last executing test programs: 9.312876734s ago: executing program 3 (id=1828): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffefefff}, {0x6, 0x2}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffefefff}, {0x6, 0x2}]}, 0x10) sendmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040050) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x41, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@typed={0x8, 0x12d, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000c001) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x41, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@typed={0x8, 0x12d, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000c001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) writev(r4, &(0x7f0000000180), 0x100000000000003c) 9.22584244s ago: executing program 3 (id=1830): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x10000, 0x8, 0x9, 0xc, 0x3, 0x81}) 9.167771476s ago: executing program 3 (id=1831): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x1f8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) r2 = socket(0x10, 0x1, 0x0) listen(r1, 0x7fff) write(r2, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 9.009078566s ago: executing program 3 (id=1835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000003824737c348c00163e43d9489539857af688b7d3fd3a285f2c7df77936e1be115c6c0039ef0a077c9c22d88f00e5203d23b42006d423117d88c326201ab04bbf7c97174ac0498e43d586d74fbabddbaa55273ba8e171b80840d8148a6d78be3505e6141fd7e0882198c9c9b944cf222da369a8e550293874b7c558436b45480c661a90e692a0946c392ea3e83505c3d68094a80fc98b1690cbe817487a9fd229b2a1c6920d53767ecb2c10fff30719edb0058e3124c84d84dffb8c481ac1cd4bfa05ce16a1aa0bf683d98cf8a273436e0d65203fee4f5bb664a0b9800da616b1a6725a8741", @ANYRES16=r3, @ANYBLOB="59bb00000000000000000100000008002b01ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) (async) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00002000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00002000"], 0x50) 6.145464588s ago: executing program 3 (id=1860): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 5.968092474s ago: executing program 3 (id=1863): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x100000001, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) getpeername$packet(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000006c0)={'gre0\x00', 0x0}) recvfrom$inet(r1, &(0x7f0000001a40)=""/219, 0xdb, 0x40012121, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000cac07fc707000000000000000032000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r8}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000700)=ANY=[@ANYRES8=r6, @ANYRES16=r4, @ANYRESHEX=r3, @ANYRES32=r7, @ANYRESHEX], 0x10da) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x8, {0x0, 0x0, 0x0, r4, 0x4710c, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x44, 0x30, 0xb, 0xfffffffd, 0x2, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7, 0xf5}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x10000080) 5.88527942s ago: executing program 0 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x69}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fccbdf250900000005000700030000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64) listen(r5, 0xfffffffc) (async, rerun: 64) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (async, rerun: 64) r11 = socket(0x11, 0x800000003, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r14, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x10, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (rerun: 64) r15 = socket(0x15, 0x5, 0x0) getsockopt(r15, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 5.562633351s ago: executing program 0 (id=1865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000140001002bbd7000fedbdf250a088000", @ANYRES32=r1, @ANYBLOB="08000800e00400001400020000000000000000000000ffffe0000002f2968fdbf61bbba3508ba4587275c45e8c09a05e0f539793c0c7d729335338a7fa8bcfa2d6f91662c28119f0c49ea02640371a0d65ddd622577c0c5a9c0c4dd7c82d2df55385d67510d8699fece17aa4cb8ff0face6f62"], 0x34}, 0x1, 0x2}, 0x10) unshare(0x62040200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffaaaaaaaabb08004500002c00000000002f9078ac1e0001e000000100006558001890780400000000000000be040000000000000000"], 0x3e) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0xb) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x3, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100"/29], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="16ccde57bcdd421eabf3c9d2d6324dc0a50100b793cb06a7e19f157fbd02133527b8f35db09bd317e1e972b0a155ad8fd596e0e2b1e08cd93f4132536dfb6e07000000c182de28acb6213be63605b008ada21bb08d935ce072115fbc2790889353b8aa5b7c46cc4d7a18c2d154c95dd27eeec0fcbf9463bcf0ebf8dce735e23e7c7b87913d4f3c1a36bd7730537d1f131fc9234fcc73b6edde01c2edea3c2f21cd79248e55dd16ce9c085d449fb04a9f68173f4ec03a9b8f0b759c3a00d91c16f1f88cea1ee234e0f2cb2efbf68a477de0679c38293474c85872325039347940dcbd5ee8f567b9"], 0x188}, 0x1, 0x0, 0x0, 0x24000011}, 0x84) write(0xffffffffffffffff, &(0x7f0000000300)="038126a49c604ba34d27d9eead4036d85f581274bb8d7eaa98e5be9bf788883b7a7c6416e1f9024f2c1e52129f936bd97a722d3f35b1108e9e64cad83c977b09c7f1b6e102adb9fdbea3928df3799f24639bbce4b107d3b2a3e41fe366b36bc6d2a8ff77af7720fa5fd1d8", 0x6b) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x6, 0x1}, {0x9, 0x8}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) 5.447931967s ago: executing program 4 (id=1869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @mcast1, @mcast2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000001000000000000000000a000000000000004980ac362b8d293ddc0e7f7e67e21c006c15bbbea2c87c29cb0c2ec23700c9ea95fa3c27009224e6799692f58bd44b6b5fd0b0f9e6cb5c02306c73808e59ecc246ef995c86a859ca345831169366cca8755eef02cc6b8b9fb2daa3a18e138d79de7aa4358c63567f2a4769aa8952c81c9636ec1a00"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5.138720184s ago: executing program 4 (id=1872): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3f87, 0x12) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x14f49000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r3], 0xb8}}, 0x4004) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002700851600000a"], 0x4c}}, 0x4000804) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.60446206s ago: executing program 4 (id=1877): ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @rose={'rose', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480446400340002800800044000000000080005400000000008000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/156], 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000001000008510000004000000180000000000000000000080000000006500000000000000180000000000000000000000000000009500000000000000850000005e0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.521358447s ago: executing program 0 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "080080", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xa, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, [@srh={0x3a}]}}}}}}}, 0x0) (async) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040)=0x6, 0x5) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x4010, r4, 0xd9b63000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) listen(r7, 0x2) (async) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) (async) listen(r8, 0x0) (async) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x3) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d83d3a12388a8ae512910", 0x1f}], 0x2) 4.385285894s ago: executing program 4 (id=1880): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x4040) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3}, 0x8) 4.258106695s ago: executing program 4 (id=1882): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'dvmrp0\x00', 0x200}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'dvmrp0\x00', 0x200}) sendto$inet6(r3, &(0x7f00000003c0)="a4677dfc2133806eecf49820871b9e6af2e2325e831650ffb3435808817402cc9bc82ce582227afe5745064be656fa3aaa4e174b3d0b4b35f9151e6d3cf0094ff0d42a430b95cd5bd4ea764a652d04a6add7f932f86019", 0x57, 0x1, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f00000006c0)=""/14, 0xe}, {&(0x7f0000000840)=""/101, 0x65}], 0x3}}], 0x1, 0x2002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) unshare(0x62040200) (async) unshare(0x62040200) syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500005c0064000000019078ac1e0001ac14142c053490781200183f200000000068ff0600010000ac14149a00000000831799ac1414300a0101000a0101020a010100ac14143a441482136401010100c00000640101010000000300"], 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500005c0064000000019078ac1e0001ac14142c053490781200183f200000000068ff0600010000ac14149a00000000831799ac1414300a0101000a0101020a010100ac14143a441482136401010100c00000640101010000000300"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db00000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) 3.538384487s ago: executing program 0 (id=1883): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x1c, 0x18, 0x821, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde00800450000280400000000029078000000000000000011e09078000200000001000100000000000000008698ff82b195b390774b08f99146cad15ea45dd91d0087451a875b1f18ded94e954119ebb3ed748baf8db68d6aec3e0777b3aca571b7cfe888fd2495031a7f2a9e7dbfebe9d9207b77a09f183b60c5cb805823345eb83f90c44251e6c1218a43454ac3992a8c322606cca3d85500c0ad00cd3c90978600cf833715bd69232214a00be35952b96ae5d159325b2c355436a899c9db4000d340b2e174675183c29a3446a5b7eabbf13f6239437aa3283297f4df8cca86de41cc71445e805bf0fb97a11bf15653ffe789848fe4fce445b93e348422dbfc"], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) 3.00897706s ago: executing program 2 (id=1888): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000020301080000000000000000006b75b9"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYBLOB="01e72cbd7000000000000100009ac906a7e61caac6000c"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async) recvmmsg(r0, &(0x7f0000000480), 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000810}, 0x2400c010) (async) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) (async) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @multicast}, 0x4a, {0x2, 0x4e20, @multicast2}, 'syz_tun\x00'}) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000048, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000000)="8100000082e1", 0x6, 0x4000017, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x0, 0x0}, &(0x7f0000000200)=0x40) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=""/172, 0xac}, 0x80000002}], 0x1, 0x836b, 0x0) (async) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 2.840320994s ago: executing program 2 (id=1889): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x10}) 2.652905282s ago: executing program 0 (id=1891): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x9) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "cbe714383d6a3228", "5d7ad45261c4f4fb7e18e4495f2a78c1", "a2d31e78", "51ddffde400e00"}, 0x28) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) 2.543874632s ago: executing program 2 (id=1893): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000070000000000000009000000cd4ac0ff0100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000d980f0ff0500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000f7020000000000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000cb00000085000000060000009500afd3393c26e9"], &(0x7f0000000100)='GPL\x00', 0x3, 0x11, &(0x7f0000000240)=""/17, 0x41100, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x5, 0xffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000300)=[{0x4, 0x3, 0x7, 0x9}, {0x4, 0x1, 0x1, 0x5}, {0x3, 0x3, 0x3, 0x6}], 0x10, 0x3, @void, @value}, 0x94) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) connect$bt_l2cap(r1, &(0x7f0000000600)={0x1f, 0x4d14, @none, 0x2, 0x1}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002dbd7000fbdbdf25130000000c009900010100005d0000000500c200010000000c0043400080000001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x811) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) pipe(&(0x7f0000002740)) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r5], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4}) 2.436954729s ago: executing program 1 (id=1894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=@updpolicy={0xc4, 0x19, 0x8f82cdc586d2fef3, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x100}, {}, 0x0, 0x6e6bc0}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xc4}}, 0x0) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)=ANY=[]) close(r1) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r5, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000004", @ANYRES16=r6, @ANYBLOB="04002cbd7000fcdbdf25010000000000000001410000001800170000001f000008c76574683a7369743000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r8, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000000)="ba", 0x1}], 0x1, 0x0, 0x0, 0x400c881}}], 0x1, 0x24000014) (async) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) (async) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)='l', 0x1}], 0x1}, 0x8040) (async) close(r9) unshare(0x62040200) (async) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100120008004500005c0064000000019078ac1e0001ac14142c053490781200183f200000000000fffd0d010000ac14149a00000000831719ac1414300a0101000a0101e809010100ac14143a44146398c60b9ceb43bd0ad10011ec821364016f85"], 0x0) 2.373566313s ago: executing program 2 (id=1895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040810) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1.619910646s ago: executing program 1 (id=1896): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0x4, 0x401, 0xff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 371.016092ms ago: executing program 1 (id=1897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "82f84cbe349c4abc", "0e5d23e3519731b5395c0eb4843f822e", "c02be723", "df1215a7d932f72d"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8724, 0x2) syz_init_net_socket$ax25(0x3, 0x6, 0xc4) 303.002923ms ago: executing program 2 (id=1898): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xd8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xd8}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x0, 0x0, 0x8b, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x39, 0x4, 0x0, 0x0, {0x1b}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) r7 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0xffff, 0x4, @empty, 0x80000000}, 0x1c) (async, rerun: 64) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e24000014000700ff02000000000000000000000000000108000800e000000205000400010000000400050014000900"/82], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x8004, 0x4, 0x20004, 0x3}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x0, 0xe31d, {{0x7, 0x4, 0x1, 0x25, 0x1c, 0x67, 0x0, 0x4f, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x1a, [@local]}]}}}}}) (async) syz_emit_ethernet(0xfffffffffffffeaf, 0x0, 0x0) 238.557231ms ago: executing program 0 (id=1899): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x762c]}], [@TCA_POLICE_TBF={0xffffffffffffff9a, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4, 0x101}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 216.43191ms ago: executing program 1 (id=1900): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 179.146149ms ago: executing program 4 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f00000005c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000280)=""/19, 0x13}], 0x7, &(0x7f0000000a00)=""/255, 0xff}, 0x8}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/73, 0x49}, {&(0x7f0000000c80)=""/125, 0x7d}], 0x4}, 0x5}, {{&(0x7f0000000d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d80)=""/97, 0x61}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000e00)=""/241, 0xf1}, {&(0x7f0000000f00)=""/68, 0x44}, {&(0x7f0000000f80)=""/93, 0x5d}], 0x5, &(0x7f0000001080)=""/78, 0x4e}, 0x3}, {{&(0x7f0000001100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001180)=""/250, 0xfa}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000001340)=""/194, 0xc2}, {&(0x7f0000001440)=""/31, 0x1f}], 0x6, &(0x7f0000001500)=""/195, 0xc3}, 0x101}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001600)=""/132, 0x84}], 0x1, 0xfffffffffffffffc}, 0x7dd}, {{&(0x7f0000001700)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000001780)=""/202, 0xca}, {&(0x7f0000001900)=""/114, 0x72}, {&(0x7f0000001980)=""/249, 0xf9}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000001a80)=""/78, 0x4e}, {&(0x7f0000001880)=""/9, 0x9}, {&(0x7f0000004c40)=""/10, 0xa}], 0x7, &(0x7f0000004d00)=""/179, 0xb3}, 0xcef}, {{&(0x7f0000004dc0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e40)=""/144, 0x90}, {&(0x7f0000004f00)=""/14, 0xe}, {&(0x7f0000004f40)=""/179, 0xb3}], 0x3, &(0x7f0000005040)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000005080)=""/235, 0xeb}, {&(0x7f0000005180)=""/11, 0xb}, {&(0x7f00000051c0)=""/1, 0x1}], 0x3, &(0x7f0000005240)=""/122, 0x7a}, 0x400}, {{0x0, 0x0, &(0x7f0000007540)=[{&(0x7f00000052c0)=""/99, 0x63}, {&(0x7f0000005340)=""/2, 0x2}, {&(0x7f0000005380)=""/209, 0xd1}, {&(0x7f0000005480)=""/103, 0x67}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/29, 0x1d}, {&(0x7f0000006540)=""/4096, 0x1000}], 