last executing test programs: 12.561542172s ago: executing program 0 (id=574): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000206b113a000000000006000000000000f19400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.353887653s ago: executing program 0 (id=576): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047452, 0xfffffffffffffffd) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f00000001c0)=""/64, 0xfffffffffffffffc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206030000000000000000000500000005000100060000006574000000000005236004000000000063bfdcee00"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005800100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) listen(r7, 0x8) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd000011000000ea00000061189d1601b62f00fc000000000000000000000000000001000000000000000000000000000000010c21880b0000000104000800d52e2c4fe684731a85e42e6d47a052c7947096f24ba6083900c578ac3c9e804815cd391892c33f9170705df0b80664e7d92948081d6752f5dae5d2aac4172b67a6f57de9bd770e4f99359b6737269747218d0fd4b7f3fcbf47aaeb96a8ad69ae3824df3a92000086dd787c778f1b2157ea5e748b44ce74fe0eecef21a220a0b21138c87d937035086d3f9526946f19b8847f7a76a9080088be00000002150650030100000000000001080022eb000000002780d90602000000000000080d8b8a190800655800000000b0d36515ca4f6fdbd7614b5c8950651a67e36204edabd309b3d0ddcb9e93f51e0c100d625afb3eefa2304663951f7f34bebd576c4e064488f51a8e01c5e2ed2bc864df1eb76a3634490086491272a7d72dc7efd7ef3e53282bebf3f42cfd809053465c623d765966c81d99375cb3584a35bfbde81f1f1e8cf9ffc7a45bd9a61ccacb4e61f869af0e1144becd64bfacf921ebad0c464afb9a120cb83c014047c46b22d1ea0d8976aa9b4c8eea2d7a4dee542c8bd243a1633ef94b94d305d945666385af4f8e04446cbc98a8b503310bc4b14f58f56bbb5ff7035f6f290000000000"], 0x1ec) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001f80)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c0016800800"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r8 = socket(0xa, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) (async) r9 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) (async) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c71cec2ce080000", @ANYRES16=r6, @ANYBLOB="02002dbd7000fddbdf25260000000c009900030000005c0000001e0094000020010000010000000000810009001400000006005e0000005b00002400f30007000500fbffff030400ff7ffbff09008dfc020001000800c80001800d0000800800420002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000aede57e5f0fa"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) 12.128678524s ago: executing program 0 (id=578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) listen(r1, 0x100101) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000500)={0xde}, 0x8) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000002b40)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffcf) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}}, 0x8000) getsockname$packet(r4, &(0x7f0000000040), &(0x7f0000000180)=0x14) 10.974201226s ago: executing program 0 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x34, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x2, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x8, 0x12, "ec7b7f1a22b7b555297510a9448e9af7"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) 10.558175016s ago: executing program 0 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500fffffffbffffff7f00004000000041000000f34f619572a924d02ed4ec74b4ad0bf8707d6c8d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140006000000000200000000000000000a000006"], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x8010) 4.780579113s ago: executing program 2 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async, rerun: 64) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x880) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x7, 0x80, 0x81, 0x0, 0x0, 0xfe, 0x6, 0x3, 0x8, 0x0, 0xfc, 0x9}, 0xe) (async) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffff2cf}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0x5}, 0x8) (async) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 4.749202841s ago: executing program 4 (id=653): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x22020600) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300400004000000040000000a00000000060000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f00000000c0)=""/193}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="a00000000000000008650a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 64) accept4(r0, 0x0, 0x0, 0x80000) (async) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$kcm(0xa, 0x1, 0x106) (async) r12 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r12, 0x1, 0x8, 0x0, 0x0) 4.486723198s ago: executing program 2 (id=655): r0 = socket$inet(0x2, 0x3, 0x9) socket$inet(0x2, 0x4000000000000001, 0x200) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x4, 0x7, 0x10001, @vifc_lcl_addr=@local, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, 0x0, 0x20004800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r9], 0x24}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000600)={@rand_addr=0x64010100, 0x0, 0x0, 0xa0, 0x0, [{@multicast1}, {@loopback}, {@multicast2}, {@empty}, {@private}, {@multicast1}, {@remote}, {@initdev}, {@broadcast}, {@loopback}]}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.347648828s ago: executing program 4 (id=657): syz_emit_ethernet(0x1a4, &(0x7f0000000040)={@local, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}], @ipv6=@generic={0x4, 0x6, "27d621", 0x166, 0x1d, 0xff, @loopback, @mcast2, {[@routing={0x48, 0x2, 0x0, 0x8, 0x0, [@mcast1]}, @hopopts={0x2f, 0x13, '\x00', [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8e, 0x79, "801e3fed057804ce8682f72ea013ff1a8e967157b758927bae4b83f6627f90eccee88a1153ef37bf99dba7157c4157d7489e5c4232ee111d12a00ddf16a40bbe0700756175060a0f0c7d202ead1b6edd5da4dceff8bb61072258d395b061d941b1ffe2751b843445d752439c05714e06b1060f1b9dcd083dae"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x1, 0xc, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x7, [0x3]}}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x7, [0x2, 0x2, 0xd]}}]}], "930f3f5adc51299859389daaa5ccb18d697fa5c7b8f97e7a022e8d4a80a333a33e98f43c0a6628314c736bcba1f1036ab9f3d6dffc9e"}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x22, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x12, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000000}]}, 0x24}}, 0x0) 4.007373194s ago: executing program 4 (id=659): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000800300000010006377b1f4954a07f506863f5b1219793eef95ca3847ef15f48fb39b5238bc23ebb1a6db6ab380fec9020195563144172533eaf245f3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008000000000000000ad00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000002300008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x22020600) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x5, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x6}, 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000004c0)=0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r9 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r9], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000019000100fcffffff0000000000000000000000000000000000000000fe8000000000000000000000000000aa4e2200004e2480000a00005000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000304000000000010feffffffffffffff030000000000000000000000000000001a00000000000000a00000000000000005000000000000000000000000000000ffffffffffffff7f080000000000000001010300"/112], 0xb8}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r11 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, 0x0, 0x0) 3.831173666s ago: executing program 3 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ppoll(&(0x7f0000000000)=[{r5, 0x8104}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, @loopback, @loopback}}}}}}, 0x0) (async) recvfrom$unix(r5, 0x0, 0x0, 0x2, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000004c0)="36528b6ef08ae767f1c34bdde961de45bc2e9027ce02e1586043d60350343bd7e938f205250c8c60a5a5396a65523e6e64b2821b93d1bc4fd6fa87c8efe051a7437cd9da1da9f30759a97fd8411de9d54a14565f400450343cc1591a690e130ac41011a80879c7a13a270d0f4368a2aa1fd309bba020fc1183e7e536582bd58d4373d03df90835c15b0f5b7663c6c7bb035c6e0db460947d8bbde55415b6b811348be3d19f6cc4fe617f1f58bc", 0xad, 0x8000, &(0x7f0000000280)={0xa, 0x4e23, 0x7, @empty, 0xf6}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) (async) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r11, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1597}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x344}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4001) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf250f0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="15064e0a6dfe8f4a4ef4b719dd80f4ba993b5b678d3b5cc0ebe1f21a5503eaada8a1dc7bf4601a8bc6d6d1e0a4bf76235317fe5c8fa5009fb42a3f26f13ad0e311ecee603320ca7a1b04faf2c7ce3b0fb87014a670542d9005b40eb25b1fecb698b534122ce26b0c4b294d969437f409de30f0788daaac7424dbe231285fa0e42925b2b96db9e8ec0d1968c1103364f68c65530200"/162], 0x20}, 0x1, 0x0, 0x0, 0x4c085}, 0x8040) 3.632837587s ago: executing program 3 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00e2ff003d544fdb7ea7949b4b271a948c0496", @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800000006001100ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b004f318f5b06001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffff7f06001100010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00090000000600110005000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (rerun: 64) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1b7}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffeffff, 0x6}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x400, 0x3, 0x8, 0x8, 0x3, 0x3, 0x4, 0x2]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) (async, rerun: 64) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) sendmmsg$sock(r3, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x41, 0x3}}], 0x18}}], 0x1, 0x800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x40c4) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) unshare(0x24020400) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) 3.275590694s ago: executing program 3 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$inet(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xa020480) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r3, &(0x7f0000000580)}, 0x20) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0xc12f, 0x4) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000880)=0x3, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001c80), 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', r6, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@mpls_newroute={0x40, 0x18, 0x20, 0x70bd25, 0x25dfdbfb, {0x1c, 0x80, 0x0, 0x37, 0xfe, 0x2, 0xfe, 0x8, 0x500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xd}, @RTA_DST={0x8, 0x1, {0x1}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_MULTIPATH={0xc, 0x9, {0xff60, 0x1b, 0x8, r6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x4040) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) write(r7, &(0x7f0000000440)="6ff50b2fa3382471d5c86e610afbeefcaa04bce11afaa945470409114bd14e0ec418691d6c3be36cac48b6a27ac2c498bf635bbccf5c53ba96b14d816b6327a9d8039bba32bfe2b0dd54dcdee756ff8b564f6dd09ba201a54f46197bd45ef6e7464be020efd5e3887afd89ec26b20f730f5ca9cf581435bb57518c74eb270dac353d9d75b869d8b5af03344f2c2728b0a43904a2bc0d884b7f911b9e3f8d52c81183564f234da810256d4a7d66bf2f387870132af3", 0xb5) (async) setsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970000e03c00e18000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100081050000000000000000d7660000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028005001600020000000400120005001700000000000600180000000000"], 0x54}}, 0x0) 3.262112154s ago: executing program 2 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000001c0)=0x10001, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x1c, r1, 0x1, 0x30bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048041) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$packet(r6, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @random="ba5de643b791"}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x30, r8, 0x1, 0x70bd2d, 0xfffffffd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x785}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x2}]}]}, 0x81}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)={0x438, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "7aa0296ce2111338542d71b6081ffda6a414f512d98cf04c768b89fa9ca72cb1584a74d70161b5993977129aaed388d21886697048880678"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f7c652b00d9804cb6f1cd0623b2bc028d5b6008e7bc08df68e84ae2ee26d7dc6cf31ce9c65499290c5c02e3d20f510b650f89fa7feb5fb4a970380a9dd305c91e3861dae6dd87719fe3543e416e3c56a0298a1c95a755231fb7569021ac8358bef8924644213bb48179075921599c46ccf10d5b52e20883194431a7159c007af2dfa7da005b639766821be0feb150a14faa095aee0612f0af38cd804f835954dc6b17f77c098c3d188528eab7c355ce76b30f6dd49aae6d7ca3f7d1e67abb730cd430d7cc45268ea31d60d738d9aa149ecad9d2ab6f42fa8cb2dd2be50"}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x56}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfc8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0fb6bb6e458fb91ebf15d8360e20b1a0f811cd36"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x414}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3.091415915s ago: executing program 2 (id=666): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x800) syz_emit_ethernet(0x6a, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffc7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x8d666755a8584635, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x90) (async) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x6, 0x7bc, 0x7, 0x7e0a, 0x3, 0x0, [{0x1, 0x7, 0x1, '\x00', 0x184}, {0x3, 0xabd, 0x13, '\x00', 0x480}, {0x242, 0x6d5f6825, 0x0, '\x00', 0x3}]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x200, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40818) (async) mmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0xf, 0x4010, r4, 0xe5f49000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800010001000000"], 0x20}}, 0x20000010) (async) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "fbb21a45d76f90027b0ef0c2e3cfc4ca9906c7112e27f27a2c086f6c9fe7827e", "52aa2145dd2002954f253c51856691c6dae33708d1ee94df87c4d56dc08f30c78ae1cd2bccbf060487bf39897cc11adb", "e98914bc40a34f8703586ff4225a999e345f0a3f58505296e5b5bd91", {"97d3ccb7f2720f3e461e34919a13dcb5", "52616fb8e500000080000000000c3027"}}}}}}}, 0x0) (async) listen(r2, 0x235a) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) 3.035592086s ago: executing program 3 (id=667): r0 = socket(0x10, 0x803, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x80010003, @rand_addr=' \x01\x00', 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c80)=""/116, 0x74}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xc, 0x0, 0x0, 0xb00}, 0x40d60b70}], 0x1, 0x0, 0x0) 2.811510765s ago: executing program 3 (id=669): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0xff, 0x2}, 0x20) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x0, {0x0, 0xf1, 0x3}, {0x2, 0xff, 0x2}, 0xfe, 0x2}, {0x0, 0x2, {0x1, 0x1, 0x2}, {0x4, 0x0, 0x2}, 0x2, 0xfd}, {0x0, 0x2, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0x0, 0xff}, {0x0, 0x3, {0x0, 0x0, 0x3}, {0x1, 0xff, 0x2}, 0xfd, 0x2}], 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 2.800592354s ago: executing program 4 (id=670): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090000000000000000000000630118000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.718709504s ago: executing program 2 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) socket(0x1f, 0x80000, 