last executing test programs: 6.715221402s ago: executing program 1 (id=3393): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) (async, rerun: 32) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="a5117c6749d9054ad43bf8c1631bedffbcfc98b7abeed150ccc46e9e44cc78c1f20b29761210cc8af2a13ad9bf2d", 0x2e}, {&(0x7f0000000040)="492a6574d4095f777be45309adb37c21af2999512930bbe12b5c99b43096f1806de2db31a290cefac7cac86d55f76a6cc147e8612efac9f53f2912", 0x3b}, {&(0x7f0000000100)="0fe6260c69ae381299bfe7397f2516b67a702cb497b8fdd34ddd3ae390b0ea403780e16ad1e1df4540d15fd808ff91c0a6d3091e2a044dcbe285189e87bd7c8f44a908e82b2383ec95a77e18d93492ce5e77f2e77f45089782204d951979099b38fe2dfa3d27623d1b392a680ce1cc2e9cc3240c6a1494634f", 0x79}, {&(0x7f0000000200)="79f0f3c62173be1e90e2d9d783de72d614aca141d6432ed325e819877e4d0eb9b867a8b393c103", 0x27}, {&(0x7f0000000300)="bbe722ae1fc1d1a12accd926984ed339b9af44f42e6dc14a4b6c8f43327a3b83c4d7f6bb239dee5cc6f0f7665e05647f39c1b1b597ee5898af79f5df8faef6a6c7c80cf236d2c61945be6a6add25bae3ef65e20e0120ee793f428b31aeefe0373d694df0a12b5738e8e1257769ba64aede7c675fbf301b65f5e4e0773b4f212356d0314368a4732e", 0x88}, {&(0x7f0000002780)="d95f42026aac749431dd8af6ebb681bdcb4e06b3ada6f52b25c74d3f1e3f91cc126b0333eb78cf067f1bb07cc52d2bcf7e706fe1adb3aff3365687abb200159889730ca188a4a85d72cf627601184d5ea4b6d1ba7f1cb538d87102617437333282ec9480e266982a1ee409c0fc92d97d53d2a7d6ea66ee0385400c39c38b8216e81bec028f3fe3ebce668175bbf817ef27ee40c3984720b285d3bdfe4be56f13986d30789380f7e8e34bbfbca167fbea3a8e746fcb23e602cfb4644f87cbdd1e065bf6f8cfab119d47eaf836e206457a660295d0a8b53f32a77da065baf20035975a2401f003c85cee2a7bea84dc9f1c6fa2cf2e38b83ef3e344123ac91972058fa0d4a14a5411b15ca00159a4c454758cbb3b74a5fa7a6f5bfba5f84ce320ed7f133768e2a76feb6b4ed94d23974f77f31fd4b16cfd118eeeb99bd5927ba89bfb330728de80018d2d1ae73895f3379679f444ed81cde479bd4bd86107c2be2167c2e0d6084bff3b5076f9c0dd037bdc3a6b18b803cffc40a937bd3d53cbf150703a51ecde82e90e511b5985425ec38144e2581464cd5a1d1536726341ea94da1333595557fb966231ac4dadf21106e3d1b6fd13526b04d55bb9606b5ee23d3f190eb45c8953a13411896dccf73a5f9e216b437eb3b7cec0bc09bb9961afdf6c13b4d5ce8a58fa3461153eeab0268144671196a8c6c8f983808b19d8b174d3067b74064e68fa6af38bd19dabea420e51953d977b69136003e72f671b9f622ebe53b2761f640add89717cea1f378e6e529b6ef36ea54bf45f8d96a5113604bdc7e0ae848390e865714e1fd401cb765b1fd74b542b7eaeb145f5d28d159b8a1210f6bcf6ae99f56115564742c31889808a706e768e7cfe7624029db617ff6ed08e473e9e0330d2d67b5c5ab3826b7e9a6fc1e01bfea08d752065d8c70c8558f74cf45084e0b90c2accec78ad737c8e483991e5eed8710d336ed3340dc1e5254389cf6537e079eb9623b964795dfd37609011c1e49ec3775627741dc330577a5148ba0e6dd2bd97a39c263e7e7792789e065b54776e15aa0a7f081e1489d01f391ab1988a2a29bdb0dccf3f48ba3fad5f0e94f0e4d2724efd3aa8ef202477c76115ad8b3566267bb0a8eee0664921e5dd94c0e8831ed4a43c850611e1a41237c306adc070e4726da7e38a09812aedd5212c69b0ddbd3bcedc48b560599e1a3d7cebbfaced9e8090600ee5f72b31daef009fcc31319ba91465bd11fc408ea63977ff9da7d65835eceae173dbebdaaf4ee6c3ae1cef0b014161c434f72f46fe131a96a3c808fa7fa21ba33a4d115cffbdef7141393e05ae9d86e718c5dab5363bb0b0fb72bbf624704884e5cdf4ebc460027ef4e81d3aaf752c3f5b77a2cc28ef88d1cb63aec220ad86a743cea3068f1bfc952a1223d19f18b4b8d399a2c0612653b23ab4a9cf69ab0c3c2b55cb069ad6030bd1afabdd952d930c962faaa79c7dec791c484d6e2514820ec415bc185fd6668381f10ae91ef53b6cb1aa79c8f90051f14896b60d77ced99e9a44fc91cb947c2b18436836ac6bf1276ea3e1339fc0db9da170fe45b7a6c26719520c44e1298f1128562757b1e093483e4d12cb9408ad5351425095a6869dd639fb1c771d158b126d91167ca42a4c777819ed22de6c16c772329f7ff466b2afe309f8fabc5a32f1e2f7f486a931e71075c763ace712cee52d37e7d8fb0fb2dd2f5a88f23eb6c5201f720038f59a954b229ce4f45a95ef4abc93eb4e0d86f188990efa0d4bc25e49b1e7624e5096cdec800adb285e8668f0e6aff3dcdecae4a131810d1e4faa60e598288d1adc9d1ae0713917b02bdd5fd370089024c82b514d70108ca8dffd0efe3b00e711e67c3bf72c87451393b01e2092eec3c881c19162ab30210b409707ac45bf04ccb8824ee1bcaecdccb105ae2dc3a26e91f45d48c167b75d21e1ffcf708d85427093b5e06a573977840b423f3d9d5ebd4ed262898228a59633b0729c6d3cd461253ae20ba4e81aa02eafe01b39d2dd7588ea4b0dd680fa44daf700997f774ff0db4dd0ae68103da713383945f29dd09674160940cd08a1f93d9be8b19b165fd391ed60ccc4da6fe92f2cb6b563c8f5ca3525df7c09260d76934240599d66ab9eed8f6f4a267fc954f82065590212b9e1e2f06c39073a9267dae64df7a92925b4a17a65b1fd660b364359ff5b5b57541fb18b2522ffad6524dc112e5b54bb8e43409af46bacc512ddb49768ced962e9c308be6c247fc6cf8dd42e8f464933b5c063e0367a64fb4df08332944a4160ef8e6e77c5bf7a3788b568a3b4107fdd6e7f03be8869dff0115efa9ece79ebb9dbf4688416c4a47f1352d65a72c5c02ea748db430ece3b2da26d8f340163e503f2e2d8f41381a6e8e4ab6bc22b0c347d3b1321f4db737c7a622de39bd39d3bef7594a8810f38c7bb1c81883dc74b6d49c4274855aa527e1a1b6c8e46493b02dd67f579188b3705c0f7e60644b7c823f4de726e607157f523143054005908cbd0052a9253421e2e2f78c3115253573cfa07408a14d87cafcf9d3e4fedb43325e011fdb0b12c43e057effe75f91f1f7ace578c144c2170449b92597f71007818e8a7dc50c68b7c04babf202877f6b17fc0c537149e8b59a589a1f8eb5b96802cf926929e2dc5d7abe5096b3f2e927ae269ed096b0c91a530b34f39e045038780876d93482e0fd6d9ef7dba3df7adccb4eca1ecdae5c00ef02bc527e587799358aef26fc99dd470796b4eadae273baea9a508be9a5b42f53d54b6b15c707159cfd6ebcc087e3d9cda33d8830ee36a442bc132e6285d6179900132a18dcb7c05e8cc0613faaadf2d7a24b14e1c00e2b777d73f8c2f5c242f1f20602596e760f19b0069675cba6d48d7ef67ee275599d87f1ac0e0786301ab2e6cd78cfb4b9846f40c907c579454a58550c9dada379e4f4a84b3a3eb117ef11d4f411e2a2baf82e770998db2f4c92b975211259cc0ca9edec386946cbf10b2fcce0fb8418ed1f8c439a2a72880d8939337f17cde39533faa52adc80c04dfc23eb71c4cc53e89eed136899f95902e915396d82b4a0fa157420fcbad2d3c9abc9beccc3252a5c6862f9db0a9aa470a40d4bfb89a5674cdc3c60d6f564fff17396cc75bd2e043727c0f983476365f1abc2dc5091e541181f0363d56ee8b90e71c8dec92d322dc5c56fd06b59b6a3e2105f9a35309fbff913d338f15e25608791a5a1c9141831e63c8bb6ab9188043ddca1804cbcce8c1f3946ed6148b5c372eeac3391c4b8afbf2d4c8f5af6861879cc9664bee60c9c396068fb934d9d101e6d3bfa0bd57202473a12db17a2cbb764884b114364763e2f4d276c6e208ed244bbe4eab826625f6c8966fe4ee19e7afde3fe27591210b94e50df2cb792dbb01fd876231764069936d7820bc505e793947bf1a2db59246e45d03bc29c39eebb701722ce5ef589c4b87ba40eaeb1c73b9b99f765b0df5aa48574647f4d5c54735a0afca75b8a4f5edf4fabceca00e8415d7c31f75329b0173bd54e6fca29f82c8054a707cfeea6457980178a4d19f1d9b66c10c0aa6cfcacfa911429ef28f802b4c1131bfcb39907592e9ec25ffde7f2b79f386a9ca4068becc0c6ec3295473c3381a1fceb6283d591ac26b59a31c099ad4091d9bbc2b2ef53f1d96fbdbd7c6c2012ccb99ec7b2b46c87ed295cc2e83b12e61f770efda5703dbeb786c3ea988e0a668a4113acc2ec3d390d2e02e3ec25b6c23adb59aaabbbfce48b12fc4667de95a0dabb9018d6ca3dbda1a8348d1c210a683d82b0c517807e3b7fdd45f3b6ff72a650f5b4ce0bef566447455b77692b4e299c43d0b8c1867ea667dc67e58dc846cb56d86134e837b411c7fe99cfe4520c834e7bbf197de492d9e4c69b5ac1263d7157a3bc2f7d98a618f8b6f9c3730b15958e049a749f906afdb114351fedbb75701aed83cf8759155d9aff2489cd68b6b21d1e95921ad5e3859f75b7b4fde9764e6bae27bab83db3bdba4a23a5fb38d8065df29ec0a39be4a5100c2482eadf1b661f5af6edf088a4b3d234b974616e7c8fbd01fa2e87bbd84fc0ee7782337fdcb897e89b272f8bbcc96563285bfec65aabe6d6fdd238e22574267e76c8a76f145305cca0024a5ae94973d609826ee19b3c1599a1acb5102a96a944e5c1ad2a8e3662396832d75eba8106978001bb2b77bdc7946a3afc3b2c8dd0b565da49ade72304447a43182e0fd594a6ce06607bac34e2bfea71ee3688934e8f91658ff43a72b665efc5a2a4bc24d5a9cc82ee55a23f24330ce08db378e1eb84f0e87ee3223853ed0a1449481c0efc6fc5fc5b89557ce5cbbcde641cdd79ccd85b78fd2773a35968a8e4f0ea258f4469769ff64b55a835bec7d7d1e403022d84642bd27b8d7f0e1de145062d1c0c2f5d16166c913b3c26c9c7f39aeb19b8ddc16da177263f9f9ba9b58335e0ea670210dc6f84eb1f0523249c91a31c5c73a597f86f8832580ca8c23971b7ca8e4c29b0a0476244bfa63cb19f52f19e5cc2a9319385ee9f0457e5a4615451219817b00607ce0cb010adad71370da3150d6217da82189fb582020edb413d27296429bbd39952000060120e6dff15ff05129ae880fd35d5061c76f072d8c14c1be42a3b830cad868a6c7805772b074620d03c021bad7372610bf324d90108cfe427c02746fc5a13cd1cbe8c3495db9ab7fe73db645553b4a244ac454700a506283e957866a83fdaf9bac22f187216c983c40a45efb447c623ccbd4bf1ee4570780cfbc92757e736e8111b83a89270e5612add10647d03d1e2115629ba894f5ca038b4a8024b2b1a2dd84cbe314bd059196689ecc9d5da590b297ab34aef54cf66da16cdd94df3985038a60f3782ed1d9c7fae584e438b167dbadef123af8fdb96523f0752a604e46b2ec159efd2e9103961590637984b4de978b896489856896fde72c5302670eefa5168d8fcbd7a1f4c9d9aa822ac30c1246375eeae703970e85e9660f2135c1770322210922f8dd176a28d7f1154a9d814b0cea16da9f255f0b1e6c3822d589efa2ec3979f13fd33ec61f8759d2145f7fae01102f677bdf9aa9d831aa97ab5cf60d7276c3fc8eedb9ebb7d2509dc2834157c61281ede24bb85a899b41262a29d6862e0f048d26c08e969e880ba0fc6da592064f88dbcdbc8f160173ce660d89d275ef721e688fd6c3a2a058cf38b48528dd131a557164cca7ea8bae35369cc15bea36f398b12b138d268f7ab31f5107f25df46c3e07c990a3998aefb7e64a02c51b9e198b9273a6af55f3ff065042d2b13faba7b1f6308da0a906379e2a71d265cfe9bdd22da4b72e5e3841acdafbea336f6fa2b127e6544ad88c74b487a0e8570ca90277e0161d7ddab07c8047801fb2bc827d671f680bf799e629386ef5169f8c26e3fe86b5d176362c9b1459acd0e20fc2daed8cc3b26a8161ddc0eff3156681cfe8ef21c76b31c35861407df5fcbebe7d7aa34f1150abfc8f70021b762b2908d81e8431614459bb1aab56195e503a95b87c9f151925020a9912f8d141383e717aca99e595793b7654b8b823a257ae1d3944e228b9f259acf927c353356420d40004a277defd08e88fe9a979b2fffe26bff6117c0933935de221ef3192c08803162ef6661520a2506a903788236823da7e39c220883eaa3aa07324b901e5b0360b8ebb6ffcc2230847d3d4fbcf0185fd7a1d6bc77a9a24cfca15d58b1380eebed0631bdff8bf1b44be1158ed3808c304fcbc3c70ddd083a0ca25a7", 0x1000}, {&(0x7f0000003780)="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", 0x1000}, {&(0x7f00000003c0)="547d0624dabdbf751bdd7db592341f4924f14a032eb15f52fe10676955d5ffd230496f4f1c0343f9f64f80ba6d4d0cf1531f49aba992b6593a3edeb4448ad23aa8c56ed78ce5e644e774e4868c6013891967ff2a75bff8246c7257f2d67b457668cf510cb7b619bd161c79260e673566a300294f85696d096a5f37c96f727f47aa805c7c1a945945c28e7a68c304005f3fc19ac434271fba20a7824ed76118348ea9d7e8bb", 0xa5}], 0x8, 0x0) (async, rerun: 32) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x104, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x94, 0x1, [@m_ipt={0x90, 0x3, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x52, 0x6, {0x8, 'mangle\x00', 0x80, 0xa62, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1"}}]}, {0x11, 0x6, "e2ebd2e0185a4d308803e9306e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x5c, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x104}}, 0x4008800) recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 6.328367787s ago: executing program 1 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x1c, r1, 0xab2156e9fccf65d5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 6.013561291s ago: executing program 1 (id=3403): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) epoll_create1(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.935385887s ago: executing program 1 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r6 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x4) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) (async) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) 4.843944129s ago: executing program 4 (id=3412): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x16, &(0x7f00000001c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '\x00', "e203b3", 0x1b}}}}}, 0x0) (async) syz_emit_ethernet(0x16, &(0x7f00000001c0)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '\x00', "e203b3", 0x1b}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.649248323s ago: executing program 4 (id=3414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="95905fcd83ed5c99e17c929c2f3d14eb00e38b282c32f8937505749a7dd62f7fcb6f1c43fff2c30ea317bd74", @ANYRESHEX=r0, @ANYRESDEC=r0], 0x32600) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "fc5cab314e8ac4b45c359120b4af6c59ae7c8e32be660cc1a9fab026dadec318", "53c26ec61fde23a33c0a876554c90cb04ebe1ca881ed2cbd6f3ef175e13c512f", "9d50082daf45ee218497281b0569be3e31ef8bd97312dd97737febd6dfaa36c9", "73327d8a7f8a428597ce6d3f6f030f55363393cd81922968dcce1a530fc99179", "b4866c34b809a197edf09527da5ee3c553e6a2864fba54c2d0520781729c9ed8", "9100ede0c45f67a573f924a7", 0x8000, 0x8001, 0x8, 0x4, 0x400}}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8002090}, 0x48014) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x0, 0x0, 0x9000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x2a0, 0x30, 0x10, 0xfffffffe, 0x0, {}, [{0x28c, 0x1, [@m_gact={0x13c, 0x8, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x222b, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x78, 0x5, 0x4, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3af, 0x10001, 0x2, 0x3, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x45e, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff1, 0x1, 0x1, 0x5, 0x24}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc8, 0x5, 0x0, 0x9, 0xab27}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xecf, 0x2}}]}, {0x73, 0x6, "0dbc89ff04c5d968033408fdb5423134ce848cafcfa5c75daf1b6431af22c863490507f772bb83a9106a5dce85c5b5cdc6f5f6b7fcbb39094f320083f087cbcaf155a82e3fd70053caee0546487f37fd67d440b7ff104cf7e86f7f8608d64425beac6c1f03d9be6283b4cca86ede3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_bpf={0x11c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xf2, 0x6, "63780d12deb6ed75b794902af9b268ce29ebd5d065d7b721119345ee13d192b8d9c83504febe9221b1c07bad967cf3069d720572bf5e84e2f450757a6ccc1874efae179e9127e445c2fb42c5df08278eb921662a26650b87dcdd84905a39341e609064fc35fb4ff58592c825dff8acf94a5552078c08b1b372160db44cf31be2ad1726d854d4432540fdd2e9a99e7ed1782cce2a5bad409f52628b93d28506377dd7cfb0a82f29b85162bb2a1393e66456947934d55c1101000000010000003d4635cd1a15c72c1d68f3a0af7c7155ee3f932db16646f8a5408003ea0ce38b8d8e94f328dd4ef1afe70490c33972"}, {0xc}, {0xc}}}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x2004c050}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x80000000, 0x6, 0x3ff}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r9, 0x0, 0x23, &(0x7f0000004b00)=ANY=[], 0x10) r10 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x5c}}, 0x0) 3.584511991s ago: executing program 1 (id=3417): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x9, 0x3, {0x0, 0xa, 0x20000001, 0x6, 0x101}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x0, 0x0, 0x2}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) close(r0) 3.501494961s ago: executing program 4 (id=3419): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="30000000051401"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000080)={0x5c, r2, 0xab2156e9fccf65d5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7a5d, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b6a219538037cad2a11d15a158"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 3.499839883s ago: executing program 2 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 3.413120381s ago: executing program 4 (id=3421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 3.396490888s ago: executing program 1 (id=3422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cee43eb105a2114c464f9b16aed6da9d91ed39d03b07c44909f7f87ef1f3a41776a508ee57e724e13f7490aeb6b37512eebd0225162aeedc0626784f79464b31b341c47a7510a2d3db5799fb988a0c6b6e8592a6dcc6c87fd40b0a7267cc30cea4a214e37e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000500)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @device_a, @broadcast}, 0x30) 3.277373836s ago: executing program 0 (id=3423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x1c, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x2004c080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {0x0, 0xfff1}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8010) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r9 = socket(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmsg$inet6(r9, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x100, @loopback, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000002c0)="5665702f5e5648f3dab42167388ebf5ed679d647b515d24e4890314545f81e011fdeed7d3695847f", 0x28}], 0x1}, 0x80090) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x1c, r11, 0xab2156e9fccf65d5, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xc00}, 0x8) 3.276422852s ago: executing program 3 (id=3424): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r7, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) close(r4) (async) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.739868684s ago: executing program 2 (id=3425): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4, 0x0, 0x192}, 0x0) 2.6302839s ago: executing program 2 (id=3426): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001f40)="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", 0xfc1}], 0x1}, 0x4800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="030000000000000001000000000000000000000000000000000000026c86793d9bbdac4be400dfd123f8ea3e3b8c4ce00192bfc325831684afeb85df5aff7b007c7a63314e1d08"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000e9000000000000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000fd00009500f4ffffff00006d1ac0ffffffffffbf91000000bceeb6f07a51f05a1b07f17769cdbb000000b7020000020000008500000084000000b7"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='mm_migrate_pages_start\x00', r0, 0x0, 0x7}, 0x18) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) close(0x4) pselect6(0x40, &(0x7f0000000300)={0x0, 0xffffffffeffffffe, 0x0, 0x0, 0x401, 0xfffffffffffffffe, 0x8, 0xffffffffffffffff}, &(0x7f0000000000)={0x18, 0x20000000000}, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) 2.451477327s ago: executing program 4 (id=3427): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) vmsplice(r0, &(0x7f0000000a80)=[{&(0x7f0000000440)="4ddb57d414868a7fadd32eefe73a616c3b247336d3113a1b538f3e078a0b364ef2ab13e0a4f9ca5dc4cb8962c5ec3c650d962c476023fdfdb0c28036d28c649d96339e52cb16825864835dcec44740aa5477d4adebe45a95c28db2442339364617c34a54098612", 0x67}, {&(0x7f00000004c0)="3b5429c2442b8745f5bd22eb2d3cbc70622b3997498dd250a20a7f39f125f60c8a4cc4bfe9c22817f7747ea2575d410164cb62af5c12c5230f01bd9a9c7cce3974ef6dcd7850a4e4faef652363556a136aeba0d62d481786763bf4bc48397edfdf9cdcc33825adfc015b3660bd5c66b0d25ce21392636f79b5e0435fd00ca4c21bc155f22b245c70dfdb595f9c5e5c5a30993e5c84dcb50bb9be9534c74603c2f373c2129e69d726575218391df5", 0xae}, {&(0x7f0000000680)="45df78ea2f63ad38de131e62c2dac517176855de8827ace742c3aa5902f97d9ba1af9765df1ef0cd61441af7eff2226ade3b9fbf386e754e7807aaf355ce9d59d6b45c5b945d2a4df4aa5d303fa844ffda0ba517e77cbb91356107e5b5d0373e9018ce4a929107508abacb5e1d035249826425aa10a2a072d5e6ade09ba384e35033a9d87d44c47876dd89d1547ff08607aa86140be4812eb0b5b00889e25236c3f95527c017b496ab", 0xa9}, {&(0x7f0000000740)="729e720cf644c4a06c0d0833707d4b241eeaf246e6de116dc5ca13734b218656f563dfc1fad98747bc7d5ca6efcde323251cfb49682bab5943432e8971a6858d0f2bf2f978b65056e3989f2992f1232ccd5168fe2924302b6fac0707e3de2f9447e7680703143d4932049fbdf9d28b2af7562c020b79ad3f4e44e6631292096afbad632c515bca8e4debf0dd6da55eda268b13cad27b0407", 0x98}, {&(0x7f0000000800)="4a62fe922aa129fd8c401015c896b8d0602106e47884cee74c8ae542f40a92909c362f2c65a9805a9a047d54345828be4fb1aeb8c90fe084881c0fc8c3414341f33eec6905451e0052a79774542df51971635b371e94e13134a940e0cd2cce2ed53737c7ad36381da760863e80ae050d72b996975e55e2019e468d8d5272bcb013b2aa6e711a2a753f0aa5c7d496dcc187f1ed78e497f7c7ab23a9369a0cdf8d5e648a6a60f25e90ebb636a4fbfd273d1eef940adaf72395de994fe4996d690eda1e4f395dab", 0xc6}, {&(0x7f0000000080)="daec5d55d8", 