last executing test programs: 4.490957185s ago: executing program 0 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}]}, 0x18}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.420844169s ago: executing program 0 (id=269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 3.116610749s ago: executing program 0 (id=273): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x6, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0xc0189436, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8000}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 2.306898508s ago: executing program 0 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x88c0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.078945479s ago: executing program 1 (id=282): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x8, 0x7, 0xfdc6, 0x2, 0xf, 0x8, 0x4f}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140000000000800014000000000080002"], 0x110}}, 0x40040) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x8000, @none, 0x3, 0x2}, 0xe) (async) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000200)=0xffffff02, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000001840)=0x6, 0x4) (async) socket(0x26, 0x1, 0x8) sendmsg$nl_crypto(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x100, 0x70bd25, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x885}, 0x48d0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe0879c77fff7b241439686cb4db435d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b3943"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.077968758s ago: executing program 2 (id=283): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800, 0x0, 0x2}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000000800044000000006050003002000000008000240000000010900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 2.076680171s ago: executing program 4 (id=284): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1.980562617s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xc) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)=@pppoe, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000180)=""/14, 0xe}], 0x3, &(0x7f0000000240)=""/120, 0x78}, 0x1}], 0x1, 0x40012002, &(0x7f0000000300)) 1.838380014s ago: executing program 2 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="48143f62c000", @ANYRES32=r2, @ANYBLOB="00000000a8880000280012800b00010065727370616e00001800028004001200060010000000000006000e0000000000"], 0x48}}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.822153086s ago: executing program 1 (id=288): writev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000040)="308523517ff9d75a0c7bfdc7e97f658737856da68743aa5053c71ddaa5c8057aab171eb0e62a20f30da63ae9e7e2a974e939fb17e36404a27c84c2e1a4544ba13b9cdd80a90607aecc56eadd737a177847fe15ccf6b61708fe4facca756b4a465677dcf31ead71a3184b83a4900757009f873be52466a3c08990ec20f973b20309ddb2439c70eabcfa635436515e802a218a226523dadaabed42f353fd41dc3f4fd27765e4cde3bf2d1c41c007c15d05c907be7e5a2680e16ceb68c0b44b4711657bb1b234df994ec3301d5735e43d834be119568da929b4b2123384b518470ff2ebedca9b45a8972c2281177cc8265a3513f36d3f06023eed65bd875660c5c8cc377d9f85ffc93909be466585fc3e1e7d7582ee2e79b63a1f0dd892a3c1d067f9511ca64232cc500686d8ea5b6b028d7659a4b28b8d40967205ba4631e66a32946c1f4749a0415ef5df8522fa3986e529f903e2a636a035d33186c2143804088fb9a0677da8be4fcc4ff7b5adeec457976cdee69391925d4b32c52a6188fcf00d52cdd051249de6501fbbbef149d08467c405af867ccb8f3d7ee7197b4059b8d30dd4c23ebee176d24ea3b0b816d08d21c082eca7d9430d2b3d9c68df61e35f3008404b94ed24e1e3d1955e0f33955bb25f965747cde0bcb16c936c0633308011b698428fad36013aaafcb911a39116fce9cf91fe5264f9af5760b886aeb33cf1d78f8f052b1d86069e4fb7a1610fe9322b7f1bee95864dc73f8ae88847e4ef8ac4975b0dbdaf5cad656a53e73287918263cb37248075ef85113b9aaf45fba0904b0ae4d36a315cffe35b3cf739f781f7d96417c08d8f44f984cce4f7a721b66b4d4a83db7e91adb1d0f8704279c03b8dfc5f27aa27f91116e9299d7db268706fb51cc511b485a003861bac0c0bfce5290869b13455c61a6b13015f133ceb0b214445afb68d2b98e5275b5b9393b9a0b6e9d9ca7855c7dfc57e19181b035c2705feb3a19a187d5c58afe22c6f366283e66ced65b238aeae72cff18fd2c2369f3864a232c8328adb2006a2e5ca865d520a331cbc1c6a5824432efdfafbede3e0e9734fb35ee2119215f017687ae4b37c43b055e9b6860c8a726f5e0303e9727565e3ddb3fa87e3497ee597bfcdc5cb2fd1a31a24053671616fe0e91f6c2f41797d702d677dcd18a1120629b763d59f31b483b94aead6a81fc1bc6ab29dbd02c4b97579e91689c799033fea51e036c59e2bed3c78fc92b8b0ba89639b3112e1b98caaa3a25a7677ff98efd484088040dfc91368a852524af7a5becc4d92763d9051494fb25275b4bcf9f035fc99992115052427ebe656c3fec96cea7094979b485a5750567337a5932ebc33c607df5bf493e4e547322c75c88e1ed944b46c276fd5b43c3f8a501effce2d8ee2d9a2469e633e1429af93c1c759071f1e25233f315fdef65a7bfde02a73e7deb611cb7b04a06c5ff68da2f03cd0b159f7ca5d43e48484fcead6db67f05b08ce6e37984424d4fb3b2580db4495b611519df2fe45dce669e6aad13b38ac0c6c9afbc3fe463e634d022cb9e1c6c7f873beaf65161191084312bf75085dafbd10730b13ada634ef3891677f9cd78ed98d287299c4265062c2494a35acee661524dd4bceb8a4641d58e2c723cf66fd11d48983ca0421d02ad3f83c1284ae49da01fac3868af8356ab6601040e1baad40c6d52da4ba508c624fa8026a770474cfc1dc2ce954d22945b97ffb7e6c48bb7c585ab1787050caaab0a9f7fbb8cd794ea9cae54fb15251783f667094506a8a12cf8da21fc4ae67e3a8eecab6da2ca7eeb462b3b1dec4f61a38a96fb042dda6a88cfff9b96ef38003540df90f0bfe49ecb2dec82e2ce12a5071e9ae228589d9c04c98a0306e377d89772d03580ab6649b58f61c2450505010022602142a5f7cda096695e8a6de2fb1b201600fcb73dcb810db3894199255415e2cc9458292d01f1c1477f585220b18cdec8bef62e65674704df53864f4f7f47de74f81a70e5e46ff44497b103222d44ac05f953b7179043a8cec596a36d553e31de212baa36f0644b39880894eb1abe3a07799077bbded2b17b56469597c7a9fc8a4942227befe325d0d3fcb0e5fd4e85bda72f66ce1aa50dc6231b94f19de1259fc4945af73371af75d5c8d42a49ac7f2b8e6490d647b48cc263c40dab38c0a94d4217ad8f513d825f64a4d271e4d6b8f1ca655d50c63dc5206d915628764e89b402685d38c67c5f79335559cb7de8db073fe418457064f2e7142760c9bbc9da0dc9719d10f6cbb771c406482af2e075da100f554d363b9bf786164aa7f9b11a98f03ff08438e1107a596d8fd16da3d4803a4ac73edd8ed8a4b0f39aaf70654f36c6734f89c68c50e40f37e41db61db27b98ab9541acbe1fa0748c14e966fd6777a405b026aecc3eaf2036bfb3e1966a293ea706a60807a50c74526be3ee93c4b1f137196544b159db17a8bbabc3ec4e9fe5183893de3db7e2bc6e42f2bb8b6b07faad8f37db534d4a767528979edd64e6b80f88f897432de7ee754c2ac5afad8329aa1f64e2a507670e08ccd3d02340dfe4b25eea7b7f0050f4b1d776dd8cd660d89ef115264bd8dcb7729e00c370edf96f8f3fe223632aa464487a714f645fe45c469cb972794f14e36f0deef43aa6857b7c3c1c0c4ce6f29fb055a9ce8d8760de3de9bfd5f63b379e654e5add3a80ab89a0148f4f66cda36d278024e88c4ec6a892d863439708dbbb947b7346e34584b771d9993f55ee2329043ce52de87de3be3ea362e233176e3ad26f0ff4971378646b438ba7ac7fc7e0b95c03c9c4630e7167c40897d94f1454c6732d60bd5c83a82fac70ac4980ad6166f82af3926136aa55fe2cf3d2825fa3bf9060375781546ba1b52f8b741212d119d27dd5d0bb96126236896ce28cb5e0736056e8ffb72713a155ee4794206dbda3a0848dccbd9a22173e4edda14fd45da597d4b5634a7d803f5d0bba34120be84c643be1f910a28dca766363c2e8f06d3862c41dce8fde48ed1cd47e0f3ba2d8f10a46bfad87e89d18fb9d599e9c5ba762323a80778f51c63b9eafed9b16a8c8e48db49966ee9313d6d8eb0b9eeff0f8b6e2fe1dc3937ebab0e858d8368e2d032c6e273d10f11ef65492d054f6d7b229612f3fd593c28de3138bd99e7e3a9d74758a58b10f2003a864ef8c6cc826d925609ac9a7ae54ad4948a69187708e0017ff75f392aff422f6f7a972fd0d3d8fe54574be48b60df9e23f97aadb0372f6dbb898f76daecf256a1bc853ebba23324980cdb4144009ea4d19084e8101ef01085c574efaadb1a85e2d06aaafa17f3816695f6470cc5c92b26aab1c7c8593fc4290984350207b351b1f77286f077e887110e4030956dfc8a206c31db691bac775b9633873cb41b97858520f89756649bba5c4da7a007d7caaec03770c59ff911d7ed90fc756e857e0b740b4ebc677de1b66e5513587505e1243c90c4e26435449732832626da7efc5477a5ac2174b619c110b5261d3967c8b32609f1d4bf967727f1afdcd5cf4a0cbccd351dfd9b5d902c2c0678341bab9b3bce43ef33a6b83f0b5958355f6650d3011bbea38905c39948362bce6d824bba4d080e8d8eb205684123aa2a6b699cc3895a289edf271bdd93ab89d8e71173380ada770006b7213fb95949788774e8b520111a027d01633c78b89c80c573159d80a9da2f4205ed09f0e9452f6d202f6e8b087aeef0ed537bbd2f0dfaad174d6d6d03ef2ac811a5f92439ec9d3b4fcf23ae8802ff04347ab4ad6104c382ae2655ade46a993a9e313ed5c2a5297279a9f93d92ad1184c2e4d36a5539e6311d478973dc30af90dc2501a7fa2d75a4629de1898b73cdf3726b08cbc474600f23be0dce22be85a0dba14529657cafff9cc339586cfba3db9a790c9b4b99b754caecadc6a7cc0ecf6727ecd907769ce71d4ce908c97ffddd33b644ae3a3a346e9751fce187a8410b6cd5f55f2baafdde7f72b0037a0d5efa09d59c7b352003669448cefb47f3108289ff623539379acbe84bf98703a04482734a774966f4c45ed1497c3f8a2a910a5d03e334d7f1c77f08a3841717d9ab021a0342613ccdd0904dbe536805b62b261f5a0e054da5e8e7a06def2af242aaccfc353e06007a319edaf3a0b33371121ef445007a2251af9e9d340926178e64b02e1f97d4cb0ab2ef3ba5cfa4ef5a766bc4870dddef8a3bede46ef881e562202678633710e82ac3e3a1ecbe4dbb67dde89feac69ffe4bb1152abb4492ee1a56dc04775ba2770c1cb7d66672fa8fdcc142d4ab50fa2c480f25da49f721d1f588754c49de5b2e1bce11ecff7126988e616112774e773160610eec93a6738733c9b5c28597061551c737454725d70d6be11d9081fd8d2a11f6d3b0a1059b3064f1abdf192b8f3cb26bb5768387c8caf2d4ea3ab355d1a19b532aaea44b98fd2eb496cdf64b1960a65f4acac2f08d26a4675e088345650b6639392d1148ad91a4955341fdeeba8e268df95ad978c9a2f24962ed3bef98507901a5868f14b2cd35ee148231beb816a21623b43ab5b30146d0699d38108119fb78d21eaa30d81fdd4b63be3f443deaea38523b52dbfc70102a31cc728870fd866612b2c49b4750bb6c1262549727a4c1ce603c806829fd8855f40d434c1e47a17e9660d0a405a7a0618426a816a63313792c6c64bcd4528085649b4ef0d888a4bf30afce89fd996681d3cd1b4212eb927085cdfa62c8320dd4a55708affd82c55064fa7e9f92d3b1477b969d1d4927e266c1bf5e67ac673f3358d3ccf23306d89989015f8c5147c8cf07a17f61900cd609ea7caa86d2403e3a206bc35676c35d84dfbc7ac66a9a849f7134a4ff7a860fcdce81fb0c8fa1a1261f52a43228f228f1754553607b6ae674bcac6584558c14d7d2ef03cf9edc5e404b18656695aadd211ec63952cc8cac49eb6de09a4c4ee98bc6917112368e4a046bbecd4492e2d3d1d8c02a7dce3f1bdd27670a7889ea2e2440055377ceb863d9615762ceba78535f6b9445a680b761388314a5171828fa90ba3b307493601d0b250b348506306e015d9b65e5a23772a7fec8d25fd9034c87611d6e1c4464774e21bd93bb405d9da79a40128d51e388e9d81cb2aa270a9e7c27ca6c782f6e94f31c27e79749913707410ab78039a1efb580a1b227214fd4ea8688738624e0a82ae27eeff693f16de4f67e231e0d050af3fca603c96bc88b95c926e252d3d67ca12ff231322a8c7de27e6f86963df3924d06397e336fda5edd68f8cd1b2b6d3ed1af70023726f1e03f86773a9bcccd90f40e42637ec63b0a27ece1b6c67871f30a516fb245a5b38822b8d7d91fa3da249e4568ad87d3b86fcd2bb139f31fc1887ecb6256a3c802ecd4aad019054503a7775b92151be45c8f7614a649f8a7c788cbd6bb24273114a1ccaf646c089470ab81ca65507170f068c13cb0776256b262a4747051435c5f695e3925b8b56cffd189b17555bb5f022cfde31aa93b8ad9387df71c69d1f2c88835ddf76e7120cfcf181ac43d8dcb5c0b6374a5c68bd2ba275451ce928bb0c50f05995411701f8a627cf7fec001e22661f2b2f0e1ec501bd9b04a0456004c3019ef8f48c67525841ef838cd0f7b5a0cf33ea2dcd732fd7d27eb20d22cb23a4774e7dfc8841f63f33d45732ed19243fcfacbbc30fd0cdb0a07b160d198da4224bfe9e467a72160fc10643ef66e2dccb58156a4b3e468c0450043f0e99bd57afba9e4127f12b45d0635452a30e7ac2fdcdabe", 0x1000}], 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) 1.677568788s ago: executing program 1 (id=289): r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) r4 = socket$nl_generic(0x11, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0x80, 0x3, 0x9c, 0x8}, {0x5, 0x8, 0x0, 0x8001}, {0xa50, 0x7, 0x3, 0x4}, {0x74b5, 0x7, 0xae, 0x23}, {0xfffa, 0x8, 0x9, 0x4}, {0x3, 0x9, 0xe, 0xe0000000}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, r3, 0x5, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x3a, &(0x7f00000000c0)=""/58, 0x41000, 0x0, '\x00', r6, @fallback=0x1c, r3, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)=[r7, r3, r1, r8, r1, r3, r1, r2, r3, r1], 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xe, &(0x7f0000001c40)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.618963293s ago: executing program 3 (id=290): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x3c, r0, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000685ebd475675a14d000000009580000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x26}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008804}, 0x41) 1.618493174s ago: executing program 4 (id=291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da92}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) (fail_nth: 34) 1.561669253s ago: executing program 2 (id=292): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, &(0x7f0000000000)=0x380000, r3, &(0x7f0000000040)=0xfbde, 0x2, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x40804) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x40804) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000380)={r9, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000000000000000000730135000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.48794726s ago: executing program 1 (id=293): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8954, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xfe8, @loopback}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x40}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}], 0x64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'pim6reg0\x00', {0x2286}, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000050000000800020000000000080003000000e4"], 0x24}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f1401002abd70f0fadbdf2508000100000000000800450073726c04"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 991.099368ms ago: executing