2, 0x4e24, @multicast1}}, [0x7f11, 0x1d95, 0x400, 0x101, 0x140000000000, 0x80, 0x5ed, 0x9, 0x6, 0x9, 0x1, 0x4, 0x6, 0x9]}, &(0x7f0000000840)=0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = socket(0x40000000015, 0x5, 0x0) connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r12, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) close(r13) sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$SIOCGETVIFCNT(r12, 0x89e0, &(0x7f0000000140)) connect$phonet_pipe(r11, &(0x7f000000a940)={0x23, 0x9, 0xfd, 0x82}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000e00000000892a27f3000013e3b0ebe1b600"/36, @ANYRES32=r9, @ANYBLOB="00000000000000005a821800f1ffffff8520000001000000180000000800000000000000a2bb446d"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x5e, &(0x7f0000000100)=""/94, 0x100, 0x5, '\x00', r0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x8, 0x9e, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0xffffffffffffffff, r9, r2, r9], &(0x7f0000000600)=[{0x5, 0x1, 0x10}, {0x5, 0x3, 0xd, 0x3}, {0x5, 0x2, 0x5, 0x1}, {0x2, 0x3, 0xe, 0x9}, {0x10000, 0x5, 0x7}], 0x10, 0x4a0e699b}, 0x94) 2.453142322s ago: executing program 2 (id=4443): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) sendmsg$netlink(r2, 0x0, 0x20000800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10000008}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r7, &(0x7f0000004f80)=[{{&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x400}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="3bb668d1a4d7f2d714589171a8409131245997068e33017e0a1309f0222701ffe36efa39f5c3d90fce15bb24e7aa005b9136ed0d03131f517fa133d4aacfedea4fb76e7e7082ceadcb6f65cef056a66307d0a6a538b009a7f9deb4f43003f89b0a35ca512a8e600908bb9c79c12a830ab66052698746d60398669dfff8b48a473c93077bac7643", 0x87}, {&(0x7f0000000540)="0d4e822e4c680f62949b8da9960ffee840265c8fd5a22b762fb8c859f31fe6543832c1bd4d7968cff86fd35cd0e9ecf8c75b08fe2d5191a6c6c1f4f8ac0080f2c5687753108f3cee51f7cb478a81e2701bfd0bb465d6670eb1da99dd88a55d3ab8634705e4bb3ca678721552ec34dde037cbe61f2765ce759e9ad4422d928c33f72c7f999449ca76399078b8ffafee8e353a5d2cacdf41ed9f6d96e745ea992572fbae0eaa6d", 0xa6}, {&(0x7f0000000180)="e7b99098b1a2e154c15578c3ded157e54018c1eb2d8c7c8ff81ceb860ba3f5455ccbbcb7f2001e1207fd12291f3346b343a55f5efb8b789f396bd48478aa15f50d38bc8a3bb07b66b0d2eea087fac4df0eba9cec645418f81bbc", 0x5a}, {&(0x7f0000000600)="0638a029901dfed76993e4561f006ebd4aa7a7e72527740046d8299c814fbca68298078046c48b8b094e93af80089fb0cdfc7d2cf976fa5b6bbce7cb40f96e12cfbeac80a6c81dbb7f659ca771347cc47c97720df712e5339c1e0f482764d431d514b47d2ee814a311bc1420ac1ae20fd3a3940b11e213fa7677a6a60b1aae9484e86233db38bc256a749d0d14e00cbb940f2a24769fc8a35e6fb0e5cb15d9744908645da505086c225d7be839d4150721d985d1ecbe84f250eb2f1a982c11c744b7870f4300a625a98c0292a68472c1c10cc7ea34be93cc4a9190", 0xdb}, {&(0x7f0000000700)="444e79cb4c4276a7dd680e9569c1606dd368e6a54febd011cc58516b9f4d5bd34a31bee8d1e221d9ee6b0688eda3eba9aa6b9374b611ac5ecaca46ce61d4acc563758ef14ddf972fcf6edffbcc599f7aebc7dc4de9320ea6cd9447a5c855da0413561120650573cf7a92c209bcdf80ca41aba5d73958f7e931e4628cb31ed6be9d8c27113200b78e21e41bdc446cd8", 0x8f}], 0x5, &(0x7f0000000840)=[{0x110, 0x10c, 0x664b, "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"}, {0x28, 0x88, 0x80, "4163ae11498bf96fdf7eab61475cf70cdf623e36"}, {0xf8, 0x88, 0x4, "cb50204a44b8a2b4d84d49dee9ecdf1cf3fe085133bdca23c294206e62c155387912e64fd0bc22bcfb6cddd02d63f443a55d7c37d369d9792dc331e85316c89f162e940e96fea6f6aecd6238f6624c631f13df6bd7ccf10b669804c068b88fa076dee83227b5d40969caece512fc96591279c6ff5b135a69c0c522d8e6f5d210b36cea4b32b006eb28278e0132765a27c3053f61309c5c7a131eee2c245e620884ab9a1c5e39ef504094a6018dd93b2bbd2b33bbf134e9b0fcb16e8eac4af6ebd44ff990ca3958985d10224a0639bc9a57ad2841c1086ad91a8f9883ba0ada81ad8f86f7996e62"}, {0xf8, 0x1, 0x9, "94ba0ff8f5b712e0d373f2d5bd81ac626bdb5af5004078ba8addeabff2143740c33a512ea64556d2ae0be76a10fd121cab8d2a354f990f909a91266e0bc723b55034ee4ac8061192da66711c0d2e07ab0e3f4737c6a8ab29d2fd9e278f6073f743b6ce4bae2e830b0ff2d2809f4753598b14ff17eb465ec701c9f001ebb4729fb20b9298cf8f94cc57e87c36c197e1f43652b9612e9b127ffa84b4b823d9246c06dd7e7d8a50c06d54625c3e6b70f767663aade48b1d2969fb135db260779bebae662d93edba8068119f80be611ac9343894f62a2bda16a6c3d01fa935ee1ed5785c"}], 0x328}}, {{&(0x7f0000000b80)=@l2={0x1f, 0x46, @none, 0x1, 0x2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="d02d9d8d08a40dad244e0000efaeb0cc04ca0f2aa0bb65f05a258432a3381501b6b9fceda6ec2829f2f387cf9edff56a44d61c92f29313d54b2e35af06bb4c37f7b3e2ff9454ff81725812d3636a26148b707e7ef3a1b1bed3e649da26762cc3188dfa87ee6206d155eddbbe60bc3b5261dc48bce10f08f3e76f2cb257232d858502db4ebb8b8b01aa2816df2b043d3f706d26233aa8c9d5b0e2d8ca81c3f0530115", 0xa2}, {&(0x7f0000000c00)="81fe8ecf8c58be8bce8f0b46d21179d69683c16dbc7b154101ee79d4e18ee267f7244a55", 0x24}, {&(0x7f0000000d80)="54ba2d42fa38f00a84959bdbc89bb6157c45a28bc0c48eb1119ef80030eeb54df38ed6935c8742156825745f272e8add7c7fd1ba0f08e3eb41d12e2b68cdcb0c78630f5bd58b1fd177b8a0bf1bb2fa4af6db8200c59495498238187612a42cbeee3d90c22af87b04577f07b8c275ad92aa1f8c84f13c708bf57b322c15", 0x7d}, {&(0x7f0000000e00)="85889de1f107acd8b6a634d3f5642dcf5510cc91f0e5667ebf6c5b3c9cbda53bee5db6effe69bca0cc4435b5dd3c57ecbb73d8e6df8b129756f09fa3850ede37797ad97eb9734ca454cd1e66681c44230e33b04b7fb8a4eccbe6d29bd24e0a672bf4ba3309cf6022aaa88c0e80a10df806de271b1f46e9fdc0355e848a5ebe67cab4a0a185667a5d72fcc37c32d22c741536ae6395b4991fa6961496607c53d9eea1b2a9683e421901d10b4c628c2d20beebf53dce09", 0xb6}, {&(0x7f0000000c40)="918f707284e0eb55186a80203c9cd0a5c23a3fcbe98c2c27419748efccb54aac8e5f63903a5c2f3915b1fb5cc69e48195bda", 0x32}], 0x5, &(0x7f00000014c0)=[{0x1010, 0x108, 0x8, "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"}, {0x1010, 0x10f, 0x3, "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"}], 0x2020}}, {{&(0x7f0000000f40)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000fc0)="e4ea0cf0866fb9b285b8126738a08e89b97f7674e4725263a66115fc4bac2387263a85d03e77ccdcb7970ccac68389f15a420360523107a8bf6f30e33a", 0x3d}, {&(0x7f0000001000)="e257034790275477ee67fe68c2e0aaee9c068d57e5b12a1e726e865d18e79e0cac", 0x21}, {&(0x7f0000001040)="dbd7c89cac033cd3bd62bd6b6d781315a9f4ddfafa5ddeaa160e79626c2cb5ee575f8f38d9b60a124f0db068ab3d25ad73f3b2086f1a70073e004327881b4b7adf585182b661ec857f4a67eba2b784db14a871c746b254ec8654016bff039063f9c50e4a79185694e0222737f42816d862db0c9a88749b30663e44bfbc4d544b1d7e94024f64cdd4ea9d2071efccf8f192c8c83b7f9e0950a4082018d231c85cda18342b1dadad959fb50cb41c08ddc88e451db6e93ea703468e6b2bb59ee87af1ea91ebb9d3791529dcf302dc618e73342a4084a82fdacbf2acb679c7f05d", 0xdf}, {&(0x7f0000001140)}, {&(0x7f0000001240)="f5af55fe843298eaa19cd16c8e60e95b6c34db0f9ac578289fcf2eb6b56e28790550d7d6d1f0e66563adce6e1b17fc2e31cbaca26a07394364520c10123b5c61afa2d90f2a28565a5e4d564f64dbb7bd161c1658c26e03d6edee0b9f28c7e33d00639dedf4b8fe92b529738d2c5af7239bbdecfe48d3f60f8a79d7de3714d396985b0739c8aa12aec500270dabb7ea47", 0x90}, {&(0x7f0000001180)="20ddc0a4147266cd33969842e189ef0809b814cc8dd343ef57605140a3af27c1d5ddaf72242107dcb4ccdfd766025c6a4b774fbecae4027b11e82b6f03af78efb4047d53f04ace412c7a170ce7b1900ae6cccd06bcfdfc3107623d9a93720ba3375e6127c6325242fb9842060526", 0x6e}, {&(0x7f0000001300)="29d511bd788501e2774b6124b126cbe61dc21783f69123402541e6a26dd46d7b9e247ef79e13b4a10919148a8f029b83f9591620ea34ec463bf8ce933afb912f2c5b617c47c5a43e17bbfbcb9192dd8ec04c0aae5ea6dd7ea3dcca", 0x5b}, {&(0x7f0000001380)="dff602b10a096445d4bcca463a51c35e7b848b0164715295054a56c907fb5f6f7a4ebbb4416e239f23ccbb320f3074427216b22b173f63b357869de490a15115487bd0466be1391fdac1e59f085c51912e094de09ce8d84d2247a9e207a19034a70c3cc95229a9fc1b8525932589bbefe3bf4ce24ec25b48fb411f32a587", 0x7e}, {&(0x7f0000001400)="12dc3b727b0722311c3915a08183e2f6492a8c8954114819b09c648dff6046f64058d051f4be24e50ac3d3c2a50e76a7417b41a84286d5601916a3690fd246c680f3d1de1f60bf20695edb2a254a701afbe7c9d91de01805", 0x58}, {&(0x7f0000003500)="d3e803a42b7876fc3578af5e691686bfa1fd6e06ee3de6a52351d93e44af78b74bf17be79162c15936ac4b30126cdf8d373753978e79bc7ad9aad992fc8a2af2c03fa19a344d747266c81f2103206253f739c70c11e455f4f8a6c02faf35081793bfd34e519c3f0886758dba02bc6254a2a6bd676d0be9d31c59d045bf0288c9dc09c0ee7e23c24b7351124cdb4fa2a105a35e7c32f0e033d8dda381da5399f92abde4c329ab695f9113c28256a7f80a79a980c86436d2804fe4e2d456c7b57bf62a708cebaf5df7195c9700a07901dc083d27211bd4f0caf572fb9bd8b2ea9a3ac50279c11e90390c8c4401e6484585a61987c2", 0xf4}], 0xa, &(0x7f0000005080)=ANY=[@ANYBLOB="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"/1287], 0x3f0}}, {{&(0x7f0000003ac0)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x1}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003b40)="ef4c9dc069cffb5b9e57426dffa341fc8180081cac8726c19d2dd005fccb12e4dd1dcc5c92c171701daf1c41ce3b337aea38e373007601f8909dc95ac38d0acb1dfd1e53ab9ec419373683af5f", 0x4d}, {&(0x7f0000003bc0)="25f180293b002c7becac1e2052e391fa102641bdc168ef404dbbde9fcdf26978f482bd80468cd23d8b0d5611f65a19c3e4bd73a9287a5c4cd2b94aa7696fefb957d09d68ec6e028a6da91bec109f51c681f11fab676a0e8605ad2b51ea08cc17f173f1c5e9039f57568a35e416df4c77e1e6bea05d8ffaafd31dc7995192d1f11b7bba9132a254675463118da29053136cadfaa5c8ea54792114514b78e01c05b0a11ba84022e14f488596bb86b6ec8c88bd1377feea8d60c1c2fa4fed41cc625995272ef7e01747900fdea9f2dd07b76d0888e9d003e4351ee17471d768c46b29d876968b06d04d5e05fd4692f8a77494a7e745", 0xf4}, {&(0x7f0000003cc0)="df2b5937bc481c1e4a85cac882300f39072dce1df21ff7222c492b831dba5de646b0c37c6c293504742ae4d185a341aab872569095c263793037a96350e477ba44dae97b37025a7b2991444f2d114b85e306aaad6a1a2d2bae0daddd95fbd128e0e4cedcfa3a421840cd7c5a04975cc58ddf9a8f345ab71f392fb3abf22106f78d64fdc6988d0dbb510cfa6ccc6ab6a3c8cd924b2595765cd8cc6dc1d03f676b5fe05aff10371db57187ba19eb27a01569e6c63cbf43e9de854eb7b220f8fbea4f20c9b5bdf81d62854c", 0xca}, {&(0x7f0000003dc0)="0c643ebfd0dbdad01a61ebd7dd4302c240314f9c80235934254fa7e544044b8bc0fcb294d43f51220b21fc3eb7db89648b977e22dab110396f9d5067eed0fbb78bd3b9683b0e36b72d716a0e97228a32522b6ad85e6f3b1c9660f4a3ad51472fa4e11f847481c879373c1ae192f641634614b2c8688f975fd0f5de64691a1d63c6e56f4ae2a3443fc40d25", 0x8b}, {&(0x7f0000003e80)="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", 0x1000}, {&(0x7f0000004e80)="9150c616473581c05834ecee5e85010a0a735d3bf47c86589a1d0ee332631ffed212bb9cdcc61aab2b5c8913e42fb2fdff7ef04e23fef84de54ad66895c9768c0e34ab8852fe433be96b240a590c8b7069b3629eec9323b4048c37", 0x5b}], 0x6}}], 0x4, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) socket$igmp(0x2, 0x3, 0x2) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r10, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 2.277759989s ago: executing program 4 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000ff0f000007000000002000008b6917faad82453974615684449539e1f563ed46fc264727fd6df01c69e9987c9241b9af69810d7725c67e1e5eea1989a1748c790db72f4ed36fa007d2cf9a61c0168321359bc185df6c7566e9e11a38ec01b4a00c11258aacd0ca8dd6e4734abe9e2610089bd00ae7581a303771081a84fb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0x2100, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r3}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x93, 0xd7, &(0x7f0000000380)="e5ff12b0c3f9f3061e12b670054da091716de4f03f0fa38ad52793c048a6eb4fe586050b5afba773ed5473ce1429c772310e33e1e2fcd93927e36d26e3fdc664bd258a20a13075212cb9d2f4ff472c54dee94ae5afa3bc2ff2d0bb62c725942f10522ac7d9f5ef8b9b6bc9cbfb0661b4d57447b73fd24b02300678129657b5a5fe31de88273f9f61ade74183e8d79addb3e453", &(0x7f00000004c0)=""/215, 0x8, 0x0, 0x0, 0x6, &(0x7f00000006c0), &(0x7f0000000700)="78e07252d539", 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) 2.110407826s ago: executing program 2 (id=4448): r0 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) (async) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101f02, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x1) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000003c0)={0xfd58, 0x0}) read(r0, &(0x7f0000000000)=""/149, 0xaa) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.669299084s ago: executing program 3 (id=4453): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, r6, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) 1.622923231s ago: executing program 2 (id=4454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) (async) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r5, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0x48, 0x20000000, &(0x7f0000000540)={0xc9, 0x11, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0x48, 0x20000000, &(0x7f0000000540)={0xc9, 0x11, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002c00128008000100687372002000028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0xfffffffffffffe91}}, 0x7c}}, 0x40080) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0xfffffffffffffe91}}, 0x7c}}, 0x40080) gettid() vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)="2691e3afaab44bf414d498226514d6e2d026505f00c170c9f94e8aa1892f096d0cb62fbc9853fe69d3bd501f93f3d08b4f77798fc77145a507387b155d0fc7199c3f0ffa2c0e0b4d3a28fee9ed47c98b950ec42a1396a2f8a5963b8497f3265872deceb7ad3e6c38b4bf76e0167d0707294e8ac7e95c4ed5b15fa0b4faf8c102fc74e0fa53f295a663f30caf240707e287e286b7ab1cacee4f09b45612e427b12604aa6fa15599fb800f5c827e5306072710c2bbf4da5dd9e7ca8e681e473785187b13d5a92f", 0xc6}], 0x1, 0x2) (async) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000580)="2691e3afaab44bf414d498226514d6e2d026505f00c170c9f94e8aa1892f096d0cb62fbc9853fe69d3bd501f93f3d08b4f77798fc77145a507387b155d0fc7199c3f0ffa2c0e0b4d3a28fee9ed47c98b950ec42a1396a2f8a5963b8497f3265872deceb7ad3e6c38b4bf76e0167d0707294e8ac7e95c4ed5b15fa0b4faf8c102fc74e0fa53f295a663f30caf240707e287e286b7ab1cacee4f09b45612e427b12604aa6fa15599fb800f5c827e5306072710c2bbf4da5dd9e7ca8e681e473785187b13d5a92f", 0xc6}], 0x1, 0x2) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@delqdisc={0x24, 0x25, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6ca1a2b2b6c371b4}, {0x7, 0xffff}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x885) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 1.545535962s ago: executing program 4 (id=4456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x88}}, 0x4000088) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) (async) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004000080"], 0x58}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x22}}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@chsw_timing={0x68, 0x4, {0xb42, 0x6}}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 1.371226719s ago: executing program 3 (id=4457): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'netdevsim0\x00', 0x10c}) (async) getpeername$tipc(r0, &(0x7f0000000640)=@id, &(0x7f0000000680)=0x10) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getneightbl={0x14, 0x42, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x18, 0x140a, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004a8c5}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r9, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r12, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_DONE(r12, 0x29, 0xc9, 0x12, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r11, 0x1, 0x70bd27, 0x25dddbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x24040890) 1.232059489s ago: executing program 4 (id=4459): socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="03"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000080)=0x6, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1.06709157s ago: executing program 0 (id=4460): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x24000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={r1, &(0x7f0000000000)="6f6e8c447e7a357f8479ca2df1c39ccccd3f5bd739013443d64a553c6fbf47b247b2b9dd45b0e748427c16bf8c67a905ad54caaae295dc104ee9ece163404ee438306d8766ac0439916716a59884ae6e9ff7293c169d82b74a4e8cc25160e100447c3b14fb86613c0418c8ec28850a6f3a3564d8d69cc742a316", &(0x7f0000000140)=""/4096}, 0x20) 1.01854914s ago: executing program 3 (id=4462): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x840) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 991.771535ms ago: executing program 2 (id=4463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 890.217257ms ago: executing program 1 (id=4464): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x2, 0x1, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1, 0x0, 0xfffffff8, {0x77359400}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "e1d1f55a4351ea72"}}, 0x48}, 0x1, 0x0, 0x0, 0x20018840}, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a3200"], 0x78}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008502000002000000c78044b7a795265895000000000000009500a50500000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 839.190544ms ago: executing program 0 (id=4465): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000280)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 774.834391ms ago: executing program 4 (id=4466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8927, &(0x7f0000000040)={0x6, 'wlan0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'bond0\x00', {0x2}, 0x3}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) 688.413957ms ago: executing program 1 (id=4467): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x5d0fc899, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x51}, {0x75, 0x16, {0x0, 0xfffa, @val=0x1, @void, @val="6635d477e1ed3e9d28a2e58b21ddef69"}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) recvfrom$inet6(r3, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000", @ANYRES32], 