last executing test programs: 7.335346538s ago: executing program 3 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'dummy0\x00', @remote}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)) sendfile(r1, r2, 0x0, 0xffffffff000) 5.564276208s ago: executing program 3 (id=3042): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0xfffa}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e20, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5f6}, 0x8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r10, 0x40047440, &(0x7f00000000c0)=0xfff) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 5.240110577s ago: executing program 3 (id=3045): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x6a, {0x2, 0x0, @broadcast}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="02010c00000018"], 0xdd12}], 0x1}, 0x0) 5.054523189s ago: executing program 3 (id=3048): r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000004080101000000000000000007000007050003002f0000010073797a31000100000000010073797a30000000000900010073797a3100000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001800090000000000000000001c14"], 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) accept4(r3, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80, 0x80000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="5f40000000000000711033000000000006600000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f00000002c0)=""/201, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.850944412s ago: executing program 3 (id=3050): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000001000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 4.697516357s ago: executing program 3 (id=3051): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) 3.879440305s ago: executing program 0 (id=3058): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x1d, "9f313d4a697bdf2996cde225347f37b5b2c3e7149000c52655326d4542"}, &(0x7f00000001c0)=0x41) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000e4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r2}, 0x18) unshare(0x2030600) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000) r3 = socket(0x840000000002, 0x3, 0xfa) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000005ac0)=0x2, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) 3.43601663s ago: executing program 4 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.14804443s ago: executing program 0 (id=3065): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x3, 0x4) 2.91002981s ago: executing program 1 (id=3069): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="4883a34bfadf488cfcd19e27b9e543304e55f7c3aa6be10c1e3ada98dd49c9f96d85575edb1c73181b5dccd2b714aa30932b9475edd4f4f8ec78c1249ef465004be4273195d68834d3c8716e04092ae49635d4667417aa941fa2e9b4cf1e4e907c5b0911f8c64d98c5b2f8a9dfe660670f0189487e32f610958b7fa696d978811d404f7bd3916bb2cf3abea61e5352c950e9a2c890f0a2a7f4c2da72a500424bfe582968e0aa359413f3ea92b26b16b97e49d2fb76719ee45f1c4b49701dfc6281dad183f503b6a0", 0xc8}, {&(0x7f0000000240)="1d13c70921698bc9d22858a41f26ce85d11d557a0cd0a3dd4470e1870f46c5aed27e912e205450f4017fc8edaab135c01d59c83a2b2621892a6392b75bc3df51c3a308", 0x43}, {&(0x7f0000000300)="4a6eb4e561e8d55a46f5fc01eb62fae68a7b38b891d2c804ce317766", 0x1c}, {&(0x7f0000000340)="9296dffc7543b2a97ee3838f44f451319079a09e50685b65a862e15b46a96d735df5a35a623f0e4a81e5d7902d2bc7159b2aeeb11004baaf50e0f7fc81dcca20c473197c67a5de1bd2ac036b1ccb782d1d5140b4f6a890e8246f1a0bd666d6e656fdf276a262c52f2d8183cf2df84ad929ec1a0b136ef49c5f9e973f21bc52f7f02a743a840b2ffab4aff3cb4bb0501326166db3300e8194f3dadb4bd8adc526e1e2e9d6b674643a658be852ea7e7c773ccb18c0f7", 0xb5}, {&(0x7f0000001180)="31658157908da704f705671049a5d24dac9004619e8eec205a7ee45e18615985f544cf352cdbccf17ab28752eceb352af3c5cda4eb04e5300adfb3b3f077d567d78e81a8f289120de21f82ef467968f4d93440453d0f3c29217b386e0d4a8a6f3e20f522e251818bb2faf8fce03446eb0ea6bac471b5f700419e39abcb0a1c200d9175705c166b93ee991cf211d9e92a79d5454ad538a61bd1f498dbbefa789e7eba7fc6fb0b58b2c72e88eaa07d61e693b9ff3c6722ca7d2f884d2b9798f79ff088d9", 0xc3}], 0x5, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb292}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe68}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0xa0}}], 0x1, 0x4000) 2.863525269s ago: executing program 4 (id=3071): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000010000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 2.739664222s ago: executing program 4 (id=3073): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000002000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.611769193s ago: executing program 4 (id=3074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000000c0)='mm_lru_insertion\x00', r0, 0x0, 0x20000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) socket(0x8, 0x6, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000000c0)='mm_lru_insertion\x00', r0, 0x0, 0x20000}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) (async) socket(0x8, 0x6, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) 2.435719125s ago: executing program 2 (id=3076): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x3ee, 0x8, '\x00', 0x1, &(0x7f0000000080)=[0x0]}) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000140)={'veth0_to_bond\x00'}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x7}}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x45, 0x6}, @fwd={0xd}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/174, 0x4f, 0xae, 0x1, 0x5}, 0x28) poll(&(0x7f0000000300)=[{r3, 0x44a9}, {r2, 0x2}, {r5, 0x30}], 0x3, 0x5) close(r2) socket$inet(0x2, 0x0, 0x81) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0x1000, "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"}, &(0x7f0000001380)=0x1024) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000001400), 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001cc0)=@broute={'broute\x00', 0x20, 0x5, 0x83e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001480], 0x0, &(0x7f0000001440), &(0x7f0000001480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x1a, 0x6, 'veth1_to_hsr\x00', 'xfrm0\x00', 'gre0\x00', 'veth0_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0x0, 0x80], @local, [0x0, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xce, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x0, 0x1}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0x1}}}}, {0x11, 0x11, 0x8906, 'pimreg\x00', 'batadv0\x00', 'macvlan1\x00', 'ip_vti0\x00', @empty, [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x9e, 0xce, 0x11e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}}], [@common=@AUDIT={'AUDIT\x00', 0x8}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', {0x2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x49, 0x6003, 'pim6reg\x00', 'veth1_to_bridge\x00', 'veth0\x00', 'dvmrp1\x00', @random="d72731ed3080", [0xff, 0xff, 0xff, 0x101, 0x0, 0xff], @random="89038286ffcc", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x1b6, 0x2e6, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x1, 0x1000, 0x0, 0x2}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x81, {0x5, 0x3, 0x800, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, [0xff, 0xff, 0x0, 0x0, 0xff], 0x2, 0x8, 0x3, 0x2, @multicast, [0xff, 0x0, 0xff, 0xff], 0x4e23, 0x4e23, 0x7, 0x3, 0x504, 0x6, 0x9, 0x4, 0x6, 0x1}, 0x116, 0x2}}}], [@common=@log={'log\x00', 0x28, {{0xa, "3d4386a975d489fbe795b3dc0fc8afc1b344ddfdd33bcfa91282bc64eb8f", 0x2}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5, 0x5, {0x1}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:ptchown_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x5, 0x88, 0x6, 'pim6reg0\x00', 'xfrm0\x00', 'ip6gretap0\x00', 'batadv_slave_1\x00', @broadcast, [0xff, 0xff, 0xd9683f845c1f1ba5, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff], 0x6e, 0x116, 0x146, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x9, 0xff73, 0x5, 0x0, 0x0, "f848266fa6c768ff82cd09e46099ed78a4cab37435f71b461791bc51015768dbb193febae9448c05fa2721dd3c33a6d707f4e6c3b2f9f8b3aec9fc94a3bb2444"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x5, 0x4, 0xa00, 'nicvf0\x00', 'batadv_slave_0\x00', 'syz_tun\x00', 'veth0_vlan\x00', @random="c923317bebc0", [0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff], 0xde, 0x14e, 0x196, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x2, 0x1, 0xbf, 0xffff, 0x2}}}, @state={{'state\x00', 0x0, 0x8}, {{0x9a4}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0x10}}}, @common=@mark={'mark\x00', 0x10, {{0x30, 0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"9c192480e9d7a07f847c9787cfaadf90c64ac210b5e250d4cf22cbd64542"}}}]}]}, 0x8b6) write$tun(0xffffffffffffffff, &(0x7f0000001d40)={@void, @val={0x1, 0x3, 0xfffa, 0x7, 0xc7f0, 0xa928}, @mpls={[], @ipv6=@icmpv6={0xa, 0x6, "117540", 0x306, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @remote}, {[@fragment={0x32, 0x0, 0x77, 0x0, 0x0, 0x6, 0x65}, @fragment={0x89, 0x0, 0x2, 0x0, 0x0, 0x2, 0x64}], @param_prob={0x4, 0x2, 0x0, 0xd, {0x4, 0x6, "251f7a", 0x2, 0x3b, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@hopopts={0x6, 0x25, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x1, [0x1, 0x0, 0x1, 0x8000, 0x10000]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x7, 0xd4, "5f3e9fad421936d563b309f008e7d97922a2d97404ff5aff373aa8707b5a0c458d413b53b8ed6635c1bb7ea3f0ef2a289cf4dc14b36db091e1e2ba1de30eb4cc008712c28cc783e09c7e2fe75c3e56f84d1d8e2dbb5a20d78e627eab62b944e9100e2b407b1e27865a2fefa7fec8e97d3769217c4e24826d290f2e2a5ae7cb13adba5531e6897b1418ccd599abf14af12d9eb8c558fbb0dc9403fa0d35032e02cdba71b6178007ea9b5024d48da838979e49599578ffe76092fb6233adfd9c74a6a6b4d983d667afd3553705cd8b12d4282206eb"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4}]}, @routing={0x6, 0xc, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x34}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast2]}, @routing={0x2c, 0x4, 0x2, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local]}, @routing={0x2f, 0xc, 0x1, 0x8, 0x0, [@remote, @mcast1, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @fragment={0x3c, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x66}], "9a9bd9adcd85038ed46884327c160b23a9d6cb9318a806e7318a8f62bec2bee911e15ef65b18f9d992f1136362802dfaa5783aad545fc8f8171a4ac70c1ee5d8ebe6120d76e1e8cfd60c781dbe06195389af71f7ccc49318df948aa6cef19fe2b0dce4ac400d85da7629501a0a33571a8734fcbb267d7dc4adbc9f828c21bbe719dbdef01874cba239bdfbaa5dbe"}}}}}}, 0x338) r7 = socket(0x29, 0x1, 0x2) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, r8, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24008010) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f00000021c0)=0x3, 0x4) r10 = openat$cgroup_ro(r6, &(0x7f0000002200)='freezer.parent_freezing\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r10, 0x118, 0x0, &(0x7f0000002240)=0xf, 0x4) r11 = accept$inet(r7, 0x0, &(0x7f0000002280)) ioctl$SIOCGETSGCNT(r11, 0x89e1, &(0x7f00000022c0)={@rand_addr=0x64010100, @rand_addr=0x64010102}) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000002300), 0x0, &(0x7f0000002340)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1]}}}, @hopopts={{0x150, 0x29, 0x36, {0x1, 0x26, '\x00', [@generic={0x6, 0xcf, "c4369756750ad042cf8117d4875e7970b6ee430326b84283c83ff74af45feeeb5e27644e794886da11b9a4264880ab9a49447d8a95c109a2cc631a99da8ca368363c7cf1e54f89428c8693e137e63b9a4e3cbb7e3ce51a005603aea051fd0bf66e379d7ed0bd2afba7addea2a6c8b0988f9e193eb9d51c1f1ee31f48e416f2e07d76784e1d603470cb5b88a6d300652e1e614c91190366b2e98eacedf656e3add4cf9c7d177703ad369631e11e7fc8c6e62113b1a040b160fa82edba7586d7b3aa4fd9ff4d462201c9c6a3d8fe7239"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x4, 0x4ac1, [0x7, 0x5, 0x220, 0x1, 0x1ff]}}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x9}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x79}}, @hopopts={{0x38, 0x29, 0x36, {0x2f, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x3}, @jumbo]}}}, @dstopts_2292={{0x18}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x5e, 0x1b, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x3, [0x432, 0x21, 0xa]}}, @pad1, @ra={0x5, 0x2, 0x6}, @generic={0x40, 0xb4, "9c0bf70a5399f76c7c586b480073d014306e2c79423e2138f18da166de2e77aa992cc1a984668e711601c544896a0b2e2aed00e708e928a268c885471b25600d9ae611aa71f3bd2a46a4070d2fe5992e513d6a18a783f2edd5d56769e5aa982d9fb9288e06aa58c097ef5558d8351ee5168bb38e355307728dc113221eda8859beae4333fbcf8945bae8e81973b786163bd5f8f1d380626f3e7b128b1f32d3938d0bca66c6f8cb205471e1e64fb8da5e32fb1119"}]}}}], 0x2f8}}, {{&(0x7f0000002640)={0xa, 0x4e20, 0x8, @loopback, 0x80000000}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002680)="b2512ea8b392110ebab0c2981c849bba44e56a0711ca802cc09ec6d53912653d41ab21c2065719644f2fa9bed01ff889615de72bb15697885e211dbb19ca8f27407a2de491d11b0d3e1db4fc04059145f15baaf178ce46a658ba137e31099c1aaa698fe8b504360afa6fa9fd3c5f92c625896a1008003e0c98c8f465d47bb652c2dfdd57100c521fd260d00e54a09ccefed7e726598a368ba23ad2ecc848e75c23e74affee985a6233fe93975584773982affe1af26577c400f468e4a5c1f7ee76057135b2f16a91006a643ab0", 0xcd}, {&(0x7f0000002780)="cb37b77b8759ec566d1de4c453c6366e0bd2e0d42dcc308d9ba41fc7aab8c61bd4277573deff0987e500e3d3a73d6430e2f6354c9f5e7c286d8c427b674973b375a46f29871ba390f8da26ae8c1e2fad9546550eef98473270b66c8a42e7800c25b5e5430de41ec35c90554a267de7c9ffd95dc80971572374120c94a82971d56880a697468c77d001a03fa7d96ef77702ddaa8b", 0x94}], 0x2, &(0x7f00000028c0)=[@dstopts={{0x1040, 0x29, 0x37, {0x87, 0x204, '\x00', [@jumbo={0xc2, 0x4, 0x44}, @generic={0x9, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xf}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x1, 0x58, 0x0, [@mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffff}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x32, 0xa, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x200}, @generic={0x2, 0x1c, "7ca086883edc9fa159bd6aea25123a313c33b91b8127b1a885d0aef8"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x8f, 0x6, [0x1, 0x5, 0xfffffffffffffff7, 0x2403]}}]}}}], 0x1130}}], 0x2, 0x40080) 2.435189047s ago: executing program 4 (id=3077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}}, {{0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x2}}) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000140)=0xbb, 0x4) 2.293674438s ago: executing program 2 (id=3078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xaa93, 0xdfa, 0x0, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x1, 0x0, 0xa}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x24, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)}, 0x40) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x10, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r4, 0x0, 0x4, &(0x7f0000000080)='%\\&\x00'}, 0x30) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xbb70}, 0x1c) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r7, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) 2.232103787s ago: executing program 0 (id=3079): unshare(0x4020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2}, 0x38) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80eaffffffffffffff0000000000bbff02000000000000000000000000000100004e2200649078020000000000000000000000eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b"], 0x0) 2.08387412s ago: executing program 0 (id=3080): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000140)=0x3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = epoll_create1(0x80000) r3 = socket(0x1, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x8000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x68, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000888}, 0x44010) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x90) sendmsg$ETHTOOL_MSG_EEE_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r8) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r11, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040091) vmsplice(r9, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0xfeed}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b7698a93335a94b8cda61325b62cda1807b03675c6347b431f2d71baa6bc59e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d8704592ee5c19ca0d2075ddc9313d8bd2202a89dae6a689d3900818f892f3f17957cd53023399810da5655e0fd0f0f394c9a8bedc", 0xca}, {&(0x7f0000000500)="0f15ce0e2a894e2afb7a77dc4a4ec84b8109b2c95397d40adb9d5e8df8fd9a3167faa56aa764e61ba1a6cc8fd041bb89bee6d17105e169dd8d68d5b79eb5958574299b9035fbed2942a75e731b7571c29a760623e725792c", 0x58}, {&(0x7f0000000580)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0xfe68}, {&(0x7f00000005c0)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f7d785fff277a2a5612abf6c830c8b72579207ac0dda5", 0x83}, {&(0x7f0000000780)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b89b89f7ffd6ad7838ab27f246f9b78fa61a5ee5", 0x4f}], 0xb, 0x8) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000010c0)={0xffffffff, {{0x2, 0x4e21, @loopback}}, 0x0, 0x8, [{{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @private=0xa010101}}]}, 0x490) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000080)={{0x5c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'wlc\x00', 0x4, 0x80000001, 0xb}, {@broadcast, 0x4e23, 0x2, 0x9, 0x1, 0xfffffffe}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.96515603s ago: executing program 1 (id=3081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x23, &(0x7f0000000c80), 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) (async) shutdown(r0, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000040)={@void, @void, @mpls={[], @ipv6=@generic={0x8, 0x6, "a63084", 0x0, 0x0, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x28) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff004) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='7\x00'], 0x20) 1.873211822s ago: executing program 1 (id=3082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x11}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1000, 0x4, 0x0, 0x17, 0xa, 0xa, 0x8}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 952.151018ms ago: executing program 2 (id=3083): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000010000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 951.376899ms ago: executing program 0 (id=3084): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000001000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000004100360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 951.087599ms ago: executing program 1 (id=3085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}]}, 0x24}}, 0x4000014) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}]}, 0x24}}, 0x4000014) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x20000400) (async) unshare(0x20000400) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x3, 'lblcr\x00', 0x34, 0x7, 0x5}, {@multicast2, 0x4e23, 0x1, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 891.098856ms ago: executing program 2 (id=3086): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_getaddrlabel={0xb4, 0x4a, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x101, 0x12) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000000)={0x8029}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x7fffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x5c1b, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@getchain={0x2c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xfff3, 0xb}, {0x3}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r5, 0x0, 0x100000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0108000000000004004800003b0b000000000000", @ANYRES32=0x0, @ANYBLOB="00050000821800001c0012800b00010062726964676500000c00028006000800a88800000a000100aaaaaaaaaaaa0000"], 0x48}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x1, 0x3, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x10000001}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 852.516462ms ago: executing program 1 (id=3087): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, r2, 0x41}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@delqdisc={0x94, 0x25, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x2, 0xf}, {0xa, 0x9}, {0x10, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x77}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x2, 0x8001, 0x2, 0x0, 0x8, 0x9}}, {0x16, 0x2, [0xfa, 0xfff8, 0x6, 0x401, 0x8001, 0xa, 0x0, 0x2, 0x8517]}}, {{0x1c, 0x1, {0x8, 0x2, 0x5a8, 0x0, 0x0, 0x4, 0x10000, 0x8}}, {0x14, 0x2, [0x5306, 0xe296, 0x5, 0x8, 0x3, 0x1, 0x800, 0x6]}}]}]}, 0x94}, 0x1, 0xf0ffffffffffff}, 0x8850) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 796.235549ms ago: executing program 0 (id=3088): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x3, 0x4) 227.284706ms ago: executing program 2 (id=3089): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0xfffffffffffffffe, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="830000000000000020001280080001006772650014000280080007"], 0x78}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8915, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf250800010005000000080001000100000008000100010000000800"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000ac1414aa0000000000000000000000007f0000010000000000000000000000000004000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000ac1414bb000000000000000000000000ac1efe01000000000000000000000000e00000020000000000000000000000006c000000feffffff0200020000000000000000000000000000000000ac1414bb"], 0xec}, 0x1, 0x0, 0x0, 0x815}, 0x20000140) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="6aa169edcde6214740b9c5c2a2b7e4d2715dec652a50d150d783bdef4de36b8f2e8c85151992a631d0176f7cc0908b68e92c247c9462cc951d56f78679a3d06028329736fa04bf", 0x47}, {&(0x7f0000000340)="d49773e691a9f3f6a682984b98f90da48bef03b688defdea8189a0d25348a37788a019f85dc5416de7a9124cb77ccf441f7515378b1732f9722148980e4a78d27c75e9093c73c9e4dc7a2c508f74bd754c04a2b76cbb64e22fc2c720682b322f1667f167b6cc2e76f4887c7a10f88dd3b7f37955a9c9d09395adc88bf16eea171b786594ac5dcac22a70445b684ac202f37acc3e41e8767c2c97b35c8a1384ef3a43a4d3a6af9c0e68346b2b5381aa66834ab4883e5e42c513e2e0df88ce385b8ca6bdbc3f1d9cc120ea104c5a09080ed8fd7f2a2c17ca6026", 0xd9}, {&(0x7f0000000280)="bf9ff60333fa259ea3455dd5d19578421b19322e567052a5732028232cfb0a87d543c0fb91bf7c788de27176850de8a8045a60af5da56d1a493638bc5ae9ef8b8f59ab0b4fa35e9fa54aa27698d046c99184a028b3df3378fc8fbb95a8d7b92a6966ba6a542c6546bc95d4e82636078537a5def062397037d142e8f675", 0x7d}, {&(0x7f0000000140)="1c55fde8f208e14704214e922ff81cb7b7103fc22d924d4f0652ea5d012ae202ecd60ab965c3", 0x26}], 0x4, 0x8ee, 0xfffffff8) socket$pppl2tp(0x18, 0x1, 0x1) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0xfffffffffffffffe, &(0x7f0000000300)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="830000000000000020001280080001006772650014000280080007"], 0x78}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8915, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf250800010005000000080001000100000008000100010000000800"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000ac1414aa0000000000000000000000007f0000010000000000000000000000000004000000000000020000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000ac1414bb000000000000000000000000ac1efe01000000000000000000000000e00000020000000000000000000000006c000000feffffff0200020000000000000000000000000000000000ac1414bb"], 0xec}, 0x1, 0x0, 0x0, 0x815}, 0x20000140) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) (async) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="6aa169edcde6214740b9c5c2a2b7e4d2715dec652a50d150d783bdef4de36b8f2e8c85151992a631d0176f7cc0908b68e92c247c9462cc951d56f78679a3d06028329736fa04bf", 0x47}, {&(0x7f0000000340)="d49773e691a9f3f6a682984b98f90da48bef03b688defdea8189a0d25348a37788a019f85dc5416de7a9124cb77ccf441f7515378b1732f9722148980e4a78d27c75e9093c73c9e4dc7a2c508f74bd754c04a2b76cbb64e22fc2c720682b322f1667f167b6cc2e76f4887c7a10f88dd3b7f37955a9c9d09395adc88bf16eea171b786594ac5dcac22a70445b684ac202f37acc3e41e8767c2c97b35c8a1384ef3a43a4d3a6af9c0e68346b2b5381aa66834ab4883e5e42c513e2e0df88ce385b8ca6bdbc3f1d9cc120ea104c5a09080ed8fd7f2a2c17ca6026", 0xd9}, {&(0x7f0000000280)="bf9ff60333fa259ea3455dd5d19578421b19322e567052a5732028232cfb0a87d543c0fb91bf7c788de27176850de8a8045a60af5da56d1a493638bc5ae9ef8b8f59ab0b4fa35e9fa54aa27698d046c99184a028b3df3378fc8fbb95a8d7b92a6966ba6a542c6546bc95d4e82636078537a5def062397037d142e8f675", 0x7d}, {&(0x7f0000000140)="1c55fde8f208e14704214e922ff81cb7b7103fc22d924d4f0652ea5d012ae202ecd60ab965c3", 0x26}], 0x4, 0x8ee, 0xfffffff8) (async) 140.284347ms ago: executing program 1 (id=3090): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="4883a34bfadf488cfcd19e27b9e543304e55f7c3aa6be10c1e3ada98dd49c9f96d85575edb1c73181b5dccd2b714aa30932b9475edd4f4f8ec78c1249ef465004be4273195d68834d3c8716e04092ae49635d4667417aa941fa2e9b4cf1e4e907c5b0911f8c64d98c5b2f8a9dfe660670f0189487e32f610958b7fa696d978811d404f7bd3916bb2cf3abea61e5352c950e9a2c890f0a2a7f4c2da72a500424bfe582968e0aa359413f3ea92b26b16b97e49d2fb76719ee45f1c4b49701dfc6281dad183f503b6a0", 0xc8}, {&(0x7f0000000240)="1d13c70921698bc9d22858a41f26ce85d11d557a0cd0a3dd4470e1870f46c5aed27e912e205450f4017fc8edaab135c01d59c83a2b2621892a6392b75bc3df51c3a308", 0x43}, {&(0x7f0000000300)="4a6eb4e561e8d55a46f5fc01eb62fae68a7b38b891d2c804ce317766", 0x1c}, {&(0x7f0000000340)="9296dffc7543b2a97ee3838f44f451319079a09e50685b65a862e15b46a96d735df5a35a623f0e4a81e5d7902d2bc7159b2aeeb11004baaf50e0f7fc81dcca20c473197c67a5de1bd2ac036b1ccb782d1d5140b4f6a890e8246f1a0bd666d6e656fdf276a262c52f2d8183cf2df84ad929ec1a0b136ef49c5f9e973f21bc52f7f02a743a840b2ffab4aff3cb4bb0501326166db3300e8194f3dadb4bd8adc526e1e2e9d6b674643a658be852ea7e7c773ccb18c0f775", 0xb6}, {&(0x7f0000001180)="31658157908da704f705671049a5d24dac9004619e8eec205a7ee45e18615985f544cf352cdbccf17ab28752eceb352af3c5cda4eb04e5300adfb3b3f077d567d78e81a8f289120de21f82ef467968f4d93440453d0f3c29217b386e0d4a8a6f3e20f522e251818bb2faf8fce03446eb0ea6bac471b5f700419e39abcb0a1c200d9175705c166b93ee991cf211d9e92a79d5454ad538a61bd1f498dbbefa789e7eba7fc6fb0b58b2c72e88eaa07d61e693b9ff3c6722ca7d2f884d2b9798f79ff088d9", 0xc3}], 0x5, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb292}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe68}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0xa0}}], 0x1, 0x4000) 457.926µs ago: executing program 2 (id=3091): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x39, r3}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'}) r5 = socket(0x5, 0x6, 0x0) getsockopt$nfc_llcp(r5, 0x88, 0xb, 0x0, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0xf4e54000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000280)="2b1452ac82ef1ea05b1c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001b00000095e03d9c00"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000100)=0xfffffffffffff9f9, 0x8) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) 0s ago: executing program 4 (id=3092): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800", 0x23) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, 0xf5c0}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): own, defaulting to 1000 [ 176.898092][T10449] Bluetooth: MGMT ver 1.23 [ 177.509716][T10434] wg1 speed is unknown, defaulting to 1000 [ 177.825152][T10455] tap0: tun_chr_ioctl cmd 1074025680 [ 177.837097][T10455] D: renamed from syzkaller0 [ 178.096674][T10471] xt_l2tp: wrong L2TP version: 1 [ 178.148604][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 178.191154][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 178.191860][T10474] wg1 speed is unknown, defaulting to 1000 [ 178.645809][T10512] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 178.694958][T10514] netlink: 'syz.4.1333': attribute type 11 has an invalid length. [ 178.715099][T10514] netlink: 'syz.4.1333': attribute type 39 has an invalid length. [ 178.737596][T10512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.791261][T10512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1332'. [ 178.834502][T10525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1336'. [ 178.875502][T10528] dvmrp1: entered allmulticast mode [ 179.102903][T10540] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 179.231422][T10551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1344'. [ 179.266472][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 179.287273][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 179.320079][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 179.382185][T10544] tipc: Enabled bearer , priority 0 [ 179.420120][T10551] tipc: Disabling bearer [ 179.505997][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1350'. [ 179.537282][T10566] syzkaller0: entered promiscuous mode [ 179.557848][T10566] syzkaller0: entered allmulticast mode [ 179.585432][T10566] syzkaller0: tun_net_xmit 14 [ 179.591433][T10107] syzkaller0: tun_net_xmit 70 [ 179.600636][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1352'. [ 179.753103][T10573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1354'. [ 179.993030][T10582] wg1 speed is unknown, defaulting to 1000 [ 180.048031][T10596] Unsupported ieee802154 address type: 0 [ 180.644909][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 180.680993][T10614] netlink: 'syz.1.1364': attribute type 2 has an invalid length. [ 181.572602][T10614] wg1 speed is unknown, defaulting to 1000 [ 181.651511][T10638] syzkaller1: entered promiscuous mode [ 181.704807][T10638] syzkaller1: entered allmulticast mode [ 181.997248][ T30] audit: type=1107 audit(1760735748.283:2): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 182.671111][T10694] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 183.170305][T10711] bridge0: port 4(bond0) entered disabled state [ 183.177068][T10711] bridge0: port 3(dummy0) entered disabled state [ 183.183593][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.191864][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.083907][T10758] wg1 speed is unknown, defaulting to 1000 [ 184.250300][T10764] __nla_validate_parse: 11 callbacks suppressed [ 184.250318][T10764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1401'. [ 184.284949][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 184.293928][T10764] netlink: 'syz.2.1401': attribute type 2 has an invalid length. [ 184.641417][T10742] wg1 speed is unknown, defaulting to 1000 [ 184.720521][T10769] wg1 speed is unknown, defaulting to 1000 [ 185.110769][T10783] bridge0: Device is already in use. [ 185.939452][T10819] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.1414'. [ 185.961201][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 185.976478][T10820] netlink: 'syz.4.1416': attribute type 29 has an invalid length. [ 185.985405][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 186.150431][T10825] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 186.239240][T10829] FAULT_INJECTION: forcing a failure. [ 186.239240][T10829] name failslab, interval 1, probability 0, space 0, times 0 [ 186.252234][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.2.1418 Not tainted syzkaller #0 PREEMPT(full) [ 186.252255][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.252264][T10829] Call Trace: [ 186.252271][T10829] [ 186.252278][T10829] dump_stack_lvl+0x189/0x250 [ 186.252312][T10829] ? __pfx____ratelimit+0x10/0x10 [ 186.252335][T10829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.252359][T10829] ? __pfx__printk+0x10/0x10 [ 186.252377][T10829] ? __lock_acquire+0xab9/0xd20 [ 186.252403][T10829] should_fail_ex+0x414/0x560 [ 186.252431][T10829] should_failslab+0xa8/0x100 [ 186.252453][T10829] __kmalloc_noprof+0xcb/0x7f0 [ 186.252472][T10829] ? read_unconf_index_list+0xf7/0x510 [ 186.252497][T10829] read_unconf_index_list+0xf7/0x510 [ 186.252514][T10829] ? hci_mgmt_cmd+0x4b0/0xef0 [ 186.252532][T10829] ? kmem_cache_free+0x19b/0x690 [ 186.252558][T10829] hci_mgmt_cmd+0x9c9/0xef0 [ 186.252591][T10829] hci_sock_sendmsg+0x6ca/0xef0 [ 186.252617][T10829] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 186.252636][T10829] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.252655][T10829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.252675][T10829] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 186.252696][T10829] __sock_sendmsg+0x21c/0x270 [ 186.252719][T10829] sock_write_iter+0x279/0x360 [ 186.252742][T10829] ? __pfx_sock_write_iter+0x10/0x10 [ 186.252772][T10829] ? bpf_lsm_file_permission+0x9/0x20 [ 186.252793][T10829] ? security_file_permission+0x75/0x290 [ 186.252825][T10829] vfs_write+0x5c9/0xb30 [ 186.252849][T10829] ? __pfx_sock_write_iter+0x10/0x10 [ 186.252870][T10829] ? __pfx_vfs_write+0x10/0x10 [ 186.252900][T10829] ? __fget_files+0x2a/0x420 [ 186.252931][T10829] ksys_write+0x145/0x250 [ 186.252951][T10829] ? __pfx_ksys_write+0x10/0x10 [ 186.252974][T10829] ? do_syscall_64+0xbe/0xfa0 [ 186.252996][T10829] do_syscall_64+0xfa/0xfa0 [ 186.253012][T10829] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.253029][T10829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.253047][T10829] ? clear_bhb_loop+0x60/0xb0 [ 186.253068][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.253085][T10829] RIP: 0033:0x7efe3f18efc9 [ 186.253110][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.253121][T10829] RSP: 002b:00007efe400ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.253145][T10829] RAX: ffffffffffffffda RBX: 00007efe3f3e5fa0 RCX: 00007efe3f18efc9 [ 186.253156][T10829] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000006 [ 186.253167][T10829] RBP: 00007efe400ac090 R08: 0000000000000000 R09: 0000000000000000 [ 186.253177][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.253187][T10829] R13: 00007efe3f3e6038 R14: 00007efe3f3e5fa0 R15: 00007ffcd4f32218 [ 186.253220][T10829] [ 186.787759][T10835] syzkaller0: entered promiscuous mode [ 186.856263][T10835] syzkaller0: entered allmulticast mode [ 186.912598][T10839] wg1 speed is unknown, defaulting to 1000 [ 187.079691][T10853] sctp: [Deprecated]: syz.4.1421 (pid 10853) Use of int in max_burst socket option deprecated. [ 187.079691][T10853] Use struct sctp_assoc_value instead [ 187.298250][T10865] vxcan1: entered allmulticast mode [ 187.304543][T10865] vxcan1: left allmulticast mode [ 187.409432][T10865] raw_sendmsg: syz.4.1426 forgot to set AF_INET. Fix it! [ 187.481828][T10873] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 187.522902][T10873] bridge7: entered allmulticast mode [ 187.554507][T10878] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 187.566721][T10879] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1430'. [ 187.609775][T10879] batadv2: entered promiscuous mode [ 187.628703][T10879] batadv2: entered allmulticast mode [ 188.067771][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 188.107639][T10907] FAULT_INJECTION: forcing a failure. [ 188.107639][T10907] name failslab, interval 1, probability 0, space 0, times 0 [ 188.122803][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.2.1439 Not tainted syzkaller #0 PREEMPT(full) [ 188.122827][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.122836][T10907] Call Trace: [ 188.122843][T10907] [ 188.122851][T10907] dump_stack_lvl+0x189/0x250 [ 188.122877][T10907] ? __pfx____ratelimit+0x10/0x10 [ 188.122904][T10907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.122921][T10907] ? __pfx__printk+0x10/0x10 [ 188.122944][T10907] ? __pfx___might_resched+0x10/0x10 [ 188.122967][T10907] ? fs_reclaim_acquire+0x7d/0x100 [ 188.122992][T10907] should_fail_ex+0x414/0x560 [ 188.123030][T10907] should_failslab+0xa8/0x100 [ 188.123054][T10907] kmem_cache_alloc_node_noprof+0x77/0x710 [ 188.123073][T10907] ? __alloc_skb+0x112/0x2d0 [ 188.123094][T10907] ? register_lock_class+0x51/0x320 [ 