last executing test programs: 2.730155489s ago: executing program 2 (id=10659): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000240), 0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x6, 0x0, 0xfffffffe, {0x77359400}, {0x0, 0x2710}, {0x4}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "20df31e63824a588"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x854) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f00000025c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x8e, 0x0, 0x6, [0x7, 0x7, 0x9, 0xb00000, 0x0, 0x10001, 0x7fffffff]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20000007}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x98}, 0x10) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001540)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1bf, 0x1, 0x0, 0x0, 0xf, 0x6}, &(0x7f0000001580)=0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) pipe(&(0x7f0000001340)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r2) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000003a00)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24000098}, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r9, 0x890c, &(0x7f0000000500)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYRES16=r6], &(0x7f0000000080)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r11], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1050}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x6c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x29}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x994, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) 2.53199399s ago: executing program 4 (id=10663): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000009500"/24], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="2e44b78c4a170576bf4e0915173018feffffff10", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00210000000000000000800c0022000000000000000000"], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x8001, 0x4, 0x10001, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x67, 0x0, 0x52, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, {[@timestamp={0x44, 0x18, 0x6d, 0x0, 0x7, [0x10, 0x9, 0xb91, 0x518, 0x7fffffff]}, @generic={0x44, 0x3, "a2"}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@dellinkprop={0x34, 0x6d, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x800, 0x22000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20010, 0xffffffffffffffff, 0x6ed22000) 2.434556927s ago: executing program 4 (id=10666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad160000400033001000000008021100000008021100000008021100000100000000000001000100"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x16}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000260000008b00000095000000000000001e0d44a878a851c4a22c285c2d3e41bed895eb61d0ccee7ed7d2c1505e4e56f95abbdf6b268680736e9c0edc4d135ee6fa46593fa7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x2, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "e612fcc9c788ff56"}, 0x10}, 0x1, 0x0, 0x0, 0x44008014}, 0x842) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getqdisc={0x30, 0x26, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xb}, {0x4, 0xc}, {0xf, 0x2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) connect$phonet_pipe(r9, &(0x7f0000000000)={0x23, 0x8, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000011400000000005270000000000000500010500040000000000000005006f2d9e1ec5b82c0705000000490002"], 0x58}}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600b40900000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.184373488s ago: executing program 1 (id=10670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x60, 0x15, 0x2, 0x70bd25, 0x25dfdbff, {0x14}, [@nested={0x44, 0x10a, 0x0, 0x1, [@typed={0xc, 0x86, 0x0, 0x0, @u64=0x6}, @generic="656f7232e5c3a8d6def0f0b5d8e14471a6f2878387a48f47e1a9498f1251598ec982c6ead48bdc5dc2dbe549", @typed={0x4, 0x74}, @nested={0x4, 0x115}]}, @typed={0x8, 0xe8, 0x0, 0x0, @uid=0xee01}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x20040010) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.924068037s ago: executing program 3 (id=10672): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='\v', 0x1}], 0x1) 1.914428464s ago: executing program 4 (id=10673): unshare(0x20000400) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x9, 0x2}, 0xe) 1.864425845s ago: executing program 1 (id=10674): pipe(&(0x7f0000000080)) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000003e3ec899beea0369f61b26ff10348a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) pipe(&(0x7f0000000080)) (async) ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000003e3ec899beea0369f61b26ff10348a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) (async) 1.837744958s ago: executing program 2 (id=10675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x4}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r1, 0xb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x28}}, 0x4000051) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r9, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x16, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="080008e2f3c3cd9521bf4a000000450e002800650000520690780a010102ffffffff4e234e203efa0eddde9921305a00b5f8dc4d241a141599229eb0aadd126c8cb6a889471f3b5a53a974274fc19ffa2a5dea197248", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010001090780001"], 0x36) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000006308e3647d65cc5c12be9902010101000000000000000001000002"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 1.828547026s ago: executing program 1 (id=10676): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000040)=0x2) 1.768372682s ago: executing program 3 (id=10677): syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020400", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "2f8703", 0x0, 0x6c, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @remote}, [], "8763be05bdbf976f"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=0x0], 0x50}, 0x1, 0x0, 0x0, 0x200000d1}, 0x0) 1.767192461s ago: executing program 0 (id=10678): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0xa0, 0x44, 0x107, 0xfffffffc, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8c, 0x4, 0x0, 0x1, [@nested={0x88, 0x149, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @fd}, @nested={0x8, 0x4a, 0x0, 0x1, [@typed={0x4, 0x123}]}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x5d, 0xc7, 0x0, 0x1, [@generic="1bc9aff29710760b591d32eb13bd647f378b2614e113fc5cd99b13746a6e4d64834767a828a886d4926e622907e837be203afee9058a0c68dc1fb7e6b9cca7237917348640e177c36e755085e7c851b904a8b26f655d59cda7"]}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100000000000200000000000000", @ANYRES32=r2, @ANYBLOB="408f010008200200280012800e0001006970366772657461700000001400028006001100"], 0x48}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)={0x110, 0x2b, 0x1, 0x2, 0x25dfdbfd, "", [@nested={0xfd, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x110}], 0x1}, 0x0) 1.612789321s ago: executing program 0 (id=10679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x98, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000041}, 0x91) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 1.582781813s ago: executing program 3 (id=10680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000100)="09797fcd6cd9d4ffb903c6e2abf3629ff875285e37d6e7d6850c127a453300000000", 0x22) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r12, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r12, 0x8) accept4$inet(r12, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1f4, r10, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x65}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x9]}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2582}, @broadcast, @broadcast, @from_mac=@device_b, {0xd, 0x9}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x38, @void}}, @NL80211_ATTR_FRAME={0x193, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x667}, @device_b, @device_b, @random="34868312e3e5", {0x4, 0x70b}, @value=@ver_80211n={0x0, 0xff, 0x3, 0x3}}, 0x824e, 0x1b, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0xc, 0x1}]}, @void, [{0xdd, 0xb1, "93c42687b4db4f8b59f7690f528bd886686e5b622781a4ffa664438f365e647acfe59a75e98a0caae34a725941169c5cb6202d937f82cc2faab372768407910a3ca0a8b5c00d70b93fcb7fc82bb92c3d8ed42fa21c3ac1d177a34eb611faf7c323b50543bbbda6b815016be7976b2f87f45a49851f8607010faa37586b95e374b1445343fdf5d778042d2be163df892cf0c39b67e583b3a5efc11b5f440d1fb1d5bb3c2815458a03a8ba819b863616782d"}, {0xdd, 0xa9, "decb7d64a8be7f1c106ab6280d93a726f86acf28b1799f88afee2a37c11e89f3ab9eb830a19d0eacb143812142b6103b17164d1387d22de3c547c757fa7b47698bff1c1261921ee87e594f56e3043fa5fdc433e858e242de76ad161788304287c5de7a06054c7c1729e19b450787e49e5d2a8e1aa1027574d8398d51efc8fba25f194e376e974c2fdf4bc5bd4bd50acdfe15f6009203e31125c1fe14ff4233a2fdfc4c9de398ad9dbb"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11f0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc69}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4090}, 0x2000c004) r13 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r13, 0x29, 0x16, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000fbdbdf250100000000000000094100000010001800a0afc1ee72300007eb4962"], 0x2c}}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.516179938s ago: executing program 0 (id=10681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f00000007c0)="25d7", 0x2, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r4, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x24000880) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x6c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x209}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x95ff889}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 1.493577126s ago: executing program 2 (id=10682): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = accept4(r0, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x80000) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40000, 0x0, [{0x2, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r0) 1.379602902s ago: executing program 4 (id=10683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x14, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}}, 0x14}}, 0xc814) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x8, 0x1000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 1.312306584s ago: executing program 1 (id=10684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x70}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, @null, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5dd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x2b, 0x1, 0x70bd2c, 0x5ffc, "", [@typed={0x4, 0xb9}]}, 0x14}], 0x1, 0x0, 0x0, 0x2040}, 0x0) 1.309943929s ago: executing program 0 (id=10685): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x40}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2a, 0xffffffffffffffff, 0x4001}, 0xc) close(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x40800) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ppoll(0x0, 0x0, 0x0, &(0x7f0000000500)={[0xfe9]}, 0x8) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r8, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000000)=0x8) 1.299518437s ago: executing program 3 (id=10686): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r5}, 0x38) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000997ba2bb2df259a3e967714600000500fddbdfab00000000", @ANYRES32=r7, @ANYBLOB="0000000084100000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x20044840) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002740)=""/4077, 0xfed}, {&(0x7f00000000c0)=""/53, 0x35}], 0x2}}], 0x1, 0x102, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3, @ANYRES8=r4], 0x30}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000054) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x12, &(0x7f00000002c0), 0x4) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) listen(r10, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x4, 0x4, 0x4, 0x4, {0xa, 0x4e21, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x408}}}, 0x32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.280506346s ago: executing program 2 (id=10687): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000000f40)=""/4074, 0x82, 0xfea, 0x1}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000001f40)=""/4096, 0x1000}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x2, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 1.136861534s ago: executing program 1 (id=10688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ba3870d8", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251a00000006002100620000000800228004000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) 1.129658621s ago: executing program 4 (id=10689): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/57, 0x39}], 0x4}, 0x40000042) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4005) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) 992.051963ms ago: executing program 2 (id=10690): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@srh={0x62, 0x2, 0x4, 0x1, 0xd5, 0x68, 0x3, [@private0={0xfc, 0x0, '\x00', 0x1}]}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 872.309428ms ago: executing program 3 (id=10691): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x408c4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 821.600314ms ago: executing program 1 (id=10692): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xd, 0x0, &(0x7f00000002c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 388.238522ms ago: executing program 32 (id=10692): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xd, 0x0, &(0x7f00000002c0)) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) 381.844466ms ago: executing program 0 (id=10694): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xffffffff, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x6f, 0x3, {0xb, 0xb}}]}}]}, 0xffffffffffffff33}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="1f88ca325a5d2fb39a0e6c0afae5b25bec9a56ee5472d7304ab87f5e664f59cd25358cc7185a86c7e42f920fbffdc91f4a31bc9839d85df80bcb68e344f164374adac421be29fdeaa16649a5", 0x4c}, {&(0x7f0000000140)="a7cc0d79a5e1e05d988481006bf17ce1803d364fc720cc9443b0ffa028361c5b1ad2c86fcc1a36ed5343b7cb4547b185f1c1a5dbcb7a2675c35f96a56ecfd3f1fac6623cdeca575528976baeefe885b8fc0d004231b6f979b873894531f6460825d252a354fff803c2642baa9c6a71bc79cee16fcc464de18870bc2576c1384d50d5b4c43f47b6fec4752679e258923e69ba1f0f9b4112d92493e5c7e7", 0x9d}], 0x2, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@generic={0x44, 0x7, "95cf2f116d"}, @timestamp_addr={0x44, 0x3c, 0x36, 0x1, 0xc, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8076}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5}, {@broadcast, 0x7ff}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x8}, {@empty, 0x3}]}, @rr={0x7, 0xb, 0xdb, [@loopback, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x13, 0x1, 0x7, [{@empty, 0x9}, {@empty, 0x8}, {@private=0xa010102, 0x80000001}]}, @end, @cipso={0x86, 0x33, 0x3, [{0x5, 0x9, "272497002408a5"}, {0x6, 0xd, "ccce9a650fa023461a61d6"}, {0xb61fa37b73a790d5, 0xa, "762b6068459c54e2"}, {0x0, 0x2}, {0x1, 0x6, "c3b533fc"}, {0x1, 0x5, "115489"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x17}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x96, [@broadcast, @remote, @private=0xa010101, @multicast1, @private=0xa010100, @loopback]}, @timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0x9, [{@loopback, 0x7}, {@empty, 0x1750}, {@local}, {@local, 0x9}]}, @noop, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x3, [{@multicast2, 0x3ff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x53}}], 0x1b0}}, {{&(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000002c0)="70da6c95af623294387ffce2c240e77f83da1b63eff02fc02098b0efa9ec3bff72baae92e2a54531edcff6431766aee074845bd3c60d196615660df9d130b0ce6f96bf7d07d03ff8ef8fab540652e7b06c4da1f30199ea0509528c4a79a952f8e086950708a066ee25a8749c2e0f06d380de", 0x72}, {&(0x7f0000000640)="f161e9c41771b36238f89ea28eab0c3b91b3ecd2b3c563aa710a5c7dd43097b8b8950e909eddf507c9cec5f789be5ada386c02ed9f51a9d28c81a39832bce4a2a547c7b8a1d0713c20c6e4bd4fe280d8d75e007fc38194e08cd1b44ac0e7c358c05c7e28e0d85242f9f2c2f5a9a39a94aa97356dc81c5044b1fc2c20181699c9bce5254673fe560d427222be2afb2797da363cf2e85c3a62f0bd99a16a882192d963118d0577e38859aa1e4d88bde82fc3d66afab4a056", 0xb7}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f0000000340)="4dc1adbf1fd5848aeea3e9baca", 0xd}, {&(0x7f00000008c0)="1ea5196b163bee1dabc370703b813a68b885ae4deeba44c84c4ee1b6b4c3c4dea2180ea2767281f0f44f1aa549124e9ec2fcad74ae566f9d2f25a1ba1353951f38dfada6ebe585907e033b5ad427e837a851056eb96e52d2234e8803bce5618f87fea963cf1ed58eca37b4ac78a95772fb24c5e2e9798e9dc28e8928197173f23d08ece6cd06114991baf006b2526dd0b77cc97591b76f957107b0b0ca91939b4afbc4504872df54d8756e79991d03716fc596487061642ec26958e3561e4d5d8fe643eb7c1cc0e309caf49ed812", 0xce}], 0x5, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}}], 0x2, 0x24040001) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x0, 0x0, 0x0, "25f87df99dc48af4"}}, 0x48}}, 0x0) 379.806219ms ago: executing program 2 (id=10695): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@initdev, @empty, 0x0}, &(0x7f0000000080)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22b, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES64=r4, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r10, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r11, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r12, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r12, 0x0, 0x80, 0x4) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=0x1, r13, 0x37}, 0x20) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r14, 0x1c614000) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x2, 0x0, 0x0, 0x0, 0x2b35}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r15}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r16, 0x1, 0xd, &(0x7f0000000240)={0x8000001}, 