0x5}, {&(0x7f0000000900)="3d449c8bfbf7b9c5ea16a6a0b8abb9800058a398ceba72ee58fda4d19cbf24c2bd722e68c655ddfd6aade0a74459a4af73a16ca4dde97f878de4196ddf326b19629b1b875723d3426cb8fb442b44f1af743f68a6524ae6feb4e0c3ca1bb67ad260e0", 0x62}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000980)="dce0c776a6a9755c926d3128a242f74d5dea0a45f43ea2b705619eb6279c427466f2b4bfb591c72f52033444597da89a37ce6da85456b09ae19b7341e74fa18be9621835d678efae02b11c89741175dbe9eaa5ffcb96e4630e6d4f7db615bf354eb081f5ec89735996aca302ea94608f06b1e9bb1541f11fa0c26958faf039b2d56d30d56827f7a9a46e52dbdc7d5abef249e5930e1cd95dd6870b10d7e718ded48efeac7ac301f48b184e1a1345b8f8befbd17ef3fa8f24c2a15ad67dfa6a653d7e80ca0203cf2c1f7e0ecc5620614d97d4abd41eb07c", 0xd7}], 0x9, 0xe) r1 = socket(0x1e, 0xa, 0x7) r2 = socket(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000003a80)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x10}}, @cred={{0x1c, 0x29}}], 0x30, 0x4004}}], 0x1, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x33, 0x7, 0x200, 0x2}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_ETH_DST={0xfffffffffffffe5c, 0x4, @broadcast}]}}]}, 0x48}}, 0x24004000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0xa4, 0x10, 0x503, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x58, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xfe24, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="f37bb9edf99b"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0xa4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x20) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r11, 0x84, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x13}, {0xffff, 0xffff}, {0x3, 0x8}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x6, 0x7, 0x0, 0x2, 0xf26, 0x3}}, {0xa, 0x2, [0x71, 0x7, 0x9]}}, {{0x1c, 0x1, {0xfe, 0xa, 0x54b, 0x4, 0x0, 0x4, 0x3, 0x6}}, {0x10, 0x2, [0x9, 0x8, 0x0, 0x1d23, 0x401, 0x3]}}, {{0x1c, 0x1, {0x5, 0x4, 0x65, 0x9, 0x1, 0x1, 0x4, 0x4}}, {0xc, 0x2, [0x101, 0x5, 0x9, 0x8]}}]}]}, 0xa4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=@dellink={0x28, 0x11, 0x400, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r10, 0x8020, 0x1}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24024010) r12 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.448927939s ago: executing program 0 (id=3428): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r1, 0x8004b707, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r2) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000000000070000000a00000000020000"], 0x38}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13}, 0x20) recvmsg$unix(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r14, &(0x7f00000007c0)}, 0x20) setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e22, 0xfff9, 0x4e20, 0x101, 0xa, 0x80, 0xb0, 0x3c, 0x0, 0xee00}, {0x7, 0x1, 0x1, 0x7fff, 0x2ec, 0x8, 0x9, 0xb5}, {0xfffffffffffffff6, 0x5, 0x8, 0x9}, 0x8001, 0x6e6bb5, 0x2, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x0, 0x2, 0x3, 0x8, 0x4, 0x7}}, 0xe8) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r15, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d40)="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", 0x7c2}, {0x0}], 0x2}}], 0x2, 0xc84) close(0x3) 2.446673851s ago: executing program 3 (id=3429): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, r9, 0x201, 0x10000000, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="010000000ec80cacba3dd65900e3049ef113a6fc000000000000000000000000000000ed852c4762", @ANYRES8=r1, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x50) 2.148554622s ago: executing program 4 (id=3430): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xfffffffffffffff7) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 2.055230824s ago: executing program 3 (id=3431): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000840)={@link_local, @link_local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "f71f97", 0x0, "231034b79aa983fb78"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="040028bd7000fbdbdf250e0000000800050005000000140002800800070000000000080009000180000040000380050008000400000008000500000000000600040001000000050008000000000014000200767863616e3100000000000000000000060007004e230000"], 0x70}, 0x1, 0x0, 0x0, 0x44041}, 0x4080) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f0000000840)={@link_local, @link_local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "f71f97", 0x0, "231034b79aa983fb78"}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="040028bd7000fbdbdf250e0000000800050005000000140002800800070000000000080009000180000040000380050008000400000008000500000000000600040001000000050008000000000014000200767863616e3100000000000000000000060007004e230000"], 0x70}, 0x1, 0x0, 0x0, 0x44041}, 0x4080) (async) 1.693540491s ago: executing program 2 (id=3432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000100)) close(0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) 1.601611698s ago: executing program 2 (id=3433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x3ec, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "ddc54909b325cf3bc6127e816ec7584884a4e86c727bb3bded98bdd859d975f5495bb53e08d688954bc5ab82ecc0186341007cf31563d747780ea5a565967067eb9aca99561ad07cd9f963e5aa9cca1d14669dcee4ec4993a2b9e8ff308bcb755f328028697feff54750b6faebcf417e8e8189c46fa56e1879"}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "95700ad42573cd39232ba1510f11b67d2992449cd7b7452b9770935d835d9aae7c5e663ab018ecdc5d13a8619f764e31d15ff82a60879fe4d67b765814610c9949f738c2cb66139c58e1517c56990082e69e03202ea813a5c73b7a1ee91ee1b282c72fbb1c1571f2562753d811f9c0ccae85b351a765b59114e0cbd8a0e335add920abfeb2a6758e7bad374ae3b256b408eb78335671591c153616a25edb680485b6e6f532836b794a070d93503f26c3b07d058305b94bd7dcf336cc04c9714e0f52a30f460c59864bf526eeb20f38f35c0d07"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xffffffffffffffb9, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xcf#][[\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "097c83a0625b34a01844ddf9297ef1b98035c405f47d203f5ae1cf168ac03054af3b2acb81e2674edc303345da92a2c7b90d6dc2f672b4378f3378a227"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x18}, {0x14}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "bfd6c8d2661e71400ba433afa20e2e1a70e8bdbef1c31b1518f20483a700745d8d6def87c180f4c80d48f027eeee153d1f307e6e10da6cc73ac7ac67dbca1dec0dba312a52407f5d565e61fd254c4d16377bc51fc303f9f143234f0064a75993a99b15dd11d766b32322dea77d810d5e3e82e32b934225f375ef9b457765cb0b5a84bcc314fc1a17a25f231e19eebf5a0bed21f5c517421c4334d1a40f53585bfe19230025ba4d44341b2a2a234da50c4af5c354aa4345"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "0e480170ffa3b33cbdc353630cf91c6221a97f5423444914bbb5147ba968449c37b8aacbc4e2d9d51ff3440b2e8529785e9c8fbf5f6586407e4f9051a70fb41e7c0d9ebc5f5d3227979903c447d66550942d9817b8012859060248bb81fc4810afa77811a9ab8825046074f6696e5a1ca7835bfb918d1d2fd425bc048867da45cfa097044eeb9a8381ccc2ef8e9f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x34, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "37e37a77c63892759f7b6e32b2ba5c617f21ce6c4e6bf47cea39c43d83e6859314257715aefebb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0x33fe0}], 0x1}, 0x20000000) 1.576114144s ago: executing program 2 (id=3434): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b0000090000000328000000006f200300000200"], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840) listen(0xffffffffffffffff, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x64000600) 1.519140439s ago: executing program 0 (id=3435): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080047140038000000000803000000000000ffffffff010207038f000000050290780a01010245000101ffff0065001d0000ac1e0001ac1414aa"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 625.621263ms ago: executing program 3 (id=3436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5800000002060102000000000000000006000002050005000200000005090000000000000c000780020000000000000814000300686152d8029b6f220fe2f543a09fdbdb73683a69702c706f72742c69700005000100070000000900020073797a30000000003896ff663d91d27747cd3baf17aef569d1d1de62e8a03e4e0a0264373d05fd98ad6f55d24f94d214f80dbc963b3a6bb68e6475bfb49254ab7e1714a6963fec3472fb431aa7a2259fa9af41bbe2cc13aba4c197af0344fe3046a8fdf7b37a55592e5c7b8bf10fb0d80e46f0fae6abf64d04fa3341755e5db829df2b447e1c214b54a419ffca426e4a9300eedda2509e00000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x44004}, 0x8800) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0f00000004000000040000001200020000000000", @ANYRES32, @ANYBLOB="8de39f5dbb8765180fda07ca3af02ac0128a8b6c4b16bcb328dd1538fa0e901398a352b4c18d97e29cc58f12518baa37d32c16bd1877d1ac57816781070bb24fe623869f6830c2ee2a8ffed0a6b8be7c71b6fc8983d95b9d93f9558de656cf84ce5f29e05e7403265057db3d3e718c8a497fe0de02b8e7cb46c0aff34c3dd7f67ed4a48e4cf5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0xfbdb8000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r4, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x68) 550.770461ms ago: executing program 3 (id=3437): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x33) sendfile(r1, r0, 0x0, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="df000000000000000000000400000000000000"], 0x50) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 519.092635ms ago: executing program 0 (id=3438): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x6, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r4, 0xef6c, 0x10, 0x3, 0x9}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @empty}}, 0x400, 0x1, 0x3ff, 0x6, 0x8c, 0x5, 0x4}, &(0x7f00000000c0)=0x9c) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x6, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r4, 0xef6c, 0x10, 0x3, 0x9}, &(0x7f00000000c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @empty}}, 0x400, 0x1, 0x3ff, 0x6, 0x8c, 0x5, 0x4}, &(0x7f00000000c0)=0x9c) (async) 193.114409ms ago: executing program 0 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="d56525bd7000fbdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 85.550696ms ago: executing program 3 (id=3440): syz_emit_ethernet(0x321, &(0x7f0000000980)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\\\a\x00', 0x2eb, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0"}, {0x5, 0xe, "3cd53f3733bbfad828e85bbd4da95b32c6788c3e4c68a26dcd68579bb431a0a73fd99a46e18f697f3d92a56a44a5b20a5cef32b0a3748fd2ccffa31f6504cf8e6b04cf88d0858510dd52da76d557c47219851447265dc4ff8eff9c3db59830b7916ee2d1c8bea1a3ce115536502cfa14f6"}]}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000000e40)=""/4105, 0x1009}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000640)=""/133, 0x85}], 0x6}, 0x8}], 0x1, 0x2120, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r5) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) (async, rerun: 64) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081"], 0x72) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r7, r7, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) 0s ago: executing program 0 (id=3441): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, r2, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008"], 0x6c}}, 0x20048084) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600802f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10010, r5, 0xa4a94000) shutdown(r5, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x3b0d}]}, &(0x7f0000000080)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x56}, 0x28) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) kernel console output (not intermixed with test programs): 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.885340][T14850] RSP: 002b:00007fb113c4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.885368][T14850] RAX: ffffffffffffffda RBX: 00007fb112fb5fa0 RCX: 00007fb112d8ebe9 [ 485.885381][T14850] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 485.885393][T14850] RBP: 00007fb113c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.885405][T14850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.885415][T14850] R13: 00007fb112fb6038 R14: 00007fb112fb5fa0 R15: 00007ffe87ddc438 [ 485.885445][T14850] [ 501.458194][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464610][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.335309][ T5937] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 121 sec [ 536.321562][T14884] netlink: 'syz.0.2422': attribute type 1 has an invalid length. [ 536.366840][ T5184] block nbd3: Wrong magic (0x0) [ 536.410445][T14891] bond5: (slave geneve2): making interface the new active one [ 536.419549][T14891] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 536.430407][ T6783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 536.472826][T14890] __nla_validate_parse: 6 callbacks suppressed [ 536.472847][T14890] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2427'. [ 536.480128][T14893] netlink: 'syz.4.2428': attribute type 15 has an invalid length. [ 536.514484][ T6782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 536.528720][T14886] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 536.541154][T14884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2422'. [ 536.550988][ T6782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 536.565035][T14884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.576121][T14884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2422'. [ 536.592576][ T6782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 536.653096][T14897] lo speed is unknown, defaulting to 1000 [ 536.688879][T14897] lo speed is unknown, defaulting to 1000 [ 536.720847][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 536.820386][T14905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'. [ 536.928379][T14909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.261062][T14915] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2434'. [ 537.386661][T14912] openvswitch: netlink: IP tunnel TTL not specified. [ 537.465711][T14920] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 537.889046][T14934] lo speed is unknown, defaulting to 1000 [ 537.920102][T14936] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 537.997822][T14934] lo speed is unknown, defaulting to 1000 [ 538.024064][T14899] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 538.086603][T14899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2429'. [ 538.112893][T14936] batadv_slave_1: entered promiscuous mode [ 538.149808][T14936] netlink: 'syz.2.2440': attribute type 11 has an invalid length. [ 538.172562][T14936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2440'. [ 538.202166][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2442'. [ 538.217796][T14935] batadv_slave_1: left promiscuous mode [ 538.319295][T14935] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 538.631540][T14954] lo speed is unknown, defaulting to 1000 [ 538.641942][T14958] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2446'. [ 538.651392][T14954] lo speed is unknown, defaulting to 1000 [ 538.790117][T14954] lo speed is unknown, defaulting to 1000 [ 538.921663][T14954] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 539.110536][T14954] lo speed is unknown, defaulting to 1000 [ 539.189148][T14954] lo speed is unknown, defaulting to 1000 [ 539.387915][T14954] lo speed is unknown, defaulting to 1000 [ 539.540415][T14954] lo speed is unknown, defaulting to 1000 [ 539.629497][T14954] lo speed is unknown, defaulting to 1000 [ 539.845589][T14986] lo speed is unknown, defaulting to 1000 [ 539.904398][T14986] lo speed is unknown, defaulting to 1000 [ 540.022884][T14989] lo speed is unknown, defaulting to 1000 [ 540.526778][T14986] lo speed is unknown, defaulting to 1000 [ 540.536467][T14989] lo speed is unknown, defaulting to 1000 [ 541.689425][T15033] __nla_validate_parse: 4 callbacks suppressed [ 541.689444][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 541.897321][T14989] lo speed is unknown, defaulting to 1000 [ 542.012471][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 542.041107][T15032] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 542.064951][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.152727][ T5937] lo speed is unknown, defaulting to 1000 [ 542.353702][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 542.370202][T15053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2468'. [ 542.575022][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2469'. [ 542.599663][T15059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2470'. [ 542.707374][T15059] unsupported nlmsg_type 40 [ 542.870688][T15073] macvlan0: entered allmulticast mode [ 543.055966][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.156224][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.290138][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2479'. [ 543.396054][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 543.414162][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 543.471382][T15093] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.482768][T15093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.518282][T15096] lo speed is unknown, defaulting to 1000 [ 543.556225][T15096] lo speed is unknown, defaulting to 1000 [ 543.881210][T15106] lo speed is unknown, defaulting to 1000 [ 543.901316][T15113] netlink: 'syz.0.2486': attribute type 13 has an invalid length. [ 543.933539][T15113] netlink: 'syz.0.2486': attribute type 17 has an invalid length. [ 543.942450][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.231821][T15113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.251883][T15113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.270704][T15117] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2487'. [ 544.292654][T15111] lo speed is unknown, defaulting to 1000 [ 544.323542][T15106] lo speed is unknown, defaulting to 1000 [ 544.339106][T15096] lo speed is unknown, defaulting to 1000 [ 544.935951][T15111] lo speed is unknown, defaulting to 1000 [ 545.038199][T15137] syzkaller1: entered promiscuous mode [ 545.044187][T15137] syzkaller1: entered allmulticast mode [ 545.407060][T15106] lo speed is unknown, defaulting to 1000 [ 545.414184][T15142] lo speed is unknown, defaulting to 1000 [ 545.427882][T15111] lo speed is unknown, defaulting to 1000 [ 545.474095][T15146] lo speed is unknown, defaulting to 1000 [ 545.613562][T15142] lo speed is unknown, defaulting to 1000 [ 546.536395][T15146] lo speed is unknown, defaulting to 1000 [ 546.720113][T15191] tipc: Enabling of bearer rejected, failed to enable media [ 547.070883][T15176] lo speed is unknown, defaulting to 1000 [ 547.093501][T15142] lo speed is unknown, defaulting to 1000 [ 547.121502][T15176] lo speed is unknown, defaulting to 1000 [ 547.186828][T15146] lo speed is unknown, defaulting to 1000 [ 547.447370][T15207] __nla_validate_parse: 2 callbacks suppressed [ 547.447390][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2502'. [ 547.847163][T15176] lo speed is unknown, defaulting to 1000 [ 547.869450][T15211] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2503'. [ 548.939259][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'. [ 549.027753][T15261] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2514'. [ 549.141079][T15265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.278820][T15268] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 549.326446][T15267] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 549.360407][T15268] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2515'. [ 