last executing test programs: 9.000585245s ago: executing program 3 (id=3239): socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 8.17914569s ago: executing program 3 (id=3244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x400, @empty, 0x5, 0x2}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@random="bde6098f8fd6", @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @mcast1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x5}}}}}}}, 0x0) 7.845178739s ago: executing program 3 (id=3249): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xa3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x100000) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100), 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x8000001, @mcast2, 0x4}}, 0x0, 0x0, 0xf, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r10, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.473726793s ago: executing program 3 (id=3254): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="58000000000000000000000000080000850000003b4f497f5300000000000000b6e0ceb6f341cbb2d09bd765d195c75fba1c2efa6566fb315ae4f05fd1f285ed9ebb8741e4b50454cc9f33367d3cfa1ca90a86407dd19e22046a6ff3f8269e2c5ea39a5bda502154fa64cbe13847c1c8de8f0100000000392e617783a14ab894d143744e152113391f3276ec04180820081a6a2a71c9b272c14af771a2ce158f5ba0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1}}], 0x2, 0x142, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(r0) write$bt_hci(r3, &(0x7f0000000140)=ANY=[], 0xc) 7.216661854s ago: executing program 3 (id=3255): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x8, 0x2}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, 0x0, 0x0) 6.984499455s ago: executing program 3 (id=3259): socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0), 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES64=r0, @ANYRES8=r4], 0x4c}}, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r6, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000}, 0xe}], 0x1, 0x40012001, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x140e, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000000000000000000730135000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.784202844s ago: executing program 2 (id=3268): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0xa5}, &(0x7f00000000c0)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 5.641658158s ago: executing program 2 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x4, @none, 0x7, 0x1}, 0xe) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2701000068c7"}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000140)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="81b601f1f3843704b6fac159255051a2ca850e72baef5c6828cd6e34036dc15733674cd5aeb31460d3c767e36b525be5", 0xfffffe29}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 4.978448737s ago: executing program 4 (id=3276): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x0, 0xffffffffffffffff, 0x180, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.456407458s ago: executing program 4 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000004f00)=""/199, 0xc7}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/76, 0x4c}, {&(0x7f0000001e80)=""/249, 0xf9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x8101}], 0x4, 0x20, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) (rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xbc, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2.768653686s ago: executing program 4 (id=3283): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x325}], 0x1, 0x2140, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.767620104s ago: executing program 2 (id=3284): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a5c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) (async, rerun: 32) bind$bt_rfcomm(r0, &(0x7f0000000440)={0x1f, @none, 0x9}, 0xa) (rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYRES32, @ANYBLOB="ff030000000000000000000000ff03000000000000989aca5b47145fdd77c994f380eaa4de90471af3b7a4f6e29df9627cac83378f224ae6e47c9612e41392d3c0798154cdc96cc9c35853799ca8313b2e6f7babda04b625567b76"], 0x50) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000716240dfcec2075ae5d15c61908558ec4e106100000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="100a06000908010014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.447006414s ago: executing program 2 (id=3288): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000070000000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xe40, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.341262753s ago: executing program 4 (id=3289): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000), 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x11) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x4c}}, 0x0) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, r7, 0x3, {0x2, 0x1}, 0xff}, 0x18) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000f9dbdf252100000008000300", @ANYRES32=r0, @ANYBLOB="08009e0032b4ce"], 0x30}, 0x1, 0x0, 0x0, 0x24004080}, 0x40004) 2.288546606s ago: executing program 2 (id=3290): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x0, 0xffffffffffffffff, 0x1100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.203886776s ago: executing program 0 (id=3292): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000) (async) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r6, 0x407, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) r8 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000480)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="78000000b4281ebe000000000000000000007400", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.900646307s ago: executing program 4 (id=3293): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r1, 0xff07, 0x10000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0x2, 0xc, 0x2, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.900156194s ago: executing program 0 (id=3294): socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.703143272s ago: executing program 2 (id=3295): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000006114140000000000040000000000000095000000000000004c06ff631adec51979dd11b99169f8b6ee6aa0ab874135fd1b55c95eceda577f7d088d16f2d30f3903c257a320fab58362d45b9d6b3057ecaeb242dd80de62b1effbf07c2e60a175d5ee56514661c005bb84bec042ccde16923256fc4abed66c5053f95e0c13fec5c2f08ee033e2a68ac9e5b5bf2d795f95567c3d042ba13ff1e744ee2ae499e3d16bd91ef460d2047a7f9586711a7ebdde9fe5d63abb98244ef89b6a36c9a46f4ef4ff7297b1b87ce1a9e48e1cd4fc73c1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001a800800028004"], 