0xc0}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r10}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x2, [@union={0x1, 0x7, 0x0, 0x5, 0x1, 0x2, [{0xd, 0x4, 0x1}, {0x3, 0x4, 0xffff}, {0x9, 0x0, 0x20000000}, {0x5, 0x1, 0x800}, {0x7, 0x2, 0x7}, {0xd, 0x3, 0x7fff}, {0x2, 0x5, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @struct={0x3, 0x4, 0x0, 0x4, 0x1, 0x1ff, [{0xf, 0x5, 0x9}, {0x6, 0x5, 0xffffffcd}, {0x5, 0x5, 0x1}, {0x7, 0x3, 0x400}]}, @fwd={0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x4}]}}, &(0x7f0000000240)=""/179, 0xea, 0xb3, 0x1, 0x57a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0xc, 0x6, 0x81, 0x40, r1, 0x7f, '\x00', r10, r11, 0x4, 0x4, 0x5}, 0x50) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0) socket(0x10, 0x3, 0x0) 563.280885ms ago: executing program 0 (id=4468): syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="b8215edcf58b654cb78561fef789f7a27f43375f6db60afdc0eb12ae40cedfb1a3bd832bf9819b72cccabba414ad43d6c4bf9ba7fe9a114be05d34dfff024edee2be43f2a4b8e1586de213d4587a5d709137c3205864df5d14a3a1cf74d5695c70ae43ce9531eb375dc629a7f7e744630c79da832e7ad144c495fbc061a341ef7abf149a0b5e5290c86a7c0092ad70dcce5e2e1487f6ef6f0633d560a3c10d18e2d712b1267c9c85bc8b79b5b0c022e4068e280b8497a00f0860937f4d00e85e778d21247953e2724d477580717bdd730e1cc2123699ebaa5152086ce0a335de518dae0704a09e948d9315a5be85", 0xee}}, 0x40800) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x8000, 0x9, 0x9, 0x0, 0x6472}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x9, @any, 0x5, 0x1}, 0xe) 556.239706ms ago: executing program 4 (id=4469): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000008000ff"], 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000004dc0), &(0x7f0000004e00)=0x8) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000004dc0), &(0x7f0000004e00)=0x8) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1, 0x2, 0x9) sendto$rxrpc(r7, &(0x7f00000000c0)="af7e8bb5a4f3b90e1141bd31addc567754cd0498f178843e488329f8aa9767b5adcefff50f158de05db02f37879b7ba23305fba6fe5e20b06b2988ce988d025cf58b7dce6699fb0fa586582cd8ff244902fbeab34d06d230affaefc9334cc374e73dd86166857ccd284ae32564f7b7b9d69035c1251d81b1e58c19ed68d28251312599c857d394c3b8b41ccef3b70adcb909b65a127ffac8f42936eca8564df9dd", 0xa1, 0x20040010, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0xf, @mcast2, 0x3cbf9c25}}, 0x24) openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) (async) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) ioctl$int_out(r8, 0x0, &(0x7f0000000340)) (async) ioctl$int_out(r8, 0x0, &(0x7f0000000340)) close(r11) 524.959329ms ago: executing program 3 (id=4470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async, rerun: 32) close(r2) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x19) (async, rerun: 32) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f0000000040)) (async) close(0x3) 417.537603ms ago: executing program 1 (id=4471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0x200000c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0x200000c0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 331.282628ms ago: executing program 0 (id=4472): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="844b1883a23bff41c103", 0xa, 0x7c599688279f788c, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x2000}, 0x1c) sendto$packet(r0, &(0x7f0000000200)="0b031200e3ff64000200475400f6a13bb1000000086086dd48039439e9134e608d30eafa9346d92513142db9901e24d2ed5ae0a5dd973996655f00"/70, 0x46, 0x4008081, &(0x7f0000000140)={0x11, 0x17, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="844b1883a23bff41c103", 0xa, 0x7c599688279f788c, 0x0, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x2000}, 0x1c) (async) sendto$packet(r0, &(0x7f0000000200)="0b031200e3ff64000200475400f6a13bb1000000086086dd48039439e9134e608d30eafa9346d92513142db9901e24d2ed5ae0a5dd973996655f00"/70, 0x46, 0x4008081, &(0x7f0000000140)={0x11, 0x17, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) (async) 330.221483ms ago: executing program 4 (id=4473): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r4, 0x0, 0x40800) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) 270.433503ms ago: executing program 1 (id=4474): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2020) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040001) 263.773713ms ago: executing program 3 (id=4475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 166.936986ms ago: executing program 0 (id=4476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 79.234148ms ago: executing program 3 (id=4477): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="392b5766e5", 0x5}], 0x1) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 77.413571ms ago: executing program 2 (id=4478): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398001001000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e0ffffff004d3790379261a7172adcc7ea435800414439655563d8d96f81ccc3be2f803bb8931a24046e5e028e202c7bf4805d6bda2e41b3e2cebe4b8469a3f91c82457afa673f"], 0x48) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r1, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001c00)=[0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000001c80)=[{}, {}], 0x10, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) r8 = socket$nl_generic(0x11, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100000000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002700)={&(0x7f0000003100)=ANY=[@ANYBLOB="04080000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="f400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="a00202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003400040036ff0206ffff0000030003f1000001000600060a080000000100090300000000f007014e07000000ff0f06080800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="8001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007f00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000a000000080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="c400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f00102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fa00000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="6cbd70a728b8243fae3603c7e317a1a14b2e1636da6f289572db96b43bbba18d25314782c25213e032bb80d6a2a7260fd7969dd210656194f5683ae09cc6eace1ef6ac094bf6c1818b9271d03b0bedea186c8650b622a44c73bf91483b8b805f840c728a05ec1d"], 0x804}, 0x1, 0x0, 0x0, 0x200080d0}, 0x40080) r11 = socket(0x1e, 0x4, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) 75.419242ms ago: executing program 1 (id=4479): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@raw=[@initr0, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}], 0x0}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44840}, 0x48000) 36.979539ms ago: executing program 0 (id=4480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x3c, r3, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40006895}, 0x40010) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000018000100000000001c0000000a0000000000000000000000080012"], 0x24}}, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=4481): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) close(r1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): z.3.2999': attribute type 142 has an invalid length. [ 327.098807][T15995] veth0_macvtap: entered promiscuous mode [ 327.141173][T15995] veth1_macvtap: entered promiscuous mode [ 327.167410][T16361] tipc: Enabling of bearer rejected, failed to enable media [ 327.242957][T15995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.282550][T15995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.321281][T16368] bridge0: port 1(veth0_to_bridge) entered blocking state [ 327.333081][T16368] bridge0: port 1(veth0_to_bridge) entered disabled state [ 327.343650][T16368] veth0_to_bridge: entered allmulticast mode [ 327.358470][T16368] veth0_to_bridge: entered promiscuous mode [ 327.392151][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.410937][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.455024][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.465644][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.634307][T13448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.666279][T13448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.723711][T13448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.733995][T13448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.314233][T16403] netlink: 'syz.4.3016': attribute type 39 has an invalid length. [ 328.426548][T16409] IPVS: ip_vs_add_dest(): server weight less than zero [ 328.849840][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.859996][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.871929][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.882522][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.893556][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.959475][T16420] lo speed is unknown, defaulting to 1000 [ 329.169293][T16432] netlink: 'syz.1.3023': attribute type 6 has an invalid length. [ 329.177320][T16432] __nla_validate_parse: 5 callbacks suppressed [ 329.177340][T16432] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3023'. [ 329.444220][T16443] netlink: 'syz.0.3026': attribute type 1 has an invalid length. [ 329.458993][T16443] netlink: 'syz.0.3026': attribute type 4 has an invalid length. [ 329.468532][T16443] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3026'. [ 329.493799][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 329.631395][T16446] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3026'. [ 329.642416][T16447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3028'. [ 329.653508][T16451] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3024'. [ 329.664975][T16451] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3024'. [ 329.963806][T16464] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3032'. [ 330.112220][T16420] chnl_net:caif_netlink_parms(): no params data found [ 330.362733][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 330.676807][T16420] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.701757][T16420] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.720641][T16420] bridge_slave_0: entered allmulticast mode [ 330.738914][T16420] bridge_slave_0: entered promiscuous mode [ 330.778112][T16420] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.785362][T16420] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.814211][T16420] bridge_slave_1: entered allmulticast mode [ 330.831023][T16420] bridge_slave_1: entered promiscuous mode [ 330.843178][T16488] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 330.946037][ T5868] Bluetooth: hci3: command tx timeout [ 331.051890][T16478] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 331.131213][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3040'. [ 331.434392][T16420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.482269][T16420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.592938][T16497] IPVS: stopping master sync thread 14121 ... [ 331.648587][T16420] team0: Port device team_slave_0 added [ 331.677370][T16420] team0: Port device team_slave_1 added [ 331.688630][T16515] netlink: 'syz.1.3046': attribute type 11 has an invalid length. [ 331.708307][T16515] netlink: 'syz.1.3046': attribute type 11 has an invalid length. [ 331.796330][T16420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.803346][T16420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.861529][T16420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.884585][T16420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.891975][T16420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.925376][T16420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.079421][T16526] erspan0: left promiscuous mode [ 332.448188][T16526] veth0_to_team: left promiscuous mode [ 332.693779][T16526] bridge2: left promiscuous mode [ 332.713608][T16526] geneve2: left promiscuous mode [ 332.724009][T16526] team1: left promiscuous mode [ 332.732389][T16526] veth3: left promiscuous mode [ 332.744134][T16526] bond5: left promiscuous mode [ 332.753467][T16526] gtp1: left promiscuous mode [ 332.787050][T10089] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.795649][T10089] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.844103][T10089] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.885511][T10089] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.010052][T10089] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.032512][ T5868] Bluetooth: hci3: command tx timeout [ 333.034922][T10089] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.092473][T10089] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.125345][T10089] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.289213][T16420] hsr_slave_0: entered promiscuous mode [ 333.308094][T16558] validate_nla: 1 callbacks suppressed [ 333.308116][T16558] netlink: 'syz.4.3060': attribute type 2 has an invalid length. [ 333.336770][T16420] hsr_slave_1: entered promiscuous mode [ 333.343465][T16420] debugfs: 'hsr0' already exists in 'hsr' [ 333.350033][T16420] Cannot create hsr debugfs directory [ 333.440046][T16555] netlink: 'syz.1.3059': attribute type 13 has an invalid length. [ 334.020133][T16581] tipc: Enabled bearer , priority 0 [ 334.129401][T16584] tipc: Resetting bearer [ 334.235066][T16581] tipc: Disabling bearer [ 334.633438][T16624] __nla_validate_parse: 11 callbacks suppressed [ 334.633459][T16624] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3081'. [ 334.674443][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'. [ 334.691624][T16420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.716477][T16420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.787861][T16420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.827234][T16420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.907887][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3086'. [ 334.927244][T16646] tipc: New replicast peer: 255.255.255.255 [ 334.937515][T16646] tipc: Enabled bearer , priority 10 [ 334.997596][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3085'. [ 335.111917][ T5868] Bluetooth: hci3: command tx timeout [ 335.286738][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 335.434947][T16420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.474162][T16420] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.504125][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.513258][T10089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.567544][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.574853][T10089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.683123][T16676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3097'. [ 335.801819][T16679] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3098'. [ 336.028746][T16688] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3100'. [ 336.076052][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3100'. [ 336.137631][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3100'. [ 336.579154][T16420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.722928][T16420] veth0_vlan: entered promiscuous mode [ 336.763333][T16420] veth1_vlan: entered promiscuous mode [ 336.861029][T16420] veth0_macvtap: entered promiscuous mode [ 336.873730][T16420] veth1_macvtap: entered promiscuous mode [ 336.902076][T16420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.935518][T16420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.074746][T10085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.090452][T10085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.116186][T10085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.141851][T16732] netlink: 'syz.2.3113': attribute type 32 has an invalid length. [ 337.188491][ T5868] Bluetooth: hci3: command tx timeout [ 337.242087][T10085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.326747][T16741] bridge_slave_1: left allmulticast mode [ 337.340230][T16741] bridge_slave_1: left promiscuous mode [ 337.376505][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.391760][T16735] IPVS: persistence engine module ip_vs_pe_ not found [ 337.398632][T16743] netlink: 'syz.2.3116': attribute type 5 has an invalid length. [ 337.433853][T16741] bridge_slave_0: left allmulticast mode [ 337.451987][T16741] bridge_slave_0: left promiscuous mode [ 337.458381][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.676914][T13448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.715287][T13448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.761716][T16764] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 337.791558][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.801218][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.882395][T16764] team0: Port device geneve0 added [ 338.266954][T16780] netlink: 'syz.2.3128': attribute type 1 has an invalid length. [ 338.670205][T16795] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 338.678392][T16794] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 338.960991][T16812] sctp: [Deprecated]: syz.2.3137 (pid 16812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.960991][T16812] Use struct sctp_sack_info instead [ 338.969786][T16810] dvmrp0: entered allmulticast mode [ 339.028360][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.053320][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.062161][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.075497][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.085137][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.219599][T10089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.233688][T10089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.246641][T10089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.291855][T16822] netlink: 