last executing test programs: 4.91749271s ago: executing program 1 (id=3782): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fbdbdf257900000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ffffffff67000000041eec2b00571d3ac70400f4000400f4000400f4"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4880) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000200)={0x1500, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4503f302}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "8005a5245feaf6c1c317d0b29ef704ee99bf316998fc4d245d"}}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "c86fd829f9d66781ced9c4f819758b1918b1b8ba56417496df32d92eaf8fd3649d267dd46105e14ac752907a7be5ef65a605d63efdc6374ec3f7b4b076fe4961d57009abb1d925e2a2b63cf9adf982ad076107931919a7bfae48ffa64a24421a29c06b5d96d3ed22028facac32e0912e04c6397b740b5a3cc6a5556ea6fca9b088208c3bfa1ed94b1414089e38b7f382ca0b9abd542618108f6cb93e03892750d0f82ed08193e970c063e81941cf977036236b5877bfc3507747ee82c8"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}]}, @TIPC_NLA_NODE={0x1174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_NODE_ID={0xd2, 0x3, "730c9dbbc24f35f9c5a20ba6b65501b31e5ee0c18e02f3b922ef2421ae6ea11734eea4ed91b3b51a5cc049be4df36761694d6b28102c393d4e4e366fa9d0e0cd97b958c06970846a4c2124132e6bc154ddc972767e79dc646b26b47cc2802ce1ed3a5ae15d50f5869e54ba64e77e5faed7e83e2500cd2232a6d632d2fbb46a4bb77f91f4f5d604cf566297a4c8a423b05184008d1be9afe953d2dec3392a2c73a9689f90570f68d16a52cc8001cbb0d99157c034261d7fd8f99e8bb471f37d70e02b11398931f974cdec094e86ac"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "8f56b8f28cf44c87fb4162d1bbe141a1598489d39ce4ddec47ce24b9908f803f5932815305f131521e5b62780d3628b6a7d3675ad16d0e572f88d2adfbd075a137f3e5b95b06501db25c4f2cabb5afe857cd5c6939c6701235d00880ced4d645248d0e5173228d98d685766683c8ae7166783db368384191ac17091db96a5b405d4a8636a706bb2e3489010d772d575788a7ae50c0f3d9911a4c1b624cebad6c24a2f8f427d428b0337ee535fc41ef21f71156664a546e79296539c244693f006b71709fee544ec41948689b2d5671d55c8b6b7da2d6dd597886f32138bbd2fb1089f9d3d1e8d2309fbff22e24784717222950eec8d3407f3fbdb7712600db74f6556104d6963872abd4629b9b8a8648738a75923da008552633f8565485eddb5eaeaba2e42c51962b4b584b096188ae10dac66ac4c655196c5f2bfae94459940f1e922aaa49b4fddaf8329dd383b8423be1055e21f78203834020fb47d9845c03b289d254e29a1dd5199ec432c4e5a5b9312ac914c357865e79911c1dd8c96290c558ff416b2bfbb39c3b2bcb270b73744cef73c75bbcd68bf5d3bf5a6b94b8c0d512d660ec2d17df68828a0b1dcb7a04defab85d985892fc54a3f864680343ffc084cde4c430d2e55019b584c59520eda5cc52fd3e49d5636d02cd83acb51fac45c9907d70f90fff4fb9c51ded261eb2901beec9a7eda186015696f6c89bf868a629dd09b18329d3119c7aaa502c4f1e5ff5f15ce5ff0adcfea0e39d673b60dacb4aa9b95b1fe14fc5bfadc747035dbb8abfe42b1525c5641755a7d2b5261b2c1181981b9858dff04b56270f23bf3be9b9b861bdc886e262cce3340390bc4898f4d391536e7f7d45e512dcdd887bdee18d8626b631cfe2ecf9d22f54b3043fd83a852fbb451576e2c0f19e52458f7135f7202a6c50c35b83864937fb41c843665a054b7a18796f32da217e750a53ec861c3f4c9cd1ff62e7e8e9505ee263ef07122f6edbea312f1873bb26c112d96abc3d74ed052655ddeaef6dd21fdf05f36b73db7359b96d7e5e647b7afada033ec75a9689835602135c1bb106b0ca5a4bc0aa8442c2f15820206c3752d8e5ea920abf0d7432782bad8e0cd3e0e4e95198c08effe345abaa18524599cd390f3c97eb4548ed8096b5986742e6f8699a4214e7b55d91cdfd46c5845645791f1acc49447cff496c5b18979da7bc7c27eb97b6914abe8ef8f53a32b6c5687fbe8ad830d20d8711325cc3a6b03d3b6661ca64d98c8c2f6a5208c8fa2d4445db90dc6214199fa54af5105f82d50ebadbe2acd99e90c822ca73214d9d54b6231dbab48304246bb92743fc1cfcb053d66958f966579e10ef932f37efd47b85ad1c1544881d2132dc443133718fa9a98fd8ff8b756930143cb55831210979251a39f92b527a3f5be7a3cf168ff8733223d5e58f93c414da31f676b16de27cdea5bd237c445f2abb63e2db1b845574c3659bbadc29e9538e8cf139634b10fda7c258a57a0a3f3d8de1fd228e800e8654131c7aef2fe9ddb5d5c65e79a6b5e7210703e58fb8f4a402a32639ba9ecdc7dbed3c41ba1235f06e5a09faef84eca8392266cd543ab616873c1a74f7ff173056a806e6f9ebb3fb1db7406d523d126b70ea03ad652820634c715a8077ce2d1183ec1790b6f88e259a37c0e34ef04fcd2c35cafea2e8c2584829df92fa04b06a37ea27ad76fd1cf9f8fd0c95c37961e1c22fb4f2d3d748e42436a6c5fe19dbcd4db402d01a836057a662978947a954509a48e21d8efcaa61503fa9061c8da58fc35c167bc26eb9d445a661bc4885c1d395b099df397b19e15326cec8751354ca652f039f876c4c715a293ecc0c4a9cc82fea26ae9446e526c77c92178e4135006b79e238ab6d76b219003ab68f0cdf7201ce0df67d2ef644733e591d608d02d09827b8ce40db789f2945661891dbbf39fe2ec6222c4d1cf5fde28d81269d13f97c1a06501fedfb44156a81c61e10515dca24e2152291d7f9440a38d623eaa5555268539df0790fd5c1dd3f58c73d528357fc0b315d003d0b25e4a31cfbe58ef689a95db596587a0d16d621d4cd2dba75d3b7a8b286a6cf2a800a2f6859692a9f1d28917e56ad64d4138f88ae8df8461f132844de322f9d00fdf058a8e8c97e620b752a8ff72d8c72831bb3cb53b9e15bb3e016cbffc793248d6cea5ed8443514aafe089346901a29d0e65605b7498eda7882454828a48d7f4e9e5b713e9cf3465807e9b123fe76fa637dd4c33998bb5a1aa5730e8b26acd29abcd0504588801196d7b49c894242d07569b50a8b4309e175564a34139f0534020b20819ce74f829f9ae9a24b15a0ab81ee1bf0cd379abbbbd5c0805b5e2a8825128d10462c96a670e69ed2450c6e8ccf0a69b27cd8d2c65c564ee355e51d1179e716f9f694042e71933ec64493f0ab662edf93a1e88ec818f076b2f04c6e0149314a19d4e45e111eda9da29d3aa2ede1c17781a66bd59a8920d6f6a77710b0466e0f007cba0aca0c2ab9fbd7c1553837bed3a6983897aa97d574cd78b985d49c62aeaecf04241946db8e8dc81bc18c219a02add73a26f7445ef1db6b8e753e5f76ab541e9217dc8f7a5260cb89fc33e1e528a31a92ed8e8e3b2578aece5fc7390c83f050de287eb73020367c44fbf278fc7818d6075b15c22fb7ed17a32495f743312a1edf0e6f1179f5d2a05f115f5e41d82dcc39af7f6cc5497de8303c67271406aa32023706359e0d6ceed210438960c91c1d269f98747ddd1c003b50e1cb2828ca3f7fa96bed15248fbfce844657e000a8d5b6ce035c37b56a136188ed8ef3b00530b4e20be21f41959feb91846bcbf768292541283500f0c0337533e6f81a979a6c4bc12803ddbdc76fb64cd28e85c6d63dcf3e62c7175c16fb14cd7a1cdadacf8b272e2053f58b0b25f2c79caabe377bdb8a79f8d0ef8e14339845429651035b1602d94320d5dd4888cf6389cee825394d65b22a04d359858f6989f9233a8e116c99f4f804b9ca1ca53a41e2e2edd7d6aa313adc5fcefc20fe1069885e625a515d0c1c0514cac3fe7e31ccf57c4d48e973adba86f157c11e762ddf5ffeb9b216cac07f088756776d7b5f2ba0e4fcd73f42ed5d51aca8ac98929aa4ab0059b00fa49d383570281a675e420cc54b8033b30d49611fc1384a382ec502875278629c8f24386d9d45d90180b30c0adcaae47d3ccb6f9ee0a29f9df4c973b797f8db3e95bfcbb10fd4d235cca20202f161cc14733e111d7e51c013ac8dc8c6baa57fbd6b41fdb0f505dea0a9ecbf34a9fb6e7cb71aef4711caa77b5794f311cdf5d70c5f3a9b98d26e912b4ed58527030dd3a9c7ec9c6364f7cb84bf9980aaf8dde8a2f4582fbe55becf3047e4a1c0b8f6e0274904438cce798642d62b0fde45909ba7dbcf4b81b7ed5bc43bc09c8a236110328b8304606405a62e8cf4702c6b28a2677b8b89490044b78da77261c145265ccda8b74e0e43acce253bdb2664ac67ed281d6b6b1482ccdf29dc8d8d1da77871861600b3fa652716320b83d803097dab51931bb87299b70aeb983f2560c82aa52ed63ea4a533e7c3c231bd1b341ee255167f73d2a43ced0e8d6f040dfc176015f9653558402fedf0d3701d83cd2b192b0b941da9ff33a3e080e131d41fa6ba4d54733a445ae8ab70f10132d94e2759019f309925d16653604767e9195fdcc55e0031a162d198c22fc5a182bc7e419ba83ff488149f4021be3b3b0b6c0f2fbeb4267133baf6d6b2d4cb44145fbe9b92c66c4e782497815984ac349ec7ba9c7d0b773154c81b7045028f5c800233dc26bc263465c72435414d2ffdf07d3f149161efcc2db68e1d5ac946f6306c84fbd338c9669caf53c80ec974607dbd0852843e985a5847cae37eecde3a4516ec8002cacf933206c7c429259464d878545151661ffe4da1aac95bd58119779f231a7b406fee56472bfbab543e215c5dff31f6219803dcc47e4de885a12814b00d56c86fba969d6bc86949554f157de2cf4e5fcc3854f53c6a387ddb0f45e3b926980857dc79aca8e29fc2acf1a50e3cb5f80cd63d6aa038057406f05411daa0b057b804f3c0fd5372a56bf7fb67a384addf0db01c7e06a693f101356bc803d126b4af7c1f686fe3affcb4537eb7044808ba0a0e7d873dbf366229d5dc4128af95af74896bb1ccec9a8902715065e2a70641afcf8313d1c82b1b01c60dc97e9a751cfd335647fcec0c4ced8b112b98f1247bdcfb81cdaa297ecc4e50a0a0705b0398ed2b1968a5d9ffb83e43289ed6d0394d9034565297936acd6b57b288d504e47cf3b9e2aa8896a2ef81e87cf47a38e54a7749e8273d648ad8cad1901a48c10a671e1e3e036ff1474b2d12622eb6315786c84f86ba4997d1ef7f7c60d2ed81eb4df9b05f540d68d6214368734f6a4482503d362d1b1d51dcca6284deafc0435b974d2256b13c4574f2839460591ed7b8106db16929183e8260953e6819eb71afc70b1945392706d937d281169c9c2378e00103f05aaccacb5b6da555b191537061bca93f17ac0f2689c3703cc55a878b5a0d74bb0d149d855db8c712d22160e9a2eaeec40c2771084dda3c0119358dca34d123a58901f2c2be21b8d0258a578db7414949f9f242aad851fb853e682bf881a4645c6e30c14945bace9fa9a10aac6009b668bb19bbc8ac1b9a55a306141975dee285106116b4fdb9c7dfad61ff34b88241af85d6912c98a23f310dd750148fa6b678974a3ad4c5380b4ca745a2b1595097e2b8c0115cfa1514e0384a42d23db318afadf6b83231f7c582ebee8d5ffd91ad258362494c871ea1a63b0cc07451b8e5263376bb935d7824bc740a2c2e808027480694e1a8ccb5e554e6fcbbbf0e94446e3a76923e5713e2c6fa55c3bb8038de7c9c028f698d085f4b63ee464b7c38f913e04fb1842c7a188217660adf445e0135b9608643f155b42fb657cf40f652066ccbb2bb620a82450404eb5b4179b0f08b156cb1ef76119f70d46e921197c6bfd087b929a4d4ad2d3dadedfdda6c0b1015295bca4b4cb60b338250a74b5c308dca398445d7c9722863d33d7c3117a9352a81fc6d62a188caf2789f857a10b4030f5aaf555d7be942dfa269dbe901bbc01e1d7049f2130860aa22787eef418ea7e9794b2bdec751c89db53d2ebfc6f696c3374499a7b31a74b9fc23d3d8d6477ad563e8ed221758aebbeefd1727926ff7e99624bd06c06fda5372a662b2f6cf06e2919d65d1274916b74267e708b9bff3987ba34cb482c08731313fd714f9b665fa9aedde59cc12e60e0ba649de999f8eab5026c4a407c0da72a1ef1e1b4cf5c82a4ef8e3e6d82fbece1b2707974b10974094d18bf2358c99e1a128633c437ca04b38df380d5d1c66510127dff3cd4006d77d97dfb36845eaf397347958e8e1c61d2ac7e1280414c9dd55e23a49354bf499f1ab8d92b1057341986008b0023b4fbe2c74bf2b835958ef7dcf2c3dbc5afefd019c5a2dae776f8147cd615d8d66172e4fdeb98eade1a8094b2d25dff9f8f762033514d7f961a66ba3c956a49da97ca6244df896607bf9221bfb588c5a17f700abf41586c5568abc933f11a6ce49e88e33d0f9833eccbb82981558bb038db1bea3a3f95fe63c294e02843a25bbd26fa18e33d57eab47427220be9ed5a5a7dce95ce43a66786eb8221bcc1a9b977fc6c1210bb9211d2b7d4f7ccd1d9e9b733dcebe2fa0b09cbe84a4cad6e7152b8f7ed2b62710e3061752933764e4e37421f93d4ec849c515bc67ca3f4773"}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "2f1b0b2d80c70159a213bdb7e917807eb00ad27db9437f352523319c3bb8c04bad0d9715f70a78"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2bdd64363d23ca2c5e0fe1c4047c2b85b62b412edadcb41d6e45a8ce689e7c418a192a06"}}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdb7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x31c32226}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "68f177bd60b37f1465786197e3023b875fa73cbc6e41347c4c92d79f4323aed9aba0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "2e1a0f966b0e943cadcd0420b4dc73dbbee3bd635ddab1d0fda99c91ff73"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ed092d0107df887efa87ccb67979bdb7e4b90c70ef35a9c10b20f6fd92410d7a60"}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x94b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x1500}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket(0x2c, 0x1, 0x0) ioctl$IMGETCOUNT(r5, 0x40106183, 0x0) 2.405575428s ago: executing program 1 (id=3801): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 2.342756833s ago: executing program 1 (id=3803): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800003fb689320ea2ebd0040000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000340), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = accept(r2, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0xffffffbc) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000003740)=ANY=[@ANYBLOB="4c2c1353283ba36c91f42ea2d857a238708ed5d7114743ff0ddf920ab9fd3dbcafcc87a6bc5a5789d7e6a2bda8ed0326271c95463cb47fe76450878360ca3e04cba46cfc28338434bb11da95f91e7e6a5ae8ddf8", @ANYRES16, @ANYBLOB="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"], 0x2c4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @private0}}}, 0x108) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210018000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000900000008000500", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 2.153609606s ago: executing program 4 (id=3805): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10090) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x40000000015, 0x5, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dbdf2502000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r7, &(0x7f00000002c0), 0x0}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r9, 0x400, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x38ab, 0x2, 0x55d, 0xff01, 0x2, 0x8, 0x4]}}]}]}]}, 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0c4}, 0x8018) 1.842964664s ago: executing program 4 (id=3809): syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000008000d0021a510"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x900, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24048810) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x900, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24048810) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) 1.717283379s ago: executing program 4 (id=3813): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x50) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000569e0000001f6ab25403a298f8ac5b80b20000007569005c6cb61d564df9645a59db3091ad9770e658053d040ea2b357b3c43f08f5f82e8df241c59f7c3c89f36083d579fd5673f525a36f8383ea84718e6d1811596e2496bd21377e95e1956a1104ee17519bce6a41c49fa074b0d583891c850ec6e3b76b75e0307d8a64b3ae16b8bb770f7fb6738017abea9d1d8e516f3e87bca6f5ab5fd366d3e65dc6cc4d1f754452e6c306ae461866af853e3f655a4f0cef5016c9b8939763a658ca9e01eb1b1e2787c71bff4ee04eb294fc1d013f10cf286e354c7c96fafade213ea268195efa67389a6ee05e0673834a4dda9550643340d781"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffa, 0x7, 0x6361, 0x5, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg$inet(r9, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000002c40)="9a5ada53636d", 0x6}], 0x2}}], 0x1, 0x4000) 1.687073812s ago: executing program 2 (id=3814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000005000f"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.533894429s ago: executing program 0 (id=3816): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000300000000000000000000000000000105000000200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000005000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1.509561693s ago: executing program 0 (id=3817): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="20fd64875e57a5c7d3b70500000000000020180ca186cf3a83d090fa29c329e1632c0420baba00cdaa46dfc9567e150c000032c80e269cdd18757adddaf7d1377757f5cbc5434bc1615408c560c50d711c7bb0d16b0e5df8ed0d3d96148d78d61dfe0f200bb3d123c80647fe69e246b0430d6477a7851d0f9f9308c4114a8a4c793cf2735cc4d0b9b2025a94a236c388727ad835a736050cb92f94742c9e590f4eb763ec890e5ae778a927f9867b3ac6f51cc6e74e5e08229d2b728623304fff1fd9228c2a79fb6900"/210], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.452952209s ago: executing program 0 (id=3818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x8, 0xffff, 0x6, 0xe}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x2, 0xfff1}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r11, @ANYBLOB="05000000000d76b7154fb0ba3a2b07ea589cf72995371e5a5a81dc73f236e51bc2a8d96260688a7a38a81bdc46bcd824600f9fd3e2605fd4ff83658448d22e4b44e0833a09d5472ac8887cf2ab4cf7a1e4e4a396450e1b3886f9e68339cd211fb7fc216cc06e902f400aa601b5cab8f85c23b58338b9e8c2992b549973d765bf33014f470139393ec811fff14510459181c6fc80", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x50) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x22, &(0x7f0000000880)=ANY=[@ANYBLOB="7b00000101000000950000007c98f3e1dfb4ca0000000085000000220000001844000003000000000000000000000018630000060000000000000001000000b7080000000000000000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000080000000900"/124, @ANYRESOCT=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018150000", @ANYRES32=0x1, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x1ff, 0xe1, &(0x7f0000000500)=""/225, 0x40f00, 0x1, '\x00', r9, 0x0, r5, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xc, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, r12, 0xffffffffffffffff, r12], 0x0, 0x10, 0x400}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, r11, 0x0, r13}, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x4, 0xb}, {0xffff, 0x8}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0x10, 0xf, 0x4, 0x2, 0xf, 0x7, 0x6, 0x5, 0x7, 0x4, 0x10, 0x4], 0x3, [0x8a, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0xffff, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x8000) 1.300926804s ago: executing program 2 (id=3819): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r4 = socket$kcm(0x2d, 0x2, 0x0) accept(r4, 0x0, 0x0) 1.255825806s ago: executing program 4 (id=3821): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e0001"], 0xfc}}, 0x0) 1.162154128s ago: executing program 2 (id=3822): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x81, 0x1, 0xcf}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.145295073s ago: executing program 4 (id=3823): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x35, &(0x7f0000000000)=0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.061817382s ago: executing program 3 (id=3824): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000006800010002000000fcffff7f000000000000000014000200010000000400000000009f21fdc9000004000b00c73d1e069cfd945fb60727166b91b6b6648d569c01c3ab20df19f6680e05036727dc9419ac862ec13c5e11271809c37356b193a9b8180eb2140275f7a2c9b6089e0002487f270ede1841c725e29540a8d51cc0c0c0a727cad8ccd94617b3699d14406897fbd71b7b18bf46ecb5ffccea1eab3d53caa4f3820d5559f9a69bfb11a075cdad3811aa8ffa4c7ca9df38e3a4a214713db6b4262817a8819aba218464"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendto$netrom(r0, &(0x7f0000000080)="0b1171eb89027a918eb0ff1bf194eb73341338b70236a80c2cb5b09d82974d158cb83a6c5803dd66bc19d31c882739965ad1351b2467a8051b264a589909fea01c462e7a6ca409c8237bd73391daaf192865dd02f416d3d1347cb29be9c917e327af086aabbea71bc125348ab36a9d57a8baf5ad487d68b677f63eb55ed1f94ad2e641c133afd98b2727408f2e1b80a777be46bd1328b6e9484413e4d8e899919ee8081b58d5c29fb0f91c4c1b62dc50e68e90d0e65c32784631c81a5bd678d1d7ced68326dcb01bed833e42c1ff340255de3b11d71de3b3882194278d890787fd7b79448c96d27f0b", 0xe9, 0x4040840, &(0x7f0000000300)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @loopback={0xfec0ffffffffffff}}]}, 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x8000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000051c0)={0x2628, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wla|0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wla|0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wla|0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "cb236df32172a8157a6f5b2496d5a61b66bc6084d857eeaa9f06cc838373dd0c90f8677c01ce9c4e6dd3c5eb428e75e5d3005e1254171cda71256d7f7512a7fa0e8f840299e471a5f078fc7b9d9d4d8cce40f36f0f24c6cab6db85a5433ccb41b51de060a3da2af7cf26f04b4d77d8198dd1b0a474951ee3cce50d9c9c26995b4f7111ebe7ff7681ee068349a8cb209f54fa979a43d001e0238adbe837d69cf61b23e4648188f5dda7401d143827ae7fa45b652f0648a8043cd07273d2461b9db02e9ac7de496d7af5e5ed7757b398b43e9033714b0970a9fdb966"}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(+$\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[\'-,}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':/@(()/-,&^.