0x34}, 0x1, 0x2}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000002c0)) unshare(0x40000000) 1.676648818s ago: executing program 1 (id=3296): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x16c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x144, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe0, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000000)="7e1a1d746056f6680e4359efd6680b667cb7c7899653dc9a5e76e0490639317768289db1e65da89117571e0c7838cc7fae30293129d13cf10faab84429f00778c268e9b9a81c13991417be54629a00b402d973ce9f5836b01f9a1f5e65d0a0830df1815fe8fc2dd117c381187f4d75c504fbe946e44d98", 0x77, 0x0, &(0x7f0000000080)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110b86000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'virt_wifi0\x00', @link_local}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.54636141s ago: executing program 0 (id=3297): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0x8001}, 0x18) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$caif_stream(0x25, 0x1, 0x5) 1.364667449s ago: executing program 0 (id=3298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x37}]}}]}, 0x3c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="7f", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0x30}}], 0x1, 0x4000c50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.325216135s ago: executing program 1 (id=3299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000070000000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.22918459s ago: executing program 1 (id=3300): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0xfff}, 0x8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0xee01}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xc0, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x60, 0x2f}, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {}, 0xfffffffc, 0x6e6bb4}}}, 0xc0}}, 0x0) close(r1) 1.088696989s ago: executing program 0 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pselect6(0x40, &(0x7f0000000080)={0x4, 0x3, 0x4, 0x7f, 0x1, 0x3, 0x1, 0x8000000000000}, &(0x7f00000000c0)={0x80000000000000, 0x100000001, 0x7, 0x0, 0x4, 0x8, 0x5, 0x200}, &(0x7f0000000100)={0x0, 0x7, 0x8000000000000001, 0x200000000000, 0x7, 0x9, 0x10001, 0x2}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x400000000000000]}, 0x8}) 995.234278ms ago: executing program 0 (id=3302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 933.29428ms ago: executing program 4 (id=3303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x68}}, 0x2040010) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, r6, 0xb97534d5fe9704cf, 0x0, 0xfffffff9, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x168, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffff5e46}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x114, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf8, 0x2, "ac5fadcd17d7332cb953c76434602301cd42fbf6a016a62a00dfcdc5e041a42d558395f40feed288c2f9d004743886dc27ddf4478ad576d0af2b9b8ea8fcd33d25f67a6b40edd20dc17a525b99937e146de30af82f5046abba4651f47180652d219a0796e74c937e7de7b1969424491668863990501ca9d9600b9c1971a6ed1d9fe73f05f046e8aee27d6b1b19960fec3518907934bbaad77ea073b8eedd211be1cb01c2018427d81cdcf676a12de976a8becdf694907345bddfe1d7c95cf33d04f9fdbe7be2567fcc8581f6c05cec8ba707578391f4696060559291c46a2c0fd817d82ed29d8ddf576fb542eebb5606a1226342"}}, {0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd, 0x1, "698f6fe2a36bfaba8c"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x40060}, 0x4000084) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001200000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x240048c0) 796.724922ms ago: executing program 1 (id=3304): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 256.490445ms ago: executing program 1 (id=3305): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='rxrpc_rx_packet\x00', r0, 0x0, 0x100}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@remote, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x8002, 0xa, 0x0, 0x50}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x3ffffffd, 0x8, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x1}}, 0xb8}}, 0x40) sendto$inet6(r4, &(0x7f0000000000)="8a", 0x1, 0x8072, &(0x7f0000000080)={0xa, 0x3, 0x1, @remote, 0x6}, 0x1c) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400208}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)={0x27f8, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5e7}]}, @NL80211_ATTR_NAN_FUNC={0x27a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2cc, 0xe, 0x0, 0x1, [{0x96, 0x0, "bfef28f84cb6a8acf829fe0e98adbeef6353f56644a23776161f25f679b96e155b4c44eb6129010d4d926a9158d6e1341f8cd8ab8c78585bb660ae75e7c42fb5821aafb6439f1bbfe81a64c6ff8e647b890e1a73b0bfdba454b296726e80e22e6730b399ef90393e3cfb874e2c481d3e3260bbc77363466d0e0bf2dbe0333d74252a4d869acfeba1dc209d53c7351f12eaa7"}, {0x2a, 0x0, "8f5697bd76f9d9e21190222f53b298767cc4663b9d75b5a3e07f65a2dddff2c7748627b6beac"}, {0x47, 0x0, "f9b8d5a8f67f0c4172102458582dd95afb0753f2bbae417ec70529977b0140585897326c1b5329ebd56e4f07cb56f04f02daa057fb870a29f8649e739fff208b207898"}, {0xa6, 0x0, "719d411bba31cd2f21622fbc18310fd1214ddd7dcf5b90ce1a408ec80429bc9e5d3e2b01b7c4a1acd640ecc974682e3ec1cb865416a99dd861c5a287212f4bdd57041003e52dc3a1615d0b38fd2c9fc6cacc5fd5b3438ff3a788d9e84537093283594acbe420a1b787ced9516fe34b75a2dcd7f80b8b3c06e81d25285413a6d11abdc476da8294243f622c63b8dc4364bd837bd2f8168eb098b8e1f9a4c89fb461b9"}, {0xb7, 0x0, "68b0d6c80773d556498217ca88c33807de73e82a23dc1bd0ebccedeca3f11ca8b048996d05463a69446fc037bdcd24e669b89dbe5852c6098642f16c10ca7ae3eaf0970e74e29c46fe916c35abc5f8bf930952fcb0d801e45ffb5d9e7d84ed9da110766f901b15f3e705bac54e13c2d66135b254396201ed3b82a332a01334c14ffbbcda796b71ae0c822f23f5697ee7a96ba1f98713bac594dbb609b7199164a1dbc20a6f72c1bddb5e843ad995a41cec9aae"}, {0x5a, 0x0, "9ed4637a1ec51796845aeb2a115f5b562f29fc12b8e13f6ce6a2e9f8db5fbd76b606fbb3b82c2b1714b175957d840b7355460282f32b5d9d44db83014722a0f6a82bbd11df4d8124a8244877bd9ef87a3627cf395ff0"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xc1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "c6ad21291717"}, @NL80211_NAN_FUNC_SERVICE_INFO={0xaa, 0xb, "235a069836f657d0b8ccfc9250afe4e8a95dc6fd3bca4e225b9d123ea22f85f1a602829c0622d98b455d6170e944c4255e299a1ea8214c457c309759e61e660f275765f72a121e7ced1dd26888a50fe7a47fb441ab3aada2548c19e72e29f6cd945c847bd236ee4b5aceea830cf8f40f1de4bef97a29a9b73a1d841973409ff53c632e78a09ff40b63d43e4fc96b2be4f3c777ebb2e14a7a55e5b1c5e8b32e3a1bfab36d54fd"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2410, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x6d, 