188.123119][T10907] __alloc_skb+0x112/0x2d0 [ 188.123146][T10907] __ip6_append_data+0x2c16/0x3f30 [ 188.123167][T10907] ? __lock_acquire+0xab9/0xd20 [ 188.123210][T10907] ? __pfx_raw6_getfrag+0x10/0x10 [ 188.123250][T10907] ? __pfx___ip6_append_data+0x10/0x10 [ 188.123266][T10907] ? __pfx_ip6_mtu+0x10/0x10 [ 188.123292][T10907] ip6_append_data+0x1c1/0x380 [ 188.123316][T10907] ? __pfx_raw6_getfrag+0x10/0x10 [ 188.123340][T10907] rawv6_sendmsg+0x1286/0x1830 [ 188.123378][T10907] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 188.123426][T10907] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.123447][T10907] ? sock_rps_record_flow+0x19/0x410 [ 188.123472][T10907] ? inet_sendmsg+0x2f4/0x370 [ 188.123493][T10907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.123518][T10907] __sock_sendmsg+0x19c/0x270 [ 188.123542][T10907] sock_write_iter+0x279/0x360 [ 188.123563][T10907] ? __pfx_sock_write_iter+0x10/0x10 [ 188.123605][T10907] do_iter_readv_writev+0x623/0x8c0 [ 188.123632][T10907] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 188.123650][T10907] ? common_file_perm+0x1b5/0x230 [ 188.123673][T10907] ? bpf_lsm_file_permission+0x9/0x20 [ 188.123694][T10907] ? security_file_permission+0x75/0x290 [ 188.123720][T10907] ? rw_verify_area+0x255/0x4d0 [ 188.123739][T10907] vfs_writev+0x31a/0x960 [ 188.123764][T10907] ? __lock_acquire+0xab9/0xd20 [ 188.123785][T10907] ? __pfx_vfs_writev+0x10/0x10 [ 188.123822][T10907] ? __fget_files+0x2a/0x420 [ 188.123844][T10907] ? __fget_files+0x3a0/0x420 [ 188.123861][T10907] ? __fget_files+0x2a/0x420 [ 188.123889][T10907] do_writev+0x14d/0x2d0 [ 188.123911][T10907] ? __pfx_do_writev+0x10/0x10 [ 188.123937][T10907] ? do_syscall_64+0xbe/0xfa0 [ 188.123955][T10907] do_syscall_64+0xfa/0xfa0 [ 188.123970][T10907] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.123987][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.124004][T10907] ? clear_bhb_loop+0x60/0xb0 [ 188.124033][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.124050][T10907] RIP: 0033:0x7efe3f18efc9 [ 188.124070][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.124083][T10907] RSP: 002b:00007efe400ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 188.124101][T10907] RAX: ffffffffffffffda RBX: 00007efe3f3e5fa0 RCX: 00007efe3f18efc9 [ 188.124113][T10907] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000009 [ 188.124123][T10907] RBP: 00007efe400ac090 R08: 0000000000000000 R09: 0000000000000000 [ 188.124133][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.124142][T10907] R13: 00007efe3f3e6038 R14: 00007efe3f3e5fa0 R15: 00007ffcd4f32218 [ 188.124171][T10907] [ 188.204423][T10909] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 188.261925][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 188.351530][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 188.505131][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 188.633943][T10921] netlink: 'syz.2.1445': attribute type 6 has an invalid length. [ 189.284438][T10968] __nla_validate_parse: 2 callbacks suppressed [ 189.284456][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 189.328962][T10968] netlink: 'syz.3.1462': attribute type 30 has an invalid length. [ 189.479183][T10977] bridge9: entered promiscuous mode [ 189.484759][T10977] bridge9: entered allmulticast mode [ 189.917108][T11004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.994018][T11011] FAULT_INJECTION: forcing a failure. [ 189.994018][T11011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.007338][T11011] CPU: 1 UID: 0 PID: 11011 Comm: syz.2.1477 Not tainted syzkaller #0 PREEMPT(full) [ 190.007362][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.007372][T11011] Call Trace: [ 190.007379][T11011] [ 190.007386][T11011] dump_stack_lvl+0x189/0x250 [ 190.007410][T11011] ? __pfx____ratelimit+0x10/0x10 [ 190.007436][T11011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.007454][T11011] ? __pfx__printk+0x10/0x10 [ 190.007473][T11011] ? __might_fault+0xb0/0x130 [ 190.007502][T11011] should_fail_ex+0x414/0x560 [ 190.007534][T11011] _copy_from_user+0x2d/0xb0 [ 190.007557][T11011] ___sys_sendmsg+0x158/0x2a0 [ 190.007578][T11011] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.007633][T11011] ? __fget_files+0x2a/0x420 [ 190.007653][T11011] ? __fget_files+0x3a0/0x420 [ 190.007683][T11011] __x64_sys_sendmsg+0x19b/0x260 [ 190.007703][T11011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.007727][T11011] ? __pfx_ksys_write+0x10/0x10 [ 190.007750][T11011] ? do_syscall_64+0xbe/0xfa0 [ 190.007770][T11011] do_syscall_64+0xfa/0xfa0 [ 190.007786][T11011] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.007803][T11011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.007820][T11011] ? clear_bhb_loop+0x60/0xb0 [ 190.007848][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.007864][T11011] RIP: 0033:0x7efe3f18efc9 [ 190.007880][T11011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.007894][T11011] RSP: 002b:00007efe400ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.007912][T11011] RAX: ffffffffffffffda RBX: 00007efe3f3e5fa0 RCX: 00007efe3f18efc9 [ 190.007925][T11011] RDX: 0000000020000810 RSI: 0000200000000100 RDI: 0000000000000003 [ 190.007936][T11011] RBP: 00007efe400ac090 R08: 0000000000000000 R09: 0000000000000000 [ 190.007947][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.007956][T11011] R13: 00007efe3f3e6038 R14: 00007efe3f3e5fa0 R15: 00007ffcd4f32218 [ 190.007987][T11011] [ 190.237667][T11013] openvswitch: netlink: IP tunnel dst address not specified [ 190.416451][T11021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.605579][T11044] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 190.684445][T11051] FAULT_INJECTION: forcing a failure. [ 190.684445][T11051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.693624][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 190.698131][T11051] CPU: 1 UID: 0 PID: 11051 Comm: syz.2.1487 Not tainted syzkaller #0 PREEMPT(full) [ 190.698154][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.698163][T11051] Call Trace: [ 190.698171][T11051] [ 190.698178][T11051] dump_stack_lvl+0x189/0x250 [ 190.698202][T11051] ? __pfx____ratelimit+0x10/0x10 [ 190.698228][T11051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.698246][T11051] ? __pfx__printk+0x10/0x10 [ 190.698276][T11051] should_fail_ex+0x414/0x560 [ 190.698306][T11051] _copy_to_user+0x31/0xb0 [ 190.698331][T11051] simple_read_from_buffer+0xe1/0x170 [ 190.698357][T11051] proc_fail_nth_read+0x1b3/0x220 [ 190.698385][T11051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.698412][T11051] ? rw_verify_area+0x2a6/0x4d0 [ 190.698428][T11051] ? __lock_acquire+0xab9/0xd20 [ 190.698447][T11051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.698473][T11051] vfs_read+0x200/0xa30 [ 190.698490][T11051] ? fdget_pos+0x247/0x320 [ 190.698513][T11051] ? __pfx___mutex_lock+0x10/0x10 [ 190.698532][T11051] ? __pfx_vfs_read+0x10/0x10 [ 190.698551][T11051] ? __fget_files+0x2a/0x420 [ 190.698574][T11051] ? __fget_files+0x3a0/0x420 [ 190.698593][T11051] ? __fget_files+0x2a/0x420 [ 190.698621][T11051] ksys_read+0x145/0x250 [ 190.698641][T11051] ? __pfx_ksys_read+0x10/0x10 [ 190.698663][T11051] ? do_syscall_64+0xbe/0xfa0 [ 190.698684][T11051] do_syscall_64+0xfa/0xfa0 [ 190.698699][T11051] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.698715][T11051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.698731][T11051] ? clear_bhb_loop+0x60/0xb0 [ 190.698752][T11051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.698774][T11051] RIP: 0033:0x7efe3f18d9dc [ 190.698790][T11051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.698804][T11051] RSP: 002b:00007efe400ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.698822][T11051] RAX: ffffffffffffffda RBX: 00007efe3f3e5fa0 RCX: 00007efe3f18d9dc [ 190.698835][T11051] RDX: 000000000000000f RSI: 00007efe400ac0a0 RDI: 000000000000000b [ 190.698845][T11051] RBP: 00007efe400ac090 R08: 0000000000000000 R09: 0000000000000000 [ 190.698855][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.698865][T11051] R13: 00007efe3f3e6038 R14: 00007efe3f3e5fa0 R15: 00007ffcd4f32218 [ 190.698896][T11051] [ 190.722501][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 190.900381][T11057] netlink: 'syz.2.1488': attribute type 1 has an invalid length. [ 191.076635][T11063] FAULT_INJECTION: forcing a failure. [ 191.076635][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.113131][T11063] CPU: 0 UID: 0 PID: 11063 Comm: syz.4.1491 Not tainted syzkaller #0 PREEMPT(full) [ 191.113156][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.113166][T11063] Call Trace: [ 191.113173][T11063] [ 191.113181][T11063] dump_stack_lvl+0x189/0x250 [ 191.113204][T11063] ? __pfx____ratelimit+0x10/0x10 [ 191.113227][T11063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.113243][T11063] ? __pfx__printk+0x10/0x10 [ 191.113273][T11063] should_fail_ex+0x414/0x560 [ 191.113302][T11063] _copy_from_user+0x2d/0xb0 [ 191.113326][T11063] __copy_msghdr+0x3c5/0x5b0 [ 191.113355][T11063] ___sys_sendmsg+0x1a5/0x2a0 [ 191.113374][T11063] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.113425][T11063] ? __fget_files+0x2a/0x420 [ 191.113446][T11063] ? __fget_files+0x3a0/0x420 [ 191.113477][T11063] __x64_sys_sendmsg+0x19b/0x260 [ 191.113497][T11063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.113523][T11063] ? __pfx_ksys_write+0x10/0x10 [ 191.113545][T11063] ? do_syscall_64+0xbe/0xfa0 [ 191.113566][T11063] do_syscall_64+0xfa/0xfa0 [ 191.113582][T11063] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.113600][T11063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.113617][T11063] ? clear_bhb_loop+0x60/0xb0 [ 191.113638][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.113654][T11063] RIP: 0033:0x7f02cf38efc9 [ 191.113671][T11063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.113683][T11063] RSP: 002b:00007f02d0208038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.113700][T11063] RAX: ffffffffffffffda RBX: 00007f02cf5e5fa0 RCX: 00007f02cf38efc9 [ 191.113711][T11063] RDX: 0000000020000810 RSI: 0000200000000100 RDI: 0000000000000003 [ 191.113720][T11063] RBP: 00007f02d0208090 R08: 0000000000000000 R09: 0000000000000000 [ 191.113730][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.113739][T11063] R13: 00007f02cf5e6038 R14: 00007f02cf5e5fa0 R15: 00007ffd03f7e958 [ 191.113767][T11063] [ 191.329922][T11066] tipc: Enabled bearer , priority 0 [ 191.337517][T11071] tipc: Enabling of bearer rejected, already enabled [ 191.355948][T11070] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 191.357182][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1493'. [ 191.384456][T11070] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 191.392579][T11066] syzkaller0: entered promiscuous mode [ 191.399490][T11066] syzkaller0: entered allmulticast mode [ 191.411629][T11064] tipc: Resetting bearer [ 191.444922][T11064] tipc: Disabling bearer [ 191.649569][T11086] vxcan2: entered allmulticast mode [ 191.699328][T11075] wg1 speed is unknown, defaulting to 1000 [ 192.138427][T11089] wg1 speed is unknown, defaulting to 1000 [ 192.203571][T11094] tipc: Enabled bearer , priority 0 [ 192.313407][T11094] syzkaller0: entered promiscuous mode [ 192.332909][T11094] syzkaller0: entered allmulticast mode [ 192.373244][T11095] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 192.522720][T11095] tipc: Resetting bearer [ 192.593800][T11093] tipc: Resetting bearer [ 192.614844][T11093] tipc: Disabling bearer [ 192.849188][T11104] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1501'. [ 192.899229][T11104] batadv2: entered promiscuous mode [ 192.904479][T11104] batadv2: entered allmulticast mode [ 193.203296][T11117] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 193.216565][T11117] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1506'. [ 193.236173][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 193.280625][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1507'. [ 193.384323][T11124] tipc: Enabled bearer , priority 0 [ 193.422477][T11128] tls_set_device_offload: netdev not found [ 193.425309][T11124] syzkaller0: entered promiscuous mode [ 193.430555][T11128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1509'. [ 193.444400][T11124] syzkaller0: entered allmulticast mode [ 193.508807][T11124] tipc: Resetting bearer [ 193.522692][T11123] tipc: Resetting bearer [ 193.564542][T11123] tipc: Disabling bearer [ 193.921447][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1518'. [ 194.177246][ T5827] Bluetooth: hci4: link tx timeout [ 194.183942][ T5827] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.273959][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460330][T11170] veth3: entered promiscuous mode [ 194.519326][T11161] wg1 speed is unknown, defaulting to 1000 [ 194.615898][T11177] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 194.696834][T11185] __nla_validate_parse: 1 callbacks suppressed [ 194.696852][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'. [ 194.757863][T11177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.002300][T11186] syzkaller1: entered promiscuous mode [ 195.023123][T11186] syzkaller1: entered allmulticast mode [ 195.693497][T11203] dvmrp1: entered allmulticast mode [ 195.758629][T11203] wg1 speed is unknown, defaulting to 1000 [ 196.265163][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 196.345083][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.346187][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.351151][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 196.498330][T11225] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 197.124778][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 197.198627][T11257] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 197.600555][T11274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1536'. [ 197.700445][T11281] netlink: 'syz.3.1540': attribute type 11 has an invalid length. [ 197.738600][T11282] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1539'. [ 197.796068][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1539'. [ 198.073673][T11304] dvmrp1: left allmulticast mode [ 198.168934][T11310] Àÿ: renamed from team_slave_1 (while UP) [ 198.200495][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'. [ 198.221737][T11318] netlink: 'syz.3.1548': attribute type 4 has an invalid length. [ 198.472179][T11328] sctp: [Deprecated]: syz.2.1550 (pid 11328) Use of int in maxseg socket option. [ 198.472179][T11328] Use struct sctp_assoc_value instead [ 198.547767][T11343] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1556'. [ 198.561142][T11346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1554'. [ 198.570752][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 198.589728][T11343] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1556'. [ 198.736876][T11350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.797392][T11355] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 199.888277][T11388] __nla_validate_parse: 5 callbacks suppressed [ 199.888296][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 199.939685][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 199.974991][T11405] netlink: 'syz.4.1571': attribute type 12 has an invalid length. [ 200.083947][T10084] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.086381][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 200.094885][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 200.136647][T10084] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.150644][T10084] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.167830][T10084] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.213215][T11407] wg1 speed is unknown, defaulting to 1000 [ 200.443850][T11426] netlink: 3704 bytes leftover after parsing attributes in process `syz.0.1579'. [ 200.453141][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 200.464680][T11423] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1578'. [ 200.541416][T11426] tipc: Failed to remove unknown binding: 66,1,1/4:2366203112/2366203114 [ 200.583347][T11426] tipc: Failed to remove unknown binding: 66,1,1/4:2366203112/2366203114 [ 200.646303][T11421] wg1 speed is unknown, defaulting to 1000 [ 200.782680][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 200.930145][T11438] team0: entered promiscuous mode [ 200.957408][T11438] team0: entered allmulticast mode [ 200.970027][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.524263][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 201.568995][T11482] xt_TCPMSS: Only works on TCP SYN packets [ 201.641736][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 201.859197][T11503] wg1 speed is unknown, defaulting to 1000 [ 202.245129][T11534] siw: device registration error -23 [ 202.494350][T11549] bridge_slave_1: left allmulticast mode [ 202.504138][T11549] bridge_slave_1: left promiscuous mode [ 202.511577][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.536182][T11549] bridge_slave_0: left allmulticast mode [ 202.563387][T11549] bridge_slave_0: left promiscuous mode [ 202.582603][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.849806][T11564] vlan3: entered allmulticast mode [ 203.041578][T11560] wg1 speed is unknown, defaulting to 1000 [ 203.171001][T11586] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 204.576936][ T43] IPVS: starting estimator thread 0... [ 204.668510][T11656] IPVS: using max 24 ests per chain, 57600 per kthread [ 205.079738][T11659] __nla_validate_parse: 5 callbacks suppressed [ 205.079758][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1646'. [ 205.096198][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 205.579282][T11625] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 205.589549][T11625] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 