last executing test programs: 1.851861484s ago: executing program 3 (id=495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014870000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='hrtimer_init\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c"], 0x154}}, 0x0) 1.607859584s ago: executing program 3 (id=500): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.552306432s ago: executing program 4 (id=502): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000200)=""/166}, 0x20) close(r0) 1.445639845s ago: executing program 3 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 1.390178377s ago: executing program 2 (id=505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.320534886s ago: executing program 4 (id=507): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) close(r0) 1.184084614s ago: executing program 2 (id=508): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x12c, 0x65, 0x810, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x9}, {0x9, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x3e}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x1}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xffffffff}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_skbedit={0x8c, 0xd, 0x0, 0x0, {{0xc}, {0x4}, {0x5e, 0x6, "a707b36aaa9f7af7d3b4438eb81ccd8c40a11da73586f8e91ba98cf4b06aea06a75b1413c78cca3c419f9095aafa256bce3950c25943fca70489b3f03d378675d9c2515fcb79f523793a6f8477ff7f8e1546cfdfba51e1529bdf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x600400c5}, 0x40001) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.183594674s ago: executing program 4 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x0) 1.040273315s ago: executing program 1 (id=512): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r3}, 0x10) bind$can_raw(r0, &(0x7f0000000280), 0x10) 1.033621761s ago: executing program 2 (id=513): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 945.132321ms ago: executing program 4 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 944.480463ms ago: executing program 0 (id=515): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 896.143882ms ago: executing program 1 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r1, 0x0, 0x0}, 0x20) 850.010202ms ago: executing program 2 (id=517): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0x20}}, 0x400c004) 807.65803ms ago: executing program 0 (id=518): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000200)=""/166}, 0x20) close(r0) 728.164141ms ago: executing program 1 (id=519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="7b041fc2754665d599c6387bf470827a783c3f"], 0x3c}}, 0x0) 727.39546ms ago: executing program 4 (id=520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202c702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) 598.858359ms ago: executing program 0 (id=521): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 495.859169ms ago: executing program 4 (id=522): r0 = socket$inet6(0xa, 0x806, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x1f8) 449.666283ms ago: executing program 1 (id=523): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x12c, 0x65, 0x810, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x9}, {0x9, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x3e}}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x1}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xffffffff}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_skbedit={0x8c, 0xd, 0x0, 0x0, {{0xc}, {0x4}, {0x5e, 0x6, "a707b36aaa9f7af7d3b4438eb81ccd8c40a11da73586f8e91ba98cf4b06aea06a75b1413c78cca3c419f9095aafa256bce3950c25943fca70489b3f03d378675d9c2515fcb79f523793a6f8477ff7f8e1546cfdfba51e1529bdf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x600400c5}, 0x40001) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 435.933071ms ago: executing program 2 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x0) 399.527473ms ago: executing program 3 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 340.013757ms ago: executing program 0 (id=526): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r3}, 0x10) bind$can_raw(r0, &(0x7f0000000280), 0x10) 308.714334ms ago: executing program 3 (id=527): bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)={0x2, 0xa, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@mcast1, 0xb, 0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bba, 0x4, {0x6, 0x33, 0x0, 0x1d, 0x0, 0x4, 0x0, @in=@multicast1, @in6=@private0}}]}, 0x80}}, 0x0) 289.487132ms ago: executing program 1 (id=528): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 184.147651ms ago: executing program 0 (id=529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r1, 0x0, 0x0}, 0x20) 159.275669ms ago: executing program 2 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 117.278412ms ago: executing program 1 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 81.09808ms ago: executing program 3 (id=532): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000200)=""/166}, 0x20) close(r0) 0s ago: executing program 0 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 57.820478][ T5820] cgroup: Unknown subsys name 'net' [ 57.953911][ T5820] cgroup: Unknown subsys name 'cpuset' [ 57.962039][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.241689][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.483720][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.492725][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.501227][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.509279][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.518169][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.527066][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.535583][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.544215][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.547187][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.551737][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.566752][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.574832][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.583520][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.584430][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.591977][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.606216][