0x8) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x4000084) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') gettid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() sendmsg$unix(r9, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x20000081) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000180)) r11 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 2.701211456s ago: executing program 0 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500fffffffbffffff7f00004000000041000000f34f619572a924d02ed4ec74b4ad0bf8707d6c8d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140006000000000200000000000000000a000006"], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x8010) 2.255143829s ago: executing program 3 (id=674): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x9) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6f6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'nr0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x71}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x57, &(0x7f00000005c0)=""/87, 0x41100, 0x8, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r6, 0x1], &(0x7f00000007c0)=[{0x5, 0x5, 0x7}, {0x2, 0x1, 0xb, 0x9}, {0x0, 0x5, 0xc, 0x3}, {0x1, 0x1, 0x5, 0x6}], 0x10, 0x4, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r8, 0x40107447, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000000)=0x3) socket$alg(0x26, 0x5, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private=0xa010102, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000280)={0x6, &(0x7f0000000180)=[{0x9, 0x4, 0x36, 0x1}, {0x1, 0x5, 0xa, 0xbd75}, {0xf12c, 0x4, 0x6, 0x800}, {0x8, 0x6, 0xd, 0x4}, {0xe464, 0x2, 0xf4, 0x2}, {0xffff, 0x6, 0x5, 0x6}]}) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 1.755405266s ago: executing program 1 (id=676): syz_emit_ethernet(0x238, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x202, 0x3a, 0xff, @remote, @loopback, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x18, 0x1f, "c8f0b692ea9d10042e4ff67c8601d409469a810357426ff60102e1c763c4be13704ac74bede98daac61f99435c3ecec1b02a28de383ffc3f90e654de19ddd13732533d69bac920c812095f4330705ebf31fb45c04b86fa5d720ffc9c6d3aa3e8e3ad5186d8cc343caeb42c4efde2c54b965c86b0cef98c82201c67ec76439c1377ed9d714c6db5aa7d93dcecd2966fa1284a43bcedbc9b6f91eae940fabc34b89c0f058ef291a3ffc0f0dde1adbb367b1848c4de3db4475a5b0477ca0490186ba12ca62eae48bc40578c5d75ce482890771f6dedbb2d0eb85db4b585f7b9cf1b4f75035b7147c4b0a8b82b506c1d42d14f0c50f03f1e67e508"}, {0x22, 0x1e, "a6630559e27785e4b3fb980977b72c19df702538a691be14c837c32af0bc95cc5911ed5e62c519da14962b4df0d094932e73c679a25e76c00b011e45710930049b7b5719756b10b4ede91e9b65b37b2218cc4c6d2fee5212e2503522b078a4a5c364b9b0d0fb97f1237a2d074dd97580cc4aed5dfd3d01768b887b44de0a9b11786dd035e67aea93bf2a010ea885026af9f34948d40fede28fd834866ac4dccca8413b851cf7bd400169d465b2071f210b5bc93926bf19a603499c9f3d04f084765a40e6ccc2a16a4b1513b268c44add46d13f30f14ccf5dad5fc1c767e017a28b2ffb52611989e1ad3bdd988162a7ffde"}]}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.632529669s ago: executing program 1 (id=677): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000f80)=ANY=[], 0xd4}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, 0x0, &(0x7f0000000040)) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x310820, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003080101000052d90000000000000000050003000006000240000000000500030011000000"], 0x2c}}, 0x0) 1.52130958s ago: executing program 4 (id=678): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000180)) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = accept(r1, &(0x7f0000000100)=@nfc_llcp, &(0x7f00000004c0)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x69b}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x40}}, 0x2001) sendmsg$netlink(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x2ec, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, "", [@generic="1216790b36352b7910313fe75c7e956525da5768e54ee369acdeeecbe4de66e61bd6a7804400f27df5a6d5c9695ce4eb474ca66f63142b08f870b2", @typed={0xcb, 0xae, 0x0, 0x0, @binary="982e2de9b897db6e185b32e501e89c2621a0cb2533a6f11967c0e5ef0f6aaad67c1b6c13e5a6dbcc4d25b51d19412ea51aa1cc277c25bc93a8ee3e86262371223b510c90b932095e552fad016e9a4ba1516ff8fc0ef6d0082c0b4c94e04c1ec638b2c750d2e50f2cbca77a62e4563c680acdd10d4d9d93f6776ff7e51dd66b5b87239d4d180c153850a4489e2ce5f5387f19e82146d24134e11d4a2971dbf225d341ffe80aa1558ff4ce2555a0b8217ba38ddadc781d8e30cacf7a2e68c261f4d9949716426e84"}, @typed={0xe3, 0x86, 0x0, 0x0, @binary="ed8ccca2ff7ce18f4234afd8363f5f6f049a7546df8469fc654f960d95b38156de2d8632f49fc932519dd1f984a0ec79499af180d17aec2a17d188c4133b44c41b660b227fc5a8c3971b83735f9ad0aa67d7dc7f4272a1eec3a8fb60db020aa9648d7f4c969090ee4e2ba70f7d74050459a64b07330a540b90c561438a2bfd96850467243d02b38b259d885f3778928584827c5ddf407a6482ce5acb3d7f66aa976233112583f5a8477a46d4db48e1399ba906c3c48d003add87ed87825fa470d8e0317cc3e03e48f51ece3237ccd37f27144d885b0c6c211cff9945cb0138"}, @typed={0x8, 0x69, 0x0, 0x0, @pid=r2}, @generic="85638109320ce941d6357cd88ece8b857c27f359c475fcbc6f1f0bcebdc2440adce9d65eb586c8505feaf3e1c161059d3482079653068f1015b6ee4bd6c8cebc654544b270bd85ad07faddb0225691e1ba03fa98c359808ce67ae8aaf7a600c861622b7eae104df3b327c3b7a1e0419ea236a46c668e4fd4cbf306f4a419562418c1b925a6a3a0494c14534f62d228f38e2c42c2d9049e5f99093eea4fb1463e54856b1e839fec42624deeab253bfeeac6df22254177e588e92f3ec4234e611c13fb586e9ecc44984449ebb1715c18d9f9173c92adcf2d10df7d327a89e9478dc72f", @typed={0x4, 0xa3}]}, 0x2ec}], 0x1}, 0xc000000) 1.363535045s ago: executing program 1 (id=679): r0 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, 0x0}, 0x800) getsockopt$inet_int(r0, 0x10d, 0xfa, &(0x7f0000000000), 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x0, 0x0}, 0x10) (async) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) unshare(0x22020600) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) bind$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r8, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) 1.249632998s ago: executing program 4 (id=680): r0 = socket(0x11, 0x800000002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @loopback=0xac141437}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x4000084) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.161234991s ago: executing program 1 (id=681): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x124, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xfff}, @RTA_METRICS={0x100, 0x8, 0x0, 0x1, "2ecf6186618e56ed978a6151f33844703cd062ee0554bf1d08ee943bf6365dd70e6b40f98776a21099a17c22447275ca3e7cb5c19725035e7752e17a4123ac815b1baa0efe79eaf4f87de3e8f7b7f75c7db58fcc9cd228f6f0df24fbb36f20164eccc01656324c4de19793bc1f2b1988b76e945714c21b941f8f2b45a545f28489ec8a20ce2f62d6fefd80bcd510f18dea901271b31f2f93c7cc9d99f79647f8153111e6290e7a4b583b11ed43497df48f5387eeee064bd8aac42942f6c578deafffebe4a1f1935bb257ff8090cddb68cbd1a08624573c6976c2b7414b605f96324b54309ed6b52e7b5017737c53b04466b79f1c06f46e4efe9d08c5"}]}, 0x124}, 0x1, 0x0, 0x0, 0x4805}, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000140)=0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40004}, 0x4880) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/158, 0x1}) 749.259294ms ago: executing program 1 (id=682): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) pipe(&(0x7f0000000080)) 640.797118ms ago: executing program 1 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x7, 0x6, 0x6, 0x6}, {0x8, 0x6, 0x1, 0x3}, {0x800, 0x7}]}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xa, 0x1, 0x9, 0x0, "b81af436cd0471587fdfb6733a7bd36f2562cbacb1804403be396c70c6d4fd7a3c580cfb59f696fe6595865dbd499d23158dd64f4d5ee4945043a4ce0ff4802d66a7752630daa299e625db14f08cfc11456fca95e920d876a37aeb6453a99f7404723f3bced127dcc4c45a928d3e629ce828afe41df4fcf193ad147131275f5b"}) setsockopt$inet_int(r7, 0x0, 0x15, &(0x7f0000000100), 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x7d, &(0x7f0000000080)={r11, 0xa5}, 0x8) getsockopt$netlink(r6, 0x10e, 0xa, &(0x7f0000000340)=""/227, &(0x7f0000000240)=0xe3) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x6, 0x2, {0x8, "f7d39a430fff0400170b5987711aef99"}}}]}, 0x44}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0xfffffe3b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xccb1) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r14, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="7c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x4044040}, 0x4004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_channels={0x3d, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2, 0xfffffffe, 0x4000}}) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0xfffff000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0xde, [0x28000, 0xa, 0x2, 0xffffffffffff7fff, 0x2041dbb9], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000240)=""/222}, &(0x7f00000001c0)=0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 66.929274][ T5822] cgroup: Unknown subsys name 'net' [ 67.046494][ T5822] cgroup: Unknown subsys name 'cpuset' [ 67.054531][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.524509][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.744153][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.763457][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.784389][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.810871][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.820689][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.826982][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.828503][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.835958][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.842185][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.849995][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.856916][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.864661][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.877769][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.886369][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.893725][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.902954][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.903094][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.910501][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.918507][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.924515][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.933458][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.945218][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.966484][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.968403][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.974231][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.981333][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.987953][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.003476][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.003644][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.023191][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.417112][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426977][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.433967][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.472501][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.520838][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 71.556409][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 71.652087][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.690477][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.697683][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.705173][ T5838] bridge_slave_0: entered allmulticast mode [ 71.711890][ T5838] bridge_slave_0: entered promiscuous mode [ 71.743295][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.750370][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.758071][ T5838] bridge_slave_1: entered allmulticast mode [ 71.765286][ T5838] bridge_slave_1: entered promiscuous mode [ 71.799002][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.806183][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.813592][ T5848] bridge_slave_0: entered allmulticast mode [ 71.820243][ T5848] bridge_slave_0: entered promiscuous mode [ 71.856678][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.864387][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.871550][ T5848] bridge_slave_1: entered allmulticast mode [ 71.878296][ T5848] bridge_slave_1: entered promiscuous mode [ 71.902001][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.911429][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.918567][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.925734][ T5832] bridge_slave_0: entered allmulticast mode [ 71.932288][ T5832] bridge_slave_0: entered promiscuous mode [ 71.939295][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.946523][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.954104][ T5844] bridge_slave_0: entered allmulticast mode [ 71.960735][ T5844] bridge_slave_0: entered promiscuous mode [ 71.979944][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.989271][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.996947][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.004462][ T5832] bridge_slave_1: entered allmulticast mode [ 72.011226][ T5832] bridge_slave_1: entered promiscuous mode [ 72.018153][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.025277][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.032400][ T5844] bridge_slave_1: entered allmulticast mode [ 72.039418][ T5844] bridge_slave_1: entered promiscuous mode [ 72.075455][ T5838] team0: Port device team_slave_0 added [ 72.101681][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.114361][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.134413][ T5838] team0: Port device team_slave_1 added [ 72.181418][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.194834][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.208198][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.227391][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.234736][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.241989][ T5837] bridge_slave_0: entered allmulticast mode [ 72.248688][ T5837] bridge_slave_0: entered promiscuous mode [ 72.257155][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.264322][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.271542][ T5837] bridge_slave_1: entered allmulticast mode [ 72.278445][ T5837] bridge_slave_1: entered promiscuous mode [ 72.294604][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.313974][ T5848] team0: Port device team_slave_0 added [ 72.327395][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.335028][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.361733][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.397798][ T5844] team0: Port device team_slave_0 added [ 72.405462][ T5848] team0: Port device team_slave_1 added [ 72.420165][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.427482][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.454510][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.482707][ T5844] team0: Port device team_slave_1 added [ 72.497948][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.523426][ T5832] team0: Port device team_slave_0 added [ 72.542519][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.549918][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.576753][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.598594][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.625930][ T5832] team0: Port device team_slave_1 added [ 72.632080][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.639521][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.665633][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.678161][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.685270][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.711241][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.724016][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.730989][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.757057][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.780964][ T5838] hsr_slave_0: entered promiscuous mode [ 72.787747][ T5838] hsr_slave_1: entered promiscuous mode [ 72.816403][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.823466][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.849562][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.863546][ T5837] team0: Port device team_slave_0 added [ 72.882780][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.889905][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.916372][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.932560][ T5837] team0: Port device team_slave_1 added [ 72.971934][ T5848] hsr_slave_0: entered promiscuous mode [ 72.980630][ T5848] hsr_slave_1: entered promiscuous mode [ 72.987554][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.995448][ T5848] Cannot create hsr debugfs directory [ 73.016882][ T5847] Bluetooth: hci0: command tx timeout [ 73.022731][ T5841] Bluetooth: hci3: command tx timeout [ 73.026984][ T5844] hsr_slave_0: entered promiscuous mode [ 73.034676][ T5844] hsr_slave_1: entered promiscuous mode [ 73.040608][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.048451][ T5844] Cannot create hsr debugfs directory [ 73.065777][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.072720][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.099299][ T5847] Bluetooth: hci2: command tx timeout [ 73.099308][ T5836] Bluetooth: hci1: command tx timeout [ 73.110350][ T5841] Bluetooth: hci4: command tx timeout [ 73.110436][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.128780][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.135889][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.162000][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.192598][ T5832] hsr_slave_0: entered promiscuous mode [ 73.200082][ T5832] hsr_slave_1: entered promiscuous mode [ 73.206171][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.213794][ T5832] Cannot create hsr debugfs directory [ 73.362824][ T5837] hsr_slave_0: entered promiscuous mode [ 73.369126][ T5837] hsr_slave_1: entered promiscuous mode [ 73.375812][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.383792][ T5837] Cannot create hsr debugfs directory [ 73.595930][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.618368][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.636753][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.656665][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.691225][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.706158][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.733088][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.752227][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.807182][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.820087][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.848868][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.877546][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.899810][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.915942][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.930775][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.940300][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.957416][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.031461][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.041340][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.051458][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.073843][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.085991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.093237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.109168][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.156505][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.163650][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.178056][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.210700][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.250151][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.257275][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.271804][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.298580][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.312155][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.319314][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.372182][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.417048][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.433241][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.460145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.467306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.491609][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.509056][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.516199][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.544202][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.551295][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.595669][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.605959][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.613090][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.629376][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.636484][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.669847][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.676997][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.702811][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.855654][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.937783][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.001530][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.046111][ T5844] veth0_vlan: entered promiscuous mode [ 75.081835][ T5844] veth1_vlan: entered promiscuous mode [ 75.095925][ T5847] Bluetooth: hci3: command tx timeout [ 75.101359][ T5847] Bluetooth: hci0: command tx timeout [ 75.173482][ T5847] Bluetooth: hci1: command tx timeout [ 75.179147][ T5847] Bluetooth: hci2: command tx timeout [ 75.185893][ T5841] Bluetooth: hci4: command tx timeout [ 75.212772][ T5844] veth0_macvtap: entered promiscuous mode [ 75.219712][ T5848] veth0_vlan: entered promiscuous mode [ 75.236669][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.248137][ T5844] veth1_macvtap: entered promiscuous mode [ 75.279240][ T5848] veth1_vlan: entered promiscuous mode [ 75.294912][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.308030][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.320376][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.332417][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342169][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.351641][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.361636][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.379988][ T5838] veth0_vlan: entered promiscuous mode [ 75.400280][ T5838] veth1_vlan: entered promiscuous mode [ 75.509041][ T5838] veth0_macvtap: entered promiscuous mode [ 75.534296][ T5837] veth0_vlan: entered promiscuous mode [ 75.540394][ T5838] veth1_macvtap: entered promiscuous mode [ 75.548418][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.557569][ T5848] veth0_macvtap: entered promiscuous mode [ 75.568498][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.584541][ T5832] veth0_vlan: entered promiscuous mode [ 75.598208][ T5848] veth1_macvtap: entered promiscuous mode [ 75.620601][ T5837] veth1_vlan: entered promiscuous mode [ 75.650146][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.669523][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.681232][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.692717][ T5832] veth1_vlan: entered promiscuous mode [ 75.700473][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.700765][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.717940][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.723113][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.736152][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.748543][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.759691][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.768863][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.780421][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.791477][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.802330][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.812146][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822594][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.831719][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.849644][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.860486][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.871016][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.881483][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.896925][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.942660][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.952740][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.970760][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.980828][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.009602][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.030715][ T5837] veth0_macvtap: entered promiscuous mode [ 76.064356][ T5837] veth1_macvtap: entered promiscuous mode [ 76.140603][ T5832] veth0_macvtap: entered promiscuous mode [ 76.191737][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.211454][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.229052][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.241009][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.256373][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.273292][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.292986][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.304321][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.316535][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.334617][ T5832] veth1_macvtap: entered promiscuous mode [ 76.350289][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.351089][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.362379][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.381497][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.392366][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.403079][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.409312][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.421077][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.439068][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.500207][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.509390][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520283][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.529449][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.574153][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.590752][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.602813][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.626173][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.641615][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.652557][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.668480][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.679938][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.696338][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.725169][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.734400][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.746745][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.756842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.771645][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.783041][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.792869][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.807424][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.820242][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.831607][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.837466][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.853769][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.864321][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.877392][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.971059][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.993034][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.002756][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023848][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.183186][ T5847] Bluetooth: hci0: command tx timeout [ 77.183418][ T5841] Bluetooth: hci3: command tx timeout [ 77.214423][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.222286][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.248940][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.253639][ T5841] Bluetooth: hci4: command tx timeout [ 77.260867][ T5847] Bluetooth: hci1: command tx timeout [ 77.266517][ T5836] Bluetooth: hci2: command tx timeout [ 77.306162][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.321557][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.335902][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.351493][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.403940][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.411799][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.446301][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.775603][ T5887] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 77.796007][ T5887] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 77.981897][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 78.167049][ T5963] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 78.200885][ T5962] warning: `syz.4.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.935986][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 79.254215][ T5836] Bluetooth: hci3: command tx timeout [ 79.260108][ T5841] Bluetooth: hci0: command tx timeout [ 79.267055][ T6001] Zero length message leads to an empty skb [ 79.333265][ T5841] Bluetooth: hci4: command tx timeout [ 79.335310][ T5847] Bluetooth: hci1: command tx timeout [ 79.339429][ T5836] Bluetooth: hci2: command tx timeout [ 79.621905][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 80.100209][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 80.209700][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.283778][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 80.362120][ T6037] FAULT_INJECTION: forcing a failure. [ 80.362120][ T6037] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 80.389578][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.2.34 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 80.389604][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.389620][ T6037] Call Trace: [ 80.389626][ T6037] [ 80.389634][ T6037] dump_stack_lvl+0x241/0x360 [ 80.389671][ T6037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.389692][ T6037] ? __pfx__printk+0x10/0x10 [ 80.389711][ T6037] ? __schedule+0x1916/0x4c90 [ 80.389736][ T6037] ? 