205.593025][T11634] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 205.607279][T11634] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 205.618117][T11634] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 205.831388][T11670] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 205.859616][T11670] netlink: 'syz.3.1649': attribute type 6 has an invalid length. [ 205.895932][T11670] netlink: 'syz.3.1649': attribute type 3 has an invalid length. [ 206.092479][T11683] veth0_to_team: left promiscuous mode [ 206.170794][T11683] ip6gretap1: left promiscuous mode [ 206.251523][ T5828] wg1 speed is unknown, defaulting to 1000 [ 206.303174][T11686] tipc: Enabled bearer , priority 0 [ 206.406541][T11686] syzkaller0: entered promiscuous mode [ 206.412497][T11686] syzkaller0: entered allmulticast mode [ 206.633360][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1664'. [ 206.858577][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 206.867780][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 206.876877][T11737] netlink: 'syz.0.1667': attribute type 18 has an invalid length. [ 206.963518][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1667'. [ 206.979775][T11744] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1667'. [ 206.996168][T11744] netlink: 'syz.0.1667': attribute type 6 has an invalid length. [ 207.004161][T11744] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1667'. [ 208.093299][T11686] tipc: Resetting bearer [ 208.100409][T11685] tipc: Resetting bearer [ 208.119201][T11685] tipc: Disabling bearer [ 208.538169][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 208.569292][T11787] pimreg: entered allmulticast mode [ 208.699012][T11797] tipc: Enabled bearer , priority 0 [ 208.713649][T11797] syzkaller0: entered promiscuous mode [ 208.728101][T11797] syzkaller0: entered allmulticast mode [ 208.806647][T11802] tipc: Resetting bearer [ 208.815045][T11796] tipc: Resetting bearer [ 208.872860][T11796] tipc: Disabling bearer [ 208.897108][T11812] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1685'. [ 209.006687][T11801] wg1 speed is unknown, defaulting to 1000 [ 209.339744][T11823] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 209.356374][T11826] bridge9: entered allmulticast mode [ 209.380402][T11823] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 209.658591][T11841] openvswitch: netlink: Message has 4 unknown bytes. [ 210.073221][T11860] vxcan1: entered allmulticast mode [ 210.081349][T11860] vxcan1: left allmulticast mode [ 210.086662][T11860] pim6reg: left allmulticast mode [ 210.155242][T11863] wg1 speed is unknown, defaulting to 1000 [ 210.341802][T11870] __nla_validate_parse: 4 callbacks suppressed [ 210.341819][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 210.440371][T11881] x_tables: ip_tables: osf match: only valid for protocol 6 [ 210.465154][T11883] netlink: 'syz.2.1713': attribute type 11 has an invalid length. [ 211.165863][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'. [ 211.216599][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 211.248017][T11933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 211.323326][T11935] tipc: Enabled bearer , priority 0 [ 211.345729][T11935] syzkaller0: entered promiscuous mode [ 211.351230][T11935] syzkaller0: entered allmulticast mode [ 211.421301][T11935] tipc: Resetting bearer [ 211.439942][T11934] tipc: Resetting bearer [ 211.477632][T11934] tipc: Disabling bearer [ 211.536702][T11950] wg1 speed is unknown, defaulting to 1000 [ 211.694586][T11964] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 211.980251][T11989] tipc: Enabling of bearer rejected, already enabled [ 211.996501][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 212.009208][T11991] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 212.023566][T11992] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1745'. [ 212.038006][T11991] bond0: (slave dummy0): Releasing backup interface [ 212.055813][T11991] dummy0: left promiscuous mode [ 212.099861][T11991] dummy0: entered promiscuous mode [ 212.161762][T11991] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 212.223494][T11991] team0: Failed to send options change via netlink (err -105) [ 212.239514][T12006] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 212.257654][T12006] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1748'. [ 212.285025][T11991] team0: Port device dummy0 added [ 212.404419][T12010] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 212.473078][T11992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.484512][T11992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.495254][T11992] bond0 (unregistering): Released all slaves [ 212.521510][T12012] erspan0: entered allmulticast mode [ 212.588031][T12010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 212.649780][T12011] bond8: (slave ip6gretap3): making interface the new active one [ 212.664405][T12011] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link [ 212.717170][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 212.733264][T12011] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 213.132655][T12041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1758'. [ 213.201286][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 213.242335][T12048] vlan2: entered allmulticast mode [ 213.247986][T12048] hsr0: entered allmulticast mode [ 213.253363][T12048] hsr_slave_0: entered allmulticast mode [ 213.278334][T12049] syzkaller0: entered promiscuous mode [ 213.297235][T12049] syzkaller0: entered allmulticast mode [ 213.679320][T12076] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 213.720250][T12076] bond3: entered promiscuous mode [ 213.735214][T12076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.063284][T12095] netlink: 'syz.0.1774': attribute type 39 has an invalid length. [ 214.202587][T12103] netlink: 'syz.2.1779': attribute type 2 has an invalid length. [ 214.328881][T12106] No such timeout policy "syz1" [ 214.564504][T12116] can: request_module (can-proto-0) failed. [ 215.172664][T12128] veth5: entered promiscuous mode [ 215.379732][T12138] !: renamed from dummy0 (while UP) [ 215.432201][T12138] __nla_validate_parse: 7 callbacks suppressed [ 215.432220][T12138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1790'. [ 215.532758][T12143] wg1 speed is unknown, defaulting to 1000 [ 215.620173][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 215.690089][T12145] wg1 speed is unknown, defaulting to 1000 [ 215.906540][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 215.948688][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'. [ 215.961623][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'. [ 216.412748][T12174] wg1 speed is unknown, defaulting to 1000 [ 216.421943][T12172] wg1 speed is unknown, defaulting to 1000 [ 216.440256][T12177] blkio.reset_stats is deprecated [ 217.273573][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 217.420339][T12196] gretap1: entered promiscuous mode [ 217.425705][T12196] gretap1: entered allmulticast mode [ 217.479510][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 217.517956][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 217.548544][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 217.587028][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 217.840867][T12217] erspan0: left allmulticast mode [ 217.876723][T12217] bridge0: port 4(bond0) entered blocking state [ 217.883194][T12217] bridge0: port 4(bond0) entered forwarding state [ 217.889994][T12217] bridge0: port 3(0!) entered blocking state [ 217.896337][T12217] bridge0: port 3(0!) entered forwarding state [ 217.902950][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.910175][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.917679][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.924917][T12217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.945266][T12217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.060796][T12201] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 218.147333][T12241] netlink: 'syz.2.1810': attribute type 9 has an invalid length. [ 218.187924][T12241] netlink: 'syz.2.1810': attribute type 5 has an invalid length. [ 218.228987][T12241] geneve2: entered promiscuous mode [ 218.243873][T12241] geneve2: entered allmulticast mode [ 218.255789][T10098] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 218.264213][T10098] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 218.281671][T12241] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.298059][T10098] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 218.438222][T12256] wg1 speed is unknown, defaulting to 1000 [ 219.542779][T12315] tipc: Failed to remove unknown binding: 66,1,1/3892257724:2853803753/2853803755 [ 219.552548][T12315] tipc: Failed to remove unknown binding: 66,1,1/3892257724:2853803753/2853803755 [ 219.554751][T12309] wg1 speed is unknown, defaulting to 1000 [ 219.890405][T12241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.930413][T12241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 220.015851][T12241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.034579][T12241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 220.105711][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 220.140151][T12241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.173267][T12241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 220.391333][T12363] netlink: 'syz.4.1848': attribute type 10 has an invalid length. [ 220.427826][T12363] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 220.495549][T10090] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 220.513883][T10090] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.611532][T10090] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 220.620536][T10090] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.910084][T10090] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 220.938394][T10090] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.055068][T10090] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 221.093654][T10090] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.383110][T12368] __nla_validate_parse: 23 callbacks suppressed [ 221.383131][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'. [ 221.445646][T12377] syzkaller0: entered promiscuous mode [ 221.451160][T12377] syzkaller0: entered allmulticast mode [ 221.459030][T12368] IPVS: Unknown mcast interface: ipvlan1 [ 221.870847][T12404] wg1 speed is unknown, defaulting to 1000 [ 221.983160][T12411] netlink: 'syz.2.1860': attribute type 12 has an invalid length. [ 221.999708][T12411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1860'. [ 222.192667][T12420] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 222.274824][T12435] netlink: 'syz.4.1866': attribute type 1 has an invalid length. [ 222.283017][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'. [ 222.312657][T12435] netlink: 'syz.4.1866': attribute type 1 has an invalid length. [ 222.373169][T12438] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1866'. [ 222.436409][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 222.497190][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 222.574807][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 222.583908][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'. [ 223.539742][T12423] veth7: entered promiscuous mode [ 223.581214][T12420] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 223.595433][T12435] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 223.613711][T12451] kthread_run failed with err -4 [ 223.656219][T12463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.842660][T12477] netlink: 'syz.4.1873': attribute type 21 has an invalid length. [ 223.851041][T12477] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1873'. [ 223.862898][T12477] netlink: 'syz.4.1873': attribute type 4 has an invalid length. [ 223.875066][T12477] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1873'. [ 224.172863][T12498] FAULT_INJECTION: forcing a failure. [ 224.172863][T12498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.204901][T12498] CPU: 1 UID: 0 PID: 12498 Comm: syz.4.1881 Not tainted syzkaller #0 PREEMPT(full) [ 224.204927][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.204938][T12498] Call Trace: [ 224.204946][T12498] [ 224.204954][T12498] dump_stack_lvl+0x189/0x250 [ 224.204978][T12498] ? __pfx____ratelimit+0x10/0x10 [ 224.205004][T12498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.205022][T12498] ? __pfx__printk+0x10/0x10 [ 224.205040][T12498] ? __might_fault+0xb0/0x130 [ 224.205070][T12498] should_fail_ex+0x414/0x560 [ 224.205101][T12498] _copy_from_iter+0x1de/0x1790 [ 224.205127][T12498] ? rcu_is_watching+0x15/0xb0 [ 224.205154][T12498] ? kmalloc_reserve+0xbd/0x290 [ 224.205178][T12498] ? __pfx__copy_from_iter+0x10/0x10 [ 224.205199][T12498] ? __build_skb_around+0x262/0x3f0 [ 224.205224][T12498] ? netlink_sendmsg+0x642/0xb30 [ 224.205247][T12498] ? skb_put+0x11b/0x210 [ 224.205274][T12498] netlink_sendmsg+0x6b2/0xb30 [ 224.205306][T12498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.205332][T12498] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.205352][T12498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.205372][T12498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.205396][T12498] __sock_sendmsg+0x21c/0x270 [ 224.205419][T12498] ____sys_sendmsg+0x52d/0x830 [ 224.205454][T12498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.205489][T12498] ? import_iovec+0x74/0xa0 [ 224.205515][T12498] ___sys_sendmsg+0x21f/0x2a0 [ 224.205534][T12498] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.205586][T12498] ? __fget_files+0x2a/0x420 [ 224.205606][T12498] ? __fget_files+0x3a0/0x420 [ 224.205636][T12498] __sys_sendmmsg+0x227/0x430 [ 224.205659][T12498] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.205686][T12498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.205723][T12498] ? ksys_write+0x22a/0x250 [ 224.205745][T12498] ? __pfx_ksys_write+0x10/0x10 [ 224.205769][T12498] __x64_sys_sendmmsg+0xa0/0xc0 [ 224.205788][T12498] do_syscall_64+0xfa/0xfa0 [ 224.205805][T12498] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.205822][T12498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.205839][T12498] ? clear_bhb_loop+0x60/0xb0 [ 224.205860][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.205877][T12498] RIP: 0033:0x7f02cf38efc9 [ 224.205894][T12498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.205909][T12498] RSP: 002b:00007f02d0208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.205933][T12498] RAX: ffffffffffffffda RBX: 00007f02cf5e5fa0 RCX: 00007f02cf38efc9 [ 224.205946][T12498] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 224.205958][T12498] RBP: 00007f02d0208090 R08: 0000000000000000 R09: 0000000000000000 [ 224.205969][T12498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.205980][T12498] R13: 00007f02cf5e6038 R14: 00007f02cf5e5fa0 R15: 00007ffd03f7e958 [ 224.206011][T12498] [ 224.737633][T12511] sctp: [Deprecated]: syz.2.1886 (pid 12511) Use of int in max_burst socket option deprecated. [ 224.737633][T12511] Use struct sctp_assoc_value instead [ 224.774423][T12512] sctp: [Deprecated]: syz.2.1886 (pid 12512) Use of int in max_burst socket option deprecated. [ 224.774423][T12512] Use struct sctp_assoc_value instead [ 225.163975][T12540] Bluetooth: hci0: unsupported parameter 512 [ 225.173970][T12540] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 225.199249][T12539] IPv6: sit3: Disabled Multicast RS [ 225.217917][T12545] veth1_to_bond: entered allmulticast mode [ 225.331384][T12545] bond0: (slave bond_slave_1): Releasing backup interface [ 225.390701][T12545] veth1_to_bond (unregistering): left allmulticast mode [ 225.775189][T12579] netlink: 'syz.1.1905': attribute type 15 has an invalid length. [ 226.426789][T12629] __nla_validate_parse: 13 callbacks suppressed [ 226.426808][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1916'. [ 226.452902][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.470051][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.490749][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.526279][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.535730][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.576395][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.588482][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.637764][T12624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.644308][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.665083][T12628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 226.689223][T12624] rdma_rxe: rxe_newlink: failed to add syz_tun [ 226.834080][T12628] bridge0: port 4(bond0) entered disabled state [ 226.840700][T12628] bridge0: port 3(0!) entered disabled state [ 226.847044][T12628] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.854244][T12628] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.175920][T12628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.242428][T12628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.517128][T12633] bridge0: port 1(syz_tun) entered blocking state [ 227.523675][T12633] bridge0: port 1(syz_tun) entered disabled state [ 227.545803][T12633] syz_tun: entered allmulticast mode [ 227.552853][T12633] syz_tun: entered promiscuous mode [ 227.574746][ T5941] wg1 speed is unknown, defaulting to 1000 [ 227.580616][ T5941] syz0: Port: 1 Link DOWN [ 227.585336][T10084] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.594252][T10084] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.649907][T10084] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.681079][T10084] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.969754][T12667] debugfs: 'žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' already