last executing test programs: 5m37.975581476s ago: executing program 1 (id=1995): syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/226, 0xe2}], 0x1}, 0x1d7e}, {{&(0x7f0000000500)=@xdp, 0x80, &(0x7f00000005c0)}, 0x6}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x7fffffff}], 0x3, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r2) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) write$cgroup_subtree(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5m37.571258759s ago: executing program 1 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 5m37.354559287s ago: executing program 1 (id=2008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x80000001, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffff6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 5m37.151068475s ago: executing program 1 (id=2012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x40842) sendto$inet6(r1, 0x0, 0x0, 0x40080c1, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r6 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r6, 0x0, 0x0, 0x102, 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5m36.978338573s ago: executing program 1 (id=2016): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 5m36.924429417s ago: executing program 1 (id=2019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0xc084}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 4m31.832244597s ago: executing program 32 (id=2019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0xc084}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m29.874448388s ago: executing program 5 (id=2300): r0 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x2000000, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 2m29.683562925s ago: executing program 5 (id=2302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010000104000080000000000040000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500c9706e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m29.399354851s ago: executing program 5 (id=2309): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, 0x0}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000fea404f433b77b8777a8000000000000000000000000d1de"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2m29.210492467s ago: executing program 5 (id=2311): socketpair(0x0, 0x4, 0xda, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24) clock_gettime(0x0, &(0x7f0000003a40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/57, 0x39}], 0x4}, 0x65e}, {{&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/252, 0xfc}], 0x4}, 0x7c}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/72, 0x48}], 0x1}, 0x2}, {{&(0x7f00000006c0)=@phonet, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/47, 0x2f}], 0x1, &(0x7f00000007c0)=""/212, 0xd4}, 0x1}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000a40)=""/153, 0x99}, {&(0x7f0000000b00)=""/163, 0xa3}], 0x3, &(0x7f0000000c00)=""/73, 0x49}, 0x2000}, {{&(0x7f0000000c80)=@sco={0x1f, @none}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/95, 0x5f}, {&(0x7f0000001d80)=""/75, 0x4b}, {&(0x7f0000001e00)=""/3, 0x3}, {&(0x7f0000001e40)=""/244, 0xf4}, {&(0x7f0000001f40)=""/180, 0xb4}, {&(0x7f0000002000)=""/179, 0xb3}], 0x7, &(0x7f0000002140)=""/181, 0xb5}}, {{&(0x7f0000002200)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002280)=""/6, 0x6}, {&(0x7f00000022c0)=""/152, 0x98}, {&(0x7f0000002380)=""/126, 0x7e}, {&(0x7f0000002400)=""/129, 0x81}, {&(0x7f00000024c0)=""/102, 0x66}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/236, 0xec}, {&(0x7f0000003640)=""/84, 0x54}, {&(0x7f00000036c0)=""/41, 0x29}], 0x9, &(0x7f00000037c0)=""/156, 0x9c}, 0xfffffffd}], 0x7, 0x0, &(0x7f0000003a80)={r2, r3+10000000}) recvmmsg$unix(r1, &(0x7f0000007e40)=[{{&(0x7f0000003ac0)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/249, 0xf9}], 0x1, &(0x7f0000003c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003d00), 0x6e, &(0x7f0000005400)=[{&(0x7f0000003d80)=""/13, 0xd}, {&(0x7f0000003dc0)=""/134, 0x86}, {&(0x7f0000003e80)=""/114, 0x72}, {&(0x7f0000003f00)=""/242, 0xf2}, {&(0x7f0000004000)=""/214, 0xd6}, {&(0x7f0000004100)=""/137, 0x89}, {&(0x7f00000041c0)=""/214, 0xd6}, {&(0x7f00000042c0)=""/4, 0x4}, {&(0x7f0000004300)=""/227, 0xe3}, {&(0x7f0000004400)=""/4096, 0x1000}], 0xa, &(0x7f00000054c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000005500)=@abs, 0x6e, &(0x7f0000006740)=[{&(0x7f0000005580)=""/68, 0x44}, {&(0x7f0000005600)=""/33, 0x21}, {&(0x7f0000005640)=""/21, 0x15}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/153, 0x99}], 0x5, &(0x7f00000067c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000006840), 0x6e, &(0x7f0000007d80)=[{&(0x7f00000068c0)=""/193, 0xc1}, {&(0x7f00000069c0)=""/169, 0xa9}, {&(0x7f0000006a80)=""/83, 0x53}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/233, 0xe9}, {&(0x7f0000007c00)=""/178, 0xb2}, {&(0x7f0000007cc0)=""/99, 0x63}, {&(0x7f0000007d40)=""/12, 0xc}], 0x8, &(0x7f0000007e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}], 0x30}}], 0x4, 0x0, 0x0) nanosleep(&(0x7f0000007f40), &(0x7f0000007f80)) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000007fc0)=0x8, 0x4) sendmsg(r8, &(0x7f0000008200)={&(0x7f0000008000)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xad03}}}, 0x80, &(0x7f0000008100)=[{&(0x7f0000008080)="68a3a873662e4f002dd3a82768a1371ff4e0eb3b21526f221f93d0bb24e844aec1f20a861d74a74638ead7ae80fa0b8c25a0dc48ea168d81c7c17d28c03a17869a279ad8701600e11dc9f690249c89020533ddbc57f8840c20de4d825c8381b51fe54c2df7b0ef4ad09de6027665d08c53b7903a53c35afb", 0x78}], 0x1, &(0x7f0000008140)=[{0x90, 0x107, 0x0, "28ee568155990523cf50068895f27af9a5a1d50a6aff427f276a1ab7cc596e1a8ce66b9ff2bbd0a9de4badb26a4320951d313e9cbaa011b60e98e0fb5bd0d026bdbb17e3cd145526740514628301d15a40fd1058c0878c904e10779bda11427fdd31ef643abdfd2753da7f1ec5e900754257ba31f4657c24cb1e"}], 0x90}, 0x20040084) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r10, 0x89f7, &(0x7f0000008280)={'sit0\x00', &(0x7f0000008240)={@loopback, 0x0, 0x0, 0x20, 0x0, [{@initdev}, {}]}}) r16 = accept4(r7, &(0x7f00000082c0)=@x25={0x9, @remote}, &(0x7f0000008340)=0x80, 0x0) ioctl$SIOCAX25GETUID(r16, 0x89e0, &(0x7f0000008380)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r15}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r12, 0x80489439, &(0x7f00000083c0)) recvmmsg$unix(r6, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000008500)=[{&(0x7f0000008440)=""/173, 0xad}], 0x1, &(0x7f0000008540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}], 0x1, 0x10100, &(0x7f00000086c0)={0x77359400}) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008700), r11) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000008740)={0xffffffffffffffff, 0x9, "488b92", 0x9b, 0x5}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r13, &(0x7f0000008840)={&(0x7f0000008780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000008800)={&(0x7f00000087c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xfb79c6ae246d63dd}, 0x40) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r19, &(0x7f0000008940)={&(0x7f0000008880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008900)={&(0x7f00000088c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x10) getsockname(r1, &(0x7f0000008980)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000008a00)=0x80) getsockname$packet(r9, &(0x7f0000008a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000008a80)=0x14) r21 = bpf$ITER_CREATE(0x21, &(0x7f0000008ac0)={r8}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r21, &(0x7f0000008cc0)={&(0x7f0000008b00), 0xc, &(0x7f0000008c80)={&(0x7f0000008b40)={0x138, r18, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000008d00)={{0x0, 0x1ff, 0x7, 0x962, 0x100000000, 0x0, 0x400, 0x8, 0x1, 0x8000, 0x101, 0x2, 0x1, 0x6b9, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFCONF(r17, 0x8912, &(0x7f0000008e00)=@req={0x28, &(0x7f0000008dc0)={'netdevsim0\x00', @ifru_hwaddr=@local}}) bpf$ENABLE_STATS(0x20, &(0x7f0000008e40), 0x4) clock_gettime(0x3, &(0x7f0000008e80)) socket(0xf, 0x1, 0x2) sendmmsg$inet(r17, &(0x7f000000d0c0)=[{{&(0x7f0000008ec0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f000000d000)=[{&(0x7f0000008f00)="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", 0x1000}, {&(0x7f0000009f00)="2fbbbba33e333ebe5ff523090be19be3f128346e70e6c0d446d23b7198bc4c6f105d78283c0845b36c26a83c594b26", 0x2f}, {&(0x7f0000009f40)="e2110c704ab14fd92834d286a522faec44db94947c72cc86cd80f8243e8faa24f310bc91d2528ae69cd719ca3ba4ad6ae5d0c8", 0x33}, {&(0x7f0000009f80)="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", 0x1000}, {&(0x7f000000af80)="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", 0x1000}, {&(0x7f000000bf80)="0e1a8ee2365e9f18c96dcd0c0dfb839cdf231c7ab01de24ba77e4a8d4583e956a8683d198d7706e0f173dabe86d1769feec38d0476f76c", 0x37}, {&(0x7f000000bfc0)="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", 0x1000}, {&(0x7f000000cfc0)="7192bfe3a5e3f95274e23f90cb535b5ca51abda8b18e9718936cee97f4d0", 0x1e}], 0x8, &(0x7f000000d080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r20, @rand_addr=0x64010100, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffac2e}}], 0x38}}], 0x1, 0x0) recvmsg(r14, &(0x7f000000d2c0)={&(0x7f000000d100)=@hci, 0x80, &(0x7f000000d200)=[{&(0x7f000000d180)=""/115, 0x73}], 0x1, &(0x7f000000d240)=""/112, 0x70}, 0x40000102) 2m28.963467858s ago: executing program 5 (id=2315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000e060102000000000000000002000001050001000700000005001b"], 0x2c}, 0x1, 0x0, 0x0, 0x4064}, 0x8000) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="003f86dd0000120000000000000060"], 0xfce) 2m28.542749926s ago: executing program 5 (id=2318): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2m13.413934602s ago: executing program 33 (id=2318): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1m33.606923067s ago: executing program 4 (id=2642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xffff, 0x5, 0x101}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "ff"}]}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r12, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "a7"}]}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xde90a5bb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x20, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) 1m33.497203768s ago: executing program 4 (id=2645): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x40000) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000140)=0x10001, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1m32.803209402s ago: executing program 4 (id=2649): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xc, 0xffffffffffffffff, [{0x2, 0x6, "ff6ca890"}]}]}}}], 0x20, 0xfd}}], 0x1, 0x804) 1m32.661402506s ago: executing program 4 (id=2651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0xc) socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000034c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@var={0x10, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0xfffffffffffffd0c, 0x0, 0x80000}, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1828, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) 1m31.694389234s ago: executing program 4 (id=2652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@delqdisc={0x24, 0x25, 0x310, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x19}, {0x0, 0xffe0}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x801) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x404, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m31.648207584s ago: executing program 4 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e1e, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x4f, 0x3, 0x9}, @rr={0x7, 0xf, 0x5a, [@local, @loopback, @loopback]}]}}}], 0x28}}], 0x1, 0x4804) 1m16.481456521s ago: executing program 34 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e1e, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x4f, 0x3, 0x9}, @rr={0x7, 0xf, 0x5a, [@local, @loopback, @loopback]}]}}}], 0x28}}], 0x1, 0x4804) 5.046759024s ago: executing program 3 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x2b, 0x3}) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) 4.87408985s ago: executing program 3 (id=3749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="1910c44b79549dcf530c0fa001c2084f02e571508ee47996a1240b1710f6ec874d8e734851461438aaefd8e7e234fce09d32d783345ebb3542ebee5c6d932d74b4ab3242139916f311a71c37c0738a41c0a8fc1cb135e3893e02b145300efbaf9dd89533430a23220986d0a1bf10db3d88c70c33234909c0682bd82910b6b976bf54bc1bee77385639b54743e41d9eea7109bef367a4ff99344990297a4fd2467a54263dfbba6ccc209188a5803d1f453430847f2344cb0e54d54168cb241b993bc23f86dd10ff0ca41ebae15b7a234db02772e30d7d1e1810ecd66eafe1ff7ec3c52ed168965b98fa166b5f02f60dccd098b029b6a8e9657514306d3a12fdd3583e6ec0150603f05d54e453c83a4e2e50053f7021987d7de7fc06967697e7b8859437ea2d0388337e36628d7aca7928ffc3bee277cd900023385deaf15955576a345cccea2e7934f8c24f73544269e53bbe759efc97c5f3181b79d0caec472b8d621b045976bed1daab51a227f36be02dda70b550203e50dc692f50406007f2b8466a1ff837fdbeeca69d9757f212d880c464e93cea6d96231c6fe773a1bc0dd99691d4420d0e386fe4f1a137a8d2fd340c780dfa6866e254e558ffbd4d7940babdd94a92902ea0877fbf5622602ec992dfb44feac9b14e3f45ea1675c41d02a3de4637f874a6b1b70bf87c9681d40cc4984f44b8451679c73c9f30ce730f381e83725e11bb5c47b9e420268a6176762af19af707c8cde587f4051692956ed07de48dc87b368c9fc62727e3d1063c45a33cb77be9c58e114c6c7dc7", 0x23c}], 0x2) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000d060102000000000000000002ffe5080500010007000000050005000000000016000300686173683a6e6e6574000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000d060102000000000000000002ffe5080500010007000000050005000000000016000300686173683a6e6e6574000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) (async) 4.634926119s ago: executing program 2 (id=3752): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bd6801fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.863820569s ago: executing program 3 (id=3755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073"], 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="20001280"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18d22eed2b65e69201001900000000009500000000000000"], 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2004c080) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073"], 0x64}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="20001280"], 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18d22eed2b65e69201001900000000009500000000000000"], 0x0}, 0x90) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2004c080) (async) 1.33871814s ago: executing program 6 (id=3757): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000040)=0xd) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) 1.336605579s ago: executing program 7 (id=3758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x3c, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_nat_t_type={0x0, 0x14, 0x7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}}]}, 0x7}, 0x1, 0x7}, 0x0) socket$netlink(0x10, 0x3, 0xb) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) (async) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.291816227s ago: executing program 6 (id=3759): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) (async) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r5) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x0, 0x3, 0x5}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000480)=""/172, 0xac) (async) read(0xffffffffffffffff, &(0x7f0000000480)=""/172, 0xac) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r9, 0x26}, 0x10) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r9, 0x26}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 1.122691503s ago: executing program 0 (id=3760): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="34000000100039042abd70000300000000000000", @ANYRES32=r1, @ANYBLOB="0000001dd110010014001680100001800c000500fcffffff02000000"], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 1.039190561s ago: executing program 7 (id=3761): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80) setsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000180)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.038598016s ago: executing program 6 (id=3762): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 32) ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f00000002c0)=0x9) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000125bd7000fddbdf258300000008000300", @ANYRES32=r7, @ANYBLOB="0c00a7007a0c00007700020008ff7f0000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b70800000000000f7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000010000000000000001000000852000000500000000437571a575033867984f26086930332745ecfab6bc283321918291ad9e8a9d5717d54bd1338d8d51e4753a2a8670331d8b1200"/109], &(0x7f0000000180)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf24}, 0x94) 1.038324645s ago: executing program 3 (id=3763): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYBLOB="89ba"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.024082775s ago: executing program 2 (id=3764): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x6104}, 0xc4044) 1.006497087s ago: executing program 0 (id=3765): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x35, 0x7, 0xb}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="3440240108ebee215fea857cc9992300", @ANYRES16=r5, @ANYBLOB="01070000000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000001740)) write(0xffffffffffffffff, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) r7 = accept$inet(r1, &(0x7f0000001140)={0x2, 0x0, @private}, &(0x7f0000001180)=0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x4, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001200), r10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000011c0)={'pim6reg1\x00'}) 891.116695ms ago: executing program 3 (id=3766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='hrtimer_start\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='hrtimer_start\x00', r0}, 0x18) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r1, 0x0, 0x0) (async) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) (async) 884.022742ms ago: executing program 2 (id=3767): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000480)={0x27c1, 0x7, 0x2, 0x8, 0x3ff}) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000480)={0x27c1, 0x7, 0x2, 0x8, 