last executing test programs: 52.964310302s ago: executing program 1 (id=90): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252500000005002a001700000005002b000300000008000200", @ANYRES32=r8, @ANYBLOB="35f902bc30c5c2796c6cddbc8357b87957ded7ae29abe18b0f3f21c4b5588dbf1c6f8b56bbeada7905388a7e6261e65801b0d3ddf67fee683e1cb1239b25683f333336dce4aca33e3537eaeb1448e3b22cc6651b8df204fc5dff798f6e53f023603bd403c9be8b2351068e87da968335939eb3acaa3a76dda17fb8a545ddb567fe8c674feafac1632c24078e58cd011983c8cef0102881e0a538a757e8615f26cab61551398950e1bf69e42051045e8f194ff801932b3a32de182c0b746711ed312b"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 52.296501563s ago: executing program 1 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x1000, 0x10000000, 0x7, 0x65fb}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000800, &(0x7f0000000200)={0x11, 0x3, r4, 0x1, 0x4b}, 0x14) 51.764154131s ago: executing program 1 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1c}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000001006e657464657673657464737673696d30000008007300"/45], 0x3c}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r3, 0x0, 0x0, 0x12140, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x9c, 0x3, 0x0, 0x11, @remote, @empty, 0x700, 0x1, 0x101, 0xf}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x3fc0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x1, 0xed3d, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendto$inet6(r11, &(0x7f00000000c0)="8000372409e8e1ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10000003}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000100)={0x20000014}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000336010026bd7000fbdbdf251c20202f0004000900bf8a65c01961012d00009919be08f0b3d49efddc422fab6dd87466ba92f5edbf83a33de053bbdbc1206c4efbf87f4817b9d9007e4329e510f1e5981956edaeb6196d7822b43ef954d6cd22fe04df2cc4109f4f8fc3209bf3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x92) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r5) r14 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r14, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r14, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r14, 0xe) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r13, @ANYBLOB="000427bd7000fddbdf250500000048000180060004004e21000007000600646800000800090065000000060004004e21000008000b0073697000140003000000000000000000000000000000000108000900300000000800060008000000080006000700000008000400ffff000008000400060000000c00038008000300040000000c00038006000400ff0f00001400028008000600000000000800090001000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc005}, 0x4004804) socket(0x10, 0x803, 0x0) 33.119210326s ago: executing program 1 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1c}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000001006e657464657673657464737673696d30000008007300"/45], 0x3c}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r3, 0x0, 0x0, 0x12140, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x9c, 0x3, 0x0, 0x11, @remote, @empty, 0x700, 0x1, 0x101, 0xf}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x3fc0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x1, 0xed3d, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendto$inet6(r11, &(0x7f00000000c0)="8000372409e8e1ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10000003}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000100)={0x20000014}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000336010026bd7000fbdbdf251c20202f0004000900bf8a65c01961012d00009919be08f0b3d49efddc422fab6dd87466ba92f5edbf83a33de053bbdbc1206c4efbf87f4817b9d9007e4329e510f1e5981956edaeb6196d7822b43ef954d6cd22fe04df2cc4109f4f8fc3209bf3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x92) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r5) r14 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r14, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r14, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r14, 0xe) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r13, @ANYBLOB="000427bd7000fddbdf250500000048000180060004004e21000007000600646800000800090065000000060004004e21000008000b0073697000140003000000000000000000000000000000000108000900300000000800060008000000080006000700000008000400ffff000008000400060000000c00038008000300040000000c00038006000400ff0f00001400028008000600000000000800090001000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc005}, 0x4004804) socket(0x10, 0x803, 0x0) 15.085200419s ago: executing program 1 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1c}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000001006e657464657673657464737673696d30000008007300"/45], 0x3c}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r3, 0x0, 0x0, 0x12140, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x9c, 0x3, 0x0, 0x11, @remote, @empty, 0x700, 0x1, 0x101, 0xf}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x3fc0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x1, 0xed3d, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendto$inet6(r11, &(0x7f00000000c0)="8000372409e8e1ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10000003}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000100)={0x20000014}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000336010026bd7000fbdbdf251c20202f0004000900bf8a65c01961012d00009919be08f0b3d49efddc422fab6dd87466ba92f5edbf83a33de053bbdbc1206c4efbf87f4817b9d9007e4329e510f1e5981956edaeb6196d7822b43ef954d6cd22fe04df2cc4109f4f8fc3209bf3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x92) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r5) r14 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r14, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r14, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r14, 0xe) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r13, @ANYBLOB="000427bd7000fddbdf250500000048000180060004004e21000007000600646800000800090065000000060004004e21000008000b0073697000140003000000000000000000000000000000000108000900300000000800060008000000080006000700000008000400ffff000008000400060000000c00038008000300040000000c00038006000400ff0f00001400028008000600000000000800090001000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc005}, 0x4004804) socket(0x10, 0x803, 0x0) 3.612688485s ago: executing program 3 (id=371): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x143082, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x10, 0x803, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400a59410000000000000000a000000", @ANYRES32=r10, @ANYBLOB="14000200ff0200000000000000000000000000010800080022060000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000a0000000a700000000000000180000000000000000000000000000009500000000000000950000002ff38ce100"/72], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r12, 0x11b, 0x3, &(0x7f0000000000), 0x4) 3.368672325s ago: executing program 3 (id=372): socket(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000780)={@val={0x0, 0x8}, @void, @eth={@empty, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x3e, 0x24, 0x67, 0x0, 0x1, 0x21, 0x0, @remote, @broadcast}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x7, "c73523", 0x6, "6188ce"}}}}}}}, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) unshare(0x400) unshare(0x4000000) 3.023167913s ago: executing program 0 (id=374): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c33ab03b3d97f252ec043ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x29, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xb}}}}}) unshare(0x20020080) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000140)="e652de7f42d5cd1f95179424c98262eaa9eae3f678aea6bf736104732a9bf8b537628185f2f8dc47a01bb19f16373b73252c97c9d0fe7fefa1164fba35676816db2f9f9cecaf9fa2188835b8d7872d3cfbb8f30a2aff264a6d577994449c5ee2b5bc91e765e24e3dc7ee0190e51aa350d05159bbee20044ba05f8ce940cac9cf392e6b4999c8a73548526b3b45670eb13a51a949a6aa1636335345f1c024fe15a12e28"}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004", @ANYRESHEX=r5], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x28, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x4000080) 2.959469252s ago: executing program 4 (id=375): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd25404007cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f696c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e8e0000c8008002500"], 0x270}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x907443d3e2d9a017) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffbcca}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) 2.824611557s ago: executing program 3 (id=376): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0xffff, @rand_addr=0x64010101}, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@remote, @loopback}, 0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) (async) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001, 0x0, @void, @value}, 0x28) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000040)=0x6, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, 0x0) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote}}}}) 2.82262171s ago: executing program 4 (id=377): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x17}}) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c, 0x80000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x1000, 0x10000000, 0x7, 0x65fb}, 0x1, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) syz_emit_ethernet(0xb2, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb8100020086dd6001011100783afffe800000000000000000000064ae87155033c307000000000000000000000001860090784c8df38d0000000000000000000aa78ce54006598080a8030037004023493787aafaffffffffffffff23732472eefa45ad96489269748e25e6f8ef4c1e4a8a050000000000000027df3e34066d42ca0a5c5084dbaf736b41e5af180200010000000044af9ca5cf74fe1c0026000400000001f7887ebd8d34720000a62f0a874b680e19e9cbfc98e1515a2a71ecdd81e621c2c2eb95789093d44ce030cbd09363cf68dbdf9f5a4554d13a743daa39195567fcaaca2f0b2e22b0972f9cdac38f50837898"], 0x0) 2.68402134s ago: executing program 0 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f00000002c0)={r1}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000024bc2398cd5acfea209000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf25090000003800036367d808000100000000000800030000000000080005006401010014000200776c616e300000000000000000000000060004000400"], 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x48040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="ff0f00000000efbb04617cf9ba0d55cc9ce8a21dcdf434da94c62874772044b2ee929cb153d4cdc9790737413894a1da88252bac5f9312f2cfcacd23377666ff8f70048a763bafd7ee818badcad14322920c754c61e56f0f5307237d3dd7cb300a80d48d324eef4b0fef1775a296c081796d80b36e34007b2c33107fe2d17a33de728fabbbaa4db7d6430377b81fa42764ff4a7e0695ded858eadde5c753e54552113c055e96367259495b6339371047a78333587964dbc9ee44fce8706b8abd7dce5dc361f03203f51581fc281a8e3cd6e6ed1c406a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000300"/28], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r7, 0x4) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xb}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r3}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.642164471s ago: executing program 2 (id=379): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff", 0x16}], 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd687fefc0000c11"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038044000000000000032c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000002080082"], 0xb4}, 0x1, 0x0, 0x0, 0x41}, 0x40000) 2.532540465s ago: executing program 1 (id=102): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1c}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000001006e657464657673657464737673696d30000008007300"/45], 0x3c}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r3, 0x0, 0x0, 0x12140, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x9c, 0x3, 0x0, 0x11, @remote, @empty, 0x700, 0x1, 0x101, 0xf}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x3fc0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x1, 0xed3d, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendto$inet6(r11, &(0x7f00000000c0)="8000372409e8e1ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10000003}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000100)={0x20000014}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000336010026bd7000fbdbdf251c20202f0004000900bf8a65c01961012d00009919be08f0b3d49efddc422fab6dd87466ba92f5edbf83a33de053bbdbc1206c4efbf87f4817b9d9007e4329e510f1e5981956edaeb6196d7822b43ef954d6cd22fe04df2cc4109f4f8fc3209bf3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x92) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r5) r14 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r14, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r14, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r14, 0xe) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r13, @ANYBLOB="000427bd7000fddbdf250500000048000180060004004e21000007000600646800000800090065000000060004004e21000008000b0073697000140003000000000000000000000000000000000108000900300000000800060008000000080006000700000008000400ffff000008000400060000000c00038008000300040000000c00038006000400ff0f00001400028008000600000000000800090001000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc005}, 0x4004804) socket(0x10, 0x803, 0x0) 1.612352172s ago: executing program 0 (id=380): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0xfffffff7, 0x1, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x2, 0x0, 0x0, @loopback, @empty, {[@generic={0x89, 0x4, "c252"}, @rr={0x7, 0x1b, 0x89, [@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x15}]}, @ssrr={0x89, 0x2b, 0xaf, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @multicast1, @private=0xa010102, @remote, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r2, 0x2f, 0x7, 0x6a, 0x1, 0x4, @empty, @empty, 0x1, 0x10, 0x3ff, 0x800}}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4401000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x464, 0x10, 0x70bd26, 0x25dfdbfb, "a3c086f92f2828b0e59374a33b8bf161bcc6b4dceb6f3b98d3fd7032867165196f677040d380a11aaf6a92f74c033101743de74d0ef889e6e06f2126544a47f72937bad9f6ea0da48467f29aab587659d05a358fe79b09b1ee35a528e3ffa7c22bcbf83b", ["", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) getsockname(r4, &(0x7f00000003c0)=@l2tp, &(0x7f0000000440)=0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000000480)=@ethtool_sfeatures={0x3b, 0x3, [{0x711677a9, 0x5}, {0xd, 0x80000000}, {0x1, 0xb96}]}}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x12c, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4001) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000740)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@llu}], &(0x7f00000007c0)='GPL\x00', 0x7f, 0x6c, &(0x7f0000000800)=""/108, 0x41000, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x8, 0xc, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x1], &(0x7f0000000940)=[{0x5, 0x2, 0x0, 0xa}, {0x5, 0x1, 0x9, 0xc}, {0x2, 0x5, 0xf, 0x6}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000700)='rpcb_unregister\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c00)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000c40)=0x0) r9 = gettid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0}, &(0x7f0000000ec0)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) sendmsg$netlink(r4, &(0x7f0000000fc0)={&(0x7f0000000a80)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc, &(0x7f0000000e40)=[{&(0x7f0000000ac0)={0x128, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x10, 0xe9, 0x0, 0x1, [@typed={0xc, 0x104, 0x0, 0x0, @u64=0x8000}]}, @nested={0x106, 0xd7, 0x0, 0x1, [@generic="92868b7dc1fad91aafe3700cc9ba6af33ba190b02b724bbd701ce3395ccf3fb09d2666c2ecf1845283df42e4b1aafef7301873f3fd5a6ed95a037fee631e22c31e313520f2f0836693ce78d0c45fa858660d1f144d7414fe12572d5d878f02adf97d516198d2179c5af993350a7074f9d383ef73c1b271f40621fd0acf471eaec11999ad5d6801316ce8b9f96274ebc96f2e3740ea13a7f56a9d516eaa393440487a5f0e1d3c9c659499ca90c8d55f9f098277b9a8ba8c429f3557a668c05ba627686106257bdddf9bc273229cf695796d30c4", @generic="647eff1b1190172cf60cca83ecd0f1276e8ed4fe8e4f", @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@multicast1}, @generic="ced68f995a635fc0cec476d321", @nested={0x4, 