exists in 'ieee80211' [ 228.150648][T12691] netlink: 'syz.3.1932': attribute type 21 has an invalid length. [ 228.244151][T12688] erspan0: entered promiscuous mode [ 228.259205][T12691] netlink: 'syz.3.1932': attribute type 4 has an invalid length. [ 228.267634][T12691] netlink: 'syz.3.1932': attribute type 5 has an invalid length. [ 228.311247][T12682] wg1 speed is unknown, defaulting to 1000 [ 228.891529][T12739] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 228.919264][T12734] sch_tbf: peakrate 7 is lower than or equals to rate 9675163233977606466 ! [ 229.365113][T12767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 229.398639][T12775] openvswitch: netlink: IP tunnel dst address not specified [ 229.426902][T12771] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 229.435968][T12767] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 229.455517][T12767] !: left allmulticast mode [ 229.460148][T12767] !: left promiscuous mode [ 229.486292][T12767] bridge0: port 3(0!) entered disabled state [ 229.513412][T12767] team0: Port device 0! added [ 229.747972][T12799] wg1 speed is unknown, defaulting to 1000 [ 229.880455][T12812] wg1 speed is unknown, defaulting to 1000 [ 231.034101][T12858] Bluetooth: hci0: invalid length 39, exp 2 for type 8 [ 231.229011][T12881] netlink: 'syz.2.1975': attribute type 13 has an invalid length. [ 231.256591][T12881] netlink: 'syz.2.1975': attribute type 17 has an invalid length. [ 231.299008][T12881] lo: left promiscuous mode [ 231.323825][T12881] tunl0: left promiscuous mode [ 231.396781][T12881] gre0: left promiscuous mode [ 231.440610][T12893] __nla_validate_parse: 152 callbacks suppressed [ 231.440627][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 231.443653][T12881] gretap0: left promiscuous mode [ 231.471128][T12881] erspan0: left promiscuous mode [ 231.493509][T12881] ip_vti0: left promiscuous mode [ 231.496730][T12896] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1979'. [ 231.511873][T12881] ip6_vti0: left promiscuous mode [ 231.522265][T12881] sit0: left promiscuous mode [ 231.529791][T12881] ip6tnl0: left promiscuous mode [ 231.537449][T12881] ip6gre0: left promiscuous mode [ 231.547695][T12881] syz_tun: left promiscuous mode [ 231.567729][T12881] ip6gretap0: left promiscuous mode [ 231.583947][T12881] vcan0: left promiscuous mode [ 231.590842][T12881] bond0: left promiscuous mode [ 231.600836][T12881] bond_slave_0: left promiscuous mode [ 231.611447][T12881] bond_slave_1: left promiscuous mode [ 231.624260][T12881] team0: left promiscuous mode [ 231.632351][T12881] team_slave_0: left promiscuous mode [ 231.634757][T12901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1980'. [ 231.638276][T12881] team_slave_1: left promiscuous mode [ 231.653390][T12881] dummy0: left promiscuous mode [ 231.666231][T12881] nlmon0: left promiscuous mode [ 231.673818][T12881] caif0: left promiscuous mode [ 231.678945][T12881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.795615][T12885] wg1 speed is unknown, defaulting to 1000 [ 231.832115][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 231.857903][T12909] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 231.895295][T12906] xt_limit: Overflow, try lower: 271964/0 [ 231.978895][T12912] wg1 speed is unknown, defaulting to 1000 [ 232.062584][T12915] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1983'. [ 232.276931][T12927] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 232.308263][T12927] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1986'. [ 232.333560][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 232.354120][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 232.395191][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'. [ 232.428174][T12933] chnl_net:caif_netlink_parms(): no params data found [ 232.498544][T12938] wg1 speed is unknown, defaulting to 1000 [ 233.176152][T12968] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1996'. [ 233.307717][T12974] rdma_rxe: rxe_newlink: failed to add lo [ 233.587733][T12988] wg1 speed is unknown, defaulting to 1000 [ 233.787999][T12995] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 233.803096][T12995] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 233.878094][T12999] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 233.887167][T12999] tipc: Enabled bearer , priority 0 [ 233.894541][T12999] syzkaller0: entered promiscuous mode [ 233.904648][T12999] syzkaller0: entered allmulticast mode [ 233.951222][T12999] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 234.137846][T13013] tipc: Resetting bearer [ 234.185275][T13019] netlink: 'syz.2.2009': attribute type 10 has an invalid length. [ 234.256942][T13019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 234.288989][T13019] team0: Failed to send options change via netlink (err -105) [ 234.306046][T13019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 234.322307][T13019] team0: Port device dummy0 removed [ 234.331899][T13019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.341681][T12997] tipc: Resetting bearer [ 234.366489][T12997] tipc: Disabling bearer [ 234.379637][T13024] Cannot find set identified by id 3 to match [ 234.501022][T13026] wg1 speed is unknown, defaulting to 1000 [ 234.718221][T13044] 8021q: VLANs not supported on vxcan0 [ 236.104778][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 255.706949][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.368911][T13049] __nla_validate_parse: 74 callbacks suppressed [ 266.368930][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2019'. [ 266.464330][T13053] wg1 speed is unknown, defaulting to 1000 [ 266.527599][T13064] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 266.537800][T13064] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2020'. [ 266.639516][T13069] netlink: 'syz.0.2026': attribute type 29 has an invalid length. [ 266.672151][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 266.725462][T13062] syzkaller1: entered promiscuous mode [ 266.730969][T13062] syzkaller1: entered allmulticast mode [ 266.930641][T13085] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 267.141778][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 267.420144][T13123] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2036'. [ 267.436412][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 267.458526][T13119] netlink: 'syz.2.2037': attribute type 12 has an invalid length. [ 267.505236][T13132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2036'. [ 267.564456][T13128] wg1 speed is unknown, defaulting to 1000 [ 267.594314][T13136] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2040'. [ 267.770301][T13141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2042'. [ 267.811160][T13139] wg1 speed is unknown, defaulting to 1000 [ 267.832168][T13144] netlink: 'syz.3.2043': attribute type 13 has an invalid length. [ 268.124130][T13153] netlink: 'syz.0.2045': attribute type 1 has an invalid length. [ 268.160958][T13153] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 268.265490][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 268.779246][T13202] netlink: 'syz.3.2059': attribute type 13 has an invalid length. [ 268.787577][T13201] netlink: 'syz.3.2059': attribute type 13 has an invalid length. [ 269.001631][T13201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.014183][T13201] batman_adv: batadv0: Interface deactivated: 26±ÿ [ 269.247763][T10090] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.262536][T10090] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.282277][T10090] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.293432][T10090] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.303266][T10090] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.313315][T10090] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.349268][T10090] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.367969][T10090] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.436457][T10084] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 269.561177][T13230] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 269.574277][T13230] bond14 (unregistering): Released all slaves [ 269.618425][T13234] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.632355][T13238] bond0: left allmulticast mode [ 269.655184][T13238] bond_slave_0: left allmulticast mode [ 269.660899][T13238] bond_slave_1: left allmulticast mode [ 269.669854][T13238] bond0: left promiscuous mode [ 269.675191][T13238] bond_slave_0: left promiscuous mode [ 269.680893][T13238] bond_slave_1: left promiscuous mode [ 269.687074][T13238] bridge0: port 4(bond0) entered disabled state [ 269.734577][T13238] team0: Port device 0! removed [ 269.750043][T13238] bridge_slave_0: left promiscuous mode [ 269.756833][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.767051][T13238] bridge_slave_1: left allmulticast mode [ 269.772824][T13238] bridge_slave_1: left promiscuous mode [ 269.779927][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.792306][T13238] bond0: (slave bond_slave_0): Releasing backup interface [ 269.802046][T13238] bond0: (slave bond_slave_1): Releasing backup interface [ 269.812545][T13238] team0: Port device team_slave_0 removed [ 269.819909][T13238] team0: Port device team_slave_1 removed [ 269.826513][T13238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.835162][T13238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.843195][T13238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.968208][T13258] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 270.328959][T13267] syzkaller0: tun_chr_ioctl cmd 1342215183 [ 270.336356][T13267] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 270.342318][T13267] syzkaller0: linktype set to 0 [ 270.512638][T13278] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 270.549947][T13285] netlink: 'syz.0.2081': attribute type 13 has an invalid length. [ 270.667471][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 271.255858][T13321] ip6gre2: entered allmulticast mode [ 271.278444][T13321] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 271.321405][T13321] netlink: 'syz.2.2092': attribute type 4 has an invalid length. [ 271.355538][T13321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.734376][T13337] wg1 speed is unknown, defaulting to 1000 [ 271.743786][T13343] __nla_validate_parse: 10 callbacks suppressed [ 271.743803][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2099'. [ 271.809879][T13346] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2099'. [ 271.819570][T13346] openvswitch: netlink: Message has 512 unknown bytes. [ 272.098883][T13367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2106'. [ 272.212373][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 272.229546][T13375] syzkaller1: entered promiscuous mode [ 272.258274][T13375] syzkaller1: entered allmulticast mode [ 272.289518][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 272.327508][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 272.360541][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 272.374256][T13369] syzkaller1: left promiscuous mode [ 272.387669][T13369] syzkaller1: left allmulticast mode [ 272.449495][T13382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2110'. [ 272.630822][T13396] tipc: Started in network mode [ 272.635969][T13396] tipc: Node identity , cluster identity 4711 [ 272.642086][T13396] tipc: Failed to obtain node identity [ 272.647615][T13396] tipc: Enabling of bearer rejected, failed to enable media [ 272.691613][T13396] syzkaller0: entered promiscuous mode [ 272.697836][T13396] syzkaller0: entered allmulticast mode [ 273.037314][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2121'. [ 273.281575][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2122'. [ 274.260958][T13425] bond0: (slave bridge0): Releasing backup interface [ 274.281441][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.288891][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.315367][T13425] `: Port device dummy0 removed [ 274.338476][T13425] bridge_slave_0: left allmulticast mode [ 274.344275][T13425] bridge_slave_0: left promiscuous mode [ 274.350330][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.361422][T13425] bridge_slave_1: left allmulticast mode [ 274.367398][T13425] bridge_slave_1: left promiscuous mode [ 274.373142][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.383441][T13425] bond0: (slave 30): Releasing backup interface [ 274.398060][T13425] `: Port device team_slave_0 removed [ 274.408359][T13425] `: Port device 52Àÿ removed [ 274.413965][T13425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.422129][T13425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.430910][T13425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.438655][T13425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.448393][T13425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.483973][T13426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.686479][T13449] lo: Caught tx_queue_len zero misconfig [ 274.796045][T13455] wg1 speed is unknown, defaulting to 1000 [ 274.861240][T13462] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 275.096637][T13476] tipc: Enabled bearer , priority 0 [ 275.231739][T13476] syzkaller0: entered promiscuous mode [ 275.265795][T13476] syzkaller0: entered allmulticast mode [ 276.595789][T13481] tipc: Resetting bearer [ 276.650692][T13475] tipc: Resetting bearer [ 276.667387][T13475] tipc: Disabling bearer [ 276.718396][T13489] wg1 speed is unknown, defaulting to 1000 [ 276.740980][T13488] wg1 speed is unknown, defaulting to 1000 [ 276.905256][T13502] validate_nla: 1 callbacks suppressed [ 276.905274][T13502] netlink: 'syz.0.2145': attribute type 1 has an invalid length. [ 276.923935][T13502] netlink: 'syz.0.2145': attribute type 2 has an invalid length. [ 276.933344][T13502] __nla_validate_parse: 2 callbacks suppressed [ 276.933360][T13502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2145'. [ 277.063831][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 277.076895][T13515] netlink: 'syz.1.2147': attribute type 2 has an invalid length. [ 277.428678][T13535] wg1 speed is unknown, defaulting to 1000 [ 277.443338][T13525] netlink: 'syz.4.2150': attribute type 1 has an invalid length. [ 277.518198][T13539] tipc: Enabled bearer , priority 0 [ 277.562920][T13539] syzkaller0: entered promiscuous mode [ 277.568572][T13539] syzkaller0: entered allmulticast mode [ 277.841310][T13549] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 278.964501][T13541] tipc: Resetting bearer [ 278.995546][T13549] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.028837][T13538] tipc: Resetting bearer [ 279.081413][T13538] tipc: Disabling bearer [ 279.092903][T13561] tipc: Enabling of bearer rejected, failed to enable media [ 279.230927][T13577] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 279.404077][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 279.460866][T13586] wg1 speed is unknown, defaulting to 1000 [ 279.541270][T13589] wg1 speed is unknown, defaulting to 1000 [ 279.603555][T13601] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 279.636564][T13601] x_tables: ip_tables: ah match: only valid for protocol 51 [ 279.722834][T13610] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 279.784091][T13610] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 279.904446][T13623] netlink: 'syz.2.2177': attribute type 6 has an invalid length. [ 279.911907][T13610] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.920371][T13618] macvlan1: entered allmulticast mode [ 279.943911][T13618] veth1_vlan: entered allmulticast mode [ 279.962105][T13618] bond12: (slave macvlan1): Enslaving as an active interface with a down link [ 280.118731][T13622] tipc: Enabled bearer , priority 0 [ 280.154112][T13643] ieee802154 phy1 wpan1: encryption failed: -90 [ 280.186551][T13617] syzkaller0: entered promiscuous mode [ 280.196952][T13617] syzkaller0: entered allmulticast mode [ 280.222969][T13646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2183'. [ 281.426145][T13617] tipc: Resetting bearer [ 281.444954][T13647] dummy0: entered allmulticast mode [ 281.451879][T13651] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 281.452546][T13614] tipc: Resetting bearer [ 281.484469][T13614] tipc: Disabling bearer [ 281.519430][T13647] dummy0: left allmulticast mode [ 281.711602][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'. [ 281.955108][ T9] IPVS: starting estimator thread 0... [ 282.045797][T13683] IPVS: using max 26 ests per chain, 62400 per kthread [ 282.122870][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2194'. [ 282.165899][T13693] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2195'. [ 282.223066][T13701] wg1 speed is unknown, defaulting to 1000 [ 282.235966][T13691] netlink: 'syz.2.2194': attribute type 29 has an invalid length. [ 282.685447][T13713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'. [ 282.695125][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'. [ 282.704292][T13713] netlink: 'syz.0.2198': attribute type 7 has an invalid length. [ 282.712859][T13712] netlink: 'syz.0.2198': attribute type 7 has an invalid length. [ 282.720837][T13713] netlink: 'syz.0.2198': attribute type 8 has an invalid length. [ 282.724228][T13712] netlink: 'syz.0.2198': attribute type 8 has an invalid length. [ 282.730315][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 282.737105][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 282.763850][T13713] syz_tun: entered promiscuous mode [ 282.772303][T13713] syz_tun: left promiscuous mode [ 282.794153][T13712] syz_tun: entered promiscuous mode [ 282.800588][T13712] syz_tun: left promiscuous mode [ 283.306138][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 283.334021][T13737] wg1 