0x7, &(0x7f00000075c0)=""/158, 0x9e}, 0x8}, {{&(0x7f0000007680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000007700)=""/221, 0xdd}, {&(0x7f0000007800)=""/4096, 0x1000}, {&(0x7f0000008800)=""/111, 0x6f}, {&(0x7f0000008880)=""/28, 0x1c}, {&(0x7f00000088c0)=""/228, 0xe4}, {&(0x7f00000089c0)=""/221, 0xdd}, {&(0x7f0000008ac0)=""/142, 0x8e}, {&(0x7f0000008b80)=""/194, 0xc2}, {&(0x7f0000008c80)=""/165, 0xa5}], 0x9, &(0x7f0000008e00)=""/108, 0x6c}, 0x40}], 0xa, 0x0, &(0x7f0000009100)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xbb90338eb0ebcdc4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @value=r0}, 0x94) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x0, 0x87, 0xff}, [@RTA_UID={0x8}, @RTA_IIF={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x9, 0x1008, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xd, @void, @value, @void, @value}, 0x50) close(0x3) 81.499146ms ago: executing program 1 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000000), 0x4) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001a0000000002000000e562b1f5c09a760008000700", @ANYRES32=r2, @ANYBLOB="06000600fcff0000"], 0x2c}}, 0x0) 6.379445ms ago: executing program 2 (id=1903): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx \x00'}, 0x20) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x7, 0x10}, 0xc) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00'}, 0x18) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000700)={0xffffffffffffffff, 0x44, 0x1, 0x3}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xbc, &(0x7f0000000140)=""/188, 0x41100, 0x20, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x54f, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r2, r3, r4, r5, r6, r7, r8, r9], &(0x7f0000000780)=[{0x5, 0x3, 0xf5b79561, 0x1}, {0x3, 0x4, 0x9, 0x1}, {0x5, 0x1, 0xc, 0xb}], 0x10, 0x20000, @void, @value}, 0x94) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x7c, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x811) sendmsg$sock(r9, &(0x7f0000000b80)={&(0x7f0000000a00)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)="7489316cbdb3793c63ebe634f438d210a513896d3cf3a966bb3b1f38f196dbc399cef1d7a7824753f58254cb7d0bb5a166665164cb03bcd4e3f6797d78bc6144d4504eff100128aa387e0effef94b49c406647dffea21f", 0x57}], 0x1, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xe0}}], 0x30}, 0x4841) (async) bind$rxrpc(r9, &(0x7f0000000bc0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r9) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r7, &(0x7f0000000c80)={0x60000002}) (async, rerun: 64) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r14, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20008000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r9) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r12, 0x1, 0x53, &(0x7f0000000e40)={0x7, 0x7, 0x2}, &(0x7f0000000e80)=0x28) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000000ec0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000f00)) ppoll(&(0x7f0000000f40)=[{r0, 0x2408}, {r12, 0x1040}, {r5, 0x80}], 0x3, &(0x7f0000000f80)={0x0, 0x3938700}, &(0x7f0000000fc0)={[0x5]}, 0x8) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8084000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c094) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r14, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 0s ago: executing program 1 (id=1904): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x4040) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3}, 0x8) kernel console output (not intermixed with test programs): 007f99f75b5fa0 R15: 00007ffc7b4aa1a8 [ 132.721961][ T7218] [ 133.016561][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148844][ T7196] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 133.168164][ T7196] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.383'. [ 133.184945][ T7228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.394'. [ 133.323858][ T7231] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.362185][ T7234] netlink: 'syz.4.396': attribute type 4 has an invalid length. [ 133.500706][ T7231] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.524948][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 133.552664][ T7246] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.563330][ T7246] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 133.585880][ T7231] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.721605][ T7231] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.960966][ T7231] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.975555][ T7263] lo speed is unknown, defaulting to 1000 [ 134.006372][ T7231] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.060871][ T7231] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.144192][ T7231] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.717756][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.767403][ T7301] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 134.865322][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.896441][ T7301] bond0: (slave team0): Enslaving as an active interface with an up link [ 134.944737][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 134.966740][ T7306] sctp: [Deprecated]: syz.1.413 (pid 7306) Use of int in max_burst socket option. [ 134.966740][ T7306] Use struct sctp_assoc_value instead [ 134.987344][ T7308] ip6tnl1: entered promiscuous mode [ 135.001220][ T7308] ip6tnl1: entered allmulticast mode [ 135.007376][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 135.878401][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 135.898686][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'. [ 135.922409][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 135.944935][ T7348] tipc: Enabling of bearer rejected, failed to enable media [ 135.995819][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 136.327995][ T7376] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 136.337106][ T7377] FAULT_INJECTION: forcing a failure. [ 136.337106][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.351361][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.0.439 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 136.351386][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.351398][ T7377] Call Trace: [ 136.351405][ T7377] [ 136.351413][ T7377] dump_stack_lvl+0x189/0x250 [ 136.351447][ T7377] ? __pfx____ratelimit+0x10/0x10 [ 136.351470][ T7377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.351497][ T7377] ? __pfx__printk+0x10/0x10 [ 136.351517][ T7377] ? __might_fault+0xb0/0x130 [ 136.351556][ T7377] should_fail_ex+0x414/0x560 [ 136.351586][ T7377] _copy_from_iter+0x1db/0x16f0 [ 136.351625][ T7377] ? __pfx__copy_from_iter+0x10/0x10 [ 136.351655][ T7377] ? alloc_pages_noprof+0xbe/0x190 [ 136.351686][ T7377] ? skb_page_frag_refill+0x199/0x320 [ 136.351716][ T7377] kcm_sendmsg+0xeb2/0x2a70 [ 136.351783][ T7377] ? __pfx_kcm_sendmsg+0x10/0x10 [ 136.351808][ T7377] ? aa_sock_msg_perm+0x94/0x160 [ 136.351832][ T7377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.351853][ T7377] ? __pfx_kcm_sendmsg+0x10/0x10 [ 136.351882][ T7377] __sock_sendmsg+0x219/0x270 [ 136.351909][ T7377] ____sys_sendmsg+0x52d/0x830 [ 136.351933][ T7377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.351960][ T7377] ? import_iovec+0x74/0xa0 [ 136.351982][ T7377] ___sys_sendmsg+0x21f/0x2a0 [ 136.352004][ T7377] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.352062][ T7377] ? __fget_files+0x2a/0x420 [ 136.352090][ T7377] ? __fget_files+0x3a0/0x420 [ 136.352130][ T7377] __sys_sendmmsg+0x227/0x430 [ 136.352156][ T7377] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.352173][ T7377] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 136.352227][ T7377] ? ksys_write+0x22a/0x250 [ 136.352255][ T7377] ? __pfx_ksys_write+0x10/0x10 [ 136.352277][ T7377] ? rcu_is_watching+0x15/0xb0 [ 136.352312][ T7377] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.352334][ T7377] do_syscall_64+0xfa/0x3b0 [ 136.352357][ T7377] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.352380][ T7377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.352398][ T7377] ? clear_bhb_loop+0x60/0xb0 [ 136.352422][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.352441][ T7377] RIP: 0033:0x7f4da038e969 [ 136.352457][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.352473][ T7377] RSP: 002b:00007f4da112c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.352493][ T7377] RAX: ffffffffffffffda RBX: 00007f4da05b5fa0 RCX: 00007f4da038e969 [ 136.352507][ T7377] RDX: 0000000000000002 RSI: 0000200000003840 RDI: 0000000000000004 [ 136.352519][ T7377] RBP: 00007f4da112c090 R08: 0000000000000000 R09: 0000000000000000 [ 136.352531][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.352541][ T7377] R13: 0000000000000000 R14: 00007f4da05b5fa0 R15: 00007ffeea7358e8 [ 136.352589][ T7377] [ 136.652042][ T5885] lo speed is unknown, defaulting to 1000 [ 136.658083][ T5885] syz2: Port: 1 Link DOWN [ 136.690381][ T7376] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 136.770320][ T5885] lo speed is unknown, defaulting to 1000 [ 136.776415][ T5885] syz2: Port: 1 Link ACTIVE [ 136.835763][ T7376] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 136.934611][ T7397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'. [ 136.943545][ T10] lo speed is unknown, defaulting to 1000 [ 136.943582][ T10] syz2: Port: 1 Link DOWN [ 137.101447][ T7405] bridge_slave_0: entered promiscuous mode [ 137.112281][ T7405] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.283013][ T7414] tipc: Enabling of bearer rejected, failed to enable media [ 137.353399][ T5885] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 137.365934][ T7414] tipc: Can't bind to reserved service type 1 [ 137.387830][ T5885] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 137.404327][ T7421] FAULT_INJECTION: forcing a failure. [ 137.404327][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.406169][ T5885] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 137.486761][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.1.452 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 137.486791][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.486803][ T7421] Call Trace: [ 137.486811][ T7421] [ 137.486820][ T7421] dump_stack_lvl+0x189/0x250 [ 137.486858][ T7421] ? __pfx____ratelimit+0x10/0x10 [ 137.486884][ T7421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.486916][ T7421] ? __pfx__printk+0x10/0x10 [ 137.486938][ T7421] ? __might_fault+0xb0/0x130 [ 137.486987][ T7421] should_fail_ex+0x414/0x560 [ 137.487020][ T7421] _copy_from_user+0x2d/0xb0 [ 137.487042][ T7421] ___sys_sendmsg+0x158/0x2a0 [ 137.487067][ T7421] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.487164][ T7421] ? __might_fault+0xb0/0x130 [ 137.487200][ T7421] __sys_sendmmsg+0x227/0x430 [ 137.487228][ T7421] ? __pfx___sys_sendmmsg+0x10/0x10 [ 137.487247][ T7421] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 137.487305][ T7421] ? ksys_write+0x22a/0x250 [ 137.487337][ T7421] ? __pfx_ksys_write+0x10/0x10 [ 137.487362][ T7421] ? rcu_is_watching+0x15/0xb0 [ 137.487401][ T7421] __x64_sys_sendmmsg+0xa0/0xc0 [ 137.487425][ T7421] do_syscall_64+0xfa/0x3b0 [ 137.487452][ T7421] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.487486][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.487506][ T7421] ? clear_bhb_loop+0x60/0xb0 [ 137.487533][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.487552][ T7421] RIP: 0033:0x7f3d6e38e969 [ 137.487570][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.487587][ T7421] RSP: 002b:00007f3d6f2cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 137.487611][ T7421] RAX: ffffffffffffffda RBX: 00007f3d6e5b5fa0 RCX: 00007f3d6e38e969 [ 137.487625][ T7421] RDX: 0000000000000002 RSI: 0000200000003840 RDI: 0000000000000004 [ 137.487638][ T7421] RBP: 00007f3d6f2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 137.487651][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.487663][ T7421] R13: 0000000000000000 R14: 00007f3d6e5b5fa0 R15: 00007ffc756ae4c8 [ 137.487695][ T7421] [ 138.009506][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.455'. [ 138.088155][ T7432] pim6reg1: entered promiscuous mode [ 138.098079][ T7432] pim6reg1: entered allmulticast mode [ 138.310656][ T7441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.459'. [ 138.391940][ T7436] can: request_module (can-proto-0) failed. [ 138.401418][ T7443] syz_tun: entered allmulticast mode [ 138.526699][ T7451] dvmrp1: entered allmulticast mode [ 138.543909][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 138.566768][ T7455] tipc: Enabling of bearer rejected, failed to enable media [ 138.671965][ T7442] syz_tun: left allmulticast mode [ 139.015018][ T7476] FAULT_INJECTION: forcing a failure. [ 139.015018][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 139.043455][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.4.468 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 139.043483][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.043494][ T7476] Call Trace: [ 139.043502][ T7476] [ 139.043510][ T7476] dump_stack_lvl+0x189/0x250 [ 139.043546][ T7476] ? __pfx____ratelimit+0x10/0x10 [ 139.043570][ T7476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.043607][ T7476] ? __pfx__printk+0x10/0x10 [ 139.043635][ T7476] ? __pfx___might_resched+0x10/0x10 [ 139.043668][ T7476] should_fail_ex+0x414/0x560 [ 139.043698][ T7476] should_failslab+0xa8/0x100 [ 139.043729][ T7476] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 139.043757][ T7476] ? __alloc_skb+0x112/0x2d0 [ 139.043784][ T7476] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 139.043816][ T7476] __alloc_skb+0x112/0x2d0 [ 139.043849][ T7476] kcm_sendmsg+0x25ea/0x2a70 [ 139.043906][ T7476] ? aa_sk_perm+0x81e/0x950 [ 139.043934][ T7476] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.043955][ T7476] ? __pfx_kcm_sendmsg+0x10/0x10 [ 139.043981][ T7476] ? aa_sock_msg_perm+0x94/0x160 [ 139.044006][ T7476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.044029][ T7476] ? __pfx_kcm_sendmsg+0x10/0x10 [ 139.044052][ T7476] __sock_sendmsg+0x219/0x270 [ 139.044080][ T7476] ____sys_sendmsg+0x52d/0x830 [ 139.044105][ T7476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.044134][ T7476] ? import_iovec+0x74/0xa0 [ 139.044157][ T7476] ___sys_sendmsg+0x21f/0x2a0 [ 139.044179][ T7476] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.044247][ T7476] ? __might_fault+0xb0/0x130 [ 139.044283][ T7476] __sys_sendmmsg+0x227/0x430 [ 139.044310][ T7476] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.044327][ T7476] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 139.044381][ T7476] ? ksys_write+0x22a/0x250 [ 139.044409][ T7476] ? __pfx_ksys_write+0x10/0x10 [ 139.044449][ T7476] ? rcu_is_watching+0x15/0xb0 [ 139.044487][ T7476] __x64_sys_sendmmsg+0xa0/0xc0 [ 139.044511][ T7476] do_syscall_64+0xfa/0x3b0 [ 139.044536][ T7476] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.044559][ T7476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.044579][ T7476] ? clear_bhb_loop+0x60/0xb0 [ 139.044612][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.044632][ T7476] RIP: 0033:0x7feb3c18e969 [ 139.044650][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.044667][ T7476] RSP: 002b:00007feb3cf4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.044688][ T7476] RAX: ffffffffffffffda RBX: 00007feb3c3b5fa0 RCX: 00007feb3c18e969 [ 139.044703][ T7476] RDX: 0000000000000002 RSI: 0000200000003840 RDI: 0000000000000004 [ 139.044716][ T7476] RBP: 00007feb3cf4b090 R08: 0000000000000000 R09: 0000000000000000 [ 139.044728][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.044740][ T7476] R13: 0000000000000000 R14: 00007feb3c3b5fa0 R15: 00007ffdea4e00a8 [ 139.044773][ T7476] [ 139.458204][ T7489] tipc: Enabling of bearer rejected, failed to enable media [ 139.470063][ T7487] trusted_key: syz.2.472 sent an empty control message without MSG_MORE. [ 139.710073][ T7497] syzkaller0: entered allmulticast mode [ 140.663782][ T7535] lo speed is unknown, defaulting to 1000 [ 140.791265][ T7543] __nla_validate_parse: 5 callbacks suppressed [ 140.791282][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 140.822131][ T7543] tipc: Enabling of bearer rejected, failed to enable media [ 141.144828][ T7546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.188038][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 141.205156][ T7556] veth0_vlan: entered allmulticast mode [ 141.250657][ T7561] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 141.267684][ T7560] veth0_vlan: left promiscuous mode [ 141.283863][ T7561] netlink: 119 bytes leftover after parsing attributes in process `syz.0.496'. [ 141.297539][ T7560] veth0_vlan: entered promiscuous mode [ 141.305055][ T7562] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 141.327123][ T7562] netlink: 119 bytes leftover after parsing attributes in process `syz.0.496'. [ 141.384418][ T7546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.452597][ T7569] FAULT_INJECTION: forcing a failure. [ 141.452597][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.470292][ T7535] unsupported nlmsg_type 40 [ 141.486771][ T7569] CPU: 0 UID: 0 PID: 7569 Comm: syz.2.499 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 