0x61}]}]}, 0x128}, {&(0x7f0000000c80)={0x190, 0x3e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@typed={0x5, 0xb0, 0x0, 0x0, @str='\x00'}, @nested={0xcd, 0x36, 0x0, 0x1, [@typed={0x8, 0xd5, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x77, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x80}, @typed={0x5, 0xbc, 0x0, 0x0, @str='\x00'}, @generic="5ef7fcf14ae87a119581e2581e3a873d78a172a7a8651ebef3815d0bf9c22c1a908e21925d3c1825da47797f39e6ba04b44960851d17b294cec08614249f3c0545aacdf4d7266a600627e2cd1fbffaf7e5242360bab5d3f3645441c8e2a4626d1b7a507ceb95f637c1e58e739873b4585ea491a73567f9f6fa7b778cc9174e92b258356bb00b2f004c9a923536666cdc66aa51bc3cb3a9d9bab2eb5528cf2b8db1514609a0", @nested={0x4, 0x45}, @nested={0x4, 0x50}]}, @nested={0x4, 0xcb}, @typed={0x8, 0x124, 0x0, 0x0, @pid=r8}, @generic="1c9a4f7cf6cba0450038c5303dce3e8a6eab761b6889db471b605679676f0cba5d0a541fa86f0a13437b5fa980d2595514fb6b3ade708e32ec54e1fa6d83de8b84944390670b604488099219e6432306e6b6483e167a267f982fb44c648a4fad3b146b4545d0a395466f5d2d2ddc36934ab9bd2a4a7da952045dc3409c4d1cfa5d1a85d392feb692670df6d49e982f353e40531a5804f08b73e9a850"]}, 0x190}], 0x2, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x20, 0x20008004}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x58, &(0x7f0000001000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={r12, 0xfffffff7}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000001100)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}], 0x2c) syz_emit_ethernet(0xbb, &(0x7f0000001140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@llc_tr={0x11, {@llc={0xe, 0xfc, "e8", "2d5e53c0566625779f8e97b56b55d806f161224908712bb00f57856cb6ddaa1bf077c2ecb7d8fd0be746dc8fa24d7996c45d6bcdedd3b012870d478cc9d00fc4262f78e7a12982da2784d41dfe3eb86e5539051f8053f582c4d9c23ccf0dff8d5192030b1b950f6e635065e8e9e0aa90aa43da5f70e98ef404827a8ce2bd62995edfd74b7b5933014f92c6e3beedc44efe20b3d92d1fbedfd31c03231d22ac684a832574f016f3276144"}}}}}, &(0x7f0000001200)={0x0, 0x3, [0x8a7, 0x6fb, 0x52b, 0xee8]}) getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000001240), &(0x7f0000001280)=0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x24c5600}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaf}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'ip6_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x2f, 0x7, 0x5, 0x800, 0x20, @rand_addr=' \x01\x00', @empty, 0x10, 0x10, 0xc6, 0xff}}) r13 = accept4$inet6(r0, &(0x7f00000014c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001500)=0x1c, 0x800) ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000001540)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001580)="7dbb24223882832ccbafb0af0f80cf091d072c987ad44ec98cf4f38367aacb712bee03e45b90d411dcdabfb9e36242c8914b91b5e2484f9289b1ff0de486e4e110d5019e14e963c2c224294dd91dea8f985d3078387da3692df66ff1e08ebfe94c03a6e748e6da6a828dad3f69fb7e7dbf0812398a0819ac33c04b4e9f18afb4915b0475b0cc6804d2fad548941c95d0b8c18d6bd72def6cb02306e9b646e70046636d731d86e562a80c56641d1477e2655184df791c8c0344b9bef28d13ec050424b496b70193889877280b8041cbba9edbdb9827c9aad59554f307387db6ab8268dbbd16bce24b279f7271709863923b9bb32141e16f8246395f797299914b") listen(r4, 0x4) listen(r0, 0x6) 1.611859563s ago: executing program 2 (id=381): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6c}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4008080) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4040814, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}, 0x1c) 1.611262729s ago: executing program 3 (id=382): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xb, &(0x7f0000000440)=ANY=[@ANYRES8=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r3}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x3}}, 0x14) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "d76980646e47aa7e", "54acd605de30df966190b5290da04c71", "ce5cca77", "877a7d9fa2f3f3a8"}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a"], 0xa4}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="040013000600b500c9020000060012000000fb8c0a000600ffffffffffff00001c00810005"], 0x60}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="000425bd7000fedbdf25410000000e0001006e65746465493b806a1905caa2847100000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70"], 0x180}, 0x1, 0x0, 0x0, 0x1}, 0xc842) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="0a0018000303030303030000180070000500010000000000040005000510060001000000"], 0x40}}, 0x0) getpeername(r2, &(0x7f0000000380)=@hci, &(0x7f00000004c0)=0x80) accept(0xffffffffffffffff, &(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x91) 1.593770583s ago: executing program 4 (id=383): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000030c0)=""/4067, 0xfe3}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f00000020c0)=""/4080, 0xff0}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f00000003c0)=""/86, 0x56}], 0x5}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x1a, 0x2, 0x3) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000020301020000000000000000000000070900020000000008000000006e986bf46a63e240fbc4eaa8480b4a6acf4d20f8ae6b816e0f888feef5da4d3531eefae6d9202f2c303f811b4ca8a044f4cb1c9efcf51b6fb8f97cb6c1a924cafa512c8a2f9e44d498e9af5042d0fee056cf01"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @remote}, 0x200, 0x0, 0x0, 0x0, 0x34c7, &(0x7f0000000180)='bond_slave_0\x00', 0xa, 0xfffffffffffffff7, 0x9}) r5 = socket$netlink(0x10, 0x3, 0x17) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 1.419284908s ago: executing program 0 (id=384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x32}, @TCA_CAKE_MPU={0x8, 0xe, 0x7f}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5c}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10042010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) epoll_create1(0x80000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f00000001a00030029bd700000000464d3091c5f059500fffa0000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000084000000000000000000003773b4f23a013d0f4958ec072cf9b04830eac134981d5486c537fd7e805d513f188b0f409d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000030000000000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xa050}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(r8, &(0x7f0000000140)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='subflow_check_data_avail\x00', r9, 0x0, 0x9}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) 1.3443431s ago: executing program 2 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="9ce51b5553b4e5145f02bb53", @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000008100001080000000000000000feff0000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r2, @ANYBLOB="04003480"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r4, 0x1, 0x10, &(0x7f0000000440)=""/252, &(0x7f0000000540)=0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, &(0x7f00000000c0)='6', 0x0, 0x2, 0x0, 0x2}, 0xff00) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000640)) (async) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4) connect$llc(r10, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) sendto$inet(r7, &(0x7f0000000300)="bbcbe7cde3a974331c1260fda695555ff2c2e2d52cca1766450061a5f3d79c68ac9c257aeb6ebbb0271e0841f7ca10edf85e0813cf", 0x35, 0x4801, &(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r11, 0x890b, &(0x7f00000013c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x6, 'veth0_to_team\x00'}) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.251680137s ago: executing program 3 (id=386): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x810, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.151800759s ago: executing program 4 (id=387): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x907443d3e2d9a017) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffbcca}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) 1.06861639s ago: executing program 2 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) close(0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x80, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x10, 0x1, 0x8}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c000, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xda, &(0x7f0000000380)=""/218, 0x41100, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r0], &(0x7f0000000600)=[{0x4, 0x4, 0x0, 0x2}, {0x4, 0x1, 0x1, 0xc}, {0x2, 0x2, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x9}, {0x1, 0x5, 0x9, 0x4}, {0x4, 0x1, 0x7}, {0x5, 0x2, 0x1, 0x4}, {0x1, 0x4, 0x0, 0x1}], 0x10, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x2, &(0x7f0000000080)=@raw=[@generic={0x1, 0xb, 0x2, 0x1, 0x2}, @call={0x85, 0x0, 0x0, 0x2}], &(0x7f00000005c0)='syzkaller\x00', 0x2d, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x30, '\x00', r2, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x3, 0xecb3, 0x200}, 0x10, 0x0, r3, 0x7, &(0x7f0000000800)=[r1, r0], &(0x7f0000000840)=[{0x4, 0x4, 0x8, 0x9}, {0x2, 0x2, 0xc, 0xb}, {0x2, 0x2, 0x2, 0xc}, {0x4, 0x3, 0x3, 0x4}, {0x5, 0x4, 0x8, 0x4}, {0x4, 0x4, 0x2, 0x4}, {0x3, 0x5, 0x0, 0xc}], 0x10, 0x81, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) 982.269371ms ago: executing program 2 (id=389): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x0, 0x2, 0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000e4ffffff0100000008000a0004004000080019007fffffff060002009d00000008001800e0000002050007000006000008000900"], 0x44}}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x7, 0x101}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xe1b2}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x20008050) 714.163286ms ago: executing program 0 (id=390): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 644.691703ms ago: executing program 4 (id=391): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x5e, &(0x7f0000000880)={&(0x7f0000000440)={0x30, r4, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa7, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r8 = accept4(r1, 0x0, 0x0, 0x800) r9 = socket(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x5, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@null, @bcast, @rose, @null, @default, @netrom, @default, @bcast]}, &(0x7f0000000100)=0x48) 423.896356ms ago: executing program 2 (id=392): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x510, 0x0, 0x0, 0x0, 0x3c8, 0x2e0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x10001, 0x63, 0x5, 0x10001, 0x10000, 0x8, 0x9f]}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffffff, 0xff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'wlan1\x00', 'caif0\x00', {}, {0xff}, 0x16, 0x0, 0x1, 0x60}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @mcast1, [0xff000000, 0xff000000, 0x0, 0xffffff00], [0xff, 0x0, 0xff000000], 'veth0_to_bridge\x00', 'macvlan1\x00', {0xff}, {}, 0x87, 0x5, 0x4, 0x10}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0xfffffc15, @ipv4=@remote, 0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xb3, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) unshare(0x22020600) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r5, 0x3) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x8b}}, 0x1c}}, 0x4000004) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0xb0, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7, [{0x80000001, 0x3, 0x6}]}]}}, &(0x7f0000000100)=""/126, 0x32, 0x7e, 0x1, 0xf, 0x0, @void, @value}, 0x28) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r8 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 142.328333ms ago: executing program 3 (id=393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES16=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@routing={0x1d, 0x0, 0x0, 0x7}]}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r9) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000080)={0x57, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 536.732µs ago: executing program 4 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x30}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f00000003c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0x3, 0xb, 0x10, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], &(0x7f0000000440)='syzkaller\x00', 0xd0a7, 0x9d, &(0x7f0000000480)=""/157, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xc, 0xa43040e, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x0, 0x5, 0x10, 0x8}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=@dellink={0x4b4, 0x11, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x800, 0x40000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1ff}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_AF_SPEC={0xf8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x2}, {0x8, 0x1a, 0x0, 0x0, 0x627b}]}}, @AF_MPLS={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0x3}, {0x8, 0x11, 0x0, 0x0, 0x1}]}}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0xfffffff7}, {0x8, 0xf, 0x0, 0x0, 0x6}, {0x8, 0x1e, 0x0, 0x0, 0x4}, {0x8, 0x15, 0x0, 0x0, 0x4}, {0x8, 0x10, 0x0, 0x0, 0x2}, {0x8, 0xb, 0x0, 0x0, 0x2}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8d}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xfa}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, @IFLA_VF_PORTS={0x74, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'syz0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "880627682411bc9de823ba8850a15439"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "87a247a6979451b4021ae0de2dca450d"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6bfad520f14cb4ab20a3c8d8f19126f9"}]}]}, @IFLA_VFINFO_LIST={0x2dc, 0x16, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x5}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1c0000, 0x2b, 0x1, 0x88a8}}, {0x14, 0x1, {0x101, 0x396, 0x3, 0x8100}}, {0x14, 0x1, {0x3, 0xcdc, 0x0, 0x88a8}}, {0x14, 0x1, {0x2, 0x44f, 0x800, 0x8100}}, {0x14, 0x1, {0x7, 0xb83, 0x6, 0x8100}}]}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8000, 0x2b5, 0x3, 0x8100}}, {0x14, 0x1, {0x8, 0xa9e, 0x8, 0x88a8}}]}]}, {0x174, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_VLAN={0x10, 0x2, {0xed, 0xca4, 0x2}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x5be, 0x1, 0x8100}}, {0x14, 0x1, {0x12, 0xee1, 0x8, 0x88a8}}, {0x14, 0x1, {0x8, 0x31, 0x3, 0x8100}}, {0x14, 0x1, {0x2, 0x437, 0x8, 0x88a8}}, {0x14, 0x1, {0x3, 0x2f1, 0x1000, 0x88a8}}, {0x14, 0x1, {0x6291, 0x699, 0x6, 0x8100}}, {0x14, 0x1, {0xa1d, 0xa6a, 0x6, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x40d, 0x6, 0x8100}}, {0x14, 0x1, {0x4, 0x5f4, 0x5, 0x8100}}, {0x14, 0x1, {0xe001, 0xa19, 0x5, 0x88a8}}, {0x14, 0x1, {0x200, 0x9e4, 0x2, 0x88a8}}, {0x14, 0x1, {0xfff, 0x580, 0x6, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1a8f, 0x9}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0xbf}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x4}}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xd268, @random="2b73050eb6e1"}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3ff}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80000000, 0xae0, 0x10fd2fff, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x40c, 0xffffff41}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe, 0x2}}]}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4000040}, 0x81) 0s ago: executing program 0 (id=395): socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x64, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x50, 0xe, 0x0, 0x1, [@nested={0x4c, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="d5938376f408f47c06aa365b797aafe2660b18ee45e48284a3b4ef398bc2fb7185b7604d553c3361c774288f3d80746bdaa9af09"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6000d}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 84.228563][ T5816] cgroup: Unknown subsys name 'net' [ 84.322337][ T5816] cgroup: Unknown subsys name 'cpuset' [ 