'syz.2.3140': attribute type 2 has an invalid length. [ 339.359734][T10089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.372298][T10089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.391723][T10089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.435439][T16815] lo speed is unknown, defaulting to 1000 [ 339.525090][T10089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.547082][T10089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.559448][T10089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.802469][T16845] tipc: Started in network mode [ 339.813345][T16845] tipc: Node identity 6ece35be7681, cluster identity 4711 [ 339.824394][T16845] tipc: Enabled bearer , priority 0 [ 339.867355][T16845] tipc: Disabling bearer [ 339.987682][T16851] netlink: 'syz.3.3149': attribute type 3 has an invalid length. [ 339.989829][T16838] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 339.995855][T16851] __nla_validate_parse: 11 callbacks suppressed [ 339.995876][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3149'. [ 340.443138][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 340.476881][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 340.745299][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3159'. [ 340.827120][T16891] Unsupported ieee802154 address type: 0 [ 341.114663][T10089] team0: Port device geneve0 removed [ 341.188668][ T5868] Bluetooth: hci1: command tx timeout [ 341.404417][T10089] bond0 (unregistering): (slave ): Releasing backup interface [ 341.413298][T10089] mac80211_hwsim hwsim9 : left promiscuous mode [ 341.425496][T10089] bond0 (unregistering): Released all slaves [ 341.562142][T10089] bond1 (unregistering): Released all slaves [ 341.579795][T10089] bond2 (unregistering): Released all slaves [ 341.599360][T10089] bond3 (unregistering): Released all slaves [ 341.713760][T10089] bond4 (unregistering): Released all slaves [ 341.833973][T10089] bond5 (unregistering): (slave veth3): Releasing active interface [ 341.844701][T10089] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 341.856873][T10089] bond5 (unregistering): Released all slaves [ 341.971289][T10089] bond6 (unregistering): Released all slaves [ 341.985400][T10089] bond7 (unregistering): Released all slaves [ 342.010180][T16815] chnl_net:caif_netlink_parms(): no params data found [ 342.383592][T16902] can: request_module (can-proto-0) failed. [ 342.481912][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.493381][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.536047][T16815] bridge_slave_0: entered allmulticast mode [ 342.544078][T16815] bridge_slave_0: entered promiscuous mode [ 342.558512][T16924] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3167'. [ 342.588155][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.613219][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.636601][T16815] bridge_slave_1: entered allmulticast mode [ 342.663613][T16815] bridge_slave_1: entered promiscuous mode [ 342.843481][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3170'. [ 342.854807][T16815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.878491][T16815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.898875][T16942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3170'. [ 342.958266][T16815] team0: Port device team_slave_0 added [ 342.970690][T16815] team0: Port device team_slave_1 added [ 343.052694][T16942] netlink: 'syz.2.3170': attribute type 12 has an invalid length. [ 343.061852][T16815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.074121][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.100887][T16815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.117625][T16960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3174'. [ 343.140903][T16815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.160542][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.252282][T16815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.266379][ T5868] Bluetooth: hci1: command tx timeout [ 343.363276][T16971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3176'. [ 343.435330][T16971] netlink: 'syz.1.3176': attribute type 6 has an invalid length. [ 343.465849][T16815] hsr_slave_0: entered promiscuous mode [ 343.472779][T16815] hsr_slave_1: entered promiscuous mode [ 343.496834][T16815] debugfs: 'hsr0' already exists in 'hsr' [ 343.502666][T16815] Cannot create hsr debugfs directory [ 343.554275][T16980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.652396][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3182'. [ 343.854202][T10089] tipc: Disabling bearer [ 343.860386][T10089] tipc: Left network mode [ 343.967457][T16996] netlink: 'syz.2.3187': attribute type 4 has an invalid length. [ 344.014193][T17000] pim6reg1: entered promiscuous mode [ 344.020257][T17000] pim6reg1: entered allmulticast mode [ 344.490874][T17009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.861334][T17022] geneve3: entered promiscuous mode [ 344.885241][T17022] geneve3: entered allmulticast mode [ 344.905035][T17022] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 345.145147][T17033] geneve4: entered promiscuous mode [ 345.175219][T17033] geneve4: entered allmulticast mode [ 345.193051][T10085] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.202071][T10085] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.214302][T10085] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.275598][T10081] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.302328][T17038] netlink: 'syz.3.3201': attribute type 2 has an invalid length. [ 345.322163][T17038] netlink: 'syz.3.3201': attribute type 8 has an invalid length. [ 345.346434][ T5868] Bluetooth: hci1: command tx timeout [ 345.356566][T17038] __nla_validate_parse: 5 callbacks suppressed [ 345.356586][T17038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3201'. [ 345.594286][T16815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.627988][T17048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3203'. [ 345.757173][T16815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.782909][T10089] hsr_slave_0: left promiscuous mode [ 345.784259][T17058] sctp: [Deprecated]: syz.2.3206 (pid 17058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.784259][T17058] Use struct sctp_sack_info instead [ 345.807048][T10089] hsr_slave_1: left promiscuous mode [ 345.841771][T10089] veth1_vlan: left promiscuous mode [ 345.856271][T10089] veth0_vlan: left promiscuous mode [ 346.073348][T10089] pimreg (unregistering): left allmulticast mode [ 346.519315][T17065] netlink: 'syz.0.3208': attribute type 16 has an invalid length. [ 346.537095][T17065] netlink: 'syz.0.3208': attribute type 17 has an invalid length. [ 346.932813][T13448] smc: removing ib device syz0 [ 347.054700][T16815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.224823][T17065] erspan0: left allmulticast mode [ 347.394590][T17065] 8021q: adding VLAN 0 to HW filter on device ` [ 347.413434][T17065] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.423173][T17084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3211'. [ 347.436607][ T5868] Bluetooth: hci1: command tx timeout [ 347.458941][T17065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.517012][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'. [ 347.531349][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 347.540619][T16815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.567037][T17085] netlink: 'syz.2.3211': attribute type 15 has an invalid length. [ 347.679990][T17084] netlink: 'syz.2.3211': attribute type 2 has an invalid length. [ 347.707833][T10085] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.762259][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.810541][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.882739][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.964645][T17100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3214'. [ 348.007317][T17100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3214'. [ 348.066903][T17107] netlink: 'syz.2.3215': attribute type 1 has an invalid length. [ 348.108521][T17107] netlink: 'syz.2.3215': attribute type 2 has an invalid length. [ 348.126401][T17107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 348.678890][T17127] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 348.951966][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.966450][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 349.013845][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3219'. [ 349.164832][T17129] bond1 (unregistering): Released all slaves [ 349.401433][T17139] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 349.473339][T16815] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.529733][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.537042][T13436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.625055][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.632346][T13436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.860846][T10089] IPVS: stop unused estimator thread 0... [ 349.869197][T16815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.308915][T17193] sctp: [Deprecated]: syz.3.3237 (pid 17193) Use of int in max_burst socket option. [ 350.308915][T17193] Use struct sctp_assoc_value instead [ 352.508945][T16815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.587504][T17209] validate_nla: 6 callbacks suppressed [ 352.587526][T17209] netlink: 'syz.3.3241': attribute type 4 has an invalid length. [ 352.870430][T17222] tipc: Enabled bearer , priority 0 [ 352.891287][T17222] syzkaller0: entered promiscuous mode [ 352.906203][T17222] syzkaller0: entered allmulticast mode [ 352.943361][T17222] veth0_vlan: mtu less than device minimum [ 352.955006][T17221] tipc: Resetting bearer [ 353.007161][T17221] tipc: Disabling bearer [ 353.261937][T17241] __nla_validate_parse: 9 callbacks suppressed [ 353.261959][T17241] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3250'. [ 353.428583][T17249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3252'. [ 353.441215][T17250] tipc: Started in network mode [ 353.456102][T17250] tipc: Node identity 825d18e19b73, cluster identity 4711 [ 353.464820][T17249] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3252'. [ 353.479333][T17250] tipc: Enabled bearer , priority 0 [ 353.533117][T17253] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 353.550841][T16815] veth0_vlan: entered promiscuous mode [ 353.569587][T17250] tipc: Disabling bearer [ 353.592990][T17253] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 353.613624][T17253] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3253'. [ 353.632012][T17253] nbd: couldn't find a device at index 1 [ 353.658460][T16815] veth1_vlan: entered promiscuous mode [ 353.748398][T16815] veth0_macvtap: entered promiscuous mode [ 353.777260][T16815] veth1_macvtap: entered promiscuous mode [ 353.889973][T16815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.925587][T16815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.963599][T10089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.984301][T10089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.030213][T17268] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3259'. [ 354.045777][T10089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.054569][T10089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.119320][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3260'. [ 354.323376][T13448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.346132][T13448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.442534][T13436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.462713][T13436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.541426][T17283] sctp: [Deprecated]: syz.3.3263 (pid 17283) Use of int in max_burst socket option. [ 354.541426][T17283] Use struct sctp_assoc_value instead [ 354.589091][T17283] sctp: [Deprecated]: syz.3.3263 (pid 17283) Use of int in max_burst socket option deprecated. [ 354.589091][T17283] Use struct sctp_assoc_value instead [ 354.612514][T17286] 0{X功: entered promiscuous mode [ 354.620327][T17286] vlan2: entered promiscuous mode [ 354.945438][T17299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 354.952563][T17299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.009057][T17299] : entered promiscuous mode [ 355.180928][T17302] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 355.253463][T17309] netlink: 'syz.0.3269': attribute type 83 has an invalid length. [ 355.694995][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.734198][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.746526][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.755420][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.765043][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.904133][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 355.932541][T17335] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 355.941229][T17336] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 356.241623][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 356.265160][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3278'. [ 356.319217][T17325] chnl_net:caif_netlink_parms(): no params data found [ 356.435317][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 356.441173][T17347] netlink: 'syz.0.3279': attribute type 29 has an invalid length. [ 356.864046][T17325] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.881108][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.917163][T17325] bridge_slave_0: entered allmulticast mode [ 356.925313][T17325] bridge_slave_0: entered promiscuous mode [ 356.956438][T17325] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.984350][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.003375][T17325] bridge_slave_1: entered allmulticast mode [ 357.017816][T17325] bridge_slave_1: entered promiscuous mode [ 357.144211][T17325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.188629][T17325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.383468][T17325] team0: Port device team_slave_0 added [ 357.415889][T17325] team0: Port device team_slave_1 added [ 357.577820][T17399] bond1: entered promiscuous mode [ 357.593000][T17399] bond1: entered allmulticast mode [ 357.612114][T17399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.827102][ T5868] Bluetooth: hci4: command tx timeout [ 357.881937][T17399] bond1 (unregistering): Released all slaves [ 357.989911][T17325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.002503][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.028904][T17325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.042062][T17325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.049906][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.152911][T17325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.274846][T17420] netlink: 'syz.0.3300': attribute type 1 has an invalid length. [ 358.294323][T17420] __nla_validate_parse: 3 callbacks suppressed [ 358.294345][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'. [ 358.583744][T17419] team0 (unregistering): Port device team_slave_0 removed [ 358.609427][T17419] team0 (unregistering): Port device team_slave_1 removed [ 358.720266][T17427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3302'. [ 358.761077][T17325] hsr_slave_0: entered promiscuous mode [ 358.769151][T17325] hsr_slave_1: entered promiscuous mode [ 358.775585][T17325] debugfs: 'hsr0' already exists in 'hsr' [ 358.782887][T17325] Cannot create hsr debugfs directory [ 358.839241][T17439] openvswitch: netlink: Key type 16144 is out of range max 32 [ 358.903989][T17442] netlink: 'syz.3.3306': attribute type 11 has an invalid length. [ 358.912226][T17442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3306'. [ 358.921977][T17441] netlink: 'syz.3.3306': attribute type 11 has an invalid length. [ 358.941359][T17441] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3306'. [ 359.117449][T17325] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.128907][T17325] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.193458][T17452] openvswitch: netlink: IP tunnel dst address not specified [ 359.217211][T17325] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.232792][T17325] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.294922][T17325] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.316695][T17325] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.396444][T17325] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.415308][T17325] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.460878][T17463] netlink: 'syz.4.3314': attribute type 1 has an invalid length. [ 359.468759][T17465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3315'. [ 359.553207][T17463] veth3: entered promiscuous mode [ 359.757865][T17470] syzkaller1: entered promiscuous mode [ 359.764288][T17470] syzkaller1: entered allmulticast mode [ 359.814676][T17325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.830440][T17325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.866172][T17325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.906354][ T5868] Bluetooth: hci4: command tx timeout [ 