0x8) close(r16) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}], 0x40) 103.546061ms ago: executing program 33 (id=10695): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@initdev, @empty, 0x0}, &(0x7f0000000080)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22b, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES64=r4, @ANYRESDEC=r1, @ANYRESHEX, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r10, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r11, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e1c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r12, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r12, 0x0, 0x80, 0x4) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=0x1, r13, 0x37}, 0x20) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r14, 0x1c614000) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x2, 0x0, 0x0, 0x0, 0x2b35}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r15}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r16, 0x1, 0xd, &(0x7f0000000240)={0x8000001}, 0x8) close(r16) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}], 0x40) 60.457978ms ago: executing program 3 (id=10696): socket$nl_route(0x10, 0x3, 0x0) 60.182977ms ago: executing program 34 (id=10696): socket$nl_route(0x10, 0x3, 0x0) 59.900653ms ago: executing program 4 (id=10697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x764, r1, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xaf, 0x7f, [@random={0x6, 0xa9, "6ba48f16dbb322fbe609cc04be0951a6db0f4936d7782a8f9c0e6598d96047998d672b1edc45ca2bec505fc227c4cb9ccdc4fc731355b24b36d6649da8e43707656eb83e379599da428fe8d18a09b73c1fb34dd8eb812c6a7dd0f4e401607b510fb16f127d597e507a0c14ed378d5399a31953affd222b29403b9a1583b495c8de9d723a85626695dccd0e0f387bb044f57482c8aacd799b51d98fd0eab5dbf155b5a4be49721b5d23"}]}, @NL80211_ATTR_BEACON_HEAD={0x352, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4212}, @device_a, @device_a, @initial, {0xc, 0x3}}, 0x101, @default, 0x2c4, @val={0x0, 0x7, @random="5d627b2872e53a"}, @val={0x1, 0x7, [{0x12}, {0x51}, {0x16}, {0x1b, 0x1}, {0x16, 0x1}, {0x9}, {0x5}]}, @void, @void, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x0, 0x38, 0xf1}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x2, 0x55, 0x23, 0x8}}, [{0xdd, 0xcf, "2f3fcf2321e4f68fb0f74e2e26e1f51305ec83f2a8dd7dac84bcb29c57d1d70833f4ee300aa5298f71b9da05b44857fde7e63ad1e49b2d4bc487939ba6ca04be6a62186e37c3cd8b74d8eaf190091b28e2c6b535f8b51b0a8dbaf7fe33fa5ecd880636977f7ba5d29b4b103a4d41ecb9fddfdd249c44dac6c174e1112502b756620af5614c99f3451a1ca0c6b42292f96e164312206da440f8df2767a3f2f101659dbb86c84d97bca3f67ef16322a97fe16c7fe4e159ec25bc815e32681fb2d63f643c88e3f4f4f80fcf96323b452a"}, {0xdd, 0xaa, "46b369a92db06a55c9c0cbcec5018f5458e65130c61b3c1cc596f6d3e8afc3d4ece4bf1d58c68c284992831514e4965633dd73ad9ccf4455205ff35139270b9f514c7d9f34709cc4e586bc797b992d589c8114d407bee71ed13650ec99b6a5a52f7392713a065c80c91280658c4c716aaee49e5e367f2554587e5182bb59740f2161e15221f1386766de1df861a75d210dfc4f699752767c02125eec1c6bd5a3ac92ed10784aec84ebb5"}, {0xdd, 0x87, "1904e05e81b16d9791fe768bcc4a9312ed90144bacd97db09dbc4923ed97b4f8bfe1ad73a68e48e08a7b04bd8c24f017dccf737d7642de3b5522d0720a57a589f7c10a917e791f3bf1ad3c9851eb176e4fc10baddcd982c05b472a169306b16016af482ca57b21e910b8f0ea832670a4cb6ada30a43c7aecdbc4053caefe0a0fc618cb0123d5fe"}, {0xdd, 0xfc, "0087189e7f462eea47c2fe42cfae06cd9d301ff1d848384fe2c3314e41b92a7734cbe7aef045d37d00551afcf93abfe5d5306c179b41b56352cfb4f1176d7a7f64fa27ea454896a7645c2f17f1d297bb83e72e6668dbeb9943324246d7e2d1e987968dbf130c6793e013b6dacd161b0f29185ae436f44f60c4d4b73716a0e904c789a0fea077a1003eb1431ddfb95b19911132974e527d50a982826fa7092476a73bb3f7b2dcda8596e36c5caa536d447203f18682bd9fe2050bfcf2e7b0d6a1320bbf4b435e86d79e2f2dc254e5fd668f4dbd53a36ed159b66df976cdc8da78e7f0cab698aacf2df25b4d132061e2efdf578e76187109692661f9f2"}]}}, @NL80211_ATTR_PROBE_RESP={0x17f, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1b5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @from_mac, {0x6, 0x843}, @value=@ver_80211n={0x0, 0x7ff8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x1, @random, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x7c, 0xb}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x9, 0x20}}, @val={0x76, 0x6, {0x98, 0x5, 0xf, 0x2}}, [{0xdd, 0x77, "6cf756c7711b72b82a13bb3ff9fb806ef1cdb332e67d2d1c19e75308c03af555ccba674891f0858860f1fd6f3b74607bf75be4bf2401a8f66b313521360021bb9522353c7f1b40918d774f8dbca0235416735d918f6459e233c3792c0e708f38baee018bd7f645721f175b77c82d9b6f95cc8337f74fd7"}, {0xdd, 0xe0, "18f2801d7c37d4508beb49ec526be7e7846be8dd8e7f70422caabe053eef3272e19bb20cc4691b901e32657086e7d8468f6b7052b4ccfd6286c2d6bfb1b9fc269395856fb692e5e892b34b34d44d7c96ebcf7167df80f0f9be245f5873c03e9eee0548ad080b8c3363cc290cbdb0378953755d9d3145b19ee175b3a6cc5f355bc554120285367141dc8d8e2af6e777c929b9e18f1fb5289921af28b569bffc84b2063bbd11aa70aa8185fd0e4d4c24bf876b9a003c9e7f804d76307de75ba52623f760c9ae72cabce88fd38fc6c4fdc67091d18e7a45dcccc10eb89774abc3dc"}]}}]}, 0x764}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c0700000000160000000000000000"], 0x38}, 0x0) close(0x3) r4 = accept(r0, 0x0, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r4, 0x8, 0x7fffffff, 0x4}) 59.282152ms ago: executing program 35 (id=10697): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x764, r1, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xaf, 0x7f, [@random={0x6, 0xa9, "6ba48f16dbb322fbe609cc04be0951a6db0f4936d7782a8f9c0e6598d96047998d672b1edc45ca2bec505fc227c4cb9ccdc4fc731355b24b36d6649da8e43707656eb83e379599da428fe8d18a09b73c1fb34dd8eb812c6a7dd0f4e401607b510fb16f127d597e507a0c14ed378d5399a31953affd222b29403b9a1583b495c8de9d723a85626695dccd0e0f387bb044f57482c8aacd799b51d98fd0eab5dbf155b5a4be49721b5d23"}]}, @NL80211_ATTR_BEACON_HEAD={0x352, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4212}, @device_a, @device_a, @initial, {0xc, 0x3}}, 0x101, @default, 0x2c4, @val={0x0, 0x7, @random="5d627b2872e53a"}, @val={0x1, 0x7, [{0x12}, {0x51}, {0x16}, {0x1b, 0x1}, {0x16, 0x1}, {0x9}, {0x5}]}, @void, @void, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x0, 0x38, 0xf1}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x2, 0x55, 0x23, 0x8}}, [{0xdd, 0xcf, "2f3fcf2321e4f68fb0f74e2e26e1f51305ec83f2a8dd7dac84bcb29c57d1d70833f4ee300aa5298f71b9da05b44857fde7e63ad1e49b2d4bc487939ba6ca04be6a62186e37c3cd8b74d8eaf190091b28e2c6b535f8b51b0a8dbaf7fe33fa5ecd880636977f7ba5d29b4b103a4d41ecb9fddfdd249c44dac6c174e1112502b756620af5614c99f3451a1ca0c6b42292f96e164312206da440f8df2767a3f2f101659dbb86c84d97bca3f67ef16322a97fe16c7fe4e159ec25bc815e32681fb2d63f643c88e3f4f4f80fcf96323b452a"}, {0xdd, 0xaa, "46b369a92db06a55c9c0cbcec5018f5458e65130c61b3c1cc596f6d3e8afc3d4ece4bf1d58c68c284992831514e4965633dd73ad9ccf4455205ff35139270b9f514c7d9f34709cc4e586bc797b992d589c8114d407bee71ed13650ec99b6a5a52f7392713a065c80c91280658c4c716aaee49e5e367f2554587e5182bb59740f2161e15221f1386766de1df861a75d210dfc4f699752767c02125eec1c6bd5a3ac92ed10784aec84ebb5"}, {0xdd, 0x87, "1904e05e81b16d9791fe768bcc4a9312ed90144bacd97db09dbc4923ed97b4f8bfe1ad73a68e48e08a7b04bd8c24f017dccf737d7642de3b5522d0720a57a589f7c10a917e791f3bf1ad3c9851eb176e4fc10baddcd982c05b472a169306b16016af482ca57b21e910b8f0ea832670a4cb6ada30a43c7aecdbc4053caefe0a0fc618cb0123d5fe"}, {0xdd, 0xfc, "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"}]}}, @NL80211_ATTR_PROBE_RESP={0x17f, 0x91, "d1a889f03298b0e37dc2248e8e7e32f0385056859226cfa6f236c7bdd663d06b651c4aa76295962ddb7cf2247f41f596b574f1d527d6e7a64ac31476dcaa6c273f004a048950368fd24adefaa3c8f77d3dfe29deeddb41d0dcb4c017ecdce3db7fa090e78aeb90b0e17a477e95ce0e53073bac39bf2f61288be28bfe39e05f69467eec99f590376729721dfc69ceda09058bece90bae2350a2535edeaf711062b452a8c78c710b64d59098428cdd8559ac595939fb929332d6f3fdc9e9468562dda3ed93438f98f80d6a329d5b8de85439055d6267361fe09a59e5e473f15c97516691ffe5a4634677266b84249bd5877eae578c7da198ea95f3aadde7ad6c7b7e8df4417de69da3d72d295860444d4d445a9f4afbc3162902b8b3d2ca27cf1e08a69f17914002a929b3920fe8ecf6d61cc532f9f08e3a124ec48daa146ac51c065a3f5caf587a2320379fd87c18596a324fc663d08b740b8ea357fffa2be196fd832d1426afd9839f8aba8db41cfbd4b3c8d8dfc94e1cdff29ba5"}, @NL80211_ATTR_BEACON_HEAD={0x1b5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @from_mac, {0x6, 0x843}, @value=@ver_80211n={0x0, 0x7ff8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x1, @random, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x7c, 0xb}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x9, 0x20}}, @val={0x76, 0x6, {0x98, 0x5, 0xf, 0x2}}, [{0xdd, 0x77, "6cf756c7711b72b82a13bb3ff9fb806ef1cdb332e67d2d1c19e75308c03af555ccba674891f0858860f1fd6f3b74607bf75be4bf2401a8f66b313521360021bb9522353c7f1b40918d774f8dbca0235416735d918f6459e233c3792c0e708f38baee018bd7f645721f175b77c82d9b6f95cc8337f74fd7"}, {0xdd, 0xe0, "18f2801d7c37d4508beb49ec526be7e7846be8dd8e7f70422caabe053eef3272e19bb20cc4691b901e32657086e7d8468f6b7052b4ccfd6286c2d6bfb1b9fc269395856fb692e5e892b34b34d44d7c96ebcf7167df80f0f9be245f5873c03e9eee0548ad080b8c3363cc290cbdb0378953755d9d3145b19ee175b3a6cc5f355bc554120285367141dc8d8e2af6e777c929b9e18f1fb5289921af28b569bffc84b2063bbd11aa70aa8185fd0e4d4c24bf876b9a003c9e7f804d76307de75ba52623f760c9ae72cabce88fd38fc6c4fdc67091d18e7a45dcccc10eb89774abc3dc"}]}}]}, 0x764}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c0700000000160000000000000000"], 0x38}, 0x0) close(0x3) r4 = accept(r0, 0x0, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r4, 0x8, 0x7fffffff, 0x4}) 0s ago: executing program 0 (id=10700): r0 = socket(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4(r0, &(0x7f0000000140)=@un=@abs, &(0x7f0000000080)=0x80, 0x80000) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) kernel console output (not intermixed with test programs): de [ 597.690828][ T3775] gretap0: left promiscuous mode [ 597.696206][ T3775] gretap0: left allmulticast mode [ 597.707694][ T3775] bond0: left promiscuous mode [ 597.715225][ T3775] bond_slave_0: left promiscuous mode [ 597.734271][ T3775] bond_slave_1: left promiscuous mode [ 597.765856][ T3775] bridge_slave_1: left promiscuous mode [ 597.784868][ T3775] bond0: left allmulticast mode [ 597.790118][ T3775] bond_slave_0: left allmulticast mode [ 597.795985][ T3775] bond_slave_1: left allmulticast mode [ 597.802323][ T3775] bridge_slave_1: left allmulticast mode [ 597.811252][ T3775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.832384][ T3791] netlink: 'syz.2.8910': attribute type 24 has an invalid length. [ 597.867235][ T3524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.015333][ T3524] veth0_vlan: entered promiscuous mode [ 598.090546][ T3524] veth1_vlan: entered promiscuous mode [ 598.186470][ T3524] veth0_macvtap: entered promiscuous mode [ 598.204752][ T3524] veth1_macvtap: entered promiscuous mode [ 598.257753][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.301808][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.447997][T14032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.473179][T14032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.503947][T14032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.547211][T14032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.690402][T14032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.703588][T14032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.733575][ T3847] __nla_validate_parse: 15 callbacks suppressed [ 598.733597][ T3847] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8928'. [ 598.736959][ T3836] batadv1: entered allmulticast mode [ 598.779681][T23283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.801929][T23283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.906491][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8930'. [ 599.037827][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8931'. [ 599.047547][ T3865] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8931'. [ 599.059253][ T3859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8931'. [ 599.068336][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8932'. [ 599.084121][ T3859] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8931'. [ 599.098101][ T3869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8934'. [ 599.660681][ T5870] Bluetooth: hci2: command tx timeout [ 599.728937][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8949'. [ 600.377091][ T3959] lo speed is unknown, defaulting to 1000 [ 600.390474][ T3959] lo speed is unknown, defaulting to 1000 [ 600.530751][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8962'. [ 600.697833][ T3969] netlink: 'syz.3.8963': attribute type 1 has an invalid length. [ 601.033772][ T3959] lo speed is unknown, defaulting to 1000 [ 601.580743][ T11] block nbd3: Possible stuck request ffff888025340000: control (read@0,4096B). Runtime 270 seconds [ 601.748364][ T5870] Bluetooth: hci2: command tx timeout [ 601.905761][ T4044] netlink: 'syz.4.8981': attribute type 12 has an invalid length. [ 601.933845][ T4044] netlink: 'syz.4.8981': attribute type 29 has an invalid length. [ 601.963055][ T4044] netlink: 'syz.4.8981': attribute type 3 has an invalid length. [ 602.585150][ T4107] tipc: Enabled bearer , priority 0 [ 602.594600][ T4107] xfrm0: entered promiscuous mode [ 602.600358][ T4107] xfrm0: entered allmulticast mode [ 602.615060][ T4107] tipc: Resetting bearer [ 602.653397][ T4106] tipc: Disabling bearer [ 603.760259][ T4199] netlink: 'syz.1.9026': attribute type 6 has an invalid length. [ 603.913612][ T4204] netlink: 'syz.3.9028': attribute type 1 has an invalid length. [ 604.211912][ T4215] syzkaller1: entered promiscuous mode [ 604.217436][ T4215] syzkaller1: entered allmulticast mode [ 604.412634][ T4232] __nla_validate_parse: 11 callbacks suppressed [ 604.412658][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9037'. [ 604.485257][ T4240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9038'. [ 604.537094][ T4245] netlink: 'syz.2.9039': attribute type 4 has an invalid length. [ 604.596535][ T4252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.634528][ T4252] netlink: 384 bytes leftover after parsing attributes in process `syz.0.9041'. [ 604.645117][ T4257] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 604.689698][ T4259] syzkaller1: entered promiscuous mode [ 604.696020][ T4259] syzkaller1: entered allmulticast mode [ 604.704473][ T4259] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 604.764018][ T4264] rdma_rxe: rxe_newlink: failed to add lo [ 604.807685][ T4264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.946735][ T4275] lo speed is unknown, defaulting to 1000 [ 604.971781][ T4275] lo speed is unknown, defaulting to 1000 [ 604.993670][ T4284] IPVS: length: 191 != 24 [ 605.011215][ T4283] GUP no longer grows the stack in syz.2.9048 (4283): 200000003000-20000000a000 (200000001000) [ 605.074456][ T4283] CPU: 0 UID: 0 PID: 4283 Comm: syz.2.9048 Not tainted syzkaller #0 PREEMPT(full) [ 605.074489][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.074508][ T4283] Call Trace: [ 605.074517][ T4283] [ 605.074526][ T4283] dump_stack_lvl+0x189/0x250 [ 605.074559][ T4283] ? rcu_is_watching+0x15/0xb0 [ 605.074582][ T4283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.074608][ T4283] ? __pfx__printk+0x10/0x10 [ 605.074637][ T4283] ? find_vma+0xe7/0x160 [ 605.074665][ T4283] ? unwind_next_frame+0xa5/0x2390 [ 605.074693][ T4283] ? unwind_next_frame+0xa5/0x2390 [ 605.074716][ T4283] ? rcu_is_watching+0x15/0xb0 [ 605.074741][ T4283] __get_user_pages+0x24d0/0x2ce0 [ 605.074766][ T4283] ? rcu_is_watching+0x15/0xb0 [ 605.074789][ T4283] ? lock_release+0x4b/0x3e0 [ 605.074821][ T4283] ? __gup_longterm_locked+0xc68/0x1660 [ 605.074858][ T4283] ? __gup_longterm_locked+0xc68/0x1660 [ 605.074889][ T4283] __gup_longterm_locked+0xde9/0x1660 [ 605.074926][ T4283] ? sanity_check_pinned_pages+0x123a/0x1300 [ 605.074958][ T4283] gup_fast_fallback+0x1e6a/0x2010 [ 605.075005][ T4283] ? __pfx_gup_fast_fallback+0x10/0x10 [ 605.075031][ T4283] ? stack_trace_save+0x9c/0xe0 [ 605.075056][ T4283] ? __pfx_stack_trace_save+0x10/0x10 [ 605.075089][ T4283] ? pin_user_pages_fast+0x4d/0xb0 [ 605.075118][ T4283] iov_iter_extract_pages+0x35a/0x5e0 [ 605.075150][ T4283] extract_iter_to_sg+0xe46/0x24e0 [ 605.075194][ T4283] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 605.075239][ T4283] ? __asan_memset+0x22/0x50 [ 605.075264][ T4283] af_alg_get_rsgl+0x436/0x810 [ 605.075302][ T4283] aead_recvmsg+0x4cc/0x13f0 [ 605.075346][ T4283] ? __pfx_aead_recvmsg+0x10/0x10 [ 605.075387][ T4283] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 605.075410][ T4283] ? security_socket_recvmsg+0x7e/0x2e0 [ 605.075436][ T4283] ? __pfx_aead_recvmsg+0x10/0x10 [ 605.075466][ T4283] sock_recvmsg_nosec+0x183/0x1c0 [ 605.075500][ T4283] ____sys_recvmsg+0x3aa/0x460 [ 605.075531][ T4283] ? __pfx_____sys_recvmsg+0x10/0x10 [ 605.075564][ T4283] ? import_iovec+0x74/0xa0 [ 605.075590][ T4283] ___sys_recvmsg+0x1b5/0x510 [ 605.075616][ T4283] ? __pfx____sys_recvmsg+0x10/0x10 [ 605.075639][ T4283] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 605.075672][ T4283] ? __fget_files+0x2a/0x420 [ 605.075714][ T4283] ? rcu_is_watching+0x15/0xb0 [ 605.075736][ T4283] ? lock_release+0x4b/0x3e0 [ 605.075768][ T4283] ? __might_fault+0xcc/0x130 [ 605.075800][ T4283] do_recvmmsg+0x307/0x770 [ 605.075828][ T4283] ? __pfx_do_recvmmsg+0x10/0x10 [ 605.075858][ T4283] ? __pfx_do_futex+0x10/0x10 [ 605.075892][ T4283] __x64_sys_recvmmsg+0x190/0x240 [ 605.075917][ T4283] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 605.075938][ T4283] ? rcu_is_watching+0x15/0xb0 [ 605.075961][ T4283] ? rcu_is_watching+0x15/0xb0 [ 605.075984][ T4283] do_syscall_64+0xfa/0x3b0 [ 605.076018][ T4283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.076040][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 605.076066][ T4283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.076097][ T4283] RIP: 0033:0x7f0ecfb8ebe9 [ 605.076118][ T4283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.076139][ T4283] RSP: 002b:00007f0ed098c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 605.076163][ T4283] RAX: ffffffffffffffda RBX: 00007f0ecfdb6090 RCX: 00007f0ecfb8ebe9 [ 605.076179][ T4283] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000e [ 605.076194][ T4283] RBP: 00007f0ecfc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.076208][ T4283] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 605.076222][ T4283] R13: 00007f0ecfdb6128 R14: 00007f0ecfdb6090 R15: 00007ffdc11dc4f8 [ 605.076249][ T4283] [ 605.216203][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9052'. [ 605.543492][ T4299] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9054'. [ 605.570572][ T4299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9054'. [ 605.597112][ T4275] lo speed is unknown, defaulting to 1000 [ 605.614562][ T4302] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9055'. [ 605.712474][ T4308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9057'. [ 605.742726][ T4308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9057'. [ 606.207095][ T4339] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9067'. [ 606.479920][ T4358] netlink: 'syz.0.9074': attribute type 29 has an invalid length. [ 606.520434][ T4362] netlink: 'syz.0.9074': attribute type 29 has an invalid length. [ 606.553530][ T4358] netlink: 'syz.0.9074': attribute type 29 has an invalid length. [ 606.573310][ T4356] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode [ 606.590589][ T4362] netlink: 'syz.0.9074': attribute type 29 has an invalid length. [ 606.646081][ T4375] pim6reg: entered allmulticast mode [ 606.673094][ T4361] pim6reg: left allmulticast mode [ 606.736541][ T4380] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 606.774353][ T4384] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 606.785554][ T4384] openvswitch: netlink: Duplicate key (type 0). [ 606.824154][ T4387] syzkaller1: entered promiscuous mode [ 606.845409][ T4387] syzkaller1: entered allmulticast mode [ 606.967414][ T4396] syzkaller1: entered promiscuous mode [ 606.984276][ T4396] syzkaller1: entered allmulticast mode [ 607.034887][ T4408] bond10: entered promiscuous mode [ 607.040689][ T4408] bond10: entered allmulticast mode [ 607.046674][ T4408] 8021q: adding VLAN 0 to HW filter on device bond10 [ 607.055395][ T4407] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 607.141025][ T4414] tipc: Started in network mode [ 607.146155][ T4414] tipc: Node identity 22bffbd56fd3, cluster identity 4711 [ 607.152700][ T4407] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 607.153775][ T4414] tipc: Enabled bearer , priority 0 [ 607.163011][ T6056] IPVS: starting estimator thread 0... [ 607.169880][ T4414] syzkaller0: entered promiscuous mode [ 607.178826][ T4414] syzkaller0: entered allmulticast mode [ 607.191184][ T4414] tipc: Resetting bearer [ 607.201346][ T4414] validate_nla: 4 callbacks suppressed [ 607.201367][ T4414] netlink: 'syz.3.9088': attribute type 3 has an invalid length. [ 607.216134][ T4414] netlink: 'syz.3.9088': attribute type 1 has an invalid length. [ 607.232092][ T4412] tipc: Resetting bearer [ 607.254262][ T4412] tipc: Disabling bearer [ 607.268335][ T4416] IPVS: using max 40 ests per chain, 96000 per kthread [ 607.663514][ T4451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.690404][ T4451] sctp: [Deprecated]: syz.4.9096 (pid 4451) Use of int in maxseg socket option. [ 607.690404][ T4451] Use struct sctp_assoc_value instead [ 607.883303][ T4459] gtp0: entered promiscuous mode [ 607.895045][ T4462] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 608.060851][ T4471] "syz.3.9104" (4471) uses obsolete ecb(arc4) skcipher [ 608.086815][ T4469] tipc: Enabled bearer , priority 0 [ 608.134654][ T4469] tipc: Resetting bearer [ 608.164524][ T4465] tipc: Disabling bearer [ 608.184099][T13084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 608.193453][T13084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 608.201447][T13084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 608.209746][T13084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 608.217463][T13084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 608.249237][ T4476] lo speed is unknown, defaulting to 1000 [ 608.256194][ T4476] lo speed is unknown, defaulting to 1000 [ 608.405003][ T4488] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 608.432586][ T4486] netlink: 'syz.3.9109': attribute type 2 has an invalid length. [ 608.447952][ T4486] netlink: 'syz.3.9109': attribute type 8 has an invalid length. [ 608.562958][ T4490] openvswitch: netlink: Missing key (keys=40, expected=100) [ 608.665746][ T4476] lo speed is unknown, defaulting to 1000 [ 608.690057][ T4497] Bluetooth: MGMT ver 1.23 [ 608.894018][ T4509] tipc: Enabling of bearer rejected, failed to enable media [ 609.284000][ T4476] chnl_net:caif_netlink_parms(): no params data found [ 609.489738][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.524022][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.531904][ T4476] bridge_slave_0: entered allmulticast mode [ 609.542034][ T4476] bridge_slave_0: entered promiscuous mode [ 609.555305][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.563714][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.576152][ T4476] bridge_slave_1: entered allmulticast mode [ 609.593052][ T4476] bridge_slave_1: entered promiscuous mode [ 609.678079][ T4545] syz_tun: entered allmulticast mode [ 609.683922][ T4540] syz_tun: left allmulticast mode [ 609.701508][ T4476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.729501][ T4476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.739509][ T4552] netlink: 'syz.0.9124': attribute type 21 has an invalid length. [ 609.765275][ T4552] __nla_validate_parse: 18 callbacks suppressed [ 609.765296][ T4552] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9124'. [ 609.796591][ T4547] netlink: 'syz.0.9124': attribute type 21 has an invalid length. [ 609.825029][ T4547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9124'. [ 609.852253][ T4476] team0: Port device team_slave_0 added [ 609.870319][ T4476] team0: Port device team_slave_1 added [ 610.003631][ T4573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9133'. [ 610.003870][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.034827][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.066503][ T4476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.077861][ T4574] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9133'. [ 610.098682][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.105700][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.148363][ T4476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.208635][ T9421] IPVS: starting estimator thread 0... [ 610.211076][ T4580] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 610.230050][ T4476] hsr_slave_0: entered promiscuous mode [ 610.236723][ T4476] hsr_slave_1: entered promiscuous mode [ 610.243213][ T4476] debugfs: 'hsr0' already exists in 'hsr' [ 610.249908][ T4476] Cannot create hsr debugfs directory [ 610.298839][ T5870] Bluetooth: hci4: command tx timeout [ 610.309067][ T4589] IPVS: using max 40 ests per chain, 96000 per kthread [ 610.575304][ T4605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9141'. [ 610.670556][ T4609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9143'. [ 610.708737][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9143'. [ 610.721375][ T4476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 610.738979][ T4476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 610.759188][ T4613] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9145'. [ 610.766798][ T4609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9143'. [ 610.790756][ T4476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 610.812846][ T4476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 610.863608][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9147'. [ 611.055496][ T4476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.067115][ T4641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.075577][ T4476] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.093527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.100725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.138249][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.145433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.224030][ T4654] netlink: 'syz.2.9154': attribute type 15 has an invalid length. [ 611.232359][ T4655] netlink: 'syz.2.9154': attribute type 15 has an invalid length. [ 611.482875][ T4476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.542285][ T4476] veth0_vlan: entered promiscuous mode [ 611.555011][ T4476] veth1_vlan: entered promiscuous mode [ 611.603478][ T4476] veth0_macvtap: entered promiscuous mode [ 611.616124][ T4476] veth1_macvtap: entered promiscuous mode [ 611.638665][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.659947][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.675347][T14026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.685775][T14026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.697577][T14026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.710217][T14026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.855896][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.890440][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.035628][T23283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.054457][T23283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.378680][ T5870] Bluetooth: hci4: command tx timeout [ 612.730725][ T4736] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 613.020828][ T4752] 8021q: VLANs not supported on vxcan1 [ 613.166188][ T4757] netlink: 'syz.1.9190': attribute type 1 has an invalid length. [ 613.233883][T13084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.241549][T13084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.249507][T13084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.259071][T13084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.266718][T13084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 613.320723][ T4763] lo speed is unknown, defaulting to 1000 [ 613.327451][ T4763] lo speed is unknown, defaulting to 1000 [ 613.524141][ T4777] netlink: 'syz.1.9193': attribute type 1 has an invalid length. [ 613.646487][ T4763] lo speed is unknown, defaulting to 1000 [ 613.879510][ T4793] tipc: Started in network mode [ 613.884999][ T4793] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 613.894685][ T4793] tipc: Enabled bearer , priority 10 [ 614.053722][ T4763] chnl_net:caif_netlink_parms(): no params data found [ 614.180266][ T4818] netlink: zone id is out of range [ 614.185739][ T4818] netlink: del zone limit has 4 unknown bytes [ 614.365289][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.377599][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.385722][ T4763] bridge_slave_0: entered allmulticast mode [ 614.396618][ T4763] bridge_slave_0: entered promiscuous mode [ 614.405188][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.421796][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.433293][ T4763] bridge_slave_1: entered allmulticast mode [ 614.442086][ T4763] bridge_slave_1: entered promiscuous mode [ 614.460549][T13084] Bluetooth: hci4: command tx timeout [ 614.575047][ T4763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.622954][ T4763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.693470][ T4763] team0: Port device team_slave_0 added [ 614.696528][ T4860] netlink: 'syz.3.9215': attribute type 1 has an invalid length. [ 614.706301][ T4763] team0: Port device team_slave_1 added [ 614.738423][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.745707][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.773295][ T4763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.792962][ T4763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.800852][ T4763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.827545][ T4763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.888025][ T4763] hsr_slave_0: entered promiscuous mode [ 614.911054][ T4763] hsr_slave_1: entered promiscuous mode [ 614.917606][ T4763] debugfs: 'hsr0' already exists in 'hsr' [ 614.924107][ T4763] Cannot create hsr debugfs directory [ 614.931400][ T4866] __nla_validate_parse: 16 callbacks suppressed [ 614.931423][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9217'. [ 614.932960][ T4868] netlink: 'syz.3.9218': attribute type 1 has an invalid length. [ 615.012105][ T6056] tipc: Node number set to 4269801514 [ 615.055919][ T4872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9220'. [ 615.090595][ T4874] bridge_slave_0: left allmulticast mode [ 615.096405][ T4874] bridge_slave_0: left promiscuous mode [ 615.103684][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.114038][ T4874] bridge_slave_1: left allmulticast mode [ 615.120064][ T4874] bridge_slave_1: left promiscuous mode [ 615.125852][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.151806][ T4874] bond0: (slave bond_slave_0): Releasing backup interface [ 615.208065][ T4874] bond0: (slave bond_slave_1): Releasing backup interface [ 615.256098][ T4874] team0: Port device team_slave_0 removed [ 615.302786][ T4874] team0: Port device team_slave_1 removed [ 615.310791][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.318356][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.338618][T13084] Bluetooth: hci3: command tx timeout [ 615.346468][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.360536][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.522499][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9227'. [ 615.809384][ T4911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9231'. [ 615.855350][ T4763] team0: Port device netdevsim0 removed [ 616.034653][ T4763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 616.062923][ T4763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.074801][ T4763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.085388][ T4763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 616.150063][ T4935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9238'. [ 616.234191][ T4763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.268747][ T4763] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.280728][T23283] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.287909][T23283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.324841][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.332041][T14026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.456071][ T4950] openvswitch: netlink: Flow key attribute not present in set flow. [ 616.466294][ T4763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.492227][ T4950] netlink: 'syz.4.9243': attribute type 3 has an invalid length. [ 616.504591][ T4763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.506985][ T4950] netlink: 'syz.4.9243': attribute type 1 has an invalid length. [ 616.549268][T13084] Bluetooth: hci4: command tx timeout [ 616.563808][ T4956] netlink: 'syz.4.9243': attribute type 5 has an invalid length. [ 616.563812][ T4950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.563833][ T4956] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9243'. [ 616.593522][T23283] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.602599][T23283] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.622414][T23283] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.657698][T23283] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.802345][ T4970] syzkaller1: entered promiscuous mode [ 616.807879][ T4970] syzkaller1: entered allmulticast mode [ 616.961921][ T4980] netlink: 'syz.4.9252': attribute type 29 has an invalid length. [ 616.974356][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9252'. [ 617.092408][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9254'. [ 617.105867][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9254'. [ 617.173563][ T4763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.322592][ T4763] veth0_vlan: entered promiscuous mode [ 617.394544][ T4763] veth1_vlan: entered promiscuous mode [ 617.429149][T13084] Bluetooth: hci3: command tx timeout [ 617.508026][ T4763] veth0_macvtap: entered promiscuous mode [ 617.555458][ T4763] veth1_macvtap: entered promiscuous mode [ 617.565978][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9262'. [ 617.615006][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.698092][ T4763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.714758][T14026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.730326][T14026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.784921][T23278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.805939][T23278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.862327][T14026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.884814][T14026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.934669][T14032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.955519][T14032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.063521][ T5041] team_slave_0: entered promiscuous mode [ 618.069287][ T5041] team_slave_1: entered promiscuous mode [ 618.273295][ T5064] Bluetooth: MGMT ver 1.23 [ 618.280942][ T5063] bridge_slave_1: left allmulticast mode [ 618.286777][ T5063] bridge_slave_1: left promiscuous mode [ 618.292821][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.326302][ T5063] bridge_slave_0: left allmulticast mode [ 618.335018][ T5063] bridge_slave_0: left promiscuous mode [ 618.350116][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.424781][ T5067] batadv_slave_1: entered promiscuous mode [ 618.432867][ T5067] batadv_slave_0: entered promiscuous mode [ 618.446342][ T5067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.457410][ T5067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.474833][ T5067] debugfs: 'hsr1' already exists in 'hsr' [ 618.482299][ T5067] Cannot create hsr debugfs directory [ 618.503630][ T5074] bond3: entered promiscuous mode [ 618.508883][ T5074] bond3: entered allmulticast mode [ 618.514585][ T5074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.499322][T13084] Bluetooth: hci3: command tx timeout [ 619.849746][ T5174] netlink: 'syz.3.9307': attribute type 32 has an invalid length. [ 619.889068][ T5174] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 619.917762][ T5184] netlink: 'syz.3.9307': attribute type 32 has an invalid length. [ 619.944886][ T5184] __nla_validate_parse: 19 callbacks suppressed [ 619.944907][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9307'. [ 619.991122][ T5184] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 620.391653][ T5225] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9319'. [ 620.527679][ T5241] netlink: 'syz.1.9322': attribute type 1 has an invalid length. [ 620.583638][ T5241] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 620.600710][ T5241] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 620.670010][ T5254] gretap1: entered promiscuous mode [ 620.894281][ T5265] syz_tun: entered allmulticast mode [ 620.906347][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'. [ 620.983679][ T5275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.118001][ T5280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9336'. [ 621.234000][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9340'. [ 621.331556][ T5309] macvlan2: entered promiscuous mode [ 621.336924][ T5309] macvlan2: entered allmulticast mode [ 621.344219][ T5309] veth1_to_bond: entered promiscuous mode [ 621.352538][ T5309] veth1_to_bond: entered allmulticast mode [ 621.361840][ T5309] team0: Port device macvlan2 added [ 621.411024][ T5312] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9343'. [ 621.431546][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9347'. [ 621.449213][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9347'. [ 621.467895][ T5318] netlink: 348 bytes leftover after parsing attributes in process `syz.3.9347'. [ 621.513544][ T5320] bond0: (slave gretap0): Error: Device type is different from other slaves [ 621.578961][T13084] Bluetooth: hci3: command tx timeout [ 621.734442][ T5340] lo speed is unknown, defaulting to 1000 [ 621.750437][ T5340] lo speed is unknown, defaulting to 1000 [ 621.935957][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9356'. [ 622.036277][ T5351] syz_tun: entered promiscuous mode [ 622.072328][ T5351] batadv_slave_1: entered promiscuous mode [ 622.098034][ T5351] debugfs: 'hsr1' already exists in 'hsr' [ 622.120450][ T5351] Cannot create hsr debugfs directory [ 622.133047][ T5363] xt_policy: too many policy elements [ 622.146091][T14029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.198233][T14029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.423990][ T5371] syzkaller0: entered promiscuous mode [ 622.441187][ T5371] syzkaller0: entered allmulticast mode [ 622.498564][ T5377] nbd12: detected capacity change from 0 to 549764202496 [ 622.516900][T13084] block nbd12: Receive control failed (result -32) [ 622.611366][ T5340] lo speed is unknown, defaulting to 1000 [ 622.904251][ T5413] netlink: ct family unspecified [ 622.910483][ T5413] openvswitch: netlink: Actions may not be safe on all matching packets [ 623.537713][ T5448] tipc: Started in network mode [ 623.551452][ T5448] tipc: Node identity ae36e50e28, cluster identity 4711 [ 623.561910][ T5448] tipc: Enabled bearer , priority 0 [ 623.586579][ T5455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.625654][ T5443] syzkaller0: entered promiscuous mode [ 623.642032][ T5443] syzkaller0: entered allmulticast mode [ 623.685588][ T5443] tipc: Resetting bearer [ 623.790173][ T5442] tipc: Resetting bearer [ 623.836051][ T5442] tipc: Disabling bearer [ 623.890675][ T5481] netlink: 'syz.1.9392': attribute type 2 has an invalid length. [ 623.908306][ T5481] netlink: 'syz.1.9392': attribute type 8 has an invalid length. [ 623.951912][ T5487] bond0: option ad_select: unable to set because the bond device is up [ 623.982902][ T11] block nbd6: Possible stuck request ffff88802581e000: control (read@0,4096B). Runtime 270 seconds [ 624.099547][ T5500] netlink: 'syz.2.9397': attribute type 11 has an invalid length. [ 624.311690][ T5513] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 624.620577][ T11] block nbd8: Possible stuck request ffff8880258f5080: control (read@0,4096B). Runtime 210 seconds [ 624.633281][ T55] block nbd7: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 240 seconds [ 624.645670][ T55] block nbd7: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 240 seconds [ 624.658067][ T55] block nbd7: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 240 seconds [ 624.669500][ T55] block nbd7: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 240 seconds [ 625.155274][ T5570] __nla_validate_parse: 6 callbacks suppressed [ 625.155291][ T5570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9413'. [ 625.250429][ T5574] sctp: [Deprecated]: syz.4.9415 (pid 5574) Use of int in max_burst socket option deprecated. [ 625.250429][ T5574] Use struct sctp_assoc_value instead [ 625.271403][ T5574] sctp: [Deprecated]: syz.4.9415 (pid 5574) Use of int in max_burst socket option deprecated. [ 625.271403][ T5574] Use struct sctp_assoc_value instead [ 625.287067][ T5574] sctp: [Deprecated]: syz.4.9415 (pid 5574) Use of int in max_burst socket option deprecated. [ 625.287067][ T5574] Use struct sctp_assoc_value instead [ 625.303363][ T5574] sctp: [Deprecated]: syz.4.9415 (pid 5574) Use of int in max_burst socket option deprecated. [ 625.303363][ T5574] Use struct sctp_assoc_value instead [ 625.606757][ T5589] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 625.693390][ T5602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9421'. [ 625.890883][ T5616] pim6reg1: entered promiscuous mode [ 625.896247][ T5616] pim6reg1: entered allmulticast mode [ 625.980405][ T5870] Bluetooth: hci3: command 0x0405 tx timeout [ 626.025420][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9425'. [ 626.076051][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.170047][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9432'. [ 626.198825][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.401778][ T5649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.410957][ T5649] team0: Failed to send port change of device bond4 via netlink (err -105) [ 626.420659][ T5649] team0: Failed to send options change via netlink (err -105) [ 626.428434][ T5649] team0: Port device bond4 added [ 626.436887][T23282] team0: Failed to send port change of device bond4 via netlink (err -105) [ 626.485514][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 626.489880][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 626.504735][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 626.514606][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 626.526239][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 626.535915][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 626.847639][ T5673] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 626.884077][ T5676] lo speed is unknown, defaulting to 1000 [ 626.915718][ T5673] ip_vti0: entered promiscuous mode [ 626.936409][ T5673] ip_vti0: entered allmulticast mode [ 626.996183][ T5676] lo speed is unknown, defaulting to 1000 [ 627.054038][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 627.060563][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 627.067082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.074955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.082891][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.090761][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.098716][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.106579][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.114534][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.122419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.130354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.138262][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.146231][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.154101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.162040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.169913][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.177831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.185707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.193658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.201529][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.209470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.217379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.225326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.233209][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.241144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.249022][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.256932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.264810][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.272754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.280630][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.288566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.296431][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.304363][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.312223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.320145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.327980][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.335905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.343786][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.351721][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.359596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.367521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.375397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.383346][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.391224][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.399170][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.407003][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.414945][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.422816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.430771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.438643][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.446547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.454429][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.462362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.470229][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.478168][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.486006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.493939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.501817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.509922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.517766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.525702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.533582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.541616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.549482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.557391][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.565271][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.573206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.581071][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.589005][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.596834][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.604720][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.612590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.620588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 627.628459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 627.801700][ T5695] geneve3: entered promiscuous mode [ 627.807060][ T5695] geneve3: entered allmulticast mode [ 627.829904][T14023] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.839601][T14023] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.847836][T14023] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.866236][T14023] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.963889][ T5704] netlink: 'syz.2.9450': attribute type 2 has an invalid length. [ 627.972590][ T5676] lo speed is unknown, defaulting to 1000 [ 628.276014][ T5729] netlink: 'syz.3.9458': attribute type 8 has an invalid length. [ 628.353293][ T5729] vlan1: entered promiscuous mode [ 628.479161][ T5744] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 628.502563][ T5744] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 628.541860][T13084] Bluetooth: hci3: command 0x0405 tx timeout [ 628.627193][ T5750] tipc: Enabled bearer , priority 0 [ 628.662240][ T5750] netlink: 'syz.3.9465': attribute type 1 has an invalid length. [ 629.034927][ T5782] openvswitch: netlink: Message has 20 unknown bytes. [ 629.050268][ T5782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.117264][ T5789] bridge_slave_0: default FDB implementation only supports local addresses [ 629.210833][ T5793] 8021q: VLANs not supported on wg1 [ 629.262320][ T5799] netlink: 'syz.4.9482': attribute type 2 has an invalid length. [ 629.284954][ T5799] netlink: 'syz.4.9482': attribute type 8 has an invalid length. [ 629.340997][ T5745] tipc: Disabling bearer [ 629.528023][ T5811] netlink: 'syz.3.9486': attribute type 2 has an invalid length. [ 629.594384][ T5817] mac80211_hwsim hwsim101 ÿ: renamed from wlan1 (while UP) [ 629.694154][ T5822] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 629.904045][ T5839] netlink: 'syz.3.9497': attribute type 23 has an invalid length. [ 630.737868][ T5876] netlink: 'syz.2.9505': attribute type 1 has an invalid length. [ 630.746101][ T5876] __nla_validate_parse: 33 callbacks suppressed [ 630.746120][ T5876] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.9505'. [ 630.814304][ T5876] openvswitch: netlink: Message has 4 unknown bytes. [ 630.837669][ T5876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.850282][ T5886] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9507'. [ 631.017837][ T5904] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9510'. [ 631.027847][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9511'. [ 631.028742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.174766][ T5925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9515'. [ 631.254568][ T5942] netlink: 'syz.1.9517': attribute type 12 has an invalid length. [ 631.280546][ T5942] netlink: 'syz.1.9517': attribute type 12 has an invalid length. [ 631.327566][ T5946] dvmrp0: entered allmulticast mode [ 631.336819][ T5946] dvmrp0: left allmulticast mode [ 631.444271][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9521'. [ 631.550742][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9525'. [ 631.566733][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9525'. [ 631.577453][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9525'. [ 631.587525][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9525'. [ 631.639889][ T5962] pim6reg1: entered promiscuous mode [ 631.645443][ T5962] pim6reg1: entered allmulticast mode [ 631.659413][ T11] block nbd3: Possible stuck request ffff888025340000: control (read@0,4096B). Runtime 300 seconds [ 631.665590][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 631.886598][ T5973] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 632.570389][ T31] audit: type=1800 audit(1756027352.834:16): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9549" name="memory.events" dev="tmpfs" ino=3033 res=0 errno=0 [ 632.593554][ T6038] team_slave_0: entered allmulticast mode [ 632.771355][ T6059] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 633.222622][ T6097] validate_nla: 39 callbacks suppressed [ 633.222645][ T6097] netlink: 'syz.0.9566': attribute type 10 has an invalid length. [ 633.288387][ T6094] netlink: 'syz.0.9566': attribute type 10 has an invalid length. [ 633.319051][ T6103] netlink: 'syz.3.9570': attribute type 1 has an invalid length. [ 633.337395][ T6103] tc_dump_action: action bad kind [ 633.371242][ T6105] tc_dump_action: action bad kind [ 633.451080][ T6102] veth0_to_team: entered promiscuous mode [ 633.457006][ T6102] veth0_to_team: entered allmulticast mode [ 633.492281][ T6121] batadv2: entered allmulticast mode [ 633.559624][ T6128] netlink: 'syz.1.9574': attribute type 1 has an invalid length. [ 633.582901][ T6125] delete_channel: no stack [ 633.744457][ T6137] macvlan2: entered promiscuous mode [ 633.760663][ T6137] macvlan2: entered allmulticast mode [ 633.769197][ T6137] veth1_to_bond: entered allmulticast mode [ 633.775190][ T6137] veth1_to_bond: entered promiscuous mode [ 633.787455][ T6137] team0: Port device macvlan2 added [ 633.794657][ T6139] veth0: entered promiscuous mode [ 633.885107][ T6146] openvswitch: netlink: Message has 5 unknown bytes. [ 633.892933][ T6147] veth0: left promiscuous mode [ 633.999070][ T6156] netlink: 'syz.2.9583': attribute type 1 has an invalid length. [ 634.008048][ T6154] netlink: 'syz.1.9581': attribute type 1 has an invalid length. [ 634.070377][ T6156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.160197][ T6160] bond2: (slave gretap1): making interface the new active one [ 634.176027][ T6160] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 634.211257][T23282] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.238676][T23282] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.315750][T23282] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.339510][T23282] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.404342][T23282] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.424605][T23282] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.486777][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.495902][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.505957][T23282] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.516549][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.525137][T23282] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.541445][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.549158][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.755486][ T6184] gretap1: entered promiscuous mode [ 634.846629][T23282] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 634.860701][T23282] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5e:0a:be:9a:f2:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 634.959077][T23282] bond4 (unregistering): (slave gretap1): Releasing active interface [ 634.987881][T23282] dvmrp1 (unregistering): left allmulticast mode [ 635.135010][T23282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.152305][T23282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.169119][T23282] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 635.186638][ T6201] netlink: 'syz.4.9593': attribute type 1 has an invalid length. [ 635.196594][T23282] bond0 (unregistering): Released all slaves [ 635.209718][T23282] bond1 (unregistering): Released all slaves [ 635.221502][T23282] bond2 (unregistering): Released all slaves [ 635.233613][T23282] bond3 (unregistering): (slave veth5): Releasing backup interface [ 635.249227][T23282] bond3 (unregistering): Released all slaves [ 635.264312][T23282] bond4 (unregistering): Released all slaves [ 635.276859][T23282] bond5 (unregistering): Released all slaves [ 635.297952][ T6174] lo speed is unknown, defaulting to 1000 [ 635.327722][ T6202] ip6tnl1: entered promiscuous mode [ 635.337065][ T6202] ip6tnl1: entered allmulticast mode [ 635.366832][ T1109] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.377202][ T1109] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.391325][ T1109] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.401313][ T6174] lo speed is unknown, defaulting to 1000 [ 635.402463][T23282] tipc: Disabling bearer [ 635.448485][T23282] tipc: Left network mode [ 635.448565][ T1109] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.521768][T23282] IPVS: stopping master sync thread 27742 ... [ 635.577192][ T6214] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 635.601531][ T6214] bond3: (slave vcan1): Error -95 calling set_mac_address [ 635.800887][ T6196] __nla_validate_parse: 28 callbacks suppressed [ 635.800913][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9591'. [ 635.840960][ T6174] lo speed is unknown, defaulting to 1000 [ 635.840978][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9591'. [ 635.937665][ T6229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.973035][ T6231] Bluetooth: MGMT ver 1.23 [ 636.042951][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9600'. [ 636.070379][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9602'. [ 636.268212][T23282] hsr_slave_0: left promiscuous mode [ 636.283405][T23282] hsr_slave_1: left promiscuous mode [ 636.311243][T23282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.359866][T23282] veth1_to_bond: left allmulticast mode [ 636.369319][T23282] veth1_to_bond: left promiscuous mode [ 636.436435][T23282] team0 (unregistering): Port device macvlan2 removed [ 636.457366][ T6250] sctp: [Deprecated]: syz.1.9607 (pid 6250) Use of int in max_burst socket option. [ 636.457366][ T6250] Use struct sctp_assoc_value instead [ 636.553945][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9611'. [ 636.619063][T13084] Bluetooth: hci1: command tx timeout [ 636.727713][T23282] team0 (unregistering): Port device team_slave_1 removed [ 636.756249][T23282] team0 (unregistering): Port device team_slave_0 removed [ 637.066477][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9617'. [ 637.084663][ T6283] pim6reg: entered allmulticast mode [ 637.149652][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9618'. [ 637.266229][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 637.314235][ T6305] pim6reg: entered allmulticast mode [ 637.366326][ T6306] pim6reg: left allmulticast mode [ 637.475439][ T6303] netlink: 'syz.1.9621': attribute type 16 has an invalid length. [ 637.508632][ T6303] netlink: 'syz.1.9621': attribute type 17 has an invalid length. [ 637.521568][ T6303] ip_vti0: left promiscuous mode [ 637.527112][ T6303] ip_vti0: left allmulticast mode [ 637.554204][ T6303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.662039][ T6327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9630'. [ 637.673215][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.694216][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.703845][ T6174] bridge_slave_0: entered allmulticast mode [ 637.712320][ T6174] bridge_slave_0: entered promiscuous mode [ 637.732093][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.747169][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.760032][ T6174] bridge_slave_1: entered allmulticast mode [ 637.767380][ T6174] bridge_slave_1: entered promiscuous mode [ 637.805878][ T6334] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9632'. [ 637.822126][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.836766][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.912252][ T6174] team0: Port device team_slave_0 added [ 637.927470][ T6174] team0: Port device team_slave_1 added [ 638.011938][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.033652][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.078675][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.092810][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.101784][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.129947][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.143763][ T6347] netlink: 'syz.3.9636': attribute type 6 has an invalid length. [ 638.152847][ T6347] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9636'. [ 638.272719][ T6174] hsr_slave_0: entered promiscuous mode [ 638.281208][ T6174] hsr_slave_1: entered promiscuous mode [ 638.287592][ T6174] debugfs: 'hsr0' already exists in 'hsr' [ 638.295231][ T6174] Cannot create hsr debugfs directory [ 638.467249][ T6366] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 638.517618][ T6366] netlink: 'syz.1.9642': attribute type 1 has an invalid length. [ 638.701502][T13084] Bluetooth: hci1: command tx timeout [ 638.820726][ T6396] tipc: Enabling of bearer rejected, failed to enable media [ 638.967159][ T6404] netlink: 'syz.1.9654': attribute type 21 has an invalid length. [ 639.033436][ T6399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.100659][ T6404] netlink: 'syz.1.9654': attribute type 21 has an invalid length. [ 639.108744][T13084] Bluetooth: hci4: command tx timeout [ 639.156581][ T6174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 639.193178][ T6174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 639.229870][ T6174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.260140][ T6174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 639.485920][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.501147][T23282] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 639.517418][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.532110][T14023] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.539293][T14023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.567001][ T6452] netlink: 'syz.4.9664': attribute type 2 has an invalid length. [ 639.587282][T14029] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.594551][T14029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.604038][ T6452] netlink: 'syz.4.9664': attribute type 8 has an invalid length. [ 639.754777][ T6459] netlink: 'syz.4.9665': attribute type 3 has an invalid length. [ 639.896661][ T6468] syzkaller0: entered promiscuous mode [ 639.902838][ T6468] syzkaller0: entered allmulticast mode [ 639.917809][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.959676][ T6174] veth0_vlan: entered promiscuous mode [ 639.971397][ T6174] veth1_vlan: entered promiscuous mode [ 640.021859][ T6174] veth0_macvtap: entered promiscuous mode [ 640.043421][ T6174] veth1_macvtap: entered promiscuous mode [ 640.076699][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.093760][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.113766][T14031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.123699][T14031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.132849][T14031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.146938][T14031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.431187][ T6483] nbd: couldn't find a device at index -373156329 [ 640.469617][T23282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.503591][T23282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.572756][T23282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.597953][T23282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.703972][ T6506] sctp: [Deprecated]: syz.1.9675 (pid 6506) Use of int in max_burst socket option deprecated. [ 640.703972][ T6506] Use struct sctp_assoc_value instead [ 640.743321][ T6508] vxcan1: tx address claim with dest, not broadcast [ 640.778631][T13084] Bluetooth: hci1: command tx timeout [ 640.857308][ T6522] __nla_validate_parse: 9 callbacks suppressed [ 640.857331][ T6522] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9678'. [ 640.887760][ T6513] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.9582'. [ 640.899945][ T6513] openvswitch: netlink: Message has 5 unknown bytes. [ 641.033660][ T6533] netlink: 'syz.0.9683': attribute type 23 has an invalid length. [ 641.085109][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9685'. [ 641.114474][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9685'. [ 641.139687][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9686'. [ 641.584351][ T6570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9694'. [ 641.592115][ T6575] sctp: [Deprecated]: syz.0.9696 (pid 6575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.592115][ T6575] Use struct sctp_sack_info instead [ 641.705137][ T6578] tipc: Enabled bearer , priority 0 [ 641.714301][ T6578] syzkaller0: entered promiscuous mode [ 641.720577][ T6578] syzkaller0: entered allmulticast mode [ 641.741965][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9698'. [ 641.755285][ T6578] tipc: Resetting bearer [ 641.783310][ T6577] tipc: Resetting bearer [ 641.821675][ T6577] tipc: Disabling bearer [ 642.120394][ T6606] netlink: 'syz.0.9707': attribute type 8 has an invalid length. [ 642.351444][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9712'. [ 642.371703][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9712'. [ 642.469391][ T6626] netlink: 872 bytes leftover after parsing attributes in process `syz.2.9714'. [ 642.859027][T13084] Bluetooth: hci1: command tx timeout [ 643.086295][ T6665] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 643.126394][ T6665] 0ªî{X¹¦: entered allmulticast mode [ 643.147601][ T6665] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 643.302593][ T6686] netlink: 'syz.2.9731': attribute type 5 has an invalid length. [ 643.510336][ T6711] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 643.706970][ T6731] openvswitch: netlink: Message has 4 unknown bytes. [ 643.750231][ T6731] netlink: 'syz.0.9745': attribute type 10 has an invalid length. [ 644.176951][ T6768] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 644.541490][ T6787] netlink: 'syz.2.9758': attribute type 1 has an invalid length. [ 644.601514][ T6797] sctp: [Deprecated]: syz.1.9760 (pid 6797) Use of int in max_burst socket option. [ 644.601514][ T6797] Use struct sctp_assoc_value instead [ 644.657984][ T6787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.676477][ T6805] netlink: 'syz.3.9762': attribute type 10 has an invalid length. [ 644.697127][ T6792] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 644.720913][ T6796] bond4 (unregistering): Released all slaves [ 644.750166][ T6803] batadv_slave_1: Device is already in use. [ 644.939299][T13084] Bluetooth: hci1: command tx timeout [ 644.984333][ T6822] macvlan2: entered allmulticast mode [ 644.991409][ T6822] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 645.015900][ T6823] macvlan2: entered allmulticast mode [ 645.023936][ T6823] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 645.040303][ T6826] veth1_to_bond: entered allmulticast mode [ 645.057340][ T6826] bond0: (slave bond_slave_1): Releasing backup interface [ 645.077358][ T6826] veth1_to_bond (unregistering): left allmulticast mode [ 645.590782][ T6855] netlink: 'syz.3.9776': attribute type 1 has an invalid length. [ 645.599806][ T6855] netlink: 'syz.3.9776': attribute type 2 has an invalid length. [ 646.051407][ T6877] netlink: 'syz.2.9783': attribute type 1 has an invalid length. [ 646.103743][ T6877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.173030][ T31] audit: type=1800 audit(1756027366.434:17): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9781" name="memory.events" dev="tmpfs" ino=632 res=0 errno=0 [ 646.253300][ T6884] bond4: (slave veth7): Enslaving as an active interface with a down link [ 646.283971][ T6877] veth9: entered promiscuous mode [ 646.292406][ T6877] bond4: (slave veth9): Enslaving as an active interface with a down link [ 646.306443][ T6889] vlan2: entered allmulticast mode [ 646.316749][ T6889] bond4: entered allmulticast mode [ 646.324137][ T6889] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 646.344839][ T6897] netlink: 'syz.3.9788': attribute type 10 has an invalid length. [ 646.662248][ T6914] team0: Device vti0 is of different type [ 646.873174][ T6922] __nla_validate_parse: 23 callbacks suppressed [ 646.873197][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9796'. [ 646.918482][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9793'. [ 646.939896][ T6916] geneve2: entered promiscuous mode [ 646.952842][ T6916] geneve2: entered allmulticast mode [ 647.442279][ T6950] netlink: 'syz.3.9803': attribute type 4 has an invalid length. [ 647.757125][ T6959] team0: Device wireguard0 is of different type [ 647.916346][ T6964] netlink: 'syz.0.9806': attribute type 1 has an invalid length. [ 647.938057][ T6964] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9806'. [ 647.947570][ T6964] netlink: 'syz.0.9806': attribute type 1 has an invalid length. [ 648.022056][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9809'. [ 648.070962][ T6976] bridge4: entered promiscuous mode [ 648.086945][ T6976] bridge4: entered allmulticast mode [ 648.133260][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9810'. [ 648.196871][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.204478][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.358910][ T6979] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 648.395773][ T6996] tipc: Enabled bearer , priority 0 [ 648.420821][ T6990] syzkaller0: entered promiscuous mode [ 648.441408][ T6990] syzkaller0: entered allmulticast mode [ 648.477288][ T6990] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 648.506166][ T6990] tipc: Resetting bearer [ 648.530217][ T6989] tipc: Resetting bearer [ 648.547797][ T6989] tipc: Disabling bearer [ 648.606188][ T7007] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.660751][ T7010] lo speed is unknown, defaulting to 1000 [ 648.667438][ T7010] lo speed is unknown, defaulting to 1000 [ 648.695973][ T7007] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.725619][ T7014] team0: Device veth1_macvtap failed to register rx_handler [ 648.813864][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9822'. [ 648.833108][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9819'. [ 648.842844][ T7022] IPv6: Can't replace route, no match found [ 648.907170][ T7007] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.929095][ T7026] IPv6: Can't replace route, no match found [ 649.024303][ T7007] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.103952][ T7032] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9824'. [ 649.234159][T14023] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.244600][ T7045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9825'. [ 649.283180][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9825'. [ 649.317060][T14031] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.342878][T14031] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.376461][T14031] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.438056][ T7010] lo speed is unknown, defaulting to 1000 [ 649.619092][ T7078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.031261][ T7085] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 650.220093][ T7087] validate_nla: 2 callbacks suppressed [ 650.220114][ T7087] netlink: 'syz.3.9833': attribute type 1 has an invalid length. [ 650.243475][ T7090] veth1_to_bond: entered allmulticast mode [ 650.329272][ T7087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.363488][ T7091] netlink: 'syz.4.9834': attribute type 7 has an invalid length. [ 650.371635][ T7091] netlink: 'syz.4.9834': attribute type 8 has an invalid length. [ 650.390272][ T7089] veth1_to_bond: left allmulticast mode [ 650.412144][ T7091] ip6gretap0: entered promiscuous mode [ 650.423830][ T7091] batadv_slave_1: entered promiscuous mode [ 650.433008][ T7091] ip6gretap0: left promiscuous mode [ 650.446547][ T7091] batadv_slave_1: left promiscuous mode [ 650.514741][ T7102] bond5 (unregistering): Released all slaves [ 651.091418][ T7155] Unsupported xt match [ 651.091436][ T7155] unable to load match [ 651.103159][ T7157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.187779][ T7166] netlink: 'syz.2.9851': attribute type 1 has an invalid length. [ 651.198923][ T7166] netlink: 'syz.2.9851': attribute type 2 has an invalid length. [ 651.227257][ T7166] netlink: 'syz.2.9851': attribute type 1 has an invalid length. [ 651.253018][ T7166] netlink: 'syz.2.9851': attribute type 2 has an invalid length. [ 651.286244][ T7166] netlink: 'syz.2.9851': attribute type 1 has an invalid length. [ 651.311979][ T7166] netlink: 'syz.2.9851': attribute type 2 has an invalid length. [ 651.332769][ T7166] netlink: 'syz.2.9851': attribute type 1 has an invalid length. [ 651.654645][ T7199] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 651.799806][ T7204] vlan2: entered promiscuous mode [ 651.806226][ T7204] bridge0: entered promiscuous mode [ 652.113526][ T7233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 652.167218][ T7233] bond1: (slave veth3): Enslaving as an active interface with a down link [ 652.300304][ T7238] veth5: entered promiscuous mode [ 652.313489][ T7238] bond1: (slave veth5): Enslaving as an active interface with a down link [ 652.463463][ T7248] __nla_validate_parse: 10 callbacks suppressed [ 652.463486][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.519907][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.553623][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.594132][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9878'. [ 652.607266][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.677071][ T7265] netlink: 'syz.3.9879': attribute type 11 has an invalid length. [ 652.722968][ T7266] bond5: entered promiscuous mode [ 652.729890][ T7266] bond5: entered allmulticast mode [ 652.743609][ T7266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.828021][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.846938][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.860430][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.869822][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.879804][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 652.960173][ T7279] vlan2: entered allmulticast mode [ 652.974173][ T7279] bridge0: entered allmulticast mode [ 652.983561][ T7279] bridge2: port 1(vlan2) entered blocking state [ 652.995600][ T7279] bridge2: port 1(vlan2) entered disabled state [ 653.007811][ T7279] vlan2: entered promiscuous mode [ 653.024660][ T7279] bridge0: entered promiscuous mode [ 653.472349][ T7320] lo speed is unknown, defaulting to 1000 [ 653.487099][ T7320] lo speed is unknown, defaulting to 1000 [ 653.796753][ T7352] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 654.060277][ T11] block nbd6: Possible stuck request ffff88802581e000: control (read@0,4096B). Runtime 300 seconds [ 654.145846][ T7320] lo speed is unknown, defaulting to 1000 [ 654.247376][ T7374] 8021q: adding VLAN 0 to HW filter on device bond6 [ 654.276434][ T7374] bond5: (slave bond6): making interface the new active one [ 654.286479][ T7374] bond5: (slave bond6): Enslaving as an active interface with an up link [ 654.299803][ T5870] Bluetooth: hci1: command 0x0405 tx timeout [ 654.327627][ T7389] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 654.339087][ T7374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 654.704311][ T11] block nbd8: Possible stuck request ffff8880258f5080: control (read@0,4096B). Runtime 240 seconds [ 654.716014][ T55] block nbd7: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 270 seconds [ 654.737553][ T55] block nbd7: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 270 seconds [ 654.749991][ T55] block nbd7: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 270 seconds [ 654.762870][ T55] block nbd7: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 270 seconds [ 654.912443][ T7425] veth11: entered promiscuous mode [ 655.061487][ T7430] syzkaller0: entered allmulticast mode [ 655.373939][ T7451] validate_nla: 128 callbacks suppressed [ 655.373959][ T7451] netlink: 'syz.2.9934': attribute type 1 has an invalid length. [ 655.450360][ T7451] 8021q: adding VLAN 0 to HW filter on device bond6 [ 655.487009][ T7461] netlink: 'syz.4.9936': attribute type 1 has an invalid length. [ 655.543679][ T7461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 655.558447][ T7454] lo speed is unknown, defaulting to 1000 [ 655.579027][ T7465] 8021q: adding VLAN 0 to HW filter on device bond7 [ 655.595640][ T7465] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 655.608625][ T7465] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 655.626041][ T7454] lo speed is unknown, defaulting to 1000 [ 655.637052][ T7468] sctp: [Deprecated]: syz.3.9938 (pid 7468) Use of int in max_burst socket option. [ 655.637052][ T7468] Use struct sctp_assoc_value instead [ 655.711686][ T7461] veth7: entered promiscuous mode [ 655.743642][ T7461] bond7: (slave veth7): Enslaving as an active interface with a down link [ 655.772839][ T7473] netlink: 'syz.1.9940': attribute type 1 has an invalid length. [ 655.846696][ T7478] netlink: 'syz.1.9942': attribute type 1 has an invalid length. [ 655.942230][ T7478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.977869][ T7478] bond2: (slave bond3): making interface the new active one [ 655.997597][ T7478] bond2: (slave bond3): Enslaving as an active interface with an up link [ 656.080243][ T7493] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 656.108030][ T7492] netlink: 'syz.0.9946': attribute type 1 has an invalid length. [ 656.124974][ T7478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.136417][ T7454] lo speed is unknown, defaulting to 1000 [ 656.215541][ T7497] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 656.285905][ T7500] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 656.346942][ T7500] bond4: entered promiscuous mode [ 656.352349][ T7500] bond4: entered allmulticast mode [ 656.357820][ T7500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.379288][ T5870] Bluetooth: hci1: command 0x0405 tx timeout [ 656.430523][ T7500] (unnamed net_device) (uninitialized): option arp_validate: invalid value (225968129) [ 656.550013][ T7519] netlink: 'syz.3.9954': attribute type 1 has an invalid length. [ 656.571166][ T7519] netlink: 'syz.3.9954': attribute type 11 has an invalid length. [ 656.890438][ T7541] netlink: 'syz.3.9960': attribute type 1 has an invalid length. [ 656.899509][ T7542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.489167][ T7581] 8021q: VLANs not supported on ip6gre0 [ 657.545017][ T7588] netlink: 'syz.3.9976': attribute type 1 has an invalid length. [ 657.573885][ T7588] netlink: 'syz.3.9976': attribute type 1 has an invalid length. [ 657.878558][ T7607] __nla_validate_parse: 81 callbacks suppressed [ 657.878581][ T7607] netlink: 51 bytes leftover after parsing attributes in process `syz.0.9981'. [ 657.910532][ T7610] pim6reg527: entered allmulticast mode [ 658.046347][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9985'. [ 658.067308][ T7613] (unnamed net_device) (uninitialized): option coupled_control: invalid value (103) [ 658.089566][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9985'. [ 658.213587][ T7629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.236403][ T7631] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 658.247111][ T7631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.282158][ T7633] bridge0: port 1(syz_tun) entered blocking state [ 658.289074][ T7633] bridge0: port 1(syz_tun) entered disabled state [ 658.295945][ T7633] syz_tun: entered allmulticast mode [ 658.303851][ T7633] syz_tun: entered promiscuous mode [ 658.450448][ T7646] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9997'. [ 658.553556][ T7650] 8021q: adding VLAN 0 to HW filter on device bond9 [ 658.562683][ T7650] bond8: (slave bond9): making interface the new active one [ 658.571297][ T7650] bond8: (slave bond9): Enslaving as an active interface with an up link [ 658.586009][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9998'. [ 658.597346][ T7650] 8021q: adding VLAN 0 to HW filter on device bond8 [ 658.668944][ T7655] 8021q: adding VLAN 0 to HW filter on device bond7 [ 658.695637][ T7655] bond7: (slave veth13): Enslaving as an active interface with a down link [ 658.740829][ T7655] veth15: entered promiscuous mode [ 658.763898][ T7655] bond7: (slave veth15): Enslaving as an active interface with a down link [ 658.854834][ T7668] tipc: Enabled bearer , priority 10 [ 659.032725][ T7681] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10008'. [ 659.225526][ T7698] vlan2: entered promiscuous mode [ 659.238988][ T7698] erspan0: entered promiscuous mode [ 659.259720][ T7684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.320031][ T7700] vlan2: entered promiscuous mode [ 659.700755][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10019'. [ 659.710468][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10019'. [ 659.968355][ T6056] tipc: Node number set to 2251744526 [ 659.981100][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10024'. [ 660.120354][ T7747] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 660.151567][ T7750] : entered promiscuous mode [ 660.179342][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10029'. [ 661.527979][ T7855] lo speed is unknown, defaulting to 1000 [ 661.535511][ T7855] lo speed is unknown, defaulting to 1000 [ 661.577086][ T7854] bridge3: entered promiscuous mode [ 661.587905][ T7854] bridge3: entered allmulticast mode [ 661.739274][ T11] block nbd3: Possible stuck request ffff888025340000: control (read@0,4096B). Runtime 330 seconds [ 661.767421][ T7855] lo speed is unknown, defaulting to 1000 [ 661.808906][ T7861] veth9: entered allmulticast mode [ 662.896042][ T7890] validate_nla: 11 callbacks suppressed [ 662.896064][ T7890] netlink: 'syz.0.10062': attribute type 10 has an invalid length. [ 662.913640][ T7890] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.923010][ T7890] bond0: (slave team0): Enslaving as an active interface with an up link [ 662.995901][ T7890] netlink: 'syz.0.10062': attribute type 10 has an invalid length. [ 663.003557][ T7895] netlink: 'syz.4.10064': attribute type 1 has an invalid length. [ 663.021325][ T7896] __nla_validate_parse: 6 callbacks suppressed [ 663.021347][ T7896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10065'. [ 663.027964][ T7890] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 663.050524][ T7895] netlink: 212 bytes leftover after parsing attributes in process `syz.4.10064'. [ 663.077671][ T7895] netlink: 'syz.4.10064': attribute type 1 has an invalid length. [ 663.086516][ T7890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.376900][ T7919] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 663.411950][ T7920] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 663.450691][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10072'. [ 663.475292][ T7927] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.10074'. [ 663.533937][ T7930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 663.665911][ T7941] netlink: 173648 bytes leftover after parsing attributes in process `syz.0.10079'. [ 663.679272][ T7941] netlink: zone id is out of range [ 663.684923][ T7941] netlink: zone id is out of range [ 663.707492][ T7941] netlink: zone id is out of range [ 663.711763][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10082'. [ 663.723451][ T7941] netlink: zone id is out of range [ 663.728881][ T7941] netlink: zone id is out of range [ 663.734157][ T7947] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 663.747193][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10082'. [ 663.757299][ T7941] netlink: zone id is out of range [ 663.783968][ T7941] netlink: zone id is out of range [ 663.803601][ T7941] netlink: zone id is out of range [ 664.509554][ T7986] netlink: 'syz.1.10090': attribute type 7 has an invalid length. [ 664.539910][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10090'. [ 664.682584][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10094'. [ 664.786939][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10095'. [ 664.853040][ T8004] vlan2: entered allmulticast mode [ 664.873537][ T8004] mac80211_hwsim hwsim109 wlan0: entered allmulticast mode [ 665.401875][ T9] IPVS: starting estimator thread 0... [ 665.496960][ T8074] netlink: 'syz.0.10112': attribute type 1 has an invalid length. [ 665.518371][ T8062] IPVS: using max 35 ests per chain, 84000 per kthread [ 665.602453][ T8071] gretap1: entered promiscuous mode [ 665.616540][ T8071] bond3: (slave gretap1): making interface the new active one [ 665.626999][ T8071] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 665.649826][ T8074] macvlan2: entered promiscuous mode [ 665.655189][ T8074] macvlan2: entered allmulticast mode [ 665.717874][ T8074] bond3: entered promiscuous mode [ 665.750796][ T8074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 665.766436][ T8074] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 665.793902][ T8074] bond3: left promiscuous mode [ 665.876292][ T8096] netlink: 'syz.3.10120': attribute type 33 has an invalid length. [ 665.942851][ T8098] 0ªî{X¹¦: left allmulticast mode [ 666.108945][ T8098] bridge0: port 1(syz_tun) entered disabled state [ 666.382197][ T8122] nbd: must specify an index to disconnect [ 666.893429][ T8157] netlink: 'syz.4.10138': attribute type 1 has an invalid length. [ 666.928217][ T8157] netlink: 'syz.4.10138': attribute type 1 has an invalid length. [ 666.969818][ T8157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 667.412599][ T8201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.423312][ T8201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.497897][ T8201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.514776][ T8201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.617860][ T8201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.629321][ T8201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.696836][ T8201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.709751][ T8201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.796914][ T1109] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.824178][ T1109] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.845890][ T1109] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.856513][ T1109] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.895614][ T1109] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.905032][ T1109] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.915109][ T1109] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.937416][ T1109] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.312478][ T8241] team0: Device gtp1 is of different type [ 668.446413][ T8244] netlink: 'syz.4.10170': attribute type 1 has an invalid length. [ 668.472206][ T8244] 8021q: adding VLAN 0 to HW filter on device bond11 [ 668.505953][ T8244] bond11: (slave veth9): Enslaving as an active interface with a down link [ 668.524569][ T8244] vlan0: entered allmulticast mode [ 668.531321][ T8244] bond11: entered allmulticast mode [ 668.538755][ T8244] bond11: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 668.728025][ T8249] __nla_validate_parse: 13 callbacks suppressed [ 668.728048][ T8249] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10171'. [ 669.035301][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10176'. [ 669.066550][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10176'. [ 669.233805][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10182'. [ 669.482095][ T8301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10172'. [ 669.557848][ T8306] FAULT_INJECTION: forcing a failure. [ 669.557848][ T8306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 669.580628][ T8307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10189'. [ 669.601554][ T8306] CPU: 0 UID: 0 PID: 8306 Comm: syz.3.10190 Not tainted syzkaller #0 PREEMPT(full) [ 669.601588][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.601603][ T8306] Call Trace: [ 669.601612][ T8306] [ 669.601622][ T8306] dump_stack_lvl+0x189/0x250 [ 669.601654][ T8306] ? __pfx____ratelimit+0x10/0x10 [ 669.601685][ T8306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.601717][ T8306] ? __pfx__printk+0x10/0x10 [ 669.601751][ T8306] ? rcu_is_watching+0x15/0xb0 [ 669.601775][ T8306] should_fail_ex+0x414/0x560 [ 669.601806][ T8306] _copy_to_user+0x31/0xb0 [ 669.601831][ T8306] simple_read_from_buffer+0xe1/0x170 [ 669.601864][ T8306] proc_fail_nth_read+0x1b3/0x220 [ 669.601892][ T8306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.601918][ T8306] ? rw_verify_area+0x2a6/0x4d0 [ 669.601946][ T8306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.601969][ T8306] vfs_read+0x200/0xa30 [ 669.601995][ T8306] ? fdget_pos+0x247/0x320 [ 669.602016][ T8306] ? __pfx___mutex_lock+0x10/0x10 [ 669.602047][ T8306] ? __pfx_vfs_read+0x10/0x10 [ 669.602078][ T8306] ? __fget_files+0x3a0/0x420 [ 669.602109][ T8306] ? __fget_files+0x2a/0x420 [ 669.602144][ T8306] ksys_read+0x145/0x250 [ 669.602172][ T8306] ? __pfx_ksys_read+0x10/0x10 [ 669.602198][ T8306] ? rcu_is_watching+0x15/0xb0 [ 669.602222][ T8306] ? rcu_is_watching+0x15/0xb0 [ 669.602245][ T8306] do_syscall_64+0xfa/0x3b0 [ 669.602277][ T8306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.602300][ T8306] ? clear_bhb_loop+0x60/0xb0 [ 669.602324][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.602346][ T8306] RIP: 0033:0x7ff63dd8d5fc [ 669.602364][ T8306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 669.602383][ T8306] RSP: 002b:00007ff63bfee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.602407][ T8306] RAX: ffffffffffffffda RBX: 00007ff63dfb5fa0 RCX: 00007ff63dd8d5fc [ 669.602424][ T8306] RDX: 000000000000000f RSI: 00007ff63bfee0a0 RDI: 0000000000000006 [ 669.602438][ T8306] RBP: 00007ff63bfee090 R08: 0000000000000000 R09: 0000000000000000 [ 669.602453][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.602467][ T8306] R13: 00007ff63dfb6038 R14: 00007ff63dfb5fa0 R15: 00007ffdd2c09408 [ 669.602493][ T8306] [ 669.635638][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10191'. [ 669.775648][ T8318] netlink: 'syz.1.10193': attribute type 2 has an invalid length. [ 669.909648][ T8318] netlink: 119 bytes leftover after parsing attributes in process `syz.1.10193'. [ 669.934947][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10194'. [ 669.977265][ T8325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10195'. [ 670.264758][ T8351] netlink: 'syz.2.10203': attribute type 1 has an invalid length. [ 670.332480][ T8351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 670.362911][ T8351] bond8: (slave geneve2): making interface the new active one [ 670.372151][ T8351] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 670.841371][ T8386] netlink: 'syz.3.10213': attribute type 1 has an invalid length. [ 670.920137][ T8391] veth11: entered promiscuous mode [ 670.977122][ T8386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 670.993736][ T8399] vlan2: entered