84.331204][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.851538][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.352346][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.366410][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.374153][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.388540][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.396278][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.579092][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.588672][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.609746][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.617869][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.625781][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.634085][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.644022][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.651482][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.669141][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.684836][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.695193][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.703984][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.716077][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.723809][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.740128][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.747924][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.754766][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.762751][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.763908][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.778086][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.118541][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.345960][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.353591][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.361030][ T5827] bridge_slave_0: entered allmulticast mode [ 89.368611][ T5827] bridge_slave_0: entered promiscuous mode [ 89.408659][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.416306][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.423534][ T5827] bridge_slave_1: entered allmulticast mode [ 89.432638][ T5827] bridge_slave_1: entered promiscuous mode [ 89.517339][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.563462][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.596103][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.637494][ T5827] team0: Port device team_slave_0 added [ 89.646794][ T5827] team0: Port device team_slave_1 added [ 89.703311][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.791772][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.830915][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.838022][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.865054][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.883115][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.892219][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.919392][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.058398][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.077381][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.084896][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.092103][ T5834] bridge_slave_0: entered allmulticast mode [ 90.099599][ T5834] bridge_slave_0: entered promiscuous mode [ 90.107418][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.114518][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.122129][ T5834] bridge_slave_1: entered allmulticast mode [ 90.129319][ T5834] bridge_slave_1: entered promiscuous mode [ 90.189301][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.196537][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.203785][ T5835] bridge_slave_0: entered allmulticast mode [ 90.212023][ T5835] bridge_slave_0: entered promiscuous mode [ 90.221852][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.232988][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.240570][ T5835] bridge_slave_1: entered allmulticast mode [ 90.248527][ T5835] bridge_slave_1: entered promiscuous mode [ 90.309315][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.336927][ T5827] hsr_slave_0: entered promiscuous mode [ 90.343475][ T5827] hsr_slave_1: entered promiscuous mode [ 90.400670][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.435864][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.443233][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.450475][ T5833] bridge_slave_0: entered allmulticast mode [ 90.456572][ T5830] Bluetooth: hci0: command tx timeout [ 90.461830][ T5833] bridge_slave_0: entered promiscuous mode [ 90.469651][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.477175][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.484354][ T5833] bridge_slave_1: entered allmulticast mode [ 90.491909][ T5833] bridge_slave_1: entered promiscuous mode [ 90.513974][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.596757][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.641256][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.655188][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.668945][ T5834] team0: Port device team_slave_0 added [ 90.706229][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.713434][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.721303][ T5832] bridge_slave_0: entered allmulticast mode [ 90.728931][ T5832] bridge_slave_0: entered promiscuous mode [ 90.765412][ T5834] team0: Port device team_slave_1 added [ 90.775238][ T5835] team0: Port device team_slave_0 added [ 90.784744][ T5830] Bluetooth: hci2: command tx timeout [ 90.821398][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.828806][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.836104][ T5832] bridge_slave_1: entered allmulticast mode [ 90.843348][ T5832] bridge_slave_1: entered promiscuous mode [ 90.854792][ T5830] Bluetooth: hci3: command tx timeout [ 90.854840][ T51] Bluetooth: hci1: command tx timeout [ 90.866177][ T5840] Bluetooth: hci4: command tx timeout [ 90.878315][ T5833] team0: Port device team_slave_0 added [ 90.898357][ T5835] team0: Port device team_slave_1 added [ 90.940015][ T5833] team0: Port device team_slave_1 added [ 90.972332][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.979392][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.005690][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.028159][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.040628][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.062545][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.069672][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.096076][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.117417][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.124475][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.150547][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.207387][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.214383][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.240435][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.282827][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.289917][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.316016][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.334943][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.342038][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.368021][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.416780][ T5832] team0: Port device team_slave_0 added [ 91.468049][ T5835] hsr_slave_0: entered promiscuous mode [ 91.474401][ T5835] hsr_slave_1: entered promiscuous mode [ 91.482527][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.490507][ T5835] Cannot create hsr debugfs directory [ 91.498517][ T5832] team0: Port device team_slave_1 added [ 91.523035][ T5834] hsr_slave_0: entered promiscuous mode [ 91.529480][ T5834] hsr_slave_1: entered promiscuous mode [ 91.535700][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.543265][ T5834] Cannot create hsr debugfs directory [ 91.592743][ T5833] hsr_slave_0: entered promiscuous mode [ 91.599199][ T5833] hsr_slave_1: entered promiscuous mode [ 91.606627][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.614203][ T5833] Cannot create hsr debugfs directory [ 91.680902][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.688422][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.714775][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.758534][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.771791][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.778988][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.805415][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.853307][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.867635][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.922862][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.979153][ T43] cfg80211: failed to load regulatory.db [ 92.040297][ T5832] hsr_slave_0: entered promiscuous mode [ 92.047090][ T5832] hsr_slave_1: entered promiscuous mode [ 92.053231][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.060992][ T5832] Cannot create hsr debugfs directory [ 92.371704][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.412867][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.422844][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.452707][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.535416][ T5840] Bluetooth: hci0: command tx timeout [ 92.548844][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.561611][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.574506][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.588304][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.603110][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.673087][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.707479][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.714808][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.754048][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.761267][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.781888][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.792105][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.804555][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.837262][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.855282][ T5840] Bluetooth: hci2: command tx timeout [ 92.897888][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.935083][ T51] Bluetooth: hci1: command tx timeout [ 92.935699][ T5830] Bluetooth: hci3: command tx timeout [ 92.940600][ T5840] Bluetooth: hci4: command tx timeout [ 92.983229][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.007614][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.039291][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.051776][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.088443][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.121376][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.145502][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.152678][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.192906][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.200108][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.250556][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.291728][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.298983][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.329678][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.336889][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.427539][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.559996][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.650757][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.658065][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.715832][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.723117][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.738729][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.771342][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.902049][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.934164][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.941410][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.959791][ T5827] veth0_vlan: entered promiscuous mode [ 93.980144][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.987362][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.051946][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.107569][ T5827] veth1_vlan: entered promiscuous mode [ 94.135259][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.299099][ T5827] veth0_macvtap: entered promiscuous mode [ 94.357737][ T5827] veth1_macvtap: entered promiscuous mode [ 94.387212][ T5835] veth0_vlan: entered promiscuous mode [ 94.426659][ T5835] veth1_vlan: entered promiscuous mode [ 94.479655][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.504010][ T5835] veth0_macvtap: entered promiscuous mode [ 94.531717][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.546296][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.559236][ T5835] veth1_macvtap: entered promiscuous mode [ 94.602385][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.615170][ T5840] Bluetooth: hci0: command tx timeout [ 94.634765][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.643775][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.652644][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.691274][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.736041][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.752968][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.781994][ T5834] veth0_vlan: entered promiscuous mode [ 94.795549][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804279][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.813201][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.823350][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.878418][ T5834] veth1_vlan: entered promiscuous mode [ 94.935208][ T5840] Bluetooth: hci2: command tx timeout [ 95.015031][ T5840] Bluetooth: hci4: command tx timeout [ 95.016256][ T5830] Bluetooth: hci1: command tx timeout [ 95.020468][ T5840] Bluetooth: hci3: command tx timeout [ 95.046867][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.057253][ T5834] veth0_macvtap: entered promiscuous mode [ 95.067968][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.112173][ T5833] veth0_vlan: entered promiscuous mode [ 95.135904][ T5834] veth1_macvtap: entered promiscuous mode [ 95.155413][ T5833] veth1_vlan: entered promiscuous mode [ 95.162628][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.183755][ T5832] veth0_vlan: entered promiscuous mode [ 95.187856][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.199254][ T5832] veth1_vlan: entered promiscuous mode [ 95.254397][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.269101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.278277][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.332953][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.342773][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.358942][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.373318][ T5833] veth0_macvtap: entered promiscuous mode [ 95.387342][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.397570][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.406797][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.419967][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.462709][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.484548][ T5833] veth1_macvtap: entered promiscuous mode [ 95.501755][ T5832] veth0_macvtap: entered promiscuous mode [ 95.528458][ T5832] veth1_macvtap: entered promiscuous mode [ 95.591288][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.658307][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.688652][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.749480][ T5916] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.762104][ T5916] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 