359.947628][T17325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.956933][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3322'. [ 359.976786][T17487] netlink: 'syz.2.3323': attribute type 8 has an invalid length. [ 360.169686][T17325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.201412][T17325] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.239339][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.246778][T13448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.281442][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.288752][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.683035][T17523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3331'. [ 360.717398][T17526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3333'. [ 360.845973][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 360.847172][T17325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.973746][T17325] veth0_vlan: entered promiscuous mode [ 361.001147][T17325] veth1_vlan: entered promiscuous mode [ 361.126352][T17325] veth0_macvtap: entered promiscuous mode [ 361.150980][T17325] veth1_macvtap: entered promiscuous mode [ 361.232084][T17537] bridge3: entered promiscuous mode [ 361.240724][T17537] bridge3: entered allmulticast mode [ 361.355199][T17547] FAULT_INJECTION: forcing a failure. [ 361.355199][T17547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.376245][T17547] CPU: 0 UID: 0 PID: 17547 Comm: syz.3.3336 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 361.376279][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.376305][T17547] Call Trace: [ 361.376314][T17547] [ 361.376324][T17547] dump_stack_lvl+0x189/0x250 [ 361.376355][T17547] ? __pfx____ratelimit+0x10/0x10 [ 361.376381][T17547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.376407][T17547] ? __pfx__printk+0x10/0x10 [ 361.376438][T17547] ? __might_fault+0xb0/0x130 [ 361.376480][T17547] should_fail_ex+0x414/0x560 [ 361.376510][T17547] _copy_from_user+0x2d/0xb0 [ 361.376532][T17547] ___sys_sendmsg+0x158/0x2a0 [ 361.376568][T17547] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.376639][T17547] ? __fget_files+0x2a/0x420 [ 361.376679][T17547] ? __fget_files+0x3a0/0x420 [ 361.376722][T17547] __x64_sys_sendmsg+0x19b/0x260 [ 361.376758][T17547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.376801][T17547] ? __pfx_ksys_write+0x10/0x10 [ 361.376827][T17547] ? rcu_is_watching+0x15/0xb0 [ 361.376853][T17547] ? do_syscall_64+0xbe/0x3b0 [ 361.376885][T17547] do_syscall_64+0xfa/0x3b0 [ 361.376911][T17547] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.376937][T17547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.376958][T17547] ? clear_bhb_loop+0x60/0xb0 [ 361.376983][T17547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.377004][T17547] RIP: 0033:0x7f553a18ebe9 [ 361.377024][T17547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.377043][T17547] RSP: 002b:00007f553b08e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.377066][T17547] RAX: ffffffffffffffda RBX: 00007f553a3b5fa0 RCX: 00007f553a18ebe9 [ 361.377082][T17547] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 361.377096][T17547] RBP: 00007f553b08e090 R08: 0000000000000000 R09: 0000000000000000 [ 361.377109][T17547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.377122][T17547] R13: 00007f553a3b6038 R14: 00007f553a3b5fa0 R15: 00007ffcebe93338 [ 361.377153][T17547] [ 361.377881][T17325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.642200][T17557] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3339'. [ 361.664002][T17555] bridge0: entered promiscuous mode [ 361.670629][T17555] bridge0: entered allmulticast mode [ 361.682455][T17325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.874845][T10085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.912671][T10085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.986248][ T5868] Bluetooth: hci4: command tx timeout [ 362.055975][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.105762][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.268911][T17574] netlink: 'syz.4.3344': attribute type 10 has an invalid length. [ 362.333235][T17577] netlink: 'syz.2.3345': attribute type 2 has an invalid length. [ 362.560462][T17590] netlink: 'syz.2.3348': attribute type 4 has an invalid length. [ 362.816810][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.836453][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.904481][T17602] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 363.077329][T10085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.086878][T10085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.512944][T17630] FAULT_INJECTION: forcing a failure. [ 363.512944][T17630] name failslab, interval 1, probability 0, space 0, times 0 [ 363.536052][T17630] CPU: 1 UID: 0 PID: 17630 Comm: syz.3.3359 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 363.536086][T17630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.536100][T17630] Call Trace: [ 363.536108][T17630] [ 363.536117][T17630] dump_stack_lvl+0x189/0x250 [ 363.536149][T17630] ? __pfx____ratelimit+0x10/0x10 [ 363.536175][T17630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.536201][T17630] ? __pfx__printk+0x10/0x10 [ 363.536237][T17630] ? __pfx___might_resched+0x10/0x10 [ 363.536264][T17630] should_fail_ex+0x414/0x560 [ 363.536294][T17630] should_failslab+0xa8/0x100 [ 363.536327][T17630] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 363.536358][T17630] ? __alloc_skb+0x112/0x2d0 [ 363.536392][T17630] __alloc_skb+0x112/0x2d0 [ 363.536424][T17630] netlink_sendmsg+0x5c6/0xb30 [ 363.536464][T17630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.536506][T17630] ? aa_sock_msg_perm+0xf1/0x1d0 [ 363.536537][T17630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.536560][T17630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.536589][T17630] __sock_sendmsg+0x21c/0x270 [ 363.536617][T17630] ____sys_sendmsg+0x505/0x830 [ 363.536655][T17630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.536697][T17630] ? import_iovec+0x74/0xa0 [ 363.536721][T17630] ___sys_sendmsg+0x21f/0x2a0 [ 363.536756][T17630] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.536828][T17630] ? __fget_files+0x2a/0x420 [ 363.536859][T17630] ? __fget_files+0x3a0/0x420 [ 363.536904][T17630] __x64_sys_sendmsg+0x19b/0x260 [ 363.536937][T17630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.536980][T17630] ? __pfx_ksys_write+0x10/0x10 [ 363.537006][T17630] ? rcu_is_watching+0x15/0xb0 [ 363.537034][T17630] ? do_syscall_64+0xbe/0x3b0 [ 363.537065][T17630] do_syscall_64+0xfa/0x3b0 [ 363.537091][T17630] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.537117][T17630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.537138][T17630] ? clear_bhb_loop+0x60/0xb0 [ 363.537164][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.537185][T17630] RIP: 0033:0x7f553a18ebe9 [ 363.537204][T17630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.537222][T17630] RSP: 002b:00007f553b08e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.537246][T17630] RAX: ffffffffffffffda RBX: 00007f553a3b5fa0 RCX: 00007f553a18ebe9 [ 363.537261][T17630] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 363.537274][T17630] RBP: 00007f553b08e090 R08: 0000000000000000 R09: 0000000000000000 [ 363.537287][T17630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.537300][T17630] R13: 00007f553a3b6038 R14: 00007f553a3b5fa0 R15: 00007ffcebe93338 [ 363.537333][T17630] [ 364.011467][T17643] __nla_validate_parse: 3 callbacks suppressed [ 364.011490][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3362'. [ 364.066286][ T5880] Bluetooth: hci4: command tx timeout [ 364.105211][T17646] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3365'. [ 364.561412][T17643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.578257][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 364.587901][T17655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'. [ 364.832096][T17660] tipc: Started in network mode [ 364.852762][T17660] tipc: Node identity c6ab3069e132, cluster identity 4711 [ 364.875264][T17660] tipc: Enabled bearer , priority 0 [ 364.898691][T17666] syzkaller0: entered promiscuous mode [ 364.935635][T17666] syzkaller0: entered allmulticast mode [ 365.022972][T17667] tipc: Resetting bearer [ 365.113400][T17667] tipc: Disabling bearer [ 365.183063][T17674] veth1_to_bond: entered allmulticast mode [ 365.193309][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.206892][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.215429][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.249986][T17672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3372'. [ 365.261304][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.261638][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 365.292001][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.364048][T17672] bond0: (slave bond_slave_1): Releasing backup interface [ 365.399037][T17672] veth1_to_bond (unregistering): left allmulticast mode [ 365.924430][T17706] bridge1: entered promiscuous mode [ 365.930075][T17706] bridge1: entered allmulticast mode [ 365.937733][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3381'. [ 366.155201][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 366.463117][T17684] chnl_net:caif_netlink_parms(): no params data found [ 366.523472][T17741] vlan2: entered allmulticast mode [ 366.541514][T17741] veth1: entered allmulticast mode [ 366.951206][T17751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3391'. [ 367.184114][T17769] bridge1: entered promiscuous mode [ 367.195995][T17769] bridge1: entered allmulticast mode [ 367.274487][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.290888][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.300929][T17684] bridge_slave_0: entered allmulticast mode [ 367.329929][T17684] bridge_slave_0: entered promiscuous mode [ 367.336731][T17782] rdma_op ffff8880242951f0 conn xmit_rdma 0000000000000000 [ 367.347659][ T5868] Bluetooth: hci0: command tx timeout [ 367.367284][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.384459][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.401028][T17684] bridge_slave_1: entered allmulticast mode [ 367.410891][T17684] bridge_slave_1: entered promiscuous mode [ 367.444156][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3397'. [ 367.546943][T17684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.560722][T17684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.716314][T17684] team0: Port device team_slave_0 added [ 367.723853][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 367.755814][T17684] team0: Port device team_slave_1 added [ 367.943622][T17684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.953277][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.980239][T17684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.994861][T17684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.002090][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.029538][T17684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.255093][T17684] hsr_slave_0: entered promiscuous mode [ 368.262834][T17684] hsr_slave_1: entered promiscuous mode [ 368.270226][T17684] debugfs: 'hsr0' already exists in 'hsr' [ 368.276415][T17684] Cannot create hsr debugfs directory [ 368.933958][T17821] netlink: 'syz.4.3408': attribute type 3 has an invalid length. [ 369.425943][ T5868] Bluetooth: hci0: command tx timeout [ 370.833790][T17818] vxlan0: entered promiscuous mode [ 370.845903][T17818] vxlan0: entered allmulticast mode [ 370.988232][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.027458][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.211668][T17842] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 371.233769][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.245111][T17842] netlink: 'syz.2.3413': attribute type 2 has an invalid length. [ 371.275821][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.295831][T17842] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 371.303631][T17842] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 371.360736][T17851] netlink: 'syz.4.3417': attribute type 1 has an invalid length. [ 371.452545][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3417'. [ 371.500160][T17854] bond4: (slave geneve2): making interface the new active one [ 371.510126][ T5868] Bluetooth: hci0: command tx timeout [ 371.511939][T17854] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 371.546026][T13411] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.584249][T13411] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.628467][T13411] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.653793][T13411] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.872147][T17873] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !瀵$蘒L賤y岗丌匘ｘUD寃榼漽 [ 371.930893][T17684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.973103][T17684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.013272][T17684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.042259][T17684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.243981][T17895] bond0: (slave rose0): Error: Device can not be enslaved while up [ 372.284932][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3428'. [ 372.338233][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.388364][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3428'. [ 372.433572][T17684] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.468816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.476264][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.506265][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.513503][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.613922][T17908] pimreg: entered allmulticast mode [ 373.185301][T17941] bond0: (slave bond_slave_0): Releasing backup interface [ 373.260785][T17941] bond0: (slave bond_slave_1): Releasing backup interface [ 373.304472][T17941] team0: Port device team_slave_0 removed [ 373.325334][T17941] team0: Port device team_slave_1 removed [ 373.341721][T17941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.351073][T17941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.360960][T17941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.378093][T17941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.552593][T17684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.589515][ T5868] Bluetooth: hci0: command tx timeout [ 373.651424][T17967] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 373.671330][T17684] veth0_vlan: entered promiscuous mode [ 373.716796][T17969] pimreg3: entered allmulticast mode [ 373.764697][T17684] veth1_vlan: entered promiscuous mode [ 373.896544][T17684] veth0_macvtap: entered promiscuous mode [ 373.921291][T17684] veth1_macvtap: entered promiscuous mode [ 373.965395][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 373.973851][T17684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.996682][T17978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3449'. [ 374.018976][T17684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.069157][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.097072][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.114301][T17986] netlink: 'syz.4.3451': attribute type 29 has an invalid length. [ 374.133505][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.151280][T17986] netlink: 'syz.4.3451': attribute type 29 has an invalid length. [ 374.153148][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3453'. [ 374.167902][T17986] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3451'. [ 374.178662][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.283892][T17993] netlink: 'syz.2.3454': attribute type 11 has an invalid length. [ 374.370111][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 374.373549][T10085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.393914][T10085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.451453][T10085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.470039][T10085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.714018][T18018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.771439][T18021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.101222][T18028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3462'. [ 375.112559][T18028] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3462'. [ 375.133706][T18033] bridge_slave_0: left allmulticast mode [ 375.177215][T18033] bridge_slave_0: left promiscuous mode [ 375.214362][T18033] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.239466][T18042] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 375.251806][T18033] bridge_slave_1: left allmulticast mode [ 375.279302][T18033] bridge_slave_1: left promiscuous mode [ 375.290089][T18033] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.323547][T18033] bond0: (slave bond_slave_0): Releasing backup interface [ 375.381086][T18033] team0: Port device team_slave_0 removed [ 375.395017][T18033] team0: Port device team_slave_1 removed [ 375.402761][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.410457][T18033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.424054][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.432605][T18033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.463405][T18041] sit0: entered promiscuous mode [ 375.490298][T18041] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 375.525335][T18042] vlan0: entered promiscuous mode [ 375.567261][T18042] team0: Port device vlan0 