549.665114][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 549.911933][T15293] sctp: [Deprecated]: syz.4.2525 (pid 15293) Use of int in max_burst socket option. [ 549.911933][T15293] Use struct sctp_assoc_value instead [ 550.158484][T15311] openvswitch: netlink: Duplicate or invalid key (type 0). [ 550.172855][T15310] lo speed is unknown, defaulting to 1000 [ 550.180384][T15311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.182401][T15310] lo speed is unknown, defaulting to 1000 [ 550.387519][T15310] lo speed is unknown, defaulting to 1000 [ 550.642265][T15317] lo speed is unknown, defaulting to 1000 [ 550.652047][T15317] lo speed is unknown, defaulting to 1000 [ 550.809308][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2530'. [ 550.884032][T15317] lo speed is unknown, defaulting to 1000 [ 550.978949][T15323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.011045][T15363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2541'. [ 552.044405][T15363] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 552.064463][T15363] netlink: 'syz.1.2541': attribute type 2 has an invalid length. [ 552.238844][T15371] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 552.332142][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 552.377121][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 552.474244][T15385] netlink: 'syz.3.2549': attribute type 12 has an invalid length. [ 552.666359][T15389] vxcan2: entered promiscuous mode [ 552.714894][T15388] lo speed is unknown, defaulting to 1000 [ 552.736322][T15388] lo speed is unknown, defaulting to 1000 [ 552.987823][T15388] lo speed is unknown, defaulting to 1000 [ 553.241820][T15410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.308250][T15405] C: renamed from team_slave_0 [ 553.341401][T15405] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 553.354808][T15405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2555'. [ 553.363906][T15405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 553.391578][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2558'. [ 553.468918][T15414] tun0: tun_chr_ioctl cmd 1074025672 [ 553.474285][T15414] tun0: ignored: set checksum disabled [ 554.300582][T15462] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 554.449431][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 554.605601][T15480] tipc: Resetting bearer [ 554.614471][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2573'. [ 554.640273][T15480] syzkaller0: left promiscuous mode [ 554.655822][T15480] syzkaller0: left allmulticast mode [ 554.937726][T15498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2577'. [ 554.943325][T15480] veth7: left promiscuous mode [ 555.000601][T15480] ip6gretap1: left promiscuous mode [ 555.030128][ T6079] lo speed is unknown, defaulting to 1000 [ 555.060426][ T6079] syz2: Port: 1 Link DOWN [ 555.106259][T15504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.134230][T15494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.136022][T15492] lo speed is unknown, defaulting to 1000 [ 555.149463][T15498] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 555.158708][T15492] lo speed is unknown, defaulting to 1000 [ 555.347807][T15509] bpq0: entered promiscuous mode [ 555.435244][T15509] bpq0: entered allmulticast mode [ 555.499631][T15510] xt_socket: unknown flags 0xfc [ 555.526555][T15492] lo speed is unknown, defaulting to 1000 [ 555.533534][T15507] bpq0: left promiscuous mode [ 555.542444][T15507] bpq0: left allmulticast mode [ 555.717978][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 555.869752][T15524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.911023][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2583'. [ 555.944259][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2584'. [ 556.510443][T15543] team0: Mode "ac" not found [ 557.379722][T15578] tipc: Enabling of bearer rejected, already enabled [ 557.429989][T15578] syzkaller0: entered promiscuous mode [ 557.442939][T15578] syzkaller0: entered allmulticast mode [ 557.467690][T15582] !: renamed from dummy0 (while UP) [ 558.570616][T15629] netlink: 'syz.3.2609': attribute type 1 has an invalid length. [ 558.635504][T15627] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 558.948127][T15626] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 559.293447][T15649] netlink: 'syz.2.2613': attribute type 9 has an invalid length. [ 559.593911][T15656] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 559.694045][T15658] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 559.952876][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 560.418039][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'. [ 560.440020][T15684] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2624'. [ 560.547226][T15687] smc: adding net device syzkaller1 with user defined pnetid SYZ2 [ 560.927736][T15683] smc: removing net device syzkaller1 with user defined pnetid SYZ2 [ 561.392752][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2633'. [ 561.717640][T15729] openvswitch: netlink: IP tunnel dst address not specified [ 561.762758][T15729] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 561.819234][T15734] pim6reg: entered allmulticast mode [ 561.851395][T15737] sock: sock_set_timeout: `syz.3.2642' (pid 15737) tries to set negative timeout [ 562.078024][T15745] netlink: 'syz.3.2644': attribute type 32 has an invalid length. [ 562.317659][T15747] bpq0: entered promiscuous mode [ 562.322783][T15747] bpq0: entered allmulticast mode [ 562.339537][T15747] bpq0: left promiscuous mode [ 562.344429][T15747] bpq0: left allmulticast mode [ 562.357827][T15756] lo speed is unknown, defaulting to 1000 [ 562.376294][T15756] lo speed is unknown, defaulting to 1000 [ 562.402645][T15757] lo speed is unknown, defaulting to 1000 [ 562.618394][T15766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2651'. [ 562.647239][T15732] pim6reg: left allmulticast mode [ 562.794745][T15772] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 562.831842][T15772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2654'. [ 562.855604][T15772] veth0_vlan: left promiscuous mode [ 562.878730][T15772] veth0_vlan: entered promiscuous mode [ 562.893113][T15772] veth0_vlan: entered allmulticast mode [ 562.905974][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.906069][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.941855][T15772] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 562.967602][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'. [ 563.040721][T15780] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 563.180952][T15756] lo speed is unknown, defaulting to 1000 [ 563.228899][T15757] lo speed is unknown, defaulting to 1000 [ 563.355672][T15799] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 563.462596][T15808] netlink: 'syz.3.2665': attribute type 83 has an invalid length. [ 563.602600][T15804] bond3: (slave gretap2): making interface the new active one [ 563.621526][T15804] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 563.774153][T15799] vlan0: entered allmulticast mode [ 563.791381][T15799] bond3: entered allmulticast mode [ 563.796682][T15799] gretap2: entered allmulticast mode [ 563.853774][T15814] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 564.009713][T15816] lo speed is unknown, defaulting to 1000 [ 564.066227][T15757] lo speed is unknown, defaulting to 1000 [ 564.071697][T15816] lo speed is unknown, defaulting to 1000 [ 564.186481][T15825] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2666'. [ 564.214706][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2666'. [ 564.257264][T15818] nbd: nbd3 already in use [ 565.046974][T15816] lo speed is unknown, defaulting to 1000 [ 565.065934][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.405548][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.630135][T15891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.662472][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2688'. [ 566.230400][T15912] bond5: (slave geneve2): Releasing active interface [ 566.289040][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.329336][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.378085][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.412554][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2698'. [ 566.434617][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.722386][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'. [ 566.786158][T15928] macsec1: entered promiscuous mode [ 566.791947][T15915] lo speed is unknown, defaulting to 1000 [ 566.794878][T15928] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 566.809516][T15928] macsec1: entered allmulticast mode [ 566.838835][T15928] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 566.872990][T15929] C: renamed from team_slave_0 [ 566.882117][T15929] netlink: 'syz.1.2698': attribute type 8 has an invalid length. [ 566.903503][T15929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 567.022764][T15935] bpq0: entered promiscuous mode [ 567.029358][T15935] bpq0: entered allmulticast mode [ 567.041552][T15915] lo speed is unknown, defaulting to 1000 [ 567.320489][T15950] gtp0: entered promiscuous mode [ 567.344792][T15950] gtp0: entered allmulticast mode [ 567.685520][T15971] lo speed is unknown, defaulting to 1000 [ 567.779521][T15971] lo speed is unknown, defaulting to 1000 [ 567.787325][T15915] lo speed is unknown, defaulting to 1000 [ 567.982116][T15978] lo speed is unknown, defaulting to 1000 [ 568.118446][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'. [ 568.139621][T15978] lo speed is unknown, defaulting to 1000 [ 568.351912][T15993] IPVS: Unknown mcast interface: vcan0 [ 568.398473][T15978] lo speed is unknown, defaulting to 1000 [ 568.410012][T15971] lo speed is unknown, defaulting to 1000 [ 568.578992][T15997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2718'. [ 569.537528][T16020] tipc: Enabled bearer , priority 0 [ 569.626739][T16028] syzkaller0: entered promiscuous mode [ 569.647336][T16028] syzkaller0: entered allmulticast mode [ 569.693894][T16032] netlink: 'syz.2.2733': attribute type 1 has an invalid length. [ 569.705766][T16032] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2733'. [ 569.713377][T16028] tipc: Resetting bearer [ 569.853503][T16036] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2733'. [ 570.186519][T16018] tipc: Resetting bearer [ 570.257960][T16018] tipc: Disabling bearer [ 570.847408][T16072] syzkaller1: entered promiscuous mode [ 570.883640][T16072] syzkaller1: entered allmulticast mode [ 570.920216][T16076] lo speed is unknown, defaulting to 1000 [ 570.928349][T16076] lo speed is unknown, defaulting to 1000 [ 571.338582][T16076] lo speed is unknown, defaulting to 1000 [ 571.410724][T16098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2751'. [ 571.420843][T16098] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 571.429256][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2751'. [ 571.483751][T16101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2752'. [ 571.699817][T16109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2755'. [ 571.736128][T16109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2755'. [ 572.076186][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2762'. [ 572.096989][T16124] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2761'. [ 572.117544][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.149019][T16133] netlink: 'syz.2.2761': attribute type 4 has an invalid length. [ 572.185282][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.189086][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 572.199419][T16132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 572.205195][T16124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.219652][T16132] bond6: (slave bond7): Enslaving as an active interface with an up link [ 572.247767][T16129] 8021q: adding VLAN 0 to HW filter on device bond6 [ 572.256191][ T6079] lo speed is unknown, defaulting to 1000 [ 572.267731][ T6079] syz2: Port: 1 Link ACTIVE [ 572.355645][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.782048][T16162] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2775'. [ 572.945122][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.985378][T16170] bond6: (slave bond7): Releasing backup interface [ 573.109662][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 573.131824][T16181] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 573.381539][T16201] vlan2: entered allmulticast mode [ 573.392288][T16201] syz_tun: entered allmulticast mode [ 573.658050][T16215] netlink: 'syz.1.2793': attribute type 2 has an invalid length. [ 573.667386][T16215] netlink: 'syz.1.2793': attribute type 2 has an invalid length. [ 573.755758][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.125662][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.130421][T16237] veth2: left promiscuous mode [ 574.160929][T16237] ip6gretap1: left promiscuous mode [ 574.175906][T16237] sit2: left promiscuous mode [ 574.340334][T16255] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 574.364172][T16259] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 574.372765][T16255] bridge8: entered allmulticast mode [ 574.383775][T16260] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 574.468088][T16259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.713666][T16279] netlink: 'syz.1.2811': attribute type 10 has an invalid length. [ 574.733950][T16279] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 575.022141][T16295] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 575.295146][T16300] lo speed is unknown, defaulting to 1000 [ 575.321380][T16300] lo speed is unknown, defaulting to 1000 [ 575.666596][T16309] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.673830][T16308] lo speed is unknown, defaulting to 1000 [ 575.743972][T16313] bond3: (slave gretap2): Releasing active interface [ 575.824868][T16313] gretap2: left allmulticast mode [ 575.953840][T16300] lo speed is unknown, defaulting to 1000 [ 576.000754][T16308] lo speed is unknown, defaulting to 1000 [ 576.650506][T16327] __nla_validate_parse: 12 callbacks suppressed [ 576.650525][T16327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2826'. [ 576.957234][T16336] bpq0: left promiscuous mode [ 576.962118][T16336] bpq0: left allmulticast mode [ 577.013146][T16308] lo speed is unknown, defaulting to 1000 [ 577.416355][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.584235][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2835'. [ 577.594039][T16352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2835'. [ 577.665753][ T6079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.362609][T16383] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 578.751000][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 578.807882][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 578.871089][T16407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2851'. [ 578.890606][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 579.005416][T16413] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 579.109631][T16420] IPv6: sit1: Disabled Multicast RS [ 579.300601][T16430] IPVS: Error connecting to the multicast addr [ 579.436338][T16438] netlink: 'syz.0.2862': attribute type 21 has an invalid length. [ 579.456220][T16438] netlink: 'syz.0.2862': attribute type 6 has an invalid length. [ 579.464008][T16438] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2862'. [ 579.612263][T16442] syzkaller0: entered promiscuous mode [ 579.626570][T16442] syzkaller0: entered allmulticast mode [ 579.758267][T16444] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.810153][T16467] netlink: 'syz.0.2871': attribute type 1 has an invalid length. [ 580.073065][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 580.993674][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 581.027280][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 581.037546][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 581.055550][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 581.063343][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 581.087498][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 581.095723][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 581.103964][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 581.118340][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 581.127294][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 581.654012][T16467] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 581.762144][ T6079] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 581.764037][T16486] lo speed is unknown, defaulting to 1000 [ 581.811425][T16486] lo speed is unknown, defaulting to 1000 [ 581.904996][ T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 582.056639][T16505] netlink: 'syz.0.2880': attribute type 1 has an invalid length. [ 582.076305][T16505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2880'. [ 582.346433][ T6079] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 582.793703][T16486] lo speed is unknown, defaulting to 1000 [ 582.984424][T11079] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 583.002260][T11079] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 583.217462][ T5882] Bluetooth: hci5: command tx timeout [ 583.240878][T16486] chnl_net:caif_netlink_parms(): no params data found [ 583.323258][T16526] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2887'. [ 583.349254][T16526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2887'. [ 583.404726][ T6079] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 583.439676][T16526] rdma_rxe: rxe_newlink: failed to add lo [ 583.680168][T16526] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.694457][T16526] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 583.713278][T16486] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.720933][T16486] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.732883][T16486] bridge_slave_0: entered allmulticast mode [ 583.744442][T16486] bridge_slave_0: entered promiscuous mode [ 583.765001][ T6079] lo speed is unknown, defaulting to 1000 [ 583.770650][T16545] macvlan3: entered allmulticast mode [ 583.770794][ T6079] syz1: Port: 1 Link ACTIVE [ 583.776451][T16545] veth1_vlan: entered allmulticast mode [ 583.798901][T16545] veth1_vlan: left allmulticast mode [ 583.880109][T16486] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.890030][T16486] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.898370][T16486] bridge_slave_1: entered allmulticast mode [ 583.906989][T16486] bridge_slave_1: entered promiscuous mode [ 584.089959][T16486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.145682][T16566] netlink: 'syz.1.2897': attribute type 10 has an invalid length. [ 584.171508][T16566] netlink: 'syz.1.2897': attribute type 10 has an invalid length. [ 584.183427][T16566] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2897'. [ 584.188789][T16486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.247542][T16566] team0: entered promiscuous mode [ 584.253997][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.481931][T16486] team0: Port device team_slave_0 added [ 584.517939][T16486] team0: Port device team_slave_1 added [ 584.665682][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2899'. [ 