speed is unknown, defaulting to 1000 [ 283.455812][T13739] syz_tun (unregistering): left allmulticast mode [ 283.474045][T13749] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 283.476297][T13739] syz_tun (unregistering): left promiscuous mode [ 283.503817][T13739] bridge0: port 1(syz_tun) entered disabled state [ 283.652915][T13760] netlink: 'syz.2.2214': attribute type 9 has an invalid length. [ 283.722853][T13764] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20001 [ 284.030259][T13779] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2218'. [ 284.133850][T13788] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 284.141983][T13788] netlink: 9864 bytes leftover after parsing attributes in process `syz.0.2218'. [ 284.152355][T13788] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 284.164354][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 284.944895][T13820] netlink: 'syz.0.2233': attribute type 13 has an invalid length. [ 284.952748][T13820] netlink: 'syz.0.2233': attribute type 17 has an invalid length. [ 285.123706][T13820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.177801][T13821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.457109][T13834] bond7: option downdelay: invalid value (18446744073709551615) [ 285.465981][T13834] bond7: option downdelay: allowed values 0 - 2147483647 [ 285.493685][T13834] bond7 (unregistering): Released all slaves [ 285.715624][T13845] wg1 speed is unknown, defaulting to 1000 [ 286.246265][T13877] wg1 speed is unknown, defaulting to 1000 [ 286.467345][T13885] pim6reg: entered allmulticast mode [ 286.783876][T13898] Can't find ip_set type hash:ip,por4 [ 286.812957][T13899] Can't find ip_set type hash:ip,por4 [ 287.252355][T13931] __nla_validate_parse: 11 callbacks suppressed [ 287.252374][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2264'. [ 287.318356][T13932] wg1 speed is unknown, defaulting to 1000 [ 287.443925][T13943] bridge: RTM_NEWNEIGH with invalid ether address [ 287.830590][T13958] scsi_nl_rcv_msg: discarding partial skb [ 287.870501][T13966] wg1 speed is unknown, defaulting to 1000 [ 288.241587][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2283'. [ 288.317814][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 288.536079][T14002] tipc: Enabled bearer , priority 0 [ 288.578643][T14002] syzkaller0: entered promiscuous mode [ 288.593644][T14002] syzkaller0: entered allmulticast mode [ 288.613756][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 289.168096][T14001] tipc: Resetting bearer [ 289.226386][T14001] tipc: Disabling bearer [ 289.321444][T14035] wg1 speed is unknown, defaulting to 1000 [ 289.346351][T14039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.475329][T14041] bond3: entered promiscuous mode [ 289.490896][T14041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.552513][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 289.854520][T14069] nbd: must specify a size in bytes for the device [ 289.898125][T14067] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2302'. [ 289.914030][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 289.918074][T14069] wg1 speed is unknown, defaulting to 1000 [ 289.956112][T14072] ip6gre1: entered allmulticast mode [ 290.007216][T14077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2303'. [ 290.032192][T14077] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2303'. [ 290.094965][T14077] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2303'. [ 290.434968][T14098] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 290.453823][T14095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.566922][T14107] netlink: 'syz.0.2313': attribute type 11 has an invalid length. [ 290.587705][T14107] validate_nla: 6 callbacks suppressed [ 290.587724][T14107] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 291.132278][T14137] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 291.278637][T14136] syzkaller1: entered promiscuous mode [ 291.308245][T14136] syzkaller1: entered allmulticast mode [ 294.308989][T14161] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.376953][T14167] netlink: 'syz.1.2327': attribute type 13 has an invalid length. [ 294.405648][T14167] netlink: 'syz.1.2327': attribute type 17 has an invalid length. [ 294.523719][T14167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.555956][T14181] __nla_validate_parse: 6 callbacks suppressed [ 294.555975][T14181] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2330'. [ 294.594147][T14180] tipc: Enabled bearer , priority 0 [ 294.604206][T14182] tipc: Enabling of bearer rejected, already enabled [ 294.625207][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2330'. [ 294.644894][T14180] syzkaller0: entered promiscuous mode [ 294.650400][T14180] syzkaller0: entered allmulticast mode [ 294.795586][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 294.903102][T14180] tipc: Resetting bearer [ 295.102269][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 295.117537][T14178] tipc: Resetting bearer [ 295.135417][T14178] tipc: Disabling bearer [ 295.158107][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 295.169763][T14206] hsr_slave_0: left promiscuous mode [ 295.393478][T14216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.444576][T14218] syzkaller0: entered promiscuous mode [ 295.468573][T14218] syzkaller0: entered allmulticast mode [ 295.653032][T14226] netlink: 'syz.1.2347': attribute type 12 has an invalid length. [ 296.040818][T14247] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2353'. [ 296.086780][T14248] netlink: 'syz.0.2354': attribute type 15 has an invalid length. [ 296.110138][T14248] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2354'. [ 296.126183][T14248] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 296.134061][T14248] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2354'. [ 296.685520][T14258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2355'. [ 296.792325][T14274] syzkaller0: entered promiscuous mode [ 296.798447][T14274] syzkaller0: entered allmulticast mode [ 297.030954][T14283] pim6reg: entered allmulticast mode [ 297.054038][T14283] pim6reg: left allmulticast mode [ 297.056570][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 297.300805][T14297] Bluetooth: hci0: unsupported parameter 28 [ 297.308108][T14297] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 297.914445][T14334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.104110][T14332] netlink: 'syz.4.2376': attribute type 10 has an invalid length. [ 298.159724][T14332] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.188609][T14357] netlink: 'syz.0.2382': attribute type 1 has an invalid length. [ 299.136158][T12656] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 299.145607][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 299.157015][T12656] hid-generic 0005:0007:0008.0002: item fetching failed at offset 1/2 [ 299.178896][T12656] hid-generic 0005:0007:0008.0002: probe with driver hid-generic failed with error -22 [ 300.616437][T14403] tipc: Started in network mode [ 300.623041][T14403] tipc: Node identity 122f861959c4, cluster identity 4711 [ 300.630507][T14403] tipc: Enabled bearer , priority 0 [ 300.639140][T14405] tipc: Disabling bearer [ 300.674760][T14423] __nla_validate_parse: 7 callbacks suppressed [ 300.674778][T14423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2394'. [ 300.763036][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 300.952334][T14441] ipvlan2: entered promiscuous mode [ 301.111051][T14456] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.203756][T14460] syzkaller0: entered promiscuous mode [ 301.209493][T14460] syzkaller0: entered allmulticast mode [ 301.209635][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 301.583329][T14468] syz.1.2416 uses old SIOCAX25GETINFO [ 301.621609][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 301.633009][T14476] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.2417'. [ 301.643745][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 301.663468][T14476] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.2417'. [ 301.783613][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 302.142293][T14498] syzkaller0: entered promiscuous mode [ 302.153775][T14498] syzkaller0: entered allmulticast mode [ 302.329727][T14510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2428'. [ 303.366658][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2437'. [ 303.568166][T14566] IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002 [ 303.655802][T14569] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 303.694523][T14569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.716730][T14572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.037087][T10104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.053493][T10104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.124459][T14590] openvswitch: netlink: IP tunnel dst address not specified [ 304.848866][T14624] netlink: 'syz.4.2461': attribute type 4 has an invalid length. [ 304.861726][T14624] wlan1: mtu less than device minimum [ 304.933955][T14627] netlink: 'syz.4.2464': attribute type 4 has an invalid length. [ 305.249072][T14650] nbd: illegal input index -1 [ 305.541480][T14669] syzkaller1: entered promiscuous mode [ 305.547905][T14669] syzkaller1: entered allmulticast mode [ 305.593760][T14671] syzkaller1: entered promiscuous mode [ 305.599514][T14671] syzkaller1: entered allmulticast mode [ 305.752172][T14675] vlan0: entered promiscuous mode [ 305.758088][T14675] hsr_slave_1: entered promiscuous mode [ 305.763880][T14675] vlan0: entered allmulticast mode [ 305.769144][T14675] hsr_slave_1: entered allmulticast mode [ 305.890092][T14675] __nla_validate_parse: 12 callbacks suppressed [ 305.890109][T14675] netlink: 2396 bytes leftover after parsing attributes in process `syz.0.2479'. [ 306.003443][T14677] SET target dimension over the limit! [ 306.120173][T14684] netlink: 'syz.2.2481': attribute type 1 has an invalid length. [ 306.130964][T14684] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2481'. [ 306.141624][T14684] netlink: 'syz.2.2481': attribute type 1 has an invalid length. [ 306.151769][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 306.173648][T14684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2481'. [ 306.185878][T14686] netem: change failed [ 306.365967][T14698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2487'. [ 306.539933][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2488'. [ 306.789982][T14712] Cannot find add_set index 4 as target [ 306.856117][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'. [ 306.932840][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 307.718511][T14746] syzkaller0: entered promiscuous mode [ 307.723997][T14746] syzkaller0: entered allmulticast mode [ 307.971154][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2502'. [ 308.044786][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 308.255373][T14763] tipc: Enabled bearer , priority 0 [ 308.273079][T14763] syzkaller0: entered promiscuous mode [ 308.294924][T14763] syzkaller0: entered allmulticast mode [ 308.400384][T14773] tipc: Resetting bearer [ 308.432414][T14762] tipc: Resetting bearer [ 308.441495][T14765] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 308.476139][T14762] tipc: Disabling bearer [ 308.518290][T14775] netlink: 'syz.3.2509': attribute type 10 has an invalid length. [ 308.527661][T14765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 309.706356][T14802] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 309.969331][T14822] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 310.040598][T14824] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 310.143290][T14833] syzkaller1: entered promiscuous mode [ 310.151147][T14833] syzkaller1: entered allmulticast mode [ 310.175087][T14833] dvmrp0: entered allmulticast mode [ 310.232053][T14841] syzkaller1: entered promiscuous mode [ 310.237878][T14841] syzkaller1: entered allmulticast mode [ 310.489678][T14849] vlan3: entered promiscuous mode [ 310.509538][T14849] vlan3: entered allmulticast mode [ 310.518067][T14849] hsr_slave_1: entered allmulticast mode [ 310.625809][T14858] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 310.625938][T14860] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 310.850466][T14865] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 311.211847][T14881] netlink: 'syz.1.2536': attribute type 4 has an invalid length. [ 311.252285][T14873] __nla_validate_parse: 7 callbacks suppressed [ 311.252303][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 311.381515][T14893] netlink: zone id is out of range [ 311.387195][T14893] netlink: zone id is out of range [ 311.392315][T14893] netlink: zone id is out of range [ 311.399416][T14893] netlink: zone id is out of range [ 311.404571][T14893] netlink: zone id is out of range [ 311.410708][T14893] netlink: zone id is out of range [ 311.423877][T14893] netlink: zone id is out of range [ 311.430277][T14893] netlink: zone id is out of range [ 311.442791][T14893] netlink: zone id is out of range [ 311.448322][T14893] netlink: zone id is out of range [ 311.504295][T14898] netlink: 'syz.0.2542': attribute type 22 has an invalid length. [ 311.522751][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 311.569822][T14898] netlink: 'syz.0.2542': attribute type 22 has an invalid length. [ 311.569959][ T3002] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.594096][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 311.627067][ T3002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.650365][ T3002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.658887][ T3002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.685478][T14902] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2541'. [ 312.718293][T14944] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2552'. [ 312.765682][T14943] macvtap2: entered allmulticast mode [ 312.771443][T14943] bridge0: entered allmulticast mode [ 312.781001][T14943] bridge0: port 1(macvtap2) entered blocking state [ 312.788296][T14943] bridge0: port 1(macvtap2) entered disabled state [ 312.813876][T14943] bridge0: left allmulticast mode [ 313.143243][T14965] syzkaller1: entered promiscuous mode [ 313.150642][T14965] syzkaller1: entered allmulticast mode [ 313.159745][T14963] netlink: 'syz.3.2562': attribute type 3 has an invalid length. [ 313.161723][T14965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2561'. [ 313.172208][T14963] netlink: 'syz.3.2562': attribute type 3 has an invalid length. [ 313.888783][T15004] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2572'. [ 313.904161][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2572'. [ 313.916637][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2572'. [ 314.003449][T15004] bond4: option primary_reselect: invalid value (255) [ 314.013988][T15004] bond4 (unregistering): Released all slaves [ 314.570444][T15049] netlink: 'syz.2.2587': attribute type 1 has an invalid length. [ 314.580928][T15049] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2587'. [ 315.121854][T15076] sctp: [Deprecated]: syz.2.2596 (pid 15076) Use of int in max_burst socket option deprecated. [ 315.121854][T15076] Use struct sctp_assoc_value instead [ 315.222940][T15080] bridge11: entered promiscuous mode [ 315.230078][T15080] bridge11: entered allmulticast mode [ 315.236401][T15075] syzkaller0: entered promiscuous mode [ 315.244316][T15075] syzkaller0: entered allmulticast mode [ 316.116898][T15124] netlink: 'syz.3.2612': attribute type 21 has an invalid length. [ 316.244370][T15129] syzkaller0: entered promiscuous mode [ 316.270876][T15129] syzkaller0: entered allmulticast mode [ 316.916616][T15177] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 316.991028][T15183] __nla_validate_parse: 6 callbacks suppressed [ 316.991044][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2631'. [ 317.153372][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.369978][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 317.539071][T15212] syzkaller0: entered promiscuous mode [ 317.545335][T15212] syzkaller0: entered allmulticast mode [ 317.725978][T15227] team0: Mode changed to "loadbalance" [ 317.747840][T15233] net_ratelimit: 5 callbacks suppressed [ 317.747858][T15233] wlan1: mtu greater than device maximum [ 317.829574][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 317.929902][T15252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2646'. [ 318.026292][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2650'. [ 318.046565][T15256] syzkaller0: entered promiscuous mode [ 318.056258][T15256] syzkaller0: entered allmulticast mode [ 318.262883][T15279] netlink: 'syz.2.2657': attribute type 13 has an invalid length. [ 319.252087][T15313] netlink: 'syz.4.2666': attribute type 2 has an invalid length. [ 319.268559][T15315] syzkaller0: entered promiscuous mode [ 319.274088][T15315] syzkaller0: entered allmulticast mode [ 319.659311][T15334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 320.066861][T15351] netlink: 'syz.4.2678': attribute type 2 has an invalid length. [ 320.075246][T15351] netlink: 'syz.4.2678': attribute type 9 has an invalid length. [ 320.083090][T15351] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2678'. [ 320.205260][T15359] netlink: 'syz.2.2675': attribute type 12 has an invalid length. [ 320.244081][T15355] netlink: 'syz.3.2679': attribute type 13 has an invalid length. [ 320.467442][T15371] syzkaller0: entered promiscuous mode [ 320.473766][T15371] syzkaller0: entered allmulticast mode [ 320.783607][T15384] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 320.792074][T15384] netlink: 600 bytes leftover after parsing attributes in process `syz.0.2685'. [ 