added [ 376.140584][T18077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.501251][T18103] __nla_validate_parse: 10 callbacks suppressed [ 376.501276][T18103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3489'. [ 376.571045][T18096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.232932][T18117] pim6reg: entered allmulticast mode [ 427.240336][T18116] tipc: Enabling of bearer rejected, failed to enable media [ 427.269364][T18117] pim6reg: left allmulticast mode [ 428.443311][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 428.686180][T18171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3506'. [ 428.710601][T18175] syzkaller1: entered promiscuous mode [ 428.720330][T18175] syzkaller1: entered allmulticast mode [ 428.874711][T18186] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 428.999759][T18192] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3512'. [ 429.407268][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'. [ 429.960924][T18243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3525'. [ 430.034858][T18245] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 430.381758][T18255] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3531'. [ 430.429123][T18255] netlink: 'syz.4.3531': attribute type 10 has an invalid length. [ 430.447205][T18255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.461276][T18255] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 430.775351][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 430.790031][T18270] tipc: Enabled bearer , priority 0 [ 430.815994][T18269] netlink: 'syz.4.3536': attribute type 1 has an invalid length. [ 430.824113][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3536'. [ 430.825147][T18265] syzkaller0: entered promiscuous mode [ 430.846681][T18265] syzkaller0: entered allmulticast mode [ 430.857952][T18269] netlink: 'syz.4.3536': attribute type 1 has an invalid length. [ 430.876157][T18269] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3536'. [ 430.898570][T18265] tipc: Resetting bearer [ 430.919273][T18264] tipc: Resetting bearer [ 430.950700][T18264] tipc: Disabling bearer [ 430.968156][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3538'. [ 431.265539][T18289] netlink: 'syz.1.3543': attribute type 4 has an invalid length. [ 431.283869][T18289] netlink: 'syz.1.3543': attribute type 4 has an invalid length. [ 431.285735][T18283] nbd2: detected capacity change from 0 to 127 [ 431.354173][ T5868] block nbd2: Receive control failed (result -32) [ 431.776372][T18320] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 431.784235][ T30] audit: type=1804 audit(1755167705.160:9): pid=18318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3549" name="/newroot/40/cgroup.controllers" dev="tmpfs" ino=222 res=1 errno=0 [ 431.791967][T18313] pim6reg1: entered promiscuous mode [ 431.816328][ T30] audit: type=1800 audit(1755167705.160:10): pid=18318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3549" name="cgroup.controllers" dev="tmpfs" ino=222 res=0 errno=0 [ 431.831751][T18313] pim6reg1: entered allmulticast mode [ 432.618655][T18365] syzkaller0: entered promiscuous mode [ 432.638536][T18365] syzkaller0: entered allmulticast mode [ 432.709427][T18370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.716771][T18370] IPv6: NLM_F_CREATE should be set when creating new route [ 432.724063][T18370] IPv6: NLM_F_CREATE should be set when creating new route [ 432.731361][T18370] IPv6: NLM_F_CREATE should be set when creating new route [ 432.744285][T18370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.843971][T18380] netlink: 'syz.1.3567': attribute type 4 has an invalid length. [ 433.718654][T18424] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 433.760582][T18424] __nla_validate_parse: 62 callbacks suppressed [ 433.760608][T18424] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3583'. [ 433.777471][T18424] nbd: couldn't find a device at index 1 [ 433.954540][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3584'. [ 433.965547][T18442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3584'. [ 434.363604][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.420607][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.437461][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.453466][T18472] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 434.461703][T18472] netlink: 'syz.1.3595': attribute type 2 has an invalid length. [ 434.465853][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.502795][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 434.512949][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3595'. [ 434.519041][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.566341][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.588131][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.607659][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.615405][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.632757][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.641503][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.649392][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.658859][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.667011][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.677911][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.706883][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.721855][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.742178][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.761963][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.813134][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.824744][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 434.827533][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.854893][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.870236][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.885345][T18480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.893580][T18480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.901111][T18480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.908658][T18480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.917292][T18480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.920965][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.924828][T18480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.967235][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 434.988457][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.006700][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.034181][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3601'. [ 435.061397][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.093695][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.117351][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.132621][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.141840][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.158631][T18464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 435.820596][T18536] validate_nla: 1 callbacks suppressed [ 435.820619][T18536] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 435.847651][T18536] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3611'. [ 436.016212][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 436.424191][T18568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'. [ 436.722848][T18581] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 436.763791][T18581] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 437.151642][T18598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.327890][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.333935][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.385564][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.418132][T18607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 437.516958][T18618] netlink: 'syz.3.3637': attribute type 2 has an invalid length. [ 437.565052][T18618] netlink: 'syz.3.3637': attribute type 39 has an invalid length. [ 437.598712][T18622] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 437.635159][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.720819][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.767765][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.788011][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.798132][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.820424][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.868833][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.878910][T18637] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 437.889391][T18607] hsr0 speed is unknown, defaulting to 1000 [ 437.904493][T18637] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 437.913986][T18637] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 437.957262][T18637] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 437.966569][T18638] netlink: 'syz.2.3643': attribute type 7 has an invalid length. [ 437.974390][T18638] netlink: 'syz.2.3643': attribute type 8 has an invalid length. [ 438.002183][T18637] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 438.033589][T18638] veth0_to_team: entered promiscuous mode [ 438.059894][T18638] batadv_slave_1: entered promiscuous mode [ 438.081696][T18638] erspan0: entered promiscuous mode [ 438.098652][T18638] hsr1: Slave A (veth0_to_team) is not up; please bring it up to get a fully working HSR network [ 438.305830][ T5868] Bluetooth: hci0: command tx timeout [ 438.360098][T18676] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 438.413608][T18676] pim6reg1: entered promiscuous mode [ 438.434573][T18676] pim6reg1: entered allmulticast mode [ 439.022846][T18703] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 439.140305][T18706] veth3: entered allmulticast mode [ 439.207887][T18707] veth5: entered allmulticast mode [ 439.385169][T18716] tipc: Started in network mode [ 439.406828][T18716] tipc: Node identity 5e8f404c5de4, cluster identity 4711 [ 439.424654][T18716] tipc: Enabled bearer , priority 0 [ 439.431983][T18723] __nla_validate_parse: 41 callbacks suppressed [ 439.432006][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3665'. [ 439.547241][T18726] syzkaller0: entered promiscuous mode [ 439.554404][T18726] syzkaller0: entered allmulticast mode [ 439.587999][T18716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 439.741708][T18733] tipc: Resetting bearer [ 439.809275][T18742] vlan2: entered promiscuous mode [ 439.814627][T18742] vlan2: entered allmulticast mode [ 439.828699][T18742] hsr_slave_1: entered allmulticast mode [ 439.847641][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3670'. [ 439.863585][T18745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3672'. [ 439.890992][T18715] tipc: Resetting bearer [ 439.937080][T18715] tipc: Disabling bearer [ 440.303824][T18772] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3679'. [ 440.487757][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 440.515233][T10087] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.515365][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 440.543326][T10087] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.573783][T10087] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.604995][T10087] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.741454][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 440.863264][T18799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3689'. [ 440.878524][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 440.898531][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 440.948279][T10087] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.957480][T10087] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.005202][T10087] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.029597][T10087] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.624087][T18839] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 442.064306][T18857] validate_nla: 35 callbacks suppressed [ 442.064332][T18857] netlink: 'syz.3.3708': attribute type 11 has an invalid length. [ 442.349142][T18877] netlink: 'syz.4.3717': attribute type 39 has an invalid length. [ 442.372532][T18882] Bluetooth: MGMT ver 1.23 [ 442.594645][T18884] batman_adv: batadv0: Adding interface: dummy0 [ 442.620310][T18884] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.667425][T18884] batman_adv: batadv0: Interface activated: dummy0 [ 442.756394][T18890] batadv0: mtu less than device minimum [ 442.779881][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.792348][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.804105][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.816301][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.828311][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.840275][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.852397][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.864427][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 442.876443][T18890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.077281][T18914] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 443.482175][T18930] hsr0 speed is unknown, defaulting to 1000 [ 443.495368][T18935] bridge2: entered promiscuous mode [ 443.501111][T18935] bridge2: entered allmulticast mode [ 444.505131][T18974] FAULT_INJECTION: forcing a failure. [ 444.505131][T18974] name failslab, interval 1, probability 0, space 0, times 0 [ 444.545347][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.2.3749 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 444.545381][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.545398][T18974] Call Trace: [ 444.545407][T18974] [ 444.545417][T18974] dump_stack_lvl+0x189/0x250 [ 444.545450][T18974] ? __pfx____ratelimit+0x10/0x10 [ 444.545476][T18974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.545501][T18974] ? __pfx__printk+0x10/0x10 [ 444.545537][T18974] ? __pfx___might_resched+0x10/0x10 [ 444.545564][T18974] should_fail_ex+0x414/0x560 [ 444.545594][T18974] should_failslab+0xa8/0x100 [ 444.545633][T18974] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 444.545664][T18974] ? __alloc_skb+0x112/0x2d0 [ 444.545696][T18974] __alloc_skb+0x112/0x2d0 [ 444.545730][T18974] __ip6_append_data+0x2c16/0x3f30 [ 444.545755][T18974] ? __lock_acquire+0xab9/0xd20 [ 444.545820][T18974] ? __pfx_raw6_getfrag+0x10/0x10 [ 444.545871][T18974] ? __pfx___ip6_append_data+0x10/0x10 [ 444.545893][T18974] ? __pfx_ip6_mtu+0x10/0x10 [ 444.545913][T18974] ? __sock_tx_timestamp+0x10/0x60 [ 444.545947][T18974] ip6_append_data+0x1c4/0x380 [ 444.545977][T18974] ? __pfx_raw6_getfrag+0x10/0x10 [ 444.546009][T18974] rawv6_sendmsg+0x127a/0x1820 [ 444.546059][T18974] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 444.546117][T18974] ? __pfx_aa_sk_perm+0x10/0x10 [ 444.546151][T18974] ? sock_rps_record_flow+0x19/0x410 [ 444.546178][T18974] ? inet_sendmsg+0x2f4/0x370 [ 444.546198][T18974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.546227][T18974] __sock_sendmsg+0x19c/0x270 [ 444.546254][T18974] ____sys_sendmsg+0x52d/0x830 [ 444.546294][T18974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.546338][T18974] ? import_iovec+0x74/0xa0 [ 444.546364][T18974] ___sys_sendmsg+0x21f/0x2a0 [ 444.546399][T18974] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.546475][T18974] ? __fget_files+0x2a/0x420 [ 444.546506][T18974] ? __fget_files+0x3a0/0x420 [ 444.546552][T18974] __sys_sendmmsg+0x227/0x430 [ 444.546592][T18974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 444.546621][T18974] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 444.546682][T18974] ? ksys_write+0x22a/0x250 [ 444.546713][T18974] ? __pfx_ksys_write+0x10/0x10 [ 444.546739][T18974] ? rcu_is_watching+0x15/0xb0 [ 444.546773][T18974] __x64_sys_sendmmsg+0xa0/0xc0 [ 444.546808][T18974] do_syscall_64+0xfa/0x3b0 [ 444.546835][T18974] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.546860][T18974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.546881][T18974] ? clear_bhb_loop+0x60/0xb0 [ 444.546908][T18974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.546935][T18974] RIP: 0033:0x7f101058ebe9 [ 444.546954][T18974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.546972][T18974] RSP: 002b:00007f10114af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 444.546995][T18974] RAX: ffffffffffffffda RBX: 00007f10107b5fa0 RCX: 00007f101058ebe9 [ 444.547009][T18974] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 444.547023][T18974] RBP: 00007f10114af090 R08: 0000000000000000 R09: 0000000000000000 [ 444.547036][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.547048][T18974] R13: 00007f10107b6038 R14: 00007f10107b5fa0 R15: 00007ffe495ccfd8 [ 444.547086][T18974] [ 444.987333][T18978] __nla_validate_parse: 11 callbacks suppressed [ 444.987357][T18978] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3750'. [ 445.316560][T19000] netlink: 'syz.1.3758': attribute type 16 has an invalid length. [ 445.351189][T19000] netlink: 'syz.1.3758': attribute type 17 has an invalid length. [ 445.372438][T19012] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3760'. [ 445.415073][ T5947] hsr0 speed is unknown, defaulting to 1000 [ 445.426282][ T5947] syz1: Port: 1 Link DOWN [ 445.598912][T19023] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3763'. [ 445.826452][T19034] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3770'. [ 445.858433][T19034] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3770'. [ 446.121244][T19043] hsr0 speed is unknown, defaulting