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.607220][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.613406][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.630136][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.637319][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.646106][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.653620][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.654327][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.668464][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.668885][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.683380][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.686809][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.700182][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.707532][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.715612][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.981128][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 62.124750][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.132894][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.140470][ T5833] bridge_slave_0: entered allmulticast mode [ 62.147202][ T5833] bridge_slave_0: entered promiscuous mode [ 62.157280][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.164596][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.172450][ T5833] bridge_slave_1: entered allmulticast mode [ 62.179029][ T5833] bridge_slave_1: entered promiscuous mode [ 62.272934][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.289381][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 62.312629][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.340889][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 62.487611][ T5833] team0: Port device team_slave_0 added [ 62.496509][ T5833] team0: Port device team_slave_1 added [ 62.544378][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.552230][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.578770][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.592054][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.599048][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.625121][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.651773][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 62.675822][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.683964][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.691311][ T5831] bridge_slave_0: entered allmulticast mode [ 62.698076][ T5831] bridge_slave_0: entered promiscuous mode [ 62.721825][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 62.731984][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.739386][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.748265][ T5834] bridge_slave_0: entered allmulticast mode [ 62.756121][ T5834] bridge_slave_0: entered promiscuous mode [ 62.763910][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.771982][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.779895][ T5831] bridge_slave_1: entered allmulticast mode [ 62.790445][ T5831] bridge_slave_1: entered promiscuous mode [ 62.814189][ T5833] hsr_slave_0: entered promiscuous mode [ 62.821044][ T5833] hsr_slave_1: entered promiscuous mode [ 62.835106][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.842431][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.849605][ T5834] bridge_slave_1: entered allmulticast mode [ 62.857359][ T5834] bridge_slave_1: entered promiscuous mode [ 62.946433][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.958183][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.971654][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.003360][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.100926][ T5831] team0: Port device team_slave_0 added [ 63.110530][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.117699][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.125207][ T5830] bridge_slave_0: entered allmulticast mode [ 63.137413][ T5830] bridge_slave_0: entered promiscuous mode [ 63.145136][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.152526][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.159814][ T5843] bridge_slave_0: entered allmulticast mode [ 63.166784][ T5843] bridge_slave_0: entered promiscuous mode [ 63.176219][ T5834] team0: Port device team_slave_0 added [ 63.184678][ T5834] team0: Port device team_slave_1 added [ 63.192467][ T5831] team0: Port device team_slave_1 added [ 63.212766][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.219894][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.227346][ T5830] bridge_slave_1: entered allmulticast mode [ 63.234621][ T5830] bridge_slave_1: entered promiscuous mode [ 63.241718][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.248833][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.256380][ T5843] bridge_slave_1: entered allmulticast mode [ 63.262992][ T5843] bridge_slave_1: entered promiscuous mode [ 63.327392][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.334730][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.360987][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.373274][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.380281][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.406424][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.432556][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.442690][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.449734][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.475932][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.488801][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.495887][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.522257][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.544421][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.556171][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.567204][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.600924][ T5849] Bluetooth: hci3: command tx timeout [ 63.646882][ T5834] hsr_slave_0: entered promiscuous mode [ 63.653833][ T5834] hsr_slave_1: entered promiscuous mode [ 63.659817][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.668266][ T5834] Cannot create hsr debugfs directory [ 63.684998][ T5831] hsr_slave_0: entered promiscuous