584.674991][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 584.809169][T16486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.830401][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.898228][T16486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.911121][T16486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.934559][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.981900][T16486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.003915][T16571] lo speed is unknown, defaulting to 1000 [ 585.023227][T16582] bpq0: entered promiscuous mode [ 585.033642][T16582] bpq0: entered allmulticast mode [ 585.046245][T16576] bpq0: left promiscuous mode [ 585.051003][T16576] bpq0: left allmulticast mode [ 585.099960][T16571] lo speed is unknown, defaulting to 1000 [ 585.294659][ T5882] Bluetooth: hci5: command tx timeout [ 585.506172][T16486] hsr_slave_0: entered promiscuous mode [ 585.524628][T16486] hsr_slave_1: entered promiscuous mode [ 585.551738][T16486] debugfs: 'hsr0' already exists in 'hsr' [ 585.569488][T16486] Cannot create hsr debugfs directory [ 586.088422][T16627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2911'. [ 586.266462][T16617] lo speed is unknown, defaulting to 1000 [ 586.266898][T16571] lo speed is unknown, defaulting to 1000 [ 586.340084][T16617] lo speed is unknown, defaulting to 1000 [ 586.920375][T16617] lo speed is unknown, defaulting to 1000 [ 587.164109][T16652] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2919'. [ 587.173527][T16652] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2919'. [ 587.214693][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 587.322487][T16654] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 587.374949][ T5882] Bluetooth: hci5: command tx timeout [ 587.380319][T16486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 587.402577][T16486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.425688][T16486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.450021][T16486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.772771][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 587.821684][T16486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.910209][T16486] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.959907][T16672] syzkaller0: entered allmulticast mode [ 588.018052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.025305][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.100019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.107274][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.137407][T16666] syzkaller0 (unregistering): left allmulticast mode [ 588.928098][T16698] lo speed is unknown, defaulting to 1000 [ 589.000242][T16698] lo speed is unknown, defaulting to 1000 [ 589.085717][T16707] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2931'. [ 589.191441][T16486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.202788][T16711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2932'. [ 589.389983][T16486] veth0_vlan: entered promiscuous mode [ 589.420695][T16486] veth1_vlan: entered promiscuous mode [ 589.455571][ T5882] Bluetooth: hci5: command tx timeout [ 589.594386][T16698] lo speed is unknown, defaulting to 1000 [ 589.670283][T16726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.683499][T16486] veth0_macvtap: entered promiscuous mode [ 589.696091][T16486] veth1_macvtap: entered promiscuous mode [ 589.754831][T16720] lo speed is unknown, defaulting to 1000 [ 589.830611][T16720] lo speed is unknown, defaulting to 1000 [ 589.840372][T16486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.882601][T16486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.933316][T11080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.963876][T11080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.990139][T11080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.028331][T11080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.277089][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.305911][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.340606][T16720] lo speed is unknown, defaulting to 1000 [ 590.415966][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.455708][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.288295][T16749] bpq0: entered promiscuous mode [ 591.304967][T16749] bpq0: entered allmulticast mode [ 591.342510][T16749] bpq0: left promiscuous mode [ 591.356294][T16749] bpq0: left allmulticast mode [ 591.463069][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2945'. [ 591.637073][ T5882] block nbd4: Wrong magic (0x0) [ 592.129252][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 592.138384][T16787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2951'. [ 592.305637][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 592.351588][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 592.364849][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 592.372919][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 592.381048][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 592.389044][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 592.540194][T16794] lo speed is unknown, defaulting to 1000 [ 592.570010][T16794] lo speed is unknown, defaulting to 1000 [ 592.625972][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 592.678337][T16812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2958'. [ 592.695871][T16812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2958'. [ 592.734791][T16812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2958'. [ 592.781339][T16812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2958'. [ 592.880887][T16823] vlan2: entered promiscuous mode [ 592.903954][T16823] bridge0: entered promiscuous mode [ 592.920135][T16823] vlan2: entered allmulticast mode [ 592.938046][T16823] bridge0: entered allmulticast mode [ 592.967705][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 593.109059][T16794] lo speed is unknown, defaulting to 1000 [ 593.538595][T16794] chnl_net:caif_netlink_parms(): no params data found [ 593.730850][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 593.899521][T16794] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.913260][T16794] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.920956][T16794] bridge_slave_0: entered allmulticast mode [ 593.926705][T16871] netlink: 'syz.0.2973': attribute type 1 has an invalid length. [ 593.929481][T16794] bridge_slave_0: entered promiscuous mode [ 593.970656][T16794] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.978170][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.985715][T16794] bridge_slave_1: entered allmulticast mode [ 593.996711][T16794] bridge_slave_1: entered promiscuous mode [ 594.008637][T16873] netlink: 'syz.1.2974': attribute type 10 has an invalid length. [ 594.042363][T16873] netlink: 'syz.1.2974': attribute type 49 has an invalid length. [ 594.078960][T16871] veth9: entered promiscuous mode [ 594.098299][T16871] bond8: (slave veth9): Enslaving as a backup interface with a down link [ 594.102491][T16876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2975'. [ 594.122122][T16794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.160608][T16794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.278451][T16884] sctp: [Deprecated]: syz.1.2976 (pid 16884) Use of int in max_burst socket option. [ 594.278451][T16884] Use struct sctp_assoc_value instead [ 594.294277][T16882] netem: change failed [ 594.415623][ T5882] Bluetooth: hci1: command tx timeout [ 594.439452][T16794] team0: Port device team_slave_0 added [ 594.460490][T16794] team0: Port device team_slave_1 added [ 594.621621][T16794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.636680][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.664095][T16909] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2983'. [ 594.693099][T16794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.750997][T16794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.773568][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.841414][T16794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.869656][T16903] tipc: Enabled bearer , priority 0 [ 594.915023][T16897] tipc: Disabling bearer [ 594.961188][T16915] tipc: Resetting bearer [ 595.027740][T16915] team0: Mode changed to "loadbalance" [ 595.054250][T16794] hsr_slave_0: entered promiscuous mode [ 595.064415][T16794] hsr_slave_1: entered promiscuous mode [ 595.079746][T16794] debugfs: 'hsr0' already exists in 'hsr' [ 595.086577][T16794] Cannot create hsr debugfs directory [ 595.134738][ T9] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 182 sec [ 595.709645][T16936] lo speed is unknown, defaulting to 1000 [ 595.742217][T16936] lo speed is unknown, defaulting to 1000 [ 595.834963][T16794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.859899][T16794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.111816][T16794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.143220][T16794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.174711][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 596.329995][T16936] lo speed is unknown, defaulting to 1000 [ 596.466660][T16794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.485817][T16794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.496994][ T5184] Bluetooth: hci1: command tx timeout [ 596.626634][T16794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.643259][T16794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.760933][T16989] netlink: 'syz.4.3005': attribute type 13 has an invalid length. [ 596.773171][T16989] netlink: 'syz.4.3005': attribute type 17 has an invalid length. [ 596.822951][T16988] bpq0: entered promiscuous mode [ 596.829702][T16988] bpq0: entered allmulticast mode [ 596.896584][T16989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.912462][T16986] bpq0: left promiscuous mode [ 596.918942][T16986] bpq0: left allmulticast mode [ 597.068584][T16989] lo speed is unknown, defaulting to 1000 [ 597.089758][T16989] lo speed is unknown, defaulting to 1000 [ 597.259776][T16794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 597.276320][T16794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 597.295251][T16794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 597.328948][T16794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 597.488005][T16794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.548604][T16794] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.579374][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.586644][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.636103][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.643410][T11080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.656638][T17011] __nla_validate_parse: 1 callbacks suppressed [ 597.656663][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 597.693817][T16989] lo speed is unknown, defaulting to 1000 [ 597.707879][T17001] lo speed is unknown, defaulting to 1000 [ 597.720541][T17009] lo speed is unknown, defaulting to 1000 [ 597.728354][T17001] lo speed is unknown, defaulting to 1000 [ 598.082689][T17009] lo speed is unknown, defaulting to 1000 [ 598.146772][T16794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.239646][T16794] veth0_vlan: entered promiscuous mode [ 598.272216][T16794] veth1_vlan: entered promiscuous mode [ 598.332999][T17009] lo speed is unknown, defaulting to 1000 [ 598.340991][T16794] veth0_macvtap: entered promiscuous mode [ 598.362127][T16794] veth1_macvtap: entered promiscuous mode [ 598.443182][T17001] lo speed is unknown, defaulting to 1000 [ 598.577344][ T5184] Bluetooth: hci1: command 0x040f tx timeout [ 598.606087][T16794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.810101][T16794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.912426][ T1093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.921997][ T1093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.964245][ T1093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.980421][ T1093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.322996][T11080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.348097][T11080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.378786][T17023] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3009'. [ 599.641949][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.666045][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.084413][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3018'. [ 600.133371][T17054] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 600.606476][T17065] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 600.624911][T17065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3020'. [ 600.656929][T17069] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 600.660361][ T5882] Bluetooth: hci1: command 0x040f tx timeout [ 600.668801][T17069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3020'. [ 600.957902][T17087] netlink: 'syz.3.3026': attribute type 4 has an invalid length. [ 601.489814][T17104] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3032'. [ 601.526287][T17104] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 601.647480][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 601.656973][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 601.684644][T17108] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3033'. [ 601.715557][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3033'. [ 601.736203][T17108] nbd: socks must be embedded in a SOCK_ITEM attr [ 602.156321][T17124] FAULT_INJECTION: forcing a failure. [ 602.156321][T17124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.169799][T17124] CPU: 1 UID: 0 PID: 17124 Comm: syz.1.3039 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 602.169830][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.169843][T17124] Call Trace: [ 602.169852][T17124] [ 602.169862][T17124] dump_stack_lvl+0x189/0x250 [ 602.169895][T17124] ? __pfx____ratelimit+0x10/0x10 [ 602.169922][T17124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.169949][T17124] ? __pfx__printk+0x10/0x10 [ 602.169995][T17124] should_fail_ex+0x414/0x560 [ 602.170027][T17124] _copy_to_user+0x31/0xb0 [ 602.170051][T17124] simple_read_from_buffer+0xe1/0x170 [ 602.170088][T17124] proc_fail_nth_read+0x1b3/0x220 [ 602.170117][T17124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 602.170146][T17124] ? rw_verify_area+0x2a6/0x4d0 [ 602.170172][T17124] ? __lock_acquire+0xab9/0xd20 [ 602.170202][T17124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 602.170228][T17124] vfs_read+0x200/0x980 [ 602.170254][T17124] ? fdget_pos+0x247/0x320 [ 602.170278][T17124] ? __pfx___mutex_lock+0x10/0x10 [ 602.170308][T17124] ? __pfx_vfs_read+0x10/0x10 [ 602.170338][T17124] ? __fget_files+0x2a/0x420 [ 602.170375][T17124] ? __fget_files+0x3a0/0x420 [ 602.170406][T17124] ? __fget_files+0x2a/0x420 [ 602.170456][T17124] ksys_read+0x145/0x250 [ 602.170487][T17124] ? __pfx_ksys_read+0x10/0x10 [ 602.170512][T17124] ? rcu_is_watching+0x15/0xb0 [ 602.170540][T17124] ? do_syscall_64+0xbe/0x3b0 [ 602.170573][T17124] do_syscall_64+0xfa/0x3b0 [ 602.170599][T17124] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.170625][T17124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.170647][T17124] ? clear_bhb_loop+0x60/0xb0 [ 602.170674][T17124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.170697][T17124] RIP: 0033:0x7f01a8b8d5fc [ 602.170716][T17124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 602.170735][T17124] RSP: 002b:00007f01a99cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 602.170758][T17124] RAX: ffffffffffffffda RBX: 00007f01a8db5fa0 RCX: 00007f01a8b8d5fc [ 602.170773][T17124] RDX: 000000000000000f RSI: 00007f01a99cf0a0 RDI: 0000000000000004 [ 602.170786][T17124] RBP: 00007f01a99cf090 R08: 0000000000000000 R09: 0000000000000000 [ 602.170799][T17124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.170811][T17124] R13: 00007f01a8db6038 R14: 00007f01a8db5fa0 R15: 00007ffd7effada8 [ 602.170847][T17124] [ 602.484071][T17128] tipc: Resetting bearer [ 602.548107][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 602.565081][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 602.572978][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 602.586337][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 602.595824][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 602.720462][T17125] lo speed is unknown, defaulting to 1000 [ 602.735038][ T5184] Bluetooth: hci1: command 0x040f tx timeout [ 602.782834][T17125] lo speed is unknown, defaulting to 1000 [ 602.790842][T17134] __nla_validate_parse: 1 callbacks suppressed [ 602.790861][T17134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3043'. [ 602.856584][T17140] Set syz0 is full, maxelem 0 reached [ 603.109182][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 603.131810][T17154] IPv6: sit1: Disabled Multicast RS [ 603.159931][T17154] sit1: entered allmulticast mode [ 603.288261][T17159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3049'. [ 603.367664][T17125] lo speed is unknown, defaulting to 1000 [ 603.566033][T17169] netlink: 'syz.1.3050': attribute type 5 has an invalid length. [ 603.998101][T17125] chnl_net:caif_netlink_parms(): no params data found [ 604.289041][T17190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.431552][T17190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.512197][T17207] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3064'. [ 604.637379][T17205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.655425][ T5184] Bluetooth: hci2: command tx timeout [ 604.923171][T17190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.282798][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.303587][T17125] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.311872][T17125] bridge_slave_0: entered allmulticast mode [ 605.320830][T17125] bridge_slave_0: entered promiscuous mode [ 605.344111][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.351671][T17125] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.359114][T17125] bridge_slave_1: entered allmulticast mode [ 605.367482][T17125] bridge_slave_1: entered promiscuous mode [ 605.420015][T17190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.518035][T17125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.533845][T17125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.686837][T17125] team0: Port device team_slave_0 added [ 605.724123][T17231] rdma_rxe: rxe_newlink: failed to add bond0 [ 605.729785][T17125] team0: Port device team_slave_1 added [ 605.768182][ T1093] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.843388][T11080] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.852890][T17125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.865021][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.900193][T17125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.931005][T11080] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.943130][T17125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.960651][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.987058][T17125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.010008][T17233] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 606.022414][T17233] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 