95.777728][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.787206][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803862][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.819570][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.850196][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.883207][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.913191][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.930536][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.964072][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.993252][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.005436][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.018969][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.029271][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.040303][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.050708][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.064344][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.074946][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.107866][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.118197][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.129182][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.139518][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.312517][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.325682][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.695653][ T5830] Bluetooth: hci0: command tx timeout [ 96.744014][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.759073][ T5928] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 96.768164][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.770719][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.951264][ T5933] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 96.953067][ T5930] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 96.994149][ T5928] bridge_slave_0: left allmulticast mode [ 97.003735][ T5928] bridge_slave_0: left promiscuous mode [ 97.011522][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.021994][ T5830] Bluetooth: hci2: command tx timeout [ 97.032598][ T5928] bridge_slave_1: left allmulticast mode [ 97.038761][ T5928] bridge_slave_1: left promiscuous mode [ 97.044686][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.063709][ T5928] bond0: (slave bond_slave_0): Releasing backup interface [ 97.079388][ T5928] bond0: (slave bond_slave_1): Releasing backup interface [ 97.095450][ T5830] Bluetooth: hci3: command tx timeout [ 97.098615][ T5928] team0: Port device team_slave_0 removed [ 97.106781][ T5830] Bluetooth: hci1: command tx timeout [ 97.106825][ T5830] Bluetooth: hci4: command tx timeout [ 97.126170][ T5928] team0: Port device team_slave_1 removed [ 97.133904][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.141754][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.151213][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.158760][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.179570][ T5928] bond0: (slave ip6gretap1): Releasing backup interface [ 97.250992][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.297880][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.380926][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.407018][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.535236][ T5938] macvlan0: entered promiscuous mode [ 97.556490][ T5938] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 97.583513][ T5938] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 97.616147][ T5941] openvswitch: netlink: IP tunnel dst address not specified [ 97.678320][ T5941] netlink: 'syz.2.9': attribute type 5 has an invalid length. [ 97.696497][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.704383][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.119782][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.245682][ T5959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.328274][ T5961] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.370277][ T5961] block nbd0: shutting down sockets [ 99.176516][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 99.368063][ T6008] netlink: 'syz.4.12': attribute type 303 has an invalid length. [ 99.578864][ T6011] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 99.645105][ T6011] macsec1: entered allmulticast mode [ 99.717020][ T6011] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 99.779289][ T6011] batman_adv: batadv0: Adding interface: macsec1 [ 99.785927][ T6011] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.825471][ T6011] batman_adv: batadv0: Interface activated: macsec1 [ 100.339888][ T6019] syz.0.14 (6019) used greatest stack depth: 20128 bytes left [ 100.363103][ T6012] syz.4.12 (6012) used greatest stack depth: 16736 bytes left [ 100.629705][ T6030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.776985][ T6034] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 100.853570][ T6036] netlink: 'syz.0.21': attribute type 303 has an invalid length. [ 100.906874][ T6030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.043952][ T6030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.102951][ T6042] wg2: entered promiscuous mode [ 101.307784][ T6030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.484088][ T6058] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 101.506655][ T6061] __nla_validate_parse: 51 callbacks suppressed [ 101.506671][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 101.826546][ T6030] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.937202][ T6030] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.023925][ T6073] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 102.032201][ T6030] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.098061][ T6030] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.273064][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d390c00: rx timeout, send abort [ 102.392112][ T6086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 102.549993][ T6086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29'. [ 102.605721][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 102.622322][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 102.672124][ T6097] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 102.700903][ T6091] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 102.773613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d21800: rx timeout, send abort [ 102.782590][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d390c00: abort rx timeout. Force session deactivation [ 102.848566][ T6099] Zero length message leads to an empty skb [ 102.960833][ T6101] sctp: [Deprecated]: syz.4.34 (pid 6101) Use of int in maxseg socket option. [ 102.960833][ T6101] Use struct sctp_assoc_value instead [ 103.152985][ T6106] ipvlan2: entered promiscuous mode [ 103.169114][ T6106] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.281938][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031d21800: abort rx timeout. Force session deactivation [ 103.375363][ T6118] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 103.633148][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 103.670829][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 104.182767][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 104.297066][ T6143] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.767557][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 104.812214][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 104.829716][ T6167] netlink: 31 bytes leftover after parsing attributes in process `syz.3.49'. [ 104.850853][ T6167] netlink: 'syz.3.49': attribute type 3 has an invalid length. [ 104.861920][ T6167] netlink: 'syz.3.49': attribute type 2 has an invalid length. [ 104.878775][ T6167] netlink: 'syz.3.49': attribute type 2 has an invalid length. [ 104.896799][ T6161] geneve2: entered promiscuous mode [ 105.087767][ T6172] netlink: 'syz.3.51': attribute type 13 has an invalid length. [ 105.137013][ T6172] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 105.192119][ T6178] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 105.236717][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.289732][ T6172] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.460854][ T6187] trusted_key: syz.0.54 sent an empty control message without MSG_MORE. [ 105.918378][ T978] IPVS: starting estimator thread 0... [ 106.035406][ T6201] IPVS: using max 27 ests per chain, 64800 per kthread [ 106.062283][ T6207] ip6gretap0: entered promiscuous mode [ 106.084216][ T6207] ip6gretap0: left promiscuous mode [ 106.626917][ T6231] Illegal XDP return value 4294967294 on prog (id 39) dev N/A, expect packet loss! [ 106.663630][ T6235] __nla_validate_parse: 5 callbacks suppressed [ 106.663649][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 106.713583][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 106.751784][ T6235] gretap0: entered promiscuous mode [ 106.776545][ T6235] gretap0: left promiscuous mode [ 106.776960][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 106.828828][ T6242] ipvlan3: entered promiscuous mode [ 107.120058][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.72'. [ 107.436105][ T6257] FAULT_INJECTION: forcing a failure. [ 107.436105][ T6257] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.450825][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.2.76 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 107.450854][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.450874][ T6257] Call Trace: [ 107.450881][ T6257] [ 107.450890][ T6257] dump_stack_lvl+0x189/0x250 [ 107.450933][ T6257] ? irqentry_exit+0x74/0x90 [ 107.450960][ T6257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.451013][ T6257] should_fail_ex+0x414/0x560 [ 107.451045][ T6257] _copy_from_user+0x2d/0xb0 [ 107.451067][ T6257] __sys_connect+0x123/0x440 [ 107.451097][ T6257] ? __fget_files+0x3a0/0x420 [ 107.451128][ T6257] ? __pfx___sys_connect+0x10/0x10 [ 107.451172][ T6257] ? __pfx_ksys_write+0x10/0x10 [ 107.451196][ T6257] ? rcu_is_watching+0x15/0xb0 [ 107.451234][ T6257] __x64_sys_connect+0x7a/0x90 [ 107.451266][ T6257] do_syscall_64+0xfa/0x3b0 [ 107.451292][ T6257] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.451317][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.451338][ T6257] ? clear_bhb_loop+0x60/0xb0 [ 107.451363][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.451383][ T6257] RIP: 0033:0x7f4b4ab8e969 [ 107.451406][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.451423][ T6257] RSP: 002b:00007f4b4b90e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.451444][ T6257] RAX: ffffffffffffffda RBX: 00007f4b4adb5fa0 RCX: 00007f4b4ab8e969 [ 107.451459][ T6257] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 107.451472][ T6257] RBP: 00007f4b4b90e090 R08: 0000000000000000 R09: 0000000000000000 [ 107.451485][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.451516][ T6257] R13: 0000000000000000 R14: 00007f4b4adb5fa0 R15: 00007ffd78decbd8 [ 107.451549][ T6257] [ 107.956517][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 108.001518][ T6268] netlink: 'syz.0.79': attribute type 3 has an invalid length. [ 108.036643][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.228581][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 108.558369][ T6282] FAULT_INJECTION: forcing a failure. [ 108.558369][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.608393][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.3.85 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 108.608428][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.608441][ T6282] Call Trace: [ 108.608449][ T6282] [ 108.608458][ T6282] dump_stack_lvl+0x189/0x250 [ 108.608497][ T6282] ? __pfx____ratelimit+0x10/0x10 [ 108.608528][ T6282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.608561][ T6282] ? __pfx__printk+0x10/0x10 [ 108.608584][ T6282] ? __might_fault+0xb0/0x130 [ 108.608628][ T6282] should_fail_ex+0x414/0x560 [ 108.608668][ T6282] _copy_from_iter+0x1db/0x16f0 [ 108.608705][ T6282] ? rcu_is_watching+0x15/0xb0 [ 108.608737][ T6282] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 108.608770][ T6282] ? __pfx__copy_from_iter+0x10/0x10 [ 108.608803][ T6282] ? __build_skb_around+0x257/0x3e0 [ 108.608839][ T6282] ? netlink_sendmsg+0x642/0xb30 [ 108.608857][ T6282] ? skb_put+0x11b/0x210 [ 108.608894][ T6282] netlink_sendmsg+0x6b2/0xb30 [ 108.608925][ T6282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.608948][ T6282] ? aa_sock_msg_perm+0x94/0x160 [ 108.608977][ T6282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.609002][ T6282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.609023][ T6282] __sock_sendmsg+0x219/0x270 [ 108.609054][ T6282] ____sys_sendmsg+0x505/0x830 [ 108.609082][ T6282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.609114][ T6282] ? import_iovec+0x74/0xa0 [ 108.609139][ T6282] ___sys_sendmsg+0x21f/0x2a0 [ 108.609163][ T6282] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.609226][ T6282] ? __fget_files+0x2a/0x420 [ 108.609257][ T6282] ? __fget_files+0x3a0/0x420 [ 108.609301][ T6282] __x64_sys_sendmsg+0x19b/0x260 [ 108.609326][ T6282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.609358][ T6282] ? __pfx_ksys_write+0x10/0x10 [ 108.609390][ T6282] ? rcu_is_watching+0x15/0xb0 [ 108.609430][ T6282] ? do_syscall_64+0xbe/0x3b0 [ 108.609462][ T6282] do_syscall_64+0xfa/0x3b0 [ 108.609487][ T6282] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.609511][ T6282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.609532][ T6282] ? clear_bhb_loop+0x60/0xb0 [ 108.609559][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.609579][ T6282] RIP: 0033:0x7fc97718e969 [ 108.609597][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.609614][ T6282] RSP: 002b:00007fc977f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.609636][ T6282] RAX: ffffffffffffffda RBX: 00007fc9773b5fa0 RCX: 00007fc97718e969 [ 108.609659][ T6282] RDX: 0000000000008800 RSI: 0000200000000140 RDI: 0000000000000004 [ 108.609673][ T6282] RBP: 00007fc977f67090 R08: 0000000000000000 R09: 0000000000000000 [ 108.609686][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.609698][ T6282] R13: 0000000000000000 R14: 00007fc9773b5fa0 R15: 00007ffd1e3a9bd8 [ 108.609732][ T6282] [ 108.637681][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 109.632309][ T6312] FAULT_INJECTION: forcing a failure. [ 109.632309][ T6312] name failslab, interval 1, probability 0, space 0, times 1 [ 109.665049][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.4.92 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 109.665079][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.665092][ T6312] Call Trace: [ 109.665100][ T6312] [ 109.665109][ T6312] dump_stack_lvl+0x189/0x250 [ 109.665147][ T6312] ? __pfx____ratelimit+0x10/0x10 [ 109.665173][ T6312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.665205][ T6312] ? __pfx__printk+0x10/0x10 [ 109.665233][ T6312] ? __pfx___might_resched+0x10/0x10 [ 109.665261][ T6312] ? fs_reclaim_acquire+0x7d/0x100 [ 109.665288][ T6312] should_fail_ex+0x414/0x560 [ 109.665318][ T6312] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.665344][ T6312] should_failslab+0xa8/0x100 [ 109.665376][ T6312] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.665399][ T6312] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 109.665429][ T6312] ? sock_alloc_inode+0x28/0xc0 [ 109.665457][ T6312] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.665482][ T6312] sock_alloc_inode+0x28/0xc0 [ 109.665507][ T6312] alloc_inode+0x67/0x1b0 [ 109.665538][ T6312] __sock_create+0x12d/0x9f0 [ 109.665571][ T6312] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 109.665610][ T6312] mptcp_subflow_create_socket+0xfd/0xb40 [ 109.665643][ T6312] ? snprintf+0xda/0x120 [ 109.665668][ T6312] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 109.665700][ T6312] ? aa_label_sk_perm+0x413/0x560 [ 109.665730][ T6312] __mptcp_nmpc_sk+0x148/0x750 [ 109.665765][ T6312] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 109.665800][ T6312] ? look_up_lock_class+0x74/0x170 [ 109.665831][ T6312] mptcp_connect+0x70/0xc10 [ 109.665863][ T6312] __inet_stream_connect+0x295/0xf10 [ 109.665902][ T6312] ? __local_bh_enable_ip+0x12d/0x1c0 [ 109.665932][ T6312] ? __pfx___inet_stream_connect+0x10/0x10 [ 109.665961][ T6312] ? __local_bh_enable_ip+0x12d/0x1c0 [ 109.665990][ T6312] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 