mode [ 63.692196][ T5831] hsr_slave_1: entered promiscuous mode [ 63.698167][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.705916][ T5831] Cannot create hsr debugfs directory [ 63.716817][ T5830] team0: Port device team_slave_0 added [ 63.734572][ T5830] team0: Port device team_slave_1 added [ 63.760431][ T5849] Bluetooth: hci4: command tx timeout [ 63.760505][ T5147] Bluetooth: hci2: command tx timeout [ 63.766084][ T5851] Bluetooth: hci0: command tx timeout [ 63.777826][ T5846] Bluetooth: hci1: command tx timeout [ 63.795946][ T5843] team0: Port device team_slave_0 added [ 63.806817][ T5843] team0: Port device team_slave_1 added [ 63.849052][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.856281][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.883007][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.895868][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.903028][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.929988][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.962466][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.969448][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.995675][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.028171][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.035298][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.061646][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.105110][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.137216][ T5830] hsr_slave_0: entered promiscuous mode [ 64.144668][ T5830] hsr_slave_1: entered promiscuous mode [ 64.150991][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.158574][ T5830] Cannot create hsr debugfs directory [ 64.178743][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.208422][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.249566][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.271864][ T5843] hsr_slave_0: entered promiscuous mode [ 64.278049][ T5843] hsr_slave_1: entered promiscuous mode [ 64.286270][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.294469][ T5843] Cannot create hsr debugfs directory [ 64.490777][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.502495][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.533273][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.554537][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.598994][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.615827][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.628252][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.653601][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.720763][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.735880][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.747339][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.782763][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.845727][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.880882][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.891155][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.907418][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.916902][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.942555][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.006577][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.013944][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.037276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.044454][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.065152][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.077560][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.111562][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.122193][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.169299][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.176461][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.185674][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.192843][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.234283][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.241467][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.259594][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.266772][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.356655][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.383473][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.402871][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.413856][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.493977][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.524696][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.545932][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.553110][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.623311][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.630495][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.660489][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.667667][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.681108][ T5846] Bluetooth: hci3: command tx timeout [ 65.695566][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.702758][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.736010][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.819059][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.833855][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.841245][ T5846] Bluetooth: hci1: command tx timeout [ 65.841608][ T5846] Bluetooth: hci0: command tx timeout [ 65.841640][ T5846] Bluetooth: hci4: command tx timeout [ 65.841673][ T5846] Bluetooth: hci2: command tx timeout [ 66.000016][ T5831] veth0_vlan: entered promiscuous mode [ 66.035710][ T5833] veth0_vlan: entered promiscuous mode [ 66.063907][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.093924][ T5833] veth1_vlan: entered promiscuous mode [ 66.104808][ T5831] veth1_vlan: entered promiscuous mode [ 66.213205][ T5830] veth0_vlan: entered promiscuous mode [ 66.245189][ T5830] veth1_vlan: entered promiscuous mode [ 66.256669][ T5833] veth0_macvtap: entered promiscuous mode [ 66.275572][ T5833] veth1_macvtap: entered promiscuous mode [ 66.312224][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.326805][ T5834] veth0_vlan: entered promiscuous mode [ 66.340410][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.361910][ T5831] veth0_macvtap: entered promiscuous mode [ 66.373794][ T5831] veth1_macvtap: entered promiscuous mode [ 66.383387][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.394702][ T5834] veth1_vlan: entered promiscuous mode [ 66.407344][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.420328][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.429044][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439261][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.481908][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.492822][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.504469][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.535917][ T5830] veth0_macvtap: entered promiscuous mode [ 66.549151][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.560792][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.574258][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.585652][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.594843][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.604496][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.614257][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.651904][ T5830] veth1_macvtap: entered promiscuous mode [ 66.674743][ T5834] veth0_macvtap: entered promiscuous mode [ 66.695066][ T5843] veth0_vlan: entered promiscuous mode [ 66.710920][ T5834] veth1_macvtap: entered promiscuous mode [ 66.762398][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.773571][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.783520][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.794223][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.806765][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.819531][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.823696][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.839690][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.842803][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.850301][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.868207][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.878296][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.888969][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.901041][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.918799][ T5843] veth1_vlan: entered promiscuous mode [ 66.929324][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.940403][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.950382][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.961214][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.975715][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.002526][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.011494][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.021066][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.029786][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.059785][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.071130][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.082763][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.094199][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.104364][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.114954][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.126468][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.136840][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.146046][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.156005][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.165702][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.182302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.185580][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.197086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.207539][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.278079][ T5843] veth0_macvtap: entered promiscuous mode [ 67.318833][ T5843] veth1_macvtap: entered promiscuous mode [ 67.342743][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.351790][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.409861][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.432045][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.447963][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.466215][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.475674][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.481019][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.502821][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.513740][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.525006][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.536866][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.546993][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.565303][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.574814][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.587732][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.609917][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.627363][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.637491][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.655769][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.666130][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.676959][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.689068][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.723754][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.735737][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.747027][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.756688][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.769902][ T5851] Bluetooth: hci3: command tx timeout [ 67.801110][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.809113][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.832979][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.876977][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.894918][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.921134][ T5851] Bluetooth: hci2: command tx timeout [ 67.926697][ T5851] Bluetooth: hci4: command tx timeout [ 67.934979][ T5846] Bluetooth: hci0: command tx timeout [ 67.935140][ T5849] Bluetooth: hci1: command tx timeout [ 