to 1000 [ 446.624769][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3777'. [ 447.067098][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 447.588389][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 447.693632][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3789'. [ 447.936722][T19125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3793'. [ 448.211767][T19143] net_ratelimit: 13 callbacks suppressed [ 448.211789][T19143] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 448.275344][T19132] netlink: 'syz.1.3794': attribute type 13 has an invalid length. [ 448.300827][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3795'. [ 448.454151][T19155] FAULT_INJECTION: forcing a failure. [ 448.454151][T19155] name failslab, interval 1, probability 0, space 0, times 0 [ 448.483884][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.4.3799 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 448.483919][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.483933][T19155] Call Trace: [ 448.483942][T19155] [ 448.483952][T19155] dump_stack_lvl+0x189/0x250 [ 448.483984][T19155] ? __pfx____ratelimit+0x10/0x10 [ 448.484011][T19155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.484038][T19155] ? __pfx__printk+0x10/0x10 [ 448.484085][T19155] should_fail_ex+0x414/0x560 [ 448.484117][T19155] should_failslab+0xa8/0x100 [ 448.484152][T19155] kmem_cache_alloc_noprof+0x73/0x3c0 [ 448.484203][T19155] ? skb_clone+0x212/0x3a0 [ 448.484229][T19155] skb_clone+0x212/0x3a0 [ 448.484247][T19155] ? __skb_tstamp_tx+0x519/0xee0 [ 448.484289][T19155] __skb_tstamp_tx+0x526/0xee0 [ 448.484329][T19155] __dev_queue_xmit+0x1fed/0x3b50 [ 448.484364][T19155] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 448.484396][T19155] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 448.484420][T19155] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 448.484447][T19155] ? rcu_is_watching+0x15/0xb0 [ 448.484474][T19155] ? __pfx___dev_queue_xmit+0x10/0x10 [ 448.484498][T19155] ? look_up_lock_class+0x74/0x170 [ 448.484528][T19155] ? register_lock_class+0x51/0x320 [ 448.484567][T19155] ? __lock_acquire+0xab9/0xd20 [ 448.484613][T19155] ? ip6_mr_output+0x4e9/0x1100 [ 448.484646][T19155] ? ip6_finish_output2+0xf99/0x16a0 [ 448.484678][T19155] ip6_finish_output2+0x11bc/0x16a0 [ 448.484708][T19155] ? ip6_finish_output2+0x701/0x16a0 [ 448.484745][T19155] ? __pfx_ip6_finish_output2+0x10/0x10 [ 448.484772][T19155] ? ip6_mtu+0x7d/0x3f0 [ 448.484797][T19155] ? ip6_finish_output+0x2ef/0x4e0 [ 448.484824][T19155] ip6_mr_output+0x4e9/0x1100 [ 448.484847][T19155] ? __lock_acquire+0xab9/0xd20 [ 448.484884][T19155] ? ip6_mr_output+0x1ca/0x1100 [ 448.484913][T19155] ? __pfx_ip6_mr_output+0x10/0x10 [ 448.484946][T19155] ? __ip6_local_out+0x609/0x870 [ 448.484980][T19155] ? __ip6_local_out+0x82c/0x870 [ 448.485006][T19155] ? __lock_acquire+0xab9/0xd20 [ 448.485039][T19155] ? __ip6_local_out+0x609/0x870 [ 448.485082][T19155] ? skb_dst+0x4f/0xd0 [ 448.485112][T19155] ? dst_output+0x17b/0x1c0 [ 448.485138][T19155] ? ip6_send_skb+0x10f/0x390 [ 448.485164][T19155] ip6_send_skb+0x1d5/0x390 [ 448.485194][T19155] rawv6_push_pending_frames+0x6e9/0x8d0 [ 448.485232][T19155] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 448.485266][T19155] ? __pfx_raw6_getfrag+0x10/0x10 [ 448.485309][T19155] rawv6_sendmsg+0x1331/0x1820 [ 448.485357][T19155] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 448.485417][T19155] ? __pfx_aa_sk_perm+0x10/0x10 [ 448.485451][T19155] ? sock_rps_record_flow+0x19/0x410 [ 448.485478][T19155] ? inet_sendmsg+0x2f4/0x370 [ 448.485498][T19155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.485527][T19155] __sock_sendmsg+0x19c/0x270 [ 448.485557][T19155] ____sys_sendmsg+0x52d/0x830 [ 448.485597][T19155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.485639][T19155] ? import_iovec+0x74/0xa0 [ 448.485664][T19155] ___sys_sendmsg+0x21f/0x2a0 [ 448.485699][T19155] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.485777][T19155] ? __fget_files+0x2a/0x420 [ 448.485810][T19155] ? __fget_files+0x3a0/0x420 [ 448.485857][T19155] __sys_sendmmsg+0x227/0x430 [ 448.485897][T19155] ? __pfx___sys_sendmmsg+0x10/0x10 [ 448.485927][T19155] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 448.485989][T19155] ? ksys_write+0x22a/0x250 [ 448.486021][T19155] ? __pfx_ksys_write+0x10/0x10 [ 448.486047][T19155] ? rcu_is_watching+0x15/0xb0 [ 448.486077][T19155] __x64_sys_sendmmsg+0xa0/0xc0 [ 448.486118][T19155] do_syscall_64+0xfa/0x3b0 [ 448.486145][T19155] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.486172][T19155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.486194][T19155] ? clear_bhb_loop+0x60/0xb0 [ 448.486222][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.486244][T19155] RIP: 0033:0x7fea4fd8ebe9 [ 448.486264][T19155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.486290][T19155] RSP: 002b:00007fea50c64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 448.486313][T19155] RAX: ffffffffffffffda RBX: 00007fea4ffb5fa0 RCX: 00007fea4fd8ebe9 [ 448.486329][T19155] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 448.486343][T19155] RBP: 00007fea50c64090 R08: 0000000000000000 R09: 0000000000000000 [ 448.486355][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.486368][T19155] R13: 00007fea4ffb6038 R14: 00007fea4ffb5fa0 R15: 00007ffcf2b550a8 [ 448.486404][T19155] [ 448.976424][T19132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.045247][T19151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.215194][T19151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.682574][T19190] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 449.747267][T19190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.906757][T19203] netlink: 'syz.1.3814': attribute type 9 has an invalid length. [ 449.931930][T19204] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 450.004774][T19208] __nla_validate_parse: 1 callbacks suppressed [ 450.004796][T19208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3817'. [ 450.062766][T19208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3817'. [ 450.091856][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'. [ 450.092508][T19214] netlink: 'syz.2.3820': attribute type 2 has an invalid length. [ 450.180856][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 450.666979][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'. [ 450.683566][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'. [ 450.803074][T19222] batman_adv: batadv0: Interface deactivated: dummy0 [ 450.874418][T19233] FAULT_INJECTION: forcing a failure. [ 450.874418][T19233] name failslab, interval 1, probability 0, space 0, times 0 [ 450.897365][T19233] CPU: 0 UID: 0 PID: 19233 Comm: syz.0.3824 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 450.897404][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.897418][T19233] Call Trace: [ 450.897427][T19233] [ 450.897438][T19233] dump_stack_lvl+0x189/0x250 [ 450.897470][T19233] ? __pfx____ratelimit+0x10/0x10 [ 450.897498][T19233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.897525][T19233] ? __pfx__printk+0x10/0x10 [ 450.897551][T19233] ? __lock_acquire+0xab9/0xd20 [ 450.897602][T19233] should_fail_ex+0x414/0x560 [ 450.897633][T19233] should_failslab+0xa8/0x100 [ 450.897667][T19233] kmem_cache_alloc_noprof+0x73/0x3c0 [ 450.897696][T19233] ? skb_clone+0x212/0x3a0 [ 450.897713][T19233] ? __lock_acquire+0xab9/0xd20 [ 450.897749][T19233] skb_clone+0x212/0x3a0 [ 450.897766][T19233] ? __skb_tstamp_tx+0x519/0xee0 [ 450.897797][T19233] __skb_tstamp_tx+0x526/0xee0 [ 450.897837][T19233] __dev_queue_xmit+0x1fed/0x3b50 [ 450.897860][T19233] ? register_lock_class+0x51/0x320 [ 450.897898][T19233] ? __lock_acquire+0xab9/0xd20 [ 450.897952][T19233] ? __pfx___dev_queue_xmit+0x10/0x10 [ 450.897974][T19233] ? read_seqbegin+0x122/0x250 [ 450.897997][T19233] ? neigh_resolve_output+0x438/0x750 [ 450.898022][T19233] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.898051][T19233] ? read_seqbegin+0x1ac/0x250 [ 450.898076][T19233] ? __pfx_read_seqbegin+0x10/0x10 [ 450.898098][T19233] ? __local_bh_enable_ip+0x12d/0x1c0 [ 450.898119][T19233] ? eth_header+0x11b/0x200 [ 450.898151][T19233] ? __asan_memcpy+0x40/0x70 [ 450.898177][T19233] ? eth_header+0x11b/0x200 [ 450.898210][T19233] ? __pfx_eth_header+0x10/0x10 [ 450.898237][T19233] ? neigh_resolve_output+0x624/0x750 [ 450.898301][T19233] ip6_finish_output2+0x11fb/0x16a0 [ 450.898332][T19233] ? ip6_finish_output2+0x701/0x16a0 [ 450.898363][T19233] ? ip6_mtu+0x7d/0x3f0 [ 450.898383][T19233] ? __pfx_ip6_finish_output2+0x10/0x10 [ 450.898408][T19233] ? ip6_mtu+0x7d/0x3f0 [ 450.898427][T19233] ? ip6_mtu+0x321/0x3f0 [ 450.898449][T19233] ? ip6_finish_output+0x2ef/0x4e0 [ 450.898476][T19233] ip6_mr_output+0x4e9/0x1100 [ 450.898501][T19233] ? __lock_acquire+0xab9/0xd20 [ 450.898537][T19233] ? ip6_mr_output+0x1ca/0x1100 [ 450.898565][T19233] ? __pfx_ip6_mr_output+0x10/0x10 [ 450.898598][T19233] ? __ip6_local_out+0x609/0x870 [ 450.898631][T19233] ? __ip6_local_out+0x82c/0x870 [ 450.898656][T19233] ? __lock_acquire+0xab9/0xd20 [ 450.898689][T19233] ? __ip6_local_out+0x609/0x870 [ 450.898732][T19233] ? skb_dst+0x4f/0xd0 [ 450.898760][T19233] ? dst_output+0x17b/0x1c0 [ 450.898785][T19233] ? ip6_send_skb+0x10f/0x390 [ 450.898811][T19233] ip6_send_skb+0x1d5/0x390 [ 450.898840][T19233] rawv6_push_pending_frames+0x6e9/0x8d0 [ 450.898879][T19233] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 450.898912][T19233] ? __pfx_raw6_getfrag+0x10/0x10 [ 450.898947][T19233] rawv6_sendmsg+0x1331/0x1820 [ 450.898995][T19233] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 450.899051][T19233] ? __pfx_aa_sk_perm+0x10/0x10 [ 450.899084][T19233] ? sock_rps_record_flow+0x19/0x410 [ 450.899112][T19233] ? inet_sendmsg+0x2f4/0x370 [ 450.899132][T19233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.899160][T19233] __sock_sendmsg+0x19c/0x270 [ 450.899189][T19233] ____sys_sendmsg+0x52d/0x830 [ 450.899228][T19233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.899273][T19233] ? import_iovec+0x74/0xa0 [ 450.899305][T19233] ___sys_sendmsg+0x21f/0x2a0 [ 450.899341][T19233] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.899421][T19233] ? __fget_files+0x2a/0x420 [ 450.899452][T19233] ? __fget_files+0x3a0/0x420 [ 450.899497][T19233] __sys_sendmmsg+0x227/0x430 [ 450.899536][T19233] ? __pfx___sys_sendmmsg+0x10/0x10 [ 450.899565][T19233] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 450.899628][T19233] ? ksys_write+0x22a/0x250 [ 450.899660][T19233] ? __pfx_ksys_write+0x10/0x10 [ 450.899697][T19233] __x64_sys_sendmmsg+0xa0/0xc0 [ 450.899732][T19233] do_syscall_64+0xfa/0x3b0 [ 450.899760][T19233] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.899784][T19233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.899806][T19233] ? clear_bhb_loop+0x60/0xb0 [ 450.899832][T19233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.899853][T19233] RIP: 0033:0x7fe4e298ebe9 [ 450.899875][T19233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.899896][T19233] RSP: 002b:00007fe4e383a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 450.899919][T19233] RAX: ffffffffffffffda RBX: 00007fe4e2bb5fa0 RCX: 00007fe4e298ebe9 [ 450.899934][T19233] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 450.899947][T19233] RBP: 00007fe4e383a090 R08: 0000000000000000 R09: 0000000000000000 [ 450.899960][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.899972][T19233] R13: 00007fe4e2bb6038 R14: 00007fe4e2bb5fa0 R15: 00007ffc94af7e78 [ 450.900009][T19233] [ 451.922551][T19222] bridge0: left promiscuous mode [ 451.936441][T19208] bridge_slave_1: left allmulticast mode [ 451.943562][T19208] bridge_slave_1: left promiscuous mode [ 451.960081][T19208] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.006529][T19208] bridge_slave_0: left allmulticast mode [ 452.012482][T19208] bridge_slave_0: left promiscuous mode [ 452.019385][T19208] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.227092][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3825'. [ 452.253014][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3825'. [ 452.270724][T19235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3825'. [ 452.285587][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.314905][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.368662][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.405831][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.435085][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3830'. [ 452.452773][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.475855][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.494972][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.511055][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.753611][T19239] TCP: TCP_TX_DELAY enabled [ 452.884877][T19263] FAULT_INJECTION: forcing a failure. [ 452.884877][T19263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.955433][T19263] CPU: 0 UID: 0 PID: 19263 Comm: syz.4.3835 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 452.955467][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.955481][T19263] Call Trace: [ 452.955489][T19263] [ 452.955499][T19263] dump_stack_lvl+0x189/0x250 [ 452.955529][T19263] ? __pfx____ratelimit+0x10/0x10 [ 452.955557][T19263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.955583][T19263] ? __pfx__printk+0x10/0x10 [ 452.955620][T19263] ? __might_fault+0xb0/0x130 [ 452.955662][T19263] should_fail_ex+0x414/0x560 [ 452.955693][T19263] _copy_from_user+0x2d/0xb0 [ 452.955715][T19263] kstrtouint_from_user+0xc4/0x170 [ 452.955748][T19263] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 452.955798][T19263] proc_fail_nth_write+0x88/0x200 [ 452.955824][T19263] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.955856][T19263] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.955882][T19263] vfs_write+0x27e/0xa90 [ 452.955922][T19263] ? __pfx_vfs_write+0x10/0x10 [ 452.955954][T19263] ? __fget_files+0x2a/0x420 [ 452.955992][T19263] ? __fget_files+0x3a0/0x420 [ 452.956023][T19263] ? __fget_files+0x2a/0x420 [ 452.956078][T19263] ksys_write+0x145/0x250 [ 452.956111][T19263] ? __pfx_ksys_write+0x10/0x10 [ 452.956136][T19263] ? rcu_is_watching+0x15/0xb0 [ 452.956165][T19263] ? do_syscall_64+0xbe/0x3b0 [ 452.956199][T19263] do_syscall_64+0xfa/0x3b0 [ 452.956225][T19263] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.956251][T19263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.956273][T19263] ? clear_bhb_loop+0x60/0xb0 [ 452.956300][T19263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.956321][T19263] RIP: 0033:0x7fea4fd8d69f [ 452.956341][T19263] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 452.956359][T19263] RSP: 002b:00007fea50c64030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 452.956381][T19263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fea4fd8d69f [ 452.956397][T19263] RDX: 0000000000000001 RSI: 00007fea50c640a0 RDI: 0000000000000004 [ 452.956410][T19263] RBP: 00007fea50c64090 R08: 0000000000000000 R09: 0000000000000000 [ 452.956424][T19263] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 452.956437][T19263] R13: 00007fea4ffb6038 R14: 00007fea4ffb5fa0 R15: 00007ffcf2b550a8 [ 452.956474][T19263] [ 453.537936][T19296] wg2: entered promiscuous mode [ 453.677002][T19308] syzkaller0: entered promiscuous mode [ 453.682595][T19308] syzkaller0: entered allmulticast mode [ 453.789932][T19315] netlink: 'syz.4.3841': attribute type 1 has an invalid length. [ 453.822387][T19315] bond5: entered promiscuous mode [ 453.829132][T19315] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.578614][T19334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.609585][T19342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.658103][T19347] tipc: Enabled bearer , priority 0 [ 454.671184][T19347] syzkaller0: entered promiscuous mode [ 454.683185][T19347] syzkaller0: entered allmulticast mode [ 454.775983][T19347] tipc: Resetting bearer [ 454.959147][T19347] tipc: Resetting bearer [ 454.991747][T19347] tipc: Disabling bearer [ 455.134538][T19378] __nla_validate_parse: 7 callbacks suppressed [ 455.134562][T19378] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3861'. [ 455.178946][T19378] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3861'. [ 455.263039][T19381] netlink: 'syz.0.3862': attribute type 4 has an invalid length. [ 455.344250][T19389] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 455.363835][T19389] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 455.380344][T19389] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3864'. [ 455.395553][T19391] tipc: Enabled bearer , priority 0 [ 455.407416][T19391] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 455.423682][T19391] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 455.454764][T19391] tipc: Resetting bearer [ 455.540499][T19397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3868'. [ 455.569155][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3868'. [ 455.643399][T19397] vlan2: entered allmulticast mode [ 455.663511][T19397] bridge2: entered allmulticast mode [ 455.788275][T19409] tipc: Cannot configure node identity twice [ 456.375165][T19435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3881'. [ 456.445889][T10610] tipc: Node number set to 57360460 [ 456.842245][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3877'. [ 456.910016][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'. [ 456.946682][T19458] dvmrp1: entered