0x3ff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003052bbd70000000000000000000445bc4b1ff8ebb888f86d35fab7eb6c7fa030edf9d54c3b509a4090b24a0f97c93a94b2f7653182e9c76199669a2881190fbe4d368630ce5351290722182e1b7296052239622f2423b11c15f56a573cb2c5923415cdd1e1e15de08a6d15098d954f5395756807de560283cf4224f0ef55adc26196a8e3d7b8f5f71", @ANYRES32=0x0, @ANYBLOB="0000000040010000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r5) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xcc, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000065}, 0x20008010) getpeername$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) 840.624532ms ago: executing program 7 (id=3768): r0 = socket(0x3, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) (async) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) 754.790566ms ago: executing program 6 (id=3769): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x49}, 0x4) 705.575908ms ago: executing program 3 (id=3770): socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="3605bfa9b05d66571e583e7c88a8f90688a8", 0x12, 0x40080, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000440), 0x4) 569.94715ms ago: executing program 2 (id=3771): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000380), 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="eef718331800000000000000000000000000000061109800000000009500000000000000b4d7f4c2458eb4917503154993bc711f161e16bc16de0c2c595c4c8bd688bfbc23957f9606e3e4532efbe4714e26fa77f43a8474bf173703f7bfa3de41104b51508de711bd87ee4037e38e787f51a6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7d, &(0x7f00000009c0)=@assoc_value={r4, 0x3}, 0x8) 512.295155ms ago: executing program 0 (id=3772): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x81, 0x6}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x3, 0x4c, 0x81, 0x0, 0xa4, 0x3ff, 0xc}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x40000000}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) 463.066076ms ago: executing program 6 (id=3773): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x6e, 0x800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="2ebed65193ef41c575963f86dd", 0xffda}, {0x0, 0x54}], 0x2) 462.532068ms ago: executing program 7 (id=3774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bde001fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 370.143626ms ago: executing program 6 (id=3775): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r3, 0x400261f2, &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000000c0)=0x80000000, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x4) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x8000) 350.747946ms ago: executing program 2 (id=3776): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r2, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x70}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r6}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x32, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000240)=""/201, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000001c0)='macvlan1\x00'}) 299.179746ms ago: executing program 0 (id=3777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 240.924833ms ago: executing program 7 (id=3778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 123.206288ms ago: executing program 0 (id=3779): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 59.051851ms ago: executing program 7 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x820, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xa}, @void, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1a, 0xc5, "61600bbacf8f79525cf0b4dca7a796ea7a58ebac5e08"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x6, 0x9, 0x0, 0x1, [@generic="f8e6"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) r6 = gettid() r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = gettid() ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x59}}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x12b80000, 0x2e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x53}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}]}, 0x78}}, 0x40001) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000002030104000000000000000000000007080001000300002809000200000000080100000008000100010000014ad1910be321e8adfd7c162aff3a5dcae7994768be912aeccdd6ce4c9c27ce868af01108640961045832e4dfc5380ac6367bb96601cf76c8b3851de02647ae39a94a1fa76073310eb1e9b21fdb5f480746c396af3d280698290a2c6f034f307c0c51fcd5ca0cf0dfa27a5ea813f377d051364c2ac2541c7936b338827e0c46"], 0x30}}, 0x8080) 12.815941ms ago: executing program 2 (id=3781): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="08000300", @ANYRES64], 0x60}}, 0x0) 0s ago: executing program 0 (id=3782): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbfbbbbbbbbb0800490000480000000000019078ac1e0001ac1414aa440cd4600000e9750000000001000000030490781200183f250000000000000000010000e00000017f00000100186371ae9b1c03"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x0, 0x1, 0x3}) getpeername$l2tp(r2, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) kernel console output (not intermixed with test programs): to 1000 [ 465.020415][T14548] wg1 speed is unknown, defaulting to 1000 [ 465.047433][T14581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2545'. [ 465.058965][T14581] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2545'. [ 465.071860][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.083232][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.112244][T14581] netlink: 'syz.2.2545': attribute type 6 has an invalid length. [ 465.120257][T14581] netlink: 'syz.2.2545': attribute type 5 has an invalid length. [ 465.128429][T14581] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2545'. [ 465.138573][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.150136][T14548] wg1 speed is unknown, defaulting to 1000 [ 465.158112][T14548] wg1 speed is unknown, defaulting to 1000 [ 465.180116][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.195824][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.273371][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.454522][T14598] Cannot find del_set index 1536 as target [ 465.463954][T14418] hsr_slave_0: entered promiscuous mode [ 465.483730][T14418] hsr_slave_1: entered promiscuous mode [ 465.505583][T14418] debugfs: 'hsr0' already exists in 'hsr' [ 465.511529][T14418] Cannot create hsr debugfs directory [ 465.616007][T14602] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 465.631510][T14602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.689771][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 465.987132][T14628] netlink: 'syz.4.2555': attribute type 32 has an invalid length. [ 466.012930][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2555'. [ 466.044890][ T53] Bluetooth: hci6: command tx timeout [ 466.207550][T14640] 8021q: adding VLAN 0 to HW filter on device bond13 [ 466.296309][T14418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 466.309683][T14418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 466.341319][T14418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 466.361954][T14418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 466.403627][T14662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2567'. [ 466.541739][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.568058][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.580262][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.587447][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.602197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.609407][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.800365][T14418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.008042][T14418] veth0_vlan: entered promiscuous mode [ 467.018886][T14418] veth1_vlan: entered promiscuous mode [ 467.046088][T14418] veth0_macvtap: entered promiscuous mode [ 467.056002][T14418] veth1_macvtap: entered promiscuous mode [ 467.072705][T14418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.090181][T14418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.104102][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.113049][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.126939][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.135945][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.197491][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.211168][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.235877][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.243738][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.124863][ T53] Bluetooth: hci6: command tx timeout [ 490.292634][T14702] !: renamed from dummy0 (while UP) [ 490.506797][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2577'. [ 490.569672][T14725] 8021q: adding VLAN 0 to HW filter on device bond14 [ 490.664967][T14705] syzkaller0: entered promiscuous mode [ 490.670615][T14705] syzkaller0: entered allmulticast mode [ 490.808693][T14738] FAULT_INJECTION: forcing a failure. [ 490.808693][T14738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.823106][T14738] CPU: 1 UID: 0 PID: 14738 Comm: syz.3.2581 Not tainted syzkaller #0 PREEMPT(full) [ 490.823132][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.823143][T14738] Call Trace: [ 490.823151][T14738] [ 490.823158][T14738] dump_stack_lvl+0x189/0x250 [ 490.823187][T14738] ? __pfx____ratelimit+0x10/0x10 [ 490.823206][T14738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.823226][T14738] ? __pfx__printk+0x10/0x10 [ 490.823243][T14738] ? __might_fault+0xb0/0x130 [ 490.823276][T14738] should_fail_ex+0x414/0x560 [ 490.823305][T14738] _copy_from_user+0x2d/0xb0 [ 490.823326][T14738] ___sys_sendmsg+0x158/0x2a0 [ 490.823345][T14738] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.823390][T14738] ? __fget_files+0x2a/0x420 [ 490.823403][T14738] ? __fget_files+0x3a0/0x420 [ 490.823426][T14738] __sys_sendmmsg+0x227/0x430 [ 490.823454][T14738] ? __pfx___sys_sendmmsg+0x10/0x10 [ 490.823477][T14738] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.823512][T14738] ? ksys_write+0x22a/0x250 [ 490.823534][T14738] ? __pfx_ksys_write+0x10/0x10 [ 490.823557][T14738] __x64_sys_sendmmsg+0xa0/0xc0 [ 490.823574][T14738] do_syscall_64+0xfa/0xfa0 [ 490.823591][T14738] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.823608][T14738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.823622][T14738] ? clear_bhb_loop+0x60/0xb0 [ 490.823640][T14738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.823654][T14738] RIP: 0033:0x7fc91678efc9 [ 490.823668][T14738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.823681][T14738] RSP: 002b:00007fc9175fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.823698][T14738] RAX: ffffffffffffffda RBX: 00007fc9169e5fa0 RCX: 00007fc91678efc9 [ 490.823709][T14738] RDX: 0000000000000001 RSI: 0000200000005e80 RDI: 0000000000000003 [ 490.823718][T14738] RBP: 00007fc9175fb090 R08: 0000000000000000 R09: 0000000000000000 [ 490.823727][T14738] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 490.823736][T14738] R13: 00007fc9169e6038 R14: 00007fc9169e5fa0 R15: 00007fff9af8a498 [ 490.823762][T14738] [ 491.269861][T14749] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2583'. [ 491.320809][T14751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'. [ 492.831691][T14745] tipc: Enabling of bearer rejected, failed to enable media [ 492.905979][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2587'. [ 493.059256][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2590'. [ 493.101559][T14773] hsr_slave_1 (unregistering): left promiscuous mode [ 493.116930][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 493.202628][T14787] FAULT_INJECTION: forcing a failure. [ 493.202628][T14787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.228979][T14787] CPU: 1 UID: 0 PID: 14787 Comm: syz.4.2592 Not tainted syzkaller #0 PREEMPT(full) [ 493.229004][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 493.229014][T14787] Call Trace: [ 493.229021][T14787] [ 493.229029][T14787] dump_stack_lvl+0x189/0x250 [ 493.229058][T14787] ? __pfx____ratelimit+0x10/0x10 [ 493.229079][T14787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.229102][T14787] ? __pfx__printk+0x10/0x10 [ 493.229121][T14787] ? __might_fault+0xb0/0x130 [ 493.229156][T14787] should_fail_ex+0x414/0x560 [ 493.229185][T14787] _copy_from_user+0x2d/0xb0 [ 493.229207][T14787] __sys_sendto+0x25c/0x520 [ 493.229236][T14787] ? __pfx___sys_sendto+0x10/0x10 [ 493.229266][T14787] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 493.229302][T14787] ? __fget_files+0x3a0/0x420 [ 493.229330][T14787] ? ksys_write+0x22a/0x250 [ 493.229355][T14787] ? __pfx_ksys_write+0x10/0x10 [ 493.229382][T14787] __x64_sys_sendto+0xde/0x100 [ 493.229410][T14787] do_syscall_64+0xfa/0xfa0 [ 493.229429][T14787] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.229450][T14787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.229467][T14787] ? clear_bhb_loop+0x60/0xb0 [ 493.229489][T14787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.229506][T14787] RIP: 0033:0x7fdab218efc9 [ 493.229522][T14787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.229538][T14787] RSP: 002b:00007fdab301f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 493.229558][T14787] RAX: ffffffffffffffda RBX: 00007fdab23e5fa0 RCX: 00007fdab218efc9 [ 493.229571][T14787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 493.229582][T14787] RBP: 00007fdab301f090 R08: 0000200000000140 R09: 0000000000000014 [ 493.229594][T14787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.229604][T14787] R13: 00007fdab23e6038 R14: 00007fdab23e5fa0 R15: 00007ffedfd76408 [ 493.229635][T14787] [ 493.448312][T14789] FAULT_INJECTION: forcing a failure. [ 493.448312][T14789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.454170][T14794] netlink: 'syz.6.2595': attribute type 1 has an invalid length. [ 493.491529][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 493.521619][T14789] CPU: 0 UID: 0 PID: 14789 Comm: syz.2.2593 Not tainted syzkaller #0 PREEMPT(full) [ 493.521645][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 493.521656][T14789] Call Trace: [ 493.521664][T14789] [ 493.521672][T14789] dump_stack_lvl+0x189/0x250 [ 493.521701][T14789] ? __pfx____ratelimit+0x10/0x10 [ 493.521722][T14789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.521745][T14789] ? __pfx__printk+0x10/0x10 [ 493.521777][T14789] should_fail_ex+0x414/0x560 [ 493.521806][T14789] _copy_from_user+0x2d/0xb0 [ 493.521828][T14789] __copy_msghdr+0x3c5/0x5b0 [ 493.521851][T14789] ___sys_sendmsg+0x1a5/0x2a0 [ 493.521870][T14789] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.521925][T14789] ? __fget_files+0x2a/0x420 [ 493.521941][T14789] ? __fget_files+0x3a0/0x420 [ 493.521975][T14789] __sys_sendmmsg+0x227/0x430 [ 493.521999][T14789] ? __pfx___sys_sendmmsg+0x10/0x10 [ 493.522026][T14789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.522065][T14789] ? ksys_write+0x22a/0x250 [ 493.522091][T14789] ? __pfx_ksys_write+0x10/0x10 [ 493.522120][T14789] __x64_sys_sendmmsg+0xa0/0xc0 [ 493.522140][T14789] do_syscall_64+0xfa/0xfa0 [ 493.522160][T14789] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.522181][T14789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.522199][T14789] ? clear_bhb_loop+0x60/0xb0 [ 493.522219][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.522237][T14789] RIP: 0033:0x7fb2e858efc9 [ 493.522253][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.522269][T14789] RSP: 002b:00007fb2e94aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 493.522288][T14789] RAX: ffffffffffffffda RBX: 00007fb2e87e5fa0 RCX: 00007fb2e858efc9 [ 493.522302][T14789] RDX: 0000000000000001 RSI: 0000200000005e80 RDI: 0000000000000003 [ 493.522314][T14789] RBP: 00007fb2e94aa090 R08: 0000000000000000 R09: 0000000000000000 [ 493.522325][T14789] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 493.522335][T14789] R13: 00007fb2e87e6038 R14: 00007fb2e87e5fa0 R15: 00007fff856cd758 [ 493.522368][T14789] [ 493.832418][T14805] tipc: Bearer : already 2 bearers with priority 10 [ 493.840742][T14805] tipc: Bearer : trying with adjusted priority [ 493.848708][T14805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2599'. [ 493.858209][T14805] tipc: Invalid UDP bearer configuration [ 493.858265][T14805] tipc: Enabling of bearer rejected, failed to enable media [ 493.886029][T14807] FAULT_INJECTION: forcing a failure. [ 493.886029][T14807] name failslab, interval 1, probability 0, space 0, times 0 [ 493.910535][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.4.2598 Not tainted syzkaller #0 PREEMPT(full) [ 493.910559][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 493.910579][T14807] Call Trace: [ 493.910586][T14807] [ 493.910594][T14807] dump_stack_lvl+0x189/0x250 [ 493.910621][T14807] ? __pfx____ratelimit+0x10/0x10 [ 493.910643][T14807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.910666][T14807] ? __pfx__printk+0x10/0x10 [ 493.910687][T14807] ? __pfx___might_resched+0x10/0x10 [ 493.910707][T14807] ? fs_reclaim_acquire+0x7d/0x100 [ 493.910737][T14807] should_fail_ex+0x414/0x560 [ 493.910768][T14807] should_failslab+0xa8/0x100 [ 493.910788][T14807] kmem_cache_alloc_noprof+0x74/0x6e0 [ 493.910812][T14807] ? __kernfs_new_node+0xd7/0x7e0 [ 493.910840][T14807] __kernfs_new_node+0xd7/0x7e0 [ 493.910861][T14807] ? __lock_acquire+0xab9/0xd20 [ 493.910887][T14807] ? __pfx___kernfs_new_node+0x10/0x10 [ 493.910919][T14807] ? kernfs_root+0x1c/0x230 [ 493.910945][T14807] ? kernfs_root+0x1c/0x230 [ 493.910965][T14807] ? kernfs_root+0x1c/0x230 [ 493.910982][T14807] ? kernfs_root+0x1c/0x230 [ 493.911008][T14807] kernfs_new_node+0x102/0x210 [ 493.911036][T14807] __kernfs_create_file+0x4b/0x2e0 [ 493.911056][T14807] sysfs_add_file_mode_ns+0x238/0x300 [ 493.911085][T14807] sysfs_create_file_ns+0x128/0x1a0 [ 493.911103][T14807] ? __pfx___up_read+0x10/0x10 [ 493.911126][T14807] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 493.911147][T14807] ? __dev_fwnode+0x50/0x80 [ 493.911166][T14807] ? device_create_file+0xf4/0x1c0 [ 493.911186][T14807] device_add+0x440/0xb50 [ 493.911207][T14807] device_create+0x25b/0x2f0 [ 493.911227][T14807] ? timer_init_key+0x171/0x2d0 [ 493.911248][T14807] ? __pfx_device_create+0x10/0x10 [ 493.911265][T14807] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 493.911287][T14807] mac80211_hwsim_new_radio+0x41b/0x5220 [ 493.911321][T14807] ? finish_task_switch+0x266/0x950 [ 493.911345][T14807] ? kasan_save_track+0x4f/0x80 [ 493.911362][T14807] ? kasan_save_track+0x3e/0x80 [ 493.911382][T14807] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 493.911402][T14807] ? __nla_validate_parse+0x2400/0x2d40 [ 493.911416][T14807] ? __x64_sys_sendmsg+0x19b/0x260 [ 493.911437][T14807] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 493.911461][T14807] ? __pfx___nla_validate_parse+0x10/0x10 [ 493.911497][T14807] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 493.911522][T14807] ? rcu_is_watching+0x15/0xb0 [ 493.911540][T14807] ? __nla_parse+0x40/0x60 [ 493.911560][T14807] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 493.911584][T14807] genl_family_rcv_msg_doit+0x215/0x300 [ 493.911606][T14807] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.911632][T14807] ? bpf_lsm_capable+0x9/0x20 [ 493.911648][T14807] ? security_capable+0x7e/0x2e0 [ 493.911671][T14807] genl_rcv_msg+0x60e/0x790 [ 493.911691][T14807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.911706][T14807] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 493.911726][T14807] ? __asan_memcpy+0x40/0x70 [ 493.911743][T14807] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.911762][T14807] netlink_rcv_skb+0x208/0x470 [ 493.911780][T14807] ? __lock_acquire+0xab9/0xd20 [ 493.911794][T14807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.911810][T14807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.911844][T14807] ? down_read+0x1ad/0x2e0 [ 493.911865][T14807] genl_rcv+0x28/0x40 [ 493.911879][T14807] netlink_unicast+0x82f/0x9e0 [ 493.911914][T14807] ? __pfx_netlink_unicast+0x10/0x10 [ 493.911933][T14807] ? netlink_sendmsg+0x642/0xb30 [ 493.911951][T14807] ? skb_put+0x11b/0x210 [ 493.911974][T14807] netlink_sendmsg+0x805/0xb30 [ 493.912000][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.912023][T14807] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.912043][T14807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.912056][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.912077][T14807] __sock_sendmsg+0x21c/0x270 [ 493.912096][T14807] ____sys_sendmsg+0x505/0x830 [ 493.912114][T14807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.912135][T14807] ? import_iovec+0x74/0xa0 [ 493.912155][T14807] ___sys_sendmsg+0x21f/0x2a0 [ 493.912171][T14807] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.912214][T14807] ? __fget_files+0x2a/0x420 [ 493.912226][T14807] ? __fget_files+0x3a0/0x420 [ 493.912247][T14807] __x64_sys_sendmsg+0x19b/0x260 [ 493.912264][T14807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.912285][T14807] ? __pfx_ksys_write+0x10/0x10 [ 493.912307][T14807] ? do_syscall_64+0xbe/0xfa0 [ 493.912327][T14807] do_syscall_64+0xfa/0xfa0 [ 493.912342][T14807] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.912358][T14807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.912371][T14807] ? clear_bhb_loop+0x60/0xb0 [ 493.912388][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.912401][T14807] RIP: 0033:0x7fdab218efc9 [ 493.912415][T14807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.912428][T14807] RSP: 002b:00007fdab301f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.912443][T14807] RAX: ffffffffffffffda RBX: 00007fdab23e5fa0 RCX: 00007fdab218efc9 [ 493.912454][T14807] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 493.912463][T14807] RBP: 00007fdab301f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.912471][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.912479][T14807] R13: 00007fdab23e6038 R14: 00007fdab23e5fa0 R15: 00007ffedfd76408 [ 493.912504][T14807] [ 494.018739][T14813] netlink: 'syz.6.2597': attribute type 1 has an invalid length. [ 494.719903][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2607'. [ 494.730200][T14839] netlink: 11652 bytes leftover after parsing attributes in process `syz.3.2608'. [ 494.750996][T14836] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 494.911477][T14853] FAULT_INJECTION: forcing a failure. [ 494.911477][T14853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.956915][T14853] CPU: 1 UID: 0 PID: 14853 Comm: syz.6.2610 Not tainted syzkaller #0 PREEMPT(full) [ 494.956951][T14853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.956962][T14853] Call Trace: [ 494.956969][T14853] [ 494.956977][T14853] dump_stack_lvl+0x189/0x250 [ 494.957006][T14853] ? __pfx____ratelimit+0x10/0x10 [ 494.957028][T14853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.957050][T14853] ? __pfx__printk+0x10/0x10 [ 494.957069][T14853] ? __might_fault+0xb0/0x130 [ 494.957104][T14853] should_fail_ex+0x414/0x560 [ 494.957133][T14853] _copy_from_user+0x2d/0xb0 [ 494.957154][T14853] ____sys_sendmsg+0x2fe/0x830 [ 494.957176][T14853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.957202][T14853] ? import_iovec+0x74/0xa0 [ 494.957226][T14853] ___sys_sendmsg+0x21f/0x2a0 [ 494.957245][T14853] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.957294][T14853] ? __fget_files+0x2a/0x420 [ 494.957309][T14853] ? __fget_files+0x3a0/0x420 [ 494.957335][T14853] __sys_sendmmsg+0x227/0x430 [ 494.957359][T14853] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.957385][T14853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.957427][T14853] ? ksys_write+0x22a/0x250 [ 494.957452][T14853] ? __pfx_ksys_write+0x10/0x10 [ 494.957480][T14853] __x64_sys_sendmmsg+0xa0/0xc0 [ 494.957499][T14853] do_syscall_64+0xfa/0xfa0 [ 494.957520][T14853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.957537][T14853] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.957554][T14853] ? clear_bhb_loop+0x60/0xb0 [ 494.957575][T14853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.957593][T14853] RIP: 0033:0x7f935498efc9 [ 494.957609][T14853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.957625][T14853] RSP: 002b:00007f9355833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.957645][T14853] RAX: ffffffffffffffda RBX: 00007f9354be5fa0 RCX: 00007f935498efc9 [ 494.957659][T14853] RDX: 0000000000000001 RSI: 0000200000005e80 RDI: 0000000000000003 [ 494.957669][T14853] RBP: 00007f9355833090 R08: 0000000000000000 R09: 0000000000000000 [ 494.957678][T14853] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 494.957688][T14853] R13: 00007f9354be6038 R14: 00007f9354be5fa0 R15: 00007fff1cae9308 [ 494.957718][T14853] [ 495.228655][T14839] hsr_slave_1 (unregistering): left promiscuous mode [ 495.286795][T14842] lo: left promiscuous mode [ 495.291575][T14842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.655121][T14887] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 495.685575][T14888] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 495.803345][T14894] FAULT_INJECTION: forcing a failure. [ 495.803345][T14894] name failslab, interval 1, probability 0, space 0, times 0 [ 495.819135][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.6.2624 Not tainted syzkaller #0 PREEMPT(full) [ 495.819160][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.819170][T14894] Call Trace: [ 495.819176][T14894] [ 495.819184][T14894] dump_stack_lvl+0x189/0x250 [ 495.819211][T14894] ? __pfx____ratelimit+0x10/0x10 [ 495.819233][T14894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.819256][T14894] ? __pfx__printk+0x10/0x10 [ 495.819287][T14894] ? __pfx___might_resched+0x10/0x10 [ 495.819304][T14894] ? fs_reclaim_acquire+0x7d/0x100 [ 495.819334][T14894] should_fail_ex+0x414/0x560 [ 495.819363][T14894] should_failslab+0xa8/0x100 [ 495.819383][T14894] __kmalloc_noprof+0xcb/0x7f0 [ 495.819405][T14894] ? ip_options_get+0x51/0x4c0 [ 495.819430][T14894] ip_options_get+0x51/0x4c0 [ 495.819449][T14894] ? look_up_lock_class+0x74/0x170 [ 495.819474][T14894] ip_cmsg_send+0x591/0xa70 [ 495.819515][T14894] udp_sendmsg+0xbfb/0x2170 [ 495.819541][T14894] ? __lock_acquire+0xab9/0xd20 [ 495.819565][T14894] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 495.819587][T14894] ? __pfx_udp_sendmsg+0x10/0x10 [ 495.819642][T14894] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.819661][T14894] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 495.819681][T14894] ? do_raw_spin_unlock+0x122/0x240 [ 495.819704][T14894] ? inet_sendmsg+0x14f/0x370 [ 495.819733][T14894] ? inet_sendmsg+0x29c/0x370 [ 495.819760][T14894] __sock_sendmsg+0x19c/0x270 [ 495.819786][T14894] ____sys_sendmsg+0x52d/0x830 [ 495.819812][T14894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.819839][T14894] ? import_iovec+0x74/0xa0 [ 495.819864][T14894] ___sys_sendmsg+0x21f/0x2a0 [ 495.819882][T14894] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.819931][T14894] ? __fget_files+0x2a/0x420 [ 495.819947][T14894] ? __fget_files+0x3a0/0x420 [ 495.819971][T14894] __sys_sendmmsg+0x227/0x430 [ 495.819993][T14894] ? __pfx___sys_sendmmsg+0x10/0x10 [ 495.820018][T14894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.820057][T14894] ? ksys_write+0x22a/0x250 [ 495.820088][T14894] ? __pfx_ksys_write+0x10/0x10 [ 495.820123][T14894] __x64_sys_sendmmsg+0xa0/0xc0 [ 495.820142][T14894] do_syscall_64+0xfa/0xfa0 [ 495.820162][T14894] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.820182][T14894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.820198][T14894] ? clear_bhb_loop+0x60/0xb0 [ 495.820217][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.820233][T14894] RIP: 0033:0x7f935498efc9 [ 495.820250][T14894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.820264][T14894] RSP: 002b:00007f9355833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.820283][T14894] RAX: ffffffffffffffda RBX: 00007f9354be5fa0 RCX: 00007f935498efc9 [ 495.820296][T14894] RDX: 0000000000000001 RSI: 0000200000005e80 RDI: 0000000000000003 [ 495.820307][T14894] RBP: 00007f9355833090 R08: 0000000000000000 R09: 0000000000000000 [ 495.820317][T14894] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 495.820328][T14894] R13: 00007f9354be6038 R14: 00007f9354be5fa0 R15: 00007fff1cae9308 [ 495.820359][T14894] [ 496.210894][T14901] nft_compat: unsupported protocol 0 [ 496.252060][T14901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.522191][T14916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.618409][T14918] sctp: [Deprecated]: syz.2.2636 (pid 14918) Use of int in maxseg socket option. [ 496.618409][T14918] Use struct sctp_assoc_value instead [ 496.890683][T14927] SET target dimension over the limit! [ 496.904542][T14927] __nla_validate_parse: 1 callbacks suppressed [ 496.904560][T14927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2639'. [ 496.926876][T14929] FAULT_INJECTION: forcing a failure. [ 496.926876][T14929] name failslab, interval 1, probability 0, space 0, times 0 [ 496.940887][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.6.2640 Not tainted syzkaller #0 PREEMPT(full) [ 496.940911][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.940921][T14929] Call Trace: [ 496.940928][T14929] [ 496.940935][T14929] dump_stack_lvl+0x189/0x250 [ 496.940962][T14929] ? __pfx____ratelimit+0x10/0x10 [ 496.940982][T14929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.941005][T14929] ? __pfx__printk+0x10/0x10 [ 496.941036][T14929] should_fail_ex+0x414/0x560 [ 496.941066][T14929] should_failslab+0xa8/0x100 [ 496.941086][T14929] kmem_cache_alloc_noprof+0x74/0x6e0 [ 496.941110][T14929] ? dst_alloc+0x105/0x170 [ 496.941135][T14929] dst_alloc+0x105/0x170 [ 496.941158][T14929] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 496.941182][T14929] ? ip_route_output_key_hash_rcu+0x1341/0x23e0 [ 496.941210][T14929] ? ip_route_output_key_hash+0xc1/0x280 [ 496.941233][T14929] ip_route_output_key_hash+0x174/0x280 [ 496.941257][T14929] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 496.941285][T14929] ? ip_cmsg_send+0x9c3/0xa70 [ 496.941316][T14929] ip_route_output_flow+0x2a/0x150 [ 496.941333][T14929] ? security_sk_classify_flow+0x70/0x180 [ 496.941357][T14929] udp_sendmsg+0x142e/0x2170 [ 496.941395][T14929] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 496.941419][T14929] ? __pfx_udp_sendmsg+0x10/0x10 [ 496.941468][T14929] ? __local_bh_enable_ip+0x12d/0x1c0 [ 496.941488][T14929] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 496.941510][T14929] ? do_raw_spin_unlock+0x122/0x240 [ 496.941535][T14929] ? inet_sendmsg+0x14f/0x370 [ 496.941560][T14929] ? inet_sendmsg+0x29c/0x370 [ 496.941587][T14929] __sock_sendmsg+0x19c/0x270 [ 496.941612][T14929] ____sys_sendmsg+0x52d/0x830 [ 496.941643][T14929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.941671][T14929] ? import_iovec+0x74/0xa0 [ 496.941703][T14929] ___sys_sendmsg+0x21f/0x2a0 [ 496.941724][T14929] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.941782][T14929] ? __fget_files+0x2a/0x420 [ 496.941798][T14929] ? __fget_files+0x3a0/0x420 [ 496.941827][T14929] __sys_sendmmsg+0x227/0x430 [ 496.941851][T14929] ? __pfx___sys_sendmmsg+0x10/0x10 [ 496.941880][T14929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.941922][T14929] ? ksys_write+0x22a/0x250 [ 496.941948][T14929] ? __pfx_ksys_write+0x10/0x10 [ 496.941977][T14929] __x64_sys_sendmmsg+0xa0/0xc0 [ 496.941997][T14929] do_syscall_64+0xfa/0xfa0 [ 496.942018][T14929] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.942037][T14929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.942054][T14929] ? clear_bhb_loop+0x60/0xb0 [ 496.942077][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.942094][T14929] RIP: 0033:0x7f935498efc9 [ 496.942111][T14929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.942126][T14929] RSP: 002b:00007f9355833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 496.942146][T14929] RAX: ffffffffffffffda RBX: 00007f9354be5fa0 RCX: 00007f935498efc9 [ 496.942159][T14929] RDX: 0000000000000001 RSI: 0000200000005e80 RDI: 0000000000000003 [ 496.942171][T14929] RBP: 00007f9355833090 R08: 0000000000000000 R09: 0000000000000000 [ 496.942182][T14929] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 496.942193][T14929] R13: 00007f9354be6038 R14: 00007f9354be5fa0 R15: 00007fff1cae9308 [ 496.942225][T14929] [ 497.441665][T14918] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 497.513765][T14938] syzkaller0: entered promiscuous mode [ 497.519422][T14938] syzkaller0: entered allmulticast mode [ 497.542102][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2645'. [ 497.571776][T14941] block nbd1: Unsupported socket: should be TCP or UNIX. [ 498.404876][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 498.939550][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 500.050920][T15009] netlink: 'syz.3.2655': attribute type 11 has an invalid length. [ 500.608042][T15043] veth11: entered allmulticast mode [ 500.635115][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 500.785158][T15050] 8021q: adding VLAN 0 to HW filter on device bond20 [ 501.191868][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 501.395574][T15076] FAULT_INJECTION: forcing a failure. [ 501.395574][T15076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.418168][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.424782][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.435016][T15076] CPU: 1 UID: 0 PID: 15076 Comm: syz.3.2674 Not tainted syzkaller #0 PREEMPT(full) [ 501.435043][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.435054][T15076] Call Trace: [ 501.435062][T15076] [ 501.435070][T15076] dump_stack_lvl+0x189/0x250 [ 501.435098][T15076] ? __pfx____ratelimit+0x10/0x10 [ 501.435120][T15076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.435143][T15076] ? __pfx__printk+0x10/0x10 [ 501.435161][T15076] ? __might_fault+0xb0/0x130 [ 501.435197][T15076] should_fail_ex+0x414/0x560 [ 501.435226][T15076] _copy_from_user+0x2d/0xb0 [ 501.435248][T15076] ___sys_sendmsg+0x158/0x2a0 [ 501.435269][T15076] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.435323][T15076] ? __fget_files+0x2a/0x420 [ 501.435338][T15076] ? __fget_files+0x3a0/0x420 [ 501.435364][T15076] __x64_sys_sendmsg+0x19b/0x260 [ 501.435384][T15076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.435411][T15076] ? __pfx_ksys_write+0x10/0x10 [ 501.435437][T15076] ? do_syscall_64+0xbe/0xfa0 [ 501.435461][T15076] do_syscall_64+0xfa/0xfa0 [ 501.435480][T15076] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.435499][T15076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.435515][T15076] ? clear_bhb_loop+0x60/0xb0 [ 501.435537][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.435552][T15076] RIP: 0033:0x7fc91678efc9 [ 501.435568][T15076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.435583][T15076] RSP: 002b:00007fc9175fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.435603][T15076] RAX: ffffffffffffffda RBX: 00007fc9169e5fa0 RCX: 00007fc91678efc9 [ 501.435624][T15076] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 501.435635][T15076] RBP: 00007fc9175fb090 R08: 0000000000000000 R09: 0000000000000000 [ 501.435647][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.435657][T15076] R13: 00007fc9169e6038 R14: 00007fc9169e5fa0 R15: 00007fff9af8a498 [ 501.435689][T15076] [ 501.733634][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2677'. [ 501.834346][T15091] netlink: 'syz.2.2676': attribute type 13 has an invalid length. [ 502.142286][T15100] 8021q: adding VLAN 0 to HW filter on device bond16 [ 502.150297][T15105] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2676'. [ 502.169210][T15105] ip6tnl0: Caught tx_queue_len zero misconfig [ 502.350645][T15120] FAULT_INJECTION: forcing a failure. [ 502.350645][T15120] name failslab, interval 1, probability 0, space 0, times 0 [ 502.380841][T15120] CPU: 0 UID: 0 PID: 15120 Comm: syz.0.2689 Not tainted syzkaller #0 PREEMPT(full) [ 502.380866][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.380877][T15120] Call Trace: [ 502.380885][T15120] [ 502.380893][T15120] dump_stack_lvl+0x189/0x250 [ 502.380922][T15120] ? __pfx____ratelimit+0x10/0x10 [ 502.380942][T15120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.380965][T15120] ? __pfx__printk+0x10/0x10 [ 502.380992][T15120] should_fail_ex+0x414/0x560 [ 502.381022][T15120] should_failslab+0xa8/0x100 [ 502.381042][T15120] kmem_cache_alloc_noprof+0x74/0x6e0 [ 502.381065][T15120] ? dst_alloc+0x105/0x170 [ 502.381090][T15120] dst_alloc+0x105/0x170 [ 502.381113][T15120] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 502.381137][T15120] ? ip_route_output_key_hash_rcu+0x1341/0x23e0 [ 502.381164][T15120] ? ip_route_output_key_hash+0xc1/0x280 [ 502.381187][T15120] ip_route_output_key_hash+0x174/0x280 [ 502.381211][T15120] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 