68.173535][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.229854][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.289610][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.317228][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.377289][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.413244][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.438884][ T5934] pimreg: entered allmulticast mode [ 68.525324][ T5934] pimreg: left allmulticast mode [ 68.718733][ T5941] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.778302][ T5944] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.813359][ T5941] gretap0: entered promiscuous mode [ 68.856260][ T5944] 0猉功D: renamed from gretap0 [ 68.907039][ T5944] 0猉功D: left promiscuous mode [ 68.930069][ T5944] 0猉功D: entered allmulticast mode [ 68.958856][ T5944] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 69.215273][ T5953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'. [ 69.235296][ T5953] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12'. [ 69.256498][ T5953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'. [ 69.320345][ T5948] netlink: 'syz.0.10': attribute type 21 has an invalid length. [ 69.328052][ T5948] netlink: 'syz.0.10': attribute type 20 has an invalid length. [ 69.340334][ T5948] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.606251][ T5957] netlink: 'syz.4.14': attribute type 13 has an invalid length. [ 69.645752][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 69.741362][ T5957] 0猉功D: refused to change device tx_queue_len [ 69.780004][ T5957] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 69.842523][ T5849] Bluetooth: hci3: command tx timeout [ 70.001454][ T5849] Bluetooth: hci4: command tx timeout [ 70.006933][ T5849] Bluetooth: hci0: command tx timeout [ 70.014186][ T5147] Bluetooth: hci2: command tx timeout [ 70.014263][ T5851] Bluetooth: hci1: command tx timeout [ 70.203487][ T5977] netlink: 'syz.2.22': attribute type 3 has an invalid length. [ 70.428838][ T8] cfg80211: failed to load regulatory.db [ 70.625837][ T5987] netlink: 100 bytes leftover after parsing attributes in process `syz.2.26'. [ 70.668058][ T5990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27'. [ 70.727567][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'. [ 71.522226][ T6012] dvmrp5: entered allmulticast mode [ 71.545450][ T6016] dvmrp5: left allmulticast mode [ 71.765725][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.777762][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.247244][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.920749][ T6059] __nla_validate_parse: 5 callbacks suppressed [ 72.920770][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.59'. [ 72.975903][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.59'. [ 73.271889][ T6067] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 73.289376][ T6072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.66'. [ 74.164630][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.79'. [ 74.398739][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.82'. [ 74.416568][ T6110] IPv6: Can't replace route, no match found [ 74.785547][ T6089] syz.1.74: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 74.860882][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.1.74 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 74.860910][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.860924][ T6089] Call Trace: [ 74.860930][ T6089] [ 74.860937][ T6089] dump_stack_lvl+0x241/0x360 [ 74.860971][ T6089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.860989][ T6089] ? __pfx__printk+0x10/0x10 [ 74.861009][ T6089] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 74.861031][ T6089] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 74.861055][ T6089] warn_alloc+0x278/0x410 [ 74.861078][ T6089] ? __pfx_warn_alloc+0x10/0x10 [ 74.861102][ T6089] ? translate_table+0x181/0x2370 [ 74.861121][ T6089] ? __get_vm_area_node+0x1c8/0x2d0 [ 74.861144][ T6089] ? __get_vm_area_node+0x25c/0x2d0 [ 74.861174][ T6089] __vmalloc_node_range_noprof+0x62f/0x1380 [ 74.861217][ T6089] ? rcu_is_watching+0x15/0xb0 [ 74.861235][ T6089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.861252][ T6089] ? rcu_is_watching+0x15/0xb0 [ 74.861271][ T6089] ? trace_kmalloc+0x1f/0xd0 [ 74.861290][ T6089] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 74.861310][ T6089] ? __kvmalloc_node_noprof+0x72/0x190 [ 74.861338][ T6089] __kvmalloc_node_noprof+0x142/0x190 [ 74.861362][ T6089] ? translate_table+0x181/0x2370 [ 74.861382][ T6089] translate_table+0x181/0x2370 [ 74.861484][ T6089] ? __pfx_translate_table+0x10/0x10 [ 74.861521][ T6089] ? __might_fault+0xaa/0x120 [ 74.861538][ T6089] ? __pfx_lock_release+0x10/0x10 [ 74.861568][ T6089] ? __virt_addr_valid+0x183/0x530 [ 74.861586][ T6089] ? __might_fault+0xaa/0x120 [ 74.861602][ T6089] ? __might_fault+0xc6/0x120 [ 74.861625][ T6089] ? copy_from_sockptr_offset+0x6b/0xb0 [ 74.861648][ T6089] do_ipt_set_ctl+0xe3d/0x1250 [ 74.861677][ T6089] ? nf_setsockopt+0x240/0x2c0 [ 74.861698][ T6089] ? do_ip_setsockopt+0x2824/0x3ae0 [ 74.861718][ T6089] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 74.861739][ T6089] ? rcu_is_watching+0x15/0xb0 [ 74.861759][ T6089] ? trace_contention_end+0x3c/0x120 [ 74.861784][ T6089] ? __mutex_unlock_slowpath+0x227/0x800 [ 74.861814][ T6089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.861839][ T6089] ? __pfx___mutex_lock+0x10/0x10 [ 74.861870][ T6089] nf_setsockopt+0x295/0x2c0 [ 74.861895][ T6089] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.861921][ T6089] smc_setsockopt+0x275/0xd10 [ 74.861946][ T6089] ? __pfx_smc_setsockopt+0x10/0x10 [ 74.861965][ T6089] ? aa_sock_opt_perm+0x79/0x120 [ 74.861994][ T6089] ? __pfx_smc_setsockopt+0x10/0x10 [ 74.862007][ T6089] do_sock_setsockopt+0x3af/0x720 [ 74.862030][ T6089] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 74.862054][ T6089] ? __fget_files+0x395/0x410 [ 74.862076][ T6089] ? __fget_files+0x2a/0x410 [ 74.862109][ T6089] __x64_sys_setsockopt+0x1ee/0x280 [ 74.862136][ T6089] do_syscall_64+0xf3/0x230 [ 74.862157][ T6089] ? clear_bhb_loop+0x35/0x90 [ 74.862184][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.862217][ T6089] RIP: 0033:0x7ff5a1f8d169 [ 74.862252][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.862267][ T6089] RSP: 