%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x27a}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wla|0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/#[}#)][[\\[+%}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa920}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'M])(^\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfdfffff8}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "f4a573e12e93f55a29e3bbd28ffb539c"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1184, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^#\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&%!\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '*&}_:$/{{-]\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!(\'}\f@#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!%:${(-,%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x180}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b3}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "492f90b56b7db17088d42754aee06f34f75cf9a47e43397e3a4b40295aca5d375ff36cf3fcbecaf650147c71510f52d66bff8f7716a43a718c4dfa9f9f6aebfd488850242d5eb5b701c13d662950743c85c4245560"}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^#\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '*&}_:$/{{-]\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wla|0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x99!*@\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}]}]}]}]}, 0x2628}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmmsg$inet(r0, 0x0, 0x0, 0x24000051) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'wg1\x00', 0x242}) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xa, 0x4, 0x0, 0x0, @str='wla|0\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x20044000) 985.671042ms ago: executing program 0 (id=3825): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x6, 0x80, 0xe698, 0xf37, 0x6, 0x400, 0x4, 0x94a, 0xd12, 0x9, 0x13b6, 0x714, 0x1, 0x2, 0x8, 0x0, 0x40, 0x4, 0x800, 0x2, 0x81}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x40024, 0x8d85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf2334}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20004846) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x8850) getpid() 985.313494ms ago: executing program 2 (id=3826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200380, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) connect$802154_dgram(r1, &(0x7f00000000c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 965.075985ms ago: executing program 3 (id=3827): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (rerun: 64) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x504) (async) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @printk={@lx}, @generic={0x5, 0x3, 0x8, 0x6, 0x200}, @call={0x85, 0x0, 0x0, 0x2b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000240)={@random="05c38c886b60", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20}}}}}}, 0x0) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 938.917678ms ago: executing program 4 (id=3828): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x32600) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="020afc0007000000286cf08ac52b3843b2b7bd7000fedbdf2505001a000000af063b84e5f5109d72f35a8d1f4785a70000000000000064010101"], 0x38}}, 0x40400c0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x2, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x7ff}}}, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x20000800) ioctl$sock_netrom_SIOCADDRT(r4, 0x61f0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80, 0x8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 749.308906ms ago: executing program 0 (id=3829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) syz_emit_ethernet(0xaf, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x79, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x0, 0xa, "002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee7833bd36cf9eb41d293a9dbc1a8096375d9"}]}}}}}}, 0x0) 681.083016ms ago: executing program 3 (id=3830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) accept(r0, 0x0, 0x0) 604.366385ms ago: executing program 0 (id=3831): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x1) unshare(0x2c060000) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010101}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x18}, 0x20) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 32) r5 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) (async, rerun: 64) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x7, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x0, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0xffffffffffffff1a}}, 0x44884) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x10) 588.635317ms ago: executing program 1 (id=3832): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 509.7782ms ago: executing program 2 (id=3833): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e0001"], 0xfc}}, 0x0) 509.499567ms ago: executing program 3 (id=3834): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10090) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x804) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x40000000015, 0x5, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dbdf2502000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r7, &(0x7f00000002c0), 0x0}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r9, 0x400, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x38ab, 0x2, 0x55d, 0xff01, 0x2, 0x8, 0x4]}}]}]}]}, 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0c4}, 0x8018) 387.571698ms ago: executing program 2 (id=3835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbfb, {0xb}}, 0x14}}, 0x4000000) epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) recvfrom$inet6(r1, 0x0, 0x0, 0x40000041, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 325.032844ms ago: executing program 1 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0005022abd700001dcdf25000000000000000008000500c9f91cd07e"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000006a9d8169000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, &(0x7f0000000200)="4d5324a091ce4b578240446e72ef1beb53e6f303937a652a51c08929977336a2bed27067948bd8086395e545b6afef061ffeab569039f5b9bdf0d3afb31d34428ec0200b3264450b3a042b52b0c901c1a2e741168c6e2991833729d272995004ee2e7560db042bbdb59fefab0304587fc8a165abea447ec883ea76ee5a0388143d010aedd146b2", 0x87, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x5c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ife={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7fffffffffffffff, 0x0, 0x4a6a}) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)={0x2f, 0xa, 0x2, 0xd, 0x0, [@remote, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, @local]}, 0x58) r5 = socket$inet6(0xa, 0x1, 0x7ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) close(r5) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x40040) socket$inet6(0xa, 0x5, 0x9) 276.618728ms ago: executing program 3 (id=3837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)="cf2240e69198", 0x0, 0x0, 0x8000}, 0x50) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) (async, rerun: 64) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r10 = openat$cgroup_devices(r3, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) (rerun: 32) write$cgroup_devices(r10, &(0x7f0000000380)={'b', ' *:* ', 'rm\x00'}, 0x9) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r8, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_delrule={0x40, 0x21, 0x100, 0x70bd2b, 0x25dfdbff, {0x2, 0x10, 0x80, 0x5a, 0x2, 0x0, 0x0, 0x8, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x800}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xc8a9}]}, 0x40}}, 0x0) 1.187858ms ago: executing program 1 (id=3838): socketpair(0x3c, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, 0x0, 0x840) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 0s ago: executing program 3 (id=3839): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) readv(r0, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0x10) kernel console output (not intermixed with test programs): .528616][ T180] tipc: Disabling bearer [ 372.546058][ T180] tipc: Left network mode [ 372.555804][T16462] __nla_validate_parse: 7 callbacks suppressed [ 372.555819][T16462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2885'. [ 372.590535][T16462] netlink: 'syz.0.2885': attribute type 1 has an invalid length. [ 372.674597][ T180] IPVS: stopping backup sync thread 12660 ... [ 372.823357][T16475] veth0_to_bridge: entered promiscuous mode [ 372.913379][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 372.914151][T16479] lo speed is unknown, defaulting to 1000 [ 373.106573][T16474] veth0_to_bridge: left promiscuous mode [ 373.719191][T16499] lo speed is unknown, defaulting to 1000 [ 373.814830][T16519] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2900'. [ 374.065923][T16523] netlink: 'syz.2.2899': attribute type 5 has an invalid length. [ 374.139610][ T180] veth1_to_team: left promiscuous mode [ 374.149529][ T180] macvlan0: left promiscuous mode [ 374.177021][ T180] hsr_slave_0: left promiscuous mode [ 374.184767][ T180] hsr_slave_1: left promiscuous mode [ 374.198897][T16522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2899'. [ 374.208742][ T180] veth1_macvtap: left promiscuous mode [ 374.215141][ T180] veth0_macvtap: left promiscuous mode [ 374.220979][ T180] veth1_vlan: left allmulticast mode [ 374.226619][ T180] veth1_vlan: left promiscuous mode [ 374.334515][ T180] pim6reg (unregistering): left allmulticast mode [ 374.740324][ T180] team0 (unregistering): Port device team_slave_1 removed [ 374.782162][ T180] team0 (unregistering): Port device team_slave_0 removed [ 375.038389][T16505] lo speed is unknown, defaulting to 1000 [ 375.044170][T16534] veth0: entered promiscuous mode [ 375.044423][T16534] veth0: left promiscuous mode [ 375.178027][T16541] tipc: Enabled bearer , priority 0 [ 375.193788][T16541] syzkaller0: entered promiscuous mode [ 375.202731][T16541] syzkaller0: entered allmulticast mode [ 375.281639][T16543] FAULT_INJECTION: forcing a failure. [ 375.281639][T16543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.315293][T16543] CPU: 0 UID: 0 PID: 16543 Comm: syz.4.2904 Not tainted syzkaller #0 PREEMPT(full) [ 375.315317][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.315328][T16543] Call Trace: [ 375.315335][T16543] [ 375.315343][T16543] dump_stack_lvl+0x189/0x250 [ 375.315371][T16543] ? __pfx____ratelimit+0x10/0x10 [ 375.315391][T16543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.315413][T16543] ? __pfx__printk+0x10/0x10 [ 375.315432][T16543] ? __might_fault+0xb0/0x130 [ 375.315467][T16543] should_fail_ex+0x414/0x560 [ 375.315496][T16543] _copy_from_user+0x2d/0xb0 [ 375.315518][T16543] restore_altstack+0x9d/0x4b0 [ 375.315540][T16543] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 375.315563][T16543] ? __pfx_restore_altstack+0x10/0x10 [ 375.315591][T16543] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.315609][T16543] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.315632][T16543] __ia32_sys_rt_sigreturn+0x281/0x860 [ 375.315662][T16543] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.315682][T16543] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 375.315705][T16543] ? _raw_spin_unlock_irq+0x2e/0x50 [ 375.315728][T16543] ? __lock_acquire+0xab9/0xd20 [ 375.315766][T16543] ? __task_pid_nr_ns+0x28/0x490 [ 375.315794][T16543] ? do_syscall_64+0xbe/0xfa0 [ 375.315818][T16543] do_syscall_64+0xfa/0xfa0 [ 375.315836][T16543] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.315856][T16543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.315873][T16543] ? clear_bhb_loop+0x60/0xb0 [ 375.315895][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.315912][T16543] RIP: 0033:0x7f09c852b099 [ 375.315928][T16543] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 375.315943][T16543] RSP: 002b:00007f09c67f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 375.315962][T16543] RAX: ffffffffffffffda RBX: 00007f09c87e5fa0 RCX: 00007f09c852b099 [ 375.315975][T16543] RDX: 00007f09c67f5a80 RSI: 00007f09c67f5bb0 RDI: 0000000000000021 [ 375.315987][T16543] RBP: 00007f09c67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.315999][T16543] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 375.316023][T16543] R13: 00007f09c87e6038 R14: 00007f09c87e5fa0 R15: 00007ffc426764f8 [ 375.316054][T16543] [ 375.385821][T16540] tipc: Resetting bearer [ 375.567878][T16540] tipc: Disabling bearer [ 375.580929][T16500] lo speed is unknown, defaulting to 1000 [ 375.590643][ T180] IPVS: stop unused estimator thread 0... [ 376.078048][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 376.582595][T16571] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.601529][T16571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.693681][T16570] lo speed is unknown, defaulting to 1000 [ 376.903299][T16574] syz_tun: entered promiscuous mode [ 376.908924][T16574] macsec1: entered allmulticast mode [ 376.915058][T16574] syz_tun: entered allmulticast mode [ 376.947340][T16574] syz_tun: left allmulticast mode [ 376.962519][T16574] syz_tun: left promiscuous mode [ 377.072437][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2913'. [ 377.208980][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 377.219351][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 377.228620][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 377.482273][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 377.573806][T16594] netlink: 'syz.1.2917': attribute type 8 has an invalid length. [ 377.583345][T16594] sch_fq: defrate 0 ignored. [ 377.789054][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 377.830712][T16603] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 377.848684][T16603] netlink: 'syz.0.2920': attribute type 7 has an invalid length. [ 377.867517][T16603] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2920'. [ 378.108800][T16610] FAULT_INJECTION: forcing a failure. [ 378.108800][T16610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.158380][T16610] CPU: 1 UID: 0 PID: 16610 Comm: syz.0.2922 Not tainted syzkaller #0 PREEMPT(full) [ 378.158409][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.158419][T16610] Call Trace: [ 378.158426][T16610] [ 378.158433][T16610] dump_stack_lvl+0x189/0x250 [ 378.158461][T16610] ? __pfx____ratelimit+0x10/0x10 [ 378.158481][T16610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.158503][T16610] ? __pfx__printk+0x10/0x10 [ 378.158521][T16610] ? __might_fault+0xb0/0x130 [ 378.158554][T16610] should_fail_ex+0x414/0x560 [ 378.158582][T16610] fpu__restore_sig+0x1bb/0x1100 [ 378.158609][T16610] ? __lock_acquire+0xab9/0xd20 [ 378.158629][T16610] ? __pfx_fpu__restore_sig+0x10/0x10 [ 378.158680][T16610] __ia32_sys_rt_sigreturn+0x704/0x860 [ 378.158714][T16610] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 378.158737][T16610] ? _raw_spin_unlock_irq+0x2e/0x50 [ 378.158781][T16610] ? __task_pid_nr_ns+0x28/0x490 [ 378.158809][T16610] ? do_syscall_64+0xbe/0xfa0 [ 378.158831][T16610] do_syscall_64+0xfa/0xfa0 [ 378.158850][T16610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.158866][T16610] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.158882][T16610] ? clear_bhb_loop+0x60/0xb0 [ 378.158903][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.158919][T16610] RIP: 0033:0x7fd4c558efc9 [ 378.158935][T16610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.158956][T16610] RSP: 002b:00007fd4c64f8038 EFLAGS: 00000246 [ 378.158971][T16610] RAX: ffffffffffffffea RBX: 00007fd4c57e5fa0 RCX: 00007fd4c558efc9 [ 378.158984][T16610] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000007 [ 378.158996][T16610] RBP: 00007fd4c64f8090 R08: 0000000000000000 R09: 0000000000000000 [ 378.159006][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.159016][T16610] R13: 00007fd4c57e6038 R14: 00007fd4c57e5fa0 R15: 00007ffc8c2f5638 [ 378.159046][T16610] [ 378.428529][T16625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2927'. [ 378.440461][T16626] lo speed is unknown, defaulting to 1000 [ 378.498482][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808885][T16641] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 378.886418][T16641] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 378.903042][T16641] team0: Failed to send options change via netlink (err -105) [ 378.919935][T16641] team0: Port device dummy0 added [ 379.244947][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 379.282804][T16662] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2935'. [ 379.334080][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 379.401395][T16663] xt_hashlimit: max too large, truncated to 1048576 [ 379.419514][T16666] FAULT_INJECTION: forcing a failure. [ 379.419514][T16666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.467448][T16666] CPU: 0 UID: 0 PID: 16666 Comm: syz.3.2937 Not tainted syzkaller #0 PREEMPT(full) [ 379.467472][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.467483][T16666] Call Trace: [ 379.467490][T16666] [ 379.467498][T16666] dump_stack_lvl+0x189/0x250 [ 379.467526][T16666] ? __pfx____ratelimit+0x10/0x10 [ 379.467547][T16666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.467569][T16666] ? __pfx__printk+0x10/0x10 [ 379.467607][T16666] should_fail_ex+0x414/0x560 [ 379.467634][T16666] _copy_to_user+0x31/0xb0 [ 379.467657][T16666] simple_read_from_buffer+0xe1/0x170 [ 379.467686][T16666] proc_fail_nth_read+0x1b3/0x220 [ 379.467711][T16666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.467736][T16666] ? rw_verify_area+0x2a6/0x4d0 [ 379.467757][T16666] ? __lock_acquire+0xab9/0xd20 [ 379.467772][T16666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.467795][T16666] vfs_read+0x200/0xa30 [ 379.467816][T16666] ? fdget_pos+0x247/0x320 [ 