0x0, "12d6f810cdc58b2518bb9a22c150bfedd30c2eda8da560cb6fec3948a5eb2ef91b37da253c0b888fab27b635d67b4a489d1b8981538624bb740c70d2a80bd3b91defd10ce14d8c31086a332158fad263f3eb8ce86ab0a457b0bd07a6497bfd4f8aba4504942b6e1b19"}, {0x47, 0x0, "3c6562b79836e3c1fa7fae0377570f0349a4306dc652803a2a3d39928db8e8674b35bb670ff0192268915f84af0cbea313890f7be569591c2075d87d0d67f06706ae68"}, {0xf9, 0x0, "c1087d70983d8f9944f8da593e5c9192842d9ba33e7822bc5ff17e4011dbec32e78f173dfe0a75e989960c133c18010151e829586a863ac723a7b5362d3b8d2dd64ffa2cdb24f01145280495ade62305db889819a0253e4fd3be73baad382ced3a5670014f3d28d826627a67a06a6ea6accf83bf7427e70b15ebee420e0e44d4c9a05f2b0293cefdefcb90329832c853dce037bea0182b6bfaf2fc1bf2ef39b2bdf0877f57c65c0944c975a08fa60941e44de0d2084ce2a140403a0419f328fc6c095ecd1aaa557a9de359ffb42d83c529ecf773db5c3a09792fc03053dfca1ed53e933f18de6d6075f5f61ea41ac222880e2e3205"}, {0x80, 0x0, "68b12424ed6d6293bff2ab5d489fc95247d919afab12cb79d6fcf3480b40986354beb7774bc1691862cd8c07792422bca5c298d906d1b88a1df03d05083508b4e2fe2f2644281438afc686af55b3eab5b329d9f3dfde1625179d80ec96829927a8f06d2d65d2df3cf46fb8ec689cf54984f996f9d825330facb24df4"}, {0x47, 0x0, "63dbfada3f8e476b2ccc2d271d8fadb40ddccef1ac1c770147a20c157e5351c8a93df431670bf9086d34a05bebd40dc9f52bbfb5c5d8d5ac21a119161bf717d6a47b1d"}, {0x1004, 0x0, "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"}, {0xe3, 0x0, "d44e330fd773ace48476f5b2717bf8944e08b30ebda9d5c46893409b9a2abbd355bdbc112d363efc820d13f71cff3c00114244ac5ff8354fa50f77cd4504758678c7ab4435860e92965c78c3594ace97c40a68f886f7986b47311f2bd323f47f31074031e188662f0b7fa2a222c52f6f5b3370e38e76a23a98dc177279656b1004176b30f3ed338edaa00474d55126fedbfca121d3c001eb59154ac990cb8959721d8ca81d3412d87818a91d68090e30c169e0fe60e169458b65b35ecc0ad128ca18b6a3371db2a82125848eb5bdf7bea309f359588eeb7b1e855f9a7a87f4"}, {0x34, 0x0, "846d9c35c73e40dd669cb56a223c9afa2307ebf212f6750a95b88a9c3ca834167641f5a4789204e79bce671522738df1"}, {0x6f, 0x0, "4d1335b06638a6ad9775b10acfbee51c29fd0002d473b17adda4f1911317b5916150f1fcedf5793e9743f390c06d6d4c5aa26369d7a49d4865c45ea6c0354d6a03e427ddfede671a83b3f60ccc612b9d7fa5c4b6bfd9514023529d0ece174f5b97d5e2427e55292868ac24"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}]}, 0x27f8}, 0x1, 0x0, 0x0, 0x84}, 0x4044000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100bc0976c9ee18517374502426b2b9f4fbe13eac574723c56dd6aa518868989d1e3695e81f180b9b266f133337658198eb7fbb1033082bf98d14a690117ad831c2d89f502bc1a9280a03a13951478fddb1cc44a3644968e381a09540ae9fa913b8d435f505a90fa7513c", @ANYRES32=r7, @ANYBLOB="0a0003003a712f0756b80000"], 0x4c}}, 0x0) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) (async) r11 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r12 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x8, &(0x7f0000000100), 0x12d) (async) bind$can_j1939(r11, &(0x7f00000014c0)={0x1d, r10, 0x0, {0x0, 0xf0}, 0x1}, 0x18) 0s ago: executing program 1 (id=3306): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) listen(r1, 0x8) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 346.604872][T12125] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1927'. [ 346.616761][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1926'. [ 346.662122][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 346.710865][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1926'. [ 346.962218][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 347.308343][T12163] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1940'. [ 347.358556][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 347.541561][T12176] openvswitch: netlink: Flow key attr not present in new flow. [ 348.189748][T12212] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1955'. [ 348.908316][T12199] bridge_slave_0: left promiscuous mode [ 348.913948][T12199] bridge_slave_0: left allmulticast mode [ 349.515167][T12199] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.524483][T12199] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.533461][T12199] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.543786][T12199] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.566447][T12199] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 349.782968][T12199] bridge0: left promiscuous mode [ 349.797720][T12199] bond3: left promiscuous mode [ 349.803395][T12199] veth3: left promiscuous mode [ 349.851600][T12213] IPv6: sit1: Disabled Multicast RS [ 349.860307][T12213] sit1: entered allmulticast mode [ 349.906035][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 350.136092][T12239] block nbd2: not configured, cannot reconfigure [ 350.148845][T12240] netlink: 'syz.0.1962': attribute type 20 has an invalid length. [ 350.340400][T12248] netlink: 'syz.1.1965': attribute type 29 has an invalid length. [ 350.365824][T12248] netlink: 'syz.1.1965': attribute type 29 has an invalid length. [ 350.395388][T12248] netlink: 'syz.1.1965': attribute type 29 has an invalid length. [ 350.410904][T12255] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x3 [ 350.422663][T12248] netlink: 'syz.1.1965': attribute type 29 has an invalid length. [ 350.653873][T12265] macsec0: entered promiscuous mode [ 350.686598][T12265] macsec0: entered allmulticast mode [ 350.731313][T12265] veth1_macvtap: entered allmulticast mode [ 350.747831][T12265] macsec0: left promiscuous mode [ 350.754553][T12265] macsec0: left allmulticast mode [ 350.759647][T12265] veth1_macvtap: left allmulticast mode [ 350.875921][T12271] netlink: 'syz.0.1973': attribute type 7 has an invalid length. [ 350.891235][T12273] netlink: 'syz.2.1974': attribute type 10 has an invalid length. [ 350.903937][T12271] netlink: 'syz.0.1973': attribute type 8 has an invalid length. [ 350.945813][T12273] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.532908][T12315] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 351.741580][T12328] netlink: 'syz.4.1991': attribute type 3 has an invalid length. [ 352.220973][T12348] __nla_validate_parse: 9 callbacks suppressed [ 352.220997][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 352.239749][T12348] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 352.351057][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1998'. [ 352.716637][T12370] openvswitch: netlink: Key type 16144 is out of range max 32 [ 353.286595][T12399] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 353.375246][T12404] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 