109.666032][ T6312] inet_stream_connect+0x66/0xa0 [ 109.666063][ T6312] __sys_connect+0x313/0x440 [ 109.666093][ T6312] ? __fget_files+0x3a0/0x420 [ 109.666125][ T6312] ? __pfx___sys_connect+0x10/0x10 [ 109.666168][ T6312] ? __pfx_ksys_write+0x10/0x10 [ 109.666193][ T6312] ? rcu_is_watching+0x15/0xb0 [ 109.666229][ T6312] __x64_sys_connect+0x7a/0x90 [ 109.666259][ T6312] do_syscall_64+0xfa/0x3b0 [ 109.666284][ T6312] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.666307][ T6312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.666327][ T6312] ? clear_bhb_loop+0x60/0xb0 [ 109.666352][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.666371][ T6312] RIP: 0033:0x7fab60b8e969 [ 109.666388][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.666405][ T6312] RSP: 002b:00007fab61966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 109.666426][ T6312] RAX: ffffffffffffffda RBX: 00007fab60db5fa0 RCX: 00007fab60b8e969 [ 109.666440][ T6312] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 109.666452][ T6312] RBP: 00007fab61966090 R08: 0000000000000000 R09: 0000000000000000 [ 109.666464][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.666475][ T6312] R13: 0000000000000000 R14: 00007fab60db5fa0 R15: 00007ffc579c0358 [ 109.666507][ T6312] [ 109.666517][ T6312] socket: no more sockets [ 109.995215][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 110.216936][ T6323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.96'. [ 110.396981][ T6327] veth1_to_team: entered promiscuous mode [ 110.428923][ T6327] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 110.512241][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028796800: rx timeout, send abort [ 111.013786][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028797800: rx timeout, send abort [ 111.022313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028796800: abort rx timeout. Force session deactivation [ 111.306782][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.417296][ T6356] Bluetooth: MGMT ver 1.23 [ 111.469503][ T6361] FAULT_INJECTION: forcing a failure. [ 111.469503][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 111.522106][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028797800: abort rx timeout. Force session deactivation [ 111.542664][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.4.107 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 111.542693][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.542706][ T6361] Call Trace: [ 111.542715][ T6361] [ 111.542724][ T6361] dump_stack_lvl+0x189/0x250 [ 111.542762][ T6361] ? __pfx____ratelimit+0x10/0x10 [ 111.542789][ T6361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.542822][ T6361] ? __pfx__printk+0x10/0x10 [ 111.542852][ T6361] ? __pfx___might_resched+0x10/0x10 [ 111.542881][ T6361] ? fs_reclaim_acquire+0x7d/0x100 [ 111.542908][ T6361] should_fail_ex+0x414/0x560 [ 111.542942][ T6361] should_failslab+0xa8/0x100 [ 111.542977][ T6361] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.543007][ T6361] ? security_inode_alloc+0x39/0x330 [ 111.543042][ T6361] security_inode_alloc+0x39/0x330 [ 111.543075][ T6361] inode_init_always_gfp+0x9ed/0xdc0 [ 111.543113][ T6361] ? __pfx_sock_alloc_inode+0x10/0x10 [ 111.543140][ T6361] alloc_inode+0x82/0x1b0 [ 111.543173][ T6361] __sock_create+0x12d/0x9f0 [ 111.543200][ T6361] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 111.543240][ T6361] mptcp_subflow_create_socket+0xfd/0xb40 [ 111.543274][ T6361] ? snprintf+0xda/0x120 [ 111.543301][ T6361] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 111.543348][ T6361] ? aa_label_sk_perm+0x413/0x560 [ 111.543387][ T6361] __mptcp_nmpc_sk+0x148/0x750 [ 111.543422][ T6361] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 111.543457][ T6361] ? look_up_lock_class+0x74/0x170 [ 111.543488][ T6361] mptcp_connect+0x70/0xc10 [ 111.543520][ T6361] __inet_stream_connect+0x295/0xf10 [ 111.543560][ T6361] ? __local_bh_enable_ip+0x12d/0x1c0 [ 111.543590][ T6361] ? __pfx___inet_stream_connect+0x10/0x10 [ 111.543618][ T6361] ? __local_bh_enable_ip+0x12d/0x1c0 [ 111.543648][ T6361] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 111.543691][ T6361] inet_stream_connect+0x66/0xa0 [ 111.543722][ T6361] __sys_connect+0x313/0x440 [ 111.543752][ T6361] ? __fget_files+0x3a0/0x420 [ 111.543783][ T6361] ? __pfx___sys_connect+0x10/0x10 [ 111.543825][ T6361] ? __pfx_ksys_write+0x10/0x10 [ 111.543850][ T6361] ? rcu_is_watching+0x15/0xb0 [ 111.543888][ T6361] __x64_sys_connect+0x7a/0x90 [ 111.543920][ T6361] do_syscall_64+0xfa/0x3b0 [ 111.543945][ T6361] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.543969][ T6361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.543990][ T6361] ? clear_bhb_loop+0x60/0xb0 [ 111.544015][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.544035][ T6361] RIP: 0033:0x7fab60b8e969 [ 111.544054][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.544071][ T6361] RSP: 002b:00007fab61966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 111.544092][ T6361] RAX: ffffffffffffffda RBX: 00007fab60db5fa0 RCX: 00007fab60b8e969 [ 111.544107][ T6361] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 111.544120][ T6361] RBP: 00007fab61966090 R08: 0000000000000000 R09: 0000000000000000 [ 111.544132][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.544144][ T6361] R13: 0000000000000000 R14: 00007fab60db5fa0 R15: 00007ffc579c0358 [ 111.544177][ T6361] [ 111.544215][ T6361] socket: no more sockets [ 111.720126][ T6366] __nla_validate_parse: 1 callbacks suppressed [ 111.720147][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 111.767143][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.859816][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 112.092781][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.095122][ T6366] team0: entered promiscuous mode [ 112.118181][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.121285][ T6366] team_slave_0: entered promiscuous mode [ 112.151289][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.159156][ T6366] team_slave_1: entered promiscuous mode [ 112.181112][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.192125][ T6366] team0: left promiscuous mode [ 112.202293][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.210482][ T6366] team_slave_0: left promiscuous mode [ 112.228982][ T6366] team_slave_1: left promiscuous mode [ 112.245379][ T6379] block nbd0: server does not support multiple connections per device. [ 112.272153][ T6379] block nbd0: shutting down sockets [ 112.320050][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.503625][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.810474][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 112.908233][ T6401] vlan2: entered promiscuous mode [ 112.927145][ T6401] batadv0: entered promiscuous mode [ 113.151565][ T66] bridge_slave_1: left allmulticast mode [ 113.169031][ T66] bridge_slave_1: left promiscuous mode [ 113.186526][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.220577][ T66] bridge_slave_0: left allmulticast mode [ 113.229826][ T66] bridge_slave_0: left promiscuous mode [ 113.253022][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.499051][ T6431] FAULT_INJECTION: forcing a failure. [ 113.499051][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 113.516269][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.4.119 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 113.516299][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.516310][ T6431] Call Trace: [ 113.516318][ T6431] [ 113.516327][ T6431] dump_stack_lvl+0x189/0x250 [ 113.516365][ T6431] ? __pfx____ratelimit+0x10/0x10 [ 113.516390][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.516422][ T6431] ? __pfx__printk+0x10/0x10 [ 113.516451][ T6431] ? __pfx___might_resched+0x10/0x10 [ 113.516486][ T6431] should_fail_ex+0x414/0x560 [ 113.516518][ T6431] should_failslab+0xa8/0x100 [ 113.516551][ T6431] kmem_cache_alloc_noprof+0x73/0x3c0 [ 113.516580][ T6431] ? sk_prot_alloc+0x57/0x220 [ 113.516604][ T6431] sk_prot_alloc+0x57/0x220 [ 113.516621][ T6431] ? sk_alloc+0x24/0x370 [ 113.516641][ T6431] sk_alloc+0x3a/0x370 [ 113.516665][ T6431] inet_create+0x76b/0x1000 [ 113.516696][ T6431] ? inet_create+0x97/0x1000 [ 113.516728][ T6431] __sock_create+0x4b0/0x9f0 [ 113.516766][ T6431] mptcp_subflow_create_socket+0xfd/0xb40 [ 113.516798][ T6431] ? snprintf+0xda/0x120 [ 113.516823][ T6431] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 113.516855][ T6431] ? aa_label_sk_perm+0x413/0x560 [ 113.516887][ T6431] __mptcp_nmpc_sk+0x148/0x750 [ 113.516922][ T6431] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 113.516958][ T6431] ? look_up_lock_class+0x74/0x170 [ 113.516997][ T6431] mptcp_connect+0x70/0xc10 [ 113.517033][ T6431] __inet_stream_connect+0x295/0xf10 [ 113.517072][ T6431] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.517102][ T6431] ? __pfx___inet_stream_connect+0x10/0x10 [ 113.517131][ T6431] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.517160][ T6431] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 113.517202][ T6431] inet_stream_connect+0x66/0xa0 [ 113.517233][ T6431] __sys_connect+0x313/0x440 [ 113.517263][ T6431] ? __fget_files+0x3a0/0x420 [ 113.517295][ T6431] ? __pfx___sys_connect+0x10/0x10 [ 113.517340][ T6431] ? __pfx_ksys_write+0x10/0x10 [ 113.517364][ T6431] ? rcu_is_watching+0x15/0xb0 [ 113.517402][ T6431] __x64_sys_connect+0x7a/0x90 [ 113.517434][ T6431] do_syscall_64+0xfa/0x3b0 [ 113.517459][ T6431] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.517483][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.517503][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 113.517529][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.517548][ T6431] RIP: 0033:0x7fab60b8e969 [ 113.517567][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.517583][ T6431] RSP: 002b:00007fab61966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 113.517605][ T6431] RAX: ffffffffffffffda RBX: 00007fab60db5fa0 RCX: 00007fab60b8e969 [ 113.517620][ T6431] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 113.517632][ T6431] RBP: 00007fab61966090 R08: 0000000000000000 R09: 0000000000000000 [ 113.517645][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.517656][ T6431] R13: 0000000000000000 R14: 00007fab60db5fa0 R15: 00007ffc579c0358 [ 113.517690][ T6431] [ 114.110660][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.133418][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.144756][ T66] bond0 (unregistering): Released all slaves [ 114.300472][ T5840] Bluetooth: hci4: command tx timeout [ 114.462482][ T6442] netlink: 'syz.2.122': attribute type 21 has an invalid length. [ 114.698455][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 114.743079][ T6453] openvswitch: netlink: Flow actions attr not present in new flow. [ 114.760404][ T6442] netlink: 152 bytes leftover after parsing attributes in process `syz.2.122'. [ 114.848704][ T6449] can: request_module (can-proto-4) failed. [ 116.377733][ T5840] Bluetooth: hci4: command tx timeout [ 116.437885][ T6497] FAULT_INJECTION: forcing a failure. [ 116.437885][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 116.476578][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.2.130 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 116.476613][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.476626][ T6497] Call Trace: [ 116.476642][ T6497] [ 116.476651][ T6497] dump_stack_lvl+0x189/0x250 [ 116.476691][ T6497] ? __pfx____ratelimit+0x10/0x10 [ 116.476718][ T6497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.476751][ T6497] ? __pfx__printk+0x10/0x10 [ 116.476781][ T6497] ? __pfx___might_resched+0x10/0x10 [ 116.476810][ T6497] ? fs_reclaim_acquire+0x7d/0x100 [ 116.476838][ T6497] should_fail_ex+0x414/0x560 [ 116.476872][ T6497] should_failslab+0xa8/0x100 [ 116.476907][ T6497] __kmalloc_noprof+0xcb/0x4f0 [ 116.476936][ T6497] ? security_sk_alloc+0x52/0x390 [ 116.476974][ T6497] security_sk_alloc+0x52/0x390 [ 116.477011][ T6497] sk_prot_alloc+0x101/0x220 [ 116.477035][ T6497] sk_alloc+0x3a/0x370 [ 116.477061][ T6497] inet_create+0x76b/0x1000 [ 116.477094][ T6497] ? inet_create+0x97/0x1000 [ 116.477127][ T6497] __sock_create+0x4b0/0x9f0 [ 116.477178][ T6497] mptcp_subflow_create_socket+0xfd/0xb40 [ 116.477228][ T6497] ? snprintf+0xda/0x120 [ 116.477253][ T6497] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 116.477285][ T6497] ? aa_label_sk_perm+0x413/0x560 [ 116.477316][ T6497] __mptcp_nmpc_sk+0x148/0x750 [ 116.477352][ T6497] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 116.477388][ T6497] ? look_up_lock_class+0x74/0x170 [ 116.477420][ T6497] mptcp_connect+0x70/0xc10 [ 116.477464][ T6497] __inet_stream_connect+0x295/0xf10 [ 116.477503][ T6497] ? __local_bh_enable_ip+0x12d/0x1c0 [ 116.477533][ T6497] ? __pfx___inet_stream_connect+0x10/0x10 [ 116.477561][ T6497] ? __local_bh_enable_ip+0x12d/0x1c0 [ 116.477589][ T6497] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 116.477630][ T6497] inet_stream_connect+0x66/0xa0 [ 116.477669][ T6497] __sys_connect+0x313/0x440 [ 116.477698][ T6497] ? __fget_files+0x3a0/0x420 [ 116.477728][ T6497] ? __pfx___sys_connect+0x10/0x10 [ 116.477791][ T6497] ? __pfx_ksys_write+0x10/0x10 [ 116.477817][ T6497] ? rcu_is_watching+0x15/0xb0 [ 116.477857][ T6497] __x64_sys_connect+0x7a/0x90 [ 116.477889][ T6497] do_syscall_64+0xfa/0x3b0 [ 116.477915][ T6497] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.477939][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.477960][ T6497] ? clear_bhb_loop+0x60/0xb0 [ 116.477986][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.478006][ T6497] RIP: 0033:0x7f4b4ab8e969 [ 116.478026][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.478043][ T6497] RSP: 002b:00007f4b4b90e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 116.478066][ T6497] RAX: ffffffffffffffda RBX: 00007f4b4adb5fa0 RCX: 00007f4b4ab8e969 [ 116.478081][ T6497] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 116.478094][ T6497] RBP: 00007f4b4b90e090 R08: 0000000000000000 R09: 0000000000000000 [ 116.478107][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.478119][ T6497] R13: 0000000000000000 R14: 00007f4b4adb5fa0 R15: 00007ffd78decbd8 [ 116.478153][ T6497] [ 116.828316][ T6493] vlan2: entered promiscuous mode [ 116.835523][ T6493] vlan2: entered allmulticast mode [ 116.840734][ T6493] hsr_slave_1: entered allmulticast mode [ 116.888039][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 116.963769][ T66] hsr_slave_0: left promiscuous mode [ 116.972229][ T66] hsr_slave_1: left promiscuous mode [ 116.979508][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.987283][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.999584][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 116.999676][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.018061][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.041956][ T66] veth1_macvtap: left promiscuous mode [ 117.047867][ T66] veth0_macvtap: left promiscuous mode [ 117.053496][ T66] veth1_vlan: left promiscuous mode [ 117.058937][ T66] veth0_vlan: left promiscuous mode [ 117.453200][ T66] team0 (unregistering): Port device team_slave_1 removed [ 117.487981][ T66] team0 (unregistering): Port device team_slave_0 removed [ 117.808357][ T6377] chnl_net:caif_netlink_parms(): no params data found [ 118.402354][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.424465][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.461569][ T5840] Bluetooth: hci4: command tx timeout [ 118.467490][ T6377] bridge_slave_0: entered allmulticast mode [ 118.489254][ T6377] bridge_slave_0: entered promiscuous mode [ 118.535577][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 118.550031][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 118.572246][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 118.591260][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.615736][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.622996][ T6377] bridge_slave_1: entered allmulticast mode [ 118.647457][ T6377] bridge_slave_1: entered promiscuous mode [ 118.888646][ T6377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.017406][ T6377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.416165][ T6377] team0: Port device team_slave_0 added [ 119.511146][ T6377] team0: Port device team_slave_1 added [ 119.695789][ T6560] FAULT_INJECTION: forcing a failure. [ 119.695789][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 119.746767][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.4.141 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 119.746798][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.746811][ T6560] Call Trace: [ 119.746821][ T6560] [ 119.746830][ T6560] dump_stack_lvl+0x189/0x250 [ 119.746868][ T6560] ? __pfx____ratelimit+0x10/0x10 [ 119.746894][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.746926][ T6560] ? __pfx__printk+0x10/0x10 [ 119.746956][ T6560] ? __pfx___might_resched+0x10/0x10 [ 119.746991][ T6560] should_fail_ex+0x414/0x560 [ 119.747023][ T6560] should_failslab+0xa8/0x100 [ 119.747056][ T6560] __kmalloc_cache_noprof+0x70/0x3d0 [ 119.747086][ T6560] ? subflow_ulp_init+0xd0/0x5c0 [ 119.747123][ T6560] subflow_ulp_init+0xd0/0x5c0 [ 119.747154][ T6560] ? tcp_set_ulp+0xb1/0x5f0 [ 119.747179][ T6560] tcp_set_ulp+0x53c/0x5f0 [ 119.747201][ T6560] mptcp_subflow_create_socket+0x5c5/0xb40 [ 119.747243][ T6560] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 119.747275][ T6560] ? aa_label_sk_perm+0x413/0x560 [ 119.747306][ T6560] __mptcp_nmpc_sk+0x148/0x750 [ 119.747347][ T6560] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 119.747382][ T6560] ? look_up_lock_class+0x74/0x170 [ 119.747414][ T6560] mptcp_connect+0x70/0xc10 [ 119.747445][ T6560] __inet_stream_connect+0x295/0xf10 [ 119.747485][ T6560] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.747515][ T6560] ? __pfx___inet_stream_connect+0x10/0x10 [ 119.747543][ T6560] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.747572][ T6560] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.747615][ T6560] inet_stream_connect+0x66/0xa0 [ 119.747647][ T6560] __sys_connect+0x313/0x440 [ 119.747677][ T6560] ? __fget_files+0x3a0/0x420 [ 119.747709][ T6560] ? __pfx___sys_connect+0x10/0x10 [ 119.747753][ T6560] ? __pfx_ksys_write+0x10/0x10 [ 119.747777][ T6560] ? rcu_is_watching+0x15/0xb0 [ 119.747816][ T6560] __x64_sys_connect+0x7a/0x90 [ 119.747847][ T6560] do_syscall_64+0xfa/0x3b0 [ 119.747872][ T6560] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.747895][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.747916][ T6560] ? clear_bhb_loop+0x60/0xb0 [ 119.747941][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.747961][ T6560] RIP: 0033:0x7fab60b8e969 [ 119.747979][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.747996][ T6560] RSP: 002b:00007fab61966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 119.748017][ T6560] RAX: ffffffffffffffda RBX: 00007fab60db5fa0 RCX: 00007fab60b8e969 [ 119.748032][ T6560] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 119.748045][ T6560] RBP: 00007fab61966090 R08: 0000000000000000 R09: 0000000000000000 [ 119.748057][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.748069][ T6560] R13: 0000000000000000 R14: 00007fab60db5fa0 R15: 00007ffc579c0358 [ 119.748102][ T6560] [ 120.275995][ T6565] tipc: Started in network mode [ 120.281027][ T6565] tipc: Node identity 1afd8e924732, cluster identity 4711 [ 120.297721][ T6565] tipc: Enabled bearer , priority 0 [ 120.340983][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.351117][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.379146][ T6377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.541261][ T5840] Bluetooth: hci4: command tx timeout [ 120.590601][ T6566] syzkaller0: entered promiscuous mode [ 120.596922][ T6566] syzkaller0: entered allmulticast mode [ 120.603179][ T6566] tipc: Resetting bearer [ 120.616158][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 120.694009][ T36] tipc: Resetting bearer [ 120.702802][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.717132][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.749376][ T6377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.770974][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 120.788037][ T6561] tipc: Resetting bearer [ 121.345901][ T5886] tipc: Node number set to 1573883538 [ 122.368729][ T6561] tipc: Disabling bearer [ 122.394214][ T6596] netlink: 212 bytes leftover after parsing attributes in process `syz.4.152'. [ 122.688630][ T6377] hsr_slave_0: entered promiscuous mode [ 122.708530][ T6377] hsr_slave_1: entered promiscuous mode [ 122.731784][ T6377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.743643][ T6377] Cannot create hsr debugfs directory [ 122.785453][ T6609] nbd: must specify a size in bytes for the device [ 122.960791][ T6615] FAULT_INJECTION: forcing a failure. [ 122.960791][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 123.018278][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.2.154 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 123.018307][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.018319][ T6615] Call Trace: [ 123.018328][ T6615] [ 123.018336][ T6615] dump_stack_lvl+0x189/0x250 [ 123.018374][ T6615] ? __pfx____ratelimit+0x10/0x10 [ 123.018400][ T6615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.018432][ T6615] ? __pfx__printk+0x10/0x10 [ 123.018458][ T6615] ? trace_fib_table_lookup+0x85/0x200 [ 123.018490][ T6615] should_fail_ex+0x414/0x560 [ 123.018523][ T6615] should_failslab+0xa8/0x100 [ 123.018556][ T6615] kmem_cache_alloc_noprof+0x73/0x3c0 [ 123.018584][ T6615] ? dst_alloc+0x105/0x170 [ 123.018604][ T6615] ? fib_lookup+0x76/0x440 [ 123.018630][ T6615] dst_alloc+0x105/0x170 [ 123.018658][ T6615] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 123.018695][ T6615] ? ip_route_output_key_hash+0xde/0x2e0 [ 123.018722][ T6615] ip_route_output_key_hash+0x1b9/0x2e0 [ 123.018751][ T6615] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 123.018796][ T6615] tcp_v4_connect+0x73a/0x19d0 [ 123.018848][ T6615] ? __pfx_tcp_v4_connect+0x10/0x10 [ 123.018873][ T6615] ? __local_bh_enable_ip+0x12d/0x1c0 [ 123.018903][ T6615] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 123.018934][ T6615] ? do_raw_spin_unlock+0x122/0x240 [ 123.018963][ T6615] mptcp_connect+0x742/0xc10 [ 123.018996][ T6615] __inet_stream_connect+0x295/0xf10 [ 123.019064][ T6615] ? __local_bh_enable_ip+0x12d/0x1c0 [ 123.019094][ T6615] ? __pfx___inet_stream_connect+0x10/0x10 [ 123.019123][ T6615] ? __local_bh_enable_ip+0x12d/0x1c0 [ 123.019152][ T6615] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 123.019195][ T6615] inet_stream_connect+0x66/0xa0 [ 123.019226][ T6615] __sys_connect+0x313/0x440 [ 123.019256][ T6615] ? __fget_files+0x3a0/0x420 [ 123.019289][ T6615] ? __pfx___sys_connect+0x10/0x10 [ 123.019334][ T6615] ? __pfx_ksys_write+0x10/0x10 [ 123.019358][ T6615] ? rcu_is_watching+0x15/0xb0 [ 123.019397][ T6615] __x64_sys_connect+0x7a/0x90 [ 123.019428][ T6615] do_syscall_64+0xfa/0x3b0 [ 123.019453][ T6615] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.019477][ T6615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.019497][ T6615] ? clear_bhb_loop+0x60/0xb0 [ 123.019523][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.019543][ T6615] RIP: 0033:0x7f4b4ab8e969 [ 123.019561][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.019578][ T6615] RSP: 002b:00007f4b4b90e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 123.019599][ T6615] RAX: ffffffffffffffda RBX: 00007f4b4adb5fa0 RCX: 00007f4b4ab8e969 [ 123.019614][ T6615] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 123.019627][ T6615] RBP: 00007f4b4b90e090 R08: 0000000000000000 R09: 0000000000000000 [ 123.019639][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.019650][ T6615] R13: 0000000000000000 R14: 00007f4b4adb5fa0 R15: 00007ffd78decbd8 [ 123.019684][ T6615] [ 123.157156][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 123.358346][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 123.384969][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.158'. [ 123.414265][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 123.734255][ T6638] pimreg: entered allmulticast mode [ 123.880191][ T6652] xt_TCPMSS: Only works on TCP SYN packets [ 124.569572][ T6679] openvswitch: netlink: Message has 8 unknown bytes. [ 125.107668][ T6687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.171'. [ 125.611305][ T6377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.631566][ T6377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.663865][ T6377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.700841][ T6377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.800576][ T6700] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 126.023414][ T6377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.127799][ T6377] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.198556][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.206415][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.245654][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.252971][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.278490][ T6704] netlink: 'syz.3.174': attribute type 8 has an invalid length. [ 126.299433][ T6704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'. [ 126.340571][ T6711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 126.366597][ T6717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.175'. [ 126.472808][ T6721] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 126.734348][ T6730] netlink: 212 bytes leftover after parsing attributes in process `syz.0.181'. [ 127.221761][ T6377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.344320][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.361936][ T6750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.379187][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.401569][ T6750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.571075][ T6757] netlink: 104 bytes leftover after parsing attributes in process `syz.3.188'. [ 127.622883][ T6377] veth0_vlan: entered promiscuous mode [ 127.628054][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 127.688914][ T6377] veth1_vlan: entered promiscuous mode [ 127.752822][ T6377] veth0_macvtap: entered promiscuous mode [ 127.776405][ T6377] veth1_macvtap: entered promiscuous mode [ 127.852605][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.893664][ T6766] netlink: 248 bytes leftover after parsing attributes in process `syz.0.189'. [ 127.904279][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.945279][ T6377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.962097][ T6377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.973213][ T6377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.982852][ T6377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.239479][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.263479][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.349582][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.371980][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.649538][ T6777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.750535][ T6787] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.340159][ T5982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.638603][ T5982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.908057][ T5982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.016715][ T6828] tipc: Started in network mode [ 130.034857][ T6828] tipc: Node identity 1aec6aa017d3, cluster identity 4711 [ 130.042206][ T6828] tipc: Enabled bearer , priority 0 [ 130.165941][ T6833] netlink: 'syz.3.200': attribute type 16 has an invalid length. [ 130.184784][ T6833] netlink: 'syz.3.200': attribute type 17 has an invalid length. [ 130.277711][ T6823] syzkaller0: entered promiscuous mode [ 130.283253][ T6823] syzkaller0: entered allmulticast mode [ 130.297639][ T6823] tipc: Resetting bearer [ 130.422993][ T36] tipc: Resetting bearer [ 130.474796][ T6833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.567317][ T5982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.622114][ T6819] tipc: Resetting bearer [ 130.695175][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.703962][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.711940][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.725716][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.733641][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.058998][ T5821] tipc: Node number set to 222259872 [ 131.277050][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 131.931872][ T6819] tipc: Disabling bearer [ 131.941871][ T6839] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 131.961544][ T6846] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 132.251587][ T6862] netlink: 248 bytes leftover after parsing attributes in process `syz.2.208'. [ 132.354186][ T6849] team0 (unregistering): Port device team_slave_0 removed [ 132.428486][ T6849] team0 (unregistering): Port device team_slave_1 removed [ 132.686981][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 132.744159][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 132.794655][ T5830] Bluetooth: hci4: command tx timeout [ 132.930650][ T30] audit: type=1800 audit(1748929721.979:2): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.209" name="memory.events" dev="tmpfs" ino=217 res=0 errno=0 [ 132.966587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973399][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.073077][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 133.080174][ T5982] bridge_slave_1: left allmulticast mode [ 133.103366][ T5982] bridge_slave_1: left promiscuous mode [ 133.125121][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.193941][ T5982] bridge_slave_0: left allmulticast mode [ 133.203377][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 133.225697][ T5982] bridge_slave_0: left promiscuous mode [ 133.231541][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.953152][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.966928][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.979224][ T5982] bond0 (unregistering): Released all slaves [ 134.196655][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 134.352940][ T6918] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.355355][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 134.423237][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 134.474494][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 134.861151][ T5830] Bluetooth: hci4: command tx timeout [ 135.230633][ T6958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.224'. [ 135.281882][ T6841] chnl_net:caif_netlink_parms(): no params data found [ 135.481042][ T5982] hsr_slave_0: left promiscuous mode [ 135.500535][ T5982] hsr_slave_1: left promiscuous mode [ 135.522648][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.552362][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.580238][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.604900][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.648580][ T5982] veth1_macvtap: left promiscuous mode [ 135.654195][ T5982] veth0_macvtap: left promiscuous mode [ 135.683999][ T5982] veth1_vlan: left promiscuous mode [ 135.694299][ T5982] veth0_vlan: left promiscuous mode [ 136.410552][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 136.500044][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 136.936704][ T5830] Bluetooth: hci4: command tx timeout [ 137.143929][ T6984] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.229'. [ 137.605888][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.644485][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.667065][ T6841] bridge_slave_0: entered allmulticast mode [ 137.682406][ T6841] bridge_slave_0: entered promiscuous mode [ 137.719426][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.743121][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.771423][ T6841] bridge_slave_1: entered allmulticast mode [ 137.802002][ T6841] bridge_slave_1: entered promiscuous mode [ 137.987162][ T7027] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 