002b:00007ff5a2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.862287][ T6089] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 74.862299][ T6089] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 74.862310][ T6089] RBP: 00007ff5a200e2a0 R08: 0000000000000298 R09: 0000000000000000 [ 74.862322][ T6089] R10: 0000400000000300 R11: 0000000000000246 R12: 0000000000000000 [ 74.862333][ T6089] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffdcd561218 [ 74.862362][ T6089] [ 74.862371][ T6089] Mem-Info: [ 75.252709][ T6089] active_anon:4988 inactive_anon:0 isolated_anon:0 [ 75.252709][ T6089] active_file:1119 inactive_file:38297 isolated_file:0 [ 75.252709][ T6089] unevictable:768 dirty:1477 writeback:0 [ 75.252709][ T6089] slab_reclaimable:9797 slab_unreclaimable:98473 [ 75.252709][ T6089] mapped:30592 shmem:1426 pagetables:866 [ 75.252709][ T6089] sec_pagetables:0 bounce:0 [ 75.252709][ T6089] kernel_misc_reclaimable:0 [ 75.252709][ T6089] free:1194684 free_pcp:617 free_cma:0 [ 75.300680][ T6089] Node 0 active_anon:19976kB inactive_anon:0kB active_file:4476kB inactive_file:153112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122380kB dirty:5900kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:3544kB sec_pagetables:0kB all_unreclaimable? no [ 75.387936][ T6089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 75.484086][ T6089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.515180][ T6089] lowmem_reserve[]: 0 2489 2490 0 0 [ 75.521244][ T6089] Node 0 DMA32 free:855724kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19736kB inactive_anon:0kB active_file:4476kB inactive_file:152796kB unevictable:1536kB writepending:5892kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:1644kB local_pcp:908kB free_cma:0kB [ 75.590089][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 75.595164][ T6089] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:8kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 75.633265][ T6130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'. [ 75.648178][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 75.727135][ T6089] Node 1 Normal free:3910312kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:248kB free_cma:0kB [ 75.846628][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 75.869580][ T6089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.941050][ T6089] Node 0 DMA32: 2*4kB (ME) 9*8kB (UE) 13*16kB (UME) 24*32kB (UME) 16*64kB (UME) 12*128kB (UME) 5*256kB (UE) 3*512kB (UM) 3*1024kB (UE) 2*2048kB (UE) 201*4096kB (M) = 836896kB [ 76.002058][ T6089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 76.050093][ T6089] Node 1 Normal: 132*4kB (UME) 57*8kB (UME) 33*16kB (UME) 210*32kB (UME) 88*64kB (UME) 21*128kB (UME) 12*256kB (UM) 7*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 947*4096kB (M) = 3910312kB [ 76.110080][ T6089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.141233][ T6089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.205996][ T6146] Cannot find add_set index 0 as target [ 76.211907][ T6089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.260770][ T6089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.310012][ T6089] 44940 total pagecache pages [ 76.314766][ T6089] 0 pages in swap cache [ 76.318943][ T6089] Free swap = 124996kB [ 76.351582][ T6148] xt_hashlimit: size too large, truncated to 1048576 [ 76.371778][ T6089] Total swap = 124996kB [ 76.375981][ T6089] 2097051 pages RAM [ 76.379799][ T6089] 0 pages HighMem/MovableOnly [ 76.410023][ T6089] 427897 pages reserved [ 76.420431][ T6089] 0 pages cma reserved [ 76.813618][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'. [ 77.378437][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.104'. [ 77.951617][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 77.998893][ T6176] ipvlan2: entered promiscuous mode [ 78.345120][ T6183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 78.600538][ T6188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.115'. [ 78.788235][ T6192] bond1: entered promiscuous mode [ 78.820198][ T6192] bond1: entered allmulticast mode [ 78.847255][ T6192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.024909][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'. [ 79.239693][ T6192] bond1 (unregistering): Released all slaves [ 79.507513][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 79.729241][ T6218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.075684][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.135'. [ 80.179564][ T6218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.302657][ T6224] syz.1.127 (6224) used greatest stack depth: 18032 bytes left [ 80.334522][ T6218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.483035][ T6218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.583154][ T6248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.140'. [ 80.732247][ T6218] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.777945][ T6218] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.849690][ T6218] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.874064][ T6258] Cannot find set identified by id 0 to match [ 80.935458][ T6218] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.996194][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.4.147'. [ 81.495049][ T6282] netlink: 83 bytes leftover after parsing attributes in process `syz.4.156'. [ 81.650384][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 82.611748][ T6308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.848935][ T6308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.108936][ T6308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.218630][ T6308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.377562][ T6308] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.415749][ T6308] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.451661][ T6308] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467384][ T6308] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.649103][ T6346] __nla_validate_parse: 5 callbacks suppressed [ 83.649122][ T6346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'. [ 84.066047][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 84.194747][ T6363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.335950][ T6375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 84.412071][ T6363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.585583][ T6363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.733493][ T6363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.960844][ T6363] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.976700][ T6363] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.993906][ T6363] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.046005][ T6363] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.102323][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'. [ 85.327884][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 85.872015][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 85.953132][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 86.194113][ T6434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.361978][ T6434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.505049][ T6434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.597620][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'. [ 86.666713][ T6434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.777348][ T6471] pim6reg1: entered promiscuous mode [ 86.791693][ T6471] pim6reg1: entered allmulticast mode [ 86.898937][ T6434] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.919714][ T6434] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.951953][ T6434] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006308][ T6434] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.118835][ T6478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.244'. [ 87.395639][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 88.032641][ T6515] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.118959][ T6515] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.165360][ T6515] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.218910][ T6515] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.831006][ T6543] __nla_validate_parse: 2 callbacks suppressed [ 88.831025][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 89.248091][ T6556] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 89.508881][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 90.265992][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 90.627359][ T6515] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.684531][ T6515] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.724428][ T6515] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756747][ T6515] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.064546][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 91.508686][ T6649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.516111][ T6649] IPv6: NLM_F_CREATE should be set when creating new route [ 91.721454][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 91.756424][ T6655] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.892641][ T6655] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.011453][ T6655] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.092402][ T6655] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.224736][ T6655] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.273067][ T6655] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.314575][ T6655] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.346765][ T6655] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.244693][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 93.264474][ T6711] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.387376][ T6711] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.495871][ T6711] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.668501][ T6711] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.835086][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 93.904286][ T6735] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.979283][ T6711] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.062388][ T6711] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.139564][ T6735] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.224095][ T6711] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.265649][ T6735] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.296038][ T6711] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.336839][ T6735] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.945519][ T6777] netlink: 80 bytes leftover after parsing attributes in process `syz.3.377'. [ 95.027617][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 95.094275][ T6781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.182283][ T6781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.279509][ T6781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.339607][ T6781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.409117][ T6781] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.438801][ T6781] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.496239][ T6781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.544785][ T6781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.298610][ T6735] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.328369][ T6735] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.371608][ T6735] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.420403][ T6735] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.028965][ T6851] Cannot find add_set index 0 as target [ 97.141633][ T6856] netlink: 'syz.0.414': attribute type 4 has an invalid length. [ 97.777471][ T6881] netlink: 'syz.1.426': attribute type 21 has an invalid length. [ 97.802619][ T6881] netlink: 'syz.1.426': attribute type 20 has an invalid length. [ 97.822107][ T6881] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.579921][ T7025] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 101.802917][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 103.511696][ T7114] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000197: 0000 [#1] PREEMPT SMP KASAN PTI [ 103.524329][ T7114] KASAN: null-ptr-deref in range [0x0000000000000cb8-0x0000000000000cbf] [ 103.532826][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.2.530 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 103.543500][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.553647][ T7114] RIP: 