353.407654][T12408] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2018'. [ 353.416994][T12404] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 353.453676][T12410] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2017'. [ 353.502733][T12412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2019'. [ 353.531226][T12412] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2019'. [ 353.618479][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 354.016951][T12434] sctp: [Deprecated]: syz.4.2024 (pid 12434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.016951][T12434] Use struct sctp_sack_info instead [ 354.689383][T12475] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2030'. [ 355.099219][T12495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2039'. [ 355.160555][T12495] batadv0: entered promiscuous mode [ 355.179096][T12495] team0: entered promiscuous mode [ 355.190971][T12495] team_slave_0: entered promiscuous mode [ 355.211520][T12495] team_slave_1: entered promiscuous mode [ 355.230821][T12495] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 355.253517][T12495] Cannot create hsr debugfs directory [ 355.263698][T12495] hsr1: entered promiscuous mode [ 355.272567][T12495] hsr1: entered allmulticast mode [ 355.283581][T12495] batadv0: entered allmulticast mode [ 355.293811][T12495] team0: entered allmulticast mode [ 355.303248][T12495] team_slave_0: entered allmulticast mode [ 355.321149][T12495] team_slave_1: entered allmulticast mode [ 355.480713][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 355.774288][T12519] validate_nla: 9 callbacks suppressed [ 355.774312][T12519] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 355.816615][T12527] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 355.860432][T12531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.905847][T12519] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 355.931529][T12529] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 356.353527][T12552] netlink: 'syz.1.2056': attribute type 21 has an invalid length. [ 356.362381][T12552] netlink: 'syz.1.2056': attribute type 5 has an invalid length. [ 356.626815][T12568] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 356.637563][T12568] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 356.655205][T12568] netlink: 'syz.4.2063': attribute type 2 has an invalid length. [ 356.665017][T12568] netlink: 'syz.4.2063': attribute type 2 has an invalid length. [ 356.693864][T12564] 8021q: VLANs not supported on gre0 [ 356.812305][T12572] veth9: entered promiscuous mode [ 356.854805][T12572] veth9: entered allmulticast mode [ 357.131702][T12591] set match dimension is over the limit! [ 357.334759][T12602] __nla_validate_parse: 10 callbacks suppressed [ 357.334785][T12602] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2074'. [ 357.375792][T12603] xt_hashlimit: max too large, truncated to 1048576 [ 357.844629][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 357.936008][T12627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.967757][T12627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.977091][T12627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.986657][T12627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.996448][T12627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.009315][T12627] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 358.038691][T12634] bond2: entered promiscuous mode [ 358.043833][T12634] geneve2: entered promiscuous mode [ 358.234826][T12641] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2089'. [ 358.409040][T12651] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 358.469527][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2095'. [ 358.889263][T12672] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2103'. [ 359.347299][T12691] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 359.600127][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 360.283858][T12738] bridge0: port 2(30ªX¹¦D) entered blocking state [ 360.304669][T12738] bridge0: port 2(30ªX¹¦D) entered disabled state [ 360.416262][T12738] 0ªX¹¦D: entered promiscuous mode [ 360.726799][T12759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2136'. [ 360.841408][T12763] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 360.841942][T12765] validate_nla: 12 callbacks suppressed [ 360.841969][T12765] netlink: 'syz.2.2139': attribute type 29 has an invalid length. [ 360.892308][T12767] netlink: 'syz.2.2139': attribute type 29 has an invalid length. [ 360.943305][T12765] netlink: 'syz.2.2139': attribute type 29 has an invalid length. [ 360.964638][T12765] netlink: 'syz.2.2139': attribute type 29 has an invalid length. [ 361.527371][T12795] IPv6: sit1: Disabled Multicast RS [ 361.546133][T12795] sit1: entered allmulticast mode [ 361.672216][T12804] netlink: 'syz.1.2153': attribute type 29 has an invalid length. [ 361.698132][T12804] netlink: 'syz.1.2153': attribute type 29 has an invalid length. [ 361.744978][T12804] netlink: 'syz.1.2153': attribute type 29 has an invalid length. [ 361.843759][T12812] bridge0: port 2(30ªX¹¦D) entered blocking state [ 361.850771][T12812] bridge0: port 2(30ªX¹¦D) entered forwarding state [ 361.857977][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.865310][T12812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.876470][T12812] bridge0: left allmulticast mode [ 361.918874][T12812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.945554][T12820] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 361.963691][T12804] netlink: 'syz.1.2153': attribute type 29 has an invalid length. [ 362.440362][T12842] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 362.522240][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'. [ 362.573381][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'. [ 362.759631][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 362.792539][T12857] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 362.872239][T12859] openvswitch: netlink: Multiple metadata blocks provided [ 363.020311][T12865] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 363.058539][T12867] netlink: 'syz.1.2171': attribute type 10 has an invalid length. [ 363.088243][T12865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.121659][T12867] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 363.153116][T12865] bond3: entered promiscuous mode [ 363.374351][T12882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2179'. [ 363.396551][T12884] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2179'. [ 