141.486798][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.486811][ T7569] Call Trace: [ 141.486818][ T7569] [ 141.486827][ T7569] dump_stack_lvl+0x189/0x250 [ 141.486865][ T7569] ? __pfx____ratelimit+0x10/0x10 [ 141.486891][ T7569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.486923][ T7569] ? __pfx__printk+0x10/0x10 [ 141.486947][ T7569] ? __might_fault+0xb0/0x130 [ 141.486990][ T7569] should_fail_ex+0x414/0x560 [ 141.487023][ T7569] _copy_from_iter+0x1db/0x16f0 [ 141.487075][ T7569] ? rcu_is_watching+0x15/0xb0 [ 141.487107][ T7569] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 141.487136][ T7569] ? __pfx__copy_from_iter+0x10/0x10 [ 141.487172][ T7569] ? skb_page_frag_refill+0x1be/0x320 [ 141.487208][ T7569] kcm_sendmsg+0xeb2/0x2a70 [ 141.487280][ T7569] ? __pfx_kcm_sendmsg+0x10/0x10 [ 141.487310][ T7569] ? aa_sock_msg_perm+0x94/0x160 [ 141.487339][ T7569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.487375][ T7569] ? __pfx_kcm_sendmsg+0x10/0x10 [ 141.487401][ T7569] __sock_sendmsg+0x219/0x270 [ 141.487431][ T7569] ____sys_sendmsg+0x52d/0x830 [ 141.487464][ T7569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.487497][ T7569] ? import_iovec+0x74/0xa0 [ 141.487522][ T7569] ___sys_sendmsg+0x21f/0x2a0 [ 141.487546][ T7569] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.487621][ T7569] ? __might_fault+0xb0/0x130 [ 141.487657][ T7569] __sys_sendmmsg+0x227/0x430 [ 141.487686][ T7569] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.487704][ T7569] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 141.487764][ T7569] ? ksys_write+0x22a/0x250 [ 141.487796][ T7569] ? __pfx_ksys_write+0x10/0x10 [ 141.487821][ T7569] ? rcu_is_watching+0x15/0xb0 [ 141.487860][ T7569] __x64_sys_sendmmsg+0xa0/0xc0 [ 141.487885][ T7569] do_syscall_64+0xfa/0x3b0 [ 141.487910][ T7569] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.487935][ T7569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.487956][ T7569] ? clear_bhb_loop+0x60/0xb0 [ 141.487982][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.488002][ T7569] RIP: 0033:0x7f869d98e969 [ 141.488021][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.488038][ T7569] RSP: 002b:00007f869e8c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.488060][ T7569] RAX: ffffffffffffffda RBX: 00007f869dbb5fa0 RCX: 00007f869d98e969 [ 141.488075][ T7569] RDX: 0000000000000002 RSI: 0000200000003840 RDI: 0000000000000004 [ 141.488089][ T7569] RBP: 00007f869e8c1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.488101][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.488113][ T7569] R13: 0000000000000000 R14: 00007f869dbb5fa0 R15: 00007fff803b4e08 [ 141.488147][ T7569] [ 141.913080][ T7573] netlink: zone id is out of range [ 141.941255][ T7573] netlink: zone id is out of range [ 141.969843][ T7575] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 142.007886][ T7546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.044862][ T7573] netlink: set zone limit has 4 unknown bytes [ 142.067617][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 142.080258][ T7577] tipc: Enabling of bearer rejected, failed to enable media [ 142.142701][ T7546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.176124][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 142.195867][ T7583] sctp: [Deprecated]: syz.1.504 (pid 7583) Use of int in max_burst socket option. [ 142.195867][ T7583] Use struct sctp_assoc_value instead [ 142.345443][ T7546] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.390553][ T7546] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.412931][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 142.427353][ T7594] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 142.440832][ T7594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.456173][ T7546] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.526860][ T7546] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.651151][ T7606] FAULT_INJECTION: forcing a failure. [ 142.651151][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 142.672753][ T5831] Bluetooth: hci4: link tx timeout [ 142.678439][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.692325][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.4.514 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 142.692351][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.692364][ T7606] Call Trace: [ 142.692372][ T7606] [ 142.692381][ T7606] dump_stack_lvl+0x189/0x250 [ 142.692417][ T7606] ? __pfx____ratelimit+0x10/0x10 [ 142.692443][ T7606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.692475][ T7606] ? __pfx__printk+0x10/0x10 [ 142.692504][ T7606] ? __pfx___might_resched+0x10/0x10 [ 142.692539][ T7606] should_fail_ex+0x414/0x560 [ 142.692571][ T7606] should_failslab+0xa8/0x100 [ 142.692603][ T7606] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.692634][ T7606] ? __alloc_skb+0x112/0x2d0 [ 142.692670][ T7606] __alloc_skb+0x112/0x2d0 [ 142.692705][ T7606] __ip6_append_data+0x2b8c/0x3de0 [ 142.692745][ T7606] ? __lock_acquire+0xab9/0xd20 [ 142.692774][ T7606] ? __pfx_raw6_getfrag+0x10/0x10 [ 142.692816][ T7606] ? ip6_mtu+0x7d/0x3f0 [ 142.692840][ T7606] ? __pfx___ip6_append_data+0x10/0x10 [ 142.692859][ T7606] ? __pfx_ip6_mtu+0x10/0x10 [ 142.692889][ T7606] ip6_append_data+0x1c4/0x380 [ 142.692916][ T7606] ? __pfx_raw6_getfrag+0x10/0x10 [ 142.692944][ T7606] rawv6_sendmsg+0x124b/0x17f0 [ 142.692987][ T7606] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 142.693019][ T7606] ? kernel_text_address+0xa5/0xe0 [ 142.693054][ T7606] ? __kernel_text_address+0xd/0x40 [ 142.693095][ T7606] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.693122][ T7606] ? sock_rps_record_flow+0x19/0x410 [ 142.693153][ T7606] ? inet_sendmsg+0x2f4/0x370 [ 142.693178][ T7606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.693218][ T7606] __sock_sendmsg+0x19c/0x270 [ 142.693245][ T7606] sock_sendmsg+0x158/0x230 [ 142.693272][ T7606] ? __pfx_sock_sendmsg+0x10/0x10 [ 142.693322][ T7606] kcm_write_msgs+0xc3a/0x1570 [ 142.693371][ T7606] ? __pfx_kcm_write_msgs+0x10/0x10 [ 142.693409][ T7606] ? skb_page_frag_refill+0x1be/0x320 [ 142.693440][ T7606] kcm_sendmsg+0x24b4/0x2a70 [ 142.693509][ T7606] ? __pfx_kcm_sendmsg+0x10/0x10 [ 142.693535][ T7606] ? aa_sock_msg_perm+0x94/0x160 [ 142.693560][ T7606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.693582][ T7606] ? __pfx_kcm_sendmsg+0x10/0x10 [ 142.693604][ T7606] __sock_sendmsg+0x219/0x270 [ 142.693632][ T7606] ____sys_sendmsg+0x52d/0x830 [ 142.693657][ T7606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.693687][ T7606] ? import_iovec+0x74/0xa0 [ 142.693710][ T7606] ___sys_sendmsg+0x21f/0x2a0 [ 142.693732][ T7606] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.693801][ T7606] ? __might_fault+0xb0/0x130 [ 142.693833][ T7606] __sys_sendmmsg+0x227/0x430 [ 142.693859][ T7606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.693875][ T7606] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 142.693931][ T7606] ? ksys_write+0x22a/0x250 [ 142.693958][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 142.693980][ T7606] ? rcu_is_watching+0x15/0xb0 [ 142.694015][ T7606] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.694060][ T7606] do_syscall_64+0xfa/0x3b0 [ 142.694083][ T7606] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.694105][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.694124][ T7606] ? clear_bhb_loop+0x60/0xb0 [ 142.694148][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.694166][ T7606] RIP: 0033:0x7feb3c18e969 [ 142.694183][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.694199][ T7606] RSP: 002b:00007feb3cf4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.694218][ T7606] RAX: ffffffffffffffda RBX: 00007feb3c3b5fa0 RCX: 00007feb3c18e969 [ 142.694232][ T7606] RDX: 0000000000000002 RSI: 0000200000003840 RDI: 0000000000000004 [ 142.694244][ T7606] RBP: 00007feb3cf4b090 R08: 0000000000000000 R09: 0000000000000000 [ 142.694255][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.694265][ T7606] R13: 0000000000000000 R14: 00007feb3c3b5fa0 R15: 00007ffdea4e00a8 [ 142.694296][ T7606] [ 143.090543][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 143.108425][ T7610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 143.137355][ T7610] vlan2: entered allmulticast mode [ 143.189479][ T7610] syz_tun: entered allmulticast mode [ 143.277738][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 143.290215][ T7617] tipc: Enabling of bearer rejected, failed to enable media [ 143.561605][ T7630] bridge_slave_1: left allmulticast mode [ 143.567314][ T7630] bridge_slave_1: left promiscuous mode [ 143.608127][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.629778][ T7630] bridge_slave_0: left allmulticast mode [ 143.635578][ T7630] bridge_slave_0: left promiscuous mode [ 143.642265][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.981118][ T7643] ip6gre1: entered allmulticast mode [ 144.033201][ T7652] netlink: 'syz.2.525': attribute type 12 has an invalid length. [ 144.075531][ T64] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.342691][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 144.451022][ T7675] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 144.460954][ T7675] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 144.514506][ T7679] sch_fq: defrate 0 ignored. [ 144.727654][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 144.840152][ T7694] FAULT_INJECTION: forcing a failure. [ 144.840152][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 144.856437][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.4.539 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 144.856464][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.856476][ T7694] Call Trace: [ 144.856484][ T7694] [ 144.856492][ T7694] dump_stack_lvl+0x189/0x250 [ 144.856526][ T7694] ? __pfx____ratelimit+0x10/0x10 [ 144.856551][ T7694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.856581][ T7694] ? __pfx__printk+0x10/0x10 [ 144.856609][ T7694] ? __pfx___might_resched+0x10/0x10 [ 144.856644][ T7694] should_fail_ex+0x414/0x560 [ 144.856674][ T7694] should_failslab+0xa8/0x100 [ 144.856705][ T7694] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 144.856734][ T7694] ? __alloc_skb+0x112/0x2d0 [ 144.856767][ T7694] __alloc_skb+0x112/0x2d0 [ 144.856801][ T7694] __ip6_append_data+0x2b8c/0x3de0 [ 144.856838][ T7694] ? __lock_acquire+0xab9/0xd20 [ 144.856867][ T7694] ? __pfx_raw6_getfrag+0x10/0x10 [ 144.856907][ T7694] ? ip6_mtu+0x7d/0x3f0 [ 144.856929][ T7694] ? __pfx___ip6_append_data+0x10/0x10 [ 144.856947][ T7694] ? __pfx_ip6_mtu+0x10/0x10 [ 144.856975][ T7694] ip6_append_data+0x1c4/0x380 [ 144.857001][ T7694] ? __pfx_raw6_getfrag+0x10/0x10 [ 144.857027][ T7694] rawv6_sendmsg+0x124b/0x17f0 [ 144.857066][ T7694] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 144.857112][ T7694] ? stack_trace_save+0x9c/0xe0 [ 144.857158][ T7694] ? __sys_sendmmsg+0x227/0x430 [ 144.857179][ T7694] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.857212][ T7694] ? sock_rps_record_flow+0x19/0x410 [ 144.857243][ T7694] ? inet_sendmsg+0x2f4/0x370 [ 144.857269][ T7694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.857299][ T7694] __sock_sendmsg+0x19c/0x270 [ 144.857331][ T7694] sock_sendmsg+0x158/0x230 [ 144.857361][ T7694] ? __pfx_sock_sendmsg+0x10/0x10 [ 144.857415][ T7694] kcm_write_msgs+0xc3a/0x1570 [ 144.857467][ T7694] ? __pfx_kcm_write_msgs+0x10/0x10 [ 144.857509][ T7694] ? skb_page_frag_refill+0x1be/0x320 [ 144.857544][ T7694] kcm_sendmsg+0x24b4/0x2a70 [ 144.857620][ T7694] ? __pfx_kcm_sendmsg+0x10/0x10 [ 144.857649][ T7694] ? aa_sock_msg_perm+0x94/0x160 [ 144.857678][ T7694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.857703][ T7694] ? __pfx_kcm_sendmsg+0x10/0x10 [ 144.857729][ T7694] __sock_sendmsg+0x219/0x270 [ 144.857760][ T7694] ____sys_sendmsg+0x52d/0x830 [ 144.857788][ T7694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.857822][ T7694] ? import_iovec+0x74/0xa0 [ 144.857849][ T7694] ___sys_sendmsg+0x21f/0x2a0 [ 144.857873][ T7694] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.857950][ T7694] ? __might_fault+0xb0/0x130 [ 144.857986][ T7694] __sys_sendmmsg+0x227/0x430 [ 144.858016][ T7694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.858034][ T7694] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 144.858102][ T7694] ? ksys_write+0x22a/0x250 [ 144.858141][ T7694] ? __pfx_ksys_write+0x10/0x10 [ 144.858165][ T7694] ? rcu_is_watching+0x15/0xb0 [ 144.858205][ T7694] __x64_sys_sendmmsg+0xa0/0xc0 [ 144.858230][ T7694] do_syscall_64+0xfa/0x3b0 [ 144.858256][ T7694] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.858281][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.858302][ T7694] ? clear_bhb_loop+0x60/0xb0 [ 144.858340][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.858358][ T7694] RIP: 0033:0x7feb3c18e969 [ 144.858376][ T7694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.858392][ T7694] RSP: 002b:00007feb3cf4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.858411][ T7694] RAX: ffffffffffffffda RBX: 00007feb3c3b5fa0 RCX: 00007feb3c18e969 [ 144.858425][ T7694] RDX: 0000000000000002 RSI: 0000200000003840 RDI: 0000000000000004 [ 144.858437][ T7694] RBP: 00007feb3cf4b090 R08: 0000000000000000 R09: 0000000000000000 [ 144.858448][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.858459][ T7694] R13: 0000000000000000 R14: 00007feb3c3b5fa0 R15: 00007ffdea4e00a8 [ 144.858490][ T7694] [ 145.310779][ T30] audit: type=1800 audit(1748896892.639:2): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.535" name="cgroup.controllers" dev="tmpfs" ino=503 res=0 errno=0 [ 145.576887][ T7710] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 145.586399][ T7710] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.765418][ T7713] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20001 [ 145.872475][ T7719] __nla_validate_parse: 8 callbacks suppressed [ 145.872495][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 145.899297][ T7719] tipc: Enabling of bearer rejected, failed to enable media [ 145.955899][ T7727] ip6t_srh: unknown srh match flags 4000 [ 146.087561][ T7728] bridge0: entered promiscuous mode [ 146.227048][ T7733] xt_CT: No such helper "snmp" [ 146.581955][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 146.615552][ T7724] hsr_slave_0: left promiscuous mode [ 146.628325][ T7724] hsr_slave_1: left promiscuous mode [ 146.798710][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 146.808139][ T7761] tipc: Enabling of bearer rejected, failed to enable media [ 147.095286][ T7776] FAULT_INJECTION: forcing a failure. [ 147.095286][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.120356][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.4.566 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 147.120385][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.120397][ T7776] Call Trace: [ 147.120404][ T7776] [ 147.120413][ T7776] dump_stack_lvl+0x189/0x250 [ 147.120454][ T7776] ? __pfx____ratelimit+0x10/0x10 [ 147.120480][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.120512][ T7776] ? __pfx__printk+0x10/0x10 [ 147.120549][ T7776] should_fail_ex+0x414/0x560 [ 147.120581][ T7776] _copy_to_user+0x31/0xb0 [ 147.120605][ T7776] simple_read_from_buffer+0xe1/0x170 [ 147.120640][ T7776] proc_fail_nth_read+0x1df/0x250 [ 147.120671][ T7776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.120696][ T7776] ? rw_verify_area+0x258/0x650 [ 147.120721][ T7776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.120744][ T7776] vfs_read+0x200/0x980 [ 147.120776][ T7776] ? __pfx___mutex_lock+0x10/0x10 [ 147.120803][ T7776] ? __pfx_vfs_read+0x10/0x10 [ 147.120831][ T7776] ? __fget_files+0x2a/0x420 [ 147.120867][ T7776] ? __fget_files+0x3a0/0x420 [ 147.120907][ T7776] ? __fget_files+0x2a/0x420 [ 147.120945][ T7776] ksys_read+0x145/0x250 [ 147.120972][ T7776] ? __pfx_ksys_read+0x10/0x10 [ 147.120994][ T7776] ? rcu_is_watching+0x15/0xb0 [ 147.121027][ T7776] ? do_syscall_64+0xbe/0x3b0 [ 147.121056][ T7776] do_syscall_64+0xfa/0x3b0 [ 147.121078][ T7776] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.121100][ T7776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.121119][ T7776] ? clear_bhb_loop+0x60/0xb0 [ 147.121142][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.121160][ T7776] RIP: 0033:0x7feb3c18d37c [ 147.121177][ T7776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.121193][ T7776] RSP: 002b:00007feb3cf4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.121213][ T7776] RAX: ffffffffffffffda RBX: 00007feb3c3b5fa0 RCX: 00007feb3c18d37c [ 147.121226][ T7776] RDX: 000000000000000f RSI: 00007feb3cf4b0a0 RDI: 0000000000000006 [ 147.121255][ T7776] RBP: 00007feb3cf4b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.121267][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.121278][ T7776] R13: 0000000000000000 R14: 00007feb3c3b5fa0 R15: 00007ffdea4e00a8 [ 147.121313][ T7776] [ 147.716009][ T7795] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 147.800258][ T7802] netlink: 3 bytes leftover after parsing attributes in process `syz.3.573'. [ 147.856910][ T7795] bond1: entered promiscuous mode [ 147.862524][ T7795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.925069][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 147.934926][ T7804] tipc: Enabling of bearer rejected, failed to enable media [ 147.958274][ T7802] batadv1: entered promiscuous mode [ 147.973974][ T7802] batadv1: entered allmulticast mode [ 147.989341][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.027013][ T7802] bond1: (slave batadv1): making interface the new active one [ 148.053583][ T7802] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 148.158601][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.484535][ T7807] veth1_to_team: mtu less than device minimum [ 149.701534][ T7830] lo speed is unknown, defaulting to 1000 [ 150.026923][ T7853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.584'. [ 150.134257][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 150.161506][ T7857] tipc: Enabling of bearer rejected, failed to enable media [ 150.323920][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 150.353511][ T7867] netlink: 'syz.3.588': attribute type 30 has an invalid length. [ 150.446836][ T7869] lo speed is unknown, defaulting to 1000 [ 150.576896][ T7874] netlink: 128 bytes leftover after parsing attributes in process `syz.1.589'. [ 150.692394][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 150.729031][ T7862] lo: entered promiscuous mode [ 150.743039][ T7862] lo: entered allmulticast mode [ 150.754744][ T7862] tunl0: entered promiscuous mode [ 150.761339][ T7862] tunl0: entered allmulticast mode [ 150.774936][ T7862] gre0: entered promiscuous mode [ 150.783630][ T7862] gre0: entered allmulticast mode [ 150.794782][ T7862] gretap0: entered promiscuous mode [ 150.801848][ T7862] gretap0: entered allmulticast mode [ 150.808492][ T7862] erspan0: entered promiscuous mode [ 150.814953][ T7862] erspan0: entered allmulticast mode [ 150.821358][ T7862] ip_vti0: entered promiscuous mode [ 150.826681][ T7862] ip_vti0: entered allmulticast mode [ 150.833240][ T7862] ip6_vti0: entered promiscuous mode [ 150.838993][ T7862] ip6_vti0: entered allmulticast mode [ 150.846336][ T7862] sit0: entered promiscuous mode [ 150.854614][ T7862] sit0: entered allmulticast mode [ 150.862269][ T7862] ip6tnl0: entered promiscuous mode [ 150.870817][ T7862] ip6tnl0: entered allmulticast mode [ 150.876899][ T7862] ip6gre0: entered promiscuous mode [ 150.884760][ T7862] ip6gre0: entered allmulticast mode [ 150.894674][ T7862] syz_tun: entered promiscuous mode [ 150.900279][ T7862] syz_tun: entered allmulticast mode [ 150.906585][ T7862] ip6gretap0: entered promiscuous mode [ 150.912800][ T7862] ip6gretap0: entered allmulticast mode [ 150.921032][ T7862] vcan0: entered promiscuous mode [ 150.926214][ T7862] vcan0: entered allmulticast mode [ 150.935262][ T7862] bond0: entered promiscuous mode [ 150.952808][ T7862] bond_slave_0: entered promiscuous mode [ 150.968311][ T7862] bond_slave_1: entered promiscuous mode [ 150.983707][ T7862] bond0: entered allmulticast mode [ 150.997334][ T7862] bond_slave_0: entered allmulticast mode [ 151.027184][ T7862] bond_slave_1: entered allmulticast mode [ 151.048965][ T7862] team0: entered promiscuous mode [ 151.060745][ T7862] team_slave_0: entered promiscuous mode [ 151.076547][ T7862] team_slave_1: entered promiscuous mode [ 151.094380][ T7862] team0: entered allmulticast mode [ 151.107693][ T7862] team_slave_0: entered allmulticast mode [ 151.119111][ T7862] team_slave_1: entered allmulticast mode [ 151.137872][ T7862] dummy0: entered promiscuous mode [ 151.144669][ T7862] dummy0: entered allmulticast mode [ 151.151279][ T7862] nlmon0: entered promiscuous mode [ 151.156567][ T7862] nlmon0: entered allmulticast mode [ 151.164913][ T7862] caif0: entered promiscuous mode [ 151.178022][ T7862] caif0: entered allmulticast mode [ 151.183172][ T7862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.313024][ T7889] syzkaller0: entered promiscuous mode [ 151.371073][ T7889] syzkaller0: entered allmulticast mode [ 151.574322][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 152.803071][ T7892] lo speed is unknown, defaulting to 1000 [ 152.852939][ T7912] syzkaller0: entered promiscuous mode [ 152.861158][ T7912] syzkaller0: entered allmulticast mode [ 152.934547][ T7915] lo speed is unknown, defaulting to 1000 [ 154.219731][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 154.229549][ T7924] tipc: Enabling of bearer rejected, failed to enable media [ 154.407770][ T7938] xt_CT: No such helper "snmp" [ 154.548050][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 154.575600][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 154.758545][ T7954] nbd: couldn't find device at index 536870912 [ 154.865197][ T7957] netlink: 'syz.0.611': attribute type 1 has an invalid length. [ 154.974973][ T7957] bond1: entered promiscuous mode [ 155.033469][ T7969] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 155.049469][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 155.078872][ T7957] bond1: entered allmulticast mode [ 155.084813][ T7969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.613'. [ 155.137209][ T7964] bond1: (slave ip6gretap1): making interface the new active one [ 155.163094][ T7964] ip6gretap1: entered promiscuous mode [ 155.173864][ T7964] ip6gretap1: entered allmulticast mode [ 155.184589][ T7964] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.203084][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 155.217233][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 155.235209][ T7974] tipc: Enabling of bearer rejected, failed to enable media [ 155.284698][ T7980] netlink: 'syz.2.615': attribute type 4 has an invalid length. [ 155.508784][ T7991] lo speed is unknown, defaulting to 1000 [ 155.605489][ T5932] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 155.623744][ T5932] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 155.644891][ T5932] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 156.264628][ T8026] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 156.319749][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 156.323017][ T8026] ipt_REJECT: TCP_RESET invalid for non-tcp [ 156.345244][ T8025] tipc: Enabling of bearer rejected, failed to enable media [ 156.461962][ T8037] netlink: 'syz.2.630': attribute type 3 has an invalid length. [ 156.469906][ T8037] netlink: 666 bytes leftover after parsing attributes in process `syz.2.630'. [ 156.487636][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.974138][ T8037] netlink: 'syz.2.630': attribute type 11 has an invalid length. [ 157.129480][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 157.182478][ T8063] tipc: Enabling of bearer rejected, failed to enable media [ 157.486880][ T8084] netlink: 'syz.4.649': attribute type 13 has an invalid length. [ 157.559328][ T8088] netlink: 'syz.4.649': attribute type 13 has an invalid length. [ 157.588835][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 157.627569][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 157.677879][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.819890][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.836761][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.095631][ T8084] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.104415][ T8084] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.113379][ T8084] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.122144][ T8084] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.319026][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 158.336621][ T8115] tipc: Enabling of bearer rejected, failed to enable media [ 158.531950][ T8125] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 158.550251][ T8121] netlink: 92 bytes leftover after parsing attributes in process `syz.4.661'. [ 158.560751][ T8125] netlink: 232 bytes leftover after parsing attributes in process `syz.3.660'. [ 158.591976][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 158.625394][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'. [ 158.637134][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 158.823706][ T8141] netlink: 'syz.0.666': attribute type 15 has an invalid length. [ 158.992361][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 159.012954][ T8151] tipc: Enabling of bearer rejected, failed to enable media [ 159.635754][ T8183] lo speed is unknown, defaulting to 1000 [ 159.745418][ T8184] lo speed is unknown, defaulting to 1000 [ 160.114517][ T8197] tipc: Enabling of bearer rejected, failed to enable media [ 160.185095][ T8202] netlink: 'syz.1.687': attribute type 15 has an invalid length. [ 160.278688][ T8208] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.391082][ T8211] netlink: 'syz.3.689': attribute type 15 has an invalid length. [ 160.420725][ T8215] bridge0: port 2(syz_tun) entered blocking state [ 160.444529][ T8215] bridge0: port 2(syz_tun) entered disabled state [ 160.451731][ T8215] syz_tun: entered allmulticast mode [ 160.459529][ T8215] syz_tun: entered promiscuous mode [ 160.716622][ T8223] syz.2.692 (8223) used obsolete PPPIOCDETACH ioctl [ 161.037246][ T8250] tipc: Enabling of bearer rejected, failed to enable media [ 161.065999][ T8244] ip6tnl2: entered promiscuous mode [ 161.089765][ T8244] ip6tnl2: entered allmulticast mode [ 161.313832][ T5887] IPVS: starting estimator thread 0... [ 161.407654][ T8268] IPVS: using max 29 ests per chain, 69600 per kthread [ 161.442008][ T8275] IPVS: set_ctl: invalid protocol: 2 172.20.20.66:20004 [ 161.466813][ T8276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.494346][ T8275] ip6tnl1: entered promiscuous mode [ 161.500470][ T8275] ip6tnl1: entered allmulticast mode [ 161.513966][ T8275] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 161.742519][ T8286] tipc: Enabling of bearer rejected, failed to enable media [ 162.157898][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 162.338468][ T8300] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 162.367919][ T8301] macsec1: entered promiscuous mode [ 162.373394][ T8301] macsec1: entered allmulticast mode [ 162.419875][ T8306] __nla_validate_parse: 10 callbacks suppressed [ 162.419892][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 162.496443][ T8302] vlan2: entered promiscuous mode [ 162.503228][ T8302] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 162.530065][ T8302] vlan2: entered allmulticast mode [ 162.538056][ T8302] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 162.622445][ T8300] bond1: entered promiscuous mode [ 162.639194][ T8300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.679166][ T8304] bond1: (slave bridge3): making interface the new active one [ 162.686793][ T8304] bridge3: entered promiscuous mode [ 162.695306][ T8304] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 162.887638][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.172367][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 163.174851][ T8330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.727'. [ 163.187668][ T8334] tipc: Enabling of bearer rejected, failed to enable media [ 163.593001][ T8354] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 163.669220][ T8363] netlink: 22 bytes leftover after parsing attributes in process `syz.2.733'. [ 164.181067][ T8382] C: renamed from team_slave_0 [ 164.215799][ T8382] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 164.258068][ T8382] netlink: 152 bytes leftover after parsing attributes in process `syz.4.737'. [ 164.267277][ T8382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 164.291344][ T8389] sit0: entered promiscuous mode [ 164.302095][ T8389] netlink: 'syz.2.739': attribute type 1 has an invalid length. [ 164.317048][ T8389] netlink: 1 bytes leftover after parsing attributes in process `syz.2.739'. [ 164.328234][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 164.339238][ T8390] tipc: Enabling of bearer rejected, failed to enable media [ 164.377159][ T8385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.739'. [ 164.482909][ T8393] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 164.524703][ T8395] netlink: 'syz.0.742': attribute type 4 has an invalid length. [ 164.535140][ T8393] batman_adv: batadv0: Adding interface: ip6gretap1 [ 164.541984][ T8393] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.571141][ T8393] batman_adv: batadv0: Interface activated: ip6gretap1 [ 164.599528][ T8401] netlink: 'syz.0.742': attribute type 4 has an invalid length. [ 164.745269][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'. [ 164.766740][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 165.004249][ T8425] tipc: Enabling of bearer rejected, failed to enable media [ 165.075997][ T8423] ip6tnl2: entered promiscuous mode [ 165.092302][ T8423] ip6tnl2: entered allmulticast mode [ 165.100651][ T8423] team0: Device ip6tnl2 is of different type [ 165.146287][ T8431] xt_TCPMSS: Only works on TCP SYN packets [ 165.156121][ T8431] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 165.165661][ T8431] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 165.221032][ T8429] syz.1.755 (8429) used greatest stack depth: 16024 bytes left [ 165.402118][ T8442] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 165.771801][ T8462] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 165.771839][ T8461] tipc: Enabling of bearer rejected, failed to enable media [ 165.810737][ T8462] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 165.914162][ T8473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 166.933102][ T8516] veth0_to_bridge: entered promiscuous mode [ 166.950505][ T8520] bpq0: entered promiscuous mode [ 166.972948][ T8512] veth0_to_bridge: left promiscuous mode [ 167.230562][ T8535] tipc: Enabling of bearer rejected, failed to enable media [ 167.291174][ T8537] syzkaller1: entered promiscuous mode [ 167.312766][ T8537] syzkaller1: entered allmulticast mode [ 167.336324][ T8537] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 153 [ 167.444682][ T8544] __nla_validate_parse: 9 callbacks suppressed [ 167.444700][ T8544] netlink: 408 bytes leftover after parsing attributes in process `syz.1.786'. [ 167.515515][ T8542] IPVS: Scheduler module ip_vs_sip not found [ 167.540034][ T8537] IPVS: length: 24 != 16106127384 [ 167.901795][ T8557] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 167.925289][ T8557] team0: left promiscuous mode [ 167.933901][ T8557] team_slave_0: left promiscuous mode [ 167.948157][ T8557] team_slave_1: left promiscuous mode [ 167.958241][ T8557] team0: left allmulticast mode [ 167.963474][ T8557] team_slave_0: left allmulticast mode [ 167.969810][ T8557] team_slave_1: left allmulticast mode [ 167.982458][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.993457][ T8557] team0: entered promiscuous mode [ 168.012843][ T8557] team_slave_0: entered promiscuous mode [ 168.032790][ T8557] team_slave_1: entered promiscuous mode [ 168.041557][ T8557] team0: entered allmulticast mode [ 168.046804][ T8557] team_slave_0: entered allmulticast mode [ 168.055020][ T8557] team_slave_1: entered allmulticast mode [ 168.071916][ T8557] bond0: (slave team0): Enslaving as an active interface with an up link [ 168.141090][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 168.156677][ T8571] tipc: Enabling of bearer rejected, failed to enable media [ 168.284187][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 168.303592][ T8579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.799'. [ 168.313256][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 168.478920][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 168.633643][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 168.687096][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 168.871663][ T8604] sctp: [Deprecated]: syz.3.807 (pid 8604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.871663][ T8604] Use struct sctp_sack_info instead [ 168.890743][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 168.908073][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 169.085916][ T8611] netlink: 64 bytes leftover after parsing attributes in process `syz.3.811'. [ 169.429268][ T8621] tipc: Enabling of bearer rejected, failed to enable media [ 169.536424][ T8627] netlink: 'syz.3.815': attribute type 9 has an invalid length. [ 169.717995][ T8637] lo: entered allmulticast mode [ 169.756254][ T8637] lo: left allmulticast mode [ 169.773452][ T8641] lo: entered allmulticast mode [ 169.806289][ T8644] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 169.829655][ T8644] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 170.236174][ T8666] tipc: Enabling of bearer rejected, failed to enable media [ 170.668904][ T8698] x_tables: duplicate underflow at hook 3 [ 171.046348][ T8729] tipc: Enabling of bearer rejected, failed to enable media [ 171.318539][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.370250][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.400110][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.425535][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.879192][ T8767] tipc: Enabling of bearer rejected, failed to enable media [ 172.242010][ T8790] sctp: [Deprecated]: syz.3.863 (pid 8790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.242010][ T8790] Use struct sctp_sack_info instead [ 172.461500][ T8802] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 172.568085][ T8809] __nla_validate_parse: 21 callbacks suppressed [ 172.568104][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 