606.033860][T11078] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.042968][T17233] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 606.147778][T17125] hsr_slave_0: entered promiscuous mode [ 606.158013][T17242] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 606.159270][T17125] hsr_slave_1: entered promiscuous mode [ 606.166475][T17242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3074'. [ 606.182177][T17125] debugfs: 'hsr0' already exists in 'hsr' [ 606.189721][T17125] Cannot create hsr debugfs directory [ 606.202544][T17242] netlink: 'syz.2.3074': attribute type 3 has an invalid length. [ 606.205937][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3073'. [ 606.398675][T17246] tipc: Started in network mode [ 606.403616][T17246] tipc: Node identity 92251c204d7a, cluster identity 4711 [ 606.421760][T17246] tipc: Enabled bearer , priority 0 [ 606.429427][T17247] syzkaller0: entered promiscuous mode [ 606.441890][T17247] syzkaller0: entered allmulticast mode [ 606.734886][ T5184] Bluetooth: hci2: command tx timeout [ 606.771040][T17247] tipc: Resetting bearer [ 606.807200][T17247] tipc: Disabling bearer [ 606.883565][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 606.919716][T17125] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.938302][T17125] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.949197][T17262] netlink: 'syz.1.3080': attribute type 2 has an invalid length. [ 606.962353][T17262] netlink: 'syz.1.3080': attribute type 2 has an invalid length. [ 607.080723][T17125] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.364879][T17125] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.489172][T17125] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.511879][T17125] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.554767][T17266] bpq0: entered promiscuous mode [ 607.559784][T17266] bpq0: entered allmulticast mode [ 607.606900][T17278] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 607.614206][T17278] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 607.638499][T17125] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.672712][T17125] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.703464][T17266] bpq0: left promiscuous mode [ 607.757603][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 607.788743][T17278] lo speed is unknown, defaulting to 1000 [ 607.815493][T17278] lo speed is unknown, defaulting to 1000 [ 608.144776][T17294] netlink: 'syz.2.3090': attribute type 322 has an invalid length. [ 608.393993][T17278] lo speed is unknown, defaulting to 1000 [ 608.411625][T17125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 608.460002][T17125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 608.502508][T17125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 608.567659][T17125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 608.876710][ T5184] Bluetooth: hci2: command tx timeout [ 608.913327][T17328] bpq0: entered promiscuous mode [ 608.986027][T17320] bpq0: left promiscuous mode [ 608.990944][T17320] bpq0: left allmulticast mode [ 609.034232][T17335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3100'. [ 609.121084][ T5950] IPVS: starting estimator thread 0... [ 609.224601][T17337] IPVS: using max 26 ests per chain, 62400 per kthread [ 609.253954][T17125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.293304][T17125] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.301468][T17342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3102'. [ 609.338956][T11078] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.346224][T11078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.379616][T11078] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.386848][T11078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.488193][T17347] tipc: Enabled bearer , priority 0 [ 609.496405][T17347] syzkaller0: entered promiscuous mode [ 609.502002][T17347] syzkaller0: entered allmulticast mode [ 609.528707][T17347] tipc: Resetting bearer [ 609.549845][T17346] tipc: Resetting bearer [ 609.575329][T17346] tipc: Disabling bearer [ 609.802125][T17125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.853682][T17360] netlink: 'syz.1.3105': attribute type 4 has an invalid length. [ 609.881379][T17360] netlink: 'syz.1.3105': attribute type 4 has an invalid length. [ 610.449986][T17384] syzkaller0: entered promiscuous mode [ 610.461482][T17384] syzkaller0: entered allmulticast mode [ 610.518924][T17125] veth0_vlan: entered promiscuous mode [ 610.536997][T17388] netlink: 'syz.2.3116': attribute type 9 has an invalid length. [ 610.566326][T17125] veth1_vlan: entered promiscuous mode [ 610.752556][T17125] veth0_macvtap: entered promiscuous mode [ 610.759631][T17397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3121'. [ 610.788452][T17125] veth1_macvtap: entered promiscuous mode [ 610.864083][T17125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.898565][ T5184] Bluetooth: hci2: command tx timeout [ 610.902641][T17125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.000145][T11078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.025387][T11078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.062296][T11078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.105277][T17416] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 611.198887][T11078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.393307][T11080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.416571][T11080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.472292][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 611.522212][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.551637][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.692515][T17434] 8021q: VLANs not supported on vcan0 [ 611.969674][T17447] netlink: 'syz.2.3132': attribute type 1 has an invalid length. [ 612.050308][T17451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3132'. [ 612.172752][T17436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.235532][T17436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.264040][T17436] bond0 (unregistering): Released all slaves [ 612.400029][T17447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.485508][T17453] veth3: entered promiscuous mode [ 612.586611][ T5882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.609643][ T5882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.626093][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.635640][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.643652][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.699833][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 612.818280][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 612.991800][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3138'. [ 613.024078][T17463] lo speed is unknown, defaulting to 1000 [ 613.099390][T17463] lo speed is unknown, defaulting to 1000 [ 613.117679][T17464] lo speed is unknown, defaulting to 1000 [ 613.196878][T17480] netlink: 'syz.3.3138': attribute type 3 has an invalid length. [ 613.219781][T17476] lo speed is unknown, defaulting to 1000 [ 613.322349][T17481] netlink: 'syz.3.3138': attribute type 13 has an invalid length. [ 613.351182][T17481] netlink: 'syz.3.3138': attribute type 17 has an invalid length. [ 613.770473][T17481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.046008][T17464] lo speed is unknown, defaulting to 1000 [ 614.052952][T17463] lo speed is unknown, defaulting to 1000 [ 614.154281][T17501] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3141'. [ 614.473523][T17464] lo speed is unknown, defaulting to 1000 [ 614.640575][T17476] lo speed is unknown, defaulting to 1000 [ 614.641794][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 614.716715][T17517] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3146'. [ 614.738690][ T5882] Bluetooth: hci3: command tx timeout [ 614.755349][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 614.800154][T17517] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3146'. [ 614.865231][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 614.875725][T17521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3147'. [ 614.915090][T17517] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3146'. [ 614.930062][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 615.184706][ T30] audit: type=1800 audit(1755172020.963:7): pid=17513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3144" name="memory.events" dev="tmpfs" ino=33 res=0 errno=0 [ 615.233847][T17525] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 615.266706][T17528] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3149'. [ 615.277965][T17476] lo speed is unknown, defaulting to 1000 [ 615.631689][T17534] netlink: 'syz.4.3151': attribute type 16 has an invalid length. [ 615.640341][T17464] chnl_net:caif_netlink_parms(): no params data found [ 616.252679][T17464] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.270818][T17464] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.289889][T17464] bridge_slave_0: entered allmulticast mode [ 616.302389][T17464] bridge_slave_0: entered promiscuous mode [ 616.332364][T17464] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.345407][T17464] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.354836][T17464] bridge_slave_1: entered allmulticast mode [ 616.362730][T17464] bridge_slave_1: entered promiscuous mode [ 616.534365][T17464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.591837][T17464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.722700][T17464] team0: Port device team_slave_0 added [ 616.744811][T17464] team0: Port device team_slave_1 added [ 616.757168][T17577] lo speed is unknown, defaulting to 1000 [ 616.814808][ T5184] Bluetooth: hci3: command tx timeout [ 616.911476][T17577] lo speed is unknown, defaulting to 1000 [ 616.925808][T17464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.951430][T17464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.025491][T17464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.099325][T17464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.144623][T17464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.248781][T17464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.507262][T17464] hsr_slave_0: entered promiscuous mode [ 617.514179][T17464] hsr_slave_1: entered promiscuous mode [ 617.552734][T17464] debugfs: 'hsr0' already exists in 'hsr' [ 617.565107][T17464] Cannot create hsr debugfs directory [ 617.623670][T17577] lo speed is unknown, defaulting to 1000 [ 617.944276][T17618] bridge1: entered promiscuous mode [ 617.956745][T17618] bridge1: entered allmulticast mode [ 617.976386][T17618] team0: Port device bridge1 added [ 618.554278][T17636] syzkaller0: entered promiscuous mode [ 618.559956][T17636] syzkaller0: entered allmulticast mode [ 618.909463][ T5184] Bluetooth: hci3: command 0x040f tx timeout [ 620.033646][T17653] __nla_validate_parse: 3 callbacks suppressed [ 620.033667][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 620.064268][T17653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3180'. [ 620.086497][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 620.097262][T17653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3180'. [ 620.120054][T17653] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3180'. [ 620.319116][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'. [ 620.347521][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'. [ 620.365052][T17664] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3184'. [ 620.414970][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'. [ 620.639149][T17464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.673436][T17464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.697216][T17464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.903205][T17464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 620.928784][T17681] macsec2: entered promiscuous mode [ 620.934112][T17681] macvlan1: entered promiscuous mode [ 620.939961][T17681] macsec2: entered allmulticast mode [ 620.945540][T17681] macvlan1: entered allmulticast mode [ 620.955488][T17681] macvlan1: left allmulticast mode [ 620.960756][T17681] macvlan1: left promiscuous mode [ 620.974957][ T5184] Bluetooth: hci3: command 0x040f tx timeout [ 621.036492][T17687] bpq0: entered promiscuous mode [ 621.048412][T17687] bpq0: entered allmulticast mode [ 621.077859][T17684] bpq0: left promiscuous mode [ 621.082615][T17684] bpq0: left allmulticast mode [ 621.323862][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'. [ 621.422652][T17709] tipc: Started in network mode [ 621.434678][T17709] tipc: Node identity e6703e72569d, cluster identity 4711 [ 621.442063][T17709] tipc: Enabled bearer , priority 0 [ 621.478776][T17709] syzkaller0: entered promiscuous mode [ 621.490941][T17709] syzkaller0: entered allmulticast mode [ 621.520116][T17464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.592864][T17711] lo speed is unknown, defaulting to 1000 [ 621.617198][T17709] tipc: Resetting bearer [ 621.645619][T17711] lo speed is unknown, defaulting to 1000 [ 621.650223][T17464] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.739126][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.746350][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.757832][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.765050][ T6783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.812533][T17708] tipc: Resetting bearer [ 621.885962][T17708] tipc: Disabling bearer [ 622.613078][T17711] lo speed is unknown, defaulting to 1000 [ 622.659730][T17747] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0 [ 622.830181][T17742] lo speed is unknown, defaulting to 1000 [ 622.924041][T17464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.955138][T17742] lo speed is unknown, defaulting to 1000 [ 623.067481][ T5882] Bluetooth: hci3: command 0x040f tx timeout [ 623.176094][T17464] veth0_vlan: entered promiscuous mode [ 623.224449][T17464] veth1_vlan: entered promiscuous mode [ 623.348427][T17742] lo speed is unknown, defaulting to 1000 [ 623.359191][T17464] veth0_macvtap: entered promiscuous mode [ 623.548471][T17464] veth1_macvtap: entered promiscuous mode [ 623.703248][T17464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.729179][T17464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.761720][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.802592][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.836359][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.868297][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.178432][T17770] lo speed is unknown, defaulting to 1000 [ 624.187754][T17770] lo speed is unknown, defaulting to 1000 [ 624.510659][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.564674][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.688764][T11078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.715377][T11078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.293504][T17770] lo speed is unknown, defaulting to 1000 [ 625.509270][T17771] __nla_validate_parse: 5 callbacks suppressed [ 625.509293][T17771] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3215'. [ 625.556372][T17805] netlink: 'syz.4.3215': attribute type 13 has an invalid length. [ 625.608531][T17805] netlink: 'syz.4.3215': attribute type 17 has an invalid length. [ 625.761264][T17813] netlink: 'syz.0.3226': attribute type 21 has an invalid length. [ 625.775671][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'. [ 626.012771][T17805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.048786][T17810] pimreg15769770: entered allmulticast mode [ 626.288132][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.297879][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.307283][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.319365][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.327397][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.460692][T17832] xt_policy: too many policy elements [ 626.501802][T17824] lo speed is unknown, defaulting to 1000 [ 626.503044][T17832] netlink: 'syz.3.3230': attribute type 2 has an invalid length. [ 626.534393][T17824] lo speed is unknown, defaulting to 1000 [ 626.550510][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 626.671909][T17838] netlink: 'syz.0.3231': attribute type 1 has an invalid length. [ 626.846039][T17843] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3233'. [ 626.960897][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3235'. [ 626.984796][T17847] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 626.996292][T17847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.219028][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 627.252114][T17856] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3238'. [ 627.447151][T17824] lo speed is unknown, defaulting to 1000 [ 627.591333][T17861] lo speed is unknown, defaulting to 1000 [ 627.621838][T17861] lo speed is unknown, defaulting to 1000 [ 627.629270][T17871] lo speed is unknown, defaulting to 1000 [ 627.981261][T17824] chnl_net:caif_netlink_parms(): no params data found [ 628.141645][T17871] lo speed is unknown, defaulting to 1000 [ 628.289539][T17861] lo speed is unknown, defaulting to 1000 [ 628.416114][ T5184] Bluetooth: hci0: command tx timeout [ 628.451678][T17824] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.494391][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.511709][T17824] bridge_slave_0: entered allmulticast mode [ 628.523195][T17824] bridge_slave_0: entered promiscuous mode [ 628.582469][T17824] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.593163][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.600786][T17824] bridge_slave_1: entered allmulticast mode [ 628.622027][T17824] bridge_slave_1: entered promiscuous mode [ 628.658801][T17887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.762843][T17871] lo speed is unknown, defaulting to 1000 [ 628.764084][T17887] veth0_to_team: entered promiscuous mode [ 628.780406][T17887] veth0_to_team: entered allmulticast mode [ 628.940238][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3245'. [ 629.006542][T17824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.059449][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 629.059682][T17885] lo speed is unknown, defaulting to 1000 [ 629.107502][T17824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.211394][T17885] lo speed is unknown, defaulting to 1000 [ 629.306523][T17824] team0: Port device team_slave_0 added [ 629.323911][T17824] team0: Port device team_slave_1 added [ 629.472967][T17824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.493867][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.522779][T17824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.575630][T17824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.582743][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.611330][T17824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.760087][T17824] hsr_slave_0: entered promiscuous mode [ 629.772023][T17824] hsr_slave_1: entered promiscuous mode [ 629.803741][T17824] debugfs: 'hsr0' already exists in 'hsr' [ 629.812291][T17824] Cannot create hsr debugfs directory [ 629.889614][T17885] lo speed is unknown, defaulting to 1000 [ 630.102937][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3248'. [ 630.385096][T17914] netlink: 'syz.2.3251': attribute type 3 