138.020141][ T7027] netlink: 'syz.3.238': attribute type 2 has an invalid length. [ 138.061429][ T7027] __nla_validate_parse: 1 callbacks suppressed [ 138.061448][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 138.236821][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 138.411696][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.465100][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.671745][ T7051] Bluetooth: MGMT ver 1.23 [ 138.698805][ T7054] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 138.715702][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 138.773765][ T7057] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 139.016192][ T5830] Bluetooth: hci4: command tx timeout [ 139.830602][ T7056] sit0: entered allmulticast mode [ 139.960495][ T6841] team0: Port device team_slave_0 added [ 140.008089][ T6841] team0: Port device team_slave_1 added [ 140.089000][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 140.100836][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 140.326987][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.360284][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.440785][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 140.470597][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.504690][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 140.587073][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.594172][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.729813][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.992281][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 141.021424][ T7108] FAULT_INJECTION: forcing a failure. [ 141.021424][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.086994][ T7108] CPU: 1 UID: 0 PID: 7108 Comm: syz.2.254 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 141.087023][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.087035][ T7108] Call Trace: [ 141.087043][ T7108] [ 141.087052][ T7108] dump_stack_lvl+0x189/0x250 [ 141.087090][ T7108] ? __pfx____ratelimit+0x10/0x10 [ 141.087115][ T7108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.087148][ T7108] ? __pfx__printk+0x10/0x10 [ 141.087169][ T7108] ? __might_fault+0xb0/0x130 [ 141.087213][ T7108] should_fail_ex+0x414/0x560 [ 141.087246][ T7108] _copy_from_user+0x2d/0xb0 [ 141.087268][ T7108] kstrtouint_from_user+0xc4/0x170 [ 141.087306][ T7108] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 141.087355][ T7108] proc_fail_nth_write+0x88/0x240 [ 141.087377][ T7108] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.087405][ T7108] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.087428][ T7108] vfs_write+0x27e/0xa90 [ 141.087465][ T7108] ? __pfx_vfs_write+0x10/0x10 [ 141.087495][ T7108] ? __fget_files+0x2a/0x420 [ 141.087530][ T7108] ? __fget_files+0x3a0/0x420 [ 141.087565][ T7108] ? __fget_files+0x2a/0x420 [ 141.087606][ T7108] ksys_write+0x145/0x250 [ 141.087637][ T7108] ? __pfx_ksys_write+0x10/0x10 [ 141.087661][ T7108] ? rcu_is_watching+0x15/0xb0 [ 141.087697][ T7108] ? do_syscall_64+0xbe/0x3b0 [ 141.087728][ T7108] do_syscall_64+0xfa/0x3b0 [ 141.087753][ T7108] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.087777][ T7108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.087797][ T7108] ? clear_bhb_loop+0x60/0xb0 [ 141.087822][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.087841][ T7108] RIP: 0033:0x7f4b4ab8d41f [ 141.087860][ T7108] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 141.087877][ T7108] RSP: 002b:00007f4b489f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 141.087898][ T7108] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b4ab8d41f [ 141.087911][ T7108] RDX: 0000000000000001 RSI: 00007f4b489f60a0 RDI: 0000000000000005 [ 141.087924][ T7108] RBP: 00007f4b489f6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.087936][ T7108] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 141.087947][ T7108] R13: 0000000000000000 R14: 00007f4b4adb6080 R15: 00007ffd78decbd8 [ 141.087981][ T7108] [ 141.402005][ T7105] batadv0: entered promiscuous mode [ 141.431647][ T7105] macsec1: entered allmulticast mode [ 141.487915][ T7105] batadv0: entered allmulticast mode [ 141.529832][ T7105] batadv0: left allmulticast mode [ 141.541826][ T7105] batadv0: left promiscuous mode [ 141.716867][ T6841] hsr_slave_0: entered promiscuous mode [ 141.723661][ T6841] hsr_slave_1: entered promiscuous mode [ 141.888943][ T6841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.923089][ T6841] Cannot create hsr debugfs directory [ 142.313483][ T7138] netlink: 212 bytes leftover after parsing attributes in process `syz.4.260'. [ 142.686043][ T7150] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 142.876247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf1dc00: rx timeout, send abort [ 142.931429][ T30] audit: type=1800 audit(1748929731.969:3): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="memory.events" dev="tmpfs" ino=278 res=0 errno=0 [ 143.376416][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf1ec00: rx timeout, send abort [ 143.384807][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf1dc00: abort rx timeout. Force session deactivation [ 143.829380][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 143.847406][ T6841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.872156][ T7195] vlan0: entered promiscuous mode [ 143.884387][ T7195] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 143.885427][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cf1ec00: abort rx timeout. Force session deactivation [ 143.901737][ T6841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.948375][ T6841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.002949][ T6841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.190327][ T5885] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 144.193146][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.225033][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.248813][ T5885] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 144.264222][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.271501][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.309268][ T5885] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 144.388602][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.395829][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.613658][ T7225] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 144.625389][ T7225] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 144.970133][ T7233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.281'. [ 145.336654][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.592774][ T6841] veth0_vlan: entered promiscuous mode [ 145.668442][ T6841] veth1_vlan: entered promiscuous mode [ 145.696775][ T7250] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 145.805177][ T6841] veth0_macvtap: entered promiscuous mode [ 145.838147][ T6841] veth1_macvtap: entered promiscuous mode [ 145.869285][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.883718][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.956821][ T6841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.016731][ T6841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.037989][ T7259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.284'. [ 146.058591][ T6841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.078061][ T6841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.580901][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.612867][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.748756][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.773588][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.925257][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'. [ 147.341196][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 147.450179][ T5982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.759764][ T5982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.942717][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.0.294'. [ 147.985187][ T7324] unsupported nlmsg_type 40 [ 148.129233][ T5982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.489599][ T7344] netlink: 216 bytes leftover after parsing attributes in process `syz.3.301'. [ 148.526454][ T7342] netlink: 216 bytes leftover after parsing attributes in process `syz.3.301'. [ 148.579540][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.592857][ T5982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.608162][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.627510][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.638232][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.648445][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.285806][ T5982] bridge_slave_1: left allmulticast mode [ 149.291528][ T5982] bridge_slave_1: left promiscuous mode [ 149.302953][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.430291][ T5982] bridge_slave_0: left allmulticast mode [ 149.454503][ T5982] bridge_slave_0: left promiscuous mode [ 149.495507][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.084443][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.097449][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.121613][ T5982] bond0 (unregistering): Released all slaves [ 150.386703][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 150.407136][ T7393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.313'. [ 150.444141][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 150.480598][ T7390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.314'. [ 150.584628][ T7398] netlink: 212 bytes leftover after parsing attributes in process `syz.4.315'. [ 150.671981][ C0] Unknown status report in ack skb [ 150.701048][ T5840] Bluetooth: hci4: command tx timeout [ 150.962220][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 151.009194][ T7419] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 151.046101][ T5982] hsr_slave_0: left promiscuous mode [ 151.053575][ T5982] hsr_slave_1: left promiscuous mode [ 151.070291][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.093992][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.103212][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.131492][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.191698][ T5982] veth1_macvtap: left promiscuous mode [ 151.201833][ T5982] veth0_macvtap: left promiscuous mode [ 151.214897][ T5982] veth1_vlan: left promiscuous mode [ 151.221963][ T5982] veth0_vlan: left promiscuous mode [ 151.608801][ T7448] netlink: 'syz.3.327': attribute type 2 has an invalid length. [ 151.992471][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 152.038294][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 152.375899][ T7444] netlink: 'syz.2.324': attribute type 12 has an invalid length. [ 152.383768][ T7444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.324'. [ 152.410325][ T7448] : entered promiscuous mode [ 152.418055][ T7463] netlink: 212 bytes leftover after parsing attributes in process `syz.0.330'. [ 152.762188][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.785879][ T5840] Bluetooth: hci4: command tx timeout [ 152.791449][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.815569][ T7349] bridge_slave_0: entered allmulticast mode [ 152.823679][ T7349] bridge_slave_0: entered promiscuous mode [ 152.898439][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.332'. [ 152.980022][ T7476] sit0: left allmulticast mode [ 153.021681][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.029900][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.113606][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.128850][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.172555][ T7476] vlan0: left promiscuous mode [ 153.200178][ T7476] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.212559][ T7476] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.221531][ T7476] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.230451][ T7476] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.273529][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.289414][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.306112][ T7349] bridge_slave_1: entered allmulticast mode [ 153.323153][ T7349] bridge_slave_1: entered promiscuous mode [ 153.399592][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 153.407962][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.427955][ T7499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 153.440807][ T7499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 153.451372][ T7499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 153.464060][ T7499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 153.473954][ T7499] geneve2: entered allmulticast mode [ 153.531498][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.545726][ T7501] syz.0.338: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 153.607429][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.0.338 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 153.607457][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.607469][ T7501] Call Trace: [ 153.607477][ T7501] [ 153.607485][ T7501] dump_stack_lvl+0x189/0x250 [ 153.607525][ T7501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.607573][ T7501] ? __pfx__printk+0x10/0x10 [ 153.607596][ T7501] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.607630][ T7501] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 153.607666][ T7501] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 153.607704][ T7501] warn_alloc+0x214/0x310 [ 153.607725][ T7501] ? stack_depot_save_flags+0x40/0x900 [ 153.607757][ T7501] ? __pfx_warn_alloc+0x10/0x10 [ 153.607780][ T7501] ? kasan_save_track+0x4f/0x80 [ 153.607808][ T7501] ? xskq_create+0x56/0x170 [ 153.607829][ T7501] ? xsk_init_queue+0xb0/0x110 [ 153.607850][ T7501] ? xsk_setsockopt+0x43f/0x710 [ 153.607869][ T7501] ? do_sock_setsockopt+0x25a/0x3e0 [ 153.607900][ T7501] ? __x64_sys_setsockopt+0x18b/0x220 [ 153.607932][ T7501] ? do_syscall_64+0xfa/0x3b0 [ 153.607958][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.607986][ T7501] __vmalloc_node_range_noprof+0x125/0x1340 [ 153.608051][ T7501] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.608092][ T7501] ? __kasan_kmalloc+0x93/0xb0 [ 153.608123][ T7501] vmalloc_user_noprof+0xad/0xf0 [ 153.608143][ T7501] ? xskq_create+0xbf/0x170 [ 153.608167][ T7501] xskq_create+0xbf/0x170 [ 153.608194][ T7501] xsk_init_queue+0xb0/0x110 [ 153.608220][ T7501] xsk_setsockopt+0x43f/0x710 [ 153.608245][ T7501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.608264][ T7501] ? __lock_acquire+0xab9/0xd20 [ 153.608311][ T7501] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 153.608334][ T7501] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.608356][ T7501] do_sock_setsockopt+0x25a/0x3e0 [ 153.608397][ T7501] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 153.608433][ T7501] ? __fget_files+0x2a/0x420 [ 153.608472][ T7501] __x64_sys_setsockopt+0x18b/0x220 [ 153.608507][ T7501] do_syscall_64+0xfa/0x3b0 [ 153.608530][ T7501] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.608552][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.608570][ T7501] ? clear_bhb_loop+0x60/0xb0 [ 153.608593][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.608612][ T7501] RIP: 0033:0x7f0e79f8e969 [ 153.608628][ T7501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.608644][ T7501] RSP: 002b:00007f0e7aecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.608663][ T7501] RAX: ffffffffffffffda RBX: 00007f0e7a1b5fa0 RCX: 00007f0e79f8e969 [ 153.608676][ T7501] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 153.608687][ T7501] RBP: 00007f0e7a010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 153.608699][ T7501] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.608710][ T7501] R13: 0000000000000000 R14: 00007f0e7a1b5fa0 R15: 00007ffdd0247328 [ 153.608738][ T7501] [ 153.608758][ T7501] Mem-Info: [ 153.918193][ T7501] active_anon:4701 inactive_anon:0 isolated_anon:0 [ 153.918193][ T7501] active_file:1706 inactive_file:39887 isolated_file:0 [ 153.918193][ T7501] unevictable:768 dirty:77 