172.617764][ T8809] tipc: Enabling of bearer rejected, failed to enable media [ 172.770762][ T8817] netlink: 'syz.2.872': attribute type 10 has an invalid length. [ 172.861418][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 173.127752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.152528][ T8834] netlink: 'syz.1.876': attribute type 4 has an invalid length. [ 173.188224][ T30] audit: type=1107 audit(1748896920.509:3): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='µQããU“I“x&bx·ËNMݧHØì}P§Ül¾v' [ 173.453256][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 173.610632][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 173.657618][ T8858] tipc: Enabling of bearer rejected, failed to enable media [ 174.368075][ T8900] netlink: 'syz.1.894': attribute type 8 has an invalid length. [ 174.385579][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 174.589131][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 174.633570][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 174.643081][ T8902] tipc: Enabling of bearer rejected, failed to enable media [ 174.875500][ T8916] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 174.897218][ T8916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.901'. [ 175.039953][ T8926] veth1: entered allmulticast mode [ 175.563539][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 175.590170][ T8951] tipc: Enabling of bearer rejected, failed to enable media [ 175.657189][ T8953] Â: renamed from pim6reg1 [ 175.730519][ T8956] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 175.791887][ T8956] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 175.823613][ T8962] netlink: 'syz.1.918': attribute type 32 has an invalid length. [ 175.833292][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 175.888976][ T8962] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 175.965099][ T8962] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.240136][ T8962] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.492826][ T8962] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.579695][ T8962] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.645438][ T8995] tipc: Enabling of bearer rejected, failed to enable media [ 176.843932][ T8962] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.862265][ T9006] netlink: 'syz.3.931': attribute type 2 has an invalid length. [ 176.886749][ T8962] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.033261][ T8962] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.076349][ T8962] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.124502][ T9021] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 177.363816][ T9035] tipc: Enabling of bearer rejected, failed to enable media [ 177.485067][ T9037] syzkaller1: entered promiscuous mode [ 177.490747][ T9037] syzkaller1: entered allmulticast mode [ 177.531925][ T9041] macsec1: entered promiscuous mode [ 177.541092][ T9041] macsec1: entered allmulticast mode [ 177.976354][ T9065] __nla_validate_parse: 7 callbacks suppressed [ 177.976374][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'. [ 178.063414][ T9068] netlink: 'syz.1.951': attribute type 4 has an invalid length. [ 178.081991][ T9068] vlan0: entered promiscuous mode [ 178.151147][ T9074] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 178.178055][ T9074] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 178.190021][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 178.278379][ T9082] sctp: [Deprecated]: syz.0.965 (pid 9082) Use of int in max_burst socket option. [ 178.278379][ T9082] Use struct sctp_assoc_value instead [ 178.293586][ T9079] lo speed is unknown, defaulting to 1000 [ 178.356812][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 178.372611][ T9085] tipc: Enabling of bearer rejected, failed to enable media [ 178.546637][ T9097] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 178.584973][ T9092] bond0: (slave bond_slave_0): Releasing backup interface [ 178.618229][ T9092] bond0: (slave bond_slave_1): Releasing backup interface [ 178.717234][ T9092] team0: Port device team_slave_0 removed [ 178.756891][ T9101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.793392][ T9092] team0: Port device team_slave_1 removed [ 178.810470][ T9092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.832072][ T9092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.859406][ T9092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.883322][ T9092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.933722][ T9092] bond1: (slave batadv1): Releasing active interface [ 179.298116][ T9113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.963'. [ 179.639513][ T9123] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 179.657911][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 179.741907][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 179.765641][ T9131] tipc: Enabling of bearer rejected, failed to enable media [ 180.106645][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 180.145261][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 180.172310][ T9157] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 180.181382][ T9157] veth1_macvtap: left promiscuous mode [ 180.424881][ T9167] bond1: (slave ip6gretap1): Releasing active interface [ 180.462544][ T9167] ip6gretap1: left promiscuous mode [ 180.487713][ T9167] ip6gretap1: left allmulticast mode [ 180.809269][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 180.827940][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 180.950841][ T9200] lo speed is unknown, defaulting to 1000 [ 181.140187][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 181.234476][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.254273][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.272517][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.286354][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.303335][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.337197][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.357328][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.365371][ T9222] netlink: 'syz.1.993': attribute type 64 has an invalid length. [ 181.372887][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.385138][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.401390][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.113028][ T9231] tipc: Cannot configure node identity twice [ 182.637524][ T30] audit: type=1800 audit(1748896929.959:4): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1002" name="memory.events" dev="tmpfs" ino=983 res=0 errno=0 [ 182.982725][ T9278] __nla_validate_parse: 4 callbacks suppressed [ 182.982746][ T9278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1005'. [ 183.022625][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 183.114067][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 183.211253][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 183.410609][ T9290] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.419577][ T9290] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.428805][ T9290] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.438023][ T9290] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.493188][ T9292] netlink: 'syz.3.1012': attribute type 7 has an invalid length. [ 183.590243][ T9295] vlan2: entered promiscuous mode [ 183.605930][ T9295] bond0: entered promiscuous mode [ 183.736158][ T9291] lo speed is unknown, defaulting to 1000 [ 184.189913][ T9314] netlink: 'syz.3.1022': attribute type 9 has an invalid length. [ 184.207583][ T9314] netlink: 146708 bytes leftover after parsing attributes in process `syz.3.1022'. [ 184.484191][ T9329] tipc: New replicast peer: 255.255.255.255 [ 184.494975][ T9329] tipc: Enabled bearer , priority 10 [ 184.505863][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 184.701603][ T9331] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.711315][ T9331] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.720542][ T9331] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.729228][ T9331] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.391509][ T9381] sctp: [Deprecated]: syz.1.1042 (pid 9381) Use of int in maxseg socket option. [ 185.391509][ T9381] Use struct sctp_assoc_value instead [ 185.610643][ T9393] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 185.630200][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'. [ 185.641113][ T5885] tipc: Node number set to 873761802 [ 185.645101][ T9393] dummy0: entered promiscuous mode [ 185.655618][ T9393] bridge0: port 3(dummy0) entered blocking state [ 185.708633][ T9393] bridge0: port 3(dummy0) entered disabled state [ 185.728779][ T9402] x_tables: duplicate underflow at hook 3 [ 185.739836][ T9393] dummy0: entered allmulticast mode [ 185.761865][ T9393] bridge0: port 3(dummy0) entered blocking state [ 185.768466][ T9393] bridge0: port 3(dummy0) entered forwarding state [ 185.841847][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 186.053191][ T9418] lo speed is unknown, defaulting to 1000 [ 186.134331][ T9424] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1057'. [ 186.165416][ T9420] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.212390][ T9427] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.223450][ T9432] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.232707][ T9432] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.241923][ T9432] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.251162][ T9432] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.284030][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 186.295789][ T9430] tipc: Enabling of bearer rejected, failed to enable media [ 186.673026][ T9446] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 187.108321][ T9462] net_ratelimit: 56 callbacks suppressed [ 187.108342][ T9462] openvswitch: netlink: IP tunnel dst address not specified [ 187.386653][ T9453] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.397653][ T9453] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.406628][ T9453] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.450651][ T9453] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.474441][ T9453] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 187.488807][ T9453] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 187.586817][ T9453] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.596676][ T9453] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.606030][ T9453] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.615256][ T9453] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.683462][ T9453] bond1: left promiscuous mode [ 187.719387][ T9453] batadv1: left promiscuous mode [ 187.724389][ T9453] batadv1: left allmulticast mode [ 187.744922][ T9453] ip6tnl1: left promiscuous mode [ 187.768688][ T9453] ip6tnl1: left allmulticast mode [ 188.029242][ T9505] __nla_validate_parse: 5 callbacks suppressed [ 188.029262][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 188.478227][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 188.497621][ T9524] bpq0: left promiscuous mode [ 188.525392][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 188.578927][ T9532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.772453][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 188.802386][ T9540] tipc: Enabling of bearer rejected, failed to enable media [ 188.889524][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 188.969137][ T9553] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 188.976502][ T9546] lo speed is unknown, defaulting to 1000 [ 188.992213][ T9549] veth0_to_bridge: entered promiscuous mode [ 189.013036][ T9552] unknown channel width for channel at 909000KHz? [ 189.051583][ T9550] netlink: 174740 bytes leftover after parsing attributes in process `syz.3.1090'. [ 189.061967][ T9549] netlink: 174740 bytes leftover after parsing attributes in process `syz.3.1090'. [ 189.067955][ T9550] openvswitch: netlink: Message has 5 unknown bytes. [ 189.071564][ T9549] openvswitch: netlink: Message has 5 unknown bytes. [ 189.093977][ T9553] lo speed is unknown, defaulting to 1000 [ 189.142751][ T9547] veth0_to_bridge: left promiscuous mode [ 189.312086][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 189.334958][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1094'. [ 189.394162][ T9567] vlan2: entered allmulticast mode [ 189.399537][ T9567] macvlan1: entered allmulticast mode [ 189.681088][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 190.059503][ T9602] sctp: [Deprecated]: syz.2.1103 (pid 9602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.059503][ T9602] Use struct sctp_sack_info instead [ 190.079937][ T9603] tipc: Enabling of bearer rejected, failed to enable media [ 190.703358][ T9636] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 190.776916][ T9641] tipc: Enabling of bearer rejected, failed to enable media [ 191.182782][ T9669] lo speed is unknown, defaulting to 1000 [ 191.188946][ T9670] netlink: 'syz.4.1123': attribute type 3 has an invalid length. [ 191.501223][ T9676] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 191.624826][ T9679] veth0_to_bond: entered allmulticast mode [ 192.524426][ T30] audit: type=1800 audit(1748896939.849:5): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1131" name="cgroup.controllers" dev="tmpfs" ino=1245 res=0 errno=0 [ 192.806464][ T9734] veth0: entered promiscuous mode [ 193.083781][ T9734] veth0: left promiscuous mode [ 193.271216][ T9763] __nla_validate_parse: 13 callbacks suppressed [ 193.271236][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'. [ 193.351646][ T9763] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 193.409901][ T9773] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 193.418463][ T9773] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 193.644532][ T9787] netlink: 'syz.1.1160': attribute type 30 has an invalid length. [ 194.053622][ T9807] batadv_slave_0: entered promiscuous mode [ 194.158617][ T9812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1166'. [ 194.205790][ T9813] lo speed is unknown, defaulting to 1000 [ 194.242276][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542721][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 195.040428][ T9847] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.261206][ T9864] lo speed is unknown, defaulting to 1000 [ 195.916569][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 196.770843][ T9883] netlink: 'syz.0.1188': attribute type 7 has an invalid length. [ 196.808709][ T9883] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 196.816517][ T9883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1188'. [ 197.011614][ T9806] batadv_slave_0: left promiscuous mode [ 197.242118][ T9900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.251890][ T9900] bond0: (slave bond2): Enslaving as an active interface with an up link [ 197.421990][ T9910] syzkaller0: entered promiscuous mode [ 197.448957][ T9910] syzkaller0: entered allmulticast mode [ 197.499656][ T9910] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1198'. [ 197.720394][ T9910] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1198'. [ 197.758369][ T9910] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 197.978449][ T9947] netlink: 'syz.3.1205': attribute type 16 has an invalid length. [ 198.124555][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 198.164052][ T9950] tipc: Enabling of bearer rejected, failed to enable media [ 198.989366][T10010] netlink: 'syz.2.1226': attribute type 5 has an invalid length. [ 199.599086][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 199.714998][T10049] netlink: 'syz.4.1232': attribute type 15 has an invalid length. [ 199.715030][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'. [ 199.824283][T10052] lo speed is unknown, defaulting to 1000 [ 200.263417][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 200.276509][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 200.286197][T10066] netlink: 'syz.2.1243': attribute type 20 has an invalid length. [ 200.830674][T10082] netlink: 'syz.4.1249': attribute type 10 has an invalid length. [ 200.852658][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1249'. [ 200.893764][T10082] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.912265][T10082] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.921913][T10082] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.941260][T10082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.957240][T10082] team0: Port device geneve0 added [ 201.086767][T10095] tun0: tun_chr_ioctl cmd 35111 [ 201.490221][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1255'. [ 202.093113][T10130] vlan0: entered promiscuous mode [ 202.099211][T10130] vlan0: entered allmulticast mode [ 202.164215][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 202.261051][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1261'. [ 202.470326][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'. [ 202.511863][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1265'. [ 202.993417][T10165] netlink: 'syz.2.1270': attribute type 10 has an invalid length. [ 203.036650][T10165] netlink: 'syz.2.1270': attribute type 20 has an invalid length. [ 203.568468][T10181] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 