has an invalid length. [ 630.392976][T17914] netlink: 'syz.2.3251': attribute type 3 has an invalid length. [ 630.503468][ T5184] Bluetooth: hci0: command tx timeout [ 631.018150][T17932] __nla_validate_parse: 2 callbacks suppressed [ 631.018171][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'. [ 631.208692][T17940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.253185][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3258'. [ 631.438695][T17945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.657405][T17824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.743072][T17824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.821112][T17824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.885408][T17824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 632.092918][T17972] veth3: entered promiscuous mode [ 632.315762][T17824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.397292][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 632.444282][T17824] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.479998][T17984] lo speed is unknown, defaulting to 1000 [ 632.484230][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.493486][T11080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.537521][T17984] lo speed is unknown, defaulting to 1000 [ 632.562561][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.569801][T11080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.578250][ T5184] Bluetooth: hci0: command tx timeout [ 632.593293][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 632.813690][T17994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.250171][T17984] lo speed is unknown, defaulting to 1000 [ 633.252008][T18000] FAULT_INJECTION: forcing a failure. [ 633.252008][T18000] name failslab, interval 1, probability 0, space 0, times 0 [ 633.289661][T18000] CPU: 0 UID: 0 PID: 18000 Comm: syz.4.3273 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 633.289702][T18000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.289717][T18000] Call Trace: [ 633.289726][T18000] [ 633.289737][T18000] dump_stack_lvl+0x189/0x250 [ 633.289771][T18000] ? __pfx____ratelimit+0x10/0x10 [ 633.289799][T18000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.289827][T18000] ? __pfx__printk+0x10/0x10 [ 633.289861][T18000] ? __lock_acquire+0xab9/0xd20 [ 633.289906][T18000] should_fail_ex+0x414/0x560 [ 633.289938][T18000] should_failslab+0xa8/0x100 [ 633.289974][T18000] kmem_cache_alloc_noprof+0x73/0x3c0 [ 633.290004][T18000] ? skb_clone+0x212/0x3a0 [ 633.290031][T18000] skb_clone+0x212/0x3a0 [ 633.290056][T18000] __netlink_deliver_tap+0x404/0x850 [ 633.290102][T18000] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.290133][T18000] netlink_deliver_tap+0x19c/0x1b0 [ 633.290164][T18000] netlink_unicast+0x7fa/0x9e0 [ 633.290210][T18000] ? __pfx_netlink_unicast+0x10/0x10 [ 633.290240][T18000] ? netlink_sendmsg+0x642/0xb30 [ 633.290266][T18000] ? skb_put+0x11b/0x210 [ 633.290301][T18000] netlink_sendmsg+0x805/0xb30 [ 633.290342][T18000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.290377][T18000] ? aa_sock_msg_perm+0xf1/0x1d0 [ 633.290411][T18000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.290435][T18000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.290466][T18000] __sock_sendmsg+0x219/0x270 [ 633.290495][T18000] ____sys_sendmsg+0x505/0x830 [ 633.290536][T18000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.290581][T18000] ? import_iovec+0x74/0xa0 [ 633.290608][T18000] ___sys_sendmsg+0x21f/0x2a0 [ 633.290644][T18000] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.290734][T18000] ? __fget_files+0x2a/0x420 [ 633.290767][T18000] ? __fget_files+0x3a0/0x420 [ 633.290814][T18000] __x64_sys_sendmsg+0x19b/0x260 [ 633.290851][T18000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.290896][T18000] ? __pfx_ksys_write+0x10/0x10 [ 633.290924][T18000] ? rcu_is_watching+0x15/0xb0 [ 633.290952][T18000] ? do_syscall_64+0xbe/0x3b0 [ 633.290986][T18000] do_syscall_64+0xfa/0x3b0 [ 633.291014][T18000] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.291041][T18000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.291063][T18000] ? clear_bhb_loop+0x60/0xb0 [ 633.291091][T18000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.291113][T18000] RIP: 0033:0x7fedf278ebe9 [ 633.291133][T18000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.291154][T18000] RSP: 002b:00007fedf09ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.291176][T18000] RAX: ffffffffffffffda RBX: 00007fedf29b5fa0 RCX: 00007fedf278ebe9 [ 633.291192][T18000] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 633.291206][T18000] RBP: 00007fedf09ee090 R08: 0000000000000000 R09: 0000000000000000 [ 633.291220][T18000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.291233][T18000] R13: 00007fedf29b6038 R14: 00007fedf29b5fa0 R15: 00007ffda2272ac8 [ 633.291277][T18000] [ 634.072475][ T5924] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/1 [ 634.097335][ T5924] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 634.121325][T18004] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3274'. [ 634.249598][T17824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.403280][T18029] : renamed from bond_slave_0 (while UP) [ 634.548923][T17824] veth0_vlan: entered promiscuous mode [ 634.575750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.651280][T17824] veth1_vlan: entered promiscuous mode [ 634.657559][ T5184] Bluetooth: hci0: command tx timeout [ 634.793210][T17824] veth0_macvtap: entered promiscuous mode [ 634.838295][T17824] veth1_macvtap: entered promiscuous mode [ 634.970364][T17824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.015985][T18043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3283'. [ 635.132957][T18051] FAULT_INJECTION: forcing a failure. [ 635.132957][T18051] name failslab, interval 1, probability 0, space 0, times 0 [ 635.150281][T17824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.160120][T18051] CPU: 0 UID: 0 PID: 18051 Comm: syz.3.3284 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 635.160150][T18051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.160164][T18051] Call Trace: [ 635.160172][T18051] [ 635.160181][T18051] dump_stack_lvl+0x189/0x250 [ 635.160213][T18051] ? __pfx____ratelimit+0x10/0x10 [ 635.160241][T18051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.160268][T18051] ? __pfx__printk+0x10/0x10 [ 635.160302][T18051] ? __pfx___might_resched+0x10/0x10 [ 635.160324][T18051] ? fs_reclaim_acquire+0x7d/0x100 [ 635.160364][T18051] should_fail_ex+0x414/0x560 [ 635.160395][T18051] should_failslab+0xa8/0x100 [ 635.160429][T18051] __kmalloc_noprof+0xcb/0x4f0 [ 635.160458][T18051] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 635.160488][T18051] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 635.160521][T18051] genl_family_rcv_msg_doit+0xb8/0x300 [ 635.160552][T18051] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.160584][T18051] ? apparmor_capable+0x137/0x1b0 [ 635.160610][T18051] ? bpf_lsm_capable+0x9/0x20 [ 635.160639][T18051] ? security_capable+0x7e/0x2e0 [ 635.160675][T18051] genl_rcv_msg+0x60e/0x790 [ 635.160705][T18051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.160724][T18051] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 635.160756][T18051] ? __pfx_nl80211_set_key+0x10/0x10 [ 635.160776][T18051] ? __pfx_nl80211_post_doit+0x10/0x10 [ 635.160819][T18051] ? __asan_memcpy+0x40/0x70 [ 635.160842][T18051] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.160879][T18051] netlink_rcv_skb+0x208/0x470 [ 635.160904][T18051] ? __lock_acquire+0xab9/0xd20 [ 635.160937][T18051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.160960][T18051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.161013][T18051] ? down_read+0x1ad/0x2e0 [ 635.161046][T18051] genl_rcv+0x28/0x40 [ 635.161077][T18051] netlink_unicast+0x82f/0x9e0 [ 635.161114][T18051] ? __pfx_netlink_unicast+0x10/0x10 [ 635.161142][T18051] ? netlink_sendmsg+0x642/0xb30 [ 635.161168][T18051] ? skb_put+0x11b/0x210 [ 635.161203][T18051] netlink_sendmsg+0x805/0xb30 [ 635.161243][T18051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.161277][T18051] ? aa_sock_msg_perm+0xf1/0x1d0 [ 635.161310][T18051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.161334][T18051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.161365][T18051] __sock_sendmsg+0x219/0x270 [ 635.161394][T18051] ____sys_sendmsg+0x505/0x830 [ 635.161435][T18051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.161480][T18051] ? import_iovec+0x74/0xa0 [ 635.161506][T18051] ___sys_sendmsg+0x21f/0x2a0 [ 635.161545][T18051] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.161626][T18051] ? __fget_files+0x2a/0x420 [ 635.161657][T18051] ? __fget_files+0x3a0/0x420 [ 635.161704][T18051] __x64_sys_sendmsg+0x19b/0x260 [ 635.161740][T18051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.161786][T18051] ? __pfx_ksys_write+0x10/0x10 [ 635.161818][T18051] ? rcu_is_watching+0x15/0xb0 [ 635.161847][T18051] ? do_syscall_64+0xbe/0x3b0 [ 635.161880][T18051] do_syscall_64+0xfa/0x3b0 [ 635.161908][T18051] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.161934][T18051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.161957][T18051] ? clear_bhb_loop+0x60/0xb0 [ 635.161984][T18051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.162007][T18051] RIP: 0033:0x7f34de58ebe9 [ 635.162027][T18051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.162047][T18051] RSP: 002b:00007f34df37b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.162070][T18051] RAX: ffffffffffffffda RBX: 00007f34de7b5fa0 RCX: 00007f34de58ebe9 [ 635.162086][T18051] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 635.162098][T18051] RBP: 00007f34df37b090 R08: 0000000000000000 R09: 0000000000000000 [ 635.162111][T18051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.162124][T18051] R13: 00007f34de7b6038 R14: 00007f34de7b5fa0 R15: 00007ffd4be11198 [ 635.162160][T18051] [ 635.591601][T18047] lo speed is unknown, defaulting to 1000 [ 635.599711][T18047] lo speed is unknown, defaulting to 1000 [ 635.620664][T18048] tipc: Enabled bearer , priority 0 [ 635.628380][T18048] syzkaller0: entered promiscuous mode [ 635.634445][T18048] syzkaller0: entered allmulticast mode [ 635.675370][T11078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.765325][T11078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.787882][T11078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.812941][T18048] tipc: Resetting bearer [ 635.821327][T18061] GUP no longer grows the stack in syz.0.3288 (18061): 200000006000-20000000a000 (200000005000) [ 635.824815][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3286'. [ 635.832692][T18061] CPU: 0 UID: 0 PID: 18061 Comm: syz.0.3288 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 635.832727][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.832742][T18061] Call Trace: [ 635.832754][T18061] [ 635.832773][T18061] dump_stack_lvl+0x189/0x250 [ 635.832817][T18061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.832849][T18061] ? __pfx__printk+0x10/0x10 [ 635.832883][T18061] ? find_vma+0xe7/0x160 [ 635.832939][T18061] __get_user_pages+0x24d0/0x2ce0 [ 635.832969][T18061] ? __lock_acquire+0xab9/0xd20 [ 635.833043][T18061] ? __gup_longterm_locked+0xc68/0x1660 [ 635.833087][T18061] __gup_longterm_locked+0xde9/0x1660 [ 635.833128][T18061] ? try_grab_folio_fast+0x1be/0x4f0 [ 635.833178][T18061] ? gup_fast_fallback+0x195f/0x2010 [ 635.833216][T18061] gup_fast_fallback+0x1e6a/0x2010 [ 635.833296][T18061] ? __pfx_gup_fast_fallback+0x10/0x10 [ 635.833325][T18061] ? __mutex_lock+0x335/0x1360 [ 635.833364][T18061] ? futex_unqueue+0x22/0x240 [ 635.833393][T18061] ? futex_unqueue+0x22/0x240 [ 635.833419][T18061] ? futex_unqueue+0x22/0x240 [ 635.833446][T18061] ? is_valid_gup_args+0x11f/0x200 [ 635.833503][T18061] ? get_user_pages_fast+0x4d/0xb0 [ 635.833548][T18061] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 635.833599][T18061] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 635.833639][T18061] ? wait_for_space+0x24d/0x2d0 [ 635.833680][T18061] iov_iter_get_pages2+0x5e/0xa0 [ 635.833725][T18061] __se_sys_vmsplice+0x548/0x10d0 [ 635.833793][T18061] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 635.833833][T18061] ? __pfx_futex_wait+0x10/0x10 [ 635.833891][T18061] ? __lock_acquire+0xab9/0xd20 [ 635.833987][T18061] ? rcu_is_watching+0x15/0xb0 [ 635.834020][T18061] ? do_syscall_64+0xbe/0x3b0 [ 635.834060][T18061] do_syscall_64+0xfa/0x3b0 [ 635.834091][T18061] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.834123][T18061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.834150][T18061] ? clear_bhb_loop+0x60/0xb0 [ 635.834181][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.834206][T18061] RIP: 0033:0x7f256778ebe9 [ 635.834231][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.834253][T18061] RSP: 002b:00007f2568633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 635.834280][T18061] RAX: ffffffffffffffda RBX: 00007f25679b5fa0 RCX: 00007f256778ebe9 [ 635.834299][T18061] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 635.834315][T18061] RBP: 00007f2567811e19 R08: 0000000000000000 R09: 0000000000000000 [ 635.834331][T18061] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 635.834345][T18061] R13: 00007f25679b6038 R14: 00007f25679b5fa0 R15: 00007ffe4464cd18 [ 635.834388][T18061] [ 635.841919][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 636.075867][T18048] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3285'. [ 636.128518][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3288'. [ 636.140707][T11078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.159690][T18048] hsr_slave_0: left promiscuous mode [ 636.168097][T18048] hsr_slave_1: left promiscuous mode [ 636.200445][T18047] lo speed is unknown, defaulting to 1000 [ 636.221593][T18063] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 636.298407][T18046] tipc: Resetting bearer [ 636.312653][T18065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.369997][T18046] tipc: Disabling bearer [ 636.737776][ T5184] Bluetooth: hci0: command tx timeout [ 636.814420][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.826604][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.981121][T18086] netlink: 'syz.3.3293': attribute type 8 has an invalid length. [ 636.998238][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.017835][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.041740][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'. [ 637.142073][T18089] FAULT_INJECTION: forcing a failure. [ 637.142073][T18089] name failslab, interval 1, probability 0, space 0, times 0 [ 637.159509][T18089] CPU: 1 UID: 0 PID: 18089 Comm: syz.4.3295 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 637.159542][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.159554][T18089] Call Trace: [ 637.159562][T18089] [ 637.159572][T18089] dump_stack_lvl+0x189/0x250 [ 637.159605][T18089] ? __pfx____ratelimit+0x10/0x10 [ 637.159633][T18089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.159660][T18089] ? __pfx__printk+0x10/0x10 [ 637.159699][T18089] ? __pfx___might_resched+0x10/0x10 [ 637.159720][T18089] ? fs_reclaim_acquire+0x7d/0x100 [ 637.159761][T18089] should_fail_ex+0x414/0x560 [ 637.159793][T18089] should_failslab+0xa8/0x100 [ 637.159828][T18089] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 637.159860][T18089] ? __alloc_skb+0x112/0x2d0 [ 637.159896][T18089] __alloc_skb+0x112/0x2d0 [ 637.159931][T18089] netlink_ack+0x146/0xa50 [ 637.159956][T18089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.159976][T18089] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 637.160010][T18089] ? __pfx_nl80211_post_doit+0x10/0x10 [ 637.160046][T18089] ? __asan_memcpy+0x40/0x70 [ 637.160071][T18089] ? __pfx_ref_tracker_free+0x10/0x10 [ 637.160108][T18089] netlink_rcv_skb+0x28c/0x470 [ 637.160135][T18089] ? __lock_acquire+0xab9/0xd20 [ 637.160168][T18089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.160192][T18089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.160244][T18089] ? down_read+0x1ad/0x2e0 [ 637.160279][T18089] genl_rcv+0x28/0x40 [ 637.160310][T18089] netlink_unicast+0x82f/0x9e0 [ 637.160348][T18089] ? __pfx_netlink_unicast+0x10/0x10 [ 637.160376][T18089] ? netlink_sendmsg+0x642/0xb30 [ 637.160402][T18089] ? skb_put+0x11b/0x210 [ 637.160444][T18089] netlink_sendmsg+0x805/0xb30 [ 637.160485][T18089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.160520][T18089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 637.160553][T18089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.160578][T18089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.160609][T18089] __sock_sendmsg+0x219/0x270 [ 637.160638][T18089] ____sys_sendmsg+0x505/0x830 [ 637.160680][T18089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.160725][T18089] ? import_iovec+0x74/0xa0 [ 637.160752][T18089] ___sys_sendmsg+0x21f/0x2a0 [ 637.160788][T18089] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.160868][T18089] ? __fget_files+0x2a/0x420 [ 637.160901][T18089] ? __fget_files+0x3a0/0x420 [ 637.160948][T18089] __x64_sys_sendmsg+0x19b/0x260 [ 637.160985][T18089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.161032][T18089] ? __pfx_ksys_write+0x10/0x10 [ 637.161058][T18089] ? rcu_is_watching+0x15/0xb0 [ 637.161087][T18089] ? do_syscall_64+0xbe/0x3b0 [ 637.161121][T18089] do_syscall_64+0xfa/0x3b0 [ 637.161149][T18089] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.161175][T18089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.161197][T18089] ? clear_bhb_loop+0x60/0xb0 [ 637.161226][T18089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.161247][T18089] RIP: 0033:0x7fedf278ebe9 [ 637.161267][T18089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.161288][T18089] RSP: 002b:00007fedf09ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.161310][T18089] RAX: ffffffffffffffda RBX: 00007fedf29b5fa0 RCX: 00007fedf278ebe9 [ 637.161326][T18089] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 637.161340][T18089] RBP: 00007fedf09ee090 R08: 0000000000000000 R09: 0000000000000000 [ 637.161353][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.161366][T18089] R13: 00007fedf29b6038 R14: 00007fedf29b5fa0 R15: 00007ffda2272ac8 [ 637.161403][T18089] [ 637.633069][T18091] netlink: 'syz.0.3294': attribute type 1 has an invalid length. [ 637.673924][T18091] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 637.699568][T18091] netlink: 'syz.0.3294': attribute type 1 has an invalid length. [ 637.716882][T18091] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.3294'. [ 637.991827][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3300'. [ 638.125463][T18114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.367691][T18117] netlink: 'syz.0.3301': attribute type 39 has an invalid length. [ 639.556944][T18109] bpq0: entered promiscuous mode [ 639.562095][T18109] bpq0: entered allmulticast mode [ 639.585211][T18108] bpq0: left promiscuous mode [ 639.590308][T18108] bpq0: left allmulticast mode [ 639.841468][T18125] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3304'. [ 639.869209][T18125] netlink: 'syz.2.3304': attribute type 11 has an invalid length. [ 639.923537][T18125] netlink: 'syz.2.3304': attribute type 4 has an invalid length. [ 