writeback:25 [ 153.918193][ T7501] slab_reclaimable:10395 slab_unreclaimable:96407 [ 153.918193][ T7501] mapped:29552 shmem:1375 pagetables:749 [ 153.918193][ T7501] sec_pagetables:0 bounce:0 [ 153.918193][ T7501] kernel_misc_reclaimable:0 [ 153.918193][ T7501] free:1348711 free_pcp:535 free_cma:0 [ 153.934718][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 153.974677][ T7501] Node 0 active_anon:18904kB inactive_anon:0kB active_file:6824kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122208kB dirty:308kB writeback:100kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11080kB pagetables:3196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.015676][ T7501] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.067665][ T7501] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.103206][ T7501] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 154.111080][ T7501] Node 0 DMA32 free:1453456kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:19032kB inactive_anon:0kB active_file:6824kB inactive_file:157528kB unevictable:1536kB writepending:328kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:1692kB local_pcp:812kB free_cma:0kB [ 154.143105][ T7501] lowmem_reserve[]: 0 0 1 1 1 [ 154.150605][ T7501] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 154.178715][ T7501] lowmem_reserve[]: 0 0 0 0 0 [ 154.183947][ T7501] Node 1 Normal free:3926208kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 154.229570][ T7501] lowmem_reserve[]: 0 0 0 0 0 [ 154.236454][ T7501] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.249851][ T7501] Node 0 DMA32: 43*4kB (UME) 271*8kB (UM) 169*16kB (ME) 328*32kB (UM) 99*64kB (UM) 134*128kB (UME) 62*256kB (UM) 54*512kB (UM) 33*1024kB (UM) 8*2048kB (UE) 322*4096kB (UM) = 1451636kB [ 154.268594][ T7501] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 154.271988][ T7512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.280719][ T7501] Node 1 Normal: 174*4kB (UE) 33*8kB (UME) 34*16kB (UME) 181*32kB (UME) 99*64kB (UME) 29*128kB (UME) 13*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 951*4096kB (M) = 3926208kB [ 154.280928][ T7501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.280945][ T7501] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.280962][ T7501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.280978][ T7501] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.280995][ T7501] 42969 total pagecache pages [ 154.281015][ T7501] 0 pages in swap cache [ 154.281023][ T7501] Free swap = 124996kB [ 154.281032][ T7501] Total swap = 124996kB [ 154.281042][ T7501] 2097051 pages RAM [ 154.281051][ T7501] 0 pages HighMem/MovableOnly [ 154.281059][ T7501] 424631 pages reserved [ 154.281068][ T7501] 0 pages cma reserved [ 154.360073][ T7502] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 154.412718][ T7349] team0: Port device team_slave_0 added [ 154.432575][ T7349] team0: Port device team_slave_1 added [ 154.610196][ T7512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.854690][ T5840] Bluetooth: hci4: command tx timeout [ 154.900310][ T7546] raw_sendmsg: syz.4.347 forgot to set AF_INET. Fix it! [ 154.916385][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.944583][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.030746][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.060436][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.080151][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.122336][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.279104][ T7512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.473783][ T7512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.549944][ T7349] hsr_slave_0: entered promiscuous mode [ 155.557189][ T7349] hsr_slave_1: entered promiscuous mode [ 155.563591][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.571805][ T7349] Cannot create hsr debugfs directory [ 155.856389][ T7512] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.944125][ T7512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.980918][ T7512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.029785][ T7512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.250215][ T7593] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 156.463636][ T7565] infiniband syz1: set active [ 156.471195][ T7565] infiniband syz1: added macvlan1 [ 156.479603][ T7565] syz1: rxe_create_cq: returned err = -12 [ 156.486228][ T7565] infiniband syz1: Couldn't create ib_mad CQ [ 156.492423][ T7565] infiniband syz1: Couldn't open port 1 [ 156.566319][ T7565] RDS/IB: syz1: added [ 156.570829][ T7565] smc: adding ib device syz1 with port count 1 [ 156.607479][ T7565] smc: ib device syz1 port 1 has pnetid [ 156.651795][ T7600] __nla_validate_parse: 4 callbacks suppressed [ 156.651812][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 156.667158][ T7349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.676992][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 156.686724][ T7600] netlink: 'syz.3.361': attribute type 18 has an invalid length. [ 156.690443][ T7349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.731008][ T7349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.773050][ T7349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.921974][ T7605] netlink: 212 bytes leftover after parsing attributes in process `syz.3.363'. [ 156.944860][ T5840] Bluetooth: hci4: command tx timeout [ 157.117224][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.168456][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.189542][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.196773][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.221466][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.228693][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.727907][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.743677][ T7620] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 157.872927][ T7349] veth0_vlan: entered promiscuous mode [ 157.889399][ T7349] veth1_vlan: entered promiscuous mode [ 157.903738][ T7622] tipc: Started in network mode [ 157.910148][ T7622] tipc: Node identity ac14140f, cluster identity 4711 [ 157.930395][ T7622] tipc: New replicast peer: 255.255.255.255 [ 157.940278][ T7622] tipc: Enabled bearer , priority 10 [ 158.017710][ T7349] veth0_macvtap: entered promiscuous mode [ 158.054901][ T7349] veth1_macvtap: entered promiscuous mode [ 158.105852][ T7625] vxcan3: entered allmulticast mode [ 158.131155][ T7627] netlink: 'syz.3.369': attribute type 64 has an invalid length. [ 158.177391][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 158.200307][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.231064][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.597268][ T7349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.609128][ T7349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.620160][ T7349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.630937][ T7349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.803067][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.827877][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.887421][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.899106][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.937749][ T5886] tipc: Node number set to 2886997007 [ 159.000022][ T7641] syzkaller1: entered promiscuous mode [ 159.020360][ T7641] syzkaller1: entered allmulticast mode [ 159.078544][ T7641] pim6reg1: entered allmulticast mode [ 159.129643][ T7641] bridge0: port 3(veth0_to_bridge) entered blocking state [ 159.137828][ T7641] bridge0: port 3(veth0_to_bridge) entered disabled state [ 159.154912][ T7641] veth0_to_bridge: entered allmulticast mode [ 159.162824][ T7641] veth0_to_bridge: entered promiscuous mode [ 159.173743][ T7641] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.188946][ T7641] bridge0: port 3(veth0_to_bridge) entered blocking state [ 159.196250][ T7641] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 159.403359][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 159.433498][ T7651] netlink: 212 bytes leftover after parsing attributes in process `syz.4.375'. [ 159.832370][ T7669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.379'. [ 159.942617][ T5982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.511536][ T5982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.779988][ T7675] netlink: 'syz.3.382': attribute type 39 has an invalid length. [ 160.820622][ T5982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.872133][ T7681] netlink: 60 bytes leftover after parsing attributes in process `syz.4.383'. [ 160.882215][ T7679] netlink: 60 bytes leftover after parsing attributes in process `syz.4.383'. [ 160.953887][ T5982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.413905][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.429266][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.437234][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.446479][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.460592][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.528437][ T7696] netlink: 212 bytes leftover after parsing attributes in process `syz.4.387'. [ 161.752599][ T7711] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 161.792456][ T7711] netlink: 224 bytes leftover after parsing attributes in process `syz.0.390'. [ 162.198793][ T5982] bridge_slave_1: left allmulticast mode [ 162.230996][ T5982] bridge_slave_1: left promiscuous mode [ 162.252617][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.341906][ T5982] bridge_slave_0: left allmulticast mode [ 162.350416][ T5982] bridge_slave_0: left promiscuous mode [ 162.373169][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.401637][ T7722] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 162.404246][ T7732] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI [ 162.419927][ T7732] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 162.429492][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.0.395 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 162.441044][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.451113][ T7732] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 162.457108][ T7732] Code: 80 3c 2f 00 74 08 48 89 df e8 dc 70 10 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b1 70 10 f7 4d 8b 2c 24 49 83 c5 [ 162.476718][ T7732] RSP: 0018:ffffc900042fefc0 EFLAGS: 00010206 [ 162.482798][ T7732] RAX: 00000000000a2403 RBX: ffff888030256560 RCX: ffff8880273eda00 [ 162.490862][ T7732] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 162.498835][ T7732] RBP: ffffc900042ff330 R08: ffff88803025605f R09: 1ffff1100604ac0b [ 162.506815][ T7732] R10: dffffc0000000000 R11: ffffed100604ac0c R12: 0000000000512018 [ 162.514797][ T7732] R13: dffffc0000000000 R14: ffff888030256000 R15: 1ffff1100604acac [ 162.522775][ T7732] FS: 00007f0e7aeac6c0(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 162.531711][ T7732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.538298][ T7732] CR2: 000020000000e000 CR3: 0000000033c12000 CR4: 00000000003526f0 [ 162.546276][ T7732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.554270][ T7732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.562245][ T7732] Call Trace: [ 162.565530][ T7732] [ 162.568478][ T7732] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 162.574132][ T7732] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 162.579689][ T7732] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 162.585244][ T7732] ? __phys_addr+0xd3/0x180 [ 162.589754][ T7732] ? __kasan_kmalloc_large+0x85/0xa0 [ 162.595059][ T7732] ? rcu_is_watching+0x15/0xb0 [ 162.599848][ T7732] ? rcu_is_watching+0x15/0xb0 [ 162.604645][ T7732] ? trace_kmalloc+0x1f/0xd0 [ 162.609258][ T7732] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 162.615864][ T7732] ? __build_skb_around+0x257/0x3e0 [ 162.621077][ T7732] smc_diag_dump+0x59/0xa0 [ 162.625504][ T7732] netlink_dump+0x62d/0xe20 [ 162.630024][ T7732] ? __pfx_netlink_dump+0x10/0x10 [ 162.635071][ T7732] ? netlink_lookup+0x30/0x200 [ 162.639849][ T7732] ? netlink_lookup+0x30/0x200 [ 162.644625][ T7732] ? netlink_lookup+0x30/0x200 [ 162.649404][ T7732] __netlink_dump_start+0x5cb/0x7e0 [ 162.654621][ T7732] smc_diag_handler_dump+0x178/0x210 [ 162.659914][ T7732] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 162.665727][ T7732] ? __pfx_smc_diag_dump+0x10/0x10 [ 162.670845][ T7732] ? sock_diag_lock_handler+0x19/0x290 [ 162.676319][ T7732] ? sock_diag_lock_handler+0x19/0x290 [ 162.681788][ T7732] sock_diag_rcv_msg+0x4c9/0x600 [ 162.686734][ T7732] netlink_rcv_skb+0x205/0x470 [ 162.691515][ T7732] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 162.696983][ T7732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.702291][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.707532][ T7732] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.712744][ T7732] netlink_unicast+0x758/0x8d0 [ 162.717615][ T7732] netlink_sendmsg+0x805/0xb30 [ 162.722384][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.727673][ T7732] ? aa_sock_msg_perm+0x94/0x160 [ 162.732621][ T7732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.737934][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.743237][ T7732] __sock_sendmsg+0x219/0x270 [ 162.747936][ T7732] ____sys_sendmsg+0x505/0x830 [ 162.752731][ T7732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.758033][ T7732] ? import_iovec+0x74/0xa0 [ 162.762549][ T7732] ___sys_sendmsg+0x21f/0x2a0 [ 162.767241][ T7732] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.772469][ T7732] ? __fget_files+0x2a/0x420 [ 162.777084][ T7732] ? __fget_files+0x3a0/0x420 [ 162.781783][ T7732] __x64_sys_sendmsg+0x19b/0x260 [ 162.786730][ T7732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.792198][ T7732] ? rcu_is_watching+0x15/0xb0 [ 162.796975][ T7732] ? do_syscall_64+0xbe/0x3b0 [ 162.801663][ T7732] do_syscall_64+0xfa/0x3b0 [ 162.806177][ T7732] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.811404][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.817476][ T7732] ? clear_bhb_loop+0x60/0xb0 [ 162.822180][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.828078][ T7732] RIP: 0033:0x7f0e79f8e969 [ 162.832512][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.852127][ T7732] RSP: 002b:00007f0e7aeac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.860573][ T7732] RAX: ffffffffffffffda RBX: 00007f0e7a1b6080 RCX: 00007f0e79f8e969 [ 162.868553][ T7732] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000000b [ 162.876526][ T7732] RBP: 00007f0e7a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 162.884508][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.892516][ T7732] R13: 0000000000000000 R14: 00007f0e7a1b6080 R15: 00007ffdd0247328 [ 162.900504][ T7732] [ 162.903528][ T7732] Modules linked in: [ 162.908622][ T7732] ---[ end trace 0000000000000000 ]--- [ 162.914111][ T7732] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 162.921051][ T7732] Code: 80 3c 2f 00 74 08 48 89 df e8 dc 70 10 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b1 70 10 f7 4d 8b 2c 24 49 83 c5 [ 162.941178][ T7732] RSP: 0018:ffffc900042fefc0 EFLAGS: 00010206 [ 162.947457][ T7732] RAX: 00000000000a2403 RBX: ffff888030256560 RCX: ffff8880273eda00 [ 162.955506][ T7732] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 162.963485][ T7732] RBP: ffffc900042ff330 R08: ffff88803025605f R09: 1ffff1100604ac0b [ 162.971544][ T7732] R10: dffffc0000000000 R11: ffffed100604ac0c R12: 0000000000512018 [ 162.979543][ T7732] R13: dffffc0000000000 R14: ffff888030256000 R15: 1ffff1100604acac [ 162.987543][ T7732] FS: 00007f0e7aeac6c0(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 162.996508][ T7732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.003091][ T7732] CR2: 000020000000e000 CR3: 0000000033c12000 CR4: 00000000003526f0 [ 163.011291][ T7732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 163.020133][ T7732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 163.028274][ T7732] Kernel panic - not syncing: Fatal exception [ 163.034657][ T7732] Kernel Offset: disabled [ 163.038984][ T7732] Rebooting in 86400 seconds..