0010:ethnl_default_dumpit+0x447/0xd40 [ 103.559646][ T7114] Code: 49 8b 1f 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ca e6 17 f8 4c 8b 3b 49 8d 9f bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 4b 07 00 00 0f b6 1b 31 ff 89 de e8 f0 [ 103.579256][ T7114] RSP: 0018:ffffc900030070d8 EFLAGS: 00010203 [ 103.585323][ T7114] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: 0000000000000000 [ 103.593286][ T7114] RDX: 0000000000000000 RSI: ffffffff8c80fdc0 RDI: 0000000000000001 [ 103.601248][ T7114] RBP: ffff8880277613c0 R08: ffffffff903d0b77 R09: 1ffffffff207a16e [ 103.609206][ T7114] R10: dffffc0000000000 R11: fffffbfff207a16f R12: ffff888059460600 [ 103.617167][ T7114] R13: ffff88805a73f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 103.625136][ T7114] FS: 00007f274f65c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 103.634081][ T7114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.640675][ T7114] CR2: 0000400000001ac0 CR3: 000000002e546000 CR4: 00000000003526f0 [ 103.648654][ T7114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.656711][ T7114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.664679][ T7114] Call Trace: [ 103.667948][ T7114] [ 103.670872][ T7114] ? __die_body+0x5f/0xb0 [ 103.675200][ T7114] ? die_addr+0xb0/0xe0 [ 103.679438][ T7114] ? exc_general_protection+0x3dd/0x5d0 [ 103.684988][ T7114] ? asm_exc_general_protection+0x26/0x30 [ 103.690709][ T7114] ? ethnl_default_dumpit+0x447/0xd40 [ 103.696077][ T7114] ? ethnl_default_dumpit+0x402/0xd40 [ 103.701452][ T7114] ? ethnl_default_dumpit+0x78/0xd40 [ 103.706830][ T7114] genl_dumpit+0x10d/0x1b0 [ 103.711272][ T7114] netlink_dump+0x64d/0xe10 [ 103.715768][ T7114] ? ethnl_default_start+0x341/0x570 [ 103.721062][ T7114] ? genl_start+0x4dc/0x6d0 [ 103.725580][ T7114] ? __pfx_netlink_dump+0x10/0x10 [ 103.730912][ T7114] ? genl_start+0x59d/0x6d0 [ 103.735420][ T7114] __netlink_dump_start+0x5a2/0x790 [ 103.740620][ T7114] genl_rcv_msg+0x894/0xec0 [ 103.745114][ T7114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.750132][ T7114] ? __pfx_genl_start+0x10/0x10 [ 103.754972][ T7114] ? __pfx_genl_dumpit+0x10/0x10 [ 103.759901][ T7114] ? __pfx_genl_done+0x10/0x10 [ 103.764661][ T7114] ? __pfx_lock_acquire+0x10/0x10 [ 103.769686][ T7114] ? __pfx_ethnl_default_start+0x10/0x10 [ 103.775403][ T7114] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 103.781118][ T7114] ? __pfx_ethnl_default_done+0x10/0x10 [ 103.786682][ T7114] ? __pfx___might_resched+0x10/0x10 [ 103.791966][ T7114] netlink_rcv_skb+0x206/0x480 [ 103.796736][ T7114] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.801937][ T7114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.807222][ T7114] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 103.812684][ T7114] genl_rcv+0x28/0x40 [ 103.816658][ T7114] netlink_unicast+0x7f6/0x990 [ 103.821422][ T7114] ? __pfx_netlink_unicast+0x10/0x10 [ 103.826701][ T7114] ? __virt_addr_valid+0x45f/0x530 [ 103.831805][ T7114] ? __phys_addr_symbol+0x2f/0x70 [ 103.836819][ T7114] ? __check_object_size+0x47a/0x730 [ 103.842101][ T7114] netlink_sendmsg+0x8de/0xcb0 [ 103.846871][ T7114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.852152][ T7114] ? aa_sock_msg_perm+0x91/0x160 [ 103.857085][ T7114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.862362][ T7114] __sock_sendmsg+0x221/0x270 [ 103.867033][ T7114] ____sys_sendmsg+0x53a/0x860 [ 103.871789][ T7114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.877065][ T7114] ? __fget_files+0x2a/0x410 [ 103.881653][ T7114] ? __fget_files+0x2a/0x410 [ 103.886243][ T7114] __sys_sendmsg+0x269/0x350 [ 103.890824][ T7114] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.895937][ T7114] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.902261][ T7114] ? do_syscall_64+0x100/0x230 [ 103.907023][ T7114] ? do_syscall_64+0xb6/0x230 [ 103.911696][ T7114] do_syscall_64+0xf3/0x230 [ 103.916727][ T7114] ? clear_bhb_loop+0x35/0x90 [ 103.921402][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.927295][ T7114] RIP: 0033:0x7f274e78d169 [ 103.931705][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.951315][ T7114] RSP: 002b:00007f274f65c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.959723][ T7114] RAX: ffffffffffffffda RBX: 00007f274e9a5fa0 RCX: 00007f274e78d169 [ 103.967686][ T7114] RDX: 0000000000000000 RSI: 0000400000001ac0 RDI: 0000000000000007 [ 103.975654][ T7114] RBP: 00007f274e80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.983628][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.991595][ T7114] R13: 0000000000000000 R14: 00007f274e9a5fa0 R15: 00007fffdd3b07e8 [ 103.999654][ T7114] [ 104.002664][ T7114] Modules linked in: [ 104.007674][ T7114] ---[ end trace 0000000000000000 ]--- [ 104.031251][ T7117] netlink: 268 bytes leftover after parsing attributes in process `syz.0.533'. [ 104.040470][ T7117] unsupported nla_type 65024 [ 104.046993][ T7114] RIP: 0010:ethnl_default_dumpit+0x447/0xd40 [ 104.108552][ T7114] Code: 49 8b 1f 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ca e6 17 f8 4c 8b 3b 49 8d 9f bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 4b 07 00 00 0f b6 1b 31 ff 89 de e8 f0 [ 104.129547][ T7114] RSP: 0018:ffffc900030070d8 EFLAGS: 00010203 [ 104.136732][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 104.145929][ T7114] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: 0000000000000000 [ 104.154272][ T7114] RDX: 0000000000000000 RSI: ffffffff8c80fdc0 RDI: 0000000000000001 [ 104.162513][ T7114] RBP: ffff8880277613c0 R08: ffffffff903d0b77 R09: 1ffffffff207a16e [ 104.170744][ T7114] R10: dffffc0000000000 R11: fffffbfff207a16f R12: ffff888059460600 [ 104.178862][ T7114] R13: ffff88805a73f3c0 R14: dffffc0000000000 R15: 0000000000000000 [ 104.189356][ T7114] FS: 00007f274f65c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 104.199105][ T7114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.207823][ T7114] CR2: 00007f80b066dd58 CR3: 000000002e546000 CR4: 00000000003526f0 [ 104.216080][ T7114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.225396][ T7114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.233999][ T7114] Kernel panic - not syncing: Fatal exception [ 104.240388][ T7114] Kernel Offset: disabled [ 104.244711][ T7114] Rebooting in 86400 seconds..