program 4 (id=294): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 981.093146ms ago: executing program 0 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="b9480d806c65000000000000000000000000000000000000000000000000000002"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000600)=""/243, 0xf3}], 0x4, &(0x7f0000000180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x81) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) 942.986283ms ago: executing program 2 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x10060}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef) 898.697199ms ago: executing program 3 (id=297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f0000000000000014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6985308f5", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000af91ba171cfb7f61a6ad6637659677739134baa82150e89292e0722c395329ffbd6817651519690a7e8b7f84bf8e3a0829467e17a421ce725e10331bf9c50467f7e05043ee3b914c30b856f61678c72b7a73cfddbf6cfa8982d47608b648f9cc0c5fb4915132bb39dc6c7cf102482231b452cd95908f7d7f97f60e591cedcce3cb8396656c5e6e9295d0ec560a66189a1777", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f0000000000000014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6985308f5", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000af91ba171cfb7f61a6ad6637659677739134baa82150e89292e0722c395329ffbd6817651519690a7e8b7f84bf8e3a0829467e17a421ce725e10331bf9c50467f7e05043ee3b914c30b856f61678c72b7a73cfddbf6cfa8982d47608b648f9cc0c5fb4915132bb39dc6c7cf102482231b452cd95908f7d7f97f60e591cedcce3cb8396656c5e6e9295d0ec560a66189a1777", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) 818.843291ms ago: executing program 4 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x44880}, 0x4004000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000000), 0x10) (async) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000000), 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) 576.643685ms ago: executing program 3 (id=299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000044) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2084fce3", @ANYRES16=r1, @ANYBLOB="21082cbd7000ffdbdf252e0000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x80804}, 0x4000004) 502.919967ms ago: executing program 4 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002"], 0xd8}}, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1404, 0x2, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004001}, 0x44800) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) 441.645179ms ago: executing program 2 (id=301): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000680)=0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4, 0x10}}]}, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r7, 0x7286c000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740120001908000a0000000000000000000000000d000000", @ANYRES32=r10, @ANYBLOB="0c000b00010000e0040000601e0106000a610d0b348fe138f70bf0362e19acdc6e11259a3498a1ef824fe17dd73c3aae025eff6d3779a0123b6d107d6b0f042714fdd8cd1f58b1916c42b8377603a8f9e3609e050acde3fb50916f63045050fa97cf2cb725ca06a9c1ebcab500e6bc259f7ad5d386714a0284ca6f76a837928c20471a0c44dee8e389dff882d2f0c1bc87a556b66a0864847354f760a6c9ac121e1d815315ed17ba79a5ed046b3ee08b0f0da7f7ffd3359f3822563316c5c31227d019a17c4c0b47e06e6e33e9c7ca8b026f7388e78d92960ad6596f3e22db9ad8d83367e330a0c18869831bde583df2c4c5db57e642b8b0f2ba484392bd8654166d6c1dd3bcd78926801989cef84526ea60b9572e014824de264f1fa1a03b6d96b7425124307cbe251900000c000b00030000200200002008000e00", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="05000d000400000008000900", @ANYRES32=r6, @ANYBLOB], 0x174}}, 0x4044) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)={0x14, 0x69, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800034004000000", 0x58}], 0x1) 432.911583ms ago: executing program 1 (id=302): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r2, 0x29, 0x21, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x3f8, 0x208, 0x160, 0xfeffffff, 0x160, 0xa8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@private=0xffffffff, @initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0xff, 'macvlan1\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @remote, @icmp_id=0x64, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @icmp_id=0x67, @port=0x4e20}}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast2, [0xff000000, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0x0, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff000000, 0x0, 0xff], 0x2, 0xfffffffe, 0x3c, 0x4e21, 0x4e22, 0x4e22, 0x4e20, 0x2000}, 0x1c1, 0x401}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x3c, r4, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x404c044) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb7}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffdf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080190}, 0x20000040) 326.740576ms ago: executing program 3 (id=303): r0 = socket(0x37, 0x4, 0x9) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0x8, 0x7, 0x8}) 295.673693ms ago: executing program 4 (id=304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da92}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) (fail_nth: 35) 226.752915ms ago: executing program 1 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60040e9}, 0x20000004) 158.913475ms ago: executing program 3 (id=306): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4.069119ms ago: executing program 2 (id=307): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x1c, 0x2b, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x11f, 0x0, 0x0, @str='wpan1\x00'}]}, 0x1c}], 0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000040000000500000000100000", @ANYRES32, @ANYBLOB="0e00000000000000000000000000b01900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) shutdown(r1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x4}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6tnl0\x00'}]}, 0x40}}, 0x0) 0s ago: executing program 3 (id=308): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="b408"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, 0x0, &(0x7f0000000280)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000010000900010073797a307d00000034000000030a01010000000000000000017f1130b6000b0073797a310000000009000008000a4000000004"], 0x250}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'hsr0\x00', 0x8802}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="b408"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$inet_int(r0, 0x10d, 0x2, 0x0, &(0x7f0000000280)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000010000900010073797a307d00000034000000030a01010000000000000000017f1130b6000b0073797a310000000009000008000a4000000004"], 0x250}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'hsr0\x00', 0x8802}) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 78.093651][ T5828] cgroup: Unknown subsys name 'net' [ 78.252029][ T5828] cgroup: Unknown subsys name 'cpuset' [ 78.260954][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.891268][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.445816][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.466133][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.474292][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.482566][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.490323][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.508044][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.517741][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.518453][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.525582][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.533055][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.547800][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.556161][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.558698][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.564495][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.578758][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.588065][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.611267][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.619952][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.626439][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.640030][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.704495][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.714198][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.722810][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.731109][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.739116][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.314318][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 83.404287][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 83.442392][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 83.521366][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 83.596427][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 83.609610][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.617384][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.624997][ T5847] bridge_slave_0: entered allmulticast mode [ 83.633131][ T5847] bridge_slave_0: entered promiscuous mode [ 83.642228][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.649670][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.656866][ T5847] bridge_slave_1: entered allmulticast mode [ 83.664338][ T5847] bridge_slave_1: entered promiscuous mode [ 83.809441][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.872850][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.919336][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.926558][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.934328][ T5838] bridge_slave_0: entered allmulticast mode [ 83.941564][ T5838] bridge_slave_0: entered promiscuous mode [ 83.950232][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.957371][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.964638][ T5838] bridge_slave_1: entered allmulticast mode [ 83.972134][ T5838] bridge_slave_1: entered promiscuous mode [ 84.017221][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.024546][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.032915][ T5851] bridge_slave_0: entered allmulticast mode [ 84.040682][ T5851] bridge_slave_0: entered promiscuous mode [ 84.049593][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.056736][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.064381][ T5851] bridge_slave_1: entered allmulticast mode [ 84.072444][ T5851] bridge_slave_1: entered promiscuous mode [ 84.127320][ T5847] team0: Port device team_slave_0 added [ 84.134737][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.142215][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.149949][ T5839] bridge_slave_0: entered allmulticast mode [ 84.157168][ T5839] bridge_slave_0: entered promiscuous mode [ 84.207267][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.221705][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.233041][ T5847] team0: Port device team_slave_1 added [ 84.260901][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.268636][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.275783][ T5839] bridge_slave_1: entered allmulticast mode [ 84.283251][ T5839] bridge_slave_1: entered promiscuous mode [ 84.292757][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.305506][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.314813][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.322589][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.329889][ T5858] bridge_slave_0: entered allmulticast mode [ 84.337054][ T5858] bridge_slave_0: entered promiscuous mode [ 84.394659][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.407694][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.414941][ T5858] bridge_slave_1: entered allmulticast mode [ 84.423052][ T5858] bridge_slave_1: entered promiscuous mode [ 84.458023][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.465000][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.491265][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.535112][ T5851] team0: Port device team_slave_0 added [ 84.558235][ T5838] team0: Port device team_slave_0 added [ 84.565394][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.572923][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.599098][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.620915][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.634296][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.644481][ T5854] Bluetooth: hci1: command tx timeout [ 84.653804][ T5851] team0: Port device team_slave_1 added [ 84.662149][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.675837][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.686545][ T5838] team0: Port device team_slave_1 added [ 84.717582][ T5854] Bluetooth: hci2: command tx timeout [ 84.723395][ T5854] Bluetooth: hci0: command tx timeout [ 84.724138][ T5846] Bluetooth: hci3: command tx timeout [ 84.797899][ T5846] Bluetooth: hci4: command tx timeout [ 