205.465671][T10201] __nla_validate_parse: 2 callbacks suppressed [ 205.465686][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 205.497972][T10201] tipc: Enabling of bearer rejected, failed to enable media [ 205.757749][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.078395][T10227] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (66) [ 206.348032][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 206.446155][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 206.636947][T10248] netem: change failed [ 206.748417][T10258] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 206.898639][T10240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.619590][T10286] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 207.724694][T10291] bridge0: entered promiscuous mode [ 207.730883][T10291] macvlan2: entered promiscuous mode [ 207.737030][T10291] bridge0: port 1(macvlan2) entered blocking state [ 207.748028][T10291] bridge0: port 1(macvlan2) entered disabled state [ 207.754750][T10291] macvlan2: entered allmulticast mode [ 207.785694][T10295] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 207.839379][T10295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 207.846718][T10291] bridge0: entered allmulticast mode [ 207.879350][T10291] macvlan2: left allmulticast mode [ 207.884525][T10291] bridge0: left allmulticast mode [ 207.979448][T10291] bridge0: left promiscuous mode [ 208.034219][T10295] batadv0: entered promiscuous mode [ 208.042340][T10295] batadv0: entered allmulticast mode [ 208.058955][T10295] bridge0: port 1(batadv0) entered blocking state [ 208.096286][T10295] bridge0: port 1(batadv0) entered disabled state [ 208.141332][T10295] bridge0: port 1(batadv0) entered blocking state [ 208.148015][T10295] bridge0: port 1(batadv0) entered forwarding state [ 208.269175][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 208.278873][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 208.509994][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 208.550854][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 208.588861][T10315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1313'. [ 209.499358][T10340] bridge0: port 1(batadv0) entered disabled state [ 209.592526][T10340] bridge_slave_0: left promiscuous mode [ 210.409774][T10340] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.434198][T10340] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.461218][T10340] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.491092][T10340] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.534110][T10340] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 210.677312][T10340] wireguard0: left promiscuous mode [ 210.688971][T10340] wireguard0: left allmulticast mode [ 210.710634][T10340] ip6gre1: left allmulticast mode [ 210.736386][T10340] ip6tnl1: left promiscuous mode [ 210.741883][T10340] ip6tnl1: left allmulticast mode [ 210.752948][T10340] bond1: left promiscuous mode [ 210.758153][T10340] bond1: left allmulticast mode [ 210.763706][T10340] ip6tnl2: left promiscuous mode [ 210.770034][T10340] ip6tnl2: left allmulticast mode [ 210.785460][T10340] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.794860][T10340] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.804056][T10340] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.813313][T10340] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.997172][T10379] netlink: 884 bytes leftover after parsing attributes in process `syz.0.1325'. [ 211.135499][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 211.144640][T10383] openvswitch: netlink: nsh attr 4876 is out of range max 3 [ 211.157546][T10383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.344884][T10391] netlink: 'syz.4.1332': attribute type 27 has an invalid length. [ 211.396180][T10391] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.433920][T10391] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.464760][T10391] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.491899][T10391] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.554476][T10391] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.563548][T10391] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.572015][T10391] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.580744][T10391] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.680690][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.686777][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.690539][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 211.987673][T10407] netlink: 'syz.4.1337': attribute type 10 has an invalid length. [ 212.015971][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1337'. [ 212.246690][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 212.350589][T10419] batadv0: left allmulticast mode [ 212.397619][T10419] batadv0: left promiscuous mode [ 212.402892][T10419] bridge0: port 1(batadv0) entered disabled state [ 212.999688][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1351'. [ 213.160075][T10454] netlink: 'syz.1.1353': attribute type 39 has an invalid length. [ 213.243581][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 213.252889][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 213.414485][T10464] netlink: 'syz.2.1356': attribute type 8 has an invalid length. [ 213.440801][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 213.455206][T10467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1357'. [ 213.547754][T10470] wireguard0: entered promiscuous mode [ 213.553305][T10470] wireguard0: entered allmulticast mode [ 213.894939][T10479] lo speed is unknown, defaulting to 1000 [ 213.917878][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 213.983708][T10490] nbd: device at index 64 is going down [ 214.201981][T10499] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 214.253886][T10502] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 214.456775][T10508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 214.843033][T10528] lo speed is unknown, defaulting to 1000 [ 215.259862][T10552] tipc: Enabling of bearer rejected, failed to enable media [ 215.410705][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.567269][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.581328][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.591802][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.629217][T10563] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 215.727027][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.755051][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.774786][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.786025][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.796831][T10563] syzkaller0 speed is unknown, defaulting to 1000 [ 215.994094][T10578] netlink: 'syz.0.1386': attribute type 39 has an invalid length. [ 216.071322][T10583] __nla_validate_parse: 10 callbacks suppressed [ 216.071340][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 216.192796][T10583] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 216.369725][T10593] lo speed is unknown, defaulting to 1000 [ 216.377342][T10593] syzkaller0 speed is unknown, defaulting to 1000 [ 216.580709][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 216.593828][T10603] tipc: Enabling of bearer rejected, failed to enable media [ 216.616574][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 216.750400][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 216.770567][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'. [ 216.788468][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 216.808839][T10608] netlink: 'syz.0.1394': attribute type 7 has an invalid length. [ 216.840913][T10613] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1395'. [ 216.866194][T10610] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1395'. [ 216.876770][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1395'. [ 216.890015][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 216.899463][T10608] netlink: 'syz.0.1394': attribute type 7 has an invalid length. [ 217.004866][T10619] netlink: 'syz.4.1398': attribute type 10 has an invalid length. [ 217.096765][T10619] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 217.196549][T10627] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 217.280124][T10627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.400663][T10627] bond2: (slave gretap1): making interface the new active one [ 217.418975][T10627] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 217.515079][T10630] bridge0: port 2(syz_tun) entered blocking state [ 217.521893][T10630] bridge0: port 2(syz_tun) entered forwarding state [ 217.536213][T10630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.545321][T10630] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.570693][T10630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.618855][ T5885] lo speed is unknown, defaulting to 1000 [ 217.658945][ T5885] syz2: Port: 1 Link ACTIVE [ 217.753083][T10644] vlan0: entered promiscuous mode [ 218.125589][T10664] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 218.305834][T10674] tipc: Enabling of bearer rejected, failed to enable media [ 218.656259][T10694] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 218.685292][T10692] tipc: Enabled bearer , priority 0 [ 218.694281][T10694] netlink: 'syz.2.1421': attribute type 2 has an invalid length. [ 218.713763][T10692] syzkaller0: entered promiscuous mode [ 218.733979][T10697] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 218.743548][T10692] syzkaller0: entered allmulticast mode [ 218.760891][T10696] netlink: 'syz.1.1420': attribute type 4 has an invalid length. [ 218.786915][T10697] netlink: 'syz.2.1421': attribute type 2 has an invalid length. [ 218.798156][T10685] tipc: Resetting bearer [ 218.854180][T10683] tipc: Resetting bearer [ 218.888059][T10683] tipc: Disabling bearer [ 219.299814][T10723] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 219.514659][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.533060][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.553006][T10742] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 219.571333][T10732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.588664][T10736] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 219.610138][T10736] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 220.681748][T10777] team0 (unregistering): Port device C removed [ 220.691414][T10777] team0 (unregistering): Port device team_slave_1 removed [ 220.719423][T10777] team0 (unregistering): Port device geneve0 removed [ 220.742679][T10797] syz.0.1446: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.774543][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.0.1446 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 220.774587][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.774601][T10797] Call Trace: [ 220.774609][T10797] [ 220.774619][T10797] dump_stack_lvl+0x189/0x250 [ 220.774675][T10797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.774706][T10797] ? __pfx__printk+0x10/0x10 [ 220.774728][T10797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 220.774759][T10797] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 220.774793][T10797] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 220.774826][T10797] warn_alloc+0x214/0x310 [ 220.774845][T10797] ? stack_depot_save_flags+0x40/0x900 [ 220.774876][T10797] ? __pfx_warn_alloc+0x10/0x10 [ 220.774897][T10797] ? kasan_save_track+0x4f/0x80 [ 220.774922][T10797] ? xskq_create+0x56/0x170 [ 220.774942][T10797] ? xsk_init_queue+0xb0/0x110 [ 220.774961][T10797] ? xsk_setsockopt+0x43f/0x710 [ 220.774979][T10797] ? do_sock_setsockopt+0x25a/0x3e0 [ 220.775008][T10797] ? __x64_sys_setsockopt+0x18b/0x220 [ 220.775036][T10797] ? do_syscall_64+0xfa/0x3b0 [ 220.775059][T10797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.775094][T10797] __vmalloc_node_range_noprof+0x125/0x1340 [ 220.775154][T10797] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.775188][T10797] ? xskq_create+0x56/0x170 [ 220.775212][T10797] ? __kasan_kmalloc+0x93/0xb0 [ 220.775243][T10797] vmalloc_user_noprof+0xad/0xf0 [ 220.775261][T10797] ? xskq_create+0xbf/0x170 [ 220.775284][T10797] xskq_create+0xbf/0x170 [ 220.775310][T10797] xsk_init_queue+0xb0/0x110 [ 220.775334][T10797] xsk_setsockopt+0x43f/0x710 [ 220.775357][T10797] ? __pfx_xsk_setsockopt+0x10/0x10 [ 220.775376][T10797] ? __lock_acquire+0xab9/0xd20 [ 220.775411][T10797] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 220.775433][T10797] ? __pfx_xsk_setsockopt+0x10/0x10 [ 220.775455][T10797] do_sock_setsockopt+0x25a/0x3e0 [ 220.775489][T10797] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 220.775524][T10797] ? __fget_files+0x2a/0x420 [ 220.775561][T10797] __x64_sys_setsockopt+0x18b/0x220 [ 220.775599][T10797] do_syscall_64+0xfa/0x3b0 [ 220.775622][T10797] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.775645][T10797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.775664][T10797] ? clear_bhb_loop+0x60/0xb0 [ 220.775688][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.775707][T10797] RIP: 0033:0x7f4da038e969 [ 220.775732][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.775749][T10797] RSP: 002b:00007f4da112c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.775771][T10797] RAX: ffffffffffffffda RBX: 00007f4da05b5fa0 RCX: 00007f4da038e969 [ 220.775785][T10797] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 220.775798][T10797] RBP: 00007f4da0410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 220.775810][T10797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.775823][T10797] R13: 0000000000000000 R14: 00007f4da05b5fa0 R15: 00007ffeea7358e8 [ 220.775855][T10797] [ 221.096791][T10797] Mem-Info: [ 221.100299][T10797] active_anon:3899 inactive_anon:0 isolated_anon:0 [ 221.100299][T10797] active_file:1721 inactive_file:39879 isolated_file:0 [ 221.100299][T10797] unevictable:768 dirty:109 writeback:0 [ 221.100299][T10797] slab_reclaimable:10921 slab_unreclaimable:118659 [ 221.100299][T10797] mapped:31247 shmem:1368 pagetables:690 [ 221.100299][T10797] sec_pagetables:0 bounce:0 [ 221.100299][T10797] kernel_misc_reclaimable:0 [ 221.100299][T10797] free:1246139 free_pcp:1265 free_cma:0 [ 221.147617][T10797] Node 0 active_anon:15596kB inactive_anon:0kB active_file:6884kB inactive_file:159312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124988kB dirty:432kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11144kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.181265][T10797] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.213376][T10797] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.240805][T10797] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 221.246614][T10797] Node 0 DMA32 free:1059020kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:15548kB inactive_anon:0kB active_file:6884kB inactive_file:157472kB unevictable:1536kB writepending:432kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:21524kB local_pcp:964kB free_cma:0kB [ 221.277379][T10797] lowmem_reserve[]: 0 0 1 1 1 [ 221.282518][T10797] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 221.310049][T10797] lowmem_reserve[]: 0 0 0 0 0 [ 221.314813][T10797] Node 1 Normal free:3923260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.344049][T10797] lowmem_reserve[]: 0 0 0 0 0 [ 221.348874][T10797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 221.361709][T10797] Node 0 DMA32: 1837*4kB (UM) 1319*8kB (UME) 940*16kB (UME) 1357*32kB (UME) 756*64kB (UME) 576*128kB (UME) 432*256kB (UME) 282*512kB (UME) 102*1024kB (UME) 8*2048kB (UME) 123*4096kB (M) = 1078092kB [ 221.381702][T10797] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 221.393707][T10797] Node 1 Normal: 201*4kB (UME) 37*8kB (UME) 35*16kB (UME) 208*32kB (UME) 107*64kB (UME) 38*128kB (UME) 17*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 949*4096kB (M) = 3923260kB [ 221.397815][ T5831] Bluetooth: hci0: command tx timeout [ 221.419765][T10797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.446664][T10797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.464028][T10797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.474804][T10797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.489167][T10797] 42965 total pagecache pages [ 221.494017][T10797] 0 pages in swap cache [ 221.501738][T10797] Free swap = 124996kB [ 221.506096][T10797] Total swap = 124996kB [ 221.512189][T10797] 2097051 pages RAM [ 221.516179][T10797] 0 pages HighMem/MovableOnly [ 221.525997][T10797] 424631 pages reserved [ 221.532762][T10797] 0 pages cma reserved [ 221.604819][T10786] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 53300 - 0 [ 221.621555][T10786] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 53300 - 0 [ 221.630600][T10786] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 53300 - 0 [ 221.640400][T10786] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 53300 - 0 [ 221.649965][T10786] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 32925 - 0 [ 221.666924][T10786] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 32925 - 0 [ 221.686099][T10786] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 32925 - 0 [ 221.695201][T10786] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 32925 - 0 [ 221.708701][T10786] geneve2: entered promiscuous mode [ 221.717123][T10805] __nla_validate_parse: 14 callbacks suppressed [ 221.717140][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1448'. [ 221.793233][T10786] geneve2: entered allmulticast mode [ 222.258465][T10822] vxcan1: entered allmulticast mode [ 222.331150][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 222.372884][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 222.404796][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 222.611410][T10827] xt_CT: No such helper "snmp" [ 222.650523][T10827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1455'. [ 222.924449][T10843] IPv6: sit1: Disabled Multicast RS [ 222.964107][T10845] lo speed is unknown, defaulting to 1000 [ 222.970182][T10843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1458'. [ 222.989547][T10845] syzkaller0 speed is unknown, defaulting to 1000 [ 223.588938][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 223.637658][T10866] tipc: Enabling of bearer rejected, failed to enable media [ 224.231126][T10890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.287331][T10890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.353922][T10907] netlink: 'syz.1.1476': attribute type 33 has an invalid length. [ 224.366915][T10894] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.392388][T10907] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1476'. [ 224.405516][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 224.775730][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1478'. [ 224.785539][T10917] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 224.796149][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 224.908614][T10922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.942492][T10922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.032684][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1484'. [ 225.092670][T10933] netlink: 'syz.1.1483': attribute type 12 has an invalid length. [ 225.147719][T10933] netlink: 'syz.1.1483': attribute type 11 has an invalid length. [ 225.324462][T10951] netlink: 'syz.0.1486': attribute type 8 has an invalid length. [ 225.374736][T10953] netlink: 'syz.4.1487': attribute type 5 has an invalid length. [ 225.823471][T10969] tipc: Enabling of bearer rejected, failed to enable media [ 226.206217][T10990] vcan1: entered allmulticast mode [ 226.310147][T10994] lo speed is unknown, defaulting to 1000 [ 226.324830][T10994] syzkaller0 speed is unknown, defaulting to 1000 [ 226.408632][T11002] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 226.464726][T11009] netlink: 'syz.0.1504': attribute type 12 has an invalid length. [ 226.486744][T11009] netlink: 'syz.0.1504': attribute type 10 has an invalid length. [ 226.495248][T11009] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 226.651788][T11009] netlink: 'syz.0.1504': attribute type 12 has an invalid length. [ 226.739749][T11024] __nla_validate_parse: 13 callbacks suppressed [ 226.739769][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 226.765484][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 227.110667][T11044] netlink: 'syz.2.1512': attribute type 3 has an invalid length. [ 227.299911][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 227.443069][T11058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.484081][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.514603][T11057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.583574][T11060] syzkaller1: entered promiscuous mode [ 227.589432][T11060] syzkaller1: entered allmulticast mode [ 227.612492][T11060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1518'. [ 227.631815][T11060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1518'. [ 227.811534][T11063] syzkaller1: entered promiscuous mode [ 227.817070][T11063] syzkaller1: entered allmulticast mode [ 227.975114][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 228.062910][T11074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.176933][T11088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1527'. [ 228.215705][T11082] syzkaller0: entered promiscuous mode [ 228.236077][T11082] syzkaller0: entered allmulticast mode [ 229.947199][T11101] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 230.111126][T11124] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.275977][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1537'. [ 230.620934][T11145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.655189][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1541'. [ 231.073194][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 231.346493][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1549'. [ 231.653486][T11192] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 232.189021][T11223] __nla_validate_parse: 1 callbacks suppressed [ 232.189042][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'. [ 232.271674][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 232.348891][T11223] bond4: entered promiscuous mode [ 232.357301][T11223] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 232.373412][T11223] bond4: left promiscuous mode [ 232.395783][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 232.568131][T11245] validate_nla: 3 callbacks suppressed [ 232.568151][T11245] netlink: 'syz.2.1567': attribute type 4 has an invalid length. [ 232.617449][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 232.831351][T11251] sctp: [Deprecated]: syz.4.1568 (pid 11251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.831351][T11251] Use struct sctp_sack_info instead [ 232.881110][T11257] lo speed is unknown, defaulting to 1000 [ 232.928019][T11257] syzkaller0 speed is unknown, defaulting to 1000 [ 233.206757][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 233.334181][T11276] netlink: 'syz.1.1575': attribute type 4 has an invalid length. [ 233.543665][T11284] Bluetooth: MGMT ver 1.23 [ 233.806795][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 234.216024][T11304] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1584'. [ 234.791175][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 234.900258][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 234.913264][T11339] tipc: Enabling of bearer rejected, failed to enable media [ 234.936184][T11334] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 235.044308][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 235.423628][T11356] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 236.020865][T11355] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 236.339808][T11375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.367174][T11377] tipc: Enabling of bearer rejected, failed to enable media [ 236.495078][T11381] bridge1: entered promiscuous mode [ 236.517897][T11381] bridge1: entered allmulticast mode [ 236.535765][T11381] team0: Port device bridge1 added [ 236.743160][T11395] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 236.755089][T11395] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 236.763798][ T5887] syzkaller0 speed is unknown, defaulting to 1000 [ 236.930061][T11401] lo speed is unknown, defaulting to 1000 [ 236.988029][T11401] syzkaller0 speed is unknown, defaulting to 1000 [ 237.261797][T11416] __nla_validate_parse: 3 callbacks suppressed [ 237.261819][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 237.307354][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 237.448689][T11420] lo speed is unknown, defaulting to 1000 [ 237.456290][T11420] syzkaller0 speed is unknown, defaulting to 1000 [ 237.918341][T11426] lo speed is unknown, defaulting to 1000 [ 237.932141][T11426] syzkaller0 speed is unknown, defaulting to 1000 [ 238.126939][T11443] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1628'. [ 238.404742][T11454] tap0: tun_chr_ioctl cmd 1074025677 [ 238.429406][T11454] tap0: linktype set to 0 [ 238.603759][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 238.646167][T11464] tipc: Enabling of bearer rejected, failed to enable media [ 238.843061][T11478] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1637'. [ 238.953627][T11484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1643'. [ 239.020194][T11488] sctp: [Deprecated]: syz.0.1640 (pid 11488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.020194][T11488] Use struct sctp_sack_info instead [ 239.062816][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 239.401052][T11492] openvswitch: netlink: Unknown key attributes 2 [ 239.881307][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 239.892765][T11508] tipc: Enabling of bearer rejected, failed to enable media [ 239.985993][T11518] Bluetooth: MGMT ver 1.23 [ 240.014124][T11518] geneve3: entered promiscuous mode [ 240.272369][T11531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1657'. [ 240.332271][T11537] netlink: 'syz.2.1660': attribute type 7 has an invalid length. [ 240.342524][T11534] netlink: 'syz.4.1659': attribute type 4 has an invalid length. [ 240.365925][ T24] lo speed is unknown, defaulting to 1000 [ 240.372078][T11531] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 240.387735][ T24] syz2: Port: 1 Link DOWN [ 240.494093][T11537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.533617][T11537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.569411][T11545] €Â: renamed from vcan0 (while UP) [ 240.577606][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 240.587045][T11547] tipc: Enabling of bearer rejected, failed to enable media [ 240.597240][T11545] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1663'. [ 240.656186][T11537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.673156][T11537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.781790][T11537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.808588][T11537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.939680][T11537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.951430][T11537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.150619][T11537] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.179146][T11537] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.256919][T11537] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.313609][T11583] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 241.319302][T11537] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.394121][T11537] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.431471][T11537] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.584198][T11537] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.604389][T11537] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.619635][T11587] tipc: Enabling of bearer rejected, failed to enable media [ 241.864042][T11602] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 242.107663][T11624] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 242.191903][T11629] tipc: Enabling of bearer rejected, failed to enable media [ 242.306803][T11639] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 242.337975][T11637] xt_hashlimit: size too large, truncated to 1048576 [ 242.834391][T11656] __nla_validate_parse: 6 callbacks suppressed [ 242.834410][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 242.853411][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 243.732231][T11664] lo: left promiscuous mode [ 243.736811][T11664] lo: left allmulticast mode [ 243.771929][T11664] tunl0: left promiscuous mode [ 243.776725][T11664] tunl0: left allmulticast mode [ 243.820186][T11664] gre0: left promiscuous mode [ 243.825027][T11664] gre0: left allmulticast mode [ 243.863642][T11664] gretap0: left promiscuous mode [ 243.877491][T11664] gretap0: left allmulticast mode [ 243.972087][T11664] erspan0: left promiscuous mode [ 243.979089][T11664] erspan0: left allmulticast mode [ 243.991281][T11664] ip_vti0: left promiscuous mode [ 243.996300][T11664] ip_vti0: left allmulticast mode [ 244.015739][T11664] ip6_vti0: left promiscuous mode [ 244.021111][T11664] ip6_vti0: left allmulticast mode [ 244.037495][T11664] sit0: left promiscuous mode [ 244.042340][T11664] sit0: left allmulticast mode [ 244.060594][T11664] ip6tnl0: left promiscuous mode [ 244.065677][T11664] ip6tnl0: left allmulticast mode [ 244.074461][T11664] ip6gre0: left promiscuous mode [ 244.093166][T11664] ip6gre0: left allmulticast mode [ 244.109971][T11664] syz_tun: left promiscuous mode [ 244.121241][T11664] syz_tun: left allmulticast mode [ 244.132979][T11664] ip6gretap0: left promiscuous mode [ 244.138814][T11664] ip6gretap0: left allmulticast mode [ 244.157268][T11664] vcan0: left promiscuous mode [ 244.163894][T11664] vcan0: left allmulticast mode [ 244.198095][T11664] nlmon0: left promiscuous mode [ 244.205994][T11664] nlmon0: left allmulticast mode [ 244.214610][T11664] caif0: left promiscuous mode [ 244.222753][T11664] caif0: left allmulticast mode [ 244.316120][T11664] veth1: left allmulticast mode [ 244.424488][T11664] veth0_to_bond: left allmulticast mode [ 244.560829][T11664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.609574][T11664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.018565][T11664] gretap1: left allmulticast mode [ 245.032211][T11664] ip6gre1: left allmulticast mode [ 245.043826][T11664] bridge0: left promiscuous mode [ 245.049271][T11664] vlan2: left promiscuous mode [ 245.054081][T11664] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 245.077731][T11664] vlan2: left allmulticast mode [ 245.082614][T11664] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 245.098162][T11664] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 245.124194][T11664] vlan0: left promiscuous mode [ 245.137613][T11664] bond0: left promiscuous mode [ 245.142415][T11664] bond_slave_0: left promiscuous mode [ 245.151487][T11664] bond_slave_1: left promiscuous mode [ 245.157000][T11664] team0: left promiscuous mode [ 245.162630][T11664] team_slave_0: left promiscuous mode [ 245.168777][T11664] team_slave_1: left promiscuous mode [ 245.174509][T11664] vlan0: left allmulticast mode [ 245.179790][T11664] bond0: left allmulticast mode [ 245.184656][T11664] bond_slave_0: left allmulticast mode [ 245.190250][T11664] bond_slave_1: left allmulticast mode [ 245.195739][T11664] team0: left allmulticast mode [ 245.200891][T11664] team_slave_0: left allmulticast mode [ 245.206372][T11664] team_slave_1: left allmulticast mode [ 245.228227][T11664] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 32925 - 0 [ 245.236685][T11664] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 32925 - 0 [ 245.245788][T11664] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 32925 - 0 [ 245.254394][T11664] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 32925 - 0 [ 245.263273][T11664] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 53300 - 0 [ 245.272669][T11664] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 53300 - 0 [ 245.281229][T11664] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 53300 - 0 [ 245.290163][T11664] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 53300 - 0 [ 245.299060][T11664] geneve2: left promiscuous mode [ 245.304020][T11664] geneve2: left allmulticast mode [ 245.314487][T11664] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.323249][T11664] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.332286][T11664] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.341034][T11664] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.350060][T11664] geneve3: left promiscuous mode [ 245.397965][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 245.407011][T11698] tipc: Enabling of bearer rejected, failed to enable media [ 245.564531][T11705] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1711'. [ 245.750142][T11719] netlink: 'syz.4.1714': attribute type 39 has an invalid length. [ 245.781794][T11719] bridge0: port 2(syz_tun) entered disabled state [ 245.828679][T11719] syz_tun (unregistering): left allmulticast mode [ 245.835372][T11719] syz_tun (unregistering): left promiscuous mode [ 245.852524][T11719] bridge0: port 2(syz_tun) entered disabled state [ 245.873490][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 245.892233][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 245.933933][T11720] netlink: 'syz.1.1716': attribute type 3 has an invalid length. [ 245.954226][T11722] netlink: 'syz.1.1716': attribute type 3 has an invalid length. [ 246.200169][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1720'. [ 246.504310][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 246.521492][T11742] tipc: Enabling of bearer rejected, failed to enable media [ 246.573913][T11744] Bluetooth: MGMT ver 1.23 [ 246.635587][T11748] siw: device registration error -23 [ 246.673094][T11755] !: renamed from dummy0 (while UP) [ 246.850060][T11759] lo speed is unknown, defaulting to 1000 [ 246.871377][T11759] syzkaller0 speed is unknown, defaulting to 1000 [ 246.972961][T11768] bond0: entered promiscuous mode [ 247.043234][T11768] bond_slave_0: entered promiscuous mode [ 247.063495][T11768] bond_slave_1: entered promiscuous mode [ 247.088026][T11768] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 247.125674][T11768] team0: entered promiscuous mode [ 247.145817][T11768] team_slave_0: entered promiscuous mode [ 247.167904][T11768] team_slave_1: entered promiscuous mode [ 247.174117][T11768] bond2: entered promiscuous mode [ 