379.467836][T16666] ? __pfx___mutex_lock+0x10/0x10 [ 379.467857][T16666] ? __pfx_vfs_read+0x10/0x10 [ 379.467882][T16666] ? __fget_files+0x2a/0x420 [ 379.467902][T16666] ? __fget_files+0x3a0/0x420 [ 379.467918][T16666] ? __fget_files+0x2a/0x420 [ 379.467943][T16666] ksys_read+0x145/0x250 [ 379.467968][T16666] ? __pfx_ksys_read+0x10/0x10 [ 379.467994][T16666] ? do_syscall_64+0xbe/0xfa0 [ 379.468018][T16666] do_syscall_64+0xfa/0xfa0 [ 379.468036][T16666] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.468055][T16666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.468071][T16666] ? clear_bhb_loop+0x60/0xb0 [ 379.468091][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.468107][T16666] RIP: 0033:0x7ff14518d9dc [ 379.468122][T16666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.468137][T16666] RSP: 002b:00007ff1460fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.468155][T16666] RAX: ffffffffffffffda RBX: 00007ff1453e5fa0 RCX: 00007ff14518d9dc [ 379.468167][T16666] RDX: 000000000000000f RSI: 00007ff1460fc0a0 RDI: 0000000000000006 [ 379.468178][T16666] RBP: 00007ff1460fc090 R08: 0000000000000000 R09: 0000000000000000 [ 379.468189][T16666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.468198][T16666] R13: 00007ff1453e6038 R14: 00007ff1453e5fa0 R15: 00007ffd88b8ae98 [ 379.468228][T16666] [ 379.882208][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.903014][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.911992][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.923976][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.931955][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.159319][T16681] lo speed is unknown, defaulting to 1000 [ 380.509017][T16694] netlink: 'syz.4.2944': attribute type 12 has an invalid length. [ 380.603449][T16691] netlink: 'syz.4.2944': attribute type 4 has an invalid length. [ 380.640129][ T9862] lo speed is unknown, defaulting to 1000 [ 380.652750][ T9862] syz0: Port: 1 Link DOWN [ 380.668522][ T9862] lo speed is unknown, defaulting to 1000 [ 380.693902][T16674] lo speed is unknown, defaulting to 1000 [ 380.958183][T16696] lo speed is unknown, defaulting to 1000 [ 381.127586][T16715] netlink: 'syz.4.2949': attribute type 4 has an invalid length. [ 381.285580][T16674] chnl_net:caif_netlink_parms(): no params data found [ 381.353287][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'. [ 381.409193][T16717] syz.2.2950: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.462935][T16717] CPU: 1 UID: 0 PID: 16717 Comm: syz.2.2950 Not tainted syzkaller #0 PREEMPT(full) [ 381.462962][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.462973][T16717] Call Trace: [ 381.462981][T16717] [ 381.462990][T16717] dump_stack_lvl+0x189/0x250 [ 381.463024][T16717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.463048][T16717] ? __pfx__printk+0x10/0x10 [ 381.463068][T16717] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 381.463092][T16717] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 381.463119][T16717] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 381.463146][T16717] warn_alloc+0x214/0x310 [ 381.463172][T16717] ? stack_depot_save_flags+0x40/0x860 [ 381.463202][T16717] ? __pfx_warn_alloc+0x10/0x10 [ 381.463230][T16717] ? kasan_save_track+0x3e/0x80 [ 381.463253][T16717] ? __kasan_kmalloc+0x93/0xb0 [ 381.463279][T16717] ? xsk_setsockopt+0x4dc/0x8d0 [ 381.463296][T16717] ? do_sock_setsockopt+0x17c/0x1b0 [ 381.463321][T16717] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 381.463344][T16717] ? do_syscall_64+0xfa/0xfa0 [ 381.463364][T16717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.463393][T16717] __vmalloc_node_range_noprof+0x125/0x12d0 [ 381.463450][T16717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.463480][T16717] ? __kasan_kmalloc+0x93/0xb0 [ 381.463512][T16717] vmalloc_user_noprof+0xad/0xf0 [ 381.463536][T16717] ? xskq_create+0xbf/0x170 [ 381.463556][T16717] xskq_create+0xbf/0x170 [ 381.463577][T16717] xsk_init_queue+0xb0/0x110 [ 381.463599][T16717] xsk_setsockopt+0x4dc/0x8d0 [ 381.463620][T16717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.463651][T16717] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.463677][T16717] ? aa_sock_opt_perm+0xff/0x1b0 [ 381.463706][T16717] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 381.463723][T16717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.463743][T16717] do_sock_setsockopt+0x17c/0x1b0 [ 381.463776][T16717] __x64_sys_setsockopt+0x13f/0x1b0 [ 381.463809][T16717] do_syscall_64+0xfa/0xfa0 [ 381.463829][T16717] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.463849][T16717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.463868][T16717] ? clear_bhb_loop+0x60/0xb0 [ 381.463890][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.463908][T16717] RIP: 0033:0x7f450758efc9 [ 381.463925][T16717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.463941][T16717] RSP: 002b:00007f4508342038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.463961][T16717] RAX: ffffffffffffffda RBX: 00007f45077e5fa0 RCX: 00007f450758efc9 [ 381.463979][T16717] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 381.463990][T16717] RBP: 00007f4507611f91 R08: 0000000000000004 R09: 0000000000000000 [ 381.464002][T16717] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.464014][T16717] R13: 00007f45077e6038 R14: 00007f45077e5fa0 R15: 00007ffe2febf388 [ 381.464047][T16717] [ 381.470696][T16717] Mem-Info: [ 381.798064][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 381.807050][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 381.816072][T16738] netlink: 'syz.1.2952': attribute type 15 has an invalid length. [ 381.836035][T16717] active_anon:4019 inactive_anon:0 isolated_anon:0 [ 381.836035][T16717] active_file:3624 inactive_file:40001 isolated_file:0 [ 381.836035][T16717] unevictable:768 dirty:258 writeback:0 [ 381.836035][T16717] slab_reclaimable:12343 slab_unreclaimable:156362 [ 381.836035][T16717] mapped:33599 shmem:1361 pagetables:1026 [ 381.836035][T16717] sec_pagetables:0 bounce:0 [ 381.836035][T16717] kernel_misc_reclaimable:0 [ 381.836035][T16717] free:1264017 free_pcp:21547 free_cma:0 [ 381.891788][T16717] Node 0 active_anon:15976kB inactive_anon:0kB active_file:14496kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134396kB dirty:1032kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13076kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 381.928536][T16717] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 381.958927][T16717] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.990070][T16717] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 381.997024][T16717] Node 0 DMA32 free:1148068kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15976kB inactive_anon:0kB active_file:14496kB inactive_file:159800kB unevictable:1536kB writepending:1032kB zspages:0kB present:3129332kB managed:2565224kB mlocked:0kB bounce:0kB free_pcp:69824kB local_pcp:49584kB free_cma:0kB [ 382.013215][ T53] Bluetooth: hci3: command tx timeout [ 382.036763][T16717] lowmem_reserve[]: 0 0 0 0 0 [ 382.041496][T16717] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.071494][T16717] lowmem_reserve[]: 0 0 0 0 0 [ 382.076435][T16717] Node 1 Normal free:3893068kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16088kB local_pcp:7976kB free_cma:0kB [ 382.109661][T16717] lowmem_reserve[]: 0 0 0 0 0 [ 382.114529][T16717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.127271][T16717] Node 0 DMA32: 1479*4kB (UM) 373*8kB (UME) 20*16kB (UME) 173*32kB (UME) 72*64kB (UM) 69*128kB (UM) 69*256kB (UME) 53*512kB (UME) 31*1024kB (UM) 8*2048kB (UME) 251*4096kB (UM) = 1149220kB [ 382.146212][T16717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 382.157819][T16717] Node 1 Normal: 177*4kB (UE) 49*8kB (UM) 52*16kB (UME) 102*32kB (UME) 30*64kB (UME) 13*128kB (UME) 7*256kB (UM) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3893068kB [ 382.176085][T16717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.185706][T16717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.195121][T16717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.204955][T16717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.214452][T16717] 44983 total pagecache pages [ 382.219132][T16717] 0 pages in swap cache [ 382.223365][T16717] Free swap = 124996kB [ 382.227531][T16717] Total swap = 124996kB [ 382.231683][T16717] 2097051 pages RAM [ 382.235859][T16717] 0 pages HighMem/MovableOnly [ 382.240538][T16717] 424103 pages reserved [ 382.245000][T16717] 0 pages cma reserved [ 382.298781][T16733] lo speed is unknown, defaulting to 1000 [ 382.437541][T16674] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.460705][T16674] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.495016][T16674] bridge_slave_0: entered allmulticast mode [ 382.507132][T16674] bridge_slave_0: entered promiscuous mode [ 382.539996][T16674] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.563908][T16674] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.571255][T16674] bridge_slave_1: entered allmulticast mode [ 382.581131][T16674] bridge_slave_1: entered promiscuous mode [ 382.630688][T16755] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2955'. [ 383.088202][T16674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.100156][T16674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.175616][T16674] team0: Port device team_slave_0 added [ 383.195817][T16674] team0: Port device team_slave_1 added [ 383.292278][T16674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.299583][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.330343][T16674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.384003][T16674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.392719][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.439557][T16674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.625447][T16674] hsr_slave_0: entered promiscuous mode [ 383.660692][T16674] hsr_slave_1: entered promiscuous mode [ 383.674355][T16674] debugfs: 'hsr0' already exists in 'hsr' [ 383.690256][T16674] Cannot create hsr debugfs directory [ 383.821213][T16777] syzkaller0: entered promiscuous mode [ 383.826995][T16777] syzkaller0: entered allmulticast mode [ 383.888596][T16777] syzkaller0: mtu less than device minimum [ 384.034703][T16781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.093284][ T53] Bluetooth: hci3: command tx timeout [ 384.296040][T16789] sctp: [Deprecated]: syz.1.2965 (pid 16789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.296040][T16789] Use struct sctp_sack_info instead [ 384.693764][T16805] lo speed is unknown, defaulting to 1000 [ 384.702187][T16674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.724668][T16674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.745965][T16674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.771865][T16674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.990150][T16674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.056114][T16674] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.097125][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.104316][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.134773][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.141943][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.170687][T16833] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2975'. [ 385.214836][T16833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2975'. [ 385.252891][T16807] lo speed is unknown, defaulting to 1000 [ 385.520520][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'. [ 385.619043][T16854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2980'. [ 385.679111][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 385.952465][T16862] tipc: Enabling not permitted [ 385.958376][T16862] tipc: Enabling of bearer rejected, failed to enable media [ 385.991047][T16674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.071014][T16674] veth0_vlan: entered promiscuous mode [ 386.103704][T16674] veth1_vlan: entered promiscuous mode [ 386.173923][ T53] Bluetooth: hci3: command tx timeout [ 386.180745][T16674] veth0_macvtap: entered promiscuous mode [ 386.198107][T16674] veth1_macvtap: entered promiscuous mode [ 386.216034][T16877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2984'. [ 386.227333][T16877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2984'. [ 386.260221][T16859] lo speed is unknown, defaulting to 1000 [ 386.315534][T16674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.378100][T16674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.466741][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.476012][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.495887][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.505741][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.632661][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.643586][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.662567][T16868] lo speed is unknown, defaulting to 1000 [ 386.691173][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.706094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.808412][T16881] syz_tun: entered allmulticast mode [ 386.904183][ C0] mroute: pending queue full, dropping entries [ 386.925591][T16885] mroute: pending queue full, dropping entries [ 386.969261][T16875] lo speed is unknown, defaulting to 1000 [ 386.976476][T16880] syz_tun: left allmulticast mode [ 387.212088][T16891] tipc: Started in network mode [ 387.217122][T16891] tipc: Node identity cad16b954158, cluster identity 4711 [ 387.228978][T16891] tipc: Enabled bearer , priority 0 [ 387.242395][T16891] syzkaller0: entered promiscuous mode [ 387.248985][T16891] syzkaller0: entered allmulticast mode [ 387.269700][T16891] tipc: Resetting bearer [ 387.308262][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 387.948423][T16886] tipc: Resetting bearer [ 387.974302][T16886] tipc: Disabling bearer [ 388.131963][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2987'. [ 388.145319][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 388.252975][ T53] Bluetooth: hci3: command tx timeout [ 388.580702][T16924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.706829][T16926] lo speed is unknown, defaulting to 1000 [ 389.189004][ T9863] IPVS: starting estimator thread 0... [ 389.282904][T16956] IPVS: using max 30 ests per chain, 72000 per kthread [ 389.295001][T16933] ip6gretap1: entered allmulticast mode [ 389.302068][T16933] bridge0: port 1(ip6gretap1) entered blocking state [ 389.327339][T16933] bridge0: port 1(ip6gretap1) entered disabled state [ 389.339629][T16933] ip6gretap1: entered promiscuous mode [ 389.356631][T16933] bridge0: port 1(ip6gretap1) entered blocking state [ 389.363779][T16933] bridge0: port 1(ip6gretap1) entered forwarding state [ 389.515948][T16971] syzkaller0: entered promiscuous mode [ 389.521651][T16971] syzkaller0: entered allmulticast mode [ 389.552637][T16971] netlink: 'syz.4.3008': attribute type 4 has an invalid length. [ 390.192177][T16987] lo speed is unknown, defaulting to 1000 [ 390.426305][T16998] __nla_validate_parse: 11 callbacks suppressed [ 390.426322][T16998] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3015'. [ 390.474018][T16981] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3009'. [ 390.483173][T16981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3009'. [ 390.811817][T16993] lo speed is unknown, defaulting to 1000 [ 390.912520][T17012] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 391.111434][T17017] syzkaller1: entered promiscuous mode [ 391.117217][T17017] syzkaller1: entered allmulticast mode [ 391.255790][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 391.264688][T16994] lo speed is unknown, defaulting to 1000 [ 391.272010][T17022] netlink: 'syz.2.3023': attribute type 20 has an invalid length. [ 391.280626][T17022] netlink: 'syz.2.3023': attribute type 21 has an invalid length. [ 391.440225][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 391.558984][T17030] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 391.583123][T17029] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 392.042854][T17038] sctp: [Deprecated]: syz.1.3028 (pid 17038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.042854][T17038] Use struct sctp_sack_info instead [ 392.084964][T17038] sctp: [Deprecated]: syz.1.3028 (pid 17038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.084964][T17038] Use struct sctp_sack_info instead [ 392.155754][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 392.194789][T17041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3030'. [ 392.204085][T17041] netlink: 'syz.4.3030': attribute type 4 has an invalid length. [ 392.369443][T17048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3031'. [ 392.735744][T17063] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 392.748174][T17058] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3035'. [ 393.293145][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3040'. [ 393.900704][T17102] x_tables: duplicate underflow at hook 2 [ 394.005152][T17101] ip6gretap1: left promiscuous mode [ 394.011384][T17101] bridge0: port 1(ip6gretap1) entered disabled state [ 394.047128][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.057304][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.065793][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.081893][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.203398][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.218767][T17110] netlink: 'syz.4.3049': attribute type 13 has an invalid length. [ 394.455453][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.464042][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.481220][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.491483][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.501318][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.515212][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.524902][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.535195][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.571271][T17118] lo speed is unknown, defaulting to 1000 [ 394.641525][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.689832][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.717248][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.749448][ T13] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.971068][ T60] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 