84.817743][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.824725][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.850670][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.874323][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.881563][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.907527][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.920492][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.927524][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.953452][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.979656][ T5839] team0: Port device team_slave_0 added [ 84.992286][ T5847] hsr_slave_0: entered promiscuous mode [ 84.998998][ T5847] hsr_slave_1: entered promiscuous mode [ 85.006245][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.013593][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.039549][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.063075][ T5858] team0: Port device team_slave_0 added [ 85.072025][ T5858] team0: Port device team_slave_1 added [ 85.085876][ T5839] team0: Port device team_slave_1 added [ 85.151913][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.159502][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.185927][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.199068][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.206041][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.232060][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.307347][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.314464][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.340430][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.394352][ T5838] hsr_slave_0: entered promiscuous mode [ 85.402510][ T5838] hsr_slave_1: entered promiscuous mode [ 85.408932][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.416650][ T5838] Cannot create hsr debugfs directory [ 85.424441][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.431555][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.457553][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.480426][ T5851] hsr_slave_0: entered promiscuous mode [ 85.486932][ T5851] hsr_slave_1: entered promiscuous mode [ 85.493946][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.501648][ T5851] Cannot create hsr debugfs directory [ 85.676749][ T5839] hsr_slave_0: entered promiscuous mode [ 85.684062][ T5839] hsr_slave_1: entered promiscuous mode [ 85.690626][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.698763][ T5839] Cannot create hsr debugfs directory [ 85.753079][ T5858] hsr_slave_0: entered promiscuous mode [ 85.760308][ T5858] hsr_slave_1: entered promiscuous mode [ 85.766386][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.774120][ T5858] Cannot create hsr debugfs directory [ 86.195222][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.225237][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.236641][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.274350][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.335758][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.347262][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.375075][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.386547][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.475478][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.494946][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.511970][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.523596][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.640707][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.657272][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.684056][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.712201][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.719582][ T5846] Bluetooth: hci1: command tx timeout [ 86.734675][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.799401][ T5846] Bluetooth: hci0: command tx timeout [ 86.804855][ T5846] Bluetooth: hci3: command tx timeout [ 86.807720][ T5854] Bluetooth: hci2: command tx timeout [ 86.821567][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.834778][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.877902][ T5854] Bluetooth: hci4: command tx timeout [ 86.917108][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.924414][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.946046][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.983501][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.006914][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.014145][ T4856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.060696][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.107880][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.132777][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.139990][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.151701][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.158920][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.184097][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.231903][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.366318][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.389684][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.408827][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.416007][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.496709][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.504254][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.576178][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.656497][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.724187][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.731365][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.743326][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.750467][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.814661][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.856029][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.884925][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.952054][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.024805][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.032056][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.093670][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.100845][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.117297][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.136058][ T5847] veth0_vlan: entered promiscuous mode [ 88.158686][ T5838] veth0_vlan: entered promiscuous mode [ 88.195340][ T5847] veth1_vlan: entered promiscuous mode [ 88.242680][ T5838] veth1_vlan: entered promiscuous mode [ 88.306206][ T5851] veth0_vlan: entered promiscuous mode [ 88.331750][ T5847] veth0_macvtap: entered promiscuous mode [ 88.342496][ T5847] veth1_macvtap: entered promiscuous mode [ 88.374480][ T5851] veth1_vlan: entered promiscuous mode [ 88.423526][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.441082][ T5838] veth0_macvtap: entered promiscuous mode [ 88.465030][ T5838] veth1_macvtap: entered promiscuous mode [ 88.486903][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.533314][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.551482][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.574462][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.584808][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.594359][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609390][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.621546][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.634211][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.646787][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.657873][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.669640][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.703633][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.713399][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.723755][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.732956][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.763511][ T5851] veth0_macvtap: entered promiscuous mode [ 88.801377][ T5854] Bluetooth: hci1: command tx timeout [ 88.819617][ T5851] veth1_macvtap: entered promiscuous mode [ 88.854546][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.880304][ T5854] Bluetooth: hci2: command tx timeout [ 88.882885][ T5846] Bluetooth: hci3: command tx timeout [ 88.885753][ T5854] Bluetooth: hci0: command tx timeout [ 88.900185][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.912389][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.922865][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.933666][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.945219][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.958061][ T5854] Bluetooth: hci4: command tx timeout [ 88.985207][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.996535][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.006832][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.017411][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.029287][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.073824][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.083544][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.092629][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.101505][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.142313][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.160534][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.213419][ T5858] veth0_vlan: entered promiscuous mode [ 89.222854][ T5839] veth0_vlan: entered promiscuous mode [ 89.268548][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.271701][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.276396][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.295845][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.306450][ T5839] veth1_vlan: entered promiscuous mode [ 89.324683][ T5858] veth1_vlan: entered promiscuous mode [ 89.432150][ T5858] veth0_macvtap: entered promiscuous mode [ 89.482463][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.488696][ T5839] veth0_macvtap: entered promiscuous mode [ 89.506828][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.509004][ T5858] veth1_macvtap: entered promiscuous mode [ 89.521519][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.541081][ T5839] veth1_macvtap: entered promiscuous mode [ 89.566602][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.581244][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.688550][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.699612][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.710007][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.720871][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.731120][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.742514][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.754535][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.777973][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.788600][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.799954][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.810829][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.821484][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.834022][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.867214][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.884899][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.889734][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.903612][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.915615][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.927327][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.939320][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.952941][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.964227][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.982113][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.993927][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.006815][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.022189][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.032070][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.041103][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.049907][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.065814][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.072369][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.077883][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.100573][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.111302][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.122324][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.132904][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.142828][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.154072][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.169530][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.181783][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.191655][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.201206][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.210006][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.443880][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 90.458639][ T5939] tc_dump_action: action bad kind [ 