639.943957][T18125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3304'. [ 640.230942][T18128] netlink: 'syz.4.3305': attribute type 11 has an invalid length. [ 640.279487][T18128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3305'. [ 640.389405][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3311'. [ 640.455788][T18175] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3313'. [ 640.464120][T18167] lo speed is unknown, defaulting to 1000 [ 640.516563][T18167] lo speed is unknown, defaulting to 1000 [ 640.757299][T18180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.032761][T18187] lo speed is unknown, defaulting to 1000 [ 641.435854][T18197] __nla_validate_parse: 2 callbacks suppressed [ 641.435874][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3319'. [ 641.467134][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3319'. [ 641.616101][T18201] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 641.643627][T18201] team0: Device ipvlan1 failed to register rx_handler [ 641.718449][T18203] FAULT_INJECTION: forcing a failure. [ 641.718449][T18203] name failslab, interval 1, probability 0, space 0, times 0 [ 641.781933][T18203] CPU: 1 UID: 0 PID: 18203 Comm: syz.2.3321 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 641.781967][T18203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.781981][T18203] Call Trace: [ 641.781989][T18203] [ 641.781999][T18203] dump_stack_lvl+0x189/0x250 [ 641.782040][T18203] ? __pfx____ratelimit+0x10/0x10 [ 641.782068][T18203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.782095][T18203] ? __pfx__printk+0x10/0x10 [ 641.782122][T18203] ? genl_rcv+0x28/0x40 [ 641.782155][T18203] ? ____sys_sendmsg+0x505/0x830 [ 641.782186][T18203] ? __x64_sys_sendmsg+0x19b/0x260 [ 641.782233][T18203] should_fail_ex+0x414/0x560 [ 641.782265][T18203] should_failslab+0xa8/0x100 [ 641.782300][T18203] kmem_cache_alloc_noprof+0x73/0x3c0 [ 641.782330][T18203] ? skb_clone+0x212/0x3a0 [ 641.782356][T18203] skb_clone+0x212/0x3a0 [ 641.782382][T18203] __netlink_deliver_tap+0x404/0x850 [ 641.782431][T18203] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.782462][T18203] netlink_deliver_tap+0x19c/0x1b0 [ 641.782493][T18203] netlink_sendskb+0x68/0x140 [ 641.782522][T18203] netlink_unicast+0x397/0x9e0 [ 641.782545][T18203] ? __asan_memcpy+0x40/0x70 [ 641.782581][T18203] ? __pfx_netlink_unicast+0x10/0x10 [ 641.782620][T18203] netlink_rcv_skb+0x28c/0x470 [ 641.782646][T18203] ? __lock_acquire+0xab9/0xd20 [ 641.782680][T18203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.782703][T18203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.782757][T18203] ? down_read+0x1ad/0x2e0 [ 641.782791][T18203] genl_rcv+0x28/0x40 [ 641.782824][T18203] netlink_unicast+0x82f/0x9e0 [ 641.782861][T18203] ? __pfx_netlink_unicast+0x10/0x10 [ 641.782890][T18203] ? netlink_sendmsg+0x642/0xb30 [ 641.782916][T18203] ? skb_put+0x11b/0x210 [ 641.782950][T18203] netlink_sendmsg+0x805/0xb30 [ 641.782991][T18203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.783032][T18203] ? aa_sock_msg_perm+0xf1/0x1d0 [ 641.783065][T18203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.783089][T18203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.783120][T18203] __sock_sendmsg+0x219/0x270 [ 641.783148][T18203] ____sys_sendmsg+0x505/0x830 [ 641.783187][T18203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.783232][T18203] ? import_iovec+0x74/0xa0 [ 641.783258][T18203] ___sys_sendmsg+0x21f/0x2a0 [ 641.783295][T18203] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.783375][T18203] ? __fget_files+0x2a/0x420 [ 641.783407][T18203] ? __fget_files+0x3a0/0x420 [ 641.783465][T18203] __x64_sys_sendmsg+0x19b/0x260 [ 641.783498][T18203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.783541][T18203] ? __pfx_ksys_write+0x10/0x10 [ 641.783567][T18203] ? rcu_is_watching+0x15/0xb0 [ 641.783595][T18203] ? do_syscall_64+0xbe/0x3b0 [ 641.783628][T18203] do_syscall_64+0xfa/0x3b0 [ 641.783655][T18203] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.783681][T18203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.783703][T18203] ? clear_bhb_loop+0x60/0xb0 [ 641.783730][T18203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.783751][T18203] RIP: 0033:0x7fd82d78ebe9 [ 641.783770][T18203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.783789][T18203] RSP: 002b:00007fd82e616038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.783812][T18203] RAX: ffffffffffffffda RBX: 00007fd82d9b5fa0 RCX: 00007fd82d78ebe9 [ 641.783827][T18203] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 641.783840][T18203] RBP: 00007fd82e616090 R08: 0000000000000000 R09: 0000000000000000 [ 641.783854][T18203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.783866][T18203] R13: 00007fd82d9b6038 R14: 00007fd82d9b5fa0 R15: 00007fff25c7c1f8 [ 641.783901][T18203] [ 642.320818][T18187] lo speed is unknown, defaulting to 1000 [ 642.322802][T18167] lo speed is unknown, defaulting to 1000 [ 642.365679][T18215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3325'. [ 642.449102][T18217] netlink: 'syz.2.3324': attribute type 13 has an invalid length. [ 642.457383][T18217] netlink: 'syz.2.3324': attribute type 17 has an invalid length. [ 642.753535][T18217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.812906][T18187] lo speed is unknown, defaulting to 1000 [ 642.908858][T18214] lo speed is unknown, defaulting to 1000 [ 642.933744][T18214] lo speed is unknown, defaulting to 1000 [ 643.193969][T18235] netlink: 'syz.0.3329': attribute type 21 has an invalid length. [ 643.202155][T18234] netlink: 'syz.0.3329': attribute type 21 has an invalid length. [ 643.277759][T18235] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3329'. [ 643.290321][T18234] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3329'. [ 643.303682][T18214] lo speed is unknown, defaulting to 1000 [ 643.615265][T18240] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.3331'. [ 643.641354][T18240] netlink: zone id is out of range [ 643.654889][T18240] netlink: zone id is out of range [ 643.660071][T18240] netlink: zone id is out of range [ 643.757065][T18240] netlink: zone id is out of range [ 643.762295][T18240] netlink: zone id is out of range [ 643.767851][T18240] netlink: zone id is out of range [ 643.773072][T18240] netlink: zone id is out of range [ 643.778544][T18240] netlink: zone id is out of range [ 643.783724][T18240] netlink: zone id is out of range [ 645.049966][T18259] FAULT_INJECTION: forcing a failure. [ 645.049966][T18259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.088303][T18259] CPU: 0 UID: 0 PID: 18259 Comm: syz.4.3335 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 645.088338][T18259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.088353][T18259] Call Trace: [ 645.088361][T18259] [ 645.088371][T18259] dump_stack_lvl+0x189/0x250 [ 645.088404][T18259] ? __pfx____ratelimit+0x10/0x10 [ 645.088432][T18259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.088459][T18259] ? __pfx__printk+0x10/0x10 [ 645.088505][T18259] should_fail_ex+0x414/0x560 [ 645.088537][T18259] _copy_to_user+0x31/0xb0 [ 645.088561][T18259] simple_read_from_buffer+0xe1/0x170 [ 645.088599][T18259] proc_fail_nth_read+0x1b3/0x220 [ 645.088629][T18259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.088658][T18259] ? rw_verify_area+0x2a6/0x4d0 [ 645.088685][T18259] ? __lock_acquire+0xab9/0xd20 [ 645.088721][T18259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.088749][T18259] vfs_read+0x200/0x980 [ 645.088777][T18259] ? fdget_pos+0x247/0x320 [ 645.088801][T18259] ? __pfx___mutex_lock+0x10/0x10 [ 645.088831][T18259] ? __pfx_vfs_read+0x10/0x10 [ 645.088862][T18259] ? __fget_files+0x2a/0x420 [ 645.088901][T18259] ? __fget_files+0x3a0/0x420 [ 645.088933][T18259] ? __fget_files+0x2a/0x420 [ 645.088977][T18259] ksys_read+0x145/0x250 [ 645.089010][T18259] ? __pfx_ksys_read+0x10/0x10 [ 645.089036][T18259] ? rcu_is_watching+0x15/0xb0 [ 645.089064][T18259] ? do_syscall_64+0xbe/0x3b0 [ 645.089098][T18259] do_syscall_64+0xfa/0x3b0 [ 645.089125][T18259] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.089152][T18259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.089175][T18259] ? clear_bhb_loop+0x60/0xb0 [ 645.089202][T18259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.089224][T18259] RIP: 0033:0x7fedf278d5fc [ 645.089244][T18259] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 645.089264][T18259] RSP: 002b:00007fedf09ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.089287][T18259] RAX: ffffffffffffffda RBX: 00007fedf29b5fa0 RCX: 00007fedf278d5fc [ 645.089303][T18259] RDX: 000000000000000f RSI: 00007fedf09ee0a0 RDI: 0000000000000004 [ 645.089316][T18259] RBP: 00007fedf09ee090 R08: 0000000000000000 R09: 0000000000000000 [ 645.089329][T18259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.089342][T18259] R13: 00007fedf29b6038 R14: 00007fedf29b5fa0 R15: 00007ffda2272ac8 [ 645.089378][T18259] [ 645.090007][T18260] netlink: 'syz.2.3337': attribute type 15 has an invalid length. [ 645.219612][T18265] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3339'. [ 645.547003][T18278] FAULT_INJECTION: forcing a failure. [ 645.547003][T18278] name failslab, interval 1, probability 0, space 0, times 0 [ 645.622800][T18278] CPU: 1 UID: 0 PID: 18278 Comm: syz.0.3342 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 645.622833][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.622847][T18278] Call Trace: [ 645.622855][T18278] [ 645.622865][T18278] dump_stack_lvl+0x189/0x250 [ 645.622905][T18278] ? __pfx____ratelimit+0x10/0x10 [ 645.622933][T18278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.622960][T18278] ? __pfx__printk+0x10/0x10 [ 645.622997][T18278] ? __pfx___might_resched+0x10/0x10 [ 645.623017][T18278] ? fs_reclaim_acquire+0x7d/0x100 [ 645.623058][T18278] should_fail_ex+0x414/0x560 [ 645.623090][T18278] should_failslab+0xa8/0x100 [ 645.623125][T18278] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 645.623157][T18278] ? __alloc_skb+0x112/0x2d0 [ 645.623192][T18278] __alloc_skb+0x112/0x2d0 [ 645.623228][T18278] netlink_ack+0x146/0xa50 [ 645.623253][T18278] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.623272][T18278] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 645.623306][T18278] ? __pfx_nl80211_post_doit+0x10/0x10 [ 645.623342][T18278] ? __asan_memcpy+0x40/0x70 [ 645.623366][T18278] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.623401][T18278] netlink_rcv_skb+0x28c/0x470 [ 645.623427][T18278] ? __lock_acquire+0xab9/0xd20 [ 645.623461][T18278] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.623484][T18278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.623543][T18278] ? down_read+0x1ad/0x2e0 [ 645.623577][T18278] genl_rcv+0x28/0x40 [ 645.623610][T18278] netlink_unicast+0x82f/0x9e0 [ 645.623648][T18278] ? __pfx_netlink_unicast+0x10/0x10 [ 645.623675][T18278] ? netlink_sendmsg+0x642/0xb30 [ 645.623710][T18278] netlink_sendmsg+0x805/0xb30 [ 645.623751][T18278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.623783][T18278] ? __lock_acquire+0xab9/0xd20 [ 645.623812][T18278] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.623849][T18278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.623873][T18278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.623911][T18278] __sock_sendmsg+0x219/0x270 [ 645.623940][T18278] ____sys_sendmsg+0x505/0x830 [ 645.623980][T18278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.624024][T18278] ? import_iovec+0x74/0xa0 [ 645.624050][T18278] ___sys_sendmsg+0x21f/0x2a0 [ 645.624087][T18278] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.624168][T18278] ? __fget_files+0x2a/0x420 [ 645.624201][T18278] ? __fget_files+0x3a0/0x420 [ 645.624248][T18278] __x64_sys_sendmsg+0x19b/0x260 [ 645.624285][T18278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.624331][T18278] ? __pfx_ksys_write+0x10/0x10 [ 645.624359][T18278] ? rcu_is_watching+0x15/0xb0 [ 645.624387][T18278] ? do_syscall_64+0xbe/0x3b0 [ 645.624421][T18278] do_syscall_64+0xfa/0x3b0 [ 645.624448][T18278] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.624474][T18278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.624497][T18278] ? clear_bhb_loop+0x60/0xb0 [ 645.624525][T18278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.624547][T18278] RIP: 0033:0x7f256778ebe9 [ 645.624568][T18278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.624589][T18278] RSP: 002b:00007f2568633038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.624613][T18278] RAX: ffffffffffffffda RBX: 00007f25679b5fa0 RCX: 00007f256778ebe9 [ 645.624628][T18278] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 645.624641][T18278] RBP: 00007f2568633090 R08: 0000000000000000 R09: 0000000000000000 [ 645.624656][T18278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.624669][T18278] R13: 00007f25679b6038 R14: 00007f25679b5fa0 R15: 00007ffe4464cd18 [ 645.624706][T18278] [ 646.146659][T18295] FAULT_INJECTION: forcing a failure. [ 646.146659][T18295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.211909][T18295] CPU: 1 UID: 0 PID: 18295 Comm: syz.2.3348 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 646.211944][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.211957][T18295] Call Trace: [ 646.211967][T18295] [ 646.211977][T18295] dump_stack_lvl+0x189/0x250 [ 646.212010][T18295] ? __pfx____ratelimit+0x10/0x10 [ 646.212038][T18295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.212065][T18295] ? __pfx__printk+0x10/0x10 [ 646.212096][T18295] ? __might_fault+0xb0/0x130 [ 646.212140][T18295] should_fail_ex+0x414/0x560 [ 646.212170][T18295] _copy_from_user+0x2d/0xb0 [ 646.212193][T18295] __sys_bpf+0x1ed/0x870 [ 646.212225][T18295] ? __pfx___sys_bpf+0x10/0x10 [ 646.212270][T18295] ? ksys_write+0x22a/0x250 [ 646.212302][T18295] ? __pfx_ksys_write+0x10/0x10 [ 646.212328][T18295] ? rcu_is_watching+0x15/0xb0 [ 646.212359][T18295] __x64_sys_bpf+0x7c/0x90 [ 646.212386][T18295] do_syscall_64+0xfa/0x3b0 [ 646.212414][T18295] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.212440][T18295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.212462][T18295] ? clear_bhb_loop+0x60/0xb0 [ 646.212489][T18295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.212511][T18295] RIP: 0033:0x7fd82d78ebe9 [ 646.212531][T18295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.212551][T18295] RSP: 002b:00007fd82e616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.212574][T18295] RAX: ffffffffffffffda RBX: 00007fd82d9b5fa0 RCX: 00007fd82d78ebe9 [ 646.212613][T18295] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 646.212626][T18295] RBP: 00007fd82e616090 R08: 0000000000000000 R09: 0000000000000000 [ 646.212639][T18295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.212651][T18295] R13: 00007fd82d9b6038 R14: 00007fd82d9b5fa0 R15: 00007fff25c7c1f8 [ 646.212687][T18295] [ 646.451262][T18299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3345'. [ 647.032572][T18317] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3354'. [ 647.155272][T18329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3355'. [ 647.349324][T18351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3358'. [ 647.703097][T18364] netlink: 'syz.4.3365': attribute type 32 has an invalid length. [ 647.733975][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3366'. [ 648.015126][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 648.524968][T18388] tipc: Enabled bearer , priority 0 [ 648.774067][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3375'. [ 648.791619][T18399] syzkaller0: entered promiscuous mode [ 648.799066][T18399] syzkaller0: entered allmulticast mode [ 648.822378][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3375'. [ 648.952002][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 649.648343][ T5950] tipc: Node number set to 3747552288 [ 650.890421][T18431] FAULT_INJECTION: forcing a failure. [ 650.890421][T18431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.905180][T18431] CPU: 0 UID: 0 PID: 18431 Comm: syz.3.3380 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 650.905209][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.905221][T18431] Call Trace: [ 650.905228][T18431] [ 650.905236][T18431] dump_stack_lvl+0x189/0x250 [ 650.905275][T18431] ? __pfx____ratelimit+0x10/0x10 [ 650.905298][T18431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.905320][T18431] ? __pfx__printk+0x10/0x10 [ 650.905359][T18431] should_fail_ex+0x414/0x560 [ 650.905384][T18431] _copy_from_user+0x2d/0xb0 [ 650.905403][T18431] sctp_setsockopt+0x19f/0x1200 [ 650.905449][T18431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 650.905476][T18431] do_sock_setsockopt+0x17c/0x1b0 [ 650.905511][T18431] __x64_sys_setsockopt+0x13f/0x1b0 [ 650.905545][T18431] do_syscall_64+0xfa/0x3b0 [ 650.905569][T18431] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.905592][T18431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.905611][T18431] ? clear_bhb_loop+0x60/0xb0 [ 650.905635][T18431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.905653][T18431] RIP: 0033:0x7f34de58ebe9 [ 650.905671][T18431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.905689][T18431] RSP: 002b:00007f34df37b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 650.905710][T18431] RAX: ffffffffffffffda RBX: 00007f34de7b5fa0 RCX: 00007f34de58ebe9 [ 650.905724][T18431] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 650.905735][T18431] RBP: 00007f34df37b090 R08: 0000000000000008 R09: 0000000000000000 [ 650.905747][T18431] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 650.905759][T18431] R13: 00007f34de7b6038 R14: 00007f34de7b5fa0 R15: 00007ffd4be11198 [ 650.905791][T18431] [ 651.379669][T18433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3381'. [ 651.399503][T18389] tipc: Disabling bearer [ 652.373173][ T6783] bridge0 (unregistering): left allmulticast mode [ 652.857255][T18451] vlan0: entered promiscuous mode [ 652.915194][T18451] team0: Port device vlan0 added [ 652.961749][ T6783] tipc: Disabling bearer [ 652.991638][ T6783] tipc: Left network mode [ 652.995825][T18470] FAULT_INJECTION: forcing a failure. [ 652.995825][T18470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.047994][T18470] CPU: 1 UID: 0 PID: 18470 Comm: syz.4.3391 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 653.048025][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.048039][T18470] Call Trace: [ 653.048048][T18470] [ 653.048057][T18470] dump_stack_lvl+0x189/0x250 [ 653.048090][T18470] ? __pfx____ratelimit+0x10/0x10 [ 653.048118][T18470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.048145][T18470] ? __pfx__printk+0x10/0x10 [ 653.048191][T18470] should_fail_ex+0x414/0x560 [ 653.048223][T18470] _copy_to_user+0x31/0xb0 [ 653.048247][T18470] simple_read_from_buffer+0xe1/0x170 [ 653.048293][T18470] proc_fail_nth_read+0x1b3/0x220 [ 653.048323][T18470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.048353][T18470] ? rw_verify_area+0x2a6/0x4d0 [ 653.048379][T18470] ? __lock_acquire+0xab9/0xd20 [ 653.048416][T18470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.048443][T18470] vfs_read+0x200/0x980 [ 653.048470][T18470] ? fdget_pos+0x247/0x320 [ 653.048494][T18470] ? __pfx___mutex_lock+0x10/0x10 [ 653.048522][T18470] ? __pfx_vfs_read+0x10/0x10 [ 653.048553][T18470] ? __fget_files+0x2a/0x420 [ 653.048591][T18470] ? __fget_files+0x3a0/0x420 [ 