502.381250][T15120] tcp_v4_connect+0x710/0x1a90 [ 502.381296][T15120] ? __pfx_tcp_v4_connect+0x10/0x10 [ 502.381322][T15120] ? tcp_v6_connect+0x62f/0x18a0 [ 502.381348][T15120] tcp_v6_connect+0xab1/0x18a0 [ 502.381375][T15120] ? kasan_save_track+0x4f/0x80 [ 502.381397][T15120] ? kasan_save_track+0x3e/0x80 [ 502.381417][T15120] ? __kasan_kmalloc+0x93/0xb0 [ 502.381439][T15120] ? __pfx_tcp_v6_connect+0x10/0x10 [ 502.381456][T15120] ? tcp_sendmsg+0x2f/0x50 [ 502.381478][T15120] ? __x64_sys_sendto+0xde/0x100 [ 502.381499][T15120] ? do_syscall_64+0xfa/0xfa0 [ 502.381554][T15120] __inet_stream_connect+0x2ae/0xe70 [ 502.381592][T15120] ? __pfx___inet_stream_connect+0x10/0x10 [ 502.381618][T15120] ? __kasan_kmalloc+0x93/0xb0 [ 502.381644][T15120] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 502.381675][T15120] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 502.381707][T15120] tcp_sendmsg_locked+0x4cc9/0x5540 [ 502.381735][T15120] ? tcp_sendmsg_locked+0x371/0x5540 [ 502.381789][T15120] ? __lock_acquire+0xab9/0xd20 [ 502.381821][T15120] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 502.381841][T15120] ? __local_bh_enable_ip+0x12d/0x1c0 [ 502.381866][T15120] ? __local_bh_enable_ip+0x12d/0x1c0 [ 502.381899][T15120] tcp_sendmsg+0x2f/0x50 [ 502.381922][T15120] __sock_sendmsg+0xe5/0x270 [ 502.381946][T15120] __sys_sendto+0x3bd/0x520 [ 502.381971][T15120] ? __pfx___sys_sendto+0x10/0x10 [ 502.381991][T15120] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 502.382026][T15120] ? __fget_files+0x3a0/0x420 [ 502.382053][T15120] ? ksys_write+0x22a/0x250 [ 502.382078][T15120] ? __pfx_ksys_write+0x10/0x10 [ 502.382104][T15120] __x64_sys_sendto+0xde/0x100 [ 502.382147][T15120] do_syscall_64+0xfa/0xfa0 [ 502.382164][T15120] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.382182][T15120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.382200][T15120] ? clear_bhb_loop+0x60/0xb0 [ 502.382222][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.382239][T15120] RIP: 0033:0x7f45bcd8efc9 [ 502.382256][T15120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.382271][T15120] RSP: 002b:00007f45bdcda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.382291][T15120] RAX: ffffffffffffffda RBX: 00007f45bcfe5fa0 RCX: 00007f45bcd8efc9 [ 502.382305][T15120] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 502.382316][T15120] RBP: 00007f45bdcda090 R08: 0000200000b63fe4 R09: 000000000000001c [ 502.382327][T15120] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 502.382337][T15120] R13: 00007f45bcfe6038 R14: 00007f45bcfe5fa0 R15: 00007ffe379f4e58 [ 502.382370][T15120] [ 502.822219][T15124] : entered promiscuous mode [ 502.910992][T15128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2692'. [ 502.923736][T15132] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2694'. [ 503.105670][T15140] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2697'. [ 503.131218][T15136] 8021q: adding VLAN 0 to HW filter on device bond15 [ 503.155890][T15138] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2697'. [ 503.172176][T15140] gretap0: entered promiscuous mode [ 503.207246][T15138] 0{X功: renamed from gretap0 [ 503.218216][T15138] 0{X功: left promiscuous mode [ 503.225158][T15138] 0{X功: entered allmulticast mode [ 503.234209][T15138] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 503.360169][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2700'. [ 503.399998][T15154] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 503.427943][T15151] gtp0: entered promiscuous mode [ 503.432934][T15151] gtp0: entered allmulticast mode [ 503.932699][T15182] 8021q: adding VLAN 0 to HW filter on device bond17 [ 503.975793][T15190] netlink: 'syz.0.2711': attribute type 1 has an invalid length. [ 504.080583][T15190] 8021q: adding VLAN 0 to HW filter on device bond16 [ 504.115420][T15190] veth13: entered promiscuous mode [ 504.126224][T15190] bond16: (slave veth13): Enslaving as a backup interface with a down link [ 504.460341][T15218] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2719'. [ 504.462055][T15220] netlink: 'syz.0.2722': attribute type 1 has an invalid length. [ 504.480759][T15221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2722'. [ 504.500316][T15220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2722'. [ 504.547389][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'. [ 504.694882][T15218] batman_adv: batadv0: Interface deactivated: 0! [ 504.720928][T15218] wg2: left promiscuous mode [ 504.726012][T15218] wg2: left allmulticast mode [ 504.771666][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.785726][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.869533][T15218] bond3: left promiscuous mode [ 504.874321][T15218] wireguard0: left promiscuous mode [ 504.883410][T15218] veth9: left allmulticast mode [ 504.899444][T15218] bond9: left promiscuous mode [ 504.904335][T15218] bond9: left allmulticast mode [ 504.909369][T15218] gretap1: left allmulticast mode [ 504.916840][T15218] gretap1: left promiscuous mode [ 504.922970][T15218] veth11: left allmulticast mode [ 504.932915][T15218] bond10: left promiscuous mode [ 504.938129][T15218] macvlan3: left promiscuous mode [ 504.943528][T15218] bond0: left promiscuous mode [ 504.948490][T15218] bond_slave_0: left promiscuous mode [ 504.954051][T15218] bond_slave_1: left promiscuous mode [ 504.970985][T15218] bond12: left promiscuous mode [ 504.976045][T15218] bridge0: left promiscuous mode [ 505.039912][T15224] geneve2: entered promiscuous mode [ 505.046304][T15224] geneve2: entered allmulticast mode [ 505.054416][ T1071] syz1: Port: 1 Link DOWN [ 505.087732][T15229] 8021q: adding VLAN 0 to HW filter on device bond17 [ 505.137858][ T6462] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.167229][ T6462] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.198861][ T6462] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.211714][ T6462] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.296982][T15239] block nbd1: server does not support multiple connections per device. [ 505.336936][T15239] block nbd1: shutting down sockets [ 506.003565][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.016675][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.026108][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.042274][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.054525][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.269733][T15285] !: renamed from dummy0 (while UP) [ 506.541448][T15298] 8021q: adding VLAN 0 to HW filter on device bond18 [ 506.577872][T15302] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 506.662805][T15270] wg1 speed is unknown, defaulting to 1000 [ 506.992405][T15270] chnl_net:caif_netlink_parms(): no params data found [ 507.012592][T15321] netlink: 'syz.3.2752': attribute type 3 has an invalid length. [ 507.021400][T15323] netlink: 'syz.6.2753': attribute type 1 has an invalid length. [ 507.160240][T15323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.169340][T15324] tipc: Enabled bearer , priority 0 [ 507.216939][T15323] bond1: (slave veth0_to_bond): making interface the new active one [ 507.229570][T15323] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.280980][T15331] tipc: Disabling bearer [ 507.388155][T15346] netlink: 'syz.3.2757': attribute type 83 has an invalid length. [ 507.403031][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.440076][T15270] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.448114][T15270] bridge_slave_0: entered allmulticast mode [ 507.467355][T15270] bridge_slave_0: entered promiscuous mode [ 507.476412][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.483616][T15270] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.492070][T15270] bridge_slave_1: entered allmulticast mode [ 507.500517][T15270] bridge_slave_1: entered promiscuous mode [ 507.570987][T15270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.614483][T15270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.679784][T15270] team0: Port device team_slave_0 added [ 507.692846][T15270] team0: Port device team_slave_1 added [ 507.854944][T15270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.868063][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.895865][T15270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.911934][T15270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.919535][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.946261][T15270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.989384][T15371] batman_adv: batadv0: Adding interface: dummy0 [ 507.995732][T15371] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.029193][T15371] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 508.128087][ T5149] Bluetooth: hci4: command tx timeout [ 508.148326][T15270] hsr_slave_0: entered promiscuous mode [ 508.155599][T15270] hsr_slave_1: entered promiscuous mode [ 508.334123][T15270] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.347463][T15270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.431937][T15270] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.462271][T15270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.564494][T15270] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.580208][T15270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.654525][T15270] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.677379][T15270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.043495][T15270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.077092][T15270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.104312][T15270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.122375][T15270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.358537][T15421] geneve2: entered promiscuous mode [ 509.364007][T15421] geneve2: entered allmulticast mode [ 509.379548][T15270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.390561][ T6463] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 509.400096][ T6463] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 509.409351][ T6463] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 509.419829][ T6463] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 509.457982][T15421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.469346][T15421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 509.505752][T15270] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.521954][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.529218][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.570859][T15421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.582348][T15421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 509.599150][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.606318][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.669037][T15421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.680217][T15421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 509.709388][T15427] __nla_validate_parse: 8 callbacks suppressed [ 509.709405][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2782'. [ 509.833488][T15421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.846143][T15421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 509.976044][ T6462] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 509.986004][ T6462] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.010169][ T6462] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 510.026030][ T6462] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.031899][T15442] sctp: [Deprecated]: syz.3.2787 (pid 15442) Use of int in maxseg socket option. [ 510.031899][T15442] Use struct sctp_assoc_value instead [ 510.086241][T15270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.096515][ T6462] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 510.106991][ T6462] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.167251][ T6462] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 510.181568][ T6462] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.205505][ T5149] Bluetooth: hci4: command tx timeout [ 510.262487][T15270] veth0_vlan: entered promiscuous mode [ 510.284337][T15270] veth1_vlan: entered promiscuous mode [ 510.384288][T15450] 8021q: adding VLAN 0 to HW filter on device bond19 [ 510.403801][T15270] veth0_macvtap: entered promiscuous mode [ 510.417689][T15270] veth1_macvtap: entered promiscuous mode [ 510.500374][T15453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.554481][T15270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.583981][T15270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.618736][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.649586][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.668668][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.688230][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2797'. [ 510.697639][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.880451][T15477] nbd: must specify at least one socket [ 510.958050][T11340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.978206][T11340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.085950][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.093811][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.111835][T15489] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2804'. [ 511.138186][T15491] rdma_op ffff8880527d31f0 conn xmit_rdma 0000000000000000 [ 511.215773][T15498] FAULT_INJECTION: forcing a failure. [ 511.215773][T15498] name failslab, interval 1, probability 0, space 0, times 0 [ 511.228585][T15498] CPU: 0 UID: 0 PID: 15498 Comm: syz.2.2729 Not tainted syzkaller #0 PREEMPT(full) [ 511.228626][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.228649][T15498] Call Trace: [ 511.228663][T15498] [ 511.228673][T15498] dump_stack_lvl+0x189/0x250 [ 511.228701][T15498] ? __pfx____ratelimit+0x10/0x10 [ 511.228722][T15498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.228745][T15498] ? __pfx__printk+0x10/0x10 [ 511.228770][T15498] ? __pfx___might_resched+0x10/0x10 [ 511.228790][T15498] ? fs_reclaim_acquire+0x7d/0x100 [ 511.228820][T15498] should_fail_ex+0x414/0x560 [ 511.228851][T15498] should_failslab+0xa8/0x100 [ 511.228871][T15498] kmem_cache_alloc_node_noprof+0x77/0x710 [ 511.228894][T15498] ? __alloc_skb+0x112/0x2d0 [ 511.228926][T15498] ? ipv4_default_advmss+0x1e/0x1d0 [ 511.228954][T15498] __alloc_skb+0x112/0x2d0 [ 511.228982][T15498] tcp_stream_alloc_skb+0x3d/0x340 [ 511.229010][T15498] tcp_connect+0x14ce/0x4f10 [ 511.229069][T15498] ? __pfx_tcp_connect+0x10/0x10 [ 511.229091][T15498] ? get_random_u16+0x48e/0x940 [ 511.229117][T15498] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.229138][T15498] ? get_random_u16+0x154/0x940 [ 511.229161][T15498] ? get_random_u16+0x4df/0x940 [ 511.229193][T15498] ? __asan_memset+0x22/0x50 [ 511.229221][T15498] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 511.229247][T15498] ? sk_setup_caps+0x9ef/0xc40 [ 511.229266][T15498] ? sk_setup_caps+0x29/0xc40 [ 511.229285][T15498] tcp_v4_connect+0x11de/0x1a90 [ 511.229327][T15498] ? __pfx_tcp_v4_connect+0x10/0x10 [ 511.229352][T15498] ? tcp_v6_connect+0x62f/0x18a0 [ 511.229375][T15498] tcp_v6_connect+0xab1/0x18a0 [ 511.229401][T15498] ? kasan_save_track+0x4f/0x80 [ 511.229421][T15498] ? kasan_save_track+0x3e/0x80 [ 511.229441][T15498] ? __kasan_kmalloc+0x93/0xb0 [ 511.229464][T15498] ? __pfx_tcp_v6_connect+0x10/0x10 [ 511.229481][T15498] ? tcp_sendmsg+0x2f/0x50 [ 511.229502][T15498] ? __x64_sys_sendto+0xde/0x100 [ 511.229524][T15498] ? do_syscall_64+0xfa/0xfa0 [ 511.229574][T15498] __inet_stream_connect+0x2ae/0xe70 [ 511.229612][T15498] ? __pfx___inet_stream_connect+0x10/0x10 [ 511.229637][T15498] ? __kasan_kmalloc+0x93/0xb0 [ 511.229662][T15498] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 511.229694][T15498] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 511.229724][T15498] tcp_sendmsg_locked+0x4cc9/0x5540 [ 511.229752][T15498] ? tcp_sendmsg_locked+0x371/0x5540 [ 511.229805][T15498] ? __lock_acquire+0xab9/0xd20 [ 511.229835][T15498] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 511.229856][T15498] ? __local_bh_enable_ip+0x12d/0x1c0 [ 511.229879][T15498] ? __local_bh_enable_ip+0x12d/0x1c0 [ 511.229918][T15498] tcp_sendmsg+0x2f/0x50 [ 511.229942][T15498] __sock_sendmsg+0xe5/0x270 [ 511.229967][T15498] __sys_sendto+0x3bd/0x520 [ 511.229993][T15498] ? __pfx___sys_sendto+0x10/0x10 [ 511.230015][T15498] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 511.230051][T15498] ? __fget_files+0x3a0/0x420 [ 511.230081][T15498] ? ksys_write+0x22a/0x250 [ 511.230107][T15498] ? __pfx_ksys_write+0x10/0x10 [ 511.230135][T15498] __x64_sys_sendto+0xde/0x100 [ 511.230163][T15498] do_syscall_64+0xfa/0xfa0 [ 511.230182][T15498] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.230203][T15498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.230220][T15498] ? clear_bhb_loop+0x60/0xb0 [ 511.230243][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.230260][T15498] RIP: 0033:0x7f028a98efc9 [ 511.230277][T15498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.230292][T15498] RSP: 002b:00007f028b75a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 511.230312][T15498] RAX: ffffffffffffffda RBX: 00007f028abe5fa0 RCX: 00007f028a98efc9 [ 511.230325][T15498] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 511.230336][T15498] RBP: 00007f028b75a090 R08: 0000200000b63fe4 R09: 000000000000001c [ 511.230348][T15498] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 511.230359][T15498] R13: 00007f028abe6038 R14: 00007f028abe5fa0 R15: 00007ffe09d8dec8 [ 511.230390][T15498] [ 511.250651][T15493] 8021q: adding VLAN 0 to HW filter on device bond20 [ 511.735411][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 511.952645][T15523] tipc: Enabled bearer , priority 0 [ 511.966737][T15523] syzkaller0: entered promiscuous mode [ 511.972323][T15523] syzkaller0: entered allmulticast mode [ 512.037803][T15523] tipc: Resetting bearer [ 512.096855][T15523] tipc: Resetting bearer [ 512.101418][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2814'. [ 512.144545][T15523] tipc: Disabling bearer [ 512.240575][T15530] FAULT_INJECTION: forcing a failure. [ 512.240575][T15530] name failslab, interval 1, probability 0, space 0, times 0 [ 512.261765][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.3.2817 Not tainted syzkaller #0 PREEMPT(full) [ 512.261796][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.261807][T15530] Call Trace: [ 512.261815][T15530] [ 512.261823][T15530] dump_stack_lvl+0x189/0x250 [ 512.261852][T15530] ? __pfx____ratelimit+0x10/0x10 [ 512.261873][T15530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.261896][T15530] ? __pfx__printk+0x10/0x10 [ 512.261921][T15530] ? __pfx___might_resched+0x10/0x10 [ 512.261939][T15530] ? fs_reclaim_acquire+0x7d/0x100 [ 512.261970][T15530] should_fail_ex+0x414/0x560 [ 512.262000][T15530] should_failslab+0xa8/0x100 [ 512.262019][T15530] kmem_cache_alloc_node_noprof+0x77/0x710 [ 512.262043][T15530] ? __alloc_skb+0x112/0x2d0 [ 512.262065][T15530] ? ipv4_default_advmss+0x1e/0x1d0 [ 512.262093][T15530] __alloc_skb+0x112/0x2d0 [ 512.262121][T15530] tcp_stream_alloc_skb+0x3d/0x340 [ 512.262149][T15530] tcp_connect+0x14ce/0x4f10 [ 512.262208][T15530] ? __pfx_tcp_connect+0x10/0x10 [ 512.262229][T15530] ? get_random_u16+0x48e/0x940 [ 512.262253][T15530] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.262274][T15530] ? get_random_u16+0x154/0x940 [ 512.262297][T15530] ? get_random_u16+0x4df/0x940 [ 512.262328][T15530] ? __asan_memset+0x22/0x50 [ 512.262356][T15530] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 512.262382][T15530] ? sk_setup_caps+0x9ef/0xc40 [ 512.262402][T15530] ? sk_setup_caps+0x29/0xc40 [ 512.262422][T15530] tcp_v4_connect+0x11de/0x1a90 [ 512.262466][T15530] ? __pfx_tcp_v4_connect+0x10/0x10 [ 512.262493][T15530] ? tcp_v6_connect+0x62f/0x18a0 [ 512.262519][T15530] tcp_v6_connect+0xab1/0x18a0 [ 512.262548][T15530] ? kasan_save_track+0x4f/0x80 [ 512.262569][T15530] ? kasan_save_track+0x3e/0x80 [ 512.262590][T15530] ? __kasan_kmalloc+0x93/0xb0 [ 512.262613][T15530] ? __pfx_tcp_v6_connect+0x10/0x10 [ 512.262630][T15530] ? tcp_sendmsg+0x2f/0x50 [ 512.262652][T15530] ? __x64_sys_sendto+0xde/0x100 [ 512.262674][T15530] ? do_syscall_64+0xfa/0xfa0 [ 512.262724][T15530] __inet_stream_connect+0x2ae/0xe70 [ 512.262760][T15530] ? __pfx___inet_stream_connect+0x10/0x10 [ 512.262792][T15530] ? __kasan_kmalloc+0x93/0xb0 [ 512.262815][T15530] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 512.262847][T15530] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 512.262876][T15530] tcp_sendmsg_locked+0x4cc9/0x5540 [ 512.262902][T15530] ? tcp_sendmsg_locked+0x371/0x5540 [ 512.262952][T15530] ? __lock_acquire+0xab9/0xd20 [ 512.262981][T15530] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 512.263001][T15530] ? __local_bh_enable_ip+0x12d/0x1c0 [ 512.263025][T15530] ? __local_bh_enable_ip+0x12d/0x1c0 [ 512.263058][T15530] tcp_sendmsg+0x2f/0x50 [ 512.263081][T15530] __sock_sendmsg+0xe5/0x270 [ 512.263105][T15530] __sys_sendto+0x3bd/0x520 [ 512.263132][T15530] ? __pfx___sys_sendto+0x10/0x10 [ 512.263153][T15530] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 512.263188][T15530] ? __fget_files+0x3a0/0x420 [ 512.263216][T15530] ? ksys_write+0x22a/0x250 [ 512.263241][T15530] ? __pfx_ksys_write+0x10/0x10 [ 512.263268][T15530] __x64_sys_sendto+0xde/0x100 [ 512.263295][T15530] do_syscall_64+0xfa/0xfa0 [ 512.263314][T15530] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.263335][T15530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.263353][T15530] ? clear_bhb_loop+0x60/0xb0 [ 512.263374][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.263389][T15530] RIP: 0033:0x7fc91678efc9 [ 512.263405][T15530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.263421][T15530] RSP: 002b:00007fc9175fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 512.263441][T15530] RAX: ffffffffffffffda RBX: 00007fc9169e5fa0 RCX: 00007fc91678efc9 [ 512.263454][T15530] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 512.263464][T15530] RBP: 00007fc9175fb090 R08: 0000200000b63fe4 R09: 000000000000001c [ 512.263476][T15530] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 512.263487][T15530] R13: 00007fc9169e6038 R14: 00007fc9169e5fa0 R15: 00007fff9af8a498 [ 512.263519][T15530] [ 512.692139][ T53] Bluetooth: hci4: command tx timeout [ 512.698057][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 513.023338][T15549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.213640][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 514.017922][T15581] netlink: 'syz.0.2833': attribute type 4 has an invalid length. [ 514.253246][T15587] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2836'. [ 514.280846][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2836'. [ 514.306234][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2836'. [ 514.580287][ T13] smc: removing ib device syz1 [ 514.646840][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.660794][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.672522][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.681027][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.690488][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.767025][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 514.773598][ T5842] Bluetooth: hci4: command 0x0419 tx timeout [ 514.945530][T15594] wg1 speed is unknown, defaulting to 1000 [ 515.321786][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 515.337271][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 515.345766][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 515.355406][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 515.366238][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 515.415814][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 515.832598][T15603] wg1 speed is unknown, defaulting to 1000 [ 516.211111][T15632] tipc: Started in network mode [ 516.237355][T15632] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 516.265326][T15632] tipc: Enabled bearer , priority 2 [ 516.275100][T15594] chnl_net:caif_netlink_parms(): no params data found [ 516.765783][ T53] Bluetooth: hci1: command tx timeout [ 516.819514][T15654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2852'. [ 516.845964][ T53] Bluetooth: hci4: command 0x0419 tx timeout [ 517.053340][T15658] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 517.086629][T15656] batman_adv: batadv0: Adding interface: dummy0 [ 517.101738][T15656] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.141123][T15660] netlink: 'syz.0.2854': attribute type 8 has an invalid length. [ 517.178484][T15656] batman_adv: batadv0: Interface activated: dummy0 [ 517.384820][T15511] tipc: Node number set to 10463914 [ 517.433063][T15594] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.450023][T15594] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.465279][T15594] bridge_slave_0: entered allmulticast mode [ 517.485204][ T53] Bluetooth: hci7: command tx timeout [ 517.499160][T15594] bridge_slave_0: entered promiscuous mode [ 517.509977][T15664] !: renamed from dummy0 [ 517.594016][T15670] raw_sendmsg: syz.2.2858 forgot to set AF_INET. Fix it! [ 517.723421][T15594] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.744806][T15594] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.752321][T15594] bridge_slave_1: entered allmulticast mode [ 517.761218][T15594] bridge_slave_1: entered promiscuous mode [ 517.915236][T15681] netlink: 'syz.2.2862': attribute type 83 has an invalid length. [ 517.923361][T15594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.958838][T15594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.993958][T15683] netlink: 'syz.6.2860': attribute type 14 has an invalid length. [ 518.041057][T15679] sctp: [Deprecated]: syz.6.2860 (pid 15679) Use of int in maxseg socket option. [ 518.041057][T15679] Use struct sctp_assoc_value instead [ 518.129741][T15603] chnl_net:caif_netlink_parms(): no params data found [ 518.206268][T15693] !: renamed from dummy0 (while UP) [ 518.220924][T15594] team0: Port device team_slave_0 added [ 518.279661][T15594] team0: Port device team_slave_1 added [ 518.373136][T15594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.390564][T15594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.418606][T15594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.449393][T15594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.458053][T15594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.464830][T15710] xt_TCPMSS: Only works on TCP SYN packets [ 518.485546][T15594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.531568][T15603] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.538967][T15603] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.546462][T15603] bridge_slave_0: entered allmulticast mode [ 518.554584][T15603] bridge_slave_0: entered promiscuous mode [ 518.576676][T15603] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.583946][T15603] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.591826][T15603] bridge_slave_1: entered allmulticast mode [ 518.601459][T15603] bridge_slave_1: entered promiscuous mode [ 518.729345][T15594] hsr_slave_0: entered promiscuous mode [ 518.739884][T15594] hsr_slave_1: entered promiscuous mode [ 518.748311][T15594] debugfs: 'hsr0' already exists in 'hsr' [ 518.754153][T15594] Cannot create hsr debugfs directory [ 518.761545][T15716] tipc: Enabled bearer , priority 0 [ 518.773863][T15603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.783505][T15713] syzkaller0: entered promiscuous mode [ 518.789609][T15713] syzkaller0: entered allmulticast mode [ 518.817533][T15603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.855069][ T53] Bluetooth: hci1: command tx timeout [ 518.858681][T15724] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2875'. [ 518.893237][T15713] tipc: Resetting bearer [ 518.957428][T15603] team0: Port device team_slave_0 added [ 518.979914][T15603] team0: Port device team_slave_1 added [ 519.102494][T15603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.110895][T15603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.137951][T15603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.182390][T15603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.189553][T15603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.216872][T15603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.322572][T15708] tipc: Resetting bearer [ 519.354288][T15708] tipc: Disabling bearer [ 519.440990][T15603] hsr_slave_0: entered promiscuous mode [ 519.476228][T15603] hsr_slave_1: entered promiscuous mode [ 519.483624][T15603] debugfs: 'hsr0' already exists in 'hsr' [ 519.514997][T15603] Cannot create hsr debugfs directory [ 519.569223][T15594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.575120][ T53] Bluetooth: hci7: command tx timeout [ 519.688561][T15594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.849871][T15594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.011643][T15594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.095874][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 520.164354][T15774] netlink: 'syz.6.2888': attribute type 1 has an invalid length. [ 520.171382][T15769] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2886'. [ 520.182791][T15769] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2886'. [ 520.196338][T15769] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2886'. [ 520.238134][T15774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.282839][T15778] bond3: (slave geneve3): making interface the new active one [ 520.295371][T15778] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 520.313344][T11340] netdevsim netdevsim6 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 520.333347][T11340] netdevsim netdevsim6 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 520.363042][T11340] netdevsim netdevsim6 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 520.380626][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 520.399184][T15769] netlink: 'syz.0.2886': attribute type 3 has an invalid length. [ 520.454502][T11340] netdevsim netdevsim6 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 520.574459][T15787] tipc: Started in network mode [ 520.579701][T15787] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 520.590568][T15787] tipc: Enabled bearer , priority 10 [ 520.646026][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2890'. [ 520.684578][T15594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.701631][T15594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.732684][T15594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.775317][T15594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 520.884021][T15603] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 520.906552][T15603] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 520.925069][ T53] Bluetooth: hci1: command tx timeout [ 520.948038][T15603] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 520.980127][T15603] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 520.998974][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 521.113540][T15780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.125379][T15780] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 521.157249][T15594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.170672][T15780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.189548][T15780] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 521.206838][T15594] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.249797][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.257039][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.277697][T15780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 521.301336][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.305856][T15780] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 521.308523][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.327098][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 521.361584][T15603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.374941][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2894'. [ 521.460757][T15603] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.606205][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.613375][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.644936][ T53] Bluetooth: hci7: command tx timeout [ 521.711760][ T5962] tipc: Node number set to 4269801492 [ 521.757237][T15594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.784869][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.792021][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.802100][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2897'. [ 521.962076][T15780] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 521.990208][T15780] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 522.324365][ T6462] bond9 (unregistering): (slave gretap1): Releasing active interface [ 522.393740][ T6462] dvmrp1 (unregistering): left allmulticast mode [ 522.545353][ T6462] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 522.740655][ T6462] bond10 (unregistering): (slave macvlan3): Releasing active interface [ 522.760000][ T6462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.771526][ T6462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.783054][ T6462] bond0 (unregistering): Released all slaves [ 522.926538][ T6462] bond1 (unregistering): Released all slaves [ 522.944457][ T6462] bond2 (unregistering): Released all slaves [ 523.007459][ T53] Bluetooth: hci1: command tx timeout [ 523.111704][ T6462] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 523.123134][ T6462] bond3 (unregistering): Released all slaves [ 523.266609][ T6462] bond4 (unregistering): Released all slaves [ 523.362983][ T6462] bond5 (unregistering): Released all slaves [ 523.463052][ T6462] bond6 (unregistering): Released all slaves [ 523.563767][ T6462] bond7 (unregistering): Released all slaves [ 523.581316][ T6462] bond8 (unregistering): Released all slaves [ 523.679270][ T6462] bond9 (unregistering): Released all slaves [ 523.692184][ T6462] bond10 (unregistering): Released all slaves [ 523.704975][ T6462] bond11 (unregistering): Released all slaves [ 523.736826][ T53] Bluetooth: hci7: command tx timeout [ 523.819929][ T6462] bond12 (unregistering): Released all slaves [ 523.918176][ T6462] bond13 (unregistering): Released all slaves [ 524.015248][ T6462] bond14 (unregistering): Released all slaves [ 524.028131][ T6462] bond15 (unregistering): Released all slaves [ 524.124390][ T6462] bond16 (unregistering): Released all slaves [ 524.231414][ T6462] bond17 (unregistering): Released all slaves [ 524.347154][ T6462] bond18 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 524.358374][ T6462] bond18 (unregistering): Released all slaves [ 524.462347][ T6462] bond19 (unregistering): Released all slaves [ 524.560807][ T6462] bond20 (unregistering): Released all slaves [ 524.840489][T15780] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 524.859380][ T6462] : left promiscuous mode [ 524.872883][T15780] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 525.021640][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 525.172622][ T6462] tipc: Left network mode [ 525.238663][T15780] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 525.247676][T15780] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 525.453701][T15780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 525.478070][T15594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.486903][T15780] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 525.570664][T15780] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 525.586654][T15780] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 525.640128][T15594] veth0_vlan: entered promiscuous mode [ 525.747158][T15927] netlink: 'syz.0.2905': attribute type 12 has an invalid length. [ 525.762191][T15927] netlink: 'syz.0.2905': attribute type 29 has an invalid length. [ 525.778052][T15927] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2905'. [ 525.788074][T15927] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2905'. [ 525.918834][T15594] veth1_vlan: entered promiscuous mode [ 526.122171][T15945] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2910'. [ 526.142929][T15943] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 526.245126][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.286252][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.305873][ T6462] batman_adv: batadv0: Removing interface: 0! [ 526.506628][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 527.011384][ T6462] team0 (unregistering): Port device team_slave_1 removed [ 527.066744][ T6462] team0 (unregistering): Port device team_slave_0 removed [ 527.577711][T15594] veth0_macvtap: entered promiscuous mode [ 