321.263652][T15412] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 321.275027][T15412] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 321.294349][T15412] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2694'. [ 321.363948][T15419] syzkaller0: entered promiscuous mode [ 321.377868][T15419] syzkaller0: entered allmulticast mode [ 321.771297][T15427] syzkaller0: entered promiscuous mode [ 321.793857][T15427] syzkaller0: entered allmulticast mode [ 321.820850][T15438] IPVS: Error connecting to the multicast addr [ 322.046703][T15452] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 322.055745][T15452] netlink: 'syz.2.2703': attribute type 3 has an invalid length. [ 322.063580][T15452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2703'. [ 323.028461][T15463] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.2706'. [ 323.375113][T15456] netlink: 'syz.4.2704': attribute type 29 has an invalid length. [ 323.389841][T15463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 323.491611][T15468] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2708'. [ 323.520632][T15468] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2708'. [ 323.525826][T15472] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 323.568535][T15472] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2707'. [ 323.594692][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2707'. [ 323.769916][T15490] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2712'. [ 323.782980][T15491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2712'. [ 323.793134][T15490] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2712'. [ 323.804001][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 323.848975][T15495] netlink: 'syz.0.2714': attribute type 4 has an invalid length. [ 323.857280][T15495] netlink: 'syz.0.2714': attribute type 3 has an invalid length. [ 324.065887][T15509] tipc: Enabled bearer , priority 0 [ 324.083644][T15509] syzkaller0: entered promiscuous mode [ 324.104295][T15519] openvswitch: netlink: Tunnel attr 4 has unexpected len 4 expected 1 [ 324.106580][T15509] syzkaller0: entered allmulticast mode [ 324.140718][T15519] netlink: 'syz.1.2722': attribute type 29 has an invalid length. [ 324.159794][T15509] tipc: Resetting bearer [ 324.181067][T15519] netlink: 'syz.1.2722': attribute type 29 has an invalid length. [ 324.195793][T15508] tipc: Resetting bearer [ 324.230080][T15508] tipc: Disabling bearer [ 325.270217][T15582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.771462][T15604] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.285651][T15640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 326.461246][T15652] syzkaller0: entered promiscuous mode [ 326.467076][T15652] syzkaller0: entered allmulticast mode [ 328.040107][T10104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.351857][T15658] __nla_validate_parse: 13 callbacks suppressed [ 328.351877][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 328.479394][T15681] netlink: 'syz.2.2766': attribute type 11 has an invalid length. [ 328.549594][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2767'. [ 329.660956][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'. [ 329.897794][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 331.024114][T15825] validate_nla: 6 callbacks suppressed [ 331.024131][T15825] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 331.132687][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'. [ 331.224928][T12656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.297380][T15842] tunl0: Caught tx_queue_len zero misconfig [ 331.554299][T15861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 331.831323][T15880] openvswitch: netlink: IP tunnel dst address not specified [ 331.902719][T15883] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 332.020246][T15878] netlink: 'syz.0.2817': attribute type 13 has an invalid length. [ 332.054917][T15878] netlink: 'syz.0.2817': attribute type 17 has an invalid length. [ 332.146662][T15878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.504193][T15875] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 333.065669][T10090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.177264][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 333.243019][T15938] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2830'. [ 333.337438][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 333.389010][T15943] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 333.678574][T15942] bond7 (unregistering): Released all slaves [ 333.712503][T15957] netlink: 'syz.4.2834': attribute type 11 has an invalid length. [ 333.910451][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 333.922661][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 333.984081][T15960] macsec2: entered allmulticast mode [ 333.989562][T15960] bridge0: entered allmulticast mode [ 333.996976][T15960] bridge0: port 1(macsec2) entered blocking state [ 334.003790][T15960] bridge0: port 1(macsec2) entered disabled state [ 334.030646][T15960] bridge0: left allmulticast mode [ 334.076254][T15959] macsec2: entered allmulticast mode [ 334.091678][T15959] bridge0: entered allmulticast mode [ 334.110903][T15959] bridge0: port 1(macsec2) entered blocking state [ 334.125502][T15959] bridge0: port 1(macsec2) entered disabled state [ 334.137652][T15959] bridge0: left allmulticast mode [ 334.143083][T15972] Bluetooth: hci0: unsupported parameter 512 [ 334.149673][T15972] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 334.434382][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 334.516232][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 334.535546][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 334.677937][T15990] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 334.772652][T16004] netlink: 'syz.4.2847': attribute type 1 has an invalid length. [ 334.885411][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 334.911904][T16006] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 334.925806][T16006] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 335.017398][T16020] xt_l2tp: invalid flags combination: 8 [ 335.056892][T16004] bond13: (slave bridge13): Enslaving as an active interface with a down link [ 335.126230][T16006] macvlan2: entered promiscuous mode [ 335.132147][T16006] macvlan2: entered allmulticast mode [ 335.150075][T16006] bond13: entered promiscuous mode [ 335.161376][T16006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.189540][T16006] bond13: left promiscuous mode [ 335.349631][T16033] veth1_to_bond: entered promiscuous mode [ 335.502189][T16042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2856'. [ 335.528146][T16040] tipc: Enabled bearer , priority 0 [ 335.594906][T16048] netlink: 'syz.1.2855': attribute type 1 has an invalid length. [ 335.607935][T16040] syzkaller0: entered promiscuous mode [ 335.613621][T16040] syzkaller0: entered allmulticast mode [ 335.621321][T16040] tipc: Resetting bearer [ 335.821838][T16039] tipc: Resetting bearer [ 337.663440][T16039] tipc: Disabling bearer [ 337.683921][T16059] dvmrp1: entered allmulticast mode [ 337.696228][T16073] tipc: Enabling of bearer rejected, failed to enable media [ 337.706780][T16079] syzkaller0: entered promiscuous mode [ 337.712269][T16079] syzkaller0: entered allmulticast mode [ 338.185083][T10104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.264931][ T5939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.474804][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 340.296751][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2894'. [ 340.324971][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2894'. [ 341.048085][T16229] sctp: [Deprecated]: syz.4.2903 (pid 16229) Use of int in maxseg socket option. [ 341.048085][T16229] Use struct sctp_assoc_value instead [ 341.137734][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 341.272680][T16232] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2904'. [ 341.291914][T16232] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2904'. [ 341.311400][T16232] netlink: 'syz.4.2904': attribute type 6 has an invalid length. [ 341.322349][T16232] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2904'. [ 342.263669][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 342.321795][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.334686][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.353400][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.363194][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.391027][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.610099][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 342.634436][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'. [ 342.653871][T16285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2921'. [ 343.041510][T16265] chnl_net:caif_netlink_parms(): no params data found [ 343.397407][ T6024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.415314][T10064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.487494][T16324] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 343.599594][T16313] syzkaller0: entered promiscuous mode [ 343.605859][T16313] syzkaller0: entered allmulticast mode [ 343.653727][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.664067][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.675314][T16265] bridge_slave_0: entered allmulticast mode [ 343.683095][T16265] bridge_slave_0: entered promiscuous mode [ 343.690493][T16336] netlink: 'syz.2.2933': attribute type 21 has an invalid length. [ 343.700849][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.708834][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.716783][T16265] bridge_slave_1: entered allmulticast mode [ 343.725307][T16265] bridge_slave_1: entered promiscuous mode [ 343.799944][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.827814][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.889812][T16340] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 343.915403][T16265] team0: Port device team_slave_0 added [ 343.931534][T16265] team0: Port device team_slave_1 added [ 344.427537][ T5834] Bluetooth: hci0: command tx timeout [ 345.308874][ T5939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.555672][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.562650][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.589689][T16374] __nla_validate_parse: 4 callbacks suppressed [ 345.589705][T16374] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2941'. [ 345.632730][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.651658][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.658949][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.688022][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.749783][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'. [ 346.010838][T16265] hsr_slave_0: entered promiscuous mode [ 346.017868][T16265] hsr_slave_1: entered promiscuous mode [ 346.025555][T16265] debugfs: 'hsr0' already exists in 'hsr' [ 346.031404][T16265] Cannot create hsr debugfs directory [ 346.152248][T16399] tipc: Enabling of bearer rejected, failed to enable media [ 346.167791][T16399] syzkaller0: entered promiscuous mode [ 346.173451][T16399] syzkaller0: entered allmulticast mode [ 346.257958][T16265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.272055][T16265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.312010][T16401] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 346.322699][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 346.370005][T16265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.383570][T16265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.505133][ T5834] Bluetooth: hci0: command tx timeout [ 346.534352][T16265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.545441][T16265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.628450][T16265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.639555][T16265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.689706][T16417] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2953'. [ 346.731078][T16417] geneve3: entered promiscuous mode [ 346.847310][T16265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 346.868894][T16265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 346.894285][T16265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 346.910270][T16265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.098255][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.154214][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.170574][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.177880][T10106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.207944][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.215180][T10106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.734668][T16265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.920989][T16456] tipc: Enabling of bearer rejected, failed to enable media [ 347.931346][T16456] syzkaller0: entered promiscuous mode [ 347.937842][T16456] syzkaller0: entered allmulticast mode [ 348.188430][T16462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2961'. [ 348.204032][T16463] netlink: 'syz.0.2962': attribute type 39 has an invalid length. [ 348.268980][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2962'. [ 348.278316][T16465] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2962'. [ 348.297329][T16465] netlink: 'syz.0.2962': attribute type 5 has an invalid length. [ 348.305957][T16465] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2962'. [ 348.491842][T16465] vlan0: entered allmulticast mode [ 348.497176][T16465] bridge_slave_0: entered allmulticast mode [ 348.602238][ T5834] Bluetooth: hci0: command tx timeout [ 348.620238][T16265] veth0_vlan: entered promiscuous mode [ 348.695874][T16265] veth1_vlan: entered promiscuous mode [ 348.829503][T16265] veth0_macvtap: entered promiscuous mode [ 348.843583][T16265] veth1_macvtap: entered promiscuous mode [ 348.893613][T16265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.919180][T16265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.952443][T10090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.967320][T10090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.990206][T10090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.000959][T16487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2966'. [ 349.011439][T10090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.021474][T16486] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2968'. [ 349.040314][T16486] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 349.145716][T10098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.275692][T10084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.288735][T10084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.356213][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.364078][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.723316][T16526] netlink: 'syz.4.2978': attribute type 4 has an invalid length. [ 349.832937][T16526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.166203][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.176581][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.186414][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.197853][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.205781][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.326818][ T5826] syz_tun (unregistering): left allmulticast mode [ 350.601493][T10084] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 350.612611][T10084] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 350.643543][T16554] __nla_validate_parse: 3 callbacks suppressed [ 350.643561][T16554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2984'. [ 350.669344][T16539] chnl_net:caif_netlink_parms(): no params data found [ 350.676704][ T5841] Bluetooth: hci0: command tx timeout [ 350.700592][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2984'. [ 350.880624][T10084] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 350.918174][T10084] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.063923][T10084] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 351.120436][T10084] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.286782][T10084] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 351.297099][T10084] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.322938][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'. [ 351.390425][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.425906][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.455409][T16539] bridge_slave_0: entered allmulticast mode [ 351.486095][T16539] bridge_slave_0: entered promiscuous mode [ 351.522517][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.547883][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.565189][T16539] bridge_slave_1: entered allmulticast mode [ 351.573549][T16539] bridge_slave_1: entered promiscuous mode [ 351.624057][T16567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 351.702314][T16602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'. [ 351.734901][T16602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'. [ 351.821187][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 351.823254][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.868266][T16589] vlan5: entered allmulticast mode [ 351.873436][T16589] bond14: entered allmulticast mode [ 351.910095][ T3002] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.942168][T16615] team0: left allmulticast mode [ 351.971922][T16611] lo speed is unknown, defaulting to 1000 [ 351.982379][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.080459][ T3002] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.130498][T16611] lo speed is unknown, defaulting to 1000 [ 352.160221][T16629] netlink: 308 bytes