363.528046][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2180'. [ 363.570721][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 363.598730][T12892] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2182'. [ 363.639755][T12900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.981099][T12916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.010292][T12920] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2190'. [ 364.076901][T12916] bond4: entered promiscuous mode [ 364.313990][T12937] 8021q: VLANs not supported on gre0 [ 364.320211][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 364.891803][T12965] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.992786][T12965] bond10: entered promiscuous mode [ 365.184975][T12983] team0: Device is already in use. [ 365.678035][T13005] netem: change failed [ 366.122843][T13030] x_tables: duplicate underflow at hook 2 [ 366.182296][T13033] validate_nla: 8 callbacks suppressed [ 366.182320][T13033] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 367.859226][T13040] team0: Device vti0 is up. Set it down before adding it as a team port [ 368.004859][T13046] macsec0: entered promiscuous mode [ 368.010174][T13046] macsec0: entered allmulticast mode [ 368.017466][T13047] veth1_macvtap: entered allmulticast mode [ 368.023619][T13047] macsec0: left promiscuous mode [ 368.030390][T13047] macsec0: left allmulticast mode [ 368.039095][T13047] veth1_macvtap: left allmulticast mode [ 368.111249][T13057] __nla_validate_parse: 11 callbacks suppressed [ 368.111275][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 368.228110][T13059] lo: MTU too low for tipc bearer [ 368.247164][T13059] tipc: Enabling of bearer rejected, failed to enable media [ 368.513994][T13072] netlink: 'syz.3.2242': attribute type 2 has an invalid length. [ 368.896667][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2247'. [ 369.202418][T13096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.275452][T13100] FAULT_INJECTION: forcing a failure. [ 369.275452][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 369.326912][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.0.2251 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 369.326949][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.326963][T13100] Call Trace: [ 369.326973][T13100] [ 369.326983][T13100] dump_stack_lvl+0x189/0x250 [ 369.327030][T13100] ? __pfx____ratelimit+0x10/0x10 [ 369.327068][T13100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.327166][T13100] ? __pfx__printk+0x10/0x10 [ 369.327210][T13100] ? __pfx___might_resched+0x10/0x10 [ 369.327242][T13100] ? fs_reclaim_acquire+0x7d/0x100 [ 369.327272][T13100] should_fail_ex+0x414/0x560 [ 369.327304][T13100] should_failslab+0xa8/0x100 [ 369.327328][T13100] __kmalloc_noprof+0xcb/0x4f0 [ 369.327347][T13100] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.327386][T13100] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.327424][T13100] genl_family_rcv_msg_doit+0xb8/0x300 [ 369.327460][T13100] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.327492][T13100] ? rcu_is_watching+0x15/0xb0 [ 369.327528][T13100] ? apparmor_capable+0x137/0x1b0 [ 369.327564][T13100] ? bpf_lsm_capable+0x9/0x20 [ 369.327583][T13100] ? security_capable+0x7e/0x2e0 [ 369.327616][T13100] genl_rcv_msg+0x60e/0x790 [ 369.327671][T13100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.327695][T13100] ? ref_tracker_free+0x63a/0x7d0 [ 369.327721][T13100] ? __pfx_wg_set_device+0x10/0x10 [ 369.327745][T13100] ? __pfx_ref_tracker_free+0x10/0x10 [ 369.327779][T13100] netlink_rcv_skb+0x208/0x470 [ 369.327802][T13100] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.327829][T13100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.327867][T13100] ? down_read+0x1ad/0x2e0 [ 369.327892][T13100] genl_rcv+0x28/0x40 [ 369.327916][T13100] netlink_unicast+0x75b/0x8d0 [ 369.327952][T13100] netlink_sendmsg+0x805/0xb30 [ 369.327983][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.328008][T13100] ? aa_sock_msg_perm+0x94/0x160 [ 369.328034][T13100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.328058][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.328080][T13100] __sock_sendmsg+0x219/0x270 [ 369.328114][T13100] ____sys_sendmsg+0x505/0x830 [ 369.328144][T13100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.328176][T13100] ? import_iovec+0x74/0xa0 [ 369.328205][T13100] ___sys_sendmsg+0x21f/0x2a0 [ 369.328231][T13100] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.328289][T13100] ? __fget_files+0x2a/0x420 [ 369.328310][T13100] ? __fget_files+0x3a0/0x420 [ 369.328340][T13100] __x64_sys_sendmsg+0x19b/0x260 [ 369.328366][T13100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.328399][T13100] ? __pfx_ksys_write+0x10/0x10 [ 369.328414][T13100] ? rcu_is_watching+0x15/0xb0 [ 369.328445][T13100] ? do_syscall_64+0xbe/0x3b0 [ 369.328482][T13100] do_syscall_64+0xfa/0x3b0 [ 369.328497][T13100] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.328525][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.328545][T13100] ? clear_bhb_loop+0x60/0xb0 [ 369.328570][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.328589][T13100] RIP: 0033:0x7f7a8a18e929 [ 369.328607][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.328625][T13100] RSP: 002b:00007f7a8b02e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.328646][T13100] RAX: ffffffffffffffda RBX: 00007f7a8a3b5fa0 RCX: 00007f7a8a18e929 [ 369.328660][T13100] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 369.328672][T13100] RBP: 00007f7a8b02e090 R08: 0000000000000000 R09: 0000000000000000 [ 369.328684][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.328695][T13100] R13: 0000000000000000 R14: 00007f7a8a3b5fa0 R15: 00007ffda0960ec8 [ 369.328726][T13100] [ 369.833526][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'. [ 370.642062][T13149] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 370.650298][T13149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2269'. [ 370.676580][T13153] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 370.773568][T13157] netlink: 'syz.0.2273': attribute type 33 has an invalid length. [ 370.781822][T13157] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2273'. [ 370.820894][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 371.295072][T13183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.740554][T13207] x_tables: duplicate underflow at hook 2 [ 372.129690][T13229] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 372.197515][T13233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2301'. [ 