allmulticast mode [ 457.021141][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3889'. [ 457.190020][T19468] IPv6: sit1: Disabled Multicast RS [ 457.207273][T19468] sit1: entered allmulticast mode [ 457.304975][T19469] netlink: 'syz.0.3890': attribute type 5 has an invalid length. [ 457.690521][T19482] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3895'. [ 457.742525][T19483] sctp: [Deprecated]: syz.4.3896 (pid 19483) Use of int in max_burst socket option. [ 457.742525][T19483] Use struct sctp_assoc_value instead [ 458.261426][T19503] ip6gre2: entered allmulticast mode [ 458.919262][T19536] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 458.944758][T19537] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 459.806096][T19571] netlink: 'syz.4.3921': attribute type 2 has an invalid length. [ 460.108836][T19581] netlink: 'syz.4.3924': attribute type 62 has an invalid length. [ 460.159442][T19583] __nla_validate_parse: 8 callbacks suppressed [ 460.159466][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'. [ 460.230869][T19583] netlink: 'syz.1.3927': attribute type 4 has an invalid length. [ 460.320200][T19594] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 460.489472][T19602] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3932'. [ 460.739219][T19620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3937'. [ 460.961292][T19632] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 461.058845][T19641] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3943'. [ 461.237826][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3947'. [ 461.584605][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'. [ 461.869439][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3961'. [ 461.943506][T19696] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 462.629080][T19710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.662434][T19710] team0: Failed to send port change of device bond3 via netlink (err -105) [ 462.711039][T19710] team0: Failed to send options change via netlink (err -105) [ 462.739174][T19710] team0: Port device bond3 added [ 462.775534][ T12] team0: Failed to send port change of device bond3 via netlink (err -105) [ 462.812530][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3968'. [ 462.925099][T19723] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3970'. [ 462.952505][T19726] netlink: 'syz.1.3971': attribute type 21 has an invalid length. [ 462.968708][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 462.974890][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 462.983087][T19726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3971'. [ 463.074673][T19735] netlink: 'syz.4.3975': attribute type 1 has an invalid length. [ 463.170112][T19735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.249106][T19735] vlan4: entered allmulticast mode [ 463.255093][T19735] veth1: entered allmulticast mode [ 463.265326][T19735] bond6: (slave vlan4): making interface the new active one [ 463.274623][T19735] bond6: (slave vlan4): Enslaving as an active interface with an up link [ 463.964167][T19777] hsr_slave_0 (unregistering): left promiscuous mode [ 464.405422][T19798] tipc: Enabled bearer , priority 12 [ 465.515913][ T6008] tipc: Node number set to 422451425 [ 467.642723][T19836] netlink: 'syz.0.4002': attribute type 6 has an invalid length. [ 467.693976][T19842] netlink: 'syz.0.4002': attribute type 6 has an invalid length. [ 467.723784][T19838] __nla_validate_parse: 8 callbacks suppressed [ 467.723805][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4001'. [ 467.939551][T19850] syzkaller0: entered promiscuous mode [ 467.960208][T19850] syzkaller0: entered allmulticast mode [ 467.981495][T19849] tipc: Started in network mode [ 468.000377][T19849] tipc: Node identity ae1b5be9564f, cluster identity 4711 [ 468.012035][T19849] tipc: Enabled bearer , priority 0 [ 468.062812][T19856] tipc: Enabled bearer , priority 0 [ 468.093933][T19856] syzkaller0: entered promiscuous mode [ 468.102824][T19856] syzkaller0: entered allmulticast mode [ 468.137377][T19849] tipc: Resetting bearer [ 468.185010][T19849] tipc: Disabling bearer [ 468.203063][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4011'. [ 468.246606][T19856] tipc: Resetting bearer [ 468.272877][T19854] tipc: Resetting bearer [ 468.325889][T19854] tipc: Disabling bearer [ 468.340437][T19870] delete_channel: no stack [ 468.356756][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4012'. [ 468.439549][T19877] netlink: 'syz.2.4014': attribute type 4 has an invalid length. [ 469.067146][T19912] sctp: [Deprecated]: syz.2.4025 (pid 19912) Use of int in max_burst socket option. [ 469.067146][T19912] Use struct sctp_assoc_value instead [ 469.304930][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4031'. [ 469.327829][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4031'. [ 469.356955][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4032'. [ 470.961276][T20013] tipc: Enabled bearer , priority 10 [ 471.106184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.155284][T20030] vlan3: entered promiscuous mode [ 471.165981][T20030] vlan3: entered allmulticast mode [ 471.198970][T20030] hsr_slave_1: entered allmulticast mode [ 471.475400][T20053] netlink: 'syz.4.4064': attribute type 21 has an invalid length. [ 471.488216][T20053] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4064'. [ 471.668850][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4069'. [ 471.669599][T20065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.711558][T20064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4068'. [ 471.793203][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'. [ 472.197819][T20076] team0 (unregistering): Port device team_slave_0 removed [ 472.214966][T20076] team0 (unregistering): Port device team_slave_1 removed [ 472.251485][T20080] IPv6: sit1: Disabled Multicast RS [ 472.259597][T20080] sit1: entered allmulticast mode [ 472.936318][T20123] __nla_validate_parse: 4 callbacks suppressed [ 472.936342][T20123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4087'. [ 473.049210][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 473.059252][T20126] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 473.066895][T20126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.088557][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 473.135065][T20129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4088'. [ 473.165045][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 473.798835][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 474.656742][T20202] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4106'. [ 474.759286][T20202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4106'. [ 474.974888][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 475.304730][T20238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4117'. [ 475.318934][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.335454][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.879482][T20274] syzkaller0: entered promiscuous mode [ 475.901578][T20275] netlink: 'syz.3.4124': attribute type 1 has an invalid length. [ 475.906072][T20274] syzkaller0: entered allmulticast mode [ 476.014118][T20275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.116333][T20287] vlan2: entered allmulticast mode [ 476.124913][T20287] veth1: entered allmulticast mode [ 476.141043][T20287] bond2: (slave vlan2): making interface the new active one [ 476.151205][T20287] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 476.377330][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.593388][T20318] netlink: 'syz.3.4135': attribute type 39 has an invalid length. [ 476.746604][T20324] syzkaller1: entered promiscuous mode [ 476.752148][T20324] syzkaller1: entered allmulticast mode [ 476.886698][T20329] netlink: 'syz.3.4138': attribute type 9 has an invalid length. [ 478.071205][T20365] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 478.267471][T20379] __nla_validate_parse: 7 callbacks suppressed [ 478.267493][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4154'. [ 478.307966][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 478.462565][T20379] hsr_slave_0 (unregistering): left promiscuous mode [ 478.597589][T20395] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4160'. [ 478.610483][T20388] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 478.720370][T20402] sctp: [Deprecated]: syz.0.4162 (pid 20402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.720370][T20402] Use struct sctp_sack_info instead [ 479.059204][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'. [ 479.125182][T20424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4171'. [ 479.167835][T20426] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4170'. [ 479.234301][T20428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.973518][T20469] netlink: 'syz.0.4186': attribute type 2 has an invalid length. [ 480.060683][T20475] sctp: [Deprecated]: syz.3.4187 (pid 20475) Use of int in maxseg socket option. [ 480.060683][T20475] Use struct sctp_assoc_value instead [ 480.155467][T20470] svc: failed to register nfsdv3 RPC service (errno 111). [ 480.157224][T20477] sctp: Trying to GSO but underlying device doesn't support it. [ 480.198566][T20470] svc: failed to register nfsaclv3 RPC service (errno 111). [ 480.285316][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4191'. [ 480.545202][T20491] netlink: 'syz.2.4193': attribute type 83 has an invalid length. [ 480.653057][T20493] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 480.661404][T20493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4194'. [ 480.741374][T20497] tipc: Trying to set illegal importance in message [ 481.154554][T20520] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4205'. [ 481.369514][T20524] can: request_module (can-proto-0) failed. [ 481.538580][T20538] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4211'. [ 481.562230][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4209'. [ 482.400759][T20579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.468167][T10626] IPVS: starting estimator thread 0... [ 482.476440][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.490229][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.501144][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.512016][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.532606][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.554302][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.562162][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.569467][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.582937][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.590522][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.599016][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.615012][T20591] IPVS: using max 27 ests per chain, 64800 per kthread [ 482.647484][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.666155][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.685735][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.692694][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.707059][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.724389][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.752860][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.764648][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.825501][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.843283][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.876931][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.884067][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.909194][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.917187][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.924380][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.946506][T20602] hsr0 speed is unknown, defaulting to 1000 [ 482.964373][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 482.991470][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.012124][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.038411][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.060825][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.082105][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.125957][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.139535][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.147857][T20608] netlink: 'syz.0.4230': attribute type 6 has an invalid length. [ 483.162964][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.171685][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.185396][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.192796][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.217792][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.224853][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.277942][T20589] IPVS: ip_vs_add_dest(): server weight less than zero [ 483.343664][T20616] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 483.494863][T20628] __nla_validate_parse: 10 callbacks suppressed [ 483.494886][T20628] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4236'. [ 483.728246][T20649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4238'. [ 483.861804][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4240'. [ 484.086840][T20668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4243'. [ 484.223742][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4244'. [ 484.495585][T20683] tipc: Enabling of bearer rejected, already enabled [ 484.517980][T20682] veth0: entered promiscuous mode [ 484.601954][T20678] veth0: left promiscuous mode [ 484.637281][T20691] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4249'. [ 485.130181][T20718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4260'. [ 485.142306][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4259'. [ 485.294399][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 485.306527][T20727] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4262'. [ 485.841938][T20750] syzkaller1: entered promiscuous mode [ 485.867939][T20750] syzkaller1: entered allmulticast mode [ 486.113581][T20756] can: request_module (can-proto-0) failed. [ 486.397833][T20774] netlink: 'syz.3.4275': attribute type 11 has an invalid length. [ 486.569229][T20786] tipc: New replicast peer: 0.0.0.0 [ 486.587096][T20786] tipc: Enabled bearer , priority 10 [ 486.974622][T20812] netlink: 'syz.3.4288': attribute type 12 has an invalid length. [ 487.197120][T20826] netlink: 'syz.1.4291': attribute type 4 has an invalid length. [ 487.215888][T20826] netlink: 'syz.1.4291': attribute type 4 has an invalid length. [ 487.386239][T20832] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 487.705884][T10640] tipc: Node number set to 4166278121 [ 488.588314][T20892] netlink: 'syz.1.4314': attribute type 24 has an invalid length. [ 488.607086][T20892] netlink: 'syz.1.4314': attribute type 24 has an invalid length. [ 488.779102][T20889] syzkaller0: entered promiscuous mode [ 488.784864][T20889] syzkaller0: entered allmulticast mode [ 488.816639][T20893] tipc: Enabled bearer , priority 0 [ 488.826646][T20904] netlink: 'syz.1.4316': attribute type 1 has an invalid length. [ 488.838361][T20903] netlink: 'syz.3.4313': attribute type 21 has an invalid length. [ 488.854864][T20904] __nla_validate_parse: 10 callbacks suppressed [ 488.854888][T20904] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4316'. [ 489.051336][T20910] netlink: 'syz.1.4319': attribute type 39 has an invalid length. [ 489.182922][T20888] tipc: Resetting bearer [ 489.507551][T20931] netlink: 'syz.0.4324': attribute type 58 has an invalid length. [ 489.524078][T20931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4324'. [ 491.051322][T20888] tipc: Disabling bearer [ 491.268872][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4325'. [ 491.548211][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4332'. [ 491.556347][T20950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.670482][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 491.677474][T20953] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.4334'. [ 491.696704][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 492.160035][T20984] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 492.555375][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'. [ 493.270783][T21011] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4350'. [ 493.339054][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4360'. [ 493.510888][T21058] netlink: 'syz.2.4362': attribute type 2 has an invalid length. [ 493.541659][T21060] netlink: 'syz.2.4362': attribute type 2 has an invalid length. [ 493.941382][T21078] __nla_validate_parse: 3 callbacks suppressed [ 493.941404][T21078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4371'. [ 493.969868][T21083] veth0: entered promiscuous mode [ 494.000118][T21071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4368'. [ 494.057327][T21073] veth0: left promiscuous mode [ 494.138639][T21086] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 494.160395][T21086] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4374'. [ 494.188294][T21089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4373'. [ 494.226050][ T5868] Bluetooth: hci0: command tx timeout [ 494.274265][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4374'. [ 494.294075][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4374'. [ 494.339678][T21093] tipc: Enabling of bearer rejected, already