90.729274][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.838090][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.856111][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.882418][ T5854] Bluetooth: hci1: command tx timeout [ 90.952332][ T5957] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.963778][ T5854] Bluetooth: hci3: command tx timeout [ 90.963826][ T5854] Bluetooth: hci2: command tx timeout [ 90.968265][ T5846] Bluetooth: hci0: command tx timeout [ 90.981514][ T5956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 90.987138][ T4856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.999555][ T4856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.031672][ T5959] veth0: entered promiscuous mode [ 91.037590][ T5846] Bluetooth: hci4: command tx timeout [ 91.089573][ T5961] veth0: left promiscuous mode [ 91.112706][ T4856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.120190][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.132986][ T4856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.141676][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.734169][ T5986] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 91.876894][ T5846] block nbd0: Receive control failed (result -32) [ 91.919545][ T52] cfg80211: failed to load regulatory.db [ 92.012194][ T5991] C: renamed from lo (while UP) [ 92.057662][ T5998] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 92.090108][ T5998] netlink: 'syz.4.24': attribute type 3 has an invalid length. [ 92.111704][ T5998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24'. [ 92.280961][ T6007] netlink: 'syz.3.26': attribute type 11 has an invalid length. [ 92.349981][ T6007] netlink: 'syz.3.26': attribute type 11 has an invalid length. [ 92.399858][ T6007] netlink: 224 bytes leftover after parsing attributes in process `syz.3.26'. [ 92.663027][ T6025] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 92.995246][ T6041] Zero length message leads to an empty skb [ 93.002723][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 93.651356][ T6076] FAULT_INJECTION: forcing a failure. [ 93.651356][ T6076] name failslab, interval 1, probability 0, space 0, times 1 [ 93.713051][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.0.43 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 93.713087][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.713107][ T6076] Call Trace: [ 93.713115][ T6076] [ 93.713124][ T6076] dump_stack_lvl+0x189/0x250 [ 93.713172][ T6076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.713203][ T6076] ? __pfx__printk+0x10/0x10 [ 93.713231][ T6076] ? __pfx___might_resched+0x10/0x10 [ 93.713252][ T6076] ? fs_reclaim_acquire+0x7d/0x100 [ 93.713287][ T6076] should_fail_ex+0x414/0x560 [ 93.713319][ T6076] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 93.713342][ T6076] should_failslab+0xa8/0x100 [ 93.713371][ T6076] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 93.713391][ T6076] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 93.713418][ T6076] ? alloc_inode+0x67/0x1b0 [ 93.713447][ T6076] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 93.713467][ T6076] alloc_inode+0x67/0x1b0 [ 93.713495][ T6076] new_inode+0x22/0x170 [ 93.713521][ T6076] ? start_creating+0x1fe/0x310 [ 93.713546][ T6076] __debugfs_create_file+0x14d/0x4f0 [ 93.713572][ T6076] debugfs_create_file_full+0x3f/0x60 [ 93.713599][ T6076] nbd_start_device+0x323/0xac0 [ 93.713629][ T6076] ? __nla_parse+0x40/0x60 [ 93.713651][ T6076] nbd_genl_connect+0x1250/0x1930 [ 93.713687][ T6076] ? __pfx_nbd_genl_connect+0x10/0x10 [ 93.713727][ T6076] ? __nla_parse+0x40/0x60 [ 93.713751][ T6076] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 93.713782][ T6076] genl_family_rcv_msg_doit+0x212/0x300 [ 93.713810][ T6076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.713847][ T6076] ? stack_depot_save_flags+0x40/0x910 [ 93.713883][ T6076] genl_rcv_msg+0x60e/0x790 [ 93.713910][ T6076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.713928][ T6076] ? __pfx_nbd_genl_connect+0x10/0x10 [ 93.713970][ T6076] netlink_rcv_skb+0x219/0x490 [ 93.713998][ T6076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.714019][ T6076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.714078][ T6076] ? down_read+0x1ad/0x2e0 [ 93.714117][ T6076] genl_rcv+0x28/0x40 [ 93.714146][ T6076] netlink_unicast+0x758/0x8d0 [ 93.714183][ T6076] netlink_sendmsg+0x805/0xb30 [ 93.714220][ T6076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.714251][ T6076] ? aa_sock_msg_perm+0x94/0x160 [ 93.714276][ T6076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.714298][ T6076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.714326][ T6076] __sock_sendmsg+0x219/0x270 [ 93.714354][ T6076] ____sys_sendmsg+0x505/0x830 [ 93.714390][ T6076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.714431][ T6076] ? import_iovec+0x74/0xa0 [ 93.714458][ T6076] ___sys_sendmsg+0x21f/0x2a0 [ 93.714491][ T6076] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.714562][ T6076] ? __fget_files+0x2a/0x420 [ 93.714590][ T6076] ? __fget_files+0x3a0/0x420 [ 93.714629][ T6076] __x64_sys_sendmsg+0x19b/0x260 [ 93.714664][ T6076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.714714][ T6076] ? do_syscall_64+0xba/0x210 [ 93.714745][ T6076] do_syscall_64+0xf6/0x210 [ 93.714773][ T6076] ? clear_bhb_loop+0x45/0xa0 [ 93.714798][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.714818][ T6076] RIP: 0033:0x7f785c18e969 [ 93.714844][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.714861][ T6076] RSP: 002b:00007f785cfaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.714887][ T6076] RAX: ffffffffffffffda RBX: 00007f785c3b5fa0 RCX: 00007f785c18e969 [ 93.714901][ T6076] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 93.714914][ T6076] RBP: 00007f785cfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 93.714926][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.714937][ T6076] R13: 0000000000000000 R14: 00007f785c3b5fa0 R15: 00007fff09aba648 [ 93.714970][ T6076] [ 93.734977][ T6081] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.46'. [ 93.740206][ T6076] debugfs: out of free dentries, can not create file 'tasks' [ 93.754119][ T6081] netlink: zone id is out of range [ 94.148103][ T5846] block nbd1: Receive control failed (result -32) [ 94.167538][ T6081] netlink: zone id is out of range [ 94.210325][ T6081] netlink: get zone limit has 8 unknown bytes [ 94.405951][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.51'. [ 94.734549][ T6116] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.758256][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 94.817365][ T6117] netlink: 'syz.0.57': attribute type 7 has an invalid length. [ 94.842916][ T6122] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 94.862444][ T6117] netlink: 'syz.0.57': attribute type 8 has an invalid length. [ 94.907718][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 95.001394][ T6117] bond0: entered promiscuous mode [ 95.008876][ T6117] bond_slave_0: entered promiscuous mode [ 95.014843][ T6117] bond_slave_1: entered promiscuous mode [ 95.035920][ T6117] ip6gretap0: entered promiscuous mode [ 95.069041][ T6117] gretap0: entered promiscuous mode [ 95.310099][ T6141] FAULT_INJECTION: forcing a failure. [ 95.310099][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 95.351483][ T6141] CPU: 0 UID: 0 PID: 6141 Comm: syz.3.61 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 95.351512][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.351525][ T6141] Call Trace: [ 95.351533][ T6141] [ 95.351541][ T6141] dump_stack_lvl+0x189/0x250 [ 95.351580][ T6141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.351607][ T6141] ? __pfx__printk+0x10/0x10 [ 95.351634][ T6141] ? __pfx___might_resched+0x10/0x10 [ 95.351655][ T6141] ? fs_reclaim_acquire+0x7d/0x100 [ 95.351687][ T6141] should_fail_ex+0x414/0x560 [ 95.351717][ T6141] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 95.351739][ T6141] should_failslab+0xa8/0x100 [ 95.351765][ T6141] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 95.351784][ T6141] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 95.351808][ T6141] ? alloc_inode+0x67/0x1b0 [ 95.351837][ T6141] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 95.351856][ T6141] alloc_inode+0x67/0x1b0 [ 95.351879][ T6141] new_inode+0x22/0x170 [ 95.351909][ T6141] ? start_creating+0x1fe/0x310 [ 95.351932][ T6141] __debugfs_create_file+0x14d/0x4f0 [ 95.351959][ T6141] debugfs_create_file_full+0x3f/0x60 [ 95.351981][ T6141] nbd_start_device+0x323/0xac0 [ 95.352008][ T6141] ? __nla_parse+0x40/0x60 [ 95.352031][ T6141] nbd_genl_connect+0x1250/0x1930 [ 95.352065][ T6141] ? __pfx_nbd_genl_connect+0x10/0x10 [ 95.352101][ T6141] ? __nla_parse+0x40/0x60 [ 95.352124][ T6141] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 95.352153][ T6141] genl_family_rcv_msg_doit+0x212/0x300 [ 95.352180][ T6141] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.352213][ T6141] ? stack_depot_save_flags+0x40/0x910 [ 95.352249][ T6141] genl_rcv_msg+0x60e/0x790 [ 95.352275][ T6141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.352293][ T6141] ? __pfx_nbd_genl_connect+0x10/0x10 [ 95.352332][ T6141] netlink_rcv_skb+0x219/0x490 [ 95.352358][ T6141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.352377][ T6141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.352426][ T6141] ? down_read+0x1ad/0x2e0 [ 95.352456][ T6141] genl_rcv+0x28/0x40 [ 95.352484][ T6141] netlink_unicast+0x758/0x8d0 [ 95.352518][ T6141] netlink_sendmsg+0x805/0xb30 [ 95.352554][ T6141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.352583][ T6141] ? aa_sock_msg_perm+0x94/0x160 [ 95.352608][ T6141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.352632][ T6141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.352659][ T6141] __sock_sendmsg+0x219/0x270 [ 95.352686][ T6141] ____sys_sendmsg+0x505/0x830 [ 95.352722][ T6141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.352761][ T6141] ? import_iovec+0x74/0xa0 [ 95.352789][ T6141] ___sys_sendmsg+0x21f/0x2a0 [ 95.352822][ T6141] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.352894][ T6141] ? __fget_files+0x2a/0x420 [ 95.352928][ T6141] ? __fget_files+0x3a0/0x420 [ 95.352968][ T6141] __x64_sys_sendmsg+0x19b/0x260 [ 95.353002][ T6141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.353052][ T6141] ? do_syscall_64+0xba/0x210 [ 95.353084][ T6141] do_syscall_64+0xf6/0x210 [ 95.353112][ T6141] ? clear_bhb_loop+0x45/0xa0 [ 95.353137][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.353156][ T6141] RIP: 0033:0x7fbc35d8e969 [ 95.353175][ T6141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.353191][ T6141] RSP: 002b:00007fbc36b86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.353213][ T6141] RAX: ffffffffffffffda RBX: 00007fbc35fb5fa0 RCX: 00007fbc35d8e969 [ 95.353228][ T6141] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 95.353241][ T6141] RBP: 00007fbc36b86090 R08: 0000000000000000 R09: 0000000000000000 [ 95.353252][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.353263][ T6141] R13: 0000000000000000 R14: 00007fbc35fb5fa0 R15: 00007ffc27ffa188 [ 95.353294][ T6141] [ 95.405180][ T6141] debugfs: out of free dentries, can not create file 'tasks' [ 95.552404][ T6144] __nla_validate_parse: 3 callbacks suppressed [ 95.552427][ T6144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.62'. [ 95.824482][ T5846] block nbd2: Receive control failed (result -32) [ 96.051873][ T6160] netlink: 80 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.551145][ T6179] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 96.614156][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.621837][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.868458][ T6203] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 96.876123][ T6203] netlink: 'syz.4.73': attribute type 3 has an invalid length. [ 96.947243][ T6203] netlink: 224 bytes leftover after parsing attributes in process `syz.4.73'. [ 97.516534][ T6232] tipc: Started in network mode [ 97.536443][ T6232] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.552729][ T6232] tipc: Enabled bearer , priority 10 [ 97.592143][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 97.631613][ T6243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.83'. [ 97.804584][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'. [ 97.914398][ T6252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.022801][ T6262] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.311895][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 98.323859][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 98.338147][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 98.607063][ T6288] xt_socket: unknown flags 0x3c [ 98.670433][ T974] tipc: Node number set to 2886997162 [ 98.825492][ T6299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.99'. [ 98.922158][ T6300] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.304222][ T6320] FAULT_INJECTION: forcing a failure. [ 99.304222][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 99.372685][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.3.105 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 99.372715][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.372727][ T6320] Call Trace: [ 99.372735][ T6320] [ 99.372744][ T6320] dump_stack_lvl+0x189/0x250 [ 99.372784][ T6320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.372816][ T6320] ? __pfx__printk+0x10/0x10 [ 99.372841][ T6320] ? __pfx___might_resched+0x10/0x10 [ 99.372861][ T6320] ? fs_reclaim_acquire+0x7d/0x100 [ 99.372898][ T6320] should_fail_ex+0x414/0x560 [ 99.372931][ T6320] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 99.372954][ T6320] should_failslab+0xa8/0x100 [ 99.372983][ T6320] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 99.373004][ T6320] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 99.373031][ T6320] ? alloc_inode+0x67/0x1b0 [ 99.373060][ T6320] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 99.373082][ T6320] alloc_inode+0x67/0x1b0 [ 99.373110][ T6320] new_inode+0x22/0x170 [ 99.373136][ T6320] ? start_creating+0x1fe/0x310 [ 99.373161][ T6320] __debugfs_create_file+0x14d/0x4f0 [ 99.373189][ T6320] debugfs_create_file_unsafe+0x3a/0x50 [ 99.373214][ T6320] nbd_start_device+0x33e/0xac0 [ 99.373244][ T6320] ? __nla_parse+0x40/0x60 [ 99.373268][ T6320] nbd_genl_connect+0x1250/0x1930 [ 99.373305][ T6320] ? __pfx_nbd_genl_connect+0x10/0x10 [ 99.373351][ T6320] ? __nla_parse+0x40/0x60 [ 99.373373][ T6320] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 99.373404][ T6320] genl_family_rcv_msg_doit+0x212/0x300 [ 99.373432][ T6320] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 99.373468][ T6320] ? stack_depot_save_flags+0x40/0x910 [ 99.373504][ T6320] genl_rcv_msg+0x60e/0x790 [ 99.373531][ T6320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.373549][ T6320] ? __pfx_nbd_genl_connect+0x10/0x10 [ 99.373591][ T6320] netlink_rcv_skb+0x219/0x490 [ 99.373619][ T6320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.373640][ T6320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.373693][ T6320] ? down_read+0x1ad/0x2e0 [ 99.373730][ T6320] genl_rcv+0x28/0x40 [ 99.373759][ T6320] netlink_unicast+0x758/0x8d0 [ 99.373796][ T6320] netlink_sendmsg+0x805/0xb30 [ 99.373833][ T6320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.373864][ T6320] ? aa_sock_msg_perm+0x94/0x160 [ 99.373888][ T6320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.373912][ T6320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.373939][ T6320] __sock_sendmsg+0x219/0x270 [ 99.373966][ T6320] ____sys_sendmsg+0x505/0x830 [ 99.374003][ T6320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.374042][ T6320] ? import_iovec+0x74/0xa0 [ 99.374070][ T6320] ___sys_sendmsg+0x21f/0x2a0 [ 99.374103][ T6320] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.374174][ T6320] ? __fget_files+0x2a/0x420 [ 99.374199][ T6320] ? __fget_files+0x3a0/0x420 [ 99.374238][ T6320] __x64_sys_sendmsg+0x19b/0x260 [ 99.374271][ T6320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.374327][ T6320] ? do_syscall_64+0xba/0x210 [ 99.374360][ T6320] do_syscall_64+0xf6/0x210 [ 99.374387][ T6320] ? clear_bhb_loop+0x45/0xa0 [ 99.374413][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.374432][ T6320] RIP: 0033:0x7fbc35d8e969 [ 99.374450][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.374466][ T6320] RSP: 002b:00007fbc36b86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.374487][ T6320] RAX: ffffffffffffffda RBX: 00007fbc35fb5fa0 RCX: 00007fbc35d8e969 [ 99.374502][ T6320] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 99.374514][ T6320] RBP: 00007fbc36b86090 R08: 0000000000000000 R09: 0000000000000000 [ 99.374525][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.374536][ T6320] R13: 0000000000000000 R14: 00007fbc35fb5fa0 R15: 00007ffc27ffa188 [ 99.374569][ T6320] [ 99.375031][ T6320] debugfs: out of free dentries, can not create file 'size_bytes' [ 99.670881][ T6334] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 99.711928][ T6335] x_tables: duplicate underflow at hook 2 [ 99.812101][ T6334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.854673][ T6334] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.877234][ T5846] block nbd3: Receive control failed (result -32) [ 100.434945][ T6373] IPVS: length: 184 != 24 [ 100.450000][ T6370] IPVS: length: 184 != 24 [ 100.615219][ T6375] __nla_validate_parse: 5 callbacks suppressed [ 100.615239][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 100.682294][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 100.705711][ T6380] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.122'. [ 100.762256][ T6383] FAULT_INJECTION: forcing a failure. [ 100.762256][ T6383] name failslab, interval 1, probability 0, space 0, times 0 [ 100.769393][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.125'. [ 100.800445][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.0.123 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 100.800482][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.800494][ T6383] Call Trace: [ 100.800503][ T6383] [ 100.800512][ T6383] dump_stack_lvl+0x189/0x250 [ 100.800552][ T6383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.800583][ T6383] ? __pfx__printk+0x10/0x10 [ 100.800630][ T6383] ? __pfx___might_resched+0x10/0x10 [ 100.800650][ T6383] ? fs_reclaim_acquire+0x7d/0x100 [ 100.800688][ T6383] should_fail_ex+0x414/0x560 [ 100.800722][ T6383] should_failslab+0xa8/0x100 [ 100.800751][ T6383] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 100.800778][ T6383] ? __d_alloc+0x31/0x6f0 [ 100.800802][ T6383] __d_alloc+0x31/0x6f0 [ 100.800818][ T6383] ? stack_depot_save_flags+0x40/0x910 [ 100.800853][ T6383] d_alloc_parallel+0xe0/0x14e0 [ 100.800875][ T6383] ? kasan_save_track+0x4f/0x80 [ 100.800896][ T6383] ? kasan_save_track+0x3e/0x80 [ 100.800916][ T6383] ? __kasan_slab_alloc+0x6c/0x80 [ 100.800939][ T6383] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 100.800962][ T6383] ? security_inode_alloc+0x39/0x330 [ 100.800986][ T6383] ? alloc_inode+0x82/0x1b0 [ 100.801008][ T6383] ? new_inode+0x22/0x170 [ 100.801039][ T6383] ? __lock_acquire+0xaac/0xd20 [ 100.801076][ T6383] ? __pfx_d_alloc_parallel+0x10/0x10 [ 100.801103][ T6383] ? __raw_spin_lock_init+0x45/0x100 [ 100.801129][ T6383] ? __init_waitqueue_head+0xa9/0x150 [ 100.801161][ T6383] __lookup_slow+0x116/0x3d0 [ 100.801184][ T6383] ? __pfx___lookup_slow+0x10/0x10 [ 100.801227][ T6383] lookup_one_len+0x1aa/0x310 [ 100.801250][ T6383] ? __pfx_lookup_one_len+0x10/0x10 [ 100.801267][ T6383] ? down_write+0x162/0x1f0 [ 100.801296][ T6383] ? __pfx_down_write+0x10/0x10 [ 100.801323][ T6383] ? mntput+0x65/0xc0 [ 100.801352][ T6383] start_creating+0x18d/0x310 [ 100.801378][ T6383] __debugfs_create_file+0x79/0x4f0 [ 100.801406][ T6383] debugfs_create_file_unsafe+0x3a/0x50 [ 100.801437][ T6383] nbd_start_device+0x356/0xac0 [ 100.801468][ T6383] ? __nla_parse+0x40/0x60 [ 100.801498][ T6383] nbd_genl_connect+0x1250/0x1930 [ 100.801535][ T6383] ? __pfx_nbd_genl_connect+0x10/0x10 [ 100.801575][ T6383] ? __nla_parse+0x40/0x60 [ 100.801598][ T6383] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 100.801628][ T6383] genl_family_rcv_msg_doit+0x212/0x300 [ 100.801657][ T6383] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.801694][ T6383] ? stack_depot_save_flags+0x40/0x910 [ 100.801729][ T6383] genl_rcv_msg+0x60e/0x790 [ 100.801756][ T6383] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.801774][ T6383] ? __pfx_nbd_genl_connect+0x10/0x10 [ 100.801816][ T6383] netlink_rcv_skb+0x219/0x490 [ 100.801844][ T6383] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.801865][ T6383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.801918][ T6383] ? down_read+0x1ad/0x2e0 [ 100.801949][ T6383] genl_rcv+0x28/0x40 [ 100.801978][ T6383] netlink_unicast+0x758/0x8d0 [ 100.802015][ T6383] netlink_sendmsg+0x805/0xb30 [ 100.802052][ T6383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.802083][ T6383] ? aa_sock_msg_perm+0x94/0x160 [ 100.802107][ T6383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.802131][ T6383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.802158][ T6383] __sock_sendmsg+0x219/0x270 [ 100.802186][ T6383] ____sys_sendmsg+0x505/0x830 [ 100.802223][ T6383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.802264][ T6383] ? import_iovec+0x74/0xa0 [ 100.802292][ T6383] ___sys_sendmsg+0x21f/0x2a0 [ 100.802325][ T6383] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.802397][ T6383] ? __fget_files+0x2a/0x420 [ 100.802422][ T6383] ? __fget_files+0x3a0/0x420 [ 100.802461][ T6383] __x64_sys_sendmsg+0x19b/0x260 [ 100.802500][ T6383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.802550][ T6383] ? do_syscall_64+0xba/0x210 [ 100.802582][ T6383] do_syscall_64+0xf6/0x210 [ 100.802609][ T6383] ? clear_bhb_loop+0x45/0xa0 [ 100.802634][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.802653][ T6383] RIP: 0033:0x7f785c18e969 [ 100.802671][ T6383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.802687][ T6383] RSP: 002b:00007f785cfaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.802708][ T6383] RAX: ffffffffffffffda RBX: 00007f785c3b5fa0 RCX: 00007f785c18e969 [ 100.802722][ T6383] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 100.802735][ T6383] RBP: 00007f785cfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.802747][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.802758][ T6383] R13: 0000000000000000 R14: 00007f785c3b5fa0 R15: 00007fff09aba648 [ 100.802791][ T6383] [ 101.313717][ T6392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.383467][ T5846] block nbd4: Receive control failed (result -32) [ 101.419768][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 101.539503][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 101.784045][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.131'. [ 101.943103][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'. [ 101.966639][ T6419] netlink: 'syz.3.133': attribute type 7 has an invalid length. [ 101.990540][ T6419] netlink: 'syz.3.133': attribute type 8 has an invalid length. [ 102.019830][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 102.111980][ T6429] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.138'. [ 102.755167][ T6468] netlink: 'syz.2.152': attribute type 21 has an invalid length. [ 102.777714][ T6471] netlink: 'syz.2.152': attribute type 21 has an invalid length. [ 103.444256][ T6508] x_tables: ip_tables: REJECT target: only valid in filter table, not bond0 [ 103.702620][ T6525] sctp: [Deprecated]: syz.0.166 (pid 6525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.702620][ T6525] Use struct sctp_sack_info instead [ 103.902615][ T6534] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 103.919505][ T6535] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 103.992910][ T6536] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 104.171828][ T5894] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 104.198774][ T5894] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 104.235744][ T6556] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.308173][ T6549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.331571][ T6548] netlink: 'syz.0.173': attribute type 31 has an invalid length. [ 104.360183][ T6556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.895704][ T6581] netlink: 'syz.1.180': attribute type 11 has an invalid length. [ 106.348952][ T6630] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 106.361962][ T6630] netlink: 'syz.2.190': attribute type 3 has an invalid length. [ 106.390164][ T6630] __nla_validate_parse: 14 callbacks suppressed [ 106.390181][ T6630] netlink: 212 bytes leftover after parsing attributes in process `syz.2.190'. [ 106.466540][ T6634] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 106.551976][ T6634] af_packet: tpacket_rcv: packet too big, clamped from 2920 to 4294967286. macoff=82 [ 106.658741][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 107.005006][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.014108][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.134744][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.149371][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.245661][ T6646] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.254811][ T6646] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.265005][ T6646] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.274671][ T6646] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.558823][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.591572][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.605150][ T6674] sctp: [Deprecated]: syz.1.204 (pid 6674) Use of int in maxseg socket option. [ 107.605150][ T6674] Use struct sctp_assoc_value instead [ 107.610390][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.644948][ T6669] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.691361][ T6669] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.755405][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.773102][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.803519][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.823546][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 107.852659][ T6669] xfrm0 speed is unknown, defaulting to 1000 [ 108.130922][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 108.180243][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.326856][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.404756][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 