527.621547][T15603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.659886][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2914'. [ 527.694888][T15594] veth1_macvtap: entered promiscuous mode [ 527.728422][T15993] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2914'. [ 527.774391][T15594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.807600][T16000] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 527.880709][T15594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.978979][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.012728][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.047788][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.063016][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.123341][T16013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2918'. [ 528.180912][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 528.473544][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.525607][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.636930][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.662324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.704297][T16040] hsr0 speed is unknown, defaulting to 1000 [ 528.745602][T16040] hsr0 speed is unknown, defaulting to 1000 [ 528.759406][T16040] hsr0 speed is unknown, defaulting to 1000 [ 528.820580][T16040] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 528.823430][T15603] veth0_vlan: entered promiscuous mode [ 528.888446][T15603] veth1_vlan: entered promiscuous mode [ 528.946614][T16040] hsr0 speed is unknown, defaulting to 1000 [ 528.960572][T16040] hsr0 speed is unknown, defaulting to 1000 [ 528.982851][T16040] hsr0 speed is unknown, defaulting to 1000 [ 528.998627][T16040] hsr0 speed is unknown, defaulting to 1000 [ 529.005511][T15603] veth0_macvtap: entered promiscuous mode [ 529.021020][T16040] hsr0 speed is unknown, defaulting to 1000 [ 529.024418][T15603] veth1_macvtap: entered promiscuous mode [ 529.058214][T16040] hsr0 speed is unknown, defaulting to 1000 [ 529.089220][T15603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.112764][T16040] hsr0 speed is unknown, defaulting to 1000 [ 529.125242][T15603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.150207][T16040] hsr0 speed is unknown, defaulting to 1000 [ 529.200041][T16068] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 529.209183][T16068] bond1: option packets_per_slave: allowed values 0 - 65535 [ 529.221104][T16068] bond1 (unregistering): Released all slaves [ 529.258876][T16040] hsr0 speed is unknown, defaulting to 1000 [ 529.271693][T16067] tipc: Enabled bearer , priority 0 [ 529.298045][T16067] syzkaller0: entered promiscuous mode [ 529.312978][T16067] syzkaller0: entered allmulticast mode [ 529.349501][T11340] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.402066][T16067] tipc: Resetting bearer [ 529.430065][T11340] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.442796][T16078] !: renamed from dummy0 (while UP) [ 529.467360][T16066] tipc: Resetting bearer [ 529.527890][T16066] tipc: Disabling bearer [ 529.595407][T11340] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.604228][T11340] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.843159][T11340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.874843][T11340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.964089][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.983221][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 529.992358][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 530.000267][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.150286][T16108] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 530.168161][T16108] bond1: option packets_per_slave: allowed values 0 - 65535 [ 530.185078][T16108] bond1 (unregistering): Released all slaves [ 530.270002][T16114] netlink: 'syz.2.2939': attribute type 2 has an invalid length. [ 530.502679][T16131] netlink: 'syz.7.2837': attribute type 1 has an invalid length. [ 530.546994][T16131] netlink: 'syz.7.2837': attribute type 2 has an invalid length. [ 530.872769][T16149] __nla_validate_parse: 1 callbacks suppressed [ 530.872788][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 530.873042][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2944'. [ 531.171134][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'. [ 531.205453][T16155] netlink: 'syz.7.2947': attribute type 1 has an invalid length. [ 531.725556][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.743566][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.771190][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.795319][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.806639][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.914758][T16191] netlink: 'syz.3.2956': attribute type 5 has an invalid length. [ 531.922530][T16191] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2956'. [ 532.011824][T16198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2957'. [ 532.058926][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2958'. [ 532.098716][T16199] vxcan2: entered allmulticast mode [ 532.154780][T16180] wg1 speed is unknown, defaulting to 1000 [ 532.164398][T16180] hsr0 speed is unknown, defaulting to 1000 [ 532.379022][T16213] tipc: Enabling of bearer rejected, failed to enable media [ 532.695328][T16180] chnl_net:caif_netlink_parms(): no params data found [ 532.819983][T16230] netlink: 'syz.7.2966': attribute type 1 has an invalid length. [ 533.025541][T16180] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.050709][T16180] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.058439][T16180] bridge_slave_0: entered allmulticast mode [ 533.073051][T16180] bridge_slave_0: entered promiscuous mode [ 533.093183][T16180] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.118024][T16180] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.137796][T16180] bridge_slave_1: entered allmulticast mode [ 533.155929][T16180] bridge_slave_1: entered promiscuous mode [ 533.223788][T16254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2970'. [ 533.315868][T16259] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2971'. [ 533.455784][T16180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.497937][T16180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.834592][T16273] !: renamed from dummy0 (while UP) [ 533.852668][T16284] tipc: Enabling not permitted [ 533.858539][T16284] tipc: Enabling of bearer rejected, failed to enable media [ 533.889266][ T5149] Bluetooth: hci0: command tx timeout [ 533.901753][T16180] team0: Port device team_slave_0 added [ 533.925588][T16180] team0: Port device team_slave_1 added [ 534.084581][T16180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.097859][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.142720][T16180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.192643][T16180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.242263][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.296722][T16180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.374317][T16315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2982'. [ 534.503424][T16180] hsr_slave_0: entered promiscuous mode [ 534.531564][T16180] hsr_slave_1: entered promiscuous mode [ 534.549777][T16180] debugfs: 'hsr0' already exists in 'hsr' [ 534.564765][T16180] Cannot create hsr debugfs directory [ 534.580337][T16325] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2986'. [ 534.738137][T16338] --map-set only usable from mangle table [ 535.051325][T16180] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.170238][T16180] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.254110][T16180] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.354024][T16180] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.448059][T16368] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 535.725639][T16372] macvlan2: entered promiscuous mode [ 535.742439][T16372] macvlan2: entered allmulticast mode [ 535.968890][ T5149] Bluetooth: hci0: command tx timeout [ 536.022339][T16180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 536.079256][T16180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 536.114315][T16180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 536.145584][T16180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 536.362362][T16416] __nla_validate_parse: 3 callbacks suppressed [ 536.362380][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3004'. [ 536.424588][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3004'. [ 536.511451][T16180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.529772][T16427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3006'. [ 536.604555][T16180] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.638146][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.645484][T11340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.699310][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.706546][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.822157][T16180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.956068][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'. [ 536.979148][T16456] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3011'. [ 537.360415][T16180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.379739][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 537.403136][T16470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.478623][T16470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.603305][T16180] veth0_vlan: entered promiscuous mode [ 537.655799][T16180] veth1_vlan: entered promiscuous mode [ 537.748773][T16180] veth0_macvtap: entered promiscuous mode [ 537.759802][T16180] veth1_macvtap: entered promiscuous mode [ 537.824278][T16481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3019'. [ 537.855885][T16180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.896253][T16180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.936179][ T6462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.975312][ T6462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.984066][ T6462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.035330][ T6462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.045859][ T53] Bluetooth: hci0: command tx timeout [ 538.148191][T16492] syzkaller1: entered promiscuous mode [ 538.150580][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3018'. [ 538.153695][T16492] syzkaller1: entered allmulticast mode [ 538.157606][T16496] tipc: Started in network mode [ 538.177631][T16496] tipc: Node identity 0e21008a02bc, cluster identity 4711 [ 538.185528][T16496] tipc: Enabled bearer , priority 0 [ 538.205172][ T6457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.213038][ T6457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.278163][T16496] syzkaller0: entered promiscuous mode [ 538.283662][T16496] syzkaller0: entered allmulticast mode [ 538.361020][T16509] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3025'. [ 538.518022][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.525955][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.579700][T16502] batman_adv: batadv0: Interface deactivated: 0! [ 538.826835][T16502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.082343][T16502] tipc: Resetting bearer [ 539.236499][T16510] tipc: Resetting bearer [ 539.262961][T16509] geneve2: entered promiscuous mode [ 539.269603][T16509] geneve2: entered allmulticast mode [ 539.294016][T16495] tipc: Resetting bearer [ 539.317974][T16495] tipc: Disabling bearer [ 539.332866][ T24] hsr0 speed is unknown, defaulting to 1000 [ 539.343864][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.361735][ T24] syz1: Port: 1 Link DOWN [ 539.366986][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.577454][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 539.641783][T16539] syzkaller0: entered promiscuous mode [ 539.647902][T16539] syzkaller0: entered allmulticast mode [ 539.676503][T16555] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 539.778713][ T53] block nbd1: Receive control failed (result -107) [ 540.001183][T16577] netlink: 'syz.0.3040': attribute type 8 has an invalid length. [ 540.127933][ T53] Bluetooth: hci0: command tx timeout [ 541.215346][T16611] netlink: 'syz.7.3051': attribute type 1 has an invalid length. [ 542.092746][T16600] netlink: 'syz.3.3048': attribute type 29 has an invalid length. [ 542.423881][T16632] __nla_validate_parse: 7 callbacks suppressed [ 542.423899][T16632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3056'. [ 542.569059][T16641] netlink: 'syz.0.3060': attribute type 3 has an invalid length. [ 542.671847][T16649] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 542.679808][T16649] netlink: 'syz.3.3064': attribute type 2 has an invalid length. [ 542.712646][T16650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3063'. [ 542.734214][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 542.752397][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'. [ 542.763316][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'. [ 542.774330][T16652] netlink: 'syz.3.3065': attribute type 4 has an invalid length. [ 543.151740][T16666] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 543.413309][T16681] openvswitch: netlink: Message has 1 unknown bytes. [ 543.430768][T16681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.552359][T16693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3076'. [ 544.041964][T16705] xt_TCPMSS: Only works on TCP SYN packets [ 544.105858][T16705] C: renamed from team_slave_0 (while UP) [ 544.123730][T16705] netlink: 'syz.6.3081': attribute type 1 has an invalid length. [ 544.132188][T16705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.240278][T16713] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3084'. [ 544.593178][T16734] Bluetooth: MGMT ver 1.23 [ 544.687162][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3092'. [ 544.893596][T16744] ip6t_REJECT: ECHOREPLY is not supported [ 545.319427][T16778] SET target dimension over the limit! [ 545.700408][T16786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.986448][T16804] netlink: 'syz.6.3111': attribute type 1 has an invalid length. [ 546.095770][T16804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 546.139988][T16810] netlink: 'syz.2.3114': attribute type 2 has an invalid length. [ 546.177455][T16800] vlan2: entered promiscuous mode [ 546.178778][T16810] xt_bpf: check failed: parse error [ 546.182537][T16800] bond5: entered promiscuous mode [ 546.211035][T16813] Cannot find del_set index 0 as target [ 546.221637][T16800] vlan2: entered allmulticast mode [ 546.229723][T16800] bond5: entered allmulticast mode [ 546.229979][T16815] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3115'. [ 546.268774][T16804] bond_slave_0: entered promiscuous mode [ 546.274531][T16804] bond_slave_1: entered promiscuous mode [ 546.297033][T16804] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 546.328413][T16804] bond5: (slave macvlan5): making interface the new active one [ 546.336386][T16804] macvlan5: entered promiscuous mode [ 546.343507][T16804] bond0: entered promiscuous mode [ 546.349893][T16804] macvlan5: entered allmulticast mode [ 546.355662][T16804] bond0: entered allmulticast mode [ 546.361009][T16804] bond_slave_0: entered allmulticast mode [ 546.367555][T16804] bond_slave_1: entered allmulticast mode [ 546.375271][T16804] bond5: (slave macvlan5): Enslaving as an active interface with an up link [ 546.393949][T16810] macvtap1: entered allmulticast mode [ 546.400629][T16810] veth0_macvtap: entered allmulticast mode [ 546.411319][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3118'. [ 546.430065][T16815] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 546.615475][T16833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.950357][T16519] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 546.991784][T16519] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 547.177511][T16871] netlink: 'syz.3.3134': attribute type 39 has an invalid length. [ 547.758972][T16876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.893620][T16888] __nla_validate_parse: 4 callbacks suppressed [ 547.893636][T16888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3141'. [ 547.912390][T16888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3141'. [ 548.037220][T16899] netem: change failed [ 548.047121][T16899] syzkaller0: entered promiscuous mode [ 548.074778][T16899] syzkaller0: entered allmulticast mode [ 548.096315][T16899] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3145'. [ 548.158314][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3144'. [ 548.451239][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'. [ 548.736948][T16944] netlink: 'syz.3.3161': attribute type 4 has an invalid length. [ 548.745340][T16945] geneve3: entered promiscuous mode [ 548.745365][T16945] geneve3: entered allmulticast mode [ 548.771961][ T6463] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 548.787192][ T6463] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 548.805735][T16947] netlink: 'syz.3.3161': attribute type 4 has an invalid length. [ 548.811592][ T6463] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 548.826896][ T6463] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 548.840023][T16948] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 548.848296][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'. [ 548.996064][T16944] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.003812][T16944] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.047512][T16962] SET target dimension over the limit! [ 549.121471][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'. [ 549.177834][T16944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.192500][T16944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.377663][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'. [ 549.383342][T16969] tipc: Started in network mode [ 549.403373][T16969] tipc: Node identity 9234d452174, cluster identity 4711 [ 549.436027][T16969] tipc: Enabled bearer , priority 0 [ 549.443571][T16970] syzkaller0: entered promiscuous mode [ 549.458690][T16970] syzkaller0: entered allmulticast mode [ 549.466574][ T6466] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.476012][ T6466] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.489661][ T6466] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.499057][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'. [ 