leftover after parsing attributes in process `syz.3.3002'. [ 352.170542][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 352.190391][T10104] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.199540][T16611] lo speed is unknown, defaulting to 1000 [ 352.221823][T16611] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 352.253119][T16539] team0: Port device team_slave_0 added [ 352.265428][ T5841] Bluetooth: hci3: command tx timeout [ 352.324960][T16611] lo speed is unknown, defaulting to 1000 [ 352.332571][T16611] lo speed is unknown, defaulting to 1000 [ 352.341246][T16539] team0: Port device team_slave_1 added [ 352.349614][ T5939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.361475][T10104] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.386907][T16611] lo speed is unknown, defaulting to 1000 [ 352.463398][T16611] lo speed is unknown, defaulting to 1000 [ 352.465487][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.498258][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.549032][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.828208][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3004'. [ 353.231472][T10084] dvmrp1 (unregistering): left allmulticast mode [ 353.906862][T10084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.917717][T10084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.928402][T10084] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 353.939288][T10084] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 353.952107][T10084] bond0 (unregistering): Released all slaves [ 354.043468][T10084] bond1 (unregistering): Released all slaves [ 354.056773][T10084] bond2 (unregistering): Released all slaves [ 354.159556][T10084] bond3 (unregistering): Released all slaves [ 354.171954][T10084] bond4 (unregistering): Released all slaves [ 354.269301][T10084] bond5 (unregistering): Released all slaves [ 354.281922][T10084] bond6 (unregistering): Released all slaves [ 354.293400][T16611] lo speed is unknown, defaulting to 1000 [ 354.300031][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.307265][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.336091][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.347627][ T5841] Bluetooth: hci3: command tx timeout [ 354.400399][T10084] tipc: Left network mode [ 354.405017][T16611] lo speed is unknown, defaulting to 1000 [ 354.406824][T16611] lo speed is unknown, defaulting to 1000 [ 354.561076][T16657] lo speed is unknown, defaulting to 1000 [ 354.622807][T16539] hsr_slave_0: entered promiscuous mode [ 354.629416][T16539] hsr_slave_1: entered promiscuous mode [ 354.636394][T16539] debugfs: 'hsr0' already exists in 'hsr' [ 354.642243][T16539] Cannot create hsr debugfs directory [ 354.672923][T16671] geneve2: entered promiscuous mode [ 354.905166][ T3002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.061081][T16679] tipc: Enabling of bearer rejected, failed to enable media [ 355.079637][T16679] syzkaller0: entered promiscuous mode [ 355.085976][T16679] syzkaller0: entered allmulticast mode [ 355.118720][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.126593][T10084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.136700][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.144212][T10084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.158872][T10084] veth1_macvtap: left promiscuous mode [ 355.165604][T10084] veth0_macvtap: left promiscuous mode [ 355.549920][T16692] openvswitch: netlink: Message has 4 unknown bytes. [ 355.711402][T10084] team0 (unregistering): Port device team_slave_1 removed [ 355.750981][T10084] team0 (unregistering): Port device team_slave_0 removed [ 356.249191][T16539] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.401087][T16698] __nla_validate_parse: 2 callbacks suppressed [ 356.401103][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3017'. [ 356.429869][ T5841] Bluetooth: hci3: command tx timeout [ 356.456137][T16539] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.549249][T16539] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.679837][T16539] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.722170][T16715] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3021'. [ 356.836461][T10084] IPVS: stop unused estimator thread 0... [ 356.845622][T16715] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3021'. [ 356.907481][ T30] audit: type=1804 audit(1760735923.203:3): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3022" name="x000000000000000a00000000000000000000012" dev="tmpfs" ino=87 res=1 errno=0 [ 356.935985][T16715] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3021'. [ 356.972721][T16715] netlink: 'syz.0.3021': attribute type 6 has an invalid length. [ 357.020331][T16715] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3021'. [ 357.039740][ T30] audit: type=1800 audit(1760735923.243:4): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3022" name="x000000000000000a00000000000000000000012" dev="tmpfs" ino=87 res=0 errno=0 [ 357.181089][T16539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.227478][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3028'. [ 357.251511][T16539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.262060][T16539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.280373][T16539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.305924][T16742] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3026'. [ 357.316169][T16742] nbd: socks must be embedded in a SOCK_ITEM attr [ 357.632413][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.697673][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 357.763435][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.787034][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.794253][T10064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.820925][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.828187][T10064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.864353][T16776] netlink: 'syz.1.3032': attribute type 12 has an invalid length. [ 357.879071][T16776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3032'. [ 358.108099][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.198167][T16779] syzkaller0: entered promiscuous mode [ 358.203674][T16779] syzkaller0: entered allmulticast mode [ 358.396975][T16792] xt_cluster: node mask cannot exceed total number of nodes [ 358.460778][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 358.508917][ T5841] Bluetooth: hci3: command tx timeout [ 359.385913][ T5939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.902927][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.989035][T16819] netlink: 'syz.3.3042': attribute type 17 has an invalid length. [ 360.038502][T16539] veth0_vlan: entered promiscuous mode [ 360.062580][T16539] veth1_vlan: entered promiscuous mode [ 360.167971][T16539] veth0_macvtap: entered promiscuous mode [ 360.194215][T16822] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 360.201257][T16539] veth1_macvtap: entered promiscuous mode [ 360.283851][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.310016][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.350388][T10090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.368876][T10090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.387725][T10090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.399554][T10090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.582119][T10090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.605228][T10090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.653086][T16850] lo speed is unknown, defaulting to 1000 [ 360.659806][T10106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.676966][T10064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.693841][T10106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.758471][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.769243][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.794868][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.816192][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.828588][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.860965][T16893] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 361.871909][T16889] lo speed is unknown, defaulting to 1000 [ 362.047265][T16888] lo speed is unknown, defaulting to 1000 [ 362.231544][T16903] syzkaller0: entered promiscuous mode [ 362.270453][T16903] syzkaller0: entered allmulticast mode [ 362.292703][T16911] netlink: 'syz.2.3062': attribute type 4 has an invalid length. [ 362.492860][T16928] Bluetooth: MGMT ver 1.23 [ 362.499835][T16928] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 362.751191][T16888] chnl_net:caif_netlink_parms(): no params data found [ 362.831465][T10090] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.890291][ T3002] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.928156][ T3002] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.964116][ T3002] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.997323][T16888] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.004561][T16888] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.018832][T16888] bridge_slave_0: entered allmulticast mode [ 363.030477][T16888] bridge_slave_0: entered promiscuous mode [ 363.040969][T16888] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.051378][T16888] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.059146][T16888] bridge_slave_1: entered allmulticast mode [ 363.072607][T16888] bridge_slave_1: entered promiscuous mode [ 363.877077][ T5834] Bluetooth: hci4: command tx timeout [ 364.069307][T10064] bond1 (unregistering): Released all slaves [ 364.082332][T10064] bond2 (unregistering): Released all slaves [ 364.095863][T10064] bond3 (unregistering): Released all slaves [ 364.195974][T10064] bond4 (unregistering): Released all slaves [ 364.295247][T10064] bond5 (unregistering): Released all slaves [ 364.342437][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.352842][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.448698][T16888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.476972][T16888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.503189][T10064] : left promiscuous mode [ 364.542809][T16958] lo speed is unknown, defaulting to 1000 [ 364.636220][T16986] netlink: 'syz.2.3086': attribute type 3 has an invalid length. [ 364.644127][T16986] __nla_validate_parse: 2 callbacks suppressed [ 364.644144][T16986] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3086'. [ 364.700309][T10064] tipc: Left network mode [ 364.744289][T16888] team0: Port device team_slave_0 added [ 364.793028][T16888] team0: Port device team_slave_1 added [ 364.889032][T16888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.905290][T16888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.962131][T16888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.060812][T16888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.077057][T16888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.150572][T16888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.325801][T16888] hsr_slave_0: entered promiscuous mode [ 365.332696][T16888] hsr_slave_1: entered promiscuous mode [ 365.341769][T16888] debugfs: 'hsr0' already exists in 'hsr' [ 365.348176][T16888] Cannot create hsr debugfs directory [ 365.357919][T16996] netlink: 'syz.2.3089': attribute type 101 has an invalid length. [ 365.366345][T16996] netlink: 'syz.2.3089': attribute type 7 has an invalid length. [ 365.441419][T10064] ------------[ cut here ]------------ [ 365.447898][T10064] WARNING: CPU: 0 PID: 10064 at net/wireless/core.c:204 cfg80211_switch_netns+0x58a/0x5b0 [ 365.458378][T10064] Modules linked in: [ 365.463311][T10064] CPU: 0 UID: 0 PID: 10064 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 365.474158][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.484770][T10064] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 365.489952][T10064] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 365.496508][T10064] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 d2 23 8b f7 eb 82 e8 3b 74 25 f7 e9 63 fe ff ff e8 31 74 25 f7 e9 59 fe ff ff e8 27 74 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 365.517209][T10064] RSP: 0018:ffffc9001b41f840 EFLAGS: 00010293 [ 365.523309][T10064] RAX: ffffffff8a9acfc9 RBX: ffff888023938da0 RCX: ffff88802b438000 [ 365.531728][T10064] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 365.539802][T10064] RBP: 00000000ffffffef R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 365.547970][T10064] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: ffff888023938720 [ 365.556004][T10064] R13: ffff88802d722980 R14: dffffc0000000000 R15: ffff888023938910 [ 365.563992][T10064] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 365.573162][T10064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.579945][T10064] CR2: 000055558f0e2808 CR3: 000000000df38000 CR4: 00000000003526f0 [ 365.587978][T10064] Call Trace: [ 365.591269][T10064] [ 365.594216][T10064] cfg80211_pernet_exit+0xa2/0x140 [ 365.599408][T10064] ops_undo_list+0x49a/0x990 [ 365.604366][T10064] ? __pfx_ops_undo_list+0x10/0x10 [ 365.609938][T10064] ? do_raw_spin_unlock+0x122/0x240 [ 365.615220][T10064] cleanup_net+0x4d8/0x820 [ 365.619656][T10064] ? __pfx_cleanup_net+0x10/0x10 [ 365.624765][T10064] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.629986][T10064] ? process_scheduled_works+0x9ef/0x17b0 [ 365.635785][T10064] ? process_scheduled_works+0x9ef/0x17b0 [ 365.641527][T10064] process_scheduled_works+0xae1/0x17b0 [ 365.647195][T10064] ? __pfx_process_scheduled_works+0x10/0x10 [ 365.653216][T10064] worker_thread+0x8a0/0xda0 [ 365.657947][T10064] kthread+0x711/0x8a0 [ 365.662034][T10064] ? __pfx_worker_thread+0x10/0x10 [ 365.667231][T10064] ? __pfx_kthread+0x10/0x10 [ 365.671830][T10064] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.677100][T10064] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.682303][T10064] ? __pfx_kthread+0x10/0x10 [ 365.686966][T10064] ret_from_fork+0x4bc/0x870 [ 365.691572][T10064] ? __pfx_ret_from_fork+0x10/0x10 [ 365.696797][T10064] ? __switch_to_asm+0x39/0x70 [ 365.701575][T10064] ? __switch_to_asm+0x33/0x70 [ 365.706791][T10064] ? __pfx_kthread+0x10/0x10 [ 365.711399][T10064] ret_from_fork_asm+0x1a/0x30 [ 365.716637][T10064] [ 365.719675][T10064] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 365.726968][T10064] CPU: 0 UID: 0 PID: 10064 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 365.736592][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.746640][T10064] Workqueue: netns cleanup_net [ 365.751406][T10064] Call Trace: [ 365.754672][T10064] [ 365.757592][T10064] dump_stack_lvl+0x99/0x250 [ 365.762169][T10064] ? __asan_memcpy+0x40/0x70 [ 365.766746][T10064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.771929][T10064] ? __pfx__printk+0x10/0x10 [ 365.776518][T10064] vpanic+0x237/0x6d0 [ 365.780495][T10064] ? __pfx_vpanic+0x10/0x10 [ 365.784997][T10064] panic+0xb9/0xc0 [ 365.788705][T10064] ? __pfx_panic+0x10/0x10 [ 365.793124][T10064] __warn+0x31b/0x4b0 [ 365.797110][T10064] ? cfg80211_switch_netns+0x58a/0x5b0 [ 365.802556][T10064] ? cfg80211_switch_netns+0x58a/0x5b0 [ 365.808000][T10064] report_bug+0x2be/0x4f0 [ 365.812316][T10064] ? cfg80211_switch_netns+0x58a/0x5b0 [ 365.817763][T10064] ? cfg80211_switch_netns+0x58a/0x5b0 [ 365.823226][T10064] ? cfg80211_switch_netns+0x58c/0x5b0 [ 365.828672][T10064] handle_bug+0x84/0x160 [ 365.832906][T10064] exc_invalid_op+0x1a/0x50 [ 365.837396][T10064] asm_exc_invalid_op+0x1a/0x20 [ 365.842231][T10064] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 365.848283][T10064] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 d2 23 8b f7 eb 82 e8 3b 74 25 f7 e9 63 fe ff ff e8 31 74 25 f7 e9 59 fe ff ff e8 27 74 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 365.867875][T10064] RSP: 0018:ffffc9001b41f840 EFLAGS: 00010293 [ 365.873929][T10064] RAX: ffffffff8a9acfc9 RBX: ffff888023938da0 RCX: ffff88802b438000 [ 365.881890][T10064] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 365.889850][T10064] RBP: 00000000ffffffef R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 365.897807][T10064] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: ffff888023938720 [ 365.905766][T10064] R13: ffff88802d722980 R14: dffffc0000000000 R15: ffff888023938910 [ 365.913739][T10064] ? cfg80211_switch_netns+0x589/0x5b0 [ 365.919202][T10064] cfg80211_pernet_exit+0xa2/0x140 [ 365.924304][T10064] ops_undo_list+0x49a/0x990 [ 365.928890][T10064] ? __pfx_ops_undo_list+0x10/0x10 [ 365.933993][T10064] ? do_raw_spin_unlock+0x122/0x240 [ 365.939182][T10064] cleanup_net+0x4d8/0x820 [ 365.943592][T10064] ? __pfx_cleanup_net+0x10/0x10 [ 365.948522][T10064] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.953710][T10064] ? process_scheduled_works+0x9ef/0x17b0 [ 365.959423][T10064] ? process_scheduled_works+0x9ef/0x17b0 [ 365.965134][T10064] process_scheduled_works+0xae1/0x17b0 [ 365.970704][T10064] ? __pfx_process_scheduled_works+0x10/0x10 [ 365.976698][T10064] worker_thread+0x8a0/0xda0 [ 365.981311][T10064] kthread+0x711/0x8a0 [ 365.985371][T10064] ? __pfx_worker_thread+0x10/0x10 [ 365.990474][T10064] ? __pfx_kthread+0x10/0x10 [ 365.995053][T10064] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.000246][T10064] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.005431][T10064] ? __pfx_kthread+0x10/0x10 [ 366.010008][T10064] ret_from_fork+0x4bc/0x870 [ 366.014590][T10064] ? __pfx_ret_from_fork+0x10/0x10 [ 366.019705][T10064] ? __switch_to_asm+0x39/0x70 [ 366.024467][T10064] ? __switch_to_asm+0x33/0x70 [ 366.029220][T10064] ? __pfx_kthread+0x10/0x10 [ 366.033801][T10064] ret_from_fork_asm+0x1a/0x30 [ 366.038570][T10064] [ 366.041842][T10064] Kernel Offset: disabled [ 366.046151][T10064] Rebooting in 86400 seconds..