394.988083][ T60] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 395.005248][ T60] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 0a:23:74:43:e4:d3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 395.170715][ T60] bond4 (unregistering): (slave gretap1): Releasing active interface [ 395.228208][ T60] bond2 (unregistering): (slave geneve2): Releasing active interface [ 395.308135][T17144] netlink: 'syz.3.3059': attribute type 11 has an invalid length. [ 395.679227][ T60] bond0 (unregistering): Released all slaves [ 395.694201][ T60] bond1 (unregistering): Released all slaves [ 395.785449][ T60] bond2 (unregistering): Released all slaves [ 395.872625][ T60] bond3 (unregistering): (slave veth3): Releasing backup interface [ 395.881260][ T60] bond3 (unregistering): Released all slaves [ 395.893800][ T60] bond4 (unregistering): Released all slaves [ 395.906540][ T60] bond5 (unregistering): Released all slaves [ 395.925492][T17105] lo speed is unknown, defaulting to 1000 [ 396.080277][ T60] : left promiscuous mode [ 396.101002][T17150] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 396.127732][T17150] __nla_validate_parse: 2 callbacks suppressed [ 396.127747][T17150] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3061'. [ 396.173668][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 396.255789][ T5830] Bluetooth: hci0: command tx timeout [ 396.303044][ T60] tipc: Left network mode [ 396.806051][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 397.165669][T17105] chnl_net:caif_netlink_parms(): no params data found [ 397.735601][ T60] hsr_slave_0: left promiscuous mode [ 397.775417][ T60] hsr_slave_1: left promiscuous mode [ 397.859282][ T9869] IPVS: starting estimator thread 0... [ 397.873715][ T60] pim6reg (unregistering): left allmulticast mode [ 397.966751][T17220] IPVS: using max 26 ests per chain, 62400 per kthread [ 398.030030][T17227] sctp: [Deprecated]: syz.4.3084 (pid 17227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.030030][T17227] Use struct sctp_sack_info instead [ 398.334105][ T5830] Bluetooth: hci0: command tx timeout [ 398.360276][T17244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'. [ 398.665773][T17222] erspan0: entered promiscuous mode [ 398.671322][T17222] vlan4: entered promiscuous mode [ 398.714957][T17236] netlink: 'syz.4.3086': attribute type 2 has an invalid length. [ 398.835162][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.865794][T17105] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.881692][T17105] bridge_slave_0: entered allmulticast mode [ 398.920220][T17105] bridge_slave_0: entered promiscuous mode [ 398.945958][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 398.977283][T17248] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 398.985885][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.994183][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.001402][T17105] bridge_slave_1: entered allmulticast mode [ 399.009739][T17105] bridge_slave_1: entered promiscuous mode [ 399.089775][T17105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.111027][T17105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.112916][ T60] IPVS: stop unused estimator thread 0... [ 399.165620][T17253] lo speed is unknown, defaulting to 1000 [ 399.236189][T17105] team0: Port device team_slave_0 added [ 399.276346][T17105] team0: Port device team_slave_1 added [ 399.351377][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3093'. [ 399.415392][T17105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.431220][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.492858][T17105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.529722][T17277] vlan0: entered allmulticast mode [ 399.535130][T17277] batadv0: entered allmulticast mode [ 399.545552][T17105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.552506][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.587197][T17105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.754233][T17105] hsr_slave_0: entered promiscuous mode [ 399.783829][T17105] hsr_slave_1: entered promiscuous mode [ 399.791663][T17105] debugfs: 'hsr0' already exists in 'hsr' [ 399.803128][T17105] Cannot create hsr debugfs directory [ 400.287893][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 400.346128][T17105] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.414981][ T5830] Bluetooth: hci0: command tx timeout [ 400.415247][T17293] lo speed is unknown, defaulting to 1000 [ 400.509959][T17301] netlink: 'syz.3.3102': attribute type 21 has an invalid length. [ 400.521393][T17105] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.534391][T17301] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3102'. [ 400.563791][T17301] netlink: 'syz.3.3102': attribute type 4 has an invalid length. [ 400.573657][T17301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3102'. [ 400.615608][T17105] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.728144][T17105] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.795838][T17314] netlink: 'syz.3.3105': attribute type 1 has an invalid length. [ 400.817585][T17315] netlink: 'syz.3.3105': attribute type 1 has an invalid length. [ 400.890136][T17315] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.198925][T17105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.236402][T17105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.247226][T17105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.285492][T17105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.385027][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 401.869562][T17105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.932096][ T30] audit: type=1804 audit(1761188319.710:4): pid=17355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3116" name="/newroot/599/cgroup.controllers" dev="tmpfs" ino=3121 res=1 errno=0 [ 401.968653][T17105] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.999308][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.006527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.032882][ T30] audit: type=1800 audit(1761188319.710:5): pid=17355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3116" name="cgroup.controllers" dev="tmpfs" ino=3121 res=0 errno=0 [ 402.062244][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.069404][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.245124][T17359] lo speed is unknown, defaulting to 1000 [ 402.345326][T17364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3120'. [ 402.424184][T17365] syzkaller1: entered promiscuous mode [ 402.429684][T17365] syzkaller1: entered allmulticast mode [ 402.502950][ T5830] Bluetooth: hci0: command tx timeout [ 402.686592][T17372] lo speed is unknown, defaulting to 1000 [ 402.887590][T17386] nbd: must specify a size in bytes for the device [ 403.153223][T17392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.178597][T17392] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 403.207932][T17395] netlink: 'syz.1.3126': attribute type 1 has an invalid length. [ 403.222011][T17392] bond0: (slave sit0): Error -95 calling set_mac_address [ 403.417801][T17105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.423427][T17402] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 403.433382][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3129'. [ 403.461007][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 403.534892][T17402] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 403.691275][T17105] veth0_vlan: entered promiscuous mode [ 403.710319][T17409] netlink: 'syz.0.3131': attribute type 13 has an invalid length. [ 403.729955][T17105] veth1_vlan: entered promiscuous mode [ 403.737915][T17409] netlink: 'syz.0.3131': attribute type 17 has an invalid length. [ 403.865764][T17414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3131'. [ 404.101475][T17409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.156734][T17419] ip6gre2: entered allmulticast mode [ 404.192951][T17423] netlink: 'syz.3.3133': attribute type 13 has an invalid length. [ 404.212823][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3133'. [ 404.401194][T17432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3136'. [ 404.513276][T17430] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 404.521040][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 404.651091][T17105] veth0_macvtap: entered promiscuous mode [ 404.698186][T17105] veth1_macvtap: entered promiscuous mode [ 404.749194][T17105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.780718][T17105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.827746][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.874632][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.910555][T17446] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 404.932861][ T180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.952857][ T180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.079339][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.099281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.131091][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.140161][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.204484][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 405.843531][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'. [ 406.450649][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.461638][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.470240][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.491124][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.501902][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.666527][T17486] lo speed is unknown, defaulting to 1000 [ 406.675071][T17492] __nla_validate_parse: 2 callbacks suppressed [ 406.675087][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 406.691768][T17494] tipc: Enabled bearer , priority 0 [ 406.849765][T17490] syzkaller0: entered promiscuous mode [ 406.875145][T17490] syzkaller0: entered allmulticast mode [ 406.891570][T17490] tipc: Resetting bearer [ 406.969080][T17490] tipc: Resetting bearer [ 407.071879][T17504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3152'. [ 407.339620][T17516] validate_nla: 1 callbacks suppressed [ 407.339637][T17516] netlink: 'syz.2.3158': attribute type 6 has an invalid length. [ 407.682829][ T9869] tipc: Node number set to 2341038997 [ 408.575304][ T5830] Bluetooth: hci2: command tx timeout [ 408.689323][T17490] tipc: Disabling bearer [ 408.829419][T17532] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3162'. [ 408.855857][T17531] syz_tun: entered allmulticast mode [ 408.877977][ T180] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.910416][ T180] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.939761][ T180] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.009426][ T180] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.088418][T17545] netlink: zone id is out of range [ 409.099510][T17544] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3166'. [ 409.110050][T17544] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.369900][T17557] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3169'. [ 409.487340][ T1155] bond8 (unregistering): (slave gre2): Releasing backup interface [ 409.497811][ T1155] gre2 (unregistering): left promiscuous mode [ 409.719258][T17564] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 410.038818][ T1155] bond0 (unregistering): Released all slaves [ 410.180060][ T1155] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 410.193804][ T1155] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 410.202396][ T1155] bond1 (unregistering): Released all slaves [ 410.298099][ T1155] bond2 (unregistering): Released all slaves [ 410.311330][ T1155] bond3 (unregistering): Released all slaves [ 410.326218][ T1155] bond4 (unregistering): Released all slaves [ 410.351646][ T1155] bond5 (unregistering): Released all slaves [ 410.449177][ T1155] bond6 (unregistering): Released all slaves [ 410.546938][ T1155] bond7 (unregistering): Released all slaves [ 410.637268][ T1155] bond8 (unregistering): Released all slaves [ 410.651258][ T1155] bond9 (unregistering): Released all slaves [ 410.657393][ T5830] Bluetooth: hci2: command tx timeout [ 410.754305][ T1155] bond10 (unregistering): Released all slaves [ 410.844305][ T1155] bond11 (unregistering): Released all slaves [ 410.933684][ T1155] bond12 (unregistering): Released all slaves [ 410.946340][ T1155] bond13 (unregistering): Released all slaves [ 410.963671][T17530] syz_tun: left allmulticast mode [ 410.969736][T17564] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 411.083114][T17559] lo speed is unknown, defaulting to 1000 [ 411.138129][T17585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'. [ 411.251326][ T1155] tipc: Left network mode [ 411.287182][T17486] chnl_net:caif_netlink_parms(): no params data found [ 411.302207][T17592] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3177'. [ 411.337659][T17592] openvswitch: netlink: Flow actions attr not present in new flow. [ 411.459153][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 411.674996][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.693688][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.700886][T17486] bridge_slave_0: entered allmulticast mode [ 411.728385][T17486] bridge_slave_0: entered promiscuous mode [ 411.766996][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.774719][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.782144][T17486] bridge_slave_1: entered allmulticast mode [ 411.790812][T17486] bridge_slave_1: entered promiscuous mode [ 411.809361][T17560] lo speed is unknown, defaulting to 1000 [ 411.814737][T17608] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3183'. [ 411.833520][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'. [ 411.842854][T17608] netem: invalid attributes len -16 [ 411.848233][T17608] netem: change failed [ 411.939256][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.962290][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.155087][T17615] syz_tun: entered allmulticast mode [ 412.164073][T17486] team0: Port device team_slave_0 added [ 412.179388][T17486] team0: Port device team_slave_1 added [ 412.271912][T17610] lo speed is unknown, defaulting to 1000 [ 412.406183][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.424234][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.461410][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.503905][T17614] syz_tun: left allmulticast mode [ 412.535554][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 412.631369][ T1155] hsr_slave_0: left promiscuous mode [ 412.640338][ T1155] hsr_slave_1: left promiscuous mode [ 412.732925][ T5830] Bluetooth: hci2: command tx timeout [ 413.483641][ T36] smc: removing ib device syz0 [ 413.491247][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.508164][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.593288][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.058643][T17646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3191'. [ 414.072363][T17647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3191'. [ 414.299450][T17486] hsr_slave_0: entered promiscuous mode [ 414.332786][T17486] hsr_slave_1: entered promiscuous mode [ 414.360382][T17486] debugfs: 'hsr0' already exists in 'hsr' [ 414.372201][T17486] Cannot create hsr debugfs directory [ 414.734059][T17657] tipc: Started in network mode [ 414.738950][T17657] tipc: Node identity c29d69ea239e, cluster identity 4711 [ 414.758767][T17657] tipc: Enabled bearer , priority 0 [ 414.766568][T17655] syzkaller0: entered promiscuous mode [ 414.772232][T17655] syzkaller0: entered allmulticast mode [ 414.813881][ T5830] Bluetooth: hci2: command tx timeout [ 415.094304][T17654] tipc: Resetting bearer [ 415.161130][T17654] tipc: Disabling bearer [ 415.424612][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 415.452127][T17486] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.529606][T17486] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.598329][T17486] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.652131][T17486] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.850198][T17669] tipc: Enabled bearer , priority 0 [ 415.876009][ T1155] IPVS: stop unused estimator thread 0... [ 415.892268][T17669] syzkaller0: entered promiscuous mode [ 415.907280][T17669] syzkaller0: entered allmulticast mode [ 416.176363][T17486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.192269][T17669] tipc: Resetting bearer [ 416.235639][T17486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.239289][T17681] netlink: 'syz.0.3200': attribute type 13 has an invalid length. [ 416.251777][T17681] netlink: 'syz.0.3200': attribute type 17 has an invalid length. [ 416.260414][T17486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.283157][T17668] tipc: Resetting bearer [ 416.310249][T17668] tipc: Disabling bearer [ 416.336778][T17681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.356019][T17486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.748163][T17697] erspan1: entered allmulticast mode [ 417.121579][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 417.170480][T17727] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 417.471457][T17486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.511109][T17486] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.557946][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.565175][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.711550][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.718793][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.410011][T17758] netlink: 'syz.0.3218': attribute type 1 has an invalid length. [ 418.428882][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.546873][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3218'. [ 418.578797][T17758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.663686][T17767] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 418.673406][T17767] bond1: (slave batadv1): making interface the new active one [ 418.681699][T17767] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 418.807479][T17771] bond1 (unregistering): (slave batadv1): Releasing active interface [ 418.819194][T17771] bond1 (unregistering): Released all slaves [ 419.380035][T17486] veth0_vlan: entered promiscuous mode [ 419.412870][T17486] veth1_vlan: entered promiscuous mode [ 419.481188][T17486] veth0_macvtap: entered promiscuous mode [ 419.506421][T17486] veth1_macvtap: entered promiscuous mode [ 419.576881][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.633533][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.669384][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.688412][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.748556][T17840] tipc: Started in network mode [ 419.754402][T17840] tipc: Node identity 6ae9497946ef, cluster identity 4711 [ 419.775737][T17840] tipc: Enabled bearer , priority 0 [ 419.880909][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 419.897236][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.916917][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.992892][T17846] wg1: entered promiscuous mode [ 420.005501][T17846] wg1: entered allmulticast mode [ 420.057696][T17839] tipc: Disabling bearer [ 420.297312][T17851] netlink: 'syz.1.3239': attribute type 15 has an invalid length. [ 420.388152][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.414937][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.497191][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.507178][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.614765][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3144'. [ 420.676281][T17866] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3243'. [ 420.929277][T17875] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 420.969004][T17875] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.977226][T17875] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.009357][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'. [ 421.092059][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 421.238990][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 421.713700][T17899] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3253'. [ 421.743604][T17899] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 422.030265][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.043248][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.061462][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.083615][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.092110][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.967133][T17908] chnl_net:caif_netlink_parms(): no params data found [ 422.976525][T17942] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 423.013391][T17942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.078311][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3265'. [ 423.271131][T17908] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.279143][T17908] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.292514][T17908] bridge_slave_0: entered allmulticast mode [ 423.301222][T17908] bridge_slave_0: entered promiscuous mode [ 423.324464][T17908] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.332334][T17908] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.339699][T17908] bridge_slave_1: entered allmulticast mode [ 423.350055][T17908] bridge_slave_1: entered promiscuous mode [ 423.444921][T17908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.472351][T17908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.595782][T17962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3269'. [ 423.607743][T17908] team0: Port device team_slave_0 added [ 423.647826][T17908] team0: Port device team_slave_1 added [ 423.696517][T17962] netlink: 'syz.2.3269': attribute type 13 has an invalid length. [ 423.704980][T17962] netlink: 'syz.2.3269': attribute type 17 has an invalid length. [ 424.009889][T17962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.036793][T17908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.044574][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.084210][T17908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.114717][T17966] netlink: 'syz.4.3270': attribute type 12 has an invalid length. [ 424.175358][ T5830] Bluetooth: hci1: command tx timeout [ 424.198805][T17908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.227989][T17908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.292354][T17908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.445742][T17908] hsr_slave_0: entered promiscuous mode [ 424.452548][T17908] hsr_slave_1: entered promiscuous mode [ 424.459189][T17908] debugfs: 'hsr0' already exists in 'hsr' [ 424.465363][T17908] Cannot create hsr debugfs directory [ 424.495985][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3273'. [ 424.955882][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3276'. [ 424.995923][T17985] tipc: Started in network mode [ 425.000821][T17985] tipc: Node identity 7a0c309403c5, cluster identity 4711 [ 425.008682][T17985] tipc: Enabled bearer , priority 0 [ 425.068258][T17985] syzkaller0: entered promiscuous mode [ 425.087335][T17985] syzkaller0: entered allmulticast mode [ 425.144564][T17992] xt_l2tp: invalid flags combination: 8 [ 425.154264][T17993] xt_l2tp: invalid flags combination: 8 [ 425.206277][T17988] tipc: Resetting bearer [ 425.245191][T17984] tipc: Resetting bearer [ 425.266521][T17984] tipc: Disabling bearer [ 425.306607][T18003] netlink: 'syz.1.3280': attribute type 1 has an invalid length. [ 425.655539][T18010] pim6reg1: entered promiscuous mode [ 425.661791][T18010] pim6reg1: entered allmulticast mode [ 425.723565][T17908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 425.737805][T17908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.761821][T17908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.791190][T17908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.944278][T17908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.971275][T17908] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.989026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.996226][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.025519][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.032665][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.161541][T18045] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3290'. [ 426.252781][ T5830] Bluetooth: hci1: command tx timeout [ 426.296885][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3292'. [ 426.671724][T17908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.775139][T18069] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3297'. [ 426.829620][T17908] veth0_vlan: entered promiscuous mode [ 426.895795][T17908] veth1_vlan: entered promiscuous mode [ 427.160428][T17908] veth0_macvtap: entered promiscuous mode [ 427.251639][T17908] veth1_macvtap: entered promiscuous mode [ 427.356944][T17908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.493753][T17908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.515032][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.546980][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.597530][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.683161][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.768436][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3300'. [ 427.911763][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.955334][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.012007][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.060779][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.239670][T18105] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 428.295955][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 428.336224][ T5830] Bluetooth: hci1: command tx timeout [ 428.646705][T18114] bridge0: port 3(erspan0) entered blocking state [ 428.681531][T18114] bridge0: port 3(erspan0) entered disabled state [ 428.688774][T18114] erspan0: entered allmulticast mode [ 428.697684][T18114] erspan0: entered promiscuous mode [ 428.959920][T18114] syzkaller0: entered promiscuous mode [ 428.970460][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3308'. [ 428.980290][T18114] syzkaller0: entered allmulticast mode [ 429.108439][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 429.351844][T18137] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 429.366413][T18137] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.391446][T18137] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 429.402457][T18137] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.558689][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 429.637197][T18148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 430.417169][ T53] Bluetooth: hci1: command tx timeout [ 431.468478][T18073] Set syz1 is full, maxelem 65536 reached [ 431.729340][T18147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.759996][T18158] x_tables: ip_tables: osf match: only valid for protocol 6 [ 431.774228][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 431.796926][T18156] netlink: 'syz.1.3315': attribute type 15 has an invalid length. [ 431.823902][T18147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.900322][T18162] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 431.923942][T18162] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 432.290082][T18147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.342308][T18182] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3322'. [ 432.352288][T18180] tipc: Enabling of bearer rejected, failed to enable media [ 432.381093][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 432.413137][T18147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.436978][T18182] netlink: 'syz.4.3322': attribute type 54 has an invalid length. [ 432.569275][ T3582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.601200][ T3582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.619919][ T3582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.646929][ T3582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.938376][T18202] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3328'. [ 432.979293][T18206] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.015579][T18202] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 433.298592][T18221] tipc: Enabling of bearer rejected, failed to enable media [ 433.505804][T18221] syzkaller0: entered promiscuous mode [ 433.511918][T18221] syzkaller0: entered allmulticast mode [ 433.838759][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 433.947377][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3336'. [ 434.076566][T18255] tipc: Enabling of bearer rejected, failed to enable media [ 434.097535][T18255] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 434.133452][T18255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.812978][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.464948][T18307] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 435.483323][T18307] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3352'. [ 435.552484][T18297] pimreg3: entered allmulticast mode [ 435.561345][T18308] tipc: Started in network mode [ 435.583213][T18308] tipc: Node identity e24482a2602b, cluster identity 4711 [ 435.613275][T18308] tipc: Enabled bearer , priority 0 [ 435.633715][T18307] syzkaller0: entered promiscuous mode [ 435.663104][T18307] syzkaller0: entered allmulticast mode [ 435.671998][T18308] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 435.758526][T18308] Cannot find add_set index 0 as target [ 435.849440][T18322] batadv_slave_1: entered promiscuous mode [ 435.877085][T18308] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.987874][T18317] batadv_slave_1: left promiscuous mode [ 436.024770][T18306] tipc: Resetting bearer [ 436.070746][T18306] tipc: Disabling bearer [ 436.104596][T18325] FAULT_INJECTION: forcing a failure. [ 436.104596][T18325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.154233][T18325] CPU: 0 UID: 0 PID: 18325 Comm: syz.1.3356 Not tainted syzkaller #0 PREEMPT(full) [ 436.154259][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.154269][T18325] Call Trace: [ 436.154278][T18325] [ 436.154286][T18325] dump_stack_lvl+0x189/0x250 [ 436.154314][T18325] ? __pfx____ratelimit+0x10/0x10 [ 436.154335][T18325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.154357][T18325] ? __pfx__printk+0x10/0x10 [ 436.154388][T18325] should_fail_ex+0x414/0x560 [ 436.154418][T18325] _copy_to_user+0x31/0xb0 [ 436.154443][T18325] simple_read_from_buffer+0xe1/0x170 [ 436.154473][T18325] proc_fail_nth_read+0x1b3/0x220 [ 436.154499][T18325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.154524][T18325] ? rw_verify_area+0x2a6/0x4d0 [ 436.154546][T18325] ? __lock_acquire+0xab9/0xd20 [ 436.154562][T18325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.154585][T18325] vfs_read+0x200/0xa30 [ 436.154607][T18325] ? fdget_pos+0x247/0x320 [ 436.154629][T18325] ? __pfx___mutex_lock+0x10/0x10 [ 436.154651][T18325] ? __pfx_vfs_read+0x10/0x10 [ 436.154676][T18325] ? __fget_files+0x2a/0x420 [ 436.154697][T18325] ? __fget_files+0x3a0/0x420 [ 436.154713][T18325] ? __fget_files+0x2a/0x420 [ 436.154739][T18325] ksys_read+0x145/0x250 [ 436.154768][T18325] ? __pfx_ksys_read+0x10/0x10 [ 436.154795][T18325] ? do_syscall_64+0xbe/0xfa0 [ 436.154820][T18325] do_syscall_64+0xfa/0xfa0 [ 436.154838][T18325] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.154857][T18325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.154874][T18325] ? clear_bhb_loop+0x60/0xb0 [ 436.154894][T18325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.154912][T18325] RIP: 0033:0x7faa36d8d9dc [ 436.154928][T18325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.154944][T18325] RSP: 002b:00007faa37b46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.154963][T18325] RAX: ffffffffffffffda RBX: 00007faa36fe5fa0 RCX: 00007faa36d8d9dc [ 436.154976][T18325] RDX: 000000000000000f RSI: 00007faa37b460a0 RDI: 0000000000000004 [ 436.154987][T18325] RBP: 00007faa37b46090 R08: 0000000000000000 R09: 0000000000000000 [ 436.154999][T18325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.155009][T18325] R13: 00007faa36fe6038 R14: 00007faa36fe5fa0 R15: 00007ffe9b2a0ab8 [ 436.155043][T18325] [ 436.646028][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 436.657699][T18333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.749273][T18336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.779459][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 436.813772][T18330] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 436.855927][T18330] macvtap1: entered promiscuous mode [ 437.236782][T18352] netlink: 'syz.4.3366': attribute type 11 has an invalid length. [ 437.244870][T18352] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3366'. [ 437.317266][T18354] netlink: 'syz.3.3364': attribute type 64 has an invalid length. [ 437.731969][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3372'. [ 437.833023][T18369] nbd0: detected capacity change from 0 to 63 [ 437.852947][T18372] block nbd0: NBD_DISCONNECT [ 437.876712][T18372] block nbd0: Disconnected due to user request. [ 437.878037][T18368] bond1: entered promiscuous mode [ 437.889536][T18368] bond1: entered allmulticast mode [ 437.896898][T18368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.903670][T18372] block nbd0: shutting down sockets [ 437.959909][T18386] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3376'. [ 438.054355][T18391] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 438.118731][T18391] veth5: entered promiscuous mode [ 438.510388][T18408] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3381'. [ 438.529532][T18404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3381'. [ 438.563680][T18408] 0ªX¹¦À: renamed from caif0 [ 438.598888][T18408] 0ªX¹¦À: entered allmulticast mode [ 438.613736][T18408] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 438.876152][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 439.288468][T18442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3391'. [ 439.317819][T18440] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 439.326933][T18440] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 439.620089][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3394'. [ 439.667429][T18446] bond2: (slave bridge_slave_0): Device is not bonding slave [ 439.676119][T18446] bond2: option active_slave: invalid value (bridge_slave_0) [ 439.696070][T18446] bond2 (unregistering): Released all slaves [ 439.780583][T18456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3395'. [ 439.860407][T18461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3397'. [ 439.891768][T18464] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 439.914126][T18464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.943175][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102314][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 440.311545][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 440.523048][T18501] syzkaller1: entered promiscuous mode [ 440.523443][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3406'. [ 440.528540][T18501] syzkaller1: entered allmulticast mode [ 440.781584][T18515] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 440.809998][T18515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.846183][T18517] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3412'. [ 440.855648][T18515] FAULT_INJECTION: forcing a failure. [ 440.855648][T18515] name failslab, interval 1, probability 0, space 0, times 0 [ 440.882904][T18515] CPU: 1 UID: 0 PID: 18515 Comm: syz.4.3411 Not tainted syzkaller #0 PREEMPT(full) [ 440.882929][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.882939][T18515] Call Trace: [ 440.882947][T18515] [ 440.882954][T18515] dump_stack_lvl+0x189/0x250 [ 440.882982][T18515] ? __pfx____ratelimit+0x10/0x10 [ 440.883002][T18515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.883025][T18515] ? __pfx__printk+0x10/0x10 [ 440.883040][T18515] ? netlink_sendmsg+0x805/0xb30 [ 440.883066][T18515] ? __x64_sys_sendmsg+0x19b/0x260 [ 440.883082][T18515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.883109][T18515] should_fail_ex+0x414/0x560 [ 440.883140][T18515] should_failslab+0xa8/0x100 [ 440.883160][T18515] kmem_cache_alloc_noprof+0x74/0x6e0 [ 440.883184][T18515] ? skb_clone+0x212/0x3a0 [ 440.883207][T18515] skb_clone+0x212/0x3a0 [ 440.883229][T18515] __netlink_deliver_tap+0x404/0x850 [ 440.883267][T18515] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.883292][T18515] netlink_deliver_tap+0x19c/0x1b0 [ 440.883318][T18515] netlink_sendskb+0x68/0x140 [ 440.883343][T18515] netlink_unicast+0x397/0x9e0 [ 440.883362][T18515] ? __asan_memcpy+0x40/0x70 [ 440.883393][T18515] ? __pfx_netlink_unicast+0x10/0x10 [ 