549.511112][T16959] tipc: Resetting bearer [ 549.529180][ T6466] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.538947][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3169'. [ 549.539069][T16952] tipc: Resetting bearer [ 549.569985][T16952] tipc: Disabling bearer [ 549.698505][T16985] syzkaller1: entered promiscuous mode [ 549.713888][T16985] syzkaller1: entered allmulticast mode [ 549.724257][T16985] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 549.738268][T16985] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 550.490315][T17009] wg1 speed is unknown, defaulting to 1000 [ 550.498859][T17009] hsr0 speed is unknown, defaulting to 1000 [ 550.728104][T17024] netlink: 'syz.7.3186': attribute type 10 has an invalid length. [ 550.745430][T17024] team0: Port device geneve0 added [ 551.035868][T17029] hsr_slave_1 (unregistering): left promiscuous mode [ 551.573764][T17063] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.713402][T17072] SET target dimension over the limit! [ 551.971091][T17083] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 551.982706][T17083] bond7 (unregistering): Released all slaves [ 552.409855][T17098] syzkaller0: entered promiscuous mode [ 552.429583][T17098] syzkaller0: entered allmulticast mode [ 552.509726][T17099] syzkaller0: entered promiscuous mode [ 552.519867][T17099] syzkaller0: entered allmulticast mode [ 553.677543][T17125] __nla_validate_parse: 37 callbacks suppressed [ 553.677560][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3218'. [ 554.516627][T17131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.597614][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3220'. [ 554.623917][T17137] IPVS: set_ctl: invalid protocol: 20 255.255.255.255:20001 [ 554.833463][T17155] openvswitch: netlink: EtherType 53b is less than min 600 [ 555.034787][T17168] netlink: 'syz.0.3235': attribute type 4 has an invalid length. [ 555.183149][T17177] tipc: Started in network mode [ 555.188468][T17177] tipc: Node identity de5c79b0bbdd, cluster identity 4711 [ 555.195933][T17177] tipc: Enabled bearer , priority 0 [ 555.204022][T17177] syzkaller0: entered allmulticast mode [ 555.216553][T17177] tipc: Resetting bearer [ 555.224982][T17176] tipc: Disabling bearer [ 555.403414][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3239'. [ 555.490653][T17190] netlink: 'syz.0.3241': attribute type 3 has an invalid length. [ 555.591838][T17195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.699222][T17197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.709903][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3245'. [ 555.721585][T17205] tipc: Enabling of bearer rejected, failed to enable media [ 555.767143][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 555.830521][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 555.866258][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 555.924193][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 555.985886][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 555.996986][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'. [ 556.127701][T17229] netlink: 'syz.6.3251': attribute type 10 has an invalid length. [ 556.188210][T17229] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.200323][T17229] team0: entered promiscuous mode [ 556.207593][T17229] C: entered promiscuous mode [ 556.212685][T17229] team_slave_1: entered promiscuous mode [ 556.219300][T17229] team0: entered allmulticast mode [ 556.224692][T17229] C: entered allmulticast mode [ 556.234020][T17229] team_slave_1: entered allmulticast mode [ 556.246460][T17229] bond0: (slave team0): Enslaving as an active interface with an up link [ 556.254384][T16519] IPVS: starting estimator thread 0... [ 556.261883][T17235] tipc: Enabling of bearer rejected, failed to enable media [ 556.344978][T17238] IPVS: using max 32 ests per chain, 76800 per kthread [ 556.627491][T17260] gretap0: entered promiscuous mode [ 556.634320][T17260] 0{X功: renamed from gretap0 [ 556.642687][T17260] 0{X功: left promiscuous mode [ 556.650129][T17260] 0{X功: entered allmulticast mode [ 556.659756][T17260] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 556.838324][T17270] syzkaller0: entered promiscuous mode [ 556.843847][T17270] syzkaller0: entered allmulticast mode [ 557.189684][T17287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.240856][T17290] hsr_slave_1 (unregistering): left promiscuous mode [ 557.303596][T17298] tipc: Enabled bearer , priority 0 [ 557.377342][T17298] tipc: Disabling bearer [ 557.402562][T17307] netlink: 'syz.3.3280': attribute type 10 has an invalid length. [ 557.559740][T17316] xt_socket: unknown flags 0x50 [ 557.752241][T17328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.313728][T17366] Bluetooth: MGMT ver 1.23 [ 558.715407][T17393] Unsupported ieee802154 address type: 0 [ 558.814341][T17399] __nla_validate_parse: 13 callbacks suppressed [ 558.814359][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3313'. [ 558.833699][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3313'. [ 558.844321][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 558.862016][T17400] netlink: zone id is out of range [ 558.879797][T11340] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.895617][T11340] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.917170][T11340] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.960893][T17405] batman_adv: batadv0: Adding interface: dummy0 [ 558.995573][T17405] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.064026][T17405] batman_adv: batadv0: Interface activated: dummy0 [ 559.101177][T11340] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.150742][T17416] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3318'. [ 559.178012][T17416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3318'. [ 559.286926][T17429] IPVS: set_ctl: invalid protocol: 14 172.30.0.1:20000 [ 559.554293][T17446] 8021q: VLANs not supported on ip_vti0 [ 559.570425][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3326'. [ 559.613681][T17447] netlink: 'syz.6.3326': attribute type 8 has an invalid length. [ 559.755487][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'. [ 559.781040][T17451] gtp0: entered promiscuous mode [ 559.787157][T17451] gtp0: entered allmulticast mode [ 560.063402][T17468] netlink: 'syz.3.3332': attribute type 2 has an invalid length. [ 560.138036][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3332'. [ 560.359538][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3339'. [ 560.434318][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3339'. [ 560.667394][T17511] netlink: 'syz.2.3346': attribute type 2 has an invalid length. [ 560.707347][T17511] netlink: 'syz.2.3346': attribute type 26 has an invalid length. [ 560.726166][T17511] netlink: 'syz.2.3346': attribute type 26 has an invalid length. [ 560.794432][T17519] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 560.808911][T17519] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 561.194519][T17545] Cannot find add_set index 2 as target [ 561.470450][T17563] Cannot find add_set index 2 as target [ 561.640239][T17576] netlink: 'syz.0.3370': attribute type 9 has an invalid length. [ 562.149397][T17615] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 562.298211][T17627] openvswitch: netlink: Message has 536 unknown bytes. [ 562.313623][T17626] openvswitch: netlink: Message has 536 unknown bytes. [ 562.321317][T17627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.330895][T17626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.349644][T17621] can: request_module (can-proto-5) failed. [ 562.505986][T17640] netlink: zone id is out of range [ 562.511332][T17640] netlink: zone id is out of range [ 562.517564][T17640] netlink: zone id is out of range [ 562.522979][T17640] netlink: zone id is out of range [ 562.529036][T17640] netlink: zone id is out of range [ 562.534378][T17640] netlink: zone id is out of range [ 562.849651][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.858050][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.952904][T17661] netlink: 'syz.2.3401': attribute type 4 has an invalid length. [ 562.968132][T17661] netlink: 'syz.2.3401': attribute type 4 has an invalid length. [ 562.985201][T17663] !: renamed from dummy0 (while UP) [ 563.041654][T17661] veth0_macvtap: left allmulticast mode [ 563.074263][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.083973][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 563.094166][T11340] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.104255][T11340] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 563.115198][T11340] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.124160][T11340] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 563.142263][T11340] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.155621][T11340] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 563.503518][T17689] tipc: Enabled bearer , priority 0 [ 563.535422][T17689] syzkaller0: entered promiscuous mode [ 563.540927][T17689] syzkaller0: entered allmulticast mode [ 563.597795][T17689] tipc: Resetting bearer [ 563.628602][T17688] tipc: Resetting bearer [ 563.673209][T17688] tipc: Disabling bearer [ 563.900306][T17712] __nla_validate_parse: 25 callbacks suppressed [ 563.900324][T17712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3418'. [ 564.087598][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3423'. [ 564.549129][T17749] syzkaller0: entered promiscuous mode [ 564.554773][T17749] syzkaller0: entered allmulticast mode [ 564.717231][T17765] SET target dimension over the limit! [ 565.927077][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3439'. [ 566.043405][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3439'. [ 566.053765][T17785] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 566.062691][T17785] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 566.071116][T17785] netlink: 'syz.2.3439': attribute type 2 has an invalid length. [ 566.079088][T17785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3439'. [ 566.282464][T17768] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 566.283301][T17783] bridge_slave_1: left allmulticast mode [ 566.330398][T17783] bridge_slave_1: left promiscuous mode [ 566.339367][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.384118][T17783] bridge_slave_0: left allmulticast mode [ 566.418764][T17783] bridge_slave_0: left promiscuous mode [ 566.425505][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.512902][T17800] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.521517][T17803] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.564486][T17802] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3445'. [ 566.735783][T17817] netem: incorrect ge model size [ 566.741645][T17817] netem: change failed [ 567.233681][T17845] xt_time: unknown flags 0xf4 [ 567.350218][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3460'. [ 567.392074][T17849] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 567.775722][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 567.958962][T17881] netlink: 'syz.0.3474': attribute type 1 has an invalid length. [ 567.988566][T17890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3474'. [ 568.060601][T17893] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 568.275983][T17908] Cannot find add_set index 65532 as target [ 568.869096][T17931] x_tables: duplicate underflow at hook 1 [ 568.904035][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3488'. [ 568.914427][T17933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.925977][T17933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.942227][T17933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.950867][T17933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.963333][T17933] batman_adv: batadv0: Interface deactivated: 0! [ 568.970182][T17933] batman_adv: batadv0: Removing interface: 0! [ 568.996923][T17936] netlink: 'syz.6.3490': attribute type 4 has an invalid length. [ 569.005116][T17936] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3490'. [ 569.055996][T17936] `: renamed from bond0 (while UP) [ 569.278802][T17939] netlink: 81 bytes leftover after parsing attributes in process `syz.6.3492'. [ 570.007399][T17964] syzkaller0: entered promiscuous mode [ 570.020227][T17964] syzkaller0: entered allmulticast mode [ 570.071930][T17964] tipc: Enabled bearer , priority 0 [ 570.085953][T17963] tipc: Resetting bearer [ 570.135328][T17963] tipc: Disabling bearer [ 570.164339][T17971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.306271][T17986] Cannot find del_set index 0 as target [ 570.360232][T17990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3508'. [ 570.541676][T18003] netlink: 'syz.2.3510': attribute type 11 has an invalid length. [ 570.562082][T18003] netlink: 'syz.2.3510': attribute type 11 has an invalid length. [ 570.579703][T18003] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3510'. [ 570.845246][T18016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.974830][T18024] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3516'. [ 570.999962][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 571.329752][T18042] Cannot find del_set index 0 as target [ 571.671369][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 571.721997][T18058] bond0: (slave rose0): Enslaving as an active interface with an up link [ 572.060188][T18061] Cannot find del_set index 4 as target [ 572.255704][T18087] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3530'. [ 572.509022][T18100] SET target dimension over the limit! [ 572.629839][T18102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3534'. [ 572.873018][T18072] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 572.973617][T18129] sctp: [Deprecated]: syz.2.3542 (pid 18129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.973617][T18129] Use struct sctp_sack_info instead [ 573.234501][T18148] SET target dimension over the limit! [ 573.400627][T18141] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.408437][T18141] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.558203][T18152] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3546'. [ 573.973134][T18141] gtp0: left promiscuous mode [ 573.978737][T18141] gtp0: left allmulticast mode [ 574.005870][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.025143][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.036955][T18167] veth0: entered promiscuous mode [ 574.042497][T18165] veth0: left promiscuous mode [ 574.048293][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.070350][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.530239][T18194] syzkaller1: entered promiscuous mode [ 574.554930][T18194] syzkaller1: entered allmulticast mode [ 574.679498][T18198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.742577][T18204] tipc: Enabled bearer , priority 0 [ 574.773526][T18204] syzkaller0: entered promiscuous mode [ 574.793067][T18204] syzkaller0: entered allmulticast mode [ 574.813271][T18200] netlink: 'syz.0.3563': attribute type 21 has an invalid length. [ 574.852603][T18218] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 574.865831][T18215] tipc: Resetting bearer [ 574.880008][T18201] tipc: Resetting bearer [ 574.913264][T18201] tipc: Disabling bearer [ 574.931995][T18224] __nla_validate_parse: 2 callbacks suppressed [ 574.932013][T18224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3571'. [ 574.934789][T18225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3568'. [ 575.018255][T18218] veth3: entered promiscuous mode [ 575.047052][T18228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3572'. [ 575.202498][T18237] netlink: 'syz.2.3575': attribute type 16 has an invalid length. [ 575.224262][T18237] netlink: 'syz.2.3575': attribute type 17 has an invalid length. [ 575.330268][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3576'. [ 575.388671][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.425977][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.457378][T18237] batman_adv: batadv0: Interface activated: 0! [ 575.468090][T18237] net_ratelimit: 8 callbacks suppressed [ 575.468100][T18237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.628825][T18260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3581'. [ 575.659948][T18261] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 575.680995][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3580'. [ 575.707198][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3580'. [ 575.826482][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 575.835862][T18272] nbd: must specify at least one socket [ 575.839154][T18270] netlink: 'syz.0.3583': attribute type 33 has an invalid length. [ 575.894560][T18270] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 575.909930][T18270] bond2 (unregistering): Released all slaves [ 576.077640][T18282] netlink: 'syz.3.3588': attribute type 1 has an invalid length. [ 576.118529][T18282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3588'. [ 576.370327][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3594'. [ 576.451931][T18298] syzkaller1: entered promiscuous mode [ 576.458156][T18298] syzkaller1: entered allmulticast mode [ 576.558063][T18309] netlink: 'syz.0.3596': attribute type 2 has an invalid length. [ 576.629833][T18311] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 576.640904][T18311] netlink: 'syz.0.3598': attribute type 2 has an invalid length. [ 576.922022][ T6463] nci: nci_ntf_packet: unknown ntf opcode 0x303 [ 576.941117][T18328] wg2: entered promiscuous mode [ 576.946158][T18328] wg2: entered allmulticast mode [ 576.978096][T18322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.096888][T18401] syzkaller1: entered promiscuous mode [ 578.122381][T18401] syzkaller1: entered allmulticast mode [ 578.825240][T18439] "syz.2.3638" (18439) uses obsolete ecb(arc4) skcipher [ 579.101755][T18468] netem: invalid attributes len -24 [ 579.121773][T18468] netem: change failed [ 579.135712][T18468] netlink: 'syz.6.3649': attribute type 12 has an invalid length. [ 579.168124][T18468] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 579.393243][T18485] xt_hashlimit: size too large, truncated to 1048576 [ 579.694145][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.702017][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.991410][T18481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.014003][T18481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.337348][T18481] `: left allmulticast mode [ 580.341993][T18481] bond_slave_0: left allmulticast mode [ 580.358579][T18481] bond_slave_1: left allmulticast mode [ 580.364110][T18481] team0: left allmulticast mode [ 580.369491][T18481] C: left allmulticast mode [ 580.374283][T18481] team_slave_1: left allmulticast mode [ 580.381383][T18481] `: left promiscuous mode [ 580.386170][T18481] bond_slave_0: left promiscuous mode [ 580.391735][T18481] bond_slave_1: left promiscuous mode [ 580.397331][T18481] team0: left promiscuous mode [ 580.402108][T18481] C: left promiscuous mode [ 580.406917][T18481] team_slave_1: left promiscuous mode [ 580.431800][T18508] __nla_validate_parse: 11 callbacks suppressed [ 580.431817][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'. [ 580.462994][ T13] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 580.494170][ T13] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.516850][ T13] netdevsim netdevsim6 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 580.542389][ T13] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 580.582651][ T13] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.603767][ T13] netdevsim netdevsim6 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 580.635583][ T13] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 580.644143][ T13] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.653383][ T13] netdevsim netdevsim6 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 580.665179][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'. [ 580.741326][ T13] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 580.753895][ T13] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 580.763661][ T13] netdevsim netdevsim6 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 580.774165][T18529] validate_nla: 4 callbacks suppressed [ 580.774181][T18529] netlink: 'syz.3.3669': attribute type 29 has an invalid length. [ 580.789392][T18525] netlink: 'syz.3.3669': attribute type 29 has an invalid length. [ 580.798563][T18525] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3669'. [ 580.801069][T18533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.808670][T18525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3669'. [ 580.829052][T18528] syzkaller0: entered allmulticast mode [ 580.835370][T18525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3669'. [ 580.933126][T18538] SET target dimension over the limit! [ 580.971405][T18541] bond2: entered allmulticast mode [ 580.977783][T18541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.001342][T18544] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3676'. [ 581.012779][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'. [ 581.024359][T18533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 581.070378][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3676'. [ 581.109230][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 581.287205][T18560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.394880][T18556] bond2: Unable to set down delay as MII monitoring is disabled [ 581.406843][T18556] bond2 (unregistering): Released all slaves [ 583.670971][T18620] blkio.reset_stats is deprecated [ 584.332310][T18663] tipc: Enabled bearer , priority 0 [ 584.340506][T18661] tipc: Enabling of bearer rejected, already enabled [ 584.353125][T18666] tipc: Resetting bearer [ 584.418445][T18658] tipc: Disabling bearer [ 584.469181][T18677] syzkaller0: entered promiscuous mode [ 584.484883][T18677] syzkaller0: entered allmulticast mode [ 584.800370][T18701] erspan0: entered promiscuous mode [ 584.807568][T18701] 0{X功: entered promiscuous mode [ 584.823363][T18701] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 585.183329][T18720] x_tables: duplicate underflow at hook 2 [ 585.689251][T18758] __nla_validate_parse: 7 callbacks suppressed [ 585.689268][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'. [ 585.760497][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'. [ 585.970765][T18782] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 586.032990][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3745'. [ 586.170101][T18788] syzkaller0: entered promiscuous mode [ 586.177906][T18788] syzkaller0: entered allmulticast mode [ 586.178099][T18793] nbd: socks must be embedded in a SOCK_ITEM attr [ 586.239385][T18795] Can't find ip_set type hash:nnet [ 586.260692][T18790] syzkaller0: entered promiscuous mode [ 586.267919][T18790] syzkaller0: entered allmulticast mode [ 586.442881][T18804] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3751'. [ 589.410273][T18798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3751'. [ 589.661429][T18815] team0 (unregistering): Port device team_slave_0 removed [ 589.670215][T18815] team0 (unregistering): Port device team_slave_1 removed [ 589.708773][T18823] bond0: entered allmulticast mode [ 589.714198][T18823] bond_slave_0: entered allmulticast mode [ 589.721190][T18823] bond_slave_1: entered allmulticast mode [ 589.925141][T18843] netlink: 'syz.7.3761': attribute type 10 has an invalid length. [ 589.979160][T18843] team0: Device veth1_macvtap failed to register rx_handler [ 590.150206][T18866] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3769'. [ 590.175698][T18855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3767'. [ 590.687670][T18891] netlink: 'syz.2.3776': attribute type 13 has an invalid length. [ 590.720202][T18891] macvtap0: entered allmulticast mode [ 590.745285][T18891] macvtap0: refused to change device tx_queue_len [ 590.939840][T18909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3781'. [ 590.964579][T18909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3781'. [ 591.006431][ T31] INFO: task syz.5.2318:13808 blocked for more than 143 seconds. [ 591.018297][ T31] Not tainted syzkaller #0 [ 591.029955][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.062477][ T31] task:syz.5.2318 state:D stack:25144 pid:13808 tgid:13806 ppid:13224 task_flags:0x400140 flags:0x00080002 [ 591.091955][ T31] Call Trace: [ 591.099323][ T31] [ 591.105700][ T31] __schedule+0x1798/0x4cc0 [ 591.116140][ T31] ? __lock_acquire+0xab9/0xd20 [ 591.126768][ T31] ? __lock_acquire+0xab9/0xd20 [ 591.141917][ T31] ? __pfx___schedule+0x10/0x10 [ 591.162158][ T31] ? schedule+0x91/0x360 [ 591.175901][ T31] schedule+0x165/0x360 [ 591.189063][ T31] schedule_preempt_disabled+0x13/0x30 [ 591.203778][ T31] __mutex_lock+0x7e6/0x1350 [ 591.218776][ T31] ? __mutex_lock+0x5bb/0x1350 [ 591.232935][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 591.249502][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 591.254585][ T31] ? stack_trace_save+0x9c/0xe0 [ 591.269925][ T31] ? stack_depot_save_flags+0x40/0x860 [ 591.283791][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 591.290392][ T31] ? __alloc_skb+0x142/0x2d0 [ 591.295298][ T31] ? netlink_dump+0x1b7/0xe90 [ 591.299999][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 591.305877][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 591.311890][ T31] ? genl_rcv_msg+0x5da/0x790 [ 591.317084][ T31] ? netlink_rcv_skb+0x208/0x470 [ 591.322054][ T31] ? genl_rcv+0x28/0x40 [ 591.332726][ T31] ? netlink_unicast+0x82f/0x9e0 [ 591.338720][ T31] ? netlink_sendmsg+0x805/0xb30 [ 591.343799][ T31] ? __sock_sendmsg+0x21c/0x270 [ 591.349125][ T31] ? ____sys_sendmsg+0x505/0x830 [ 591.354190][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 591.359520][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 591.374677][ T31] ? do_syscall_64+0xfa/0xfa0 [ 591.383199][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.399796][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 591.407995][ T31] ? __alloc_skb+0x142/0x2d0 [ 591.418016][ T31] ? rcu_is_watching+0x15/0xb0 [ 591.423307][ T31] ? trace_kmalloc+0x1f/0xd0 [ 591.435430][ T31] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 591.442471][ T31] ? __alloc_skb+0x142/0x2d0 [ 591.449329][ T31] ? __build_skb_around+0x262/0x3f0 [ 591.454827][ T31] genl_dumpit+0x10b/0x1b0 [ 591.459268][ T31] netlink_dump+0x6e4/0xe90 [ 591.463793][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 591.469050][ T31] ? genl_start+0x499/0x6c0 [ 591.474093][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 591.479411][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 591.485453][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 591.491713][ T31] ? genl_get_cmd+0x496/0x910 [ 591.496490][ T31] ? __pfx_genl_start+0x10/0x10 [ 591.501383][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 591.506599][ T31] ? __pfx_genl_done+0x10/0x10 [ 591.511398][ T31] genl_rcv_msg+0x5da/0x790 [ 591.515955][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.520988][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 591.527740][ T31] ? __asan_memcpy+0x40/0x70 [ 591.532352][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 591.537911][ T31] netlink_rcv_skb+0x208/0x470 [ 591.542724][ T31] ? __lock_acquire+0xab9/0xd20 [ 591.547956][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.553005][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.558391][ T31] ? down_read+0x1ad/0x2e0 [ 591.562833][ T31] genl_rcv+0x28/0x40 [ 591.567135][ T31] netlink_unicast+0x82f/0x9e0 [ 591.572432][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 591.577827][ T31] ? netlink_sendmsg+0x642/0xb30 [ 591.582817][ T31] ? skb_put+0x11b/0x210 [ 591.587235][ T31] netlink_sendmsg+0x805/0xb30 [ 591.592025][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.597412][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 591.602370][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.607851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.613225][ T31] __sock_sendmsg+0x21c/0x270 [ 591.618016][ T31] ____sys_sendmsg+0x505/0x830 [ 591.622791][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.628279][ T31] ? import_iovec+0x74/0xa0 [ 591.632808][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 591.637608][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.643208][ T31] ? __fget_files+0x2a/0x420 [ 591.648889][ T31] ? __fget_files+0x3a0/0x420 [ 591.653758][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 591.659054][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.664520][ T31] ? do_syscall_64+0xbe/0xfa0 [ 591.669356][ T31] do_syscall_64+0xfa/0xfa0 [ 591.673877][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.679818][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.686123][ T31] ? clear_bhb_loop+0x60/0xb0 [ 591.690821][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.696750][ T31] RIP: 0033:0x7fef1d38efc9 [ 591.701172][ T31] RSP: 002b:00007fef1e148038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.709763][ T31] RAX: ffffffffffffffda RBX: 00007fef1d5e5fa0 RCX: 00007fef1d38efc9 [ 591.717866][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 591.726365][ T31] RBP: 00007fef1d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.734469][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.742771][ T31] R13: 00007fef1d5e6038 R14: 00007fef1d5e5fa0 R15: 00007fff07d003e8 [ 591.750985][ T31] [ 591.754100][ T31] [ 591.754100][ T31] Showing all locks held in the system: [ 591.761895][ T31] 3 locks held by kworker/u8:1/13: [ 591.767409][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 591.785083][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 591.794041][ T31] #2: ffffffff8ddd53b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 591.812636][ T31] 1 lock held by khungtaskd/31: [ 591.823649][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 591.833605][ T31] 3 locks held by kworker/u9:0/53: [ 591.838892][ T31] #0: ffff888077116948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 591.858943][ T31] #1: ffffc90000be7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 591.872067][ T31] #2: ffff88807e740dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 591.882742][ T31] 2 locks held by getty/5585: [ 591.887895][ T31] #0: ffff88814d3d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 591.898241][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 591.908866][ T31] 2 locks held by syz.1.2019/12847: [ 591.914197][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 591.922988][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 591.936276][ T31] 3 locks held by syz.5.2318/13808: [ 591.941604][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 591.950402][ T31] #1: ffff88801e7086e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 591.961354][ T31] #2: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 591.972421][ T31] 3 locks held by syz.4.2653/14999: [ 591.980026][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 591.989043][ T31] #1: ffff888143aa86e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 592.000141][ T31] #2: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 592.011110][ T31] 3 locks held by dhcpcd-run-hook/18926: [ 592.017191][ T31] 4 locks held by dhcpcd-run-hook/18927: [ 592.022984][ T31] [ 592.027055][ T31] ============================================= [ 592.027055][ T31] [ 592.040273][ T31] NMI backtrace for cpu 0 [ 592.040289][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 592.040308][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.040319][ T31] Call Trace: [ 592.040326][ T31] [ 592.040333][ T31] dump_stack_lvl+0x189/0x250 [ 592.040363][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.040386][ T31] ? __pfx__printk+0x10/0x10 [ 592.040416][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 592.040445][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 592.040472][ T31] ? __pfx__printk+0x10/0x10 [ 592.040495][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 592.040522][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 592.040550][ T31] watchdog+0xf60/0xfa0 [ 592.040573][ T31] ? watchdog+0x1e2/0xfa0 [ 592.040596][ T31] kthread+0x711/0x8a0 [ 592.040622][ T31] ? __pfx_watchdog+0x10/0x10 [ 592.040639][ T31] ? __pfx_kthread+0x10/0x10 [ 592.040669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.040689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.040708][ T31] ? __pfx_kthread+0x10/0x10 [ 592.040730][ T31] ret_from_fork+0x4bc/0x870 [ 592.040752][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 592.040777][ T31] ? __switch_to_asm+0x39/0x70 [ 592.040792][ T31] ? __switch_to_asm+0x33/0x70 [ 592.040806][ T31] ? __pfx_kthread+0x10/0x10 [ 592.040829][ T31] ret_from_fork_asm+0x1a/0x30 [ 592.040861][ T31] [ 592.040868][ T31] Sending NMI from CPU 0 to CPUs 1: [ 592.187692][ C1] NMI backtrace for cpu 1 [ 592.187708][ C1] CPU: 1 UID: 0 PID: 18930 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 592.187726][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.187736][ C1] RIP: 0010:mt_validate+0x143f/0x4390 [ 592.187760][ C1] Code: 81 f6 44 89 e7 44 8b 6c 24 38 44 89 ee e8 79 67 81 f6 45 39 e5 0f 85 c5 00 00 00 e8 ab 65 81 f6 4d 89 f5 eb 05 e8 a1 65 81 f6 <41> 83 ff 03 4c 8b 64 24 10 0f 87 cb 02 00 00 e8 8d 65 81 f6 48 8b [ 592.187774][ C1] RSP: 0018:ffffc9000f6870e0 EFLAGS: 00000293 [ 592.187790][ C1] RAX: ffffffff8b3e9e4f RBX: 0000000000000009 RCX: ffff8880553bbc80 [ 592.187802][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 592.187811][ C1] RBP: ffffc9000f6872d0 R08: ffff8880553bbc80 R09: 0000000000000003 [ 592.187822][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000008 [ 592.187832][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 592.187842][ C1] FS: 0000000000000000(0000) GS:ffff88812623f000(0000) knlGS:0000000000000000 [ 592.187855][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.187866][ C1] CR2: 00007f302a3d5440 CR3: 00000000500f8000 CR4: 00000000003526f0 [ 592.187881][ C1] Call Trace: [ 592.187893][ C1] [ 592.187907][ C1] ? __pfx_mt_validate+0x10/0x10 [ 592.187937][ C1] ? uprobe_mmap+0x177/0x1020 [ 592.187959][ C1] validate_mm+0xae/0x4a0 [ 592.187978][ C1] ? __pfx_validate_mm+0x10/0x10 [ 592.187997][ C1] ? vma_complete+0x9e7/0xae0 [ 592.188017][ C1] ? vma_prepare+0x485/0x4b0 [ 592.188031][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 592.188050][ C1] __split_vma+0x8bd/0xa00 [ 592.188072][ C1] ? __pfx___split_vma+0x10/0x10 [ 592.188100][ C1] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 592.188124][ C1] ? mtree_range_walk+0x6a7/0x840 [ 592.188145][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 592.188167][ C1] ? mas_find+0xa7d/0xd30 [ 592.188187][ C1] mmap_region+0x722/0x2110 [ 592.188213][ C1] ? __pfx_mmap_region+0x10/0x10 [ 592.188241][ C1] ? rcu_is_watching+0x15/0xb0 [ 592.188258][ C1] ? process_measurement+0x15c3/0x1a40 [ 592.188298][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 592.188320][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 592.188344][ C1] ? cap_mmap_addr+0xb0/0x100 [ 592.188361][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 592.188377][ C1] ? security_mmap_addr+0x71/0x270 [ 592.188395][ C1] ? shmem_mapping+0xd/0x50 [ 592.188410][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 592.188430][ C1] do_mmap+0xc45/0x10d0 [ 592.188454][ C1] ? __pfx_do_mmap+0x10/0x10 [ 592.188470][ C1] ? down_write_killable+0x178/0x230 [ 592.188494][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 592.188513][ C1] ? common_file_perm+0x1b5/0x230 [ 592.188541][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 592.188563][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 592.188580][ C1] ? __fget_files+0x2a/0x420 [ 592.188596][ C1] ? __fget_files+0x2a/0x420 [ 592.188610][ C1] ? __fget_files+0x2a/0x420 [ 592.188626][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 592.188649][ C1] do_syscall_64+0xfa/0xfa0 [ 592.188666][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.188683][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.188699][ C1] ? clear_bhb_loop+0x60/0xb0 [ 592.188717][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.188732][ C1] RIP: 0033:0x7f302a6b7242 [ 592.188745][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 592.188758][ C1] RSP: 002b:00007ffc2cd963c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 592.188773][ C1] RAX: ffffffffffffffda RBX: 00007f302a3cd000 RCX: 00007f302a6b7242 [ 592.188785][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f302a3cd000 [ 592.188796][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000000d000 [ 592.188806][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc2cd96488 [ 592.188816][ C1] R13: 00007f302a68c580 R14: 00007ffc2cd96840 R15: 00000fff859b2c7c [ 592.188837][ C1]