allmulticast mode [ 670.999260][ T8399] bond5: entered allmulticast mode [ 671.051183][ T8402] net_ratelimit: 16 callbacks suppressed [ 671.051198][ T8402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.771782][ T8458] netlink: 'syz.3.10233': attribute type 30 has an invalid length. [ 671.815259][ T8456] syz.1.10232: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 671.832366][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.1.10232 Not tainted syzkaller #0 PREEMPT(full) [ 671.832399][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.832416][ T8456] Call Trace: [ 671.832425][ T8456] [ 671.832435][ T8456] dump_stack_lvl+0x189/0x250 [ 671.832468][ T8456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.832495][ T8456] ? __pfx__printk+0x10/0x10 [ 671.832523][ T8456] ? lock_release+0x4b/0x3e0 [ 671.832557][ T8456] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 671.832586][ T8456] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 671.832614][ T8456] warn_alloc+0x214/0x310 [ 671.832646][ T8456] ? stack_depot_save_flags+0x40/0x860 [ 671.832689][ T8456] ? __pfx_warn_alloc+0x10/0x10 [ 671.832723][ T8456] ? kasan_save_track+0x4f/0x80 [ 671.832750][ T8456] ? xskq_create+0x56/0x170 [ 671.832777][ T8456] ? xsk_init_queue+0xb0/0x110 [ 671.832804][ T8456] ? xsk_setsockopt+0x4dc/0x8d0 [ 671.832828][ T8456] ? do_sock_setsockopt+0x17c/0x1b0 [ 671.832848][ T8456] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 671.832867][ T8456] ? do_syscall_64+0xfa/0x3b0 [ 671.832897][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.832923][ T8456] __vmalloc_node_range_noprof+0x125/0x12f0 [ 671.832971][ T8456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 671.833003][ T8456] ? xsk_setsockopt+0x462/0x8d0 [ 671.833030][ T8456] ? __kasan_kmalloc+0x93/0xb0 [ 671.833060][ T8456] vmalloc_user_noprof+0xad/0xf0 [ 671.833090][ T8456] ? xskq_create+0xbf/0x170 [ 671.833118][ T8456] xskq_create+0xbf/0x170 [ 671.833148][ T8456] xsk_init_queue+0xb0/0x110 [ 671.833176][ T8456] xsk_setsockopt+0x4dc/0x8d0 [ 671.833204][ T8456] ? __pfx_xsk_setsockopt+0x10/0x10 [ 671.833229][ T8456] ? __pfx_aa_sk_perm+0x10/0x10 [ 671.833267][ T8456] ? lock_release+0x4b/0x3e0 [ 671.833304][ T8456] ? aa_sock_opt_perm+0xff/0x1b0 [ 671.833327][ T8456] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 671.833351][ T8456] ? __pfx_xsk_setsockopt+0x10/0x10 [ 671.833383][ T8456] do_sock_setsockopt+0x17c/0x1b0 [ 671.833407][ T8456] __x64_sys_setsockopt+0x13f/0x1b0 [ 671.833431][ T8456] do_syscall_64+0xfa/0x3b0 [ 671.833462][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.833484][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 671.833509][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.833531][ T8456] RIP: 0033:0x7fa80b98ebe9 [ 671.833550][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.833570][ T8456] RSP: 002b:00007fa80c84c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 671.833593][ T8456] RAX: ffffffffffffffda RBX: 00007fa80bbb5fa0 RCX: 00007fa80b98ebe9 [ 671.833610][ T8456] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 671.833624][ T8456] RBP: 00007fa80ba11e19 R08: 0000000000000004 R09: 0000000000000000 [ 671.833638][ T8456] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.833653][ T8456] R13: 00007fa80bbb6038 R14: 00007fa80bbb5fa0 R15: 00007ffd66bb3608 [ 671.833679][ T8456] [ 671.833758][ T8456] Mem-Info: [ 672.022522][ T8464] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 672.027021][ T8456] active_anon:4498 inactive_anon:0 isolated_anon:0 [ 672.027021][ T8456] active_file:3082 inactive_file:40083 isolated_file:0 [ 672.027021][ T8456] unevictable:768 dirty:107 writeback:0 [ 672.027021][ T8456] slab_reclaimable:15707 slab_unreclaimable:200233 [ 672.027021][ T8456] mapped:29366 shmem:1365 pagetables:1354 [ 672.027021][ T8456] sec_pagetables:0 bounce:0 [ 672.027021][ T8456] kernel_misc_reclaimable:0 [ 672.027021][ T8456] free:1205637 free_pcp:21210 free_cma:0 [ 672.213297][ T8456] Node 0 active_anon:18032kB inactive_anon:0kB active_file:12328kB inactive_file:160132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117536kB dirty:464kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21752kB pagetables:5356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 672.315945][ T8456] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 672.361672][ T8456] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.393683][ T8456] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 672.408803][ T8456] Node 0 DMA32 free:918068kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17784kB inactive_anon:0kB active_file:12328kB inactive_file:158556kB unevictable:1536kB writepending:464kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:62724kB local_pcp:28304kB free_cma:0kB [ 672.442545][ T8456] lowmem_reserve[]: 0 0 1 1 1 [ 672.447848][ T8456] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 672.480164][ T8456] lowmem_reserve[]: 0 0 0 0 0 [ 672.485379][ T8456] Node 1 Normal free:3891960kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19136kB local_pcp:9568kB free_cma:0kB [ 672.525345][ T8456] lowmem_reserve[]: 0 0 0 0 0 [ 672.530496][ T8456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 672.554410][ T8456] Node 0 DMA32: 1692*4kB (UME) 716*8kB (UM) 471*16kB (UME) 359*32kB (UME) 113*64kB (UME) 61*128kB (UME) 156*256kB (UM) 273*512kB (UM) 161*1024kB (UM) 6*2048kB (UM) 126*4096kB (UM) = 919520kB [ 672.582508][ T8456] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 672.600056][ T8456] Node 1 Normal: 180*4kB (UE) 51*8kB (UME) 41*16kB (UME) 124*32kB (UME) 34*64kB (UME) 12*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891960kB [ 672.657353][ T8456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.687122][ T8456] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 672.735914][ T8456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.749669][ T8456] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 672.766170][ T8456] 44526 total pagecache pages [ 672.773681][ T8456] 0 pages in swap cache [ 672.777961][ T8456] Free swap = 124996kB [ 672.783472][ T8456] Total swap = 124996kB [ 672.794374][ T8456] 2097051 pages RAM [ 672.798997][ T8456] 0 pages HighMem/MovableOnly [ 672.804623][ T8456] 425660 pages reserved [ 672.808917][ T8456] 0 pages cma reserved [ 672.946124][ T8513] netlink: 'syz.0.10249': attribute type 25 has an invalid length. [ 672.967588][ T8511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.007986][ T8518] sctp: [Deprecated]: syz.1.10251 (pid 8518) Use of int in max_burst socket option deprecated. [ 673.007986][ T8518] Use struct sctp_assoc_value instead [ 673.270295][ T8535] netlink: 'syz.1.10257': attribute type 1 has an invalid length. [ 673.279075][ T8535] netlink: 'syz.1.10257': attribute type 2 has an invalid length. [ 673.500198][ T8551] tipc: Enabled bearer , priority 0 [ 673.555244][ T8550] tipc: Resetting bearer [ 673.635507][ T8550] tipc: Disabling bearer [ 673.780546][ T8566] netlink: 'syz.1.10269': attribute type 1 has an invalid length. [ 673.864133][ T8577] __nla_validate_parse: 13 callbacks suppressed [ 673.864156][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10273'. [ 674.107880][ T8593] netlink: 'syz.4.10278': attribute type 33 has an invalid length. [ 674.122976][ T8593] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10278'. [ 674.212800][ T8603] netlink: 'syz.4.10282': attribute type 13 has an invalid length. [ 674.365301][ T8603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.382975][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10283'. [ 674.715886][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10286'. [ 674.776235][ T8619] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 674.790151][ T8619] bond12: (slave vcan1): Error -95 calling set_mac_address [ 674.929279][ T8629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10289'. [ 675.079264][ T8644] openvswitch: netlink: IPv4 tunnel dst address is zero [ 675.285755][ T8660] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 675.287357][ T8662] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 675.340373][ T8660] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 675.372494][ T8672] netlink: 'syz.4.10297': attribute type 1 has an invalid length. [ 675.380916][ T8672] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10297'. [ 675.794310][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10305'. [ 676.039739][ T8719] netlink: 'syz.1.10311': attribute type 10 has an invalid length. [ 676.094134][ T8719] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 676.114536][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10312'. [ 676.133169][ T8723] IPVS: Unknown mcast interface: vcan0 [ 676.150536][ T8723] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.155251][ T8725] netlink: zone id is out of range [ 676.187692][ T8725] netlink: del zone limit has 4 unknown bytes [ 676.330719][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10317'. [ 676.350532][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10317'. [ 676.384090][ T8743] geneve2: entered promiscuous mode [ 676.391095][ T8743] geneve2: entered allmulticast mode [ 676.414185][ T8748] netlink: 'syz.4.10318': attribute type 1 has an invalid length. [ 676.448065][ T8748] 8021q: adding VLAN 0 to HW filter on device bond13 [ 676.496057][ T8748] veth13: entered promiscuous mode [ 676.534485][ T8754] bridge_slave_1: left allmulticast mode [ 676.545397][ T8754] bridge_slave_1: left promiscuous mode [ 676.551421][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.570006][ T8754] bridge_slave_0: left allmulticast mode [ 676.575882][ T8754] bridge_slave_0: left promiscuous mode [ 676.599459][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.683438][ T8764] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 676.701025][ T8764] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 676.825978][ T8773] netlink: 'syz.2.10327': attribute type 1 has an invalid length. [ 677.032379][ T8782] netlink: 'syz.3.10330': attribute type 1 has an invalid length. [ 677.066394][ T8782] netlink: 'syz.3.10330': attribute type 1 has an invalid length. [ 677.077445][ T8782] netlink: 'syz.3.10330': attribute type 1 has an invalid length. [ 677.407549][ T8808] team0: Device vti0 is of different type [ 677.738372][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 678.115910][ T8862] veth13: entered promiscuous mode [ 678.297092][ T8872] syzkaller0: entered promiscuous mode [ 678.305149][ T8872] syzkaller0: entered allmulticast mode [ 678.313203][ T8869] syz_tun: entered allmulticast mode [ 678.321278][ T8871] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 678.873693][ T8907] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 678.892903][ T8907] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 678.994513][ T8922] __nla_validate_parse: 18 callbacks suppressed [ 678.994535][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10373'. [ 679.093930][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10373'. [ 679.325667][ T8947] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10380'. [ 679.461119][ T8962] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.10383'. [ 679.470664][ T8962] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.10383'. [ 679.586595][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10387'. [ 679.672189][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10390'. [ 679.684888][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10390'. [ 679.721332][ T8979] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 679.740847][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10388'. [ 679.760817][ T8979] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 679.789189][ T8973] netem: change failed [ 679.793857][ T8984] delete_channel: no stack [ 679.981835][ T9008] validate_nla: 3 callbacks suppressed [ 679.981859][ T9008] netlink: 'syz.2.10396': attribute type 1 has an invalid length. [ 680.044877][ T9008] 8021q: adding VLAN 0 to HW filter on device bond10 [ 680.133588][ T9008] bond10: (slave veth17): Enslaving as an active interface with a down link [ 680.224053][ T9008] veth19: entered promiscuous mode [ 680.252407][ T9008] bond10: (slave veth19): Enslaving as an active interface with a down link [ 680.312835][ T9031] vlan3: entered allmulticast mode [ 680.341504][ T9031] bond10: entered allmulticast mode [ 680.386407][ T9031] bond10: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 680.417234][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10405'. [ 680.484646][ T9043] 8021q: adding VLAN 0 to HW filter on device bond14 [ 680.663678][ T9054] lo speed is unknown, defaulting to 1000 [ 680.674351][ T9054] lo speed is unknown, defaulting to 1000 [ 680.758006][ T9062] tipc: Started in network mode [ 680.783531][ T9062] tipc: Node identity 56b8687057fa, cluster identity 4711 [ 680.825255][ T9062] tipc: Enabled bearer , priority 0 [ 680.866307][ T9073] syzkaller0: entered promiscuous mode [ 680.886291][ T9073] syzkaller0: entered allmulticast mode [ 680.935035][ T9056] tipc: Resetting bearer [ 680.961330][ T9056] tipc: Disabling bearer [ 681.101844][ T9078] nbd: nbd0 already in use [ 681.114145][ T9081] netlink: 'syz.0.10416': attribute type 1 has an invalid length. [ 681.122778][ T9054] lo speed is unknown, defaulting to 1000 [ 681.155331][ T9081] netlink: 'syz.0.10416': attribute type 2 has an invalid length. [ 681.306508][ T9092] netlink: 'syz.4.10419': attribute type 1 has an invalid length. [ 681.325920][ T9091] block nbd15: Unsupported socket: shutdown callout must be supported. [ 681.350921][ T9097] netlink: 'syz.1.10422': attribute type 7 has an invalid length. [ 681.362944][ T9097] netlink: 'syz.1.10422': attribute type 8 has an invalid length. [ 681.393936][ T9092] 8021q: adding VLAN 0 to HW filter on device bond15 [ 681.407847][ T9097] netlink: 'syz.1.10422': attribute type 10 has an invalid length. [ 681.417838][ T9097] batadv0: entered promiscuous mode [ 681.424466][ T9097] batadv0: entered allmulticast mode [ 681.430729][ T9097] bridge0: port 3(batadv0) entered blocking state [ 681.437350][ T9097] bridge0: port 3(batadv0) entered disabled state [ 681.453440][ T9097] bridge0: port 3(batadv0) entered blocking state [ 681.460054][ T9097] bridge0: port 3(batadv0) entered forwarding state [ 681.510272][T23282] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 681.520630][T23282] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 681.536257][ T9100] bond15: (slave veth15): Enslaving as an active interface with a down link [ 681.626301][ T9092] veth17: entered promiscuous mode [ 681.638189][ T9092] bond15: (slave veth17): Enslaving as an active interface with a down link [ 681.647195][ T9102] tipc: Enabling of bearer rejected, failed to enable media [ 681.700112][ T9109] vlan0: entered allmulticast mode [ 681.705415][ T9109] bond15: entered allmulticast mode [ 681.714724][ T9109] bond15: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 682.092875][ T9145] tipc: New replicast peer: 0.0.0.0 [ 682.103800][ T9145] tipc: Enabled bearer , priority 10 [ 682.187433][ T9154] netlink: 'syz.4.10436': attribute type 3 has an invalid length. [ 682.444092][ T9160] netlink: 'syz.4.10439': attribute type 1 has an invalid length. [ 682.522898][ T9160] 8021q: adding VLAN 0 to HW filter on device bond16 [ 682.670620][ T9175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.687352][ T9163] bond16: (slave veth19): Enslaving as an active interface with a down link [ 682.741599][ T9160] veth21: entered promiscuous mode [ 682.760483][ T9160] bond16: (slave veth21): Enslaving as an active interface with a down link [ 682.785812][ T9176] vlan0: entered allmulticast mode [ 682.793315][ T9176] bond16: entered allmulticast mode [ 682.800720][ T9176] bond16: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 682.847508][ T9178] tipc: Started in network mode [ 682.853059][ T9178] tipc: Node identity , cluster identity 4711 [ 682.860539][ T9178] tipc: Failed to obtain node identity [ 682.872731][ T9178] tipc: Enabling of bearer rejected, failed to enable media [ 683.251359][ T9211] sctp: [Deprecated]: syz.4.10451 (pid 9211) Use of int in max_burst socket option deprecated. [ 683.251359][ T9211] Use struct sctp_assoc_value instead [ 683.352694][ T9206] netlink: 'syz.4.10451': attribute type 1 has an invalid length. [ 683.391217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803e7a1800: rx timeout, send abort [ 683.399741][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803e7a1800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 683.612921][ T9222] lo speed is unknown, defaulting to 1000 [ 683.629936][ T9222] lo speed is unknown, defaulting to 1000 [ 684.016729][ T9228] lo: entered promiscuous mode [ 684.040460][ T9228] lo: entered allmulticast mode [ 684.045848][ T9228] tunl0: entered promiscuous mode [ 684.122173][ T9231] __nla_validate_parse: 14 callbacks suppressed [ 684.122195][ T9231] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10457'. [ 684.139880][ T11] block nbd6: Possible stuck request ffff88802581e000: control (read@0,4096B). Runtime 330 seconds [ 684.156934][ T9228] tunl0: entered allmulticast mode [ 684.213484][ T9228] gre0: entered promiscuous mode [ 684.245428][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10457'. [ 684.273536][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10458'. [ 684.284456][ T9228] gre0: entered allmulticast mode [ 684.289634][ T9239] nbd: must specify at least one socket [ 684.317335][ T9228] gretap0: entered promiscuous mode [ 684.334353][ T9228] gretap0: entered allmulticast mode [ 684.342685][ T9228] gretap0: refused to change device tx_queue_len [ 684.354892][ T9228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 684.379959][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10460'. [ 684.399699][ T9233] netlink: 50 bytes leftover after parsing attributes in process `syz.4.10460'. [ 684.417011][ T9233] netlink: 50 bytes leftover after parsing attributes in process `syz.4.10460'. [ 684.430726][ T9222] lo speed is unknown, defaulting to 1000 [ 684.781549][ T55] block