372.211899][T13233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2301'. [ 372.319761][T13229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 372.338272][T13243] bond5: entered promiscuous mode [ 372.529889][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 372.554733][T13252] netlink: 'syz.3.2306': attribute type 5 has an invalid length. [ 372.591242][T13252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2306'. [ 372.628224][T13256] tipc: Enabled bearer , priority 10 [ 372.668099][T13252] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 372.720434][T13252] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 372.733947][T13252] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 372.751483][T13252] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 372.761054][T13252] geneve3: entered promiscuous mode [ 372.767255][T13252] geneve3: entered allmulticast mode [ 372.774971][T13260] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 372.927837][T13266] geneve3: entered promiscuous mode [ 372.933133][T13266] geneve3: entered allmulticast mode [ 373.110451][T13279] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 373.562536][T13303] syzkaller0: entered promiscuous mode [ 373.569848][T13303] syzkaller0: entered allmulticast mode [ 373.769237][T13318] __nla_validate_parse: 5 callbacks suppressed [ 373.769262][T13318] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2326'. [ 373.788874][T13325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2328'. [ 373.802757][T13318] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2326'. [ 373.973576][T13325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.985081][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 374.000031][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 374.014935][T13325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.249808][T13325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.297269][T13325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.546935][T13325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.577314][T13325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.671914][T13331] infiniband syz0: set down [ 374.734430][T13331] infiniband syz0: added bond_slave_1 [ 374.920012][T13325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.932333][T13325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.949140][T13363] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2339'. [ 375.062133][T13331] RDS/IB: syz0: added [ 375.068789][T13331] smc: adding ib device syz0 with port count 1 [ 375.093593][T13331] smc: ib device syz0 port 1 has pnetid [ 375.169762][T13325] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.213487][T13325] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.302790][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 375.305607][T13325] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.358078][T13325] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.523975][T13325] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.543394][T13325] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.566613][T13390] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 375.646034][T13387] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 375.721378][T13325] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.730464][T13325] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.748304][T13394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.929984][T13406] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2351'. [ 376.887936][T13437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 377.337078][T13455] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2368'. [ 377.689390][T13470] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 377.719878][T13470] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 377.911312][T13483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2376'. [ 378.329585][T13497] x_tables: duplicate underflow at hook 1 [ 378.815765][T13516] netlink: 'syz.0.2391': attribute type 11 has an invalid length. [ 378.995478][T13524] netlink: 604 bytes leftover after parsing attributes in process `syz.2.2394'. [ 379.073493][T13529] bond0: entered promiscuous mode [ 379.084033][T13529] bridge_slave_1: entered promiscuous mode [ 379.117168][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 379.167536][T13532] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2397'. [ 379.187406][T13531] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2397'. [ 379.203926][T13536] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2399'. [ 379.218369][T13532] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2397'. [ 379.363495][T13545] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2402'. [ 379.391238][T13545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2402'. [ 379.651524][T13557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 380.079281][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2415'. [ 380.115072][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2415'. [ 380.543312][ T30] audit: type=1800 audit(1750145967.127:2): pid=13596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2422" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2385 res=0 errno=0 [ 380.809019][T13610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.864691][T13610] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20004 [ 380.974027][T13615] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 381.048791][T13617] netlink: 'syz.2.2429': attribute type 1 has an invalid length. [ 381.096561][T13620] syzkaller0: entered promiscuous mode [ 381.110957][T13620] syzkaller0: entered allmulticast mode [ 383.081867][T13721] xt_hashlimit: invalid interval [ 383.259868][T13726] netlink: 'syz.2.2465': attribute type 11 has an invalid length. [ 384.042782][T13754] netlink: 'syz.3.2475': attribute type 10 has an invalid length. [ 384.160263][T13752] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 384.162514][T13754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.231855][T13754] bond0: entered promiscuous mode [ 384.246174][T13754] bond_slave_0: entered promiscuous mode [ 384.252178][T13754] bond_slave_1: entered promiscuous mode [ 384.278895][T13754] dummy0: entered promiscuous mode [ 384.295436][T13754] bridge_slave_1: entered promiscuous mode [ 384.303804][T13754] team0: Port device bond0 added [ 384.491269][T13773] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 384.542258][T13773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.572103][T13777] __nla_validate_parse: 