108.513371][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 109.202157][ T6745] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.217'. [ 109.500398][ T6752] validate_nla: 2 callbacks suppressed [ 109.500418][ T6752] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 109.534206][ T6752] netlink: 'syz.3.220': attribute type 3 has an invalid length. [ 109.566717][ T6752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.220'. [ 109.604266][ T6752] NCSI netlink: No device for ifindex 0 [ 109.845772][ T6770] netlink: 'syz.3.223': attribute type 2 has an invalid length. [ 109.862562][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.881365][ T6770] netlink: 188 bytes leftover after parsing attributes in process `syz.3.223'. [ 109.893804][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 110.389034][ T6792] FAULT_INJECTION: forcing a failure. [ 110.389034][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 110.408484][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.4.232 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 110.408514][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.408526][ T6792] Call Trace: [ 110.408534][ T6792] [ 110.408543][ T6792] dump_stack_lvl+0x189/0x250 [ 110.408588][ T6792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.408619][ T6792] ? __pfx__printk+0x10/0x10 [ 110.408648][ T6792] ? __pfx___might_resched+0x10/0x10 [ 110.408667][ T6792] ? fs_reclaim_acquire+0x7d/0x100 [ 110.408704][ T6792] should_fail_ex+0x414/0x560 [ 110.408738][ T6792] should_failslab+0xa8/0x100 [ 110.408768][ T6792] kmem_cache_alloc_noprof+0x73/0x3c0 [ 110.408793][ T6792] ? security_inode_alloc+0x39/0x330 [ 110.408822][ T6792] security_inode_alloc+0x39/0x330 [ 110.408849][ T6792] inode_init_always_gfp+0x9ed/0xdc0 [ 110.408883][ T6792] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 110.408906][ T6792] alloc_inode+0x82/0x1b0 [ 110.408934][ T6792] new_inode+0x22/0x170 [ 110.408960][ T6792] ? start_creating+0x1fe/0x310 [ 110.408984][ T6792] __debugfs_create_file+0x14d/0x4f0 [ 110.409012][ T6792] debugfs_create_file_unsafe+0x3a/0x50 [ 110.409039][ T6792] nbd_start_device+0x374/0xac0 [ 110.409070][ T6792] ? __nla_parse+0x40/0x60 [ 110.409093][ T6792] nbd_genl_connect+0x1250/0x1930 [ 110.409130][ T6792] ? __pfx_nbd_genl_connect+0x10/0x10 [ 110.409169][ T6792] ? __nla_parse+0x40/0x60 [ 110.409193][ T6792] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 110.409223][ T6792] genl_family_rcv_msg_doit+0x212/0x300 [ 110.409251][ T6792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.409289][ T6792] ? stack_depot_save_flags+0x40/0x910 [ 110.409324][ T6792] genl_rcv_msg+0x60e/0x790 [ 110.409351][ T6792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.409369][ T6792] ? __pfx_nbd_genl_connect+0x10/0x10 [ 110.409410][ T6792] netlink_rcv_skb+0x219/0x490 [ 110.409438][ T6792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.409458][ T6792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.409516][ T6792] ? down_read+0x1ad/0x2e0 [ 110.409548][ T6792] genl_rcv+0x28/0x40 [ 110.409582][ T6792] netlink_unicast+0x758/0x8d0 [ 110.409619][ T6792] netlink_sendmsg+0x805/0xb30 [ 110.409656][ T6792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.409686][ T6792] ? aa_sock_msg_perm+0x94/0x160 [ 110.409710][ T6792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.409734][ T6792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.409761][ T6792] __sock_sendmsg+0x219/0x270 [ 110.409788][ T6792] ____sys_sendmsg+0x505/0x830 [ 110.409825][ T6792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.409866][ T6792] ? import_iovec+0x74/0xa0 [ 110.409893][ T6792] ___sys_sendmsg+0x21f/0x2a0 [ 110.409926][ T6792] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.409999][ T6792] ? __fget_files+0x2a/0x420 [ 110.410024][ T6792] ? __fget_files+0x3a0/0x420 [ 110.410064][ T6792] __x64_sys_sendmsg+0x19b/0x260 [ 110.410097][ T6792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.410148][ T6792] ? do_syscall_64+0xba/0x210 [ 110.410180][ T6792] do_syscall_64+0xf6/0x210 [ 110.410207][ T6792] ? clear_bhb_loop+0x45/0xa0 [ 110.410233][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.410252][ T6792] RIP: 0033:0x7f15c6f8e969 [ 110.410269][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.410286][ T6792] RSP: 002b:00007f15c4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.410307][ T6792] RAX: ffffffffffffffda RBX: 00007f15c71b5fa0 RCX: 00007f15c6f8e969 [ 110.410321][ T6792] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 110.410334][ T6792] RBP: 00007f15c4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.410346][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.410357][ T6792] R13: 0000000000000000 R14: 00007f15c71b5fa0 R15: 00007ffe3dde5548 [ 110.410390][ T6792] [ 110.410904][ T6792] debugfs: out of free dentries, can not create file 'blocksize_bits' [ 110.900607][ T5846] block nbd5: Receive control failed (result -32) [ 111.258462][ T6821] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 111.641164][ T6834] FAULT_INJECTION: forcing a failure. [ 111.641164][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 111.671360][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.0.250 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 111.671389][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.671401][ T6834] Call Trace: [ 111.671410][ T6834] [ 111.671419][ T6834] dump_stack_lvl+0x189/0x250 [ 111.671466][ T6834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.671498][ T6834] ? __pfx__printk+0x10/0x10 [ 111.671527][ T6834] ? __pfx___might_resched+0x10/0x10 [ 111.671547][ T6834] ? fs_reclaim_acquire+0x7d/0x100 [ 111.671584][ T6834] should_fail_ex+0x414/0x560 [ 111.671618][ T6834] should_failslab+0xa8/0x100 [ 111.671648][ T6834] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 111.671675][ T6834] ? __d_alloc+0x31/0x6f0 [ 111.671699][ T6834] __d_alloc+0x31/0x6f0 [ 111.671715][ T6834] ? stack_depot_save_flags+0x40/0x910 [ 111.671749][ T6834] d_alloc_parallel+0xe0/0x14e0 [ 111.671770][ T6834] ? kasan_save_track+0x4f/0x80 [ 111.671792][ T6834] ? kasan_save_track+0x3e/0x80 [ 111.671813][ T6834] ? __kasan_slab_alloc+0x6c/0x80 [ 111.671835][ T6834] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 111.671859][ T6834] ? security_inode_alloc+0x39/0x330 [ 111.671882][ T6834] ? alloc_inode+0x82/0x1b0 [ 111.671904][ T6834] ? new_inode+0x22/0x170 [ 111.671936][ T6834] ? __lock_acquire+0xaac/0xd20 [ 111.671971][ T6834] ? __pfx_d_alloc_parallel+0x10/0x10 [ 111.671998][ T6834] ? __raw_spin_lock_init+0x45/0x100 [ 111.672025][ T6834] ? __init_waitqueue_head+0xa9/0x150 [ 111.672057][ T6834] __lookup_slow+0x116/0x3d0 [ 111.672080][ T6834] ? __pfx___lookup_slow+0x10/0x10 [ 111.672122][ T6834] lookup_one_len+0x1aa/0x310 [ 111.672145][ T6834] ? __pfx_lookup_one_len+0x10/0x10 [ 111.672178][ T6834] start_creating+0x18d/0x310 [ 111.672204][ T6834] __debugfs_create_file+0x79/0x4f0 [ 111.672224][ T6834] ? __debugfs_create_file+0x447/0x4f0 [ 111.672251][ T6834] debugfs_create_file_full+0x3f/0x60 [ 111.672278][ T6834] nbd_start_device+0x398/0xac0 [ 111.672308][ T6834] ? __nla_parse+0x40/0x60 [ 111.672337][ T6834] nbd_genl_connect+0x1250/0x1930 [ 111.672373][ T6834] ? __pfx_nbd_genl_connect+0x10/0x10 [ 111.672411][ T6834] ? __nla_parse+0x40/0x60 [ 111.672441][ T6834] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 111.672472][ T6834] genl_family_rcv_msg_doit+0x212/0x300 [ 111.672500][ T6834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.672538][ T6834] ? stack_depot_save_flags+0x40/0x910 [ 111.672573][ T6834] genl_rcv_msg+0x60e/0x790 [ 111.672600][ T6834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.672618][ T6834] ? __pfx_nbd_genl_connect+0x10/0x10 [ 111.672660][ T6834] netlink_rcv_skb+0x219/0x490 [ 111.672688][ T6834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.672708][ T6834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.672762][ T6834] ? down_read+0x1ad/0x2e0 [ 111.672794][ T6834] genl_rcv+0x28/0x40 [ 111.672822][ T6834] netlink_unicast+0x758/0x8d0 [ 111.672858][ T6834] netlink_sendmsg+0x805/0xb30 [ 111.672896][ T6834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.672927][ T6834] ? aa_sock_msg_perm+0x94/0x160 [ 111.672951][ T6834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.672975][ T6834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.673001][ T6834] __sock_sendmsg+0x219/0x270 [ 111.673028][ T6834] ____sys_sendmsg+0x505/0x830 [ 111.673064][ T6834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.673104][ T6834] ? import_iovec+0x74/0xa0 [ 111.673131][ T6834] ___sys_sendmsg+0x21f/0x2a0 [ 111.673163][ T6834] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.673235][ T6834] ? __fget_files+0x2a/0x420 [ 111.673261][ T6834] ? __fget_files+0x3a0/0x420 [ 111.673298][ T6834] __x64_sys_sendmsg+0x19b/0x260 [ 111.673331][ T6834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.673378][ T6834] ? do_syscall_64+0xba/0x210 [ 111.673408][ T6834] do_syscall_64+0xf6/0x210 [ 111.673442][ T6834] ? clear_bhb_loop+0x45/0xa0 [ 111.673466][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.673485][ T6834] RIP: 0033:0x7f785c18e969 [ 111.673503][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.673518][ T6834] RSP: 002b:00007f785cfaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.673538][ T6834] RAX: ffffffffffffffda RBX: 00007f785c3b5fa0 RCX: 00007f785c18e969 [ 111.673552][ T6834] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 111.673565][ T6834] RBP: 00007f785cfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.673576][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.673586][ T6834] R13: 0000000000000000 R14: 00007f785c3b5fa0 R15: 00007fff09aba648 [ 111.673618][ T6834] [ 112.156787][ T6839] __nla_validate_parse: 2 callbacks suppressed [ 112.156803][ T6839] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.249'. [ 112.188846][ T5846] block nbd6: Receive control failed (result -32) [ 112.371642][ T6843] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 112.399401][ C0] Illegal XDP return value 16128 on prog (id 81) dev lo, expect packet loss! [ 112.684123][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 112.937843][ T6883] netlink: 256 bytes leftover after parsing attributes in process `syz.4.258'. [ 113.092951][ T6893] FAULT_INJECTION: forcing a failure. [ 113.092951][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 113.127757][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.2.262 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 113.127788][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.127799][ T6893] Call Trace: [ 113.127807][ T6893] [ 113.127816][ T6893] dump_stack_lvl+0x189/0x250 [ 113.127855][ T6893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.127886][ T6893] ? __pfx__printk+0x10/0x10 [ 113.127915][ T6893] ? __pfx___might_resched+0x10/0x10 [ 113.127934][ T6893] ? fs_reclaim_acquire+0x7d/0x100 [ 113.127971][ T6893] should_fail_ex+0x414/0x560 [ 113.128006][ T6893] should_failslab+0xa8/0x100 [ 113.128036][ T6893] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 113.128062][ T6893] ? __d_alloc+0x31/0x6f0 [ 113.128087][ T6893] __d_alloc+0x31/0x6f0 [ 113.128102][ T6893] ? stack_depot_save_flags+0x40/0x910 [ 113.128137][ T6893] d_alloc_parallel+0xe0/0x14e0 [ 113.128159][ T6893] ? kasan_save_track+0x4f/0x80 [ 113.128180][ T6893] ? kasan_save_track+0x3e/0x80 [ 113.128200][ T6893] ? __kasan_slab_alloc+0x6c/0x80 [ 113.128222][ T6893] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 113.128246][ T6893] ? security_inode_alloc+0x39/0x330 [ 113.128280][ T6893] ? alloc_inode+0x82/0x1b0 [ 113.128303][ T6893] ? new_inode+0x22/0x170 [ 113.128336][ T6893] ? __lock_acquire+0xaac/0xd20 [ 113.128372][ T6893] ? __pfx_d_alloc_parallel+0x10/0x10 [ 113.128398][ T6893] ? __raw_spin_lock_init+0x45/0x100 [ 113.128425][ T6893] ? __init_waitqueue_head+0xa9/0x150 [ 113.128458][ T6893] __lookup_slow+0x116/0x3d0 [ 113.128481][ T6893] ? __pfx___lookup_slow+0x10/0x10 [ 113.128525][ T6893] lookup_one_len+0x1aa/0x310 [ 113.128548][ T6893] ? __pfx_lookup_one_len+0x10/0x10 [ 113.128582][ T6893] start_creating+0x18d/0x310 [ 113.128608][ T6893] __debugfs_create_file+0x79/0x4f0 [ 113.128628][ T6893] ? __debugfs_create_file+0x447/0x4f0 [ 113.128655][ T6893] debugfs_create_file_full+0x3f/0x60 [ 113.128687][ T6893] nbd_start_device+0x398/0xac0 [ 113.128716][ T6893] ? __nla_parse+0x40/0x60 [ 113.128741][ T6893] nbd_genl_connect+0x1250/0x1930 [ 113.128777][ T6893] ? __pfx_nbd_genl_connect+0x10/0x10 [ 113.128817][ T6893] ? __nla_parse+0x40/0x60 [ 113.128840][ T6893] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 113.128871][ T6893] genl_family_rcv_msg_doit+0x212/0x300 [ 113.128900][ T6893] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 113.128936][ T6893] ? stack_depot_save_flags+0x40/0x910 [ 113.128971][ T6893] genl_rcv_msg+0x60e/0x790 [ 113.128998][ T6893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.129017][ T6893] ? __pfx_nbd_genl_connect+0x10/0x10 [ 113.129059][ T6893] netlink_rcv_skb+0x219/0x490 [ 113.129087][ T6893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.129108][ T6893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.129162][ T6893] ? down_read+0x1ad/0x2e0 [ 113.129194][ T6893] genl_rcv+0x28/0x40 [ 113.129223][ T6893] netlink_unicast+0x758/0x8d0 [ 113.129268][ T6893] netlink_sendmsg+0x805/0xb30 [ 113.129306][ T6893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.129334][ T6893] ? aa_sock_msg_perm+0x94/0x160 [ 113.129358][ T6893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.129382][ T6893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.129409][ T6893] __sock_sendmsg+0x219/0x270 [ 113.129437][ T6893] ____sys_sendmsg+0x505/0x830 [ 113.129473][ T6893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.129514][ T6893] ? import_iovec+0x74/0xa0 [ 113.129540][ T6893] ___sys_sendmsg+0x21f/0x2a0 [ 113.129574][ T6893] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.129647][ T6893] ? __fget_files+0x2a/0x420 [ 113.129674][ T6893] ? __fget_files+0x3a0/0x420 [ 113.129715][ T6893] __x64_sys_sendmsg+0x19b/0x260 [ 113.129748][ T6893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.129799][ T6893] ? do_syscall_64+0xba/0x210 [ 113.129831][ T6893] do_syscall_64+0xf6/0x210 [ 113.129859][ T6893] ? clear_bhb_loop+0x45/0xa0 [ 113.129884][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.129903][ T6893] RIP: 0033:0x7fc52978e969 [ 113.129922][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.129937][ T6893] RSP: 002b:00007fc52a680038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.129957][ T6893] RAX: ffffffffffffffda RBX: 00007fc5299b5fa0 RCX: 00007fc52978e969 [ 113.129971][ T6893] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 113.129983][ T6893] RBP: 00007fc52a680090 R08: 0000000000000000 R09: 0000000000000000 [ 113.129994][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.130005][ T6893] R13: 0000000000000000 R14: 00007fc5299b5fa0 R15: 00007fff731a0388 [ 113.130038][ T6893] [ 113.590070][ T6899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.263'. [ 113.630746][ T5846] block nbd7: Receive control failed (result -32) [ 113.664347][ T6903] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.264'. [ 114.032297][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 114.217680][ T6931] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 114.428280][ T6941] FAULT_INJECTION: forcing a failure. [ 114.428280][ T6941] name failslab, interval 1, probability 0, space 0, times 0 [ 114.456894][ T6935] xt_CT: No such helper "snmp_trap" [ 114.478074][ T6941] CPU: 1 UID: 0 PID: 6941 Comm: syz.3.275 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 114.478102][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.478113][ T6941] Call Trace: [ 114.478121][ T6941] [ 114.478129][ T6941] dump_stack_lvl+0x189/0x250 [ 114.478169][ T6941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.478199][ T6941] ? __pfx__printk+0x10/0x10 [ 114.478240][ T6941] ? __pfx___might_resched+0x10/0x10 [ 114.478258][ T6941] ? fs_reclaim_acquire+0x7d/0x100 [ 114.478294][ T6941] should_fail_ex+0x414/0x560 [ 114.478328][ T6941] should_failslab+0xa8/0x100 [ 114.478359][ T6941] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 114.478387][ T6941] ? __d_alloc+0x31/0x6f0 [ 114.478412][ T6941] __d_alloc+0x31/0x6f0 [ 114.478428][ T6941] ? stack_depot_save_flags+0x40/0x910 [ 114.478455][ T6941] ? alloc_inode+0x67/0x1b0 [ 114.478484][ T6941] d_alloc_parallel+0xe0/0x14e0 [ 114.478506][ T6941] ? kasan_save_track+0x4f/0x80 [ 114.478527][ T6941] ? kasan_save_track+0x3e/0x80 [ 114.478548][ T6941] ? __kasan_slab_alloc+0x6c/0x80 [ 114.478570][ T6941] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 114.478594][ T6941] ? security_inode_alloc+0x39/0x330 [ 114.478617][ T6941] ? alloc_inode+0x82/0x1b0 [ 114.478639][ T6941] ? new_inode+0x22/0x170 [ 114.478670][ T6941] ? __lock_acquire+0xaac/0xd20 [ 114.478707][ T6941] ? __pfx_d_alloc_parallel+0x10/0x10 [ 114.478734][ T6941] ? __raw_spin_lock_init+0x45/0x100 [ 114.478760][ T6941] ? __init_waitqueue_head+0xa9/0x150 [ 114.478792][ T6941] __lookup_slow+0x116/0x3d0 [ 114.478815][ T6941] ? __pfx___lookup_slow+0x10/0x10 [ 114.478859][ T6941] lookup_one_len+0x1aa/0x310 [ 114.478882][ T6941] ? __pfx_lookup_one_len+0x10/0x10 [ 114.478915][ T6941] start_creating+0x18d/0x310 [ 114.478941][ T6941] __debugfs_create_file+0x79/0x4f0 [ 114.478961][ T6941] ? __debugfs_create_file+0x447/0x4f0 [ 114.478987][ T6941] debugfs_create_file_full+0x3f/0x60 [ 114.479014][ T6941] nbd_start_device+0x398/0xac0 [ 114.479044][ T6941] ? __nla_parse+0x40/0x60 [ 114.479069][ T6941] nbd_genl_connect+0x1250/0x1930 [ 114.479109][ T6941] ? __pfx_nbd_genl_connect+0x10/0x10 [ 114.479149][ T6941] ? __nla_parse+0x40/0x60 [ 114.479172][ T6941] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 114.479203][ T6941] genl_family_rcv_msg_doit+0x212/0x300 [ 114.479236][ T6941] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 114.479274][ T6941] ? stack_depot_save_flags+0x40/0x910 [ 114.479309][ T6941] genl_rcv_msg+0x60e/0x790 [ 114.479336][ T6941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.479355][ T6941] ? __pfx_nbd_genl_connect+0x10/0x10 [ 114.479396][ T6941] netlink_rcv_skb+0x219/0x490 [ 114.479424][ T6941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.479444][ T6941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.479498][ T6941] ? down_read+0x1ad/0x2e0 [ 114.479530][ T6941] genl_rcv+0x28/0x40 [ 114.479559][ T6941] netlink_unicast+0x758/0x8d0 [ 114.479596][ T6941] netlink_sendmsg+0x805/0xb30 [ 114.479633][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.479664][ T6941] ? aa_sock_msg_perm+0x94/0x160 [ 114.479688][ T6941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.479712][ T6941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.479739][ T6941] __sock_sendmsg+0x219/0x270 [ 114.479766][ T6941] ____sys_sendmsg+0x505/0x830 [ 114.479803][ T6941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.479845][ T6941] ? import_iovec+0x74/0xa0 [ 114.479872][ T6941] ___sys_sendmsg+0x21f/0x2a0 [ 114.479905][ T6941] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.479979][ T6941] ? __fget_files+0x2a/0x420 [ 114.480005][ T6941] ? __fget_files+0x3a0/0x420 [ 114.480046][ T6941] __x64_sys_sendmsg+0x19b/0x260 [ 114.480077][ T6941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.480128][ T6941] ? do_syscall_64+0xba/0x210 [ 114.480159][ T6941] do_syscall_64+0xf6/0x210 [ 114.480187][ T6941] ? clear_bhb_loop+0x45/0xa0 [ 114.480213][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.480239][ T6941] RIP: 0033:0x7fbc35d8e969 [ 114.480258][ T6941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.480274][ T6941] RSP: 002b:00007fbc36b86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.480294][ T6941] RAX: ffffffffffffffda RBX: 00007fbc35fb5fa0 RCX: 00007fbc35d8e969 [ 114.480308][ T6941] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 114.480321][ T6941] RBP: 00007fbc36b86090 R08: 0000000000000000 R09: 0000000000000000 [ 114.480333][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.480344][ T6941] R13: 0000000000000000 R14: 00007fbc35fb5fa0 R15: 00007ffc27ffa188 [ 114.480377][ T6941] [ 114.977881][ T6947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.985901][ T6947] batadv_slave_1: entered promiscuous mode [ 115.072939][ T6945] netlink: 'syz.2.277': attribute type 2 has an invalid length. [ 115.080817][ T5846] block nbd8: Receive control failed (result -32) [ 115.088105][ T6945] netlink: 244 bytes leftover after parsing attributes in process `syz.2.277'. [ 115.271953][ T6960] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 115.279981][ T6960] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 115.292539][ T6960] netlink: 224 bytes leftover after parsing attributes in process `syz.4.284'. [ 115.304494][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'. [ 115.357333][ T6965] netlink: 300 bytes leftover after parsing attributes in process `syz.2.283'. [ 115.429858][ T6963] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 115.482422][ T6963] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 115.839614][ T6980] FAULT_INJECTION: forcing a failure. [ 115.839614][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 115.869136][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.4.291 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 115.869165][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.869177][ T6980] Call Trace: [ 115.869185][ T6980] [ 115.869194][ T6980] dump_stack_lvl+0x189/0x250 [ 115.869234][ T6980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.869265][ T6980] ? __pfx__printk+0x10/0x10 [ 115.869293][ T6980] ? __pfx___might_resched+0x10/0x10 [ 115.869326][ T6980] should_fail_ex+0x414/0x560 [ 115.869360][ T6980] should_failslab+0xa8/0x100 [ 115.869390][ T6980] __kmalloc_cache_noprof+0x70/0x3d0 [ 115.869417][ T6980] ? nbd_start_device+0x445/0xac0 [ 115.869440][ T6980] ? debugfs_create_file_full+0x3f/0x60 [ 115.869467][ T6980] nbd_start_device+0x445/0xac0 [ 115.869506][ T6980] nbd_genl_connect+0x1250/0x1930 [ 115.869542][ T6980] ? __pfx_nbd_genl_connect+0x10/0x10 [ 115.869582][ T6980] ? __nla_parse+0x40/0x60 [ 115.869605][ T6980] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 115.869636][ T6980] genl_family_rcv_msg_doit+0x212/0x300 [ 115.869664][ T6980] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.869700][ T6980] ? stack_depot_save_flags+0x40/0x910 [ 115.869736][ T6980] genl_rcv_msg+0x60e/0x790 [ 115.869762][ T6980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.869780][ T6980] ? __pfx_nbd_genl_connect+0x10/0x10 [ 115.869822][ T6980] netlink_rcv_skb+0x219/0x490 [ 115.869850][ T6980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.869870][ T6980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.869923][ T6980] ? down_read+0x1ad/0x2e0 [ 115.869955][ T6980] genl_rcv+0x28/0x40 [ 115.869983][ T6980] netlink_unicast+0x758/0x8d0 [ 115.870019][ T6980] netlink_sendmsg+0x805/0xb30 [ 115.870056][ T6980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.870087][ T6980] ? aa_sock_msg_perm+0x94/0x160 [ 115.870111][ T6980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.870135][ T6980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.870165][ T6980] __sock_sendmsg+0x219/0x270 [ 115.870192][ T6980] ____sys_sendmsg+0x505/0x830 [ 115.870230][ T6980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.870270][ T6980] ? import_iovec+0x74/0xa0 [ 115.870298][ T6980] ___sys_sendmsg+0x21f/0x2a0 [ 115.870336][ T6980] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.870409][ T6980] ? __fget_files+0x2a/0x420 [ 115.870435][ T6980] ? __fget_files+0x3a0/0x420 [ 115.870475][ T6980] __x64_sys_sendmsg+0x19b/0x260 [ 115.870508][ T6980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.870558][ T6980] ? do_syscall_64+0xba/0x210 [ 115.870590][ T6980] do_syscall_64+0xf6/0x210 [ 115.870617][ T6980] ? clear_bhb_loop+0x45/0xa0 [ 115.870642][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.870661][ T6980] RIP: 0033:0x7f15c6f8e969 [ 115.870679][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.870695][ T6980] RSP: 002b:00007f15c4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.870717][ T6980] RAX: ffffffffffffffda RBX: 00007f15c71b5fa0 RCX: 00007f15c6f8e969 [ 115.870731][ T6980] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 115.870742][ T6980] RBP: 00007f15c4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.870753][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.870765][ T6980] R13: 0000000000000000 R14: 00007f15c71b5fa0 R15: 00007ffe3dde5548 [ 115.870796][ T6980] [ 115.875207][ T6980] block nbd9: shutting down sockets [ 116.536328][ T7010] netlink: 'syz.3.297': attribute type 13 has an invalid length. [ 116.567336][ T7010] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 116.614137][ T7010] netlink: 'syz.3.297': attribute type 13 has an invalid length. [ 116.634375][ T7010] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 117.180733][ T7040] FAULT_INJECTION: forcing a failure. [ 117.180733][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 117.227935][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.304 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 117.227965][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.227977][ T7040] Call Trace: [ 117.227985][ T7040] [ 117.227994][ T7040] dump_stack_lvl+0x189/0x250 [ 117.228043][ T7040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.228075][ T7040] ? __pfx__printk+0x10/0x10 [ 117.228103][ T7040] ? __pfx___might_resched+0x10/0x10 [ 117.228126][ T7040] ? fs_reclaim_acquire+0x7d/0x100 [ 117.228164][ T7040] should_fail_ex+0x414/0x560 [ 117.228198][ T7040] should_failslab+0xa8/0x100 [ 117.228228][ T7040] kmem_cache_alloc_noprof+0x73/0x3c0 [ 117.228253][ T7040] ? __kernfs_new_node+0xd7/0x7f0 [ 117.228289][ T7040] __kernfs_new_node+0xd7/0x7f0 [ 117.228321][ T7040] ? __lock_acquire+0xaac/0xd20 [ 117.228357][ T7040] ? __pfx___kernfs_new_node+0x10/0x10 [ 117.228388][ T7040] ? kernfs_root+0x1c/0x230 [ 117.228424][ T7040] ? kernfs_root+0x1c/0x230 [ 117.228451][ T7040] ? kernfs_root+0x1c/0x230 [ 117.228475][ T7040] ? kernfs_root+0x1c/0x230 [ 117.228509][ T7040] kernfs_new_node+0x102/0x210 [ 117.228545][ T7040] __kernfs_create_file+0x4b/0x2e0 [ 117.228573][ T7040] sysfs_add_file_mode_ns+0x238/0x300 [ 117.228608][ T7040] sysfs_create_file_ns+0x128/0x1a0 [ 117.228637][ T7040] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 117.228668][ T7040] ? device_create_file+0xf4/0x1c0 [ 117.228701][ T7040] nbd_genl_connect+0x13f7/0x1930 [ 117.228738][ T7040] ? __pfx_nbd_genl_connect+0x10/0x10 [ 117.228778][ T7040] ? __nla_parse+0x40/0x60 [ 117.228801][ T7040] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 117.228833][ T7040] genl_family_rcv_msg_doit+0x212/0x300 [ 117.228861][ T7040] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.228898][ T7040] ? stack_depot_save_flags+0x40/0x910 [ 117.228933][ T7040] genl_rcv_msg+0x60e/0x790 [ 117.228960][ T7040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.228978][ T7040] ? __pfx_nbd_genl_connect+0x10/0x10 [ 117.229026][ T7040] netlink_rcv_skb+0x219/0x490 [ 117.229054][ T7040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.229075][ T7040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.229128][ T7040] ? down_read+0x1ad/0x2e0 [ 117.229160][ T7040] genl_rcv+0x28/0x40 [ 117.229189][ T7040] netlink_unicast+0x758/0x8d0 [ 117.229225][ T7040] netlink_sendmsg+0x805/0xb30 [ 117.229264][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.229295][ T7040] ? aa_sock_msg_perm+0x94/0x160 [ 117.229319][ T7040] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.229343][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.229370][ T7040] __sock_sendmsg+0x219/0x270 [ 117.229397][ T7040] ____sys_sendmsg+0x505/0x830 [ 117.229435][ T7040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.229476][ T7040] ? import_iovec+0x74/0xa0 [ 117.229503][ T7040] ___sys_sendmsg+0x21f/0x2a0 [ 117.229536][ T7040] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.229609][ T7040] ? __fget_files+0x2a/0x420 [ 117.229636][ T7040] ? __fget_files+0x3a0/0x420 [ 117.229675][ T7040] __x64_sys_sendmsg+0x19b/0x260 [ 117.229709][ T7040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.229759][ T7040] ? do_syscall_64+0xba/0x210 [ 117.229790][ T7040] do_syscall_64+0xf6/0x210 [ 117.229818][ T7040] ? clear_bhb_loop+0x45/0xa0 [ 117.229844][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.229863][ T7040] RIP: 0033:0x7f15c6f8e969 [ 117.229880][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.229897][ T7040] RSP: 002b:00007f15c4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.229918][ T7040] RAX: ffffffffffffffda RBX: 00007f15c71b5fa0 RCX: 00007f15c6f8e969 [ 117.229932][ T7040] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000004 [ 117.229945][ T7040] RBP: 00007f15c4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.229957][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.229969][ T7040] R13: 0000000000000000 R14: 00007f15c71b5fa0 R15: 00007ffe3dde5548 [ 117.230023][ T7040] [ 117.231822][ T7040] block nbd9: device_create_file failed for backend! [ 117.653234][ T5846] block nbd9: Receive control failed (result -32) [ 117.661075][ T7048] __nla_validate_parse: 4 callbacks suppressed [ 117.661091][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 117.688105][ T5846] block nbd9: shutting down sockets [ 117.718283][ T5846] ================================================================== [ 117.726413][ T5846] BUG: KASAN: slab-use-after-free in recv_work+0x215e/0x24f0 [ 117.733827][ T5846] Write of size 4 at addr ffff88807efb7078 by task kworker/u9:3/5846 [ 117.741921][ T5846] [ 117.744269][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/u9:3 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 117.744295][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.744308][ T5846] Workqueue: nbd9-recv recv_work [ 117.744337][ T5846] Call Trace: [ 117.744345][ T5846] [ 117.744353][ T5846] dump_stack_lvl+0x189/0x250 [ 117.744384][ T5846] ? __virt_addr_valid+0x18c/0x540 [ 117.744410][ T5846] ? rcu_is_watching+0x15/0xb0 [ 117.744428][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.744456][ T5846] ? rcu_is_watching+0x15/0xb0 [ 117.744473][ T5846] ? lock_release+0x4b/0x3e0 [ 117.744503][ T5846] ? __virt_addr_valid+0x18c/0x540 [ 117.744529][ T5846] ? __virt_addr_valid+0x469/0x540 [ 117.744555][ T5846] print_report+0xb4/0x290 [ 117.744579][ T5846] ? recv_work+0x215e/0x24f0 [ 117.744602][ T5846] kasan_report+0x118/0x150 [ 117.744629][ T5846] ? recv_work+0x215e/0x24f0 [ 117.744658][ T5846] kasan_check_range+0x29a/0x2b0 [ 117.744685][ T5846] recv_work+0x215e/0x24f0 [ 117.744709][ T5846] ? arch_stack_walk+0x11c/0x150 [ 117.744741][ T5846] ? stack_trace_save+0x9c/0xe0 [ 117.744769][ T5846] ? __pfx_recv_work+0x10/0x10 [ 117.744796][ T5846] ? lockdep_unlock+0x89/0x120 [ 117.744820][ T5846] ? validate_chain+0x897/0x2140 [ 117.744862][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.744884][ T5846] ? process_scheduled_works+0x9ec/0x17a0 [ 117.744902][ T5846] ? process_scheduled_works+0x9ec/0x17a0 [ 117.744923][ T5846] process_scheduled_works+0xadb/0x17a0 [ 117.744956][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.744984][ T5846] worker_thread+0x8a0/0xda0 [ 117.745017][ T5846] kthread+0x70e/0x8a0 [ 117.745042][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 117.745060][ T5846] ? __pfx_kthread+0x10/0x10 [ 117.745083][ T5846] ? __pfx_kthread+0x10/0x10 [ 117.745106][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.745126][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.745156][ T5846] ? __pfx_kthread+0x10/0x10 [ 117.745178][ T5846] ret_from_fork+0x4b/0x80 [ 117.745198][ T5846] ? __pfx_kthread+0x10/0x10 [ 117.745221][ T5846] ret_from_fork_asm+0x1a/0x30 [ 117.745248][ T5846] [ 117.745255][ T5846] [ 117.954289][ T5846] Allocated by task 7040: [ 117.958615][ T5846] kasan_save_track+0x3e/0x80 [ 117.963301][ T5846] __kasan_kmalloc+0x93/0xb0 [ 117.967899][ T5846] __kmalloc_cache_noprof+0x230/0x3d0 [ 117.973274][ T5846] nbd_alloc_and_init_config+0x88/0x260 [ 117.978822][ T5846] nbd_genl_connect+0x9dd/0x1930 [ 117.983763][ T5846] genl_family_rcv_msg_doit+0x212/0x300 [ 117.989314][ T5846] genl_rcv_msg+0x60e/0x790 [ 117.993814][ T5846] netlink_rcv_skb+0x219/0x490 [ 117.998578][ T5846] genl_rcv+0x28/0x40 [ 118.002563][ T5846] netlink_unicast+0x758/0x8d0 [ 118.007326][ T5846] netlink_sendmsg+0x805/0xb30 [ 118.012093][ T5846] __sock_sendmsg+0x219/0x270 [ 118.016798][ T5846] ____sys_sendmsg+0x505/0x830 [ 118.021568][ T5846] ___sys_sendmsg+0x21f/0x2a0 [ 118.026266][ T5846] __x64_sys_sendmsg+0x19b/0x260 [ 118.031211][ T5846] do_syscall_64+0xf6/0x210 [ 118.035724][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.041619][ T5846] [ 118.043940][ T5846] Freed by task 5846: [ 118.047916][ T5846] kasan_save_track+0x3e/0x80 [ 118.052598][ T5846] kasan_save_free_info+0x46/0x50 [ 118.057617][ T5846] __kasan_slab_free+0x62/0x70 [ 118.062380][ T5846] kfree+0x193/0x440 [ 118.066275][ T5846] nbd_config_put+0x642/0x790 [ 118.070954][ T5846] recv_work+0x2148/0x24f0 [ 118.075377][ T5846] process_scheduled_works+0xadb/0x17a0 [ 118.080922][ T5846] worker_thread+0x8a0/0xda0 [ 118.085517][ T5846] kthread+0x70e/0x8a0 [ 118.089589][ T5846] ret_from_fork+0x4b/0x80 [ 118.094007][ T5846] ret_from_fork_asm+0x1a/0x30 [ 118.098773][ T5846] [ 118.101094][ T5846] The buggy address belongs to the object at ffff88807efb7000 [ 118.101094][ T5846] which belongs to the cache kmalloc-256 of size 256 [ 118.115227][ T5846] The buggy address is located 120 bytes inside of [ 118.115227][ T5846] freed 256-byte region [ffff88807efb7000, ffff88807efb7100) [ 118.129019][ T5846] [ 118.131344][ T5846] The buggy address belongs to the physical page: [ 118.137767][ T5846] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7efb6 [ 118.146537][ T5846] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.155032][ T5846] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.163021][ T5846] page_type: f5(slab) [ 118.167003][ T5846] raw: 00fff00000000040 ffff88801a441b40 ffffea0000c68880 dead000000000005 [ 118.175588][ T5846] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 118.184182][ T5846] head: 00fff00000000040 ffff88801a441b40 ffffea0000c68880 dead000000000005 [ 118.192874][ T5846] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 118.201544][ T5846] head: 00fff00000000001 ffffea0001fbed81 00000000ffffffff 00000000ffffffff [ 118.210212][ T5846] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 118.218874][ T5846] page dumped because: kasan: bad access detected [ 118.225294][ T5846] page_owner tracks the page as allocated [ 118.231010][ T5846] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5851, tgid 5851 (syz-executor), ts 87033389798, free_ts 86366602091 [ 118.252372][ T5846] post_alloc_hook+0x1d8/0x230 [ 118.257144][ T5846] get_page_from_freelist+0x21ce/0x22b0 [ 118.262696][ T5846] __alloc_frozen_pages_noprof+0x181/0x370 [ 118.268499][ T5846] alloc_pages_mpol+0x232/0x4a0 [ 118.273352][ T5846] allocate_slab+0x8a/0x3b0 [ 118.277853][ T5846] ___slab_alloc+0xbfc/0x1480 [ 118.282535][ T5846] __kmalloc_cache_noprof+0x296/0x3d0 [ 118.287930][ T5846] ____ip_mc_inc_group+0x528/0xde0 [ 118.293042][ T5846] ip_mc_up+0x125/0x300 [ 118.297196][ T5846] inetdev_event+0xfb3/0x15b0 [ 118.301879][ T5846] notifier_call_chain+0x1b3/0x3e0 [ 118.306992][ T5846] __dev_notify_flags+0x18d/0x2e0 [ 118.312023][ T5846] netif_change_flags+0xe8/0x1a0 [ 118.316965][ T5846] do_setlink+0xcb9/0x40d0 [ 118.321384][ T5846] rtnl_newlink+0x160b/0x1c70 [ 118.326059][ T5846] rtnetlink_rcv_msg+0x7cc/0xb70 [ 118.331002][ T5846] page last free pid 5851 tgid 5851 stack trace: [ 118.337323][ T5846] __free_frozen_pages+0xb0e/0xcd0 [ 118.342446][ T5846] __slab_free+0x326/0x400 [ 118.346874][ T5846] qlist_free_all+0x9a/0x140 [ 118.351469][ T5846] kasan_quarantine_reduce+0x148/0x160 [ 118.356929][ T5846] __kasan_slab_alloc+0x22/0x80 [ 118.361781][ T5846] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 118.367601][ T5846] __d_alloc+0x31/0x6f0 [ 118.371759][ T5846] d_alloc_parallel+0xe0/0x14e0 [ 118.376607][ T5846] __lookup_slow+0x116/0x3d0 [ 118.381195][ T5846] lookup_one_len+0x1aa/0x310 [ 118.385869][ T5846] start_creating+0x18d/0x310 [ 118.390548][ T5846] __debugfs_create_file+0x79/0x4f0 [ 118.395746][ T5846] debugfs_create_file_unsafe+0x3a/0x50 [ 118.401292][ T5846] nsim_bpf_init+0xeb/0x270 [ 118.405796][ T5846] nsim_create+0xad8/0xef0 [ 118.410211][ T5846] __nsim_dev_port_add+0x70a/0xb20 [ 118.415324][ T5846] [ 118.417646][ T5846] Memory state around the buggy address: [ 118.423273][ T5846] ffff88807efb6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.431337][ T5846] ffff88807efb6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.439394][ T5846] >ffff88807efb7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.447467][ T5846] ^ [ 118.455444][ T5846] ffff88807efb7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.463501][ T5846] ffff88807efb7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.471557][ T5846] ================================================================== [ 118.497454][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.504718][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/u9:3 Not tainted 6.15.0-rc3-syzkaller-00091-g087a9eb9e597 #0 PREEMPT(full) [ 118.516893][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.526962][ T5846] Workqueue: nbd9-recv recv_work [ 118.531920][ T5846] Call Trace: [ 118.535199][ T5846] [ 118.538135][ T5846] dump_stack_lvl+0x99/0x250 [ 118.542739][ T5846] ? __asan_memcpy+0x40/0x70 [ 118.547334][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.552547][ T5846] ? __pfx__printk+0x10/0x10 [ 118.557145][ T5846] panic+0x2db/0x790 [ 118.561060][ T5846] ? __pfx_panic+0x10/0x10 [ 118.565489][ T5846] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 118.571387][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.577719][ T5846] ? print_memory_metadata+0x314/0x400 [ 118.583188][ T5846] ? recv_work+0x215e/0x24f0 [ 118.587824][ T5846] check_panic_on_warn+0x89/0xb0 [ 118.592771][ T5846] ? recv_work+0x215e/0x24f0 [ 118.597368][ T5846] end_report+0x78/0x160 [ 118.601622][ T5846] kasan_report+0x129/0x150 [ 118.606155][ T5846] ? recv_work+0x215e/0x24f0 [ 118.610758][ T5846] kasan_check_range+0x29a/0x2b0 [ 118.615707][ T5846] recv_work+0x215e/0x24f0 [ 118.620129][ T5846] ? arch_stack_walk+0x11c/0x150 [ 118.625078][ T5846] ? stack_trace_save+0x9c/0xe0 [ 118.629942][ T5846] ? __pfx_recv_work+0x10/0x10 [ 118.634724][ T5846] ? lockdep_unlock+0x89/0x120 [ 118.639496][ T5846] ? validate_chain+0x897/0x2140 [ 118.644454][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.649659][ T5846] ? process_scheduled_works+0x9ec/0x17a0 [ 118.655381][ T5846] ? process_scheduled_works+0x9ec/0x17a0 [ 118.661103][ T5846] process_scheduled_works+0xadb/0x17a0 [ 118.666663][ T5846] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.672650][ T5846] worker_thread+0x8a0/0xda0 [ 118.677257][ T5846] kthread+0x70e/0x8a0 [ 118.681333][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 118.686443][ T5846] ? __pfx_kthread+0x10/0x10 [ 118.691037][ T5846] ? __pfx_kthread+0x10/0x10 [ 118.695630][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.700834][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.706039][ T5846] ? __pfx_kthread+0x10/0x10 [ 118.710632][ T5846] ret_from_fork+0x4b/0x80 [ 118.715050][ T5846] ? __pfx_kthread+0x10/0x10 [ 118.719642][ T5846] ret_from_fork_asm+0x1a/0x30 [ 118.724420][ T5846] [ 118.727584][ T5846] Kernel Offset: disabled [ 118.731911][ T5846] Rebooting in 86400 seconds..