440.883426][T18515] netlink_rcv_skb+0x28c/0x470 [ 440.883447][T18515] ? __lock_acquire+0xab9/0xd20 [ 440.883466][T18515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.883488][T18515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.883533][T18515] ? down_read+0x1ad/0x2e0 [ 440.883559][T18515] genl_rcv+0x28/0x40 [ 440.883577][T18515] netlink_unicast+0x82f/0x9e0 [ 440.883609][T18515] ? __pfx_netlink_unicast+0x10/0x10 [ 440.883634][T18515] ? netlink_sendmsg+0x642/0xb30 [ 440.883654][T18515] ? skb_put+0x11b/0x210 [ 440.883682][T18515] netlink_sendmsg+0x805/0xb30 [ 440.883720][T18515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.883749][T18515] ? aa_sock_msg_perm+0xf1/0x1d0 [ 440.883775][T18515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.883793][T18515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.883819][T18515] __sock_sendmsg+0x21c/0x270 [ 440.883842][T18515] ____sys_sendmsg+0x505/0x830 [ 440.883871][T18515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.883898][T18515] ? import_iovec+0x74/0xa0 [ 440.883924][T18515] ___sys_sendmsg+0x21f/0x2a0 [ 440.883944][T18515] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.884006][T18515] ? __fget_files+0x2a/0x420 [ 440.884022][T18515] ? __fget_files+0x3a0/0x420 [ 440.884051][T18515] __x64_sys_sendmsg+0x19b/0x260 [ 440.884070][T18515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.884099][T18515] ? __pfx_ksys_write+0x10/0x10 [ 440.884126][T18515] ? do_syscall_64+0xbe/0xfa0 [ 440.884151][T18515] do_syscall_64+0xfa/0xfa0 [ 440.884170][T18515] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.884189][T18515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.884207][T18515] ? clear_bhb_loop+0x60/0xb0 [ 440.884229][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.884246][T18515] RIP: 0033:0x7ff8daf8efc9 [ 440.884262][T18515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.884276][T18515] RSP: 002b:00007ff8dbe4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.884295][T18515] RAX: ffffffffffffffda RBX: 00007ff8db1e5fa0 RCX: 00007ff8daf8efc9 [ 440.884309][T18515] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 440.884321][T18515] RBP: 00007ff8dbe4c090 R08: 0000000000000000 R09: 0000000000000000 [ 440.884332][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.884342][T18515] R13: 00007ff8db1e6038 R14: 00007ff8db1e5fa0 R15: 00007ffe88903128 [ 440.884375][T18515] [ 441.324564][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 441.335882][T18523] netlink: 'syz.1.3413': attribute type 1 has an invalid length. [ 441.984883][T18540] : renamed from bond_slave_0 (while UP) [ 441.988996][T18544] nbd: must specify at least one socket [ 441.997021][T18546] nbd: must specify at least one socket [ 443.052298][T18592] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 443.070251][T18592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.151934][T18598] tipc: Enabled bearer , priority 0 [ 443.161211][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.176974][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.198790][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.208677][T18600] x_tables: duplicate underflow at hook 4 [ 443.266958][T18597] syzkaller0: entered promiscuous mode [ 443.275128][T18597] syzkaller0: entered allmulticast mode [ 443.281700][T18597] tipc: Resetting bearer [ 443.289588][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.313679][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.325235][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.346980][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.366393][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.386107][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.408295][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.418402][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.431750][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.440627][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.450385][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.474493][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.483913][T18611] netlink: 'syz.3.3440': attribute type 14 has an invalid length. [ 443.501498][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.513266][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.521852][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.562048][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.575030][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.585065][T18616] syz_tun: entered allmulticast mode [ 443.598830][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.635698][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.647310][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.657071][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.666927][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.689365][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.713872][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.734862][T18615] syz_tun: left allmulticast mode [ 443.740325][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.807599][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.836380][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.850217][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.869835][T18598] tipc: Enabling of bearer rejected, already enabled [ 443.919891][T18596] tipc: Resetting bearer [ 444.207019][ T5837] tipc: Node number set to 3775097322 [ 445.271874][T18596] tipc: Disabling bearer [ 445.280829][T18624] __nla_validate_parse: 1 callbacks suppressed [ 445.280842][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3445'. [ 445.324189][T18632] bond_slave_0: entered promiscuous mode [ 445.329872][T18632] bond_slave_1: entered promiscuous mode [ 445.336483][T18632] vlan2: entered promiscuous mode [ 445.341518][T18632] bond0: entered promiscuous mode [ 445.449327][T18638] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 445.485886][T18638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.661173][T18647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3452'. [ 445.855225][T18659] syz_tun: entered allmulticast mode [ 445.862279][T18660] netlink: 'syz.4.3457': attribute type 4 has an invalid length. [ 445.876604][T18657] syz_tun: left allmulticast mode [ 445.887393][T18660] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3457'. [ 445.914017][T18656] bridge0: entered promiscuous mode [ 445.943856][T18660] .`: renamed from bond0 (while UP) [ 445.955314][T18656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3455'. [ 446.142379][T18675] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3461'. [ 446.244125][T18680] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3463'. [ 446.550503][T18705] macvlan3: entered promiscuous mode [ 446.556521][T18705] : entered promiscuous mode [ 446.561355][T18705] bond_slave_1: entered promiscuous mode [ 446.568221][T18705] bond0: entered promiscuous mode [ 446.576212][T18705] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 446.586613][T18705] team0: Port device macvlan3 added [ 446.592520][T18704] syz_tun: entered allmulticast mode [ 446.618853][T18707] tipc: Enabled bearer , priority 0 [ 446.626485][T18707] syzkaller0: entered promiscuous mode [ 446.632038][T18707] syzkaller0: entered allmulticast mode [ 446.652188][T18707] tipc: Resetting bearer [ 446.666582][T18706] tipc: Resetting bearer [ 446.681630][T18706] tipc: Disabling bearer [ 446.702631][T18701] syz_tun: left allmulticast mode [ 446.779057][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'. [ 446.840238][T18718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 446.908628][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3476'. [ 446.917736][T18720] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 447.021675][T18723] pim6reg: entered allmulticast mode [ 447.036510][T18723] pim6reg: left allmulticast mode [ 447.089395][T18724] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3476'. [ 447.449392][T18739] syz_tun: entered allmulticast mode [ 447.460283][T18736] syz_tun: left allmulticast mode [ 447.690252][T18757] syzkaller1: entered promiscuous mode [ 447.696932][T18757] syzkaller1: entered allmulticast mode [ 447.859685][T18763] xt_hashlimit: max too large, truncated to 1048576 [ 448.394600][T18780] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 448.818591][T18757] ip6gretap1: left allmulticast mode [ 448.829284][T18757] vlan0: left allmulticast mode [ 448.834728][T18757] batadv0: left allmulticast mode [ 448.840127][T18757] erspan1: left allmulticast mode [ 448.846602][T18757] bridge0: left promiscuous mode [ 448.856437][T18757] syzkaller1: left promiscuous mode [ 448.863266][T18757] syzkaller1: left allmulticast mode [ 448.872976][T18760] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 448.900825][T18780] pim6reg: entered allmulticast mode [ 448.957631][T18781] pim6reg: left allmulticast mode [ 449.015388][ T180] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.031902][ T180] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.058319][ T180] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.069683][ T180] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.156769][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.173702][T18792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.636074][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.644550][T18792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.358493][T18848] Bluetooth: MGMT ver 1.23 [ 450.444883][T18850] __nla_validate_parse: 6 callbacks suppressed [ 450.444900][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 450.475186][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 450.527902][T18850] netlink: 'syz.1.3504': attribute type 7 has an invalid length. [ 450.606217][T18864] netlink: 'syz.3.3508': attribute type 39 has an invalid length. [ 450.771387][T18875] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 450.777328][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3510'. [ 450.804240][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3512'. [ 450.950575][T18873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.994043][T18886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3510'. [ 451.014740][T18889] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 451.033782][T18889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.127074][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.149605][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.158151][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.168083][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.278011][T18903] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 451.286139][T18903] netlink: 'syz.0.3519': attribute type 2 has an invalid length. [ 451.403613][T18906] gretap0: entered promiscuous mode [ 451.422393][T18906] vlan2: entered promiscuous mode [ 451.469397][T18914] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 451.623385][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'. [ 452.224747][T18952] tipc: Enabled bearer , priority 0 [ 452.245093][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3533'. [ 452.282612][T18952] syzkaller0: entered promiscuous mode [ 452.300907][T18952] syzkaller0: entered allmulticast mode [ 452.387578][T18958] wlan1 speed is unknown, defaulting to 1000 [ 452.396689][T18958] wlan1 speed is unknown, defaulting to 1000 [ 452.409206][T18952] tipc: Resetting bearer [ 452.426173][T18958] wlan1 speed is unknown, defaulting to 1000 [ 452.481196][T18950] tipc: Resetting bearer [ 452.565546][T18950] tipc: Disabling bearer [ 452.783421][T18976] syz_tun: entered allmulticast mode [ 452.977382][T18975] syz_tun: left allmulticast mode [ 453.034355][ T5900] wlan1 speed is unknown, defaulting to 1000 [ 453.051224][T18958] infiniband syz2: set down [ 453.056671][T18958] infiniband syz2: added wlan1 [ 453.119384][T18958] RDS/IB: syz2: added [ 453.124024][T18958] smc: adding ib device syz2 with port count 1 [ 453.130296][T18958] smc: ib device syz2 port 1 has no pnetid [ 453.138319][ T5900] wlan1 speed is unknown, defaulting to 1000 [ 453.145961][T18958] wlan1 speed is unknown, defaulting to 1000 [ 453.176131][T18989] netlink: 'syz.1.3541': attribute type 10 has an invalid length. [ 453.365018][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 453.392224][T19000] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3544'. [ 453.525992][T19002] syz_tun: entered allmulticast mode [ 453.532860][ T53] Bluetooth: hci0: command tx timeout [ 453.639824][T18958] wlan1 speed is unknown, defaulting to 1000 [ 453.656950][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3545'. [ 453.927667][T18993] wlan1 speed is unknown, defaulting to 1000 [ 454.136458][T19002] wlan1 speed is unknown, defaulting to 1000 [ 454.409504][T19001] syz_tun: left allmulticast mode [ 454.427470][T18958] wlan1 speed is unknown, defaulting to 1000 [ 454.470812][T19026] vlan0: entered promiscuous mode [ 454.806000][T19035] syzkaller0: entered promiscuous mode [ 454.811757][T19035] syzkaller0: entered allmulticast mode [ 454.909129][T18958] wlan1 speed is unknown, defaulting to 1000 [ 455.074199][T19038] netlink: 'syz.1.3555': attribute type 8 has an invalid length. [ 455.377399][T18958] wlan1 speed is unknown, defaulting to 1000 [ 455.714056][T19052] €Â: renamed from dummy0 [ 455.754412][T19054] __nla_validate_parse: 1 callbacks suppressed [ 455.754429][T19054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3559'. [ 455.760158][T18958] wlan1 speed is unknown, defaulting to 1000 [ 456.085130][T19057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.094754][T19057] team0: Port device bond1 added [ 456.100003][T18958] wlan1 speed is unknown, defaulting to 1000 [ 456.269711][T19061] netlink: 352 bytes leftover after parsing attributes in process `syz.2.3561'. [ 457.599673][T19082] netlink: 'syz.4.3566': attribute type 21 has an invalid length. [ 457.608307][T19087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3568'. [ 457.844494][T19094] tipc: Enabled bearer , priority 0 [ 457.952126][T19094] syzkaller0: entered promiscuous mode [ 457.958092][T19094] syzkaller0: entered allmulticast mode [ 457.968787][T19094] tipc: Resetting bearer [ 457.984337][T19096] netlink: 'syz.4.3571': attribute type 4 has an invalid length. [ 458.024747][T19098] netlink: 'syz.2.3572': attribute type 1 has an invalid length. [ 458.055794][T19094] netlink: 'syz.4.3571': attribute type 4 has an invalid length. [ 458.116000][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3571'. [ 458.127731][T19100] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.150573][T19098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3572'. [ 458.164217][T19100] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 458.533868][T19094] tipc: Resetting bearer [ 458.661908][T19103] tipc: Enabled bearer , priority 10 [ 458.674980][ T3582] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.711449][ T3582] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.954578][ T5905] tipc: Node number set to 2043228308 [ 459.401008][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 459.410207][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'. [ 459.451741][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3580'. [ 459.566431][T19135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3582'. [ 459.575824][T19135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3582'. [ 460.430923][T19092] tipc: Disabling bearer [ 460.439884][ T3582] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.449290][ T3582] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.469036][T19115] syz.0.3577: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 460.488737][T19115] CPU: 1 UID: 0 PID: 19115 Comm: syz.0.3577 Not tainted syzkaller #0 PREEMPT(full) [ 460.488760][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.488770][T19115] Call Trace: [ 460.488779][T19115] [ 460.488786][T19115] dump_stack_lvl+0x189/0x250 [ 460.488818][T19115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.488840][T19115] ? __pfx__printk+0x10/0x10 [ 460.488858][T19115] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 460.488881][T19115] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 460.488908][T19115] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 460.488934][T19115] warn_alloc+0x214/0x310 [ 460.488965][T19115] ? __pfx_warn_alloc+0x10/0x10 [ 460.488996][T19115] ? __get_vm_area_node+0x28f/0x300 [ 460.489020][T19115] ? xp_create_and_assign_umem+0x197/0xd00 [ 460.489047][T19115] __vmalloc_node_range_noprof+0x690/0x12d0 [ 460.489105][T19115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 460.489129][T19115] ? xp_create_and_assign_umem+0x197/0xd00 [ 460.489156][T19115] ? rcu_is_watching+0x15/0xb0 [ 460.489177][T19115] ? xp_create_and_assign_umem+0x197/0xd00 [ 460.489200][T19115] __kvmalloc_node_noprof+0x674/0x910 [ 460.489226][T19115] ? xp_create_and_assign_umem+0x197/0xd00 [ 460.489249][T19115] ? xp_create_and_assign_umem+0xa9/0xd00 [ 460.489278][T19115] xp_create_and_assign_umem+0x197/0xd00 [ 460.489311][T19115] ? dev_get_by_index+0x22/0x2e0 [ 460.489329][T19115] ? dev_get_by_index+0x22/0x2e0 [ 460.489356][T19115] xsk_bind+0x42d/0xf90 [ 460.489373][T19115] ? apparmor_socket_bind+0xff/0x1e0 [ 460.489405][T19115] __sys_bind+0x2c6/0x3e0 [ 460.489431][T19115] ? __pfx___sys_bind+0x10/0x10 [ 460.489466][T19115] ? rcu_is_watching+0x15/0xb0 [ 460.489496][T19115] __x64_sys_bind+0x7a/0x90 [ 460.489520][T19115] do_syscall_64+0xfa/0xfa0 [ 460.489540][T19115] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.489560][T19115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.489578][T19115] ? clear_bhb_loop+0x60/0xb0 [ 460.489601][T19115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.489619][T19115] RIP: 0033:0x7f172d38efc9 [ 460.489636][T19115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.489652][T19115] RSP: 002b:00007f172e19e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 460.489671][T19115] RAX: ffffffffffffffda RBX: 00007f172d5e6090 RCX: 00007f172d38efc9 [ 460.489685][T19115] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 460.489697][T19115] RBP: 00007f172d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.489715][T19115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.489727][T19115] R13: 00007f172d5e6128 R14: 00007f172d5e6090 R15: 00007ffcb9196658 [ 460.489761][T19115] [ 460.489769][T19115] Mem-Info: [ 460.781685][T19115] active_anon:5707 inactive_anon:0 isolated_anon:0 [ 460.781685][T19115] active_file:3689 