0xffffffffa00038c0 [ 80.389759][ T6037] should_fail_ex+0x40a/0x550 [ 80.389792][ T6037] prepare_alloc_pages+0x1da/0x5b0 [ 80.389820][ T6037] __alloc_frozen_pages_noprof+0x16f/0x710 [ 80.389856][ T6037] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.389893][ T6037] alloc_pages_mpol+0x311/0x660 [ 80.389923][ T6037] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.389946][ T6037] ? __pfx_validate_chain+0x10/0x10 [ 80.389967][ T6037] ? __pfx_lock_acquire+0x10/0x10 [ 80.389997][ T6037] alloc_pages_noprof+0x121/0x190 [ 80.390023][ T6037] __pud_alloc+0x91/0x2b0 [ 80.390041][ T6037] ? mas_next_node+0xb99/0xe00 [ 80.390068][ T6037] ? __pfx___pud_alloc+0x10/0x10 [ 80.390093][ T6037] __handle_mm_fault+0x495f/0x70f0 [ 80.390145][ T6037] ? __pfx___handle_mm_fault+0x10/0x10 [ 80.390187][ T6037] ? mt_find+0x2a9/0x920 [ 80.390209][ T6037] ? __pfx_lock_release+0x10/0x10 [ 80.390251][ T6037] ? mt_find+0x2a9/0x920 [ 80.390274][ T6037] ? mt_find+0x6c8/0x920 [ 80.390297][ T6037] ? mt_find+0x2a9/0x920 [ 80.390338][ T6037] ? __pfx___might_resched+0x10/0x10 [ 80.390365][ T6037] handle_mm_fault+0x3e5/0x8d0 [ 80.390401][ T6037] __get_user_pages+0x1a92/0x4140 [ 80.390452][ T6037] ? __pfx___get_user_pages+0x10/0x10 [ 80.390473][ T6037] ? __pfx_mt_find+0x10/0x10 [ 80.390512][ T6037] populate_vma_page_range+0x264/0x330 [ 80.390533][ T6037] ? __pfx_populate_vma_page_range+0x10/0x10 [ 80.390550][ T6037] ? userfaultfd_unmap_complete+0x30c/0x360 [ 80.390579][ T6037] __mm_populate+0x27a/0x460 [ 80.390602][ T6037] ? __pfx___mm_populate+0x10/0x10 [ 80.390628][ T6037] vm_mmap_pgoff+0x303/0x430 [ 80.390654][ T6037] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 80.390673][ T6037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.390701][ T6037] ? do_syscall_64+0x100/0x230 [ 80.390722][ T6037] ? ksys_mmap_pgoff+0xdf/0x720 [ 80.390750][ T6037] ? __x64_sys_mmap+0x7f/0x140 [ 80.390779][ T6037] do_syscall_64+0xf3/0x230 [ 80.390802][ T6037] ? clear_bhb_loop+0x35/0x90 [ 80.390830][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.390863][ T6037] RIP: 0033:0x7f8bbbf8d169 [ 80.390879][ T6037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.390893][ T6037] RSP: 002b:00007f8bbcd5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 80.390912][ T6037] RAX: ffffffffffffffda RBX: 00007f8bbc1a5fa0 RCX: 00007f8bbbf8d169 [ 80.390925][ T6037] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000400000001000 [ 80.390936][ T6037] RBP: 00007f8bbcd5c090 R08: ffffffffffffffff R09: 00000000ffffc000 [ 80.390948][ T6037] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 80.390958][ T6037] R13: 0000000000000001 R14: 00007f8bbc1a5fa0 R15: 00007ffe0ccb54b8 [ 80.390984][ T6037] [ 80.890637][ T6042] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 81.100390][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 81.156241][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 81.176784][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 81.195747][ T6055] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 81.265156][ T6055] nbd: socks must be embedded in a SOCK_ITEM attr [ 81.273609][ T6055] block nbd0: shutting down sockets [ 81.415834][ T5836] Bluetooth: hci4: command tx timeout [ 81.471936][ T6074] FAULT_INJECTION: forcing a failure. [ 81.471936][ T6074] name failslab, interval 1, probability 0, space 0, times 1 [ 81.557149][ T6074] CPU: 1 UID: 0 PID: 6074 Comm: syz.1.47 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 81.557175][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.557185][ T6074] Call Trace: [ 81.557191][ T6074] [ 81.557199][ T6074] dump_stack_lvl+0x241/0x360 [ 81.557226][ T6074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.557245][ T6074] ? __pfx__printk+0x10/0x10 [ 81.557266][ T6074] ? kmem_cache_alloc_noprof+0x48/0x380 [ 81.557299][ T6074] ? __pfx___might_resched+0x10/0x10 [ 81.557327][ T6074] should_fail_ex+0x40a/0x550 [ 81.557358][ T6074] should_failslab+0xac/0x100 [ 81.557383][ T6074] ? security_file_alloc+0x32/0x310 [ 81.557406][ T6074] kmem_cache_alloc_noprof+0x70/0x380 [ 81.557436][ T6074] security_file_alloc+0x32/0x310 [ 81.557460][ T6074] init_file+0x96/0x2e0 [ 81.557489][ T6074] alloc_empty_file+0xb8/0x1d0 [ 81.557517][ T6074] alloc_file_pseudo+0x204/0x320 [ 81.557542][ T6074] ? inode_init_owner+0x1d2/0x360 [ 81.557566][ T6074] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 81.557594][ T6074] ? shmem_get_inode+0xc37/0xf20 [ 81.557627][ T6074] __shmem_file_setup+0x237/0x2c0 [ 81.557651][ T6074] shmem_zero_setup+0x91/0x140 [ 81.557672][ T6074] mmap_region+0x2908/0x2fa0 [ 81.557726][ T6074] ? __pfx_mmap_region+0x10/0x10 [ 81.557756][ T6074] ? _parse_integer_limit+0x1b5/0x200 [ 81.557825][ T6074] ? __pfx_aa_get_newest_label+0x10/0x10 [ 81.557852][ T6074] ? mm_get_unmapped_area+0xa8/0xd0 [ 81.557874][ T6074] ? rcu_is_watching+0x15/0xb0 [ 81.557908][ T6074] ? apparmor_capable+0x13b/0x1b0 [ 81.557931][ T6074] ? bpf_lsm_capable+0x9/0x10 [ 81.557964][ T6074] do_mmap+0xecc/0x13a0 [ 81.557996][ T6074] ? ima_file_mmap+0xd6/0x220 [ 81.558015][ T6074] ? __pfx_do_mmap+0x10/0x10 [ 81.558040][ T6074] ? down_write_killable+0x19e/0x260 [ 81.558066][ T6074] ? vm_mmap_pgoff+0x182/0x430 [ 81.558084][ T6074] ? __pfx_down_write_killable+0x10/0x10 [ 81.558110][ T6074] ? apparmor_mmap_file+0xc3/0xe0 [ 81.558137][ T6074] vm_mmap_pgoff+0x214/0x430 [ 81.558164][ T6074] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 81.558183][ T6074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.558212][ T6074] ? do_syscall_64+0x100/0x230 [ 81.558234][ T6074] ? ksys_mmap_pgoff+0xdf/0x720 [ 81.558261][ T6074] ? __x64_sys_mmap+0x7f/0x140 [ 81.558307][ T6074] do_syscall_64+0xf3/0x230 [ 81.558331][ T6074] ? clear_bhb_loop+0x35/0x90 [ 81.558360][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.558385][ T6074] RIP: 0033:0x7f2a9958d169 [ 81.558402][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.558418][ T6074] RSP: 002b:00007f2a9a34f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.558438][ T6074] RAX: ffffffffffffffda RBX: 00007f2a997a5fa0 RCX: 00007f2a9958d169 [ 81.558451][ T6074] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000400000001000 [ 81.558463][ T6074] RBP: 00007f2a9a34f090 R08: ffffffffffffffff R09: 00000000ffffc000 [ 81.558476][ T6074] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 81.558488][ T6074] R13: 0000000000000001 R14: 00007f2a997a5fa0 R15: 00007fffad87ac38 [ 81.558526][ T6074] [ 82.742087][ T6120] __nla_validate_parse: 3 callbacks suppressed [ 82.742105][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 82.984729][ T6120] syz.1.57 (6120) used greatest stack depth: 18576 bytes left [ 83.051767][ T6130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.61'. [ 83.073389][ T6132] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET) [ 83.097846][ T6132] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 83.116497][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 83.143461][ T6132] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 83.383634][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 83.404210][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 83.488654][ T6147] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.656553][ T6157] openvswitch: netlink: Duplicate or invalid key (type 0). [ 83.665889][ T6157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.160573][ T6173] lo: entered allmulticast mode [ 84.177037][ T6173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.341848][ T6178] dvmrp0: entered allmulticast mode [ 84.491620][ T6178] netlink: 'syz.1.79': attribute type 9 has an invalid length. [ 84.894133][ T6199] ipip0: entered promiscuous mode [ 85.064908][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 85.090651][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 85.116437][ T6207] syz.0.88 (6207) used obsolete PPPIOCDETACH ioctl [ 85.573999][ T6227] sit0: entered promiscuous mode [ 85.597539][ T6227] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 85.608377][ T6227] netlink: 1 bytes leftover after parsing attributes in process `syz.1.92'. [ 86.299650][ T6254] netlink: 280 bytes leftover after parsing attributes in process `syz.1.100'. [ 86.316399][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 86.438206][ T6255] bridge_slave_1: left allmulticast mode [ 86.449799][ T6255] bridge_slave_1: left promiscuous mode [ 86.466316][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.494186][ T6255] bridge_slave_0: left allmulticast mode [ 86.510571][ T6255] bridge_slave_0: left promiscuous mode [ 86.537477][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.680507][ T6265] tipc: Enabling of bearer rejected, failed to enable media [ 86.779037][ T9] cfg80211: failed to load regulatory.db [ 87.143020][ T6288] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 87.541217][ T6299] netlink: 'syz.2.114': attribute type 2 has an invalid length. [ 87.569925][ T6299] netlink: 'syz.2.114': attribute type 2 has an invalid length. [ 87.709454][ T6307] Illegal XDP return value 814120960 on prog (id 87) dev N/A, expect packet loss! [ 88.829810][ T6335] __nla_validate_parse: 3 callbacks suppressed [ 88.829827][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 88.854521][ T6337] xt_hashlimit: max too large, truncated to 1048576 [ 88.858526][ T6335] bridge_slave_1: left allmulticast mode [ 88.892904][ T6335] bridge_slave_1: left promiscuous mode [ 88.901455][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.974843][ T6335] bridge_slave_0: left allmulticast mode [ 88.980533][ T6335] bridge_slave_0: left promiscuous mode [ 89.027913][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.048700][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 89.065483][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 89.341327][ T6353] netlink: 'syz.2.131': attribute type 9 has an invalid length. [ 89.857595][ T6377] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 89.884692][ T6377] netlink: 17 bytes leftover after parsing attributes in process `syz.2.139'. [ 90.231363][ T6393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.430316][ T6398] bridge_slave_0: left allmulticast mode [ 90.461383][ T6398] bridge_slave_0: left promiscuous mode [ 90.512793][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.535878][ T6398] bridge_slave_1: left allmulticast mode [ 90.543071][ T6398] bridge_slave_1: left promiscuous mode [ 90.557620][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.571979][ T6398] bond0: (slave bond_slave_0): Releasing backup interface [ 90.596315][ T6398] bond0: (slave bond_slave_1): Releasing backup interface [ 90.649373][ T6398] team0: Port device team_slave_0 removed [ 90.661347][ T6398] team0: Port device team_slave_1 removed [ 90.668152][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.676336][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.686769][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.696667][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.715939][ T6413] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 90.996043][ T6430] netlink: 4484 bytes leftover after parsing attributes in process `syz.3.154'. [ 90.997783][ T6423] syz.1.151 (6423) used greatest stack depth: 18480 bytes left [ 91.042126][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 91.054777][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 91.339977][ T6439] x_tables: duplicate underflow at hook 2 [ 91.375438][ T6439] netlink: 'syz.2.157': attribute type 12 has an invalid length. [ 92.056885][ T6459] openvswitch: netlink: Message has 20 unknown bytes. [ 92.167644][ T6467] pimreg: entered allmulticast mode [ 92.216115][ T6467] pimreg: left allmulticast mode [ 92.363748][ T6474] netlink: 56 bytes leftover after parsing attributes in process `syz.0.168'. [ 92.506825][ T6474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.753633][ T6498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.800997][ T6474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.925690][ T6474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.007847][ T6474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.056033][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 93.087647][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 93.137359][ T6474] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.158610][ T6474] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.233783][ T6474] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.287576][ T6474] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.654333][ T6544] x_tables: duplicate underflow at hook 2 [ 94.373708][ T6575] veth1_macvtap: left promiscuous mode [ 94.774629][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 94.817071][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.195'. [ 94.854665][ T6604] IPv6: Can't replace route, no match found [ 95.378941][ T6625] geneve2: entered promiscuous mode [ 95.386548][ T6625] geneve2: entered allmulticast mode [ 95.844551][ T6656] raw_sendmsg: syz.4.211 forgot to set AF_INET. Fix it! [ 95.855707][ T6645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.863051][ T6645] IPv6: NLM_F_CREATE should be set when creating new route [ 95.920223][ T6655] smc: net device bond0 applied user defined pnetid SYZ2 [ 96.023525][ T6666] dummy0: entered promiscuous mode [ 96.029149][ T6666] macsec1: entered allmulticast mode [ 96.043431][ T6666] dummy0: entered allmulticast mode [ 96.066488][ T6666] dummy0: left allmulticast mode [ 96.113280][ T6666] dummy0: left promiscuous mode [ 96.858033][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 96.888024][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 97.129683][ T6697] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 97.536381][ T6715] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 97.549174][ T6715] netlink: 224 bytes leftover after parsing attributes in process `syz.3.226'. [ 97.660024][ T6715] netlink: 'syz.3.226': attribute type 10 has an invalid length. [ 97.691252][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 97.700848][ T6722] veth1_macvtap: left promiscuous mode [ 97.854252][ T6731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 97.862537][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 98.061417][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 98.186462][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 98.201271][ T6747] netlink: 84 bytes leftover after parsing attributes in process `syz.1.235'. [ 99.499807][ T6801] tipc: Can't bind to reserved service type 0 [ 100.076085][ T6817] FAULT_INJECTION: forcing a failure. [ 100.076085][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.141412][ T6817] CPU: 0 UID: 0 PID: 6817 Comm: syz.0.260 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 100.141437][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.141448][ T6817] Call Trace: [ 100.141454][ T6817] [ 100.141462][ T6817] dump_stack_lvl+0x241/0x360 [ 100.141490][ T6817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.141516][ T6817] ? __pfx__printk+0x10/0x10 [ 100.141536][ T6817] ? __pfx_lock_release+0x10/0x10 [ 100.141571][ T6817] should_fail_ex+0x40a/0x550 [ 100.141602][ T6817] _copy_from_user+0x2d/0xb0 [ 100.141628][ T6817] copy_msghdr_from_user+0xae/0x680 [ 100.141659][ T6817] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.141683][ T6817] ? __fget_files+0x2a/0x410 [ 100.141712][ T6817] ? __fget_files+0x2a/0x410 [ 100.141746][ T6817] __sys_sendmsg+0x209/0x350 [ 100.141772][ T6817] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.141804][ T6817] ? do_sys_openat2+0x17a/0x1d0 [ 100.141854][ T6817] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.141883][ T6817] ? do_syscall_64+0x100/0x230 [ 100.141909][ T6817] ? do_syscall_64+0xb6/0x230 [ 100.141935][ T6817] do_syscall_64+0xf3/0x230 [ 100.141957][ T6817] ? clear_bhb_loop+0x35/0x90 [ 100.142002][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.142028][ T6817] RIP: 0033:0x7fd8b718d169 [ 100.142044][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.142059][ T6817] RSP: 002b:00007fd8b7f5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.142079][ T6817] RAX: ffffffffffffffda RBX: 00007fd8b73a5fa0 RCX: 00007fd8b718d169 [ 100.142093][ T6817] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 100.142105][ T6817] RBP: 00007fd8b7f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 100.142116][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.142126][ T6817] R13: 0000000000000000 R14: 00007fd8b73a5fa0 R15: 00007ffd19de8aa8 [ 100.142154][ T6817] [ 100.808388][ T6836] __nla_validate_parse: 4 callbacks suppressed [ 100.808407][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 100.869923][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 101.001509][ T6840] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 101.011245][ T6840] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 101.197203][ T6845] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 101.205269][ T6845] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 101.220853][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 101.302692][ T6845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.342356][ T6846] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 101.376522][ T6846] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 101.463683][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 101.639060][ T6864] FAULT_INJECTION: forcing a failure. [ 101.639060][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 101.683623][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.3.272 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 101.683652][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.683664][ T6864] Call Trace: [ 101.683671][ T6864] [ 101.683680][ T6864] dump_stack_lvl+0x241/0x360 [ 101.683714][ T6864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.683737][ T6864] ? __pfx__printk+0x10/0x10 [ 101.683761][ T6864] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 101.683793][ T6864] ? __pfx___might_resched+0x10/0x10 [ 101.683826][ T6864] should_fail_ex+0x40a/0x550 [ 101.683862][ T6864] should_failslab+0xac/0x100 [ 101.683892][ T6864] kmem_cache_alloc_node_noprof+0x77/0x380 [ 101.683922][ T6864] ? __alloc_skb+0x1c3/0x440 [ 101.683948][ T6864] __alloc_skb+0x1c3/0x440 [ 101.683975][ T6864] ? __pfx___alloc_skb+0x10/0x10 [ 101.683999][ T6864] ? netlink_autobind+0xd6/0x2f0 [ 101.684017][ T6864] ? netlink_autobind+0x2b0/0x2f0 [ 101.684040][ T6864] netlink_sendmsg+0x634/0xcb0 [ 101.684084][ T6864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.684119][ T6864] ? aa_sock_msg_perm+0x91/0x160 [ 101.684157][ T6864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.684187][ T6864] __sock_sendmsg+0x221/0x270 [ 101.684227][ T6864] ____sys_sendmsg+0x53a/0x860 [ 101.684261][ T6864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.684283][ T6864] ? __fget_files+0x2a/0x410 [ 101.684317][ T6864] ? __fget_files+0x2a/0x410 [ 101.684356][ T6864] __sys_sendmsg+0x269/0x350 [ 101.684386][ T6864] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.684423][ T6864] ? do_sys_openat2+0x17a/0x1d0 [ 101.684481][ T6864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.684515][ T6864] ? do_syscall_64+0x100/0x230 [ 101.684545][ T6864] ? do_syscall_64+0xb6/0x230 [ 101.684575][ T6864] do_syscall_64+0xf3/0x230 [ 101.684601][ T6864] ? clear_bhb_loop+0x35/0x90 [ 101.684634][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.684662][ T6864] RIP: 0033:0x7f6da718d169 [ 101.684680][ T6864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.684696][ T6864] RSP: 002b:00007f6da8092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.684729][ T6864] RAX: ffffffffffffffda RBX: 00007f6da73a5fa0 RCX: 00007f6da718d169 [ 101.684744][ T6864] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 101.684768][ T6864] RBP: 00007f6da8092090 R08: 0000000000000000 R09: 0000000000000000 [ 101.684779][ T6864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.684790][ T6864] R13: 0000000000000000 R14: 00007f6da73a5fa0 R15: 00007fff37c45608 [ 101.684827][ T6864] [ 102.649033][ T6892] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 102.674521][ T6892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.278'. [ 102.747635][ T6895] netlink: 'syz.4.280': attribute type 5 has an invalid length. [ 102.818319][ T6895] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 103.017081][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 103.059350][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 103.108348][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 103.184449][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.287'. [ 103.210015][ T6917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.287'. [ 103.652200][ T6941] netem: change failed [ 103.914682][ T6946] FAULT_INJECTION: forcing a failure. [ 103.914682][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.959553][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: syz.3.296 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 103.959578][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.959589][ T6946] Call Trace: [ 103.959595][ T6946] [ 103.959602][ T6946] dump_stack_lvl+0x241/0x360 [ 103.959630][ T6946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.959649][ T6946] ? __pfx__printk+0x10/0x10 [ 103.959669][ T6946] ? __pfx_lock_release+0x10/0x10 [ 103.959702][ T6946] should_fail_ex+0x40a/0x550 [ 103.959732][ T6946] _copy_from_iter+0x1df/0x1c40 [ 103.959754][ T6946] ? __virt_addr_valid+0x183/0x530 [ 103.959773][ T6946] ? __pfx_lock_release+0x10/0x10 [ 103.959805][ T6946] ? __alloc_skb+0x28f/0x440 [ 103.959824][ T6946] ? __pfx__copy_from_iter+0x10/0x10 [ 103.959848][ T6946] ? __virt_addr_valid+0x183/0x530 [ 103.959864][ T6946] ? __virt_addr_valid+0x183/0x530 [ 103.959880][ T6946] ? __virt_addr_valid+0x45f/0x530 [ 103.959896][ T6946] ? __phys_addr_symbol+0x2f/0x70 [ 103.959922][ T6946] ? __check_object_size+0x47a/0x730 [ 103.959952][ T6946] netlink_sendmsg+0x742/0xcb0 [ 103.959989][ T6946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.960020][ T6946] ? aa_sock_msg_perm+0x91/0x160 [ 103.960053][ T6946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.960078][ T6946] __sock_sendmsg+0x221/0x270 [ 103.960107][ T6946] ____sys_sendmsg+0x53a/0x860 [ 103.960135][ T6946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.960154][ T6946] ? __fget_files+0x2a/0x410 [ 103.960183][ T6946] ? __fget_files+0x2a/0x410 [ 103.960217][ T6946] __sys_sendmsg+0x269/0x350 [ 103.960242][ T6946] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.960274][ T6946] ? do_sys_openat2+0x17a/0x1d0 [ 103.960323][ T6946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.960352][ T6946] ? do_syscall_64+0x100/0x230 [ 103.960378][ T6946] ? do_syscall_64+0xb6/0x230 [ 103.960403][ T6946] do_syscall_64+0xf3/0x230 [ 103.960426][ T6946] ? clear_bhb_loop+0x35/0x90 [ 103.960454][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.960478][ T6946] RIP: 0033:0x7f6da718d169 [ 103.960493][ T6946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.960507][ T6946] RSP: 002b:00007f6da8092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.960526][ T6946] RAX: ffffffffffffffda RBX: 00007f6da73a5fa0 RCX: 00007f6da718d169 [ 103.960539][ T6946] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 103.960550][ T6946] RBP: 00007f6da8092090 R08: 0000000000000000 R09: 0000000000000000 [ 103.960561][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.960570][ T6946] R13: 0000000000000000 R14: 00007f6da73a5fa0 R15: 00007fff37c45608 [ 103.960596][ T6946] [ 104.495251][ T6965] openvswitch: netlink: Key type 103 is out of range max 32 [ 104.513969][ T6966] openvswitch: netlink: Key type 103 is out of range max 32 [ 105.144747][ T6987] bridge0: port 3(dummy0) entered blocking state [ 105.164930][ T6987] bridge0: port 3(dummy0) entered disabled state [ 105.172016][ T6987] dummy0: entered allmulticast mode [ 105.175595][ T6991] FAULT_INJECTION: forcing a failure. [ 105.175595][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 105.182403][ T6987] dummy0: entered promiscuous mode [ 105.210838][ T5918] IPVS: starting estimator thread 0... [ 105.218359][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.0.312 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 105.218400][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.218411][ T6991] Call Trace: [ 105.218417][ T6991] [ 105.218425][ T6991] dump_stack_lvl+0x241/0x360 [ 105.218452][ T6991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.218473][ T6991] ? __pfx__printk+0x10/0x10 [ 105.218506][ T6991] should_fail_ex+0x40a/0x550 [ 105.218539][ T6991] should_failslab+0xac/0x100 [ 105.218566][ T6991] ? skb_clone+0x20c/0x390 [ 105.218588][ T6991] kmem_cache_alloc_noprof+0x70/0x380 [ 105.218620][ T6991] skb_clone+0x20c/0x390 [ 105.218646][ T6991] __netlink_deliver_tap+0x3c4/0x7f0 [ 105.218685][ T6991] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.218711][ T6991] netlink_deliver_tap+0x19d/0x1b0 [ 105.218741][ T6991] netlink_unicast+0x7c4/0x990 [ 105.218775][ T6991] ? __pfx_netlink_unicast+0x10/0x10 [ 105.218797][ T6991] ? __virt_addr_valid+0x45f/0x530 [ 105.218817][ T6991] ? __phys_addr_symbol+0x2f/0x70 [ 105.218834][ T6991] ? __check_object_size+0x47a/0x730 [ 105.218865][ T6991] netlink_sendmsg+0x8de/0xcb0 [ 105.218903][ T6991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.218935][ T6991] ? aa_sock_msg_perm+0x91/0x160 [ 105.218970][ T6991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.218996][ T6991] __sock_sendmsg+0x221/0x270 [ 105.219027][ T6991] ____sys_sendmsg+0x53a/0x860 [ 105.219065][ T6991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.219086][ T6991] ? __fget_files+0x2a/0x410 [ 105.219117][ T6991] ? __fget_files+0x2a/0x410 [ 105.219154][ T6991] __sys_sendmsg+0x269/0x350 [ 105.219185][ T6991] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.219221][ T6991] ? do_sys_openat2+0x17a/0x1d0 [ 105.219275][ T6991] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.219306][ T6991] ? do_syscall_64+0x100/0x230 [ 105.219334][ T6991] ? do_syscall_64+0xb6/0x230 [ 105.219361][ T6991] do_syscall_64+0xf3/0x230 [ 105.219385][ T6991] ? clear_bhb_loop+0x35/0x90 [ 105.219415][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.219441][ T6991] RIP: 0033:0x7fd8b718d169 [ 105.219458][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.219473][ T6991] RSP: 002b:00007fd8b7f5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.219492][ T6991] RAX: ffffffffffffffda RBX: 00007fd8b73a5fa0 RCX: 00007fd8b718d169 [ 105.219506][ T6991] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 105.219518][ T6991] RBP: 00007fd8b7f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 105.219529][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.219540][ T6991] R13: 0000000000000000 R14: 00007fd8b73a5fa0 R15: 00007ffd19de8aa8 [ 105.219568][ T6991] [ 105.220073][ T6987] bridge0: port 3(dummy0) entered blocking state [ 105.499606][ T6987] bridge0: port 3(dummy0) entered forwarding state [ 105.517373][ T6993] wg1: entered promiscuous mode [ 105.522340][ T6993] wg1: entered allmulticast mode [ 105.563300][ T6994] IPVS: using max 22 ests per chain, 52800 per kthread [ 105.918148][ T7019] ksmbd: Daemon and kernel module version mismatch. ksmbd: 128, kernel module: 1. User-space ksmbd should terminate. [ 106.087788][ T7025] __nla_validate_parse: 4 callbacks suppressed [ 106.087806][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 106.165019][ T7031] netlink: 'syz.0.322': attribute type 7 has an invalid length. [ 106.194299][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 106.600589][ T7047] FAULT_INJECTION: forcing a failure. [ 106.600589][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 106.613583][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.2.326 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 106.613624][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.613636][ T7047] Call Trace: [ 106.613644][ T7047] [ 106.613653][ T7047] dump_stack_lvl+0x241/0x360 [ 106.613683][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.613707][ T7047] ? __pfx__printk+0x10/0x10 [ 106.613739][ T7047] should_fail_ex+0x40a/0x550 [ 106.613776][ T7047] should_failslab+0xac/0x100 [ 106.613804][ T7047] ? skb_clone+0x20c/0x390 [ 106.613828][ T7047] kmem_cache_alloc_noprof+0x70/0x380 [ 106.613861][ T7047] skb_clone+0x20c/0x390 [ 106.613881][ T7047] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 106.613903][ T7047] dev_queue_xmit_nit+0x249/0xca0 [ 106.613932][ T7047] ? dev_queue_xmit_nit+0x2b/0xca0 [ 106.613952][ T7047] ? validate_xmit_skb+0x9f9/0x1040 [ 106.613981][ T7047] dev_hard_start_xmit+0x15f/0x7d0 [ 106.614007][ T7047] ? __pfx_validate_xmit_skb+0x10/0x10 [ 106.614040][ T7047] __dev_queue_xmit+0x1b73/0x3f40 [ 106.614064][ T7047] ? kasan_save_track+0x51/0x80 [ 106.614089][ T7047] ? ____sys_sendmsg+0x53a/0x860 [ 106.614115][ T7047] ? __dev_queue_xmit+0x2f4/0x3f40 [ 106.614146][ T7047] ? __pfx___dev_queue_xmit+0x10/0x10 [ 106.614190][ T7047] ? __copy_skb_header+0xa7/0x5a0 [ 106.614217][ T7047] ? __asan_memcpy+0x40/0x70 [ 106.614238][ T7047] ? __skb_clone+0x5c/0x6c0 [ 106.614268][ T7047] ? __skb_clone+0x454/0x6c0 [ 106.614302][ T7047] ? skb_clone+0x240/0x390 [ 106.614332][ T7047] __netlink_deliver_tap+0x561/0x7f0 [ 106.614377][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.614406][ T7047] netlink_deliver_tap+0x19d/0x1b0 [ 106.614439][ T7047] netlink_unicast+0x7c4/0x990 [ 106.614477][ T7047] ? __pfx_netlink_unicast+0x10/0x10 [ 106.614502][ T7047] ? __virt_addr_valid+0x45f/0x530 [ 106.614523][ T7047] ? __phys_addr_symbol+0x2f/0x70 [ 106.614542][ T7047] ? __check_object_size+0x47a/0x730 [ 106.614576][ T7047] netlink_sendmsg+0x8de/0xcb0 [ 106.614621][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.614657][ T7047] ? aa_sock_msg_perm+0x91/0x160 [ 106.614697][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.614727][ T7047] __sock_sendmsg+0x221/0x270 [ 106.614761][ T7047] ____sys_sendmsg+0x53a/0x860 [ 106.614806][ T7047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.614826][ T7047] ? __fget_files+0x2a/0x410 [ 106.614857][ T7047] ? __fget_files+0x2a/0x410 [ 106.614894][ T7047] __sys_sendmsg+0x269/0x350 [ 106.614927][ T7047] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.614983][ T7047] ? do_sys_openat2+0x17a/0x1d0 [ 106.615042][ T7047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.615075][ T7047] ? do_syscall_64+0x100/0x230 [ 106.615105][ T7047] ? do_syscall_64+0xb6/0x230 [ 106.615150][ T7047] do_syscall_64+0xf3/0x230 [ 106.615176][ T7047] ? clear_bhb_loop+0x35/0x90 [ 106.615209][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.615236][ T7047] RIP: 0033:0x7f8bbbf8d169 [ 106.615253][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.615269][ T7047] RSP: 002b:00007f8bbcd5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.615290][ T7047] RAX: ffffffffffffffda RBX: 00007f8bbc1a5fa0 RCX: 00007f8bbbf8d169 [ 106.615304][ T7047] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 106.615317][ T7047] RBP: 00007f8bbcd5c090 R08: 0000000000000000 R09: 0000000000000000 [ 106.615328][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.615340][ T7047] R13: 0000000000000000 R14: 00007f8bbc1a5fa0 R15: 00007ffe0ccb54b8 [ 106.615371][ T7047] [ 107.050056][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 107.155093][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 107.382217][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 107.833580][ T7091] FAULT_INJECTION: forcing a failure. [ 107.833580][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 107.837325][ T7090] trusted_key: syz.0.337 sent an empty control message without MSG_MORE. [ 107.867686][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.1.339 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 107.867709][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.867720][ T7091] Call Trace: [ 107.867726][ T7091] [ 107.867733][ T7091] dump_stack_lvl+0x241/0x360 [ 107.867760][ T7091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.867780][ T7091] ? __pfx__printk+0x10/0x10 [ 107.867800][ T7091] ? __kmalloc_noprof+0xb5/0x4c0 [ 107.867831][ T7091] ? __pfx___might_resched+0x10/0x10 [ 107.867853][ T7091] ? aa_get_newest_label+0xff/0x6f0 [ 107.867886][ T7091] should_fail_ex+0x40a/0x550 [ 107.867918][ T7091] should_failslab+0xac/0x100 [ 107.867945][ T7091] __kmalloc_noprof+0xdd/0x4c0 [ 107.867969][ T7091] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 107.867990][ T7091] ? apparmor_capable+0x13b/0x1b0 [ 107.868015][ T7091] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 107.868042][ T7091] genl_rcv_msg+0x80b/0xec0 [ 107.868070][ T7091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.868117][ T7091] ? __pfx_lock_acquire+0x10/0x10 [ 107.868142][ T7091] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 107.868167][ T7091] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 107.868184][ T7091] ? __pfx_nl80211_post_doit+0x10/0x10 [ 107.868211][ T7091] ? __pfx___might_resched+0x10/0x10 [ 107.868245][ T7091] netlink_rcv_skb+0x206/0x480 [ 107.868271][ T7091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.868293][ T7091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.868332][ T7091] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 107.868372][ T7091] genl_rcv+0x28/0x40 [ 107.868390][ T7091] netlink_unicast+0x7f6/0x990 [ 107.868421][ T7091] ? __pfx_netlink_unicast+0x10/0x10 [ 107.868443][ T7091] ? __virt_addr_valid+0x45f/0x530 [ 107.868461][ T7091] ? __phys_addr_symbol+0x2f/0x70 [ 107.868477][ T7091] ? __check_object_size+0x47a/0x730 [ 107.868506][ T7091] netlink_sendmsg+0x8de/0xcb0 [ 107.868544][ T7091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.868575][ T7091] ? aa_sock_msg_perm+0x91/0x160 [ 107.868608][ T7091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.868633][ T7091] __sock_sendmsg+0x221/0x270 [ 107.868662][ T7091] ____sys_sendmsg+0x53a/0x860 [ 107.868691][ T7091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.868710][ T7091] ? __fget_files+0x2a/0x410 [ 107.868739][ T7091] ? __fget_files+0x2a/0x410 [ 107.868774][ T7091] __sys_sendmsg+0x269/0x350 [ 107.868800][ T7091] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.868840][ T7091] ? do_sys_openat2+0x17a/0x1d0 [ 107.868891][ T7091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.868919][ T7091] ? do_syscall_64+0x100/0x230 [ 107.868945][ T7091] ? do_syscall_64+0xb6/0x230 [ 107.868971][ T7091] do_syscall_64+0xf3/0x230 [ 107.868993][ T7091] ? clear_bhb_loop+0x35/0x90 [ 107.869022][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.869046][ T7091] RIP: 0033:0x7f2a9958d169 [ 107.869061][ T7091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.869075][ T7091] RSP: 002b:00007f2a9a34f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.869094][ T7091] RAX: ffffffffffffffda RBX: 00007f2a997a5fa0 RCX: 00007f2a9958d169 [ 107.869107][ T7091] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 107.869118][ T7091] RBP: 00007f2a9a34f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.869129][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.869139][ T7091] R13: 0000000000000000 R14: 00007f2a997a5fa0 R15: 00007fffad87ac38 [ 107.869165][ T7091] [ 108.414653][ T7107] tipc: Started in network mode [ 108.419620][ T7107] tipc: Node identity ac14140f, cluster identity 4711 [ 108.497087][ T7107] tipc: Enabled bearer , priority 10 [ 108.611518][ T7117] sctp: [Deprecated]: syz.1.346 (pid 7117) Use of int in max_burst socket option. [ 108.611518][ T7117] Use struct sctp_assoc_value instead [ 108.624166][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 108.663554][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 108.931827][ T7130] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 108.965274][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.985085][ T7130] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.369152][ T7137] FAULT_INJECTION: forcing a failure. [ 109.369152][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 109.387792][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.0.353 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 109.387817][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.387829][ T7137] Call Trace: [ 109.387835][ T7137] [ 109.387844][ T7137] dump_stack_lvl+0x241/0x360 [ 109.387872][ T7137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.387894][ T7137] ? __pfx__printk+0x10/0x10 [ 109.387915][ T7137] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 109.387945][ T7137] ? __pfx___might_resched+0x10/0x10 [ 109.387975][ T7137] should_fail_ex+0x40a/0x550 [ 109.388008][ T7137] should_failslab+0xac/0x100 [ 109.388036][ T7137] kmem_cache_alloc_node_noprof+0x77/0x380 [ 109.388062][ T7137] ? __alloc_skb+0x1c3/0x440 [ 109.388086][ T7137] __alloc_skb+0x1c3/0x440 [ 109.388105][ T7137] ? ____sys_sendmsg+0x53a/0x860 [ 109.388130][ T7137] ? __pfx___alloc_skb+0x10/0x10 [ 109.388156][ T7137] ? netlink_ack_tlv_len+0x6e/0x200 [ 109.388187][ T7137] netlink_ack+0x145/0xa60 [ 109.388211][ T7137] ? __pfx_lock_acquire+0x10/0x10 [ 109.388240][ T7137] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 109.388261][ T7137] ? __pfx___might_resched+0x10/0x10 [ 109.388296][ T7137] netlink_rcv_skb+0x294/0x480 [ 109.388344][ T7137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.388369][ T7137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.388412][ T7137] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 109.388466][ T7137] genl_rcv+0x28/0x40 [ 109.388484][ T7137] netlink_unicast+0x7f6/0x990 [ 109.388518][ T7137] ? __pfx_netlink_unicast+0x10/0x10 [ 109.388541][ T7137] ? __virt_addr_valid+0x45f/0x530 [ 109.388560][ T7137] ? __phys_addr_symbol+0x2f/0x70 [ 109.388577][ T7137] ? __check_object_size+0x47a/0x730 [ 109.388608][ T7137] netlink_sendmsg+0x8de/0xcb0 [ 109.388647][ T7137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.388686][ T7137] ? aa_sock_msg_perm+0x91/0x160 [ 109.388721][ T7137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.388748][ T7137] __sock_sendmsg+0x221/0x270 [ 109.388778][ T7137] ____sys_sendmsg+0x53a/0x860 [ 109.388814][ T7137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.388834][ T7137] ? __fget_files+0x2a/0x410 [ 109.388865][ T7137] ? __fget_files+0x2a/0x410 [ 109.388901][ T7137] __sys_sendmsg+0x269/0x350 [ 109.388928][ T7137] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.388963][ T7137] ? do_sys_openat2+0x17a/0x1d0 [ 109.389016][ T7137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.389047][ T7137] ? do_syscall_64+0x100/0x230 [ 109.389093][ T7137] ? do_syscall_64+0xb6/0x230 [ 109.389122][ T7137] do_syscall_64+0xf3/0x230 [ 109.389147][ T7137] ? clear_bhb_loop+0x35/0x90 [ 109.389179][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.389206][ T7137] RIP: 0033:0x7fd8b718d169 [ 109.389223][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.389239][ T7137] RSP: 002b:00007fd8b7f5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.389260][ T7137] RAX: ffffffffffffffda RBX: 00007fd8b73a5fa0 RCX: 00007fd8b718d169 [ 109.389275][ T7137] RDX: 0000000000008004 RSI: 0000400000000000 RDI: 0000000000000003 [ 109.389287][ T7137] RBP: 00007fd8b7f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 109.389299][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.389311][ T7137] R13: 0000000000000000 R14: 00007fd8b73a5fa0 R15: 00007ffd19de8aa8 [ 109.389342][ T7137] [ 109.724131][ T5922] tipc: Node number set to 2886997007 [ 110.220019][ T7159] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.220291][ T7156] sctp: [Deprecated]: syz.0.359 (pid 7156) Use of int in max_burst socket option. [ 110.220291][ T7156] Use struct sctp_assoc_value instead [ 110.526944][ T7169] tipc: Started in network mode [ 110.534796][ T7169] tipc: Node identity ac14140f, cluster identity 4711 [ 110.542819][ T7169] tipc: Enabled bearer , priority 10 [ 110.561017][ T7173] ax25_connect(): syz.2.365 uses autobind, please contact jreuter@yaina.de [ 110.586017][ T7173] ax25_connect(): syz.2.365 uses autobind, please contact jreuter@yaina.de [ 110.726201][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 110.795391][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 111.289483][ T7194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 111.298700][ T7191] dummy0: entered promiscuous mode [ 111.500311][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 111.549075][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 111.673778][ T5886] tipc: Node number set to 2886997007 [ 111.680350][ T7215] netlink: 'syz.1.377': attribute type 3 has an invalid length. [ 111.942755][ T7226] netlink: 312 bytes leftover after parsing attributes in process `syz.3.382'. [ 111.968277][ T7229] pim6reg9: entered allmulticast mode [ 112.022149][ T7234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 112.142271][ T7230] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 112.357685][ T7254] netlink: 56 bytes leftover after parsing attributes in process `syz.0.388'. [ 112.974218][ T7275] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.595290][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.405'. [ 113.624844][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'. [ 113.661801][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.405'. [ 113.687722][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.405'. [ 114.003294][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 114.125896][ T7336] netlink: 80 bytes leftover after parsing attributes in process `syz.0.411'. [ 114.392520][ T7335] netlink: 'syz.4.412': attribute type 2 has an invalid length. [ 114.420635][ T7330] vlan2: entered promiscuous mode [ 114.464331][ T7330] bond0: entered promiscuous mode [ 114.469799][ T7330] bond_slave_0: entered promiscuous mode [ 114.489500][ T7330] bond_slave_1: entered promiscuous mode [ 114.497852][ T7330] bond0: left promiscuous mode [ 114.510664][ T7330] bond_slave_0: left promiscuous mode [ 114.517156][ T7330] bond_slave_1: left promiscuous mode [ 115.119835][ T7373] netlink: 'syz.1.421': attribute type 16 has an invalid length. [ 115.156496][ T7373] netlink: 'syz.1.421': attribute type 17 has an invalid length. [ 115.280655][ T7373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.648706][ T7404] netlink: 'syz.2.430': attribute type 27 has an invalid length. [ 116.053648][ C0] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 116.079823][ T7414] sit0: left promiscuous mode [ 116.162621][ T7414] bridge0: port 3(dummy0) entered disabled state [ 116.169196][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.176714][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.450070][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.462684][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.493251][ T7457] netlink: zone id is out of range [ 116.519132][ T7457] netlink: zone id is out of range [ 116.533580][ T7457] netlink: zone id is out of range [ 116.551810][ T7457] netlink: get zone limit has 8 unknown bytes [ 116.583292][ T7463] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 116.622338][ T7414] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.651746][ T7414] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.678526][ T7414] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.704721][ T7414] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.888296][ T7426] lo speed is unknown, defaulting to 1000 [ 116.904809][ T7426] lo speed is unknown, defaulting to 1000 [ 116.912200][ T7477] __nla_validate_parse: 7 callbacks suppressed [ 116.912215][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 116.930618][ T7426] lo speed is unknown, defaulting to 1000 [ 116.961703][ T7426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.009792][ T7426] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.177455][ T7426] lo speed is unknown, defaulting to 1000 [ 117.269883][ T7426] lo speed is unknown, defaulting to 1000 [ 117.316836][ T7426] lo speed is unknown, defaulting to 1000 [ 117.341211][ T7426] lo speed is unknown, defaulting to 1000 [ 117.366275][ T7426] lo speed is unknown, defaulting to 1000 [ 117.772407][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 117.837116][ T7509] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.989380][ T7509] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.060174][ T7509] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.115729][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 118.161280][ T7509] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.174951][ T7537] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 118.267574][ T7531] pim6reg1: entered promiscuous mode [ 118.298000][ T7531] pim6reg1: entered allmulticast mode [ 118.593392][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 118.602224][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 118.619626][ T7509] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.765966][ T7509] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.782083][ T7509] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.808546][ T7509] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.094750][ T7580] xt_ipcomp: unknown flags F7 [ 119.456001][ T7599] sctp: [Deprecated]: syz.1.469 (pid 7599) Use of int in max_burst socket option. [ 119.456001][ T7599] Use struct sctp_assoc_value instead [ 119.577226][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 119.840425][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 119.921008][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 119.983695][ T7608] netlink: 340 bytes leftover after parsing attributes in process `syz.4.467'. [ 120.485289][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 120.547120][ T7647] xt_hashlimit: size too large, truncated to 1048576 [ 120.569249][ T7642] can: request_module (can-proto-0) failed. [ 120.807935][ T7656] xt_hashlimit: size too large, truncated to 1048576 [ 121.349943][ T7680] xt_socket: unknown flags 0x4 [ 121.478724][ T7687] sctp: [Deprecated]: syz.2.492 (pid 7687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.478724][ T7687] Use struct sctp_sack_info instead [ 121.588482][ T7692] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.744483][ T7698] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 122.013901][ T7698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.045459][ T7698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.061976][ T7698] bond0 (unregistering): Released all slaves [ 122.115851][ T7710] macvlan2: entered promiscuous mode [ 122.131442][ T7710] macvlan2: entered allmulticast mode [ 122.221277][ T7719] Bluetooth: MGMT ver 1.23 [ 122.259084][ T7718] __nla_validate_parse: 6 callbacks suppressed [ 122.259102][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.503'. [ 122.260470][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'. [ 122.322207][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.504'. [ 122.360808][ T7722] syz_tun: entered promiscuous mode [ 122.394324][ T7722] erspan0: entered promiscuous mode [ 122.408814][ T7722] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 122.422610][ T7722] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 122.477097][ T7727] lo speed is unknown, defaulting to 1000 [ 122.537743][ T7728] lo speed is unknown, defaulting to 1000 [ 122.751841][ T7743] tun0: tun_chr_ioctl cmd 1074025675 [ 122.761703][ T7743] tun0: persist enabled [ 122.824216][ T7748] tun0: tun_chr_ioctl cmd 1074025675 [ 122.829572][ T7748] tun0: persist disabled [ 122.846648][ T7748] netlink: 68 bytes leftover after parsing attributes in process `syz.1.512'. [ 122.859657][ T7752] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 122.860112][ T7747] IPVS: stopping backup sync thread 7752 ... [ 123.454249][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 123.952485][ T7448] IPVS: starting estimator thread 0... [ 124.039548][ T7794] netlink: 'syz.2.523': attribute type 11 has an invalid length. [ 124.066155][ T7790] IPVS: using max 32 ests per chain, 76800 per kthread [ 124.209757][ T7800] x_tables: duplicate underflow at hook 1 [ 124.239341][ T7800] x_tables: duplicate underflow at hook 1 [ 124.240279][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 124.249473][ T7800] x_tables: duplicate underflow at hook 1 [ 124.283118][ T7803] @ÿ: renamed from bond_slave_0 (while UP) [ 124.291034][ T7800] x_tables: duplicate underflow at hook 1 [ 124.307520][ T7800] x_tables: duplicate underflow at hook 1 [ 124.319114][ T7800] x_tables: duplicate underflow at hook 1 [ 124.332820][ T7800] x_tables: duplicate underflow at hook 1 [ 124.349751][ T7800] x_tables: duplicate underflow at hook 1 [ 124.374477][ T7800] x_tables: duplicate underflow at hook 1 [ 124.391351][ T7800] x_tables: duplicate underflow at hook 1 [ 124.540766][ T7809] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 124.834862][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 125.051174][ T7829] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 125.068924][ T7829] netlink: 