247.203590][T11768] macsec0: entered promiscuous mode [ 247.240082][T11768] hsr1: entered promiscuous mode [ 247.314144][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 247.552998][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 247.648763][T11793] gtp0: entered promiscuous mode [ 247.816686][T11797] tipc: Enabling of bearer rejected, failed to enable media [ 247.983678][T11767] lo speed is unknown, defaulting to 1000 [ 248.052825][T11767] syzkaller0 speed is unknown, defaulting to 1000 [ 248.052841][T11786] lo speed is unknown, defaulting to 1000 [ 248.086797][T11810] __nla_validate_parse: 1 callbacks suppressed [ 248.086814][T11810] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1739'. [ 248.113177][T11811] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1739'. [ 248.137897][T11786] syzkaller0 speed is unknown, defaulting to 1000 [ 248.339567][T11820] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1744'. [ 248.385099][T11825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1745'. [ 248.685008][T11840] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 249.019997][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 249.032737][T11843] tipc: Enabling of bearer rejected, failed to enable media [ 249.303183][T11852] IPVS: Error connecting to the multicast addr [ 249.666792][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 249.892127][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 249.905087][T11889] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 249.925975][T11887] tipc: Enabling of bearer rejected, failed to enable media [ 249.945197][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 249.962781][T11891] sctp: [Deprecated]: syz.3.1764 (pid 11891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.962781][T11891] Use struct sctp_sack_info instead [ 250.020384][T11892] vlan2: entered promiscuous mode [ 250.040083][T11892] bridge0: entered promiscuous mode [ 250.051752][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 250.060193][T11892] vlan2: entered allmulticast mode [ 250.088206][T11889] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.099469][T11892] bridge0: entered allmulticast mode [ 250.115277][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.138073][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.227763][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 251.076677][ T1342] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 251.287049][T11935] tipc: Enabling of bearer rejected, failed to enable media [ 251.575310][T11948] lo speed is unknown, defaulting to 1000 [ 251.628939][T11948] syzkaller0 speed is unknown, defaulting to 1000 [ 251.791518][T11956] nbd: must specify an index to disconnect [ 252.565648][T11982] vlan0: left promiscuous mode [ 252.580620][T11982] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 252.608612][T11982] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 252.624408][T11998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.654914][T11982] bridge1: left promiscuous mode [ 252.670179][T11982] bridge1: left allmulticast mode [ 252.817305][T11995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.846195][T11995] bond5: entered promiscuous mode [ 252.868315][T11995] bond0: (slave bond5): Enslaving as an active interface with an up link [ 252.926420][T12018] block nbd1: not configured, cannot reconfigure [ 253.243520][T12026] lo speed is unknown, defaulting to 1000 [ 253.256818][T12033] __nla_validate_parse: 6 callbacks suppressed [ 253.256836][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 253.275120][T12026] syzkaller0 speed is unknown, defaulting to 1000 [ 253.283668][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1805'. [ 253.298755][T12033] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 253.320479][T12033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.373970][T12037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1806'. [ 253.397660][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 253.593807][T12046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1809'. [ 253.640105][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 253.700190][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 253.705879][T12052] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1811'. [ 253.721965][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 253.768069][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 254.254680][T12076] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 254.359001][T12083] x_tables: duplicate underflow at hook 2 [ 254.470422][T12078] lo speed is unknown, defaulting to 1000 [ 254.476970][T12083] netlink: 'syz.3.1815': attribute type 29 has an invalid length. [ 254.510933][T12090] netlink: 'syz.3.1815': attribute type 29 has an invalid length. [ 254.535890][T12076] lo speed is unknown, defaulting to 1000 [ 254.546989][T12078] syzkaller0 speed is unknown, defaulting to 1000 [ 254.556640][T12076] syzkaller0 speed is unknown, defaulting to 1000 [ 254.594365][T12083] netlink: 'syz.3.1815': attribute type 10 has an invalid length. [ 254.670077][T12083] veth1_macvtap: left promiscuous mode [ 254.725317][T12083] team0: Device veth1_macvtap failed to register rx_handler [ 255.117664][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 255.682280][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723351][T12131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.028640][T12147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.333470][T12190] lo speed is unknown, defaulting to 1000 [ 257.379462][T12190] syzkaller0 speed is unknown, defaulting to 1000 [ 258.411357][T12193] __nla_validate_parse: 5 callbacks suppressed [ 258.411378][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1848'. [ 258.786437][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1861'. [ 258.952562][T12236] netlink: 'syz.2.1862': attribute type 22 has an invalid length. [ 259.020459][T12236] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1862'. [ 259.362194][T12252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1867'. [ 259.411984][T12246] lo speed is unknown, defaulting to 1000 [ 259.489455][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 259.524928][T12257] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1869'. [ 259.928708][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.951383][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.961694][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.973974][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.982916][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.024495][T12269] lo speed is unknown, defaulting to 1000 [ 260.149276][T12285] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20003 [ 260.161162][T12269] syzkaller0 speed is unknown, defaulting to 1000 [ 260.167816][T12285] C: renamed from team_slave_0 [ 260.212678][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1877'. [ 260.296355][T12285] netlink: 'syz.1.1876': attribute type 4 has an invalid length. [ 260.312570][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1876'. [ 260.350699][T12285] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.438551][ T30] audit: type=1800 audit(1748897007.769:6): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1878" name=25705320202020 dev="tmpfs" ino=1899 res=0 errno=0 [ 260.485718][ T30] audit: type=1804 audit(1748897007.769:7): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1878" name=2F6E6577726F6F742F3336372F25705320202020 dev="tmpfs" ino=1899 res=1 errno=0 [ 260.692602][T12307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1881'. [ 260.963503][ T1167] team0: Port device bridge1 removed [ 261.051672][ T1167] bond0 (unregistering): Released all slaves [ 261.145414][ T1167] bond1 (unregistering): Released all slaves [ 261.160948][ T1167] bond2 (unregistering): Released all slaves [ 261.175027][ T1167] bond3 (unregistering): Released all slaves [ 261.202996][T12302] bridge0: entered allmulticast mode [ 261.232336][T12307] bridge0 (unregistering): left allmulticast mode [ 261.386423][ T1167] tipc: Disabling bearer [ 261.394346][ T1167] tipc: Left network mode [ 261.439909][ T1167] IPVS: stopping backup sync thread 10917 ... [ 261.489349][T12308] lo speed is unknown, defaulting to 1000 [ 261.502407][T12308] syzkaller0 speed is unknown, defaulting to 1000 [ 261.507372][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1885'. [ 261.600714][T12328] x_tables: duplicate underflow at hook 2 [ 261.942882][T12338] pimreg: entered allmulticast mode [ 262.077886][ T5833] Bluetooth: hci0: command tx timeout [ 262.332105][T12354] netlink: 'syz.2.1893': attribute type 27 has an invalid length. [ 262.351718][T12269] chnl_net:caif_netlink_parms(): no params data found [ 262.392631][T12350] syzkaller0: create flow: hash 3133019653 index 0 [ 262.444815][T12361] netlink: 'syz.2.1895': attribute type 6 has an invalid length. [ 262.453732][T12361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 263.360931][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 264.170710][ T5833] Bluetooth: hci0: command tx timeout [ 264.477642][T12349] syzkaller0 (unregistered): delete flow: hash 3133019653 index 0 [ 264.656326][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.680264][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.696089][T12269] bridge_slave_0: entered allmulticast mode [ 264.710181][T12269] bridge_slave_0: entered promiscuous mode [ 264.711642][T12385] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 264.735587][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.745050][T12385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'. [ 264.754220][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.754396][T12269] bridge_slave_1: entered allmulticast mode [ 264.756282][T12269] bridge_slave_1: entered promiscuous mode [ 264.789355][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1902'. [ 264.795349][T12381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1899'. [ 264.827865][ T49] ------------[ cut here ]------------ [ 264.833533][ T49] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 264.846897][T12385] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 264.891634][ T49] WARNING: CPU: 1 PID: 49 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 264.902433][ T49] Modules linked in: [ 264.906594][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 264.918481][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.928913][ T49] Workqueue: bond0 bond_mii_monitor [ 264.934194][ T49] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 264.940269][ T49] Code: 7c fe ff ff e8 1e e5 6b f8 c6 05 a7 9c 36 06 01 90 48 c7 c7 00 95 91 8c 48 c7 c6 91 37 9b 8d ba 48 00 00 00 e8 5e d1 2f f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 264.960438][ T49] RSP: 0018:ffffc90000ba7670 EFLAGS: 00010246 [ 264.966550][ T49] RAX: 0de827bfd74e3700 RBX: ffff88803329c000 RCX: ffff8880222e5a00 [ 264.974598][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 264.982761][ T49] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 264.991114][ T49] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: 1ffff1100665385d [ 264.999203][ T49] R13: dffffc0000000000 R14: ffffffff8c1b3ac8 R15: 0000000000000000 [ 265.007226][ T49] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 265.016334][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.023289][ T49] CR2: 0000200000007540 CR3: 00000000600f0000 CR4: 00000000003526f0 [ 265.031341][ T49] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.039438][ T49] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.047870][ T49] Call Trace: [ 265.051193][ T49] [ 265.054156][ T49] ? ethtool_op_get_link+0xd/0x70 [ 265.059270][ T49] ethtool_op_get_link+0x15/0x70 [ 265.064244][ T49] bond_check_dev_link+0x444/0x6c0 [ 265.069457][ T49] ? __pfx_bond_check_dev_link+0x10/0x10 [ 265.075127][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 265.081862][ T49] bond_mii_monitor+0x428/0x2e00 [ 265.086826][ T49] ? bond_mii_monitor+0x153/0x2e00 [ 265.091995][ T49] ? psi_task_change+0xe5/0x250 [ 265.096898][ T49] ? __pfx_bond_mii_monitor+0x10/0x10 [ 265.102375][ T49] ? register_lock_class+0x51/0x320 [ 265.107978][ T49] ? __lock_acquire+0xab9/0xd20 [ 265.112887][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 265.118801][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.124023][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 265.129766][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 265.135501][ T49] process_scheduled_works+0xae1/0x17b0 [ 265.141467][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 265.147546][ T49] worker_thread+0x8a0/0xda0 [ 265.152177][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 265.158572][ T49] ? __kthread_parkme+0x7b/0x200 [ 265.163636][ T49] kthread+0x70e/0x8a0 [ 265.168067][ T49] ? __pfx_worker_thread+0x10/0x10 [ 265.170286][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1905'. [ 265.173218][ T49] ? __pfx_kthread+0x10/0x10 [ 265.185728][T12400] netlink: 'syz.1.1905': attribute type 2 has an invalid length. [ 265.186787][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.186815][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.195486][T12400] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 265.199975][ T49] ? __pfx_kthread+0x10/0x10 [ 265.200005][ T49] ret_from_fork+0x3fc/0x770 [ 265.200038][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 265.200073][ T49] ? __switch_to_asm+0x39/0x70 [ 265.200095][ T49] ? __switch_to_asm+0x33/0x70 [ 265.200115][ T49] ? __pfx_kthread+0x10/0x10 [ 265.200139][ T49] ret_from_fork_asm+0x1a/0x30 [ 265.200178][ T49] [ 265.200202][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 265.200217][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 265.200241][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.200255][ T49] Workqueue: bond0 bond_mii_monitor [ 265.200284][ T49] Call Trace: [ 265.200293][ T49] [ 265.200302][ T49] dump_stack_lvl+0x99/0x250 [ 265.200333][ T49] ? __asan_memcpy+0x40/0x70 [ 265.200357][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.200393][ T49] ? __pfx__printk+0x10/0x10 [ 265.200432][ T49] panic+0x2db/0x790 [ 265.200476][ T49] ? __pfx_panic+0x10/0x10 [ 265.200525][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 265.200556][ T49] __warn+0x31b/0x4b0 [ 265.200588][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 265.200616][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 265.200640][ T49] report_bug+0x2be/0x4f0 [ 265.200665][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 265.200690][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 265.200715][ T49] ? __linkwatch_sync_dev+0x305/0x350 [ 265.200738][ T49] handle_bug+0x84/0x160 [ 265.200771][ T49] exc_invalid_op+0x1a/0x50 [ 265.200802][ T49] asm_exc_invalid_op+0x1a/0x20 [ 265.200824][ T49] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 265.200849][ T49] Code: 7c fe ff ff e8 1e e5 6b f8 c6 05 a7 9c 36 06 01 90 48 c7 c7 00 95 91 8c 48 c7 c6 91 37 9b 8d ba 48 00 00 00 e8 5e d1 2f f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 265.200870][ T49] RSP: 0018:ffffc90000ba7670 EFLAGS: 00010246 [ 265.200890][ T49] RAX: 0de827bfd74e3700 RBX: ffff88803329c000 RCX: ffff8880222e5a00 [ 265.200908][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 265.200922][ T49] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 265.200937][ T49] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: 1ffff1100665385d [ 265.200954][ T49] R13: dffffc0000000000 R14: ffffffff8c1b3ac8 R15: 0000000000000000 [ 265.200991][ T49] ? ethtool_op_get_link+0xd/0x70 [ 265.201018][ T49] ethtool_op_get_link+0x15/0x70 [ 265.201042][ T49] bond_check_dev_link+0x444/0x6c0 [ 265.201080][ T49] ? __pfx_bond_check_dev_link+0x10/0x10 [ 265.201155][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 265.201198][ T49] bond_mii_monitor+0x428/0x2e00 [ 265.201241][ T49] ? bond_mii_monitor+0x153/0x2e00 [ 265.201273][ T49] ? psi_task_change+0xe5/0x250 [ 265.201322][ T49] ? __pfx_bond_mii_monitor+0x10/0x10 [ 265.201375][ T49] ? register_lock_class+0x51/0x320 [ 265.201419][ T49] ? __lock_acquire+0xab9/0xd20 [ 265.201471][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 265.201516][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.201543][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 265.201577][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 265.201616][ T49] process_scheduled_works+0xae1/0x17b0 [ 265.201690][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 265.201750][ T49] worker_thread+0x8a0/0xda0 [ 265.201791][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 265.201830][ T49] ? __kthread_parkme+0x7b/0x200 [ 265.201884][ T49] kthread+0x70e/0x8a0 [ 265.201916][ T49] ? __pfx_worker_thread+0x10/0x10 [ 265.201954][ T49] ? __pfx_kthread+0x10/0x10 [ 265.201984][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.202011][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.202039][ T49] ? __pfx_kthread+0x10/0x10 [ 265.202067][ T49] ret_from_fork+0x3fc/0x770 [ 265.202106][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 265.202148][ T49] ? __switch_to_asm+0x39/0x70 [ 265.202173][ T49] ? __switch_to_asm+0x33/0x70 [ 265.202196][ T49] ? __pfx_kthread+0x10/0x10 [ 265.202224][ T49] ret_from_fork_asm+0x1a/0x30 [ 265.202283][ T49] [ 265.205871][ T49] Kernel Offset: disabled