enabled [ 494.358526][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4374'. [ 494.640466][T21117] lo speed is unknown, defaulting to 1000 [ 494.680121][T21117] lo speed is unknown, defaulting to 1000 [ 494.908788][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4386'. [ 494.992592][T21125] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4386'. [ 495.066579][T21126] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4386'. [ 495.164655][T21117] lo speed is unknown, defaulting to 1000 [ 495.328212][T21125] gretap0: entered promiscuous mode [ 495.341943][T21126] 0{X功: renamed from gretap0 [ 495.372809][T21126] 0{X功: left promiscuous mode [ 495.378133][T21126] 0{X功: entered allmulticast mode [ 495.385146][T21126] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 495.779087][T10640] lo speed is unknown, defaulting to 1000 [ 495.789295][T21117] infiniband syz0: set active [ 495.794050][T21117] infiniband syz0: added lo [ 495.837992][T21117] syz0: rxe_create_cq: returned err = -12 [ 495.844044][T21117] infiniband syz0: Couldn't create ib_mad CQ [ 495.862994][T21117] infiniband syz0: Couldn't open port 1 [ 495.914113][T21151] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 495.943886][T21117] RDS/IB: syz0: added [ 495.965396][T21117] smc: adding ib device syz0 with port count 1 [ 495.974282][T21117] smc: ib device syz0 port 1 has pnetid [ 495.989200][T10640] lo speed is unknown, defaulting to 1000 [ 495.996461][T21117] lo speed is unknown, defaulting to 1000 [ 496.205423][T21171] netlink: 'syz.3.4398': attribute type 1 has an invalid length. [ 496.275078][T21117] lo speed is unknown, defaulting to 1000 [ 496.496969][T21117] lo speed is unknown, defaulting to 1000 [ 496.696339][T21117] lo speed is unknown, defaulting to 1000 [ 496.909309][T21176] netlink: 'syz.3.4400': attribute type 1 has an invalid length. [ 496.928747][T21177] netlink: 'syz.3.4400': attribute type 1 has an invalid length. [ 497.040062][T21176] bond4: entered promiscuous mode [ 497.061237][T21176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 497.184036][T21117] lo speed is unknown, defaulting to 1000 [ 497.480596][T21201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.485145][T21203] "syz.1.4408" (21203) uses obsolete ecb(arc4) skcipher [ 497.909597][T21217] syz.2.4412: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 497.924693][T21217] CPU: 1 UID: 0 PID: 21217 Comm: syz.2.4412 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 497.924728][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.924743][T21217] Call Trace: [ 497.924751][T21217] [ 497.924760][T21217] dump_stack_lvl+0x189/0x250 [ 497.924796][T21217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.924817][T21217] ? __pfx__printk+0x10/0x10 [ 497.924844][T21217] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 497.924867][T21217] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 497.924890][T21217] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 497.924913][T21217] warn_alloc+0x214/0x310 [ 497.924947][T21217] ? stack_depot_save_flags+0x40/0x860 [ 497.924975][T21217] ? __pfx_warn_alloc+0x10/0x10 [ 497.925009][T21217] ? kasan_save_track+0x4f/0x80 [ 497.925037][T21217] ? xskq_create+0x56/0x170 [ 497.925060][T21217] ? xsk_init_queue+0xb0/0x110 [ 497.925093][T21217] ? xsk_setsockopt+0x4dc/0x8d0 [ 497.925113][T21217] ? do_sock_setsockopt+0x179/0x1b0 [ 497.925140][T21217] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 497.925168][T21217] ? do_syscall_64+0xfa/0x3b0 [ 497.925193][T21217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.925225][T21217] __vmalloc_node_range_noprof+0x125/0x12f0 [ 497.925292][T21217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 497.925331][T21217] ? __kasan_kmalloc+0x93/0xb0 [ 497.925363][T21217] vmalloc_user_noprof+0xad/0xf0 [ 497.925394][T21217] ? xskq_create+0xbf/0x170 [ 497.925419][T21217] xskq_create+0xbf/0x170 [ 497.925447][T21217] xsk_init_queue+0xb0/0x110 [ 497.925474][T21217] xsk_setsockopt+0x4dc/0x8d0 [ 497.925499][T21217] ? __pfx_xsk_setsockopt+0x10/0x10 [ 497.925519][T21217] ? __pfx_aa_sk_perm+0x10/0x10 [ 497.925546][T21217] ? aa_sock_opt_perm+0xff/0x1b0 [ 497.925574][T21217] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 497.925599][T21217] ? __pfx_xsk_setsockopt+0x10/0x10 [ 497.925620][T21217] do_sock_setsockopt+0x179/0x1b0 [ 497.925650][T21217] __x64_sys_setsockopt+0x13f/0x1b0 [ 497.925680][T21217] do_syscall_64+0xfa/0x3b0 [ 497.925702][T21217] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.925724][T21217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.925741][T21217] ? clear_bhb_loop+0x60/0xb0 [ 497.925763][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.925780][T21217] RIP: 0033:0x7f101058ebe9 [ 497.925798][T21217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.925814][T21217] RSP: 002b:00007f101146d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 497.925833][T21217] RAX: ffffffffffffffda RBX: 00007f10107b6180 RCX: 00007f101058ebe9 [ 497.925846][T21217] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 497.925856][T21217] RBP: 00007f1010611e19 R08: 0000000000000004 R09: 0000000000000000 [ 497.925866][T21217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.925877][T21217] R13: 00007f10107b6218 R14: 00007f10107b6180 R15: 00007ffe495ccfd8 [ 497.925907][T21217] [ 498.227336][T21217] Mem-Info: [ 498.230533][T21217] active_anon:7228 inactive_anon:0 isolated_anon:0 [ 498.230533][T21217] active_file:1676 inactive_file:39989 isolated_file:0 [ 498.230533][T21217] unevictable:768 dirty:103 writeback:0 [ 498.230533][T21217] slab_reclaimable:12549 slab_unreclaimable:135132 [ 498.230533][T21217] mapped:29262 shmem:1360 pagetables:1254 [ 498.230533][T21217] sec_pagetables:0 bounce:0 [ 498.230533][T21217] kernel_misc_reclaimable:0 [ 498.230533][T21217] free:1285199 free_pcp:13850 free_cma:0 [ 498.301669][T21217] Node 0 active_anon:28812kB inactive_anon:0kB active_file:6704kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117048kB dirty:412kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15340kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 498.350169][T21217] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 498.380897][T21217] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.415267][T21217] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 498.421182][T21217] Node 0 DMA32 free:1231556kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28784kB inactive_anon:0kB active_file:6704kB inactive_file:158184kB unevictable:1536kB writepending:452kB present:3129332kB managed:2557516kB mlocked:0kB bounce:0kB free_pcp:36748kB local_pcp:19432kB free_cma:0kB [ 498.454402][T21217] lowmem_reserve[]: 0 0 1 1 1 [ 498.459401][T21217] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 498.510372][T21217] lowmem_reserve[]: 0 0 0 0 0 [ 498.515185][T21217] Node 1 Normal free:3893604kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19416kB local_pcp:13088kB free_cma:0kB [ 498.548131][T21217] lowmem_reserve[]: 0 0 0 0 0 [ 498.552930][T21217] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 498.560855][T21207] team0: Port device vlan0 removed [ 498.566364][T21217] Node 0 DMA32: 24*4kB (UM) 7*8kB (UM) 211*16kB (UME) 1010*32kB (U) 323*64kB (UME) 148*128kB (UME) 347*256kB (UM) 314*512kB (UM) 153*1024kB (UME) 4*2048kB (UM) 181*4096kB (M) = 1231304kB [ 498.593507][T21217] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 498.616170][T21217] Node 1 Normal: 221*4kB (UE) 52*8kB (UME) 55*16kB (UME) 123*32kB (UME) 36*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3893604kB [ 498.647818][T21217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.669183][T21217] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.685905][T21217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.700288][T21217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.720743][T21217] 43024 total pagecache pages [ 498.737451][T21217] 0 pages in swap cache [ 498.741708][T21217] Free swap = 124996kB [ 498.748248][T21217] Total swap = 124996kB [ 498.752691][T21217] 2097051 pages RAM [ 498.757619][T21217] 0 pages HighMem/MovableOnly [ 498.764616][T21117] lo speed is unknown, defaulting to 1000 [ 498.783621][T21217] 425646 pages reserved [ 498.790157][T21217] 0 pages cma reserved [ 498.821879][T21229] netlink: 'syz.3.4417': attribute type 13 has an invalid length. [ 498.945249][T21232] openvswitch: netlink: Actions may not be safe on all matching packets [ 498.993466][T21234] __nla_validate_parse: 1 callbacks suppressed [ 498.993487][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 499.009156][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4419'. [ 499.126679][T21236] netlink: 'syz.4.4420': attribute type 11 has an invalid length. [ 499.575467][T21258] netlink: 'syz.4.4429': attribute type 1 has an invalid length. [ 499.610187][T21247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4423'. [ 499.620330][T21117] lo speed is unknown, defaulting to 1000 [ 499.736839][T21260] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 499.748494][ T5864] Bluetooth: hci4: command 0x0405 tx timeout [ 499.758720][T21260] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 499.838265][T21258] gretap1: entered promiscuous mode [ 499.883447][T21258] bond7: (slave gretap1): making interface the new active one [ 499.901121][T21258] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 500.214097][T21283] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4434'. [ 500.282890][T21285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4436'. [ 500.335157][T21117] lo speed is unknown, defaulting to 1000 [ 500.491831][T21289] gre1: entered promiscuous mode [ 500.510486][T21289] gre1: entered allmulticast mode [ 500.537853][T21293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.792309][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4443'. [ 500.813780][T21302] 0{X功: entered promiscuous mode [ 501.014264][T21314] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 501.469422][T21332] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 501.870521][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4454'. [ 501.894650][T21347] netlink: 'syz.1.4455': attribute type 10 has an invalid length. [ 501.899864][T21350] netlink: 'syz.3.4457': attribute type 1 has an invalid length. [ 501.905153][T21344] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4454'. [ 501.923434][T21347] bridge0: port 1(team0) entered blocking state [ 501.931551][T21347] bridge0: port 1(team0) entered disabled state [ 501.938683][T21340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4454'. [ 501.949716][T21350] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4457'. [ 501.961183][T21350] netlink: 'syz.3.4457': attribute type 1 has an invalid length. [ 501.972942][T21347] team0: entered allmulticast mode [ 501.981544][T21347] bond3: entered allmulticast mode [ 501.995779][T21350] netlink: 'syz.3.4457': attribute type 2 has an invalid length. [ 502.015726][T21347] team0: entered promiscuous mode [ 502.020905][T21347] bond3: entered promiscuous mode [ 502.311721][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 502.659153][T21382] "syz.4.4469" (21382) uses obsolete ecb(arc4) skcipher [ 503.206184][T21420] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 503.218150][T21420] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 503.227472][T21420] CPU: 0 UID: 0 PID: 21420 Comm: syz.3.4477 Not tainted 6.16.0-syzkaller-12125-g52565a935213 #0 PREEMPT(full) [ 503.239253][T21420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.249331][T21420] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0 [ 503.255342][T21420] Code: 80 3c 2f 00 74 08 48 89 df e8 7f 7a fb f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 54 7a fb f6 4d 8b 2c 24 49 83 c5 [ 503.274970][T21420] RSP: 0018:ffffc900135a6f40 EFLAGS: 00010a06 [ 503.281061][T21420] RAX: 1bd5a9d5a0000003 RBX: ffff888053226e38 RCX: ffff888031ce9e00 [ 503.289048][T21420] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 503.297029][T21420] RBP: ffffc900135a72b0 R08: ffff88805322685f R09: 1ffff1100a644d0b [ 503.305014][T21420] R10: dffffc0000000000 R11: ffffed100a644d0c R12: dead4ead00000018 [ 503.313032][T21420] R13: dffffc0000000000 R14: ffff888053226800 R15: 1ffff1100a644dc7 [ 503.321027][T21420] FS: 00007f553b04c6c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 503.329971][T21420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.336569][T21420] CR2: 000020000000e000 CR3: 000000007d3a2000 CR4: 00000000003526f0 [ 503.344653][T21420] Call Trace: [ 503.347960][T21420] [ 503.350918][T21420] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 503.356581][T21420] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 503.362147][T21420] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 503.367708][T21420] ? __phys_addr+0xd3/0x180 [ 503.372231][T21420] ? __kasan_kmalloc_large+0x85/0xa0 [ 503.377543][T21420] ? rcu_is_watching+0x15/0xb0 [ 503.382333][T21420] ? rcu_is_watching+0x15/0xb0 [ 503.387142][T21420] ? trace_kmalloc+0x1f/0xd0 [ 503.391748][T21420] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 503.398374][T21420] ? __build_skb_around+0x257/0x3e0 [ 503.403596][T21420] smc_diag_dump+0x59/0xa0 [ 503.408039][T21420] netlink_dump+0x6e4/0xe90 [ 503.412583][T21420] ? __pfx_netlink_dump+0x10/0x10 [ 503.417629][T21420] ? __netlink_lookup+0x752/0x810 [ 503.422679][T21420] ? netlink_lookup+0x30/0x200 [ 503.427464][T21420] ? netlink_lookup+0x30/0x200 [ 503.432242][T21420] ? netlink_lookup+0x30/0x200 [ 503.437026][T21420] __netlink_dump_start+0x5cb/0x7e0 [ 503.442248][T21420] smc_diag_handler_dump+0x178/0x210 [ 503.447551][T21420] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 503.453376][T21420] ? __pfx_smc_diag_dump+0x10/0x10 [ 503.458503][T21420] ? sock_diag_lock_handler+0x19/0x290 [ 503.463977][T21420] ? sock_diag_lock_handler+0x19/0x290 [ 503.469631][T21420] sock_diag_rcv_msg+0x4c9/0x600 [ 503.474601][T21420] netlink_rcv_skb+0x205/0x470 [ 503.479383][T21420] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 503.484864][T21420] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.490174][T21420] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.495394][T21420] netlink_unicast+0x82c/0x9e0 [ 503.500201][T21420] ? __pfx_netlink_unicast+0x10/0x10 [ 503.505510][T21420] ? netlink_sendmsg+0x642/0xb30 [ 503.510464][T21420] ? skb_put+0x11b/0x210 [ 503.514728][T21420] netlink_sendmsg+0x805/0xb30 [ 503.519516][T21420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.524862][T21420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 503.529824][T21420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.535126][T21420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.540432][T21420] __sock_sendmsg+0x21c/0x270 [ 503.545129][T21420] ____sys_sendmsg+0x505/0x830 [ 503.549920][T21420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.555230][T21420] ? import_iovec+0x74/0xa0 [ 503.559747][T21420] ___sys_sendmsg+0x21f/0x2a0 [ 503.564460][T21420] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.569694][T21420] ? __fget_files+0x2a/0x420 [ 503.574304][T21420] ? __fget_files+0x3a0/0x420 [ 503.579005][T21420] __x64_sys_sendmsg+0x19b/0x260 [ 503.583965][T21420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.589451][T21420] ? rcu_is_watching+0x15/0xb0 [ 503.594229][T21420] ? do_syscall_64+0xbe/0x3b0 [ 503.598922][T21420] do_syscall_64+0xfa/0x3b0 [ 503.603441][T21420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.609517][T21420] ? asm_sysvec_call_function_single+0x1a/0x20 [ 503.615684][T21420] ? clear_bhb_loop+0x60/0xb0 [ 503.620383][T21420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.626290][T21420] RIP: 0033:0x7f553a18ebe9 [ 503.630721][T21420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.650349][T21420] RSP: 002b:00007f553b04c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.658783][T21420] RAX: ffffffffffffffda RBX: 00007f553a3b6180 RCX: 00007f553a18ebe9 [ 503.666798][T21420] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000003e [ 503.674790][T21420] RBP: 00007f553a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 503.683036][T21420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.691026][T21420] R13: 00007f553a3b6218 R14: 00007f553a3b6180 R15: 00007ffcebe93338 [ 503.699020][T21420] [ 503.702062][T21420] Modules linked in: [ 503.710191][T21420] ---[ end trace 0000000000000000 ]--- [ 503.715899][T21420] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0 [ 503.721934][T21420] Code: 80 3c 2f 00 74 08 48 89 df e8 7f 7a fb f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 54 7a fb f6 4d 8b 2c 24 49 83 c5 [ 503.741666][T21420] RSP: 0018:ffffc900135a6f40 EFLAGS: 00010a06 [ 503.747957][T21420] RAX: 1bd5a9d5a0000003 RBX: ffff888053226e38 RCX: ffff888031ce9e00 [ 503.756037][T21420] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 503.764049][T21420] RBP: ffffc900135a72b0 R08: ffff88805322685f R09: 1ffff1100a644d0b [ 503.772147][T21420] R10: dffffc0000000000 R11: ffffed100a644d0c R12: dead4ead00000018 [ 503.780214][T21420] R13: dffffc0000000000 R14: ffff888053226800 R15: 1ffff1100a644dc7 [ 503.788287][T21420] FS: 00007f553b04c6c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 503.797674][T21420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.804300][T21420] CR2: 000020000000e000 CR3: 000000007d3a2000 CR4: 00000000003526f0 [ 503.812437][T21420] Kernel panic - not syncing: Fatal exception [ 503.818916][T21420] Kernel Offset: disabled [ 503.823252][T21420] Rebooting in 86400 seconds..