'syz.3.532': attribute type 2 has an invalid length. [ 125.395817][ T7843] lo speed is unknown, defaulting to 1000 [ 125.609467][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 125.802198][ T7860] netlink: 2 bytes leftover after parsing attributes in process `syz.3.540'. [ 126.591639][ T7885] netlink: 'syz.0.549': attribute type 11 has an invalid length. [ 126.592333][ T7890] netlink: 104 bytes leftover after parsing attributes in process `syz.2.550'. [ 126.954735][ T7889] SET target dimension over the limit! [ 127.297692][ T7906] bond1: (slave macvlan3): Releasing backup interface [ 127.312457][ T7906] bond0 (unregistering): (slave team0): Releasing backup interface [ 127.338384][ T7906] bond0 (unregistering): Released all slaves [ 127.376760][ T7913] lo speed is unknown, defaulting to 1000 [ 127.387949][ T7911] lo speed is unknown, defaulting to 1000 [ 127.916930][ T7932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.947911][ T7934] netlink: 'syz.0.564': attribute type 178 has an invalid length. [ 128.272226][ T7954] FAULT_INJECTION: forcing a failure. [ 128.272226][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.344548][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.0.572 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 128.344577][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.344590][ T7954] Call Trace: [ 128.344598][ T7954] [ 128.344606][ T7954] dump_stack_lvl+0x241/0x360 [ 128.344643][ T7954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.344666][ T7954] ? __pfx__printk+0x10/0x10 [ 128.344700][ T7954] should_fail_ex+0x40a/0x550 [ 128.344737][ T7954] _copy_to_user+0x31/0xb0 [ 128.344779][ T7954] bpf_test_finish+0x59c/0x890 [ 128.344816][ T7954] ? __pfx_bpf_test_finish+0x10/0x10 [ 128.344849][ T7954] ? convert_skb_to___skb+0x2d3/0x510 [ 128.344876][ T7954] bpf_prog_test_run_skb+0xff8/0x1830 [ 128.344919][ T7954] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 128.344944][ T7954] ? __fget_files+0x2a/0x410 [ 128.344972][ T7954] ? fput+0x21b/0x290 [ 128.344996][ T7954] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 128.345028][ T7954] bpf_prog_test_run+0x2e4/0x360 [ 128.345061][ T7954] __sys_bpf+0x487/0x820 [ 128.345089][ T7954] ? __pfx___sys_bpf+0x10/0x10 [ 128.345127][ T7954] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.345158][ T7954] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.345188][ T7954] ? do_syscall_64+0x100/0x230 [ 128.345218][ T7954] __x64_sys_bpf+0x7c/0x90 [ 128.345242][ T7954] do_syscall_64+0xf3/0x230 [ 128.345263][ T7954] ? clear_bhb_loop+0x35/0x90 [ 128.345291][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.345317][ T7954] RIP: 0033:0x7fd8b718d169 [ 128.345334][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.345348][ T7954] RSP: 002b:00007fd8b7f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.345367][ T7954] RAX: ffffffffffffffda RBX: 00007fd8b73a5fa0 RCX: 00007fd8b718d169 [ 128.345381][ T7954] RDX: 000000000000004c RSI: 0000400000000240 RDI: 000000000000000a [ 128.345391][ T7954] RBP: 00007fd8b7f5d090 R08: 0000000000000000 R09: 0000000000000000 [ 128.345402][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.345413][ T7954] R13: 0000000000000000 R14: 00007fd8b73a5fa0 R15: 00007ffd19de8aa8 [ 128.345440][ T7954] [ 128.890150][ T7971] __nla_validate_parse: 1 callbacks suppressed [ 128.890166][ T7971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 128.922242][ T7970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.576'. [ 129.411172][ T7996] FAULT_INJECTION: forcing a failure. [ 129.411172][ T7996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.440153][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 129.458963][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: syz.2.584 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 129.458987][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.458997][ T7996] Call Trace: [ 129.459003][ T7996] [ 129.459009][ T7996] dump_stack_lvl+0x241/0x360 [ 129.459035][ T7996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.459054][ T7996] ? __pfx__printk+0x10/0x10 [ 129.459076][ T7996] ? snprintf+0xda/0x120 [ 129.459094][ T7996] should_fail_ex+0x40a/0x550 [ 129.459124][ T7996] _copy_to_user+0x31/0xb0 [ 129.459149][ T7996] simple_read_from_buffer+0xca/0x150 [ 129.459175][ T7996] proc_fail_nth_read+0x1e9/0x250 [ 129.459201][ T7996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.459228][ T7996] ? rw_verify_area+0x243/0x630 [ 129.459245][ T7996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.459270][ T7996] vfs_read+0x1f8/0xb40 [ 129.459289][ T7996] ? fdget_pos+0x254/0x320 [ 129.459314][ T7996] ? __pfx___mutex_lock+0x10/0x10 [ 129.459336][ T7996] ? __pfx_vfs_read+0x10/0x10 [ 129.459357][ T7996] ? __fget_files+0x2a/0x410 [ 129.459384][ T7996] ? __fget_files+0x395/0x410 [ 129.459408][ T7996] ? __fget_files+0x2a/0x410 [ 129.459442][ T7996] ksys_read+0x18f/0x2b0 [ 129.459463][ T7996] ? __pfx_ksys_read+0x10/0x10 [ 129.459482][ T7996] ? do_syscall_64+0x100/0x230 [ 129.459509][ T7996] ? do_syscall_64+0xb6/0x230 [ 129.459534][ T7996] do_syscall_64+0xf3/0x230 [ 129.459554][ T7996] ? clear_bhb_loop+0x35/0x90 [ 129.459583][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.459608][ T7996] RIP: 0033:0x7f8bbbf8bb7c [ 129.459623][ T7996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.459636][ T7996] RSP: 002b:00007f8bbcd5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.459654][ T7996] RAX: ffffffffffffffda RBX: 00007f8bbc1a5fa0 RCX: 00007f8bbbf8bb7c [ 129.459667][ T7996] RDX: 000000000000000f RSI: 00007f8bbcd5c0a0 RDI: 0000000000000005 [ 129.459677][ T7996] RBP: 00007f8bbcd5c090 R08: 0000000000000000 R09: 0000000000000000 [ 129.459688][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.459698][ T7996] R13: 0000000000000000 R14: 00007f8bbc1a5fa0 R15: 00007ffe0ccb54b8 [ 129.459724][ T7996] [ 129.485006][ T7999] netlink: 'syz.4.582': attribute type 11 has an invalid length. [ 129.717345][ T7999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.582'. [ 130.183384][ T8023] Cannot find map_set index 0 as target [ 130.209591][ T8015] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.236105][ T8025] xt_check_table_hooks: 55 callbacks suppressed [ 130.236121][ T8025] x_tables: duplicate underflow at hook 2 [ 130.459374][ T5886] IPVS: starting estimator thread 0... [ 130.488278][ T8040] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 130.563243][ T8038] IPVS: using max 25 ests per chain, 60000 per kthread [ 130.997498][ T8058] netlink: 'syz.4.602': attribute type 4 has an invalid length. [ 131.033211][ T8058] netlink: 152 bytes leftover after parsing attributes in process `syz.4.602'. [ 131.073894][ T8060] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 131.104203][ T8058] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 131.297517][ T8060] veth0_vlan: left promiscuous mode [ 131.356735][ T8060] veth0_vlan: entered promiscuous mode [ 131.379414][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.390028][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.399566][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.409642][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.417840][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.425475][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.454366][ T8060] team0: Device veth0_vlan failed to register rx_handler [ 131.653607][ T8060] syz.4.602 (8060) used greatest stack depth: 18256 bytes left [ 131.674910][ T8063] lo speed is unknown, defaulting to 1000 [ 131.816400][ T8076] netlink: 9 bytes leftover after parsing attributes in process `syz.2.608'. [ 131.840566][ T8076] gretap0: entered promiscuous mode [ 131.868023][ T8078] netlink: 5 bytes leftover after parsing attributes in process `syz.2.608'. [ 131.966731][ T8078] 0ªX¹¦D: renamed from gretap0 [ 131.974009][ T8078] 0ªX¹¦D: left promiscuous mode [ 131.979016][ T8078] 0ªX¹¦D: entered allmulticast mode [ 131.986479][ T8078] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 132.013838][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 132.148445][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 132.260698][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.270268][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.278474][ T8063] bridge_slave_0: entered allmulticast mode [ 132.288296][ T8063] bridge_slave_0: entered promiscuous mode [ 132.296851][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.304333][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.344342][ T8063] bridge_slave_1: entered allmulticast mode [ 132.349240][ T8095] nbd: must specify a device to reconfigure [ 132.351369][ T8063] bridge_slave_1: entered promiscuous mode [ 132.443496][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.455464][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.566662][ T8063] team0: Port device team_slave_0 added [ 132.583292][ T8102] netlink: 'syz.3.615': attribute type 21 has an invalid length. [ 132.606902][ T8063] team0: Port device team_slave_1 added [ 132.647291][ T8102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.615'. [ 132.743963][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.750969][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.789673][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.808877][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 132.835363][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.843042][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.872527][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872828][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893371][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.062575][ T8063] hsr_slave_0: entered promiscuous mode [ 133.079618][ T8063] hsr_slave_1: entered promiscuous mode [ 133.096213][ T8063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.116625][ T8063] Cannot create hsr debugfs directory [ 133.151554][ T8118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.179039][ T8118] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 133.189122][ T8118] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 133.455576][ T8063] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.493910][ T5836] Bluetooth: hci3: command tx timeout [ 133.519302][ T8123] lo speed is unknown, defaulting to 1000 [ 133.604142][ T8063] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.787862][ T8063] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.873998][ T8136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.910077][ T8063] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.218120][ T8063] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.264152][ T8063] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.377806][ T8063] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.423590][ T8063] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.454288][ T8165] tipc: Enabling of bearer rejected, failed to enable media [ 134.589639][ T8175] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 134.744377][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.844458][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.913353][ T8184] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 134.938306][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.945463][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.971630][ T8187] __nla_validate_parse: 5 callbacks suppressed [ 134.971646][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 135.026688][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.033849][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.043546][ T8190] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.110902][ T8190] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 135.280919][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 135.292307][ T8201] lo speed is unknown, defaulting to 1000 [ 135.507531][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.517034][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.574605][ T5847] Bluetooth: hci3: command tx timeout [ 135.601635][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.657156][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.671125][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.845065][ T8063] veth0_vlan: entered promiscuous mode [ 135.851588][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.860750][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.915869][ T8063] veth1_vlan: entered promiscuous mode [ 136.444154][ T8225] lo speed is unknown, defaulting to 1000 [ 136.581352][ T8063] veth0_macvtap: entered promiscuous mode [ 136.624128][ T8245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 136.654387][ T8063] veth1_macvtap: entered promiscuous mode [ 136.732382][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.772944][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.789819][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.813771][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.835737][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.846643][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.858730][ T5918] IPVS: starting estimator thread 0... [ 136.861595][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.901916][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 136.920832][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.931663][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.941840][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.953829][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.965067][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.977213][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.989063][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.993689][ T8276] IPVS: using max 22 ests per chain, 52800 per kthread [ 137.032625][ T8063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.042681][ T8063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.058624][ T8063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.067743][ T8063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.663801][ T5847] Bluetooth: hci3: command 0x040f tx timeout [ 137.684932][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.709603][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.750236][ T8279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.792760][ T8279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.607149][ T8277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.786243][ T8277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.921408][ T8344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.040831][ T8277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.153615][ T8344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.287581][ T8356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.399043][ T8277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.515533][ T8344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.572735][ T8356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.634624][ T8344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.699086][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.709886][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.720371][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.748529][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.757806][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.775790][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.794000][ T8356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.838744][ T8372] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 139.953315][ T8372] dummy0: left allmulticast mode [ 139.958503][ T8372] dummy0: left promiscuous mode [ 139.966032][ T8372] bridge0: port 3(dummy0) entered disabled state [ 139.985396][ T8372] team0: Port device dummy0 added [ 140.015410][ T8356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.032412][ T7459] IPVS: starting estimator thread 0... [ 140.122626][ T8380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.123102][ T8381] IPVS: using max 23 ests per chain, 55200 per kthread [ 140.151638][ T8368] lo speed is unknown, defaulting to 1000 [ 140.163224][ T8344] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.191455][ T8383] IPv6: Can't replace route, no match found [ 140.202773][ T8385] netlink: 'syz.1.681': attribute type 2 has an invalid length. [ 140.211634][ T8385] __nla_validate_parse: 6 callbacks suppressed [ 140.211648][ T8385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.681'. [ 140.256891][ T8380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.262592][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 140.313273][ T8344] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.337981][ T8277] bridge_slave_1: left allmulticast mode [ 140.354802][ T8277] bridge_slave_1: left promiscuous mode [ 140.361213][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.417177][ T8277] bridge_slave_0: left allmulticast mode [ 140.433173][ T8277] bridge_slave_0: left promiscuous mode [ 140.443658][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.609582][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'. [ 140.811785][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 140.858254][ T8277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.870858][ T8277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.882595][ T8277] bond0 (unregistering): Released all slaves [ 140.899243][ T8344] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.924547][ T8380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.962550][ T8356] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.981152][ T8379] tipc: Started in network mode [ 140.988976][ T8379] tipc: Node identity ac1414aa, cluster identity 4711 [ 140.996553][ T8379] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.004002][ T8379] tipc: Enabled bearer , priority 10 [ 141.019547][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 141.056922][ T8344] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.133270][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.179069][ T8380] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.235528][ T8356] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.252018][ T8392] ================================================================== [ 141.260177][ T8392] BUG: KASAN: slab-use-after-free in qdisc_create+0x1162/0x12b0 [ 141.267849][ T8392] Read of size 1 at addr ffff88805336acbd by task syz.1.683/8392 [ 141.275575][ T8392] [ 141.277906][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.1.683 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 141.277927][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.277938][ T8392] Call Trace: [ 141.277944][ T8392] [ 141.277951][ T8392] dump_stack_lvl+0x241/0x360 [ 141.277976][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.277994][ T8392] ? __pfx__printk+0x10/0x10 [ 141.278012][ T8392] ? _printk+0xd5/0x120 [ 141.278027][ T8392] ? __virt_addr_valid+0x183/0x530 [ 141.278044][ T8392] ? __virt_addr_valid+0x183/0x530 [ 141.278061][ T8392] print_report+0x16e/0x5b0 [ 141.278083][ T8392] ? __virt_addr_valid+0x183/0x530 [ 141.278097][ T8392] ? __virt_addr_valid+0x183/0x530 [ 141.278113][ T8392] ? __virt_addr_valid+0x45f/0x530 [ 141.278128][ T8392] ? __phys_addr+0xba/0x170 [ 141.278144][ T8392] ? qdisc_create+0x1162/0x12b0 [ 141.278165][ T8392] kasan_report+0x143/0x180 [ 141.278187][ T8392] ? qdisc_create+0x1162/0x12b0 [ 141.278211][ T8392] qdisc_create+0x1162/0x12b0 [ 141.278235][ T8392] ? __pfx_qdisc_create+0x10/0x10 [ 141.278260][ T8392] tc_modify_qdisc+0x17ce/0x2420 [ 141.278292][ T8392] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 141.278311][ T8392] ? __mutex_lock+0xba3/0x1010 [ 141.278333][ T8392] ? __mutex_lock+0x602/0x1010 [ 141.278365][ T8392] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 141.278386][ T8392] rtnetlink_rcv_msg+0x73f/0xcf0 [ 141.278411][ T8392] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 141.278436][ T8392] ? __lock_acquire+0x1397/0x2100 [ 141.278462][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.278494][ T8392] netlink_rcv_skb+0x206/0x480 [ 141.278519][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.278545][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.278579][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.278610][ T8392] netlink_unicast+0x7f6/0x990 [ 141.278636][ T8392] ? __pfx_netlink_unicast+0x10/0x10 [ 141.278657][ T8392] ? __virt_addr_valid+0x45f/0x530 [ 141.278672][ T8392] ? __phys_addr_symbol+0x2f/0x70 [ 141.278687][ T8392] ? __check_object_size+0x47a/0x730 [ 141.278712][ T8392] netlink_sendmsg+0x8de/0xcb0 [ 141.278748][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.278775][ T8392] ? aa_sock_msg_perm+0x91/0x160 [ 141.278805][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.278830][ T8392] __sock_sendmsg+0x221/0x270 [ 141.278855][ T8392] ____sys_sendmsg+0x53a/0x860 [ 141.278879][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.278898][ T8392] ? __fget_files+0x2a/0x410 [ 141.278924][ T8392] ? __fget_files+0x2a/0x410 [ 141.278963][ T8392] __sys_sendmsg+0x269/0x350 [ 141.278984][ T8392] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.279031][ T8392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.279055][ T8392] ? do_syscall_64+0x100/0x230 [ 141.279075][ T8392] ? do_syscall_64+0xb6/0x230 [ 141.279095][ T8392] do_syscall_64+0xf3/0x230 [ 141.279114][ T8392] ? clear_bhb_loop+0x35/0x90 [ 141.279137][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.279157][ T8392] RIP: 0033:0x7f2a9958d169 [ 141.279171][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.279183][ T8392] RSP: 002b:00007f2a9a32e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.279200][ T8392] RAX: ffffffffffffffda RBX: 00007f2a997a6080 RCX: 00007f2a9958d169 [ 141.279213][ T8392] RDX: 0000000004000800 RSI: 00004000000001c0 RDI: 0000000000000006 [ 141.279223][ T8392] RBP: 00007f2a9960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.279232][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.279241][ T8392] R13: 0000000000000000 R14: 00007f2a997a6080 R15: 00007fffad87ac38 [ 141.279259][ T8392] [ 141.279264][ T8392] [ 141.636160][ T8392] Allocated by task 8391: [ 141.640478][ T8392] kasan_save_track+0x3f/0x80 [ 141.645153][ T8392] __kasan_kmalloc+0x98/0xb0 [ 141.649735][ T8392] __kmalloc_node_noprof+0x290/0x4d0 [ 141.655019][ T8392] __kvmalloc_node_noprof+0x72/0x190 [ 141.660309][ T8392] alloc_netdev_mqs+0xa4/0x1210 [ 141.665163][ T8392] rtnl_create_link+0x2f9/0xc90 [ 141.670014][ T8392] rtnl_newlink_create+0x2e1/0xbd0 [ 141.675121][ T8392] rtnl_newlink+0x167a/0x1d90 [ 141.679799][ T8392] rtnetlink_rcv_msg+0x791/0xcf0 [ 141.684765][ T8392] netlink_rcv_skb+0x206/0x480 [ 141.689552][ T8392] netlink_unicast+0x7f6/0x990 [ 141.694322][ T8392] netlink_sendmsg+0x8de/0xcb0 [ 141.699094][ T8392] __sock_sendmsg+0x221/0x270 [ 141.703777][ T8392] ____sys_sendmsg+0x53a/0x860 [ 141.708549][ T8392] __sys_sendmsg+0x269/0x350 [ 141.713142][ T8392] do_syscall_64+0xf3/0x230 [ 141.717648][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.723547][ T8392] [ 141.725866][ T8392] Freed by task 8394: [ 141.729899][ T8392] kasan_save_track+0x3f/0x80 [ 141.734577][ T8392] kasan_save_free_info+0x40/0x50 [ 141.739618][ T8392] __kasan_slab_free+0x59/0x70 [ 141.744382][ T8392] kfree+0x196/0x430 [ 141.748280][ T8392] device_release+0x99/0x1c0 [ 141.752862][ T8392] kobject_put+0x22f/0x480 [ 141.757282][ T8392] netdev_run_todo+0xd9d/0xf30 [ 141.762040][ T8392] rtnl_dellink+0x761/0x8c0 [ 141.766543][ T8392] rtnetlink_rcv_msg+0x791/0xcf0 [ 141.771560][ T8392] netlink_rcv_skb+0x206/0x480 [ 141.776359][ T8392] netlink_unicast+0x7f6/0x990 [ 141.781122][ T8392] netlink_sendmsg+0x8de/0xcb0 [ 141.785886][ T8392] __sock_sendmsg+0x221/0x270 [ 141.790565][ T8392] ____sys_sendmsg+0x53a/0x860 [ 141.795327][ T8392] __sys_sendmsg+0x269/0x350 [ 141.799912][ T8392] do_syscall_64+0xf3/0x230 [ 141.804420][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.810342][ T8392] [ 141.812669][ T8392] The buggy address belongs to the object at ffff88805336a000 [ 141.812669][ T8392] which belongs to the cache kmalloc-cg-4k of size 4096 [ 141.826993][ T8392] The buggy address is located 3261 bytes inside of [ 141.826993][ T8392] freed 4096-byte region [ffff88805336a000, ffff88805336b000) [ 141.840968][ T8392] [ 141.843292][ T8392] The buggy address belongs to the physical page: [ 141.849696][ T8392] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53368 [ 141.858457][ T8392] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.866952][ T8392] memcg:ffff888027b92101 [ 141.871200][ T8392] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 141.878751][ T8392] page_type: f5(slab) [ 141.882727][ T8392] raw: 00fff00000000040 ffff88801b04f500 dead000000000122 0000000000000000 [ 141.891305][ T8392] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888027b92101 [ 141.899898][ T8392] head: 00fff00000000040 ffff88801b04f500 dead000000000122 0000000000000000 [ 141.908585][ T8392] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888027b92101 [ 141.917250][ T8392] head: 00fff00000000003 ffffea00014cda01 ffffffffffffffff 0000000000000000 [ 141.925911][ T8392] head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000 [ 141.934577][ T8392] page dumped because: kasan: bad access detected [ 141.940998][ T8392] page_owner tracks the page as allocated [ 141.946721][ T8392] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8368, tgid 8368 (syz-executor), ts 140972688540, free_ts 140882249536 [ 141.970081][ T8392] post_alloc_hook+0x1f4/0x240 [ 141.974856][ T8392] get_page_from_freelist+0x365c/0x37a0 [ 141.980485][ T8392] __alloc_frozen_pages_noprof+0x292/0x710 [ 141.986286][ T8392] alloc_pages_mpol+0x311/0x660 [ 141.991132][ T8392] allocate_slab+0x8f/0x3a0 [ 141.995634][ T8392] ___slab_alloc+0xc27/0x14a0 [ 142.000307][ T8392] __slab_alloc+0x58/0xa0 [ 142.004671][ T8392] __kmalloc_node_noprof+0x2ee/0x4d0 [ 142.009976][ T8392] __kvmalloc_node_noprof+0x72/0x190 [ 142.015261][ T8392] alloc_netdev_mqs+0xa4/0x1210 [ 142.020107][ T8392] sit_init_net+0x150/0x5c0 [ 142.024612][ T8392] ops_init+0x349/0x5b0 [ 142.028771][ T8392] setup_net+0x287/0x9e0 [ 142.033023][ T8392] copy_net_ns+0x33f/0x570 [ 142.037436][ T8392] create_new_namespaces+0x425/0x7b0 [ 142.042715][ T8392] unshare_nsproxy_namespaces+0x124/0x180 [ 142.048432][ T8392] page last free pid 8277 tgid 8277 stack trace: [ 142.054756][ T8392] free_frozen_pages+0xe0d/0x10e0 [ 142.059775][ T8392] __put_partials+0x160/0x1c0 [ 142.064447][ T8392] put_cpu_partial+0x17c/0x250 [ 142.069211][ T8392] __slab_free+0x290/0x380 [ 142.073623][ T8392] qlist_free_all+0x9a/0x140 [ 142.078230][ T8392] kasan_quarantine_reduce+0x14f/0x170 [ 142.083688][ T8392] __kasan_slab_alloc+0x23/0x80 [ 142.088547][ T8392] __kmalloc_cache_noprof+0x1d9/0x390 [ 142.093935][ T8392] netdevice_event+0x3f2/0x8e0 [ 142.098709][ T8392] notifier_call_chain+0x1a5/0x3f0 [ 142.103826][ T8392] netif_set_mac_address+0x3d9/0x510 [ 142.109111][ T8392] dev_set_mac_address+0x38/0x50 [ 142.114045][ T8392] __bond_release_one+0xd44/0x1180 [ 142.119166][ T8392] bond_uninit+0x147/0x2f0 [ 142.123582][ T8392] unregister_netdevice_many_notify+0x1df8/0x24f0 [ 142.130015][ T8392] cleanup_net+0x76d/0xd60 [ 142.134435][ T8392] [ 142.136754][ T8392] Memory state around the buggy address: [ 142.142371][ T8392] ffff88805336ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.150424][ T8392] ffff88805336ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.158492][ T8392] >ffff88805336ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.166557][ T8392] ^ [ 142.172443][ T8392] ffff88805336ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.180496][ T8392] ffff88805336ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.188551][ T8392] ================================================================== [ 142.224112][ T5847] Bluetooth: hci3: command tx timeout [ 142.251343][ T7459] tipc: Node number set to 2886997162 [ 142.313147][ T8392] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.320385][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.1.683 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 142.331017][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.341087][ T8392] Call Trace: [ 142.344384][ T8392] [ 142.347330][ T8392] dump_stack_lvl+0x241/0x360 [ 142.352029][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.357253][ T8392] ? __pfx__printk+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.361866][ T8392] ? preempt_schedule+0xe1/0xf0 [ 142.366731][ T8392] ? vscnprintf+0x5d/0x90 [ 142.371059][ T8392] panic+0x349/0x880 [ 142.374962][ T8392] ? check_panic_on_warn+0x21/0xb0 [ 142.380105][ T8392] ? __pfx_panic+0x10/0x10 [ 142.384545][ T8392] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 142.390557][ T8392] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.396908][ T8392] ? print_report+0x519/0x5b0 [ 142.401610][ T8392] check_panic_on_warn+0x86/0xb0 [ 142.406578][ T8392] ? qdisc_create+0x1162/0x12b0 [ 142.411538][ T8392] end_report+0x77/0x160 [ 142.415824][ T8392] kasan_report+0x154/0x180 [ 142.420341][ T8392] ? qdisc_create+0x1162/0x12b0 [ 142.425208][ T8392] qdisc_create+0x1162/0x12b0 [ 142.429890][ T8392] ? __pfx_qdisc_create+0x10/0x10 [ 142.435001][ T8392] tc_modify_qdisc+0x17ce/0x2420 [ 142.439944][ T8392] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 142.445224][ T8392] ? __mutex_lock+0xba3/0x1010 [ 142.449983][ T8392] ? __mutex_lock+0x602/0x1010 [ 142.454763][ T8392] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 142.460044][ T8392] rtnetlink_rcv_msg+0x73f/0xcf0 [ 142.464996][ T8392] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 142.470122][ T8392] ? __lock_acquire+0x1397/0x2100 [ 142.475159][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.480631][ T8392] netlink_rcv_skb+0x206/0x480 [ 142.485397][ T8392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.490856][ T8392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.496149][ T8392] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.501355][ T8392] netlink_unicast+0x7f6/0x990 [ 142.506124][ T8392] ? __pfx_netlink_unicast+0x10/0x10 [ 142.511410][ T8392] ? __virt_addr_valid+0x45f/0x530 [ 142.516529][ T8392] ? __phys_addr_symbol+0x2f/0x70 [ 142.521546][ T8392] ? __check_object_size+0x47a/0x730 [ 142.526837][ T8392] netlink_sendmsg+0x8de/0xcb0 [ 142.531605][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.536893][ T8392] ? aa_sock_msg_perm+0x91/0x160 [ 142.541837][ T8392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.547123][ T8392] __sock_sendmsg+0x221/0x270 [ 142.551803][ T8392] ____sys_sendmsg+0x53a/0x860 [ 142.556568][ T8392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.561846][ T8392] ? __fget_files+0x2a/0x410 [ 142.566443][ T8392] ? __fget_files+0x2a/0x410 [ 142.571042][ T8392] __sys_sendmsg+0x269/0x350 [ 142.575639][ T8392] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.580770][ T8392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.587108][ T8392] ? do_syscall_64+0x100/0x230 [ 142.591881][ T8392] ? do_syscall_64+0xb6/0x230 [ 142.596570][ T8392] do_syscall_64+0xf3/0x230 [ 142.601079][ T8392] ? clear_bhb_loop+0x35/0x90 [ 142.605762][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.611656][ T8392] RIP: 0033:0x7f2a9958d169 [ 142.616077][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.635690][ T8392] RSP: 002b:00007f2a9a32e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.644105][ T8392] RAX: ffffffffffffffda RBX: 00007f2a997a6080 RCX: 00007f2a9958d169 [ 142.652079][ T8392] RDX: 0000000004000800 RSI: 00004000000001c0 RDI: 0000000000000006 [ 142.660054][ T8392] RBP: 00007f2a9960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.668026][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.676000][ T8392] R13: 0000000000000000 R14: 00007f2a997a6080 R15: 00007fffad87ac38 [ 142.683979][ T8392] [ 142.687319][ T8392] Kernel Offset: disabled [ 142.691637][ T8392] Rebooting in 86400 seconds..