nbd7: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 300 seconds [ 684.785146][ T11] block nbd8: Possible stuck request ffff8880258f5080: control (read@0,4096B). Runtime 270 seconds [ 684.792683][ T55] block nbd7: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 300 seconds [ 684.792718][ T55] block nbd7: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 300 seconds [ 684.792747][ T55] block nbd7: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 300 seconds [ 685.037318][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10472'. [ 685.202320][ T9289] pim6reg1: entered promiscuous mode [ 685.207891][ T9289] pim6reg1: entered allmulticast mode [ 685.367680][ T5870] block nbd15: Receive control failed (result -32) [ 685.520397][ T9309] sctp: [Deprecated]: syz.1.10479 (pid 9309) Use of int in maxseg socket option. [ 685.520397][ T9309] Use struct sctp_assoc_value instead [ 685.539993][ T9310] validate_nla: 2 callbacks suppressed [ 685.540014][ T9310] netlink: 'syz.3.10478': attribute type 13 has an invalid length. [ 685.544544][ T9309] nft_compat: unsupported protocol 1 [ 685.564493][ T9310] netlink: 'syz.3.10478': attribute type 58 has an invalid length. [ 685.588911][ T9310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10478'. [ 685.635890][ T9315] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 685.665252][ T9315] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 685.741238][ T9325] : renamed from bridge_slave_0 (while UP) [ 685.759171][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10483'. [ 686.136093][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10487'. [ 686.343487][ T9356] netlink: 'syz.3.10492': attribute type 10 has an invalid length. [ 686.364880][ T9355] team0: Device vti0 is of different type [ 686.391936][ T9356] veth1_macvtap: left promiscuous mode [ 686.604242][ T9382] netlink: 'syz.0.10497': attribute type 6 has an invalid length. [ 686.634363][ T9376] 8021q: VLANs not supported on wg1 [ 686.950985][ T9403] netlink: 'syz.1.10504': attribute type 29 has an invalid length. [ 687.013899][ T9403] 8021q: adding VLAN 0 to HW filter on device bond7 [ 687.049996][ T9403] team0: Failed to send port change of device bond7 via netlink (err -105) [ 687.079115][ T9403] team0: Failed to send options change via netlink (err -105) [ 687.086652][ T9403] team0: Port device bond7 added [ 687.537281][ T9451] syz_tun (unregistering): left allmulticast mode [ 688.890301][ T9512] veth0: entered promiscuous mode [ 688.904484][ T5975] hid-generic 0005:16C0:0005.0003: item fetching failed at offset 0/1 [ 688.919514][ T5975] hid-generic 0005:16C0:0005.0003: probe with driver hid-generic failed with error -22 [ 688.947774][ T9509] veth0: left promiscuous mode [ 689.432345][ T9548] __nla_validate_parse: 20 callbacks suppressed [ 689.432369][ T9548] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10545'. [ 689.490897][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10545'. [ 689.594695][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10547'. [ 689.611556][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10549'. [ 689.623148][ T9557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.738846][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10551'. [ 689.749053][ T9566] netlink: 'syz.2.10551': attribute type 5 has an invalid length. [ 689.758000][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10551'. [ 689.807680][ T9566] geneve3: entered promiscuous mode [ 689.813843][ T9566] geneve3: entered allmulticast mode [ 689.833204][T23282] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 689.843436][T23282] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 689.882171][T23282] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 689.895507][T23282] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 690.009052][ T9575] sock: sock_set_timeout: `syz.0.10553' (pid 9575) tries to set negative timeout [ 690.093076][ T9579] syzkaller1: entered promiscuous mode [ 690.102319][ T9579] syzkaller1: entered allmulticast mode [ 690.271773][ T9590] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10558'. [ 690.546766][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10563'. [ 690.786638][ T9609] netlink: 'syz.1.10564': attribute type 1 has an invalid length. [ 690.834013][ T9609] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.913239][ T9609] bond8: (slave geneve3): making interface the new active one [ 690.948736][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10565'. [ 690.959917][ T9609] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 691.158868][ T9619] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10567'. [ 691.201313][ T9624] netlink: 'syz.4.10569': attribute type 4 has an invalid length. [ 691.372371][ T9619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.819183][ T11] block nbd3: Possible stuck request ffff888025340000: control (read@0,4096B). Runtime 360 seconds [ 693.101171][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 713.859471][ T9657] : renamed from hsr0 (while UP) [ 713.891840][ T9660] team0: Device wireguard0 is of different type [ 713.964538][ T9672] netlink: 'syz.0.10582': attribute type 75 has an invalid length. [ 713.983424][ T9672] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 713.994385][ T9667] __nla_validate_parse: 3 callbacks suppressed [ 713.994406][ T9667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10581'. [ 714.032776][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10584'. [ 714.063389][ T9679] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 714.150912][ T9685] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 714.220139][ T11] block nbd6: Possible stuck request ffff88802581e000: control (read@0,4096B). Runtime 360 seconds [ 714.275103][ T9699] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10590'. [ 714.310291][ T9701] netlink: 'syz.2.10591': attribute type 4 has an invalid length. [ 714.342672][ T9701] netlink: 'syz.2.10591': attribute type 4 has an invalid length. [ 714.399627][ T9704] netlink: 'syz.0.10592': attribute type 10 has an invalid length. [ 714.430906][ T9704] team0: Device ipvlan1 failed to register rx_handler [ 714.619437][ T9707] sch_fq: defrate 0 ignored. [ 714.769855][ T9721] netlink: 'syz.2.10598': attribute type 2 has an invalid length. [ 714.830182][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10600'. [ 714.868352][ T11] block nbd8: Possible stuck request ffff8880258f5080: control (read@0,4096B). Runtime 300 seconds [ 714.885807][ T55] block nbd7: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 330 seconds [ 714.899552][ T55] block nbd7: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 330 seconds [ 714.914539][ T55] block nbd7: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 330 seconds [ 714.926627][ T55] block nbd7: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 330 seconds [ 715.009407][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10604'. [ 715.033624][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10604'. [ 715.128731][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10606'. [ 715.430502][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10611'. [ 715.468556][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10611'. [ 715.659197][ T5867] Bluetooth: hci0: command 0x0405 tx timeout [ 715.718356][ T9792] netlink: 'syz.2.10617': attribute type 25 has an invalid length. [ 715.760997][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10618'. [ 715.799408][ T9791] vlan1: entered allmulticast mode [ 715.832636][ T9791] veth0_vlan: entered allmulticast mode [ 716.670979][ T9863] geneve2: entered promiscuous mode [ 716.693421][ T9863] geneve2: entered allmulticast mode [ 716.723972][ T9866] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 716.741837][ T9870] netlink: 'syz.1.10641': attribute type 1 has an invalid length. [ 716.925028][ T9883] netlink: 'syz.2.10646': attribute type 23 has an invalid length. [ 717.000297][ T9886] 8021q: adding VLAN 0 to HW filter on device bond9 [ 717.011225][ T9886] bond0: (slave bond9): Enslaving as an active interface with an up link [ 717.364299][ T9913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.744615][ T9941] bond12: entered promiscuous mode [ 717.780123][ T9941] bond12: entered allmulticast mode [ 717.796313][ T9941] 8021q: adding VLAN 0 to HW filter on device bond12 [ 718.049124][ T9957] netlink: 'syz.0.10668': attribute type 1 has an invalid length. [ 718.111625][ T9967] netlink: 'syz.4.10666': attribute type 13 has an invalid length. [ 718.132939][ T9967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.592577][ T9995] 8021q: adding VLAN 0 to HW filter on device bond10 [ 718.609638][ T9988] tipc: Enabled bearer , priority 0 [ 718.721925][ T9988] tipc: Resetting bearer [ 718.829648][ T9988] tipc: Disabling bearer [ 718.850170][ T9995] vlan2: entered promiscuous mode [ 718.855247][ T9995] bond10: entered promiscuous mode [ 718.861555][ T9995] vlan2: entered allmulticast mode [ 718.867680][ T9995] bond10: entered allmulticast mode [ 718.876683][T10013] tipc: Enabling of bearer rejected, failed to enable media [ 719.112125][T10027] __nla_validate_parse: 19 callbacks suppressed [ 719.112152][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10687'. [ 719.143077][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10686'. [ 719.156006][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10687'. [ 719.352055][T10033] bridge0: port 1(syz_tun) entered disabled state [ 719.382232][T10033] syz_tun (unregistering): left allmulticast mode [ 719.395277][T10033] syz_tun (unregistering): left promiscuous mode [ 719.405286][T10033] bridge0: port 1(syz_tun) entered disabled state [ 719.457286][T10037] syz_tun (unregistering): left allmulticast mode [ 719.480075][T10037] syz_tun (unregistering): left promiscuous mode [ 719.584098][ T3010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.704374][ T3010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.795854][ T3010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.929860][ T3010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.171525][ T3010] vlan2: left promiscuous mode [ 720.181925][ T3010] bridge0: left promiscuous mode [ 720.208703][ T3010] bridge2: port 1(vlan2) entered disabled state [ 720.419867][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.421103][ T3010] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 720.427365][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.438800][ T3010] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 720.438829][ T3010] CPU: 1 UID: 0 PID: 3010 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 720.438859][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.438874][ T3010] Workqueue: netns cleanup_net [ 720.438913][ T3010] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 720.438947][ T3010] Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5 [ 720.438968][ T3010] RSP: 0018:ffffc9000b7274f8 EFLAGS: 00010206 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 720.438987][ T3010] RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: ffff88802ecc3c00 [ 720.439004][ T3010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.439017][ T3010] RBP: ffff8880676dbc20 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 [ 720.439035][ T3010] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60 [ 720.439051][ T3010] R13: dffffc0000000000 R14: ffff8880599bf400 R15: 1ffff1100cedb784 [ 720.439068][ T3010] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 720.439087][ T3010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.439103][ T3010] CR2: 0000200000000230 CR3: 00000000510b2000 CR4: 00000000003526f0 [ 720.439122][ T3010] Call Trace: [ 720.439133][ T3010] [ 720.439148][ T3010] inetdev_event+0x2a7/0x15b0 [ 720.439177][ T3010] ? __pfx_inetdev_event+0x10/0x10 [ 720.439206][ T3010] notifier_call_chain+0x1b3/0x3e0 [ 720.439236][ T3010] netif_close_many+0x29c/0x410 [ 720.439271][ T3010] ? __pfx_netif_close_many+0x10/0x10 [ 720.439308][ T3010] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 720.439337][ T3010] ? __pfx_call_rcu+0x10/0x10 [ 720.439359][ T3010] ? rcu_is_watching+0x15/0xb0 [ 720.439385][ T3010] ? unregister_netdevice_queue+0x1b3/0x380 [ 720.439410][ T3010] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 720.439440][ T3010] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 720.439465][ T3010] ? sysfs_remove_group+0x236/0x2c0 [ 720.439491][ T3010] ? net_generic+0x1e/0x240 [ 720.439511][ T3010] ? net_generic+0x1e/0x240 [ 720.439538][ T3010] ops_undo_list+0x3dc/0x990 [ 720.439575][ T3010] ? __pfx_ops_undo_list+0x10/0x10 [ 720.439609][ T3010] ? do_raw_spin_unlock+0x122/0x240 [ 720.439640][ T3010] cleanup_net+0x4c5/0x800 [ 720.439674][ T3010] ? __pfx_cleanup_net+0x10/0x10 [ 720.439708][ T3010] ? rcu_is_watching+0x15/0xb0 [ 720.439728][ T3010] ? process_scheduled_works+0x9ef/0x17b0 [ 720.439749][ T3010] ? process_scheduled_works+0x9ef/0x17b0 [ 720.439772][ T3010] process_scheduled_works+0xae1/0x17b0 [ 720.439810][ T3010] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.439853][ T3010] worker_thread+0x8a0/0xda0 [ 720.439891][ T3010] kthread+0x70e/0x8a0 [ 720.439920][ T3010] ? __pfx_worker_thread+0x10/0x10 [ 720.439941][ T3010] ? __pfx_kthread+0x10/0x10 [ 720.439968][ T3010] ? rcu_is_watching+0x15/0xb0 [ 720.439987][ T3010] ? __pfx_kthread+0x10/0x10 [ 720.440015][ T3010] ret_from_fork+0x3f9/0x770 [ 720.440039][ T3010] ? __pfx_ret_from_fork+0x10/0x10 [ 720.440063][ T3010] ? __switch_to_asm+0x39/0x70 [ 720.440092][ T3010] ? __switch_to_asm+0x33/0x70 [ 720.440119][ T3010] ? __pfx_kthread+0x10/0x10 [ 720.440146][ T3010] ret_from_fork_asm+0x1a/0x30 [ 720.440184][ T3010] [ 720.440202][ T3010] Modules linked in: [ 720.441025][ T3010] ---[ end trace 0000000000000000 ]--- [ 720.530259][T10052] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 720.617870][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.810698][ T3010] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 720.818762][T10052] ,cpuset=/,mems_allowed=0-1 [ 720.828003][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz-executor Tainted: G D syzkaller #0 PREEMPT(full) [ 720.828035][T10052] Tainted: [D]=DIE [ 720.828042][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.828054][T10052] Call Trace: [ 720.828066][T10052] [ 720.828076][T10052] dump_stack_lvl+0x189/0x250 [ 720.828113][T10052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.828139][T10052] ? __pfx__printk+0x10/0x10 [ 720.828166][T10052] ? lock_release+0x4b/0x3e0 [ 720.828199][T10052] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 720.828226][T10052] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 720.828252][T10052] warn_alloc+0x214/0x310 [ 720.828288][T10052] ? __pfx_warn_alloc+0x10/0x10 [ 720.828325][T10052] ? __get_vm_area_node+0x28f/0x300 [ 720.828354][T10052] ? kcov_ioctl+0x55/0x640 [ 720.828384][T10052] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 720.828432][T10052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 720.828468][T10052] ? __pfx_kcov_ioctl+0x10/0x10 [ 720.828496][T10052] vmalloc_user_noprof+0xad/0xf0 [ 720.828527][T10052] ? kcov_ioctl+0x55/0x640 [ 720.828555][T10052] kcov_ioctl+0x55/0x640 [ 720.828584][T10052] ? bpf_lsm_file_ioctl+0x9/0x20 [ 720.828611][T10052] ? __pfx_kcov_ioctl+0x10/0x10 [ 720.828638][T10052] __se_sys_ioctl+0xfc/0x170 [ 720.828666][T10052] do_syscall_64+0xfa/0x3b0 [ 720.828699][T10052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.828720][T10052] ? clear_bhb_loop+0x60/0xb0 [ 720.828745][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.828766][T10052] RIP: 0033:0x7f461178e7eb [ 720.828785][T10052] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 720.828805][T10052] RSP: 002b:00007ffed17e1090 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.828827][T10052] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f461178e7eb [ 720.828844][T10052] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 720.828858][T10052] RBP: 00007f46119b64e8 R08: 00000000000000da R09: 0000000000000000 [ 720.828872][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.828886][T10052] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 720.828909][T10052] [ 721.069764][ T3010] Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5 [ 721.073024][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.106824][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.108225][ T3010] RSP: 0018:ffffc9000b7274f8 EFLAGS: 00010206 [ 721.115026][T10052] Mem-Info: [ 721.130711][T10052] active_anon:2458 inactive_anon:0 isolated_anon:0 [ 721.130711][T10052] active_file:2698 inactive_file:40103 isolated_file:0 [ 721.130711][T10052] unevictable:768 dirty:90 writeback:0 [ 721.130711][T10052] slab_reclaimable:15678 slab_unreclaimable:249896 [ 721.130711][T10052] mapped:10302 shmem:1364 pagetables:920 [ 721.130711][T10052] sec_pagetables:0 bounce:0 [ 721.130711][T10052] kernel_misc_reclaimable:0 [ 721.130711][T10052] free:1183624 free_pcp:26078 free_cma:0 [ 721.152316][ T3010] RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: ffff88802ecc3c00 [ 721.195301][T10052] Node 0 active_anon:9832kB inactive_anon:0kB active_file:10692kB inactive_file:160212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:41208kB dirty:360kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21684kB pagetables:3536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 721.236229][ T3010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 721.244385][ T3010] RBP: ffff8880676dbc20 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 [ 721.253537][ T3010] R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60 [ 721.262585][ T3010] R13: dffffc0000000000 R14: ffff8880599bf400 R15: 1ffff1100cedb784 [ 721.271087][ T3010] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 721.283386][ T3010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.291643][ T3010] CR2: 00007fe3dc3da450 CR3: 000000000df36000 CR4: 00000000003526f0 [ 721.300006][ T3010] Kernel panic - not syncing: Fatal exception [ 721.306441][ T3010] Kernel Offset: disabled [ 721.310772][ T3010] Rebooting in 86400 seconds..