inactive_file:40039 isolated_file:0 [ 460.781685][T19115] unevictable:2168 dirty:308 writeback:0 [ 460.781685][T19115] slab_reclaimable:12158 slab_unreclaimable:166293 [ 460.781685][T19115] mapped:29591 shmem:1361 pagetables:1012 [ 460.781685][T19115] sec_pagetables:0 bounce:0 [ 460.781685][T19115] kernel_misc_reclaimable:0 [ 460.781685][T19115] free:1250556 free_pcp:13981 free_cma:0 [ 460.829128][T19115] Node 0 active_anon:19328kB inactive_anon:0kB active_file:14756kB inactive_file:159952kB unevictable:7136kB isolated(anon):0kB isolated(file):0kB mapped:118364kB dirty:1232kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13504kB pagetables:3892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 460.862658][T19115] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 460.894173][T19115] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.924971][T19115] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 460.931322][T19115] Node 0 DMA32 free:1093500kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19232kB inactive_anon:0kB active_file:14756kB inactive_file:159960kB unevictable:7060kB writepending:1164kB zspages:0kB present:3129332kB managed:2565224kB mlocked:5524kB bounce:0kB free_pcp:44408kB local_pcp:19888kB free_cma:0kB [ 460.967160][T19115] lowmem_reserve[]: 0 0 0 0 0 [ 460.971907][T19115] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.004627][T19115] lowmem_reserve[]: 0 0 0 0 0 [ 461.009377][T19115] Node 1 Normal free:3893364kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15792kB local_pcp:7976kB free_cma:0kB [ 461.043640][T19115] lowmem_reserve[]: 0 0 0 0 0 [ 461.048746][T19115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 461.063772][T19115] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 7*16kB (UME) 4*32kB (ME) 22*64kB (UM) 36*128kB (UME) 25*256kB (UME) 59*512kB (UM) 44*1024kB (UM) 5*2048kB (UME) 243*4096kB (UM) = 1093500kB [ 461.081505][T19115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 461.093287][T19115] Node 1 Normal: 175*4kB (UE) 49*8kB (UM) 53*16kB (UME) 109*32kB (UME) 31*64kB (UME) 13*128kB (UME) 7*256kB (UM) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3893364kB [ 461.111650][T19115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.122084][T19115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 461.131830][T19115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.142261][T19115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 461.151942][T19115] 45088 total pagecache pages [ 461.156990][T19115] 0 pages in swap cache [ 461.161129][T19115] Free swap = 124996kB [ 461.165682][T19115] Total swap = 124996kB [ 461.169821][T19115] 2097051 pages RAM [ 461.174173][T19115] 0 pages HighMem/MovableOnly [ 461.178843][T19115] 424103 pages reserved [ 461.183385][T19115] 0 pages cma reserved [ 461.240488][T19114] wlan1 speed is unknown, defaulting to 1000 [ 461.614475][T19136] wlan1 speed is unknown, defaulting to 1000 [ 462.492140][T19174] __nla_validate_parse: 2 callbacks suppressed [ 462.492158][T19174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3590'. [ 462.582961][T19171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3590'. [ 462.763413][T19175] syzkaller1: entered promiscuous mode [ 462.768981][T19175] syzkaller1: entered allmulticast mode [ 462.929168][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 463.132603][T19198] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3596'. [ 463.193965][T19196] wlan1 speed is unknown, defaulting to 1000 [ 463.416337][T19207] vlan0: entered promiscuous mode [ 463.454504][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3601'. [ 463.505248][T19210] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3601'. [ 463.674371][T19203] netlink: 'syz.1.3600': attribute type 12 has an invalid length. [ 463.717320][T19219] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 463.749307][T19219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.136822][T19241] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 464.153120][T19241] bond3 (unregistering): Released all slaves [ 464.201555][T19226] wlan1 speed is unknown, defaulting to 1000 [ 464.288920][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 464.582022][T19228] wlan1 speed is unknown, defaulting to 1000 [ 465.026798][T19258] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3615'. [ 465.056803][T19242] wlan1 speed is unknown, defaulting to 1000 [ 465.147976][T19263] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 465.157384][T19263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.185305][T19261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3616'. [ 465.342088][T19265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3616'. [ 465.409029][T19261] smc: net device geneve0 applied user defined pnetid SYZ0 [ 466.721669][T19307] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 466.755399][T19307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.924771][T19320] netlink: 'syz.3.3635': attribute type 4 has an invalid length. [ 467.137529][T19337] rdma_rxe: rxe_newlink: failed to add lo [ 467.560061][T19356] netlink: 'syz.0.3648': attribute type 2 has an invalid length. [ 468.224249][T19390] wlan1 speed is unknown, defaulting to 1000 [ 468.310411][T19392] Bluetooth: MGMT ver 1.23 [ 468.329373][T19394] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 468.353619][T19394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.459321][T19397] netlink: 'syz.1.3661': attribute type 1 has an invalid length. [ 468.496603][T19400] __nla_validate_parse: 7 callbacks suppressed [ 468.496618][T19400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3662'. [ 468.514558][T19397] bond3: entered promiscuous mode [ 468.520539][T19397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.595034][T19401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.602144][T19401] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 468.613237][T19397] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 468.613276][T19397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.631428][T19401] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 468.643650][T19401] bond3: (slave gre1): making interface the new active one [ 468.650858][T19401] gre1: entered promiscuous mode [ 468.658428][T19401] bond3: (slave gre1): Enslaving as an active interface with an up link [ 468.704515][T19405] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 468.815338][T19410] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 468.828185][T19410] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 468.879658][T19405] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 468.890519][T19413] tipc: Enabled bearer , priority 0 [ 468.906107][T19405] SET target dimension over the limit! [ 468.927075][T19409] tipc: Resetting bearer [ 468.933078][T19405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3664'. [ 468.942446][T19417] netlink: 'syz.1.3668': attribute type 12 has an invalid length. [ 468.976898][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 468.995318][T19409] tipc: Disabling bearer [ 469.171357][T19425] xt_hashlimit: overflow, try lower: 0/0 [ 469.182366][T19427] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.307485][T19438] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 469.317579][T19438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.702626][T19461] xt_hashlimit: overflow, try lower: 0/0 [ 469.836692][T19474] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 469.845855][T19474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.981637][T19477] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 470.010064][T19478] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 470.045143][T19477] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 470.056839][T19477] tipc: Enabled bearer , priority 10 [ 470.146889][T19487] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 470.229221][T19491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3695'. [ 470.273927][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3695'. [ 470.294697][T19487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.324415][T19468] wlan1 speed is unknown, defaulting to 1000 [ 470.383030][T19484] nbd3: detected capacity change from 0 to 63 [ 470.389454][T19486] block nbd3: NBD_DISCONNECT [ 470.396449][T19487] veth7: entered promiscuous mode [ 470.402383][T19486] block nbd3: Disconnected due to user request. [ 470.415939][T19487] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 470.445657][T19486] block nbd3: shutting down sockets [ 470.601501][T19506] xt_hashlimit: overflow, try lower: 0/0 [ 470.626290][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3698'. [ 470.650028][T19510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3700'. [ 470.662564][T19510] tipc: Invalid UDP bearer configuration [ 470.662619][T19510] tipc: Enabling of bearer rejected, failed to enable media [ 470.831728][T19510] sctp: [Deprecated]: syz.3.3700 (pid 19510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.831728][T19510] Use struct sctp_sack_info instead [ 471.057511][T19530] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 471.104193][T19530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.201142][T19532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3708'. [ 471.283619][T19540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3710'. [ 471.395038][T19546] xt_hashlimit: overflow, try lower: 0/0 [ 471.553042][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'. [ 471.702512][T19555] vlan0: entered promiscuous mode [ 471.774290][T19558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3716'. [ 471.905470][T19563] erspan0: left allmulticast mode [ 471.910662][T19563] erspan0: left promiscuous mode [ 471.918275][T19563] bridge0: port 3(erspan0) entered disabled state [ 471.997807][T19563] bridge_slave_1: left allmulticast mode [ 472.021351][T19563] bridge_slave_1: left promiscuous mode [ 472.047832][T19563] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.055725][T19572] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 472.055725][T19570] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 472.102586][T19563] bridge_slave_0: left allmulticast mode [ 472.111453][T19563] bridge_slave_0: left promiscuous mode [ 472.141980][T19563] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.233468][T19583] xt_hashlimit: overflow, try lower: 0/0 [ 472.496436][T19594] vlan0: entered promiscuous mode [ 472.774160][T19599] FAULT_INJECTION: forcing a failure. [ 472.774160][T19599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.829782][T19599] CPU: 1 UID: 0 PID: 19599 Comm: syz.2.3727 Not tainted syzkaller #0 PREEMPT(full) [ 472.829808][T19599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.829817][T19599] Call Trace: [ 472.829825][T19599] [ 472.829832][T19599] dump_stack_lvl+0x189/0x250 [ 472.829856][T19599] ? __pfx____ratelimit+0x10/0x10 [ 472.829873][T19599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.829890][T19599] ? __pfx__printk+0x10/0x10 [ 472.829914][T19599] should_fail_ex+0x414/0x560 [ 472.829939][T19599] strncpy_from_user+0x36/0x290 [ 472.829960][T19599] getname_flags+0xf3/0x540 [ 472.829979][T19599] do_sys_openat2+0xbc/0x1c0 [ 472.829997][T19599] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.830016][T19599] ? ksys_write+0x22a/0x250 [ 472.830035][T19599] ? __pfx_ksys_write+0x10/0x10 [ 472.830055][T19599] __x64_sys_openat+0x138/0x170 [ 472.830075][T19599] do_syscall_64+0xfa/0xfa0 [ 472.830091][T19599] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.830107][T19599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.830120][T19599] ? clear_bhb_loop+0x60/0xb0 [ 472.830137][T19599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.830149][T19599] RIP: 0033:0x7f104458efc9 [ 472.830162][T19599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.830175][T19599] RSP: 002b:00007f10453ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.830190][T19599] RAX: ffffffffffffffda RBX: 00007f10447e6090 RCX: 00007f104458efc9 [ 472.830200][T19599] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 472.830210][T19599] RBP: 00007f10453ee090 R08: 0000000000000000 R09: 0000000000000000 [ 472.830219][T19599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.830227][T19599] R13: 00007f10447e6128 R14: 00007f10447e6090 R15: 00007ffe0c939a58 [ 472.830251][T19599] [ 473.146207][T19608] wlan1 speed is unknown, defaulting to 1000 [ 473.285805][T19610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 473.452335][T19612] syzkaller0: entered promiscuous mode [ 473.504661][T19612] syzkaller0: entered allmulticast mode [ 473.695209][T19630] __nla_validate_parse: 3 callbacks suppressed [ 473.695226][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 475.002583][T19628] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 475.097672][T19632] wlan1 speed is unknown, defaulting to 1000 [ 475.335396][T19647] smc: net device bond0 applied user defined pnetid SYZ2 [ 475.847420][T19669] FAULT_INJECTION: forcing a failure. [ 475.847420][T19669] name failslab, interval 1, probability 0, space 0, times 0 [ 475.913754][T19669] CPU: 0 UID: 0 PID: 19669 Comm: syz.0.3748 Not tainted syzkaller #0 PREEMPT(full) [ 475.913779][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 475.913789][T19669] Call Trace: [ 475.913797][T19669] [ 475.913805][T19669] dump_stack_lvl+0x189/0x250 [ 475.913833][T19669] ? __pfx____ratelimit+0x10/0x10 [ 475.913854][T19669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.913876][T19669] ? __pfx__printk+0x10/0x10 [ 475.913901][T19669] ? __pfx___might_resched+0x10/0x10 [ 475.913919][T19669] ? fs_reclaim_acquire+0x7d/0x100 [ 475.913949][T19669] should_fail_ex+0x414/0x560 [ 475.913979][T19669] should_failslab+0xa8/0x100 [ 475.913999][T19669] kmem_cache_alloc_noprof+0x74/0x6e0 [ 475.914022][T19669] ? alloc_empty_file+0x55/0x1d0 [ 475.914040][T19669] ? kernel_text_address+0xa5/0xe0 [ 475.914068][T19669] alloc_empty_file+0x55/0x1d0 [ 475.914089][T19669] path_openat+0x107/0x3830 [ 475.914121][T19669] ? stack_trace_save+0x9c/0xe0 [ 475.914146][T19669] ? stack_depot_save_flags+0x40/0x860 [ 475.914171][T19669] ? _parse_integer_limit+0x151/0x1f0 [ 475.914201][T19669] ? kasan_save_track+0x4f/0x80 [ 475.914225][T19669] ? getname_flags+0xb8/0x540 [ 475.914240][T19669] ? do_sys_openat2+0xbc/0x1c0 [ 475.914257][T19669] ? __x64_sys_openat+0x138/0x170 [ 475.914276][T19669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.914295][T19669] ? __pfx_path_openat+0x10/0x10 [ 475.914337][T19669] do_filp_open+0x1fa/0x410 [ 475.914357][T19669] ? __lock_acquire+0xab9/0xd20 [ 475.914376][T19669] ? __pfx_do_filp_open+0x10/0x10 [ 475.914420][T19669] ? _raw_spin_unlock+0x28/0x50 [ 475.914444][T19669] ? alloc_fd+0x64c/0x6c0 [ 475.914480][T19669] do_sys_openat2+0x121/0x1c0 [ 475.914503][T19669] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.914527][T19669] ? ksys_write+0x22a/0x250 [ 475.914553][T19669] ? __pfx_ksys_write+0x10/0x10 [ 475.914578][T19669] __x64_sys_openat+0x138/0x170 [ 475.914604][T19669] do_syscall_64+0xfa/0xfa0 [ 475.914623][T19669] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.914642][T19669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.914663][T19669] ? clear_bhb_loop+0x60/0xb0 [ 475.914685][T19669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.914703][T19669] RIP: 0033:0x7f172d38efc9 [ 475.914718][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.914734][T19669] RSP: 002b:00007f172e19e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.914754][T19669] RAX: ffffffffffffffda RBX: 00007f172d5e6090 RCX: 00007f172d38efc9 [ 475.914768][T19669] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 475.914780][T19669] RBP: 00007f172e19e090 R08: 0000000000000000 R09: 0000000000000000 [ 475.914792][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.914803][T19669] R13: 00007f172d5e6128 R14: 00007f172d5e6090 R15: 00007ffcb9196658 [ 475.914835][T19669] [ 475.974307][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'. [ 476.395980][T19677] tipc: Enabled bearer , priority 0 [ 476.416380][T19677] syzkaller0: entered promiscuous mode [ 476.421887][T19677] syzkaller0: entered allmulticast mode [ 476.462098][T19677] tipc: Resetting bearer [ 476.637361][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3755'. [ 476.649465][T19676] tipc: Resetting bearer [ 476.718580][T19676] tipc: Disabling bearer [ 476.872202][T19685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.068235][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 477.135126][T19711] syzkaller0: entered promiscuous mode [ 477.140639][T19711] syzkaller0: entered allmulticast mode [ 477.477910][T19734] net_ratelimit: 4 callbacks suppressed [ 477.477926][T19734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.564036][T19736] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 477.634291][T19737] FAULT_INJECTION: forcing a failure. [ 477.634291][T19737] name failslab, interval 1, probability 0, space 0, times 0 [ 477.657437][T19737] CPU: 1 UID: 0 PID: 19737 Comm: syz.1.3764 Not tainted syzkaller #0 PREEMPT(full) [ 477.657462][T19737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.657473][T19737] Call Trace: [ 477.657480][T19737] [ 477.657489][T19737] dump_stack_lvl+0x189/0x250 [ 477.657516][T19737] ? __pfx____ratelimit+0x10/0x10 [ 477.657536][T19737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.657559][T19737] ? __pfx__printk+0x10/0x10 [ 477.657583][T19737] ? __pfx___might_resched+0x10/0x10 [ 477.657607][T19737] should_fail_ex+0x414/0x560 [ 477.657636][T19737] should_failslab+0xa8/0x100 [ 477.657656][T19737] kmem_cache_alloc_noprof+0x74/0x6e0 [ 477.657679][T19737] ? security_file_alloc+0x34/0x330 [ 477.657704][T19737] security_file_alloc+0x34/0x330 [ 477.657726][T19737] init_file+0x93/0x2f0 [ 477.657750][T19737] alloc_empty_file+0x6e/0x1d0 [ 477.657770][T19737] path_openat+0x107/0x3830 [ 477.657803][T19737] ? stack_trace_save+0x9c/0xe0 [ 477.657829][T19737] ? stack_depot_save_flags+0x40/0x860 [ 477.657853][T19737] ? _parse_integer_limit+0x151/0x1f0 [ 477.657884][T19737] ? kasan_save_track+0x4f/0x80 [ 477.657908][T19737] ? getname_flags+0xb8/0x540 [ 477.657924][T19737] ? do_sys_openat2+0xbc/0x1c0 [ 477.657941][T19737] ? __x64_sys_openat+0x138/0x170 [ 477.657959][T19737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.657978][T19737] ? __pfx_path_openat+0x10/0x10 [ 477.658021][T19737] do_filp_open+0x1fa/0x410 [ 477.658048][T19737] ? __lock_acquire+0xab9/0xd20 [ 