653.048621][T18470] ? __fget_files+0x2a/0x420 [ 653.048664][T18470] ksys_read+0x145/0x250 [ 653.048695][T18470] ? __pfx_ksys_read+0x10/0x10 [ 653.048730][T18470] ? do_syscall_64+0xbe/0x3b0 [ 653.048763][T18470] do_syscall_64+0xfa/0x3b0 [ 653.048790][T18470] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.048816][T18470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.048838][T18470] ? clear_bhb_loop+0x60/0xb0 [ 653.048865][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.048886][T18470] RIP: 0033:0x7fedf278d5fc [ 653.048906][T18470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 653.048926][T18470] RSP: 002b:00007fedf09ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.048948][T18470] RAX: ffffffffffffffda RBX: 00007fedf29b5fa0 RCX: 00007fedf278d5fc [ 653.048964][T18470] RDX: 000000000000000f RSI: 00007fedf09ee0a0 RDI: 0000000000000005 [ 653.048977][T18470] RBP: 00007fedf09ee090 R08: 0000000000000000 R09: 0000000000000000 [ 653.048990][T18470] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 653.049003][T18470] R13: 00007fedf29b6038 R14: 00007fedf29b5fa0 R15: 00007ffda2272ac8 [ 653.049038][T18470] [ 653.367188][T18481] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3394'. [ 653.463708][T18483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3396'. [ 653.502178][T18483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3396'. [ 653.528555][T18483] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3396'. [ 653.577082][T18486] net_ratelimit: 1 callbacks suppressed [ 653.577135][T18486] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 653.680233][T18483] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.744209][T18483] bond0: (slave lo): Error: Device can not be enslaved while up [ 653.813254][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3401'. [ 653.863385][T18511] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3400'. [ 653.921888][T18512] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3402'. [ 654.082000][T18513] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 654.575669][T18535] netlink: 'syz.0.3408': attribute type 5 has an invalid length. [ 654.724902][T18540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3409'. [ 654.745120][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 654.815064][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 654.825132][T18545] netlink: 'syz.0.3410': attribute type 10 has an invalid length. [ 654.923059][T18545] team0: Port device dummy0 added [ 654.982303][ T6783] veth0_vlan: left promiscuous mode [ 655.060962][ T6783] pim6reg (unregistering): left allmulticast mode [ 655.075366][T18556] sctp: [Deprecated]: syz.2.3413 (pid 18556) Use of int in max_burst socket option. [ 655.075366][T18556] Use struct sctp_assoc_value instead [ 655.106265][T18553] sctp: [Deprecated]: syz.2.3413 (pid 18553) Use of int in max_burst socket option. [ 655.106265][T18553] Use struct sctp_assoc_value instead [ 655.375721][ T5937] page_pool_release_retry() stalled pool shutdown: id 76, 3329 inflight 242 sec [ 655.800787][T18578] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 655.866967][T18579] netlink: 'syz.0.3416': attribute type 4 has an invalid length. [ 656.137077][ T5924] lo speed is unknown, defaulting to 1000 [ 656.142874][ T5924] syz1: Port: 1 Link DOWN [ 656.156214][T18568] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 656.173815][T18568] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 656.176038][T18572] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 656.202872][T18572] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 656.524147][T18593] macsec1: entered promiscuous mode [ 656.559291][T18593] macvlan1: entered promiscuous mode [ 656.568456][T18593] macsec1: entered allmulticast mode [ 656.583873][T18593] macvlan1: entered allmulticast mode [ 656.603264][T18593] veth1_vlan: entered allmulticast mode [ 656.603376][T18605] netlink: 'syz.1.3422': attribute type 13 has an invalid length. [ 656.627451][T18605] netlink: 'syz.1.3422': attribute type 17 has an invalid length. [ 656.638334][T18593] macvlan1: left allmulticast mode [ 656.649149][T18593] veth1_vlan: left allmulticast mode [ 656.668340][T18593] macvlan1: left promiscuous mode [ 657.200948][T18605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.376330][T18623] lo speed is unknown, defaulting to 1000 [ 657.383946][T18623] lo speed is unknown, defaulting to 1000 [ 657.564013][ T6783] IPVS: stop unused estimator thread 0... [ 657.842195][ T6783] tipc: Resetting bearer [ 658.243062][ T6783] tipc: Disabling bearer [ 658.377250][T18665] __nla_validate_parse: 3 callbacks suppressed [ 658.377271][T18665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3435'. [ 658.750950][ T6783] bond0 (unregistering): Released all slaves [ 658.854996][ T6783] bond1 (unregistering): Released all slaves [ 658.966745][ T6783] bond2 (unregistering): Released all slaves [ 658.991302][ T6783] bond3 (unregistering): Released all slaves [ 659.039930][T18649] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.193101][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3436'. [ 659.241265][ T6783] tipc: Left network mode [ 659.261495][T18661] lo speed is unknown, defaulting to 1000 [ 659.308651][T18649] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.371661][T18661] lo speed is unknown, defaulting to 1000 [ 659.412851][T18668] lo speed is unknown, defaulting to 1000 [ 659.449906][T18649] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.638551][T18649] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.884772][T18649] ------------[ cut here ]------------ [ 659.890564][T18649] WARNING: CPU: 1 PID: 18649 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 659.900820][T18649] Modules linked in: [ 659.905042][T18649] CPU: 1 UID: 0 PID: 18649 Comm: syz.4.3430 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 659.916839][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 659.926981][T18649] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 659.933615][T18649] Code: 74 10 4c 89 e7 89 54 24 0c e8 f4 1c 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 f0 38 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 659.953312][T18649] RSP: 0018:ffffc9000c976940 EFLAGS: 00010246 [ 659.959470][T18649] RAX: ffffc9000c976900 RBX: 0000000000000017 RCX: 0000000000000000 [ 659.967522][T18649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c9769a8 [ 659.975569][T18649] RBP: ffffc9000c976a28 R08: ffffc9000c9769a7 R09: 0000000000000000 [ 659.983572][T18649] R10: ffffc9000c976980 R11: fffff5200192ed35 R12: 0000000000000000 [ 659.991627][T18649] R13: 1ffff9200192ed2c R14: 0000000000040920 R15: dffffc0000000000 [ 659.999676][T18649] FS: 00007fedf09ee6c0(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 660.008697][T18649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.015349][T18649] CR2: 00007f256782eb00 CR3: 00000000663a2000 CR4: 00000000003526f0 [ 660.023373][T18649] Call Trace: [ 660.026737][T18649] [ 660.029700][T18649] ? __sock_sendmsg+0x219/0x270 [ 660.034632][T18649] ? ___sys_sendmsg+0x21f/0x2a0 [ 660.039529][T18649] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 660.045944][T18649] ? policy_nodemask+0x28b/0x720 [ 660.050938][T18649] alloc_pages_mpol+0x232/0x4a0 [ 660.055878][T18649] ___kmalloc_large_node+0x5f/0x1b0 [ 660.061124][T18649] __kmalloc_large_node_noprof+0x18/0x90 [ 660.066855][T18649] __kmalloc_noprof+0x36f/0x4f0 [ 660.071748][T18649] ? nsim_fib_event_nb+0x295/0x1080 [ 660.077033][T18649] nsim_fib_event_nb+0x295/0x1080 [ 660.082108][T18649] ? validate_chain+0x897/0x2140 [ 660.087129][T18649] call_fib_notifier+0x42/0x80 [ 660.091957][T18649] fib6_node_dump+0x21d/0x2b0 [ 660.096728][T18649] ? __pfx_fib6_node_dump+0x10/0x10 [ 660.101966][T18649] ? __lock_acquire+0xab9/0xd20 [ 660.106934][T18649] ? __local_bh_enable_ip+0x12d/0x1c0 [ 660.112349][T18649] fib6_walk_continue+0x678/0x910 [ 660.117474][T18649] fib6_walk+0x149/0x290 [ 660.121773][T18649] fib6_tables_dump+0x1c9/0x2b0 [ 660.126720][T18649] ? __pfx_fib6_tables_dump+0x10/0x10 [ 660.132138][T18649] ? net_generic+0x1e/0x240 [ 660.136792][T18649] ? net_generic+0x1e/0x240 [ 660.141348][T18649] register_fib_notifier+0x181/0x360 [ 660.146717][T18649] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 660.152976][T18649] ? register_fib_notifier+0x6a/0x360 [ 660.158397][T18649] nsim_fib_create+0x847/0x9d0 [ 660.163192][T18649] ? __pfx_nsim_fib_create+0x10/0x10 [ 660.168562][T18649] nsim_dev_reload_up+0x36b/0x780 [ 660.173629][T18649] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 660.179237][T18649] devlink_reload+0x4ec/0x8d0 [ 660.183962][T18649] ? __pfx_devlink_reload+0x10/0x10 [ 660.189233][T18649] ? devlink_resources_validate+0xa7/0xd0 [ 660.195033][T18649] ? devlink_resources_validate+0xa7/0xd0 [ 660.200787][T18649] devlink_nl_reload_doit+0xb35/0xd50 [ 660.206247][T18649] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 660.212183][T18649] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 660.218576][T18649] genl_family_rcv_msg_doit+0x212/0x300 [ 660.224139][T18649] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 660.230261][T18649] ? bpf_lsm_capable+0x9/0x20 [ 660.234999][T18649] ? security_capable+0x7e/0x2e0 [ 660.239978][T18649] genl_rcv_msg+0x60e/0x790 [ 660.244638][T18649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.249689][T18649] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 660.256172][T18649] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 660.262094][T18649] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 660.268661][T18649] ? __asan_memcpy+0x40/0x70 [ 660.273291][T18649] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.278735][T18649] netlink_rcv_skb+0x208/0x470 [ 660.283520][T18649] ? __lock_acquire+0xab9/0xd20 [ 660.288427][T18649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.293485][T18649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.298839][T18649] ? down_read+0x1ad/0x2e0 [ 660.303277][T18649] genl_rcv+0x28/0x40 [ 660.307330][T18649] netlink_unicast+0x82f/0x9e0 [ 660.312151][T18649] ? __pfx_netlink_unicast+0x10/0x10 [ 660.317525][T18649] ? netlink_sendmsg+0x642/0xb30 [ 660.322508][T18649] ? skb_put+0x11b/0x210 [ 660.326828][T18649] netlink_sendmsg+0x805/0xb30 [ 660.331652][T18649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.337030][T18649] ? aa_sock_msg_perm+0xf1/0x1d0 [ 660.342009][T18649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.347352][T18649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.352677][T18649] __sock_sendmsg+0x219/0x270 [ 660.357414][T18649] ____sys_sendmsg+0x505/0x830 [ 660.362230][T18649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.367616][T18649] ? import_iovec+0x74/0xa0 [ 660.372162][T18649] ___sys_sendmsg+0x21f/0x2a0 [ 660.376912][T18649] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.382180][T18649] ? __fget_files+0x2a/0x420 [ 660.386822][T18649] ? __fget_files+0x3a0/0x420 [ 660.391529][T18649] __x64_sys_sendmsg+0x19b/0x260 [ 660.396556][T18649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.402066][T18649] ? rcu_is_watching+0x15/0xb0 [ 660.406877][T18649] ? do_syscall_64+0xbe/0x3b0 [ 660.411584][T18649] do_syscall_64+0xfa/0x3b0 [ 660.416173][T18649] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.421402][T18649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.427530][T18649] ? clear_bhb_loop+0x60/0xb0 [ 660.432253][T18649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.438197][T18649] RIP: 0033:0x7fedf278ebe9 [ 660.442708][T18649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.462370][T18649] RSP: 002b:00007fedf09ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.470850][T18649] RAX: ffffffffffffffda RBX: 00007fedf29b5fa0 RCX: 00007fedf278ebe9 [ 660.478898][T18649] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 660.486924][T18649] RBP: 00007fedf2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 660.494951][T18649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.502931][T18649] R13: 00007fedf29b6038 R14: 00007fedf29b5fa0 R15: 00007ffda2272ac8 [ 660.511019][T18649] [ 660.514073][T18649] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.521382][T18649] CPU: 1 UID: 0 PID: 18649 Comm: syz.4.3430 Not tainted 6.16.0-syzkaller-12122-g3b5ca25ecfa8 #0 PREEMPT(full) [ 660.533123][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.543204][T18649] Call Trace: [ 660.546491][T18649] [ 660.549447][T18649] dump_stack_lvl+0x99/0x250 [ 660.554075][T18649] ? __asan_memcpy+0x40/0x70 [ 660.558690][T18649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.563920][T18649] ? __pfx__printk+0x10/0x10 [ 660.568571][T18649] vpanic+0x281/0x750 [ 660.572608][T18649] ? __pfx__printk+0x10/0x10 [ 660.577214][T18649] ? __pfx_vpanic+0x10/0x10 [ 660.581727][T18649] ? is_bpf_text_address+0x26/0x2b0 [ 660.586949][T18649] panic+0xb9/0xc0 [ 660.590687][T18649] ? __pfx_panic+0x10/0x10 [ 660.595123][T18649] __warn+0x31b/0x4b0 [ 660.599112][T18649] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 660.605100][T18649] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 660.611090][T18649] report_bug+0x2be/0x4f0 [ 660.615455][T18649] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 660.621471][T18649] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 660.627479][T18649] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 660.633476][T18649] handle_bug+0x84/0x160 [ 660.637752][T18649] exc_invalid_op+0x1a/0x50 [ 660.642287][T18649] asm_exc_invalid_op+0x1a/0x20 [ 660.647168][T18649] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 660.653765][T18649] Code: 74 10 4c 89 e7 89 54 24 0c e8 f4 1c 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 f0 38 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 660.673395][T18649] RSP: 0018:ffffc9000c976940 EFLAGS: 00010246 [ 660.679490][T18649] RAX: ffffc9000c976900 RBX: 0000000000000017 RCX: 0000000000000000 [ 660.687471][T18649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c9769a8 [ 660.695447][T18649] RBP: ffffc9000c976a28 R08: ffffc9000c9769a7 R09: 0000000000000000 [ 660.703428][T18649] R10: ffffc9000c976980 R11: fffff5200192ed35 R12: 0000000000000000 [ 660.711422][T18649] R13: 1ffff9200192ed2c R14: 0000000000040920 R15: dffffc0000000000 [ 660.719434][T18649] ? __sock_sendmsg+0x219/0x270 [ 660.724396][T18649] ? ___sys_sendmsg+0x21f/0x2a0 [ 660.729296][T18649] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 660.735662][T18649] ? policy_nodemask+0x28b/0x720 [ 660.740617][T18649] alloc_pages_mpol+0x232/0x4a0 [ 660.745489][T18649] ___kmalloc_large_node+0x5f/0x1b0 [ 660.750708][T18649] __kmalloc_large_node_noprof+0x18/0x90 [ 660.756362][T18649] __kmalloc_noprof+0x36f/0x4f0 [ 660.761226][T18649] ? nsim_fib_event_nb+0x295/0x1080 [ 660.766465][T18649] nsim_fib_event_nb+0x295/0x1080 [ 660.771543][T18649] ? validate_chain+0x897/0x2140 [ 660.776516][T18649] call_fib_notifier+0x42/0x80 [ 660.781302][T18649] fib6_node_dump+0x21d/0x2b0 [ 660.786007][T18649] ? __pfx_fib6_node_dump+0x10/0x10 [ 660.791216][T18649] ? __lock_acquire+0xab9/0xd20 [ 660.796097][T18649] ? __local_bh_enable_ip+0x12d/0x1c0 [ 660.801501][T18649] fib6_walk_continue+0x678/0x910 [ 660.806550][T18649] fib6_walk+0x149/0x290 [ 660.810811][T18649] fib6_tables_dump+0x1c9/0x2b0 [ 660.815700][T18649] ? __pfx_fib6_tables_dump+0x10/0x10 [ 660.821105][T18649] ? net_generic+0x1e/0x240 [ 660.825677][T18649] ? net_generic+0x1e/0x240 [ 660.830262][T18649] register_fib_notifier+0x181/0x360 [ 660.835567][T18649] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 660.841835][T18649] ? register_fib_notifier+0x6a/0x360 [ 660.847231][T18649] nsim_fib_create+0x847/0x9d0 [ 660.852107][T18649] ? __pfx_nsim_fib_create+0x10/0x10 [ 660.857421][T18649] nsim_dev_reload_up+0x36b/0x780 [ 660.862500][T18649] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 660.868101][T18649] devlink_reload+0x4ec/0x8d0 [ 660.872803][T18649] ? __pfx_devlink_reload+0x10/0x10 [ 660.878018][T18649] ? devlink_resources_validate+0xa7/0xd0 [ 660.883752][T18649] ? devlink_resources_validate+0xa7/0xd0 [ 660.889484][T18649] devlink_nl_reload_doit+0xb35/0xd50 [ 660.894879][T18649] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 660.900788][T18649] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 660.907133][T18649] genl_family_rcv_msg_doit+0x212/0x300 [ 660.912694][T18649] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 660.918783][T18649] ? bpf_lsm_capable+0x9/0x20 [ 660.923480][T18649] ? security_capable+0x7e/0x2e0 [ 660.928443][T18649] genl_rcv_msg+0x60e/0x790 [ 660.933000][T18649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.938029][T18649] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 660.944463][T18649] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 660.950365][T18649] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 660.956891][T18649] ? __asan_memcpy+0x40/0x70 [ 660.961494][T18649] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.966888][T18649] netlink_rcv_skb+0x208/0x470 [ 660.971670][T18649] ? __lock_acquire+0xab9/0xd20 [ 660.976540][T18649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.981578][T18649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.986893][T18649] ? down_read+0x1ad/0x2e0 [ 660.991335][T18649] genl_rcv+0x28/0x40 [ 660.995330][T18649] netlink_unicast+0x82f/0x9e0 [ 661.000110][T18649] ? __pfx_netlink_unicast+0x10/0x10 [ 661.005413][T18649] ? netlink_sendmsg+0x642/0xb30 [ 661.010359][T18649] ? skb_put+0x11b/0x210 [ 661.014619][T18649] netlink_sendmsg+0x805/0xb30 [ 661.019405][T18649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.024705][T18649] ? aa_sock_msg_perm+0xf1/0x1d0 [ 661.029662][T18649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.034963][T18649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.040268][T18649] __sock_sendmsg+0x219/0x270 [ 661.044957][T18649] ____sys_sendmsg+0x505/0x830 [ 661.049743][T18649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.055051][T18649] ? import_iovec+0x74/0xa0 [ 661.059576][T18649] ___sys_sendmsg+0x21f/0x2a0 [ 661.064272][T18649] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.069520][T18649] ? __fget_files+0x2a/0x420 [ 661.074128][T18649] ? __fget_files+0x3a0/0x420 [ 661.078834][T18649] __x64_sys_sendmsg+0x19b/0x260 [ 661.083790][T18649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.089275][T18649] ? rcu_is_watching+0x15/0xb0 [ 661.094054][T18649] ? do_syscall_64+0xbe/0x3b0 [ 661.098752][T18649] do_syscall_64+0xfa/0x3b0 [ 661.103279][T18649] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.108491][T18649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.114577][T18649] ? clear_bhb_loop+0x60/0xb0 [ 661.119269][T18649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.125168][T18649] RIP: 0033:0x7fedf278ebe9 [ 661.129593][T18649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.149208][T18649] RSP: 002b:00007fedf09ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.157638][T18649] RAX: ffffffffffffffda RBX: 00007fedf29b5fa0 RCX: 00007fedf278ebe9 [ 661.165705][T18649] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 661.173683][T18649] RBP: 00007fedf2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 661.181669][T18649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.189644][T18649] R13: 00007fedf29b6038 R14: 00007fedf29b5fa0 R15: 00007ffda2272ac8 [ 661.197641][T18649] [ 661.201092][T18649] Kernel Offset: disabled [ 661.205419][T18649] Rebooting in 86400 seconds..