477.658068][T19737] ? __pfx_do_filp_open+0x10/0x10 [ 477.658112][T19737] ? _raw_spin_unlock+0x28/0x50 [ 477.658130][T19737] ? alloc_fd+0x64c/0x6c0 [ 477.658167][T19737] do_sys_openat2+0x121/0x1c0 [ 477.658191][T19737] ? __pfx_do_sys_openat2+0x10/0x10 [ 477.658215][T19737] ? ksys_write+0x22a/0x250 [ 477.658241][T19737] ? __pfx_ksys_write+0x10/0x10 [ 477.658266][T19737] __x64_sys_openat+0x138/0x170 [ 477.658291][T19737] do_syscall_64+0xfa/0xfa0 [ 477.658310][T19737] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.658331][T19737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.658348][T19737] ? clear_bhb_loop+0x60/0xb0 [ 477.658369][T19737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.658385][T19737] RIP: 0033:0x7faa36d8efc9 [ 477.658402][T19737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.658417][T19737] RSP: 002b:00007faa34ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 477.658437][T19737] RAX: ffffffffffffffda RBX: 00007faa36fe6090 RCX: 00007faa36d8efc9 [ 477.658450][T19737] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 477.658462][T19737] RBP: 00007faa34ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.658474][T19737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.658484][T19737] R13: 00007faa36fe6128 R14: 00007faa36fe6090 R15: 00007ffe9b2a0ab8 [ 477.658514][T19737] [ 479.408326][T19746] vlan0: entered promiscuous mode [ 479.414953][T19746] batadv0: entered promiscuous mode [ 479.472133][T19748] wlan1 speed is unknown, defaulting to 1000 [ 479.878213][T19754] wlan1 speed is unknown, defaulting to 1000 [ 479.919814][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 480.397558][T19769] wlan1 speed is unknown, defaulting to 1000 [ 480.696492][T19795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3785'. [ 480.707884][T19795] atomic_op ffff8880295fc998 conn xmit_atomic 0000000000000000 [ 480.718103][T19796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3785'. [ 480.762226][T19785] wlan1 speed is unknown, defaulting to 1000 [ 480.897877][T19801] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 481.024803][T19812] tipc: Enabled bearer , priority 0 [ 481.140178][T19812] syzkaller0: entered promiscuous mode [ 481.145936][T19812] syzkaller0: entered allmulticast mode [ 481.157345][T19813] netlink: 'syz.0.3787': attribute type 15 has an invalid length. [ 481.171820][T19813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3787'. [ 481.508069][T19812] tipc: Resetting bearer [ 481.529346][T19812] tipc: Disabling bearer [ 481.883306][T19826] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 481.908429][T19821] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 482.164416][T19833] bridge_slave_0: left allmulticast mode [ 482.188249][T19837] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3794'. [ 482.200666][T19833] bridge_slave_0: left promiscuous mode [ 482.209478][T19833] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.222585][T19833] bridge_slave_1: left allmulticast mode [ 482.235800][T19833] bridge_slave_1: left promiscuous mode [ 482.241751][T19833] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.262044][T19833] bond0: (slave bond_slave_0): Releasing backup interface [ 482.276586][T19833] bond0: (slave bond_slave_1): Releasing backup interface [ 482.296283][T19833] team0: Port device team_slave_0 removed [ 482.307082][T19833] team0: Port device team_slave_1 removed [ 482.312366][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3796'. [ 482.313782][T19833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.313802][T19833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.340190][T19833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.348290][T19833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.356921][T19833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 482.412346][T19844] tipc: Enabled bearer , priority 0 [ 482.425465][T19843] tipc: Disabling bearer [ 482.499443][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3799'. [ 482.524523][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3799'. [ 482.727993][T19863] wlan1 speed is unknown, defaulting to 1000 [ 482.799491][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3803'. [ 482.809779][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3803'. [ 483.074228][T19887] openvswitch: netlink: Missing key (keys=40, expected=100) [ 483.119617][T19890] syz_tun: refused to change device tx_queue_len [ 483.266790][T19896] syzkaller0: entered promiscuous mode [ 483.272294][T19896] syzkaller0: entered allmulticast mode [ 483.525350][T19905] netlink: 'syz.2.3814': attribute type 15 has an invalid length. [ 483.650649][T19914] tipc: Enabled bearer , priority 0 [ 483.659927][T19914] syzkaller0: entered promiscuous mode [ 483.667657][T19914] syzkaller0: entered allmulticast mode [ 483.685847][T19914] tipc: Resetting bearer [ 483.694715][T19913] tipc: Resetting bearer [ 483.756704][T19913] tipc: Disabling bearer [ 484.167350][T19942] wlan1 speed is unknown, defaulting to 1000 [ 484.740058][T19954] wlan1 speed is unknown, defaulting to 1000 [ 484.987713][T19985] syz_tun: entered allmulticast mode [ 493.213609][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 501.377260][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.395961][T19984] syz_tun: left allmulticast mode [ 508.573183][T19995] Bluetooth: hci3: command 0x0406 tx timeout [ 529.053194][T19995] Bluetooth: hci2: command 0x0406 tx timeout [ 562.817278][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.174899][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 605.854631][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 624.263162][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.893268][ T31] INFO: task syz.4.3828:19933 blocked for more than 143 seconds. [ 640.901032][ T31] Not tainted syzkaller #0 [ 640.963291][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.971992][ T31] task:syz.4.3828 state:D stack:24584 pid:19933 tgid:19933 ppid:17486 task_flags:0x400040 flags:0x00080000 [ 641.093289][ T31] Call Trace: [ 641.096616][ T31] [ 641.099554][ T31] __schedule+0x1798/0x4cc0 [ 641.163302][ T31] ? stack_trace_save+0x9c/0xe0 [ 641.168213][ T31] ? __lock_acquire+0xab9/0xd20 [ 641.223320][ T31] ? __lock_acquire+0xab9/0xd20 [ 641.228210][ T31] ? __pfx___schedule+0x10/0x10 [ 641.293396][ T31] ? schedule+0x91/0x360 [ 641.297687][ T31] schedule+0x165/0x360 [ 641.301850][ T31] schedule_preempt_disabled+0x13/0x30 [ 641.363297][ T31] __mutex_lock+0x7e6/0x1350 [ 641.367947][ T31] ? __mutex_lock+0x5bb/0x1350 [ 641.425754][ T31] ? pipe_release+0x48/0x330 [ 641.430389][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 641.503308][ T31] pipe_release+0x48/0x330 [ 641.507771][ T31] ? __pfx_pipe_release+0x10/0x10 [ 641.553286][ T31] __fput+0x44c/0xa70 [ 641.557318][ T31] task_work_run+0x1d4/0x260 [ 641.561926][ T31] ? __pfx_task_work_run+0x10/0x10 [ 641.643307][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 641.648814][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 641.703315][ T31] do_syscall_64+0x2bd/0xfa0 [ 641.707956][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.773644][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.779854][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.844174][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.850109][ T31] RIP: 0033:0x7ff8daf8efc9 [ 641.913266][ T31] RSP: 002b:00007ffe88903288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 641.921722][ T31] RAX: 0000000000000000 RBX: 00007ff8db1e7da0 RCX: 00007ff8daf8efc9 [ 642.013289][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 642.021307][ T31] RBP: 00007ff8db1e7da0 R08: 0000000000000228 R09: 0000001d8890357f [ 642.103296][ T31] R10: 00007ff8db1e7cb0 R11: 0000000000000246 R12: 00000000000765da [ 642.111310][ T31] R13: 00007ff8db1e6270 R14: ffffffffffffffff R15: 00007ffe889033a0 [ 642.183342][ T31] [ 642.203310][ T31] INFO: task syz.4.3828:19948 blocked for more than 144 seconds. [ 642.211060][ T31] Not tainted syzkaller #0 [ 642.283641][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 642.292385][ T31] task:syz.4.3828 state:D stack:28904 pid:19948 tgid:19933 ppid:17486 task_flags:0x400040 flags:0x00080000 [ 642.423284][ T31] Call Trace: [ 642.426607][ T31] [ 642.429545][ T31] __schedule+0x1798/0x4cc0 [ 642.483309][ T31] ? __lock_acquire+0xab9/0xd20 [ 642.488886][ T31] ? __lock_acquire+0xab9/0xd20 [ 642.533228][ T31] ? __pfx___schedule+0x10/0x10 [ 642.538138][ T31] ? schedule+0x91/0x360 [ 642.542396][ T31] schedule+0x165/0x360 [ 642.642873][ T31] schedule_preempt_disabled+0x13/0x30 [ 642.648404][ T31] __mutex_lock+0x7e6/0x1350 [ 642.703325][ T31] ? __mutex_lock+0x5bb/0x1350 [ 642.708141][ T31] ? anon_pipe_write+0x15d/0x1460 [ 642.753243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 642.758313][ T31] ? aa_file_perm+0x44d/0x1550 [ 642.793255][ T31] anon_pipe_write+0x15d/0x1460 [ 642.798772][ T31] ? __pfx_aa_file_perm+0x10/0x10 [ 642.863333][ T31] ? page_table_check_set+0x18d/0x730 [ 642.868757][ T31] ? page_table_check_set+0x18d/0x730 [ 642.932747][ T31] ? __handle_mm_fault+0x3ac9/0x5400 [ 642.938087][ T31] ? __pfx_anon_pipe_write+0x10/0x10 [ 643.013207][ T31] ? common_file_perm+0x1b5/0x230 [ 643.018292][ T31] ? bpf_lsm_file_permission+0x9/0x20 [ 643.073239][ T31] ? security_file_permission+0x75/0x290 [ 643.078935][ T31] vfs_write+0x5c9/0xb30 [ 643.133277][ T31] ? __pfx_anon_pipe_write+0x10/0x10 [ 643.138610][ T31] ? __pfx_vfs_write+0x10/0x10 [ 643.193227][ T31] ? __fget_files+0x2a/0x420 [ 643.197869][ T31] ksys_write+0x145/0x250 [ 643.202213][ T31] ? __pfx_ksys_write+0x10/0x10 [ 643.273265][ T31] ? do_syscall_64+0xbe/0xfa0 [ 643.277997][ T31] do_syscall_64+0xfa/0xfa0 [ 643.282502][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.363279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.369393][ T31] ? clear_bhb_loop+0x60/0xb0 [ 643.403315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.409873][ T31] RIP: 0033:0x7ff8daf8efc9 [ 643.482847][ T31] RSP: 002b:00007ff8dbe0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.491302][ T31] RAX: ffffffffffffffda RBX: 00007ff8db1e6180 RCX: 00007ff8daf8efc9 [ 643.583286][ T31] RDX: 00000000ffffff98 RSI: 0000200000000000 RDI: 000000000000000d [ 643.591301][ T31] RBP: 00007ff8db011f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.695196][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.743290][ T31] R13: 00007ff8db1e6218 R14: 00007ff8db1e6180 R15: 00007ffe88903128 [ 643.751322][ T31] [ 643.819145][ T31] [ 643.819145][ T31] Showing all locks held in the system: [ 643.863303][ T31] 1 lock held by khungtaskd/31: [ 643.868181][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 643.953298][ T31] 2 locks held by getty/5591: [ 643.957998][ T31] #0: ffff88814dca40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 644.052714][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 644.103373][ T31] 1 lock held by syz-executor/15938: [ 644.108680][ T31] 1 lock held by syz-executor/16674: [ 644.183317][ T31] 1 lock held by syz-executor/17105: [ 644.188637][ T31] 1 lock held by syz-executor/17908: [ 644.228921][ T31] 1 lock held by syz.4.3828/19933: [ 644.273252][ T31] #0: ffff888055c4d868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 644.282349][ T31] 1 lock held by syz.4.3828/19937: [ 644.353260][ T31] #0: ffff888055c4d868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 644.423308][ T31] 1 lock held by syz.4.3828/19948: [ 644.428456][ T31] #0: ffff888055c4d868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1460 [ 644.513303][ T31] 1 lock held by syz.3.3839/19986: [ 644.518448][ T31] 1 lock held by syz.3.3839/19987: [ 644.574248][ T31] [ 644.576602][ T31] ============================================= [ 644.576602][ T31] [ 644.638546][ T31] NMI backtrace for cpu 1 [ 644.638566][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 644.638608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.638618][ T31] Call Trace: [ 644.638625][ T31] [ 644.638633][ T31] dump_stack_lvl+0x189/0x250 [ 644.638664][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.638688][ T31] ? __pfx__printk+0x10/0x10 [ 644.638718][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 644.638746][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 644.638774][ T31] ? __pfx__printk+0x10/0x10 [ 644.638796][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 644.638825][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 644.638859][ T31] watchdog+0xf60/0xfa0 [ 644.638882][ T31] ? watchdog+0x1e2/0xfa0 [ 644.638905][ T31] kthread+0x711/0x8a0 [ 644.638931][ T31] ? __pfx_watchdog+0x10/0x10 [ 644.638948][ T31] ? __pfx_kthread+0x10/0x10 [ 644.638971][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.638990][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.639007][ T31] ? __pfx_kthread+0x10/0x10 [ 644.639031][ T31] ret_from_fork+0x4bc/0x870 [ 644.639052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 644.639077][ T31] ? __switch_to_asm+0x39/0x70 [ 644.639091][ T31] ? __switch_to_asm+0x33/0x70 [ 644.639105][ T31] ? __pfx_kthread+0x10/0x10 [ 644.639128][ T31] ret_from_fork_asm+0x1a/0x30 [ 644.639159][ T31] [ 644.639166][ T31] Sending NMI from CPU 1 to CPUs 0: [ 644.794609][ C0] NMI backtrace for cpu 0 [ 644.794625][ C0] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 644.794643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.794654][ C0] RIP: 0010:unwind_next_frame+0x521/0x2390 [ 644.794677][ C0] Code: 63 18 00 00 0f b7 1e c1 eb 0b 80 e3 01 48 8b 44 24 28 0f b6 04 28 84 c0 4c 8b 7c 24 70 0f 85 6d 18 00 00 48 8b 44 24 10 88 18 <0f> b7 1e 83 e3 0f 83 fb 05 0f 8f 85 00 00 00 83 fb 03 0f 8f 01 01 [ 644.794692][ C0] RSP: 0018:ffffc900000078f8 EFLAGS: 00000046 [ 644.794707][ C0] RAX: ffffc900000079fd RBX: 0000000000000000 RCX: ffffffff8f90eff8 [ 644.794719][ C0] RDX: ffffffff900b99be RSI: ffffffff900b99c2 RDI: ffffffff8bbf0800 [ 644.794731][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff81738d25 [ 644.794742][ C0] R10: ffffc90000007a18 R11: ffffffff81ac2cd0 R12: ffffffff900b99c3 [ 644.794754][ C0] R13: ffffc90000007a18 R14: ffffc900000079c8 R15: ffffc90000007a00 [ 644.794766][ C0] FS: 0000555573676500(0000) GS:ffff888126140000(0000) knlGS:0000000000000000 [ 644.794780][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.794791][ C0] CR2: 00007f93f11e5fa8 CR3: 0000000078154000 CR4: 00000000003526f0 [ 644.794805][ C0] Call Trace: [ 644.794811][ C0] [ 644.794820][ C0] ? unwind_next_frame+0xa5/0x2390 [ 644.794839][ C0] ? __send_signal_locked+0x22a/0xeb0 [ 644.794862][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 644.794882][ C0] arch_stack_walk+0x11c/0x150 [ 644.794903][ C0] ? __send_signal_locked+0x22a/0xeb0 [ 644.794925][ C0] stack_trace_save+0x9c/0xe0 [ 644.794943][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 644.794963][ C0] ? stack_depot_save_flags+0x40/0x860 [ 644.794988][ C0] kasan_save_track+0x3e/0x80 [ 644.795007][ C0] ? kasan_save_track+0x3e/0x80 [ 644.795025][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 644.795045][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 644.795069][ C0] ? __send_signal_locked+0x22a/0xeb0 [ 644.795115][ C0] __kasan_slab_alloc+0x6c/0x80 [ 644.795136][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 644.795156][ C0] ? __send_signal_locked+0x22a/0xeb0 [ 644.795175][ C0] ? sig_get_ucounts+0x26/0x450 [ 644.795191][ C0] __send_signal_locked+0x22a/0xeb0 [ 644.795213][ C0] ? group_send_sig_info+0x3d/0x260 [ 644.795234][ C0] group_send_sig_info+0x1fd/0x260 [ 644.795256][ C0] do_bpf_send_signal+0xa9/0x1c0 [ 644.795275][ C0] irq_work_single+0xe1/0x240 [ 644.795292][ C0] irq_work_run+0x155/0x2f0 [ 644.795307][ C0] ? __pfx_irq_work_run+0x10/0x10 [ 644.795322][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 644.795338][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 644.795358][ C0] __sysvec_irq_work+0xa8/0x3d0 [ 644.795380][ C0] sysvec_irq_work+0x9e/0xc0 [ 644.795402][ C0] [ 644.795407][ C0] [ 644.795414][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 644.795428][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 644.795448][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 d0 40 d6 09 cc f3 0f 1e fa 89 f6 31 d2 e9 f2 10 50 03 66 [ 644.795462][ C0] RSP: 0018:ffffc90003ce7ae8 EFLAGS: 00000246 [ 644.795474][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 644.795484][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 644.795494][ C0] RBP: ffffc90003ce7bc0 R08: ffffc90003ce7b47 R09: 1ffff9200079cf68 [ 644.795506][ C0] R10: dffffc0000000000 R11: fffff5200079cf69 R12: ffff8880b8831401 [ 644.795518][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b88314f0 [ 644.795538][ C0] arch_irq_work_raise+0x6d/0x80 [ 644.795558][ C0] __irq_work_queue_local+0x1d7/0x550 [ 644.795575][ C0] ? __pfx___irq_work_queue_local+0x10/0x10 [ 644.795600][ C0] ? cgroup_freezing+0x20/0x350 [ 644.795633][ C0] irq_work_queue+0x99/0x140 [ 644.795649][ C0] bpf_send_signal_common+0x3b4/0x540 [ 644.795666][ C0] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 644.795687][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 644.795708][ C0] bpf_send_signal+0x1d/0x30 [ 644.795727][ C0] bpf_prog_948316cddd0b7b1c+0x41/0x49 [ 644.795741][ C0] bpf_trace_run2+0x284/0x4b0 [ 644.795766][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 644.795788][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 644.795812][ C0] ? __might_fault+0xb0/0x130 [ 644.795832][ C0] ? trace_sys_enter+0x74/0x100 [ 644.795848][ C0] __bpf_trace_sys_enter+0x38/0x60 [ 644.795863][ C0] trace_sys_enter+0xb0/0x100 [ 644.795878][ C0] syscall_trace_enter+0xf9/0x160 [ 644.795894][ C0] do_syscall_64+0xd3/0xfa0 [ 644.795912][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.795926][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 644.795942][ C0] ? clear_bhb_loop+0x60/0xb0 [ 644.795959][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.795974][ C0] RIP: 0033:0x7f76f132b099 [ 644.795986][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 644.795999][ C0] RSP: 002b:00007ffcb430fa40 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 644.796015][ C0] RAX: ffffffffffffffda RBX: 00007ffcb4310100 RCX: 00007f76f132b099 [ 644.796026][ C0] RDX: 00007ffcb430fa40 RSI: 00007ffcb430fb70 RDI: 0000000000000011 [ 644.796037][ C0] RBP: 00007ffcb4310340 R08: 00007ffcb4310000 R09: 00007ffcb4310010 [ 644.796049][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcb43103a0 [ 644.796059][ C0] R13: 0000000000000000 R14: 00007ffcb4310550 R15: 00007ffcb4310190 [ 644.796084][ C0]