13 callbacks suppressed [ 384.572129][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 384.744911][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 384.756705][T13781] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 384.764532][T13783] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 385.245174][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'. [ 385.357229][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'. [ 385.402011][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'. [ 385.773438][T13852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2503'. [ 385.824896][T13854] netlink: 'syz.0.2505': attribute type 24 has an invalid length. [ 385.861717][T13859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2504'. [ 386.025944][T13864] xt_l2tp: v2 tid > 0xffff: 150994944 [ 386.188106][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 386.201176][T13875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2510'. [ 386.283348][T13878] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2511'. [ 386.290682][T13877] x_tables: duplicate underflow at hook 4 [ 386.391168][T13882] FAULT_INJECTION: forcing a failure. [ 386.391168][T13882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.454258][T13882] CPU: 0 UID: 0 PID: 13882 Comm: syz.3.2514 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 386.454290][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.454302][T13882] Call Trace: [ 386.454310][T13882] [ 386.454318][T13882] dump_stack_lvl+0x189/0x250 [ 386.454361][T13882] ? __pfx____ratelimit+0x10/0x10 [ 386.454391][T13882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.454419][T13882] ? __pfx__printk+0x10/0x10 [ 386.454451][T13882] should_fail_ex+0x414/0x560 [ 386.454482][T13882] _copy_to_user+0x31/0xb0 [ 386.454503][T13882] simple_read_from_buffer+0xe1/0x170 [ 386.454530][T13882] proc_fail_nth_read+0x1df/0x250 [ 386.454558][T13882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.454583][T13882] ? rw_verify_area+0x258/0x650 [ 386.454611][T13882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.454634][T13882] vfs_read+0x200/0x980 [ 386.454667][T13882] ? __pfx___mutex_lock+0x10/0x10 [ 386.454697][T13882] ? __pfx_vfs_read+0x10/0x10 [ 386.454744][T13882] ? __fget_files+0x2a/0x420 [ 386.454777][T13882] ? __fget_files+0x3a0/0x420 [ 386.454796][T13882] ? __fget_files+0x2a/0x420 [ 386.454827][T13882] ksys_read+0x145/0x250 [ 386.454858][T13882] ? __pfx_ksys_read+0x10/0x10 [ 386.454896][T13882] ? rcu_is_watching+0x15/0xb0 [ 386.454933][T13882] ? do_syscall_64+0xbe/0x3b0 [ 386.454955][T13882] do_syscall_64+0xfa/0x3b0 [ 386.454970][T13882] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.454998][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.455017][T13882] ? clear_bhb_loop+0x60/0xb0 [ 386.455041][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.455060][T13882] RIP: 0033:0x7fec3778d33c [ 386.455078][T13882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.455095][T13882] RSP: 002b:00007fec385bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.455117][T13882] RAX: ffffffffffffffda RBX: 00007fec379b5fa0 RCX: 00007fec3778d33c [ 386.455131][T13882] RDX: 000000000000000f RSI: 00007fec385bd0a0 RDI: 0000000000000008 [ 386.455143][T13882] RBP: 00007fec385bd090 R08: 0000000000000000 R09: 0000000000000000 [ 386.455154][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.455166][T13882] R13: 0000000000000000 R14: 00007fec379b5fa0 R15: 00007ffd52b28628 [ 386.455215][T13882] [ 387.314024][T13907] team0 (unregistering): left promiscuous mode [ 387.320645][T13907] team_slave_0: left promiscuous mode [ 387.327672][T13907] team_slave_1: left promiscuous mode [ 387.336612][T13907] team_slave_0: left allmulticast mode [ 387.372504][T13907] team0 (unregistering): Port device team_slave_0 removed [ 387.405279][T13907] team_slave_1: left allmulticast mode [ 387.439444][T13907] team0 (unregistering): Port device team_slave_1 removed [ 387.461579][T13923] Timeout policy `syz0' can only be used by L3 protocol number 1536 [ 387.928476][T13941] netlink: 'syz.2.2534': attribute type 21 has an invalid length. [ 388.009411][T13951] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 388.130933][T13956] FAULT_INJECTION: forcing a failure. [ 388.130933][T13956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.209650][T13956] CPU: 0 UID: 0 PID: 13956 Comm: syz.0.2538 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 388.209686][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.209699][T13956] Call Trace: [ 388.209708][T13956] [ 388.209718][T13956] dump_stack_lvl+0x189/0x250 [ 388.209771][T13956] ? __pfx____ratelimit+0x10/0x10 [ 388.209805][T13956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.209838][T13956] ? __pfx__printk+0x10/0x10 [ 388.209862][T13956] ? __might_fault+0xb0/0x130 [ 388.209896][T13956] should_fail_ex+0x414/0x560 [ 388.209931][T13956] _copy_from_user+0x2d/0xb0 [ 388.209953][T13956] __sys_bpf+0x1ed/0x860 [ 388.209986][T13956] ? __pfx___sys_bpf+0x10/0x10 [ 388.210028][T13956] ? ksys_write+0x22a/0x250 [ 388.210050][T13956] ? __pfx_ksys_write+0x10/0x10 [ 388.210147][T13956] __x64_sys_bpf+0x7c/0x90 [ 388.210173][T13956] do_syscall_64+0xfa/0x3b0 [ 388.210190][T13956] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.210221][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.210248][T13956] ? clear_bhb_loop+0x60/0xb0 [ 388.210273][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.210293][T13956] RIP: 0033:0x7f7a8a18e929 [ 388.210311][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.210329][T13956] RSP: 002b:00007f7a8b02e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.210353][T13956] RAX: ffffffffffffffda RBX: 00007f7a8a3b5fa0 RCX: 00007f7a8a18e929 [ 388.210367][T13956] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 2100000000000000 [ 388.210381][T13956] RBP: 00007f7a8b02e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.210394][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.210406][T13956] R13: 0000000000000000 R14: 00007f7a8a3b5fa0 R15: 00007ffda0960ec8 [ 388.210438][T13956] [ 389.320198][T14000] FAULT_INJECTION: forcing a failure. [ 389.320198][T14000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.348103][T14000] CPU: 1 UID: 0 PID: 14000 Comm: syz.0.2556 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 389.348137][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.348150][T14000] Call Trace: [ 389.348158][T14000] [ 389.348177][T14000] dump_stack_lvl+0x189/0x250 [ 389.348219][T14000] ? __pfx____ratelimit+0x10/0x10 [ 389.348253][T14000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.348285][T14000] ? __pfx__printk+0x10/0x10 [ 389.348307][T14000] ? __might_fault+0xb0/0x130 [ 389.348340][T14000] should_fail_ex+0x414/0x560 [ 389.348374][T14000] _copy_from_user+0x2d/0xb0 [ 389.348397][T14000] ___sys_sendmsg+0x158/0x2a0 [ 389.348429][T14000] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.348494][T14000] ? __fget_files+0x2a/0x420 [ 389.348517][T14000] ? __fget_files+0x3a0/0x420 [ 389.348551][T14000] __x64_sys_sendmsg+0x19b/0x260 [ 389.348580][T14000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.348617][T14000] ? __pfx_ksys_write+0x10/0x10 [ 389.348642][T14000] ? do_syscall_64+0xbe/0x3b0 [ 389.348665][T14000] do_syscall_64+0xfa/0x3b0 [ 389.348681][T14000] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.348711][T14000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.348732][T14000] ? clear_bhb_loop+0x60/0xb0 [ 389.348757][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.348777][T14000] RIP: 0033:0x7f7a8a18e929 [ 389.348795][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.348813][T14000] RSP: 002b:00007f7a8b02e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.348835][T14000] RAX: ffffffffffffffda RBX: 00007f7a8a3b5fa0 RCX: 00007f7a8a18e929 [ 389.348850][T14000] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 389.348863][T14000] RBP: 00007f7a8b02e090 R08: 0000000000000000 R09: 0000000000000000 [ 389.348876][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.348888][T14000] R13: 0000000000000000 R14: 00007f7a8a3b5fa0 R15: 00007ffda0960ec8 [ 389.348920][T14000] [ 389.684625][T14004] __nla_validate_parse: 13 callbacks suppressed [ 389.684652][T14004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2557'. [ 390.482897][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 390.753511][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'. [ 391.273034][T14054] netlink: 'syz.1.2575': attribute type 1 has an invalid length. [ 391.421471][T14054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.439111][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 391.522787][T14054] vlan3: entered allmulticast mode [ 391.556364][T14054] bond7: entered allmulticast mode [ 391.668221][T14060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.686324][T14060] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 391.719574][T14060] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 391.873665][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 391.902873][T14062] veth7: entered promiscuous mode [ 391.937844][T14062] bond7: (slave veth7): Enslaving as an active interface with a down link [ 392.183880][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 392.543374][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 392.566915][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 392.657393][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 392.733718][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'. [ 393.229715][T14153] netlink: 'syz.0.2606': attribute type 29 has an invalid length. [ 393.268406][T14153] netlink: 'syz.0.2606': attribute type 29 has an invalid length. [ 393.297082][T14153] netlink: 'syz.0.2606': attribute type 29 has an invalid length. [ 393.333638][T14153] netlink: 'syz.0.2606': attribute type 29 has an invalid length. [ 393.369452][T14160] gretap0: entered promiscuous mode [ 393.403937][T14160] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 393.427857][T14164] can: request_module (can-proto-0) failed. [ 393.462847][T14160] xt_policy: neither incoming nor outgoing policy selected [ 393.751448][T14180] netlink: 'syz.1.2616': attribute type 13 has an invalid length. [ 393.777831][T14180] netlink: 'syz.1.2616': attribute type 17 has an invalid length. [ 393.989426][T14192] FAULT_INJECTION: forcing a failure. [ 393.989426][T14192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.015053][T14192] CPU: 1 UID: 0 PID: 14192 Comm: syz.4.2620 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 394.015089][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.015102][T14192] Call Trace: [ 394.015111][T14192] [ 394.015120][T14192] dump_stack_lvl+0x189/0x250 [ 394.015159][T14192] ? __pfx____ratelimit+0x10/0x10 [ 394.015204][T14192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.015236][T14192] ? __pfx__printk+0x10/0x10 [ 394.015260][T14192] ? __might_fault+0xb0/0x130 [ 394.015293][T14192] should_fail_ex+0x414/0x560 [ 394.015326][T14192] _copy_from_iter+0x1db/0x16f0 [ 394.015362][T14192] ? rcu_is_watching+0x15/0xb0 [ 394.015398][T14192] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 394.015420][T14192] ? __pfx__copy_from_iter+0x10/0x10 [ 394.015453][T14192] ? __build_skb_around+0x257/0x3e0 [ 394.015482][T14192] ? netlink_sendmsg+0x642/0xb30 [ 394.015506][T14192] ? skb_put+0x11b/0x210 [ 394.015543][T14192] netlink_sendmsg+0x6b2/0xb30 [ 394.015577][T14192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.015606][T14192] ? aa_sock_msg_perm+0x94/0x160 [ 394.015636][T14192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.015663][T14192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.015688][T14192] __sock_sendmsg+0x219/0x270 [ 394.015742][T14192] ____sys_sendmsg+0x505/0x830 [ 394.015775][T14192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.015812][T14192] ? import_iovec+0x74/0xa0 [ 394.015838][T14192] ___sys_sendmsg+0x21f/0x2a0 [ 394.015867][T14192] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.015936][T14192] ? __fget_files+0x2a/0x420 [ 394.015959][T14192] ? __fget_files+0x3a0/0x420 [ 394.015995][T14192] __x64_sys_sendmsg+0x19b/0x260 [ 394.016031][T14192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.016069][T14192] ? __pfx_ksys_write+0x10/0x10 [ 394.016086][T14192] ? rcu_is_watching+0x15/0xb0 [ 394.016124][T14192] ? do_syscall_64+0xbe/0x3b0 [ 394.016148][T14192] do_syscall_64+0xfa/0x3b0 [ 394.016168][T14192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.016188][T14192] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.016210][T14192] ? clear_bhb_loop+0x60/0xb0 [ 394.016235][T14192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.016256][T14192] RIP: 0033:0x7fd60438e929 [ 394.016276][T14192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.016295][T14192] RSP: 002b:00007fd60524b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.016319][T14192] RAX: ffffffffffffffda RBX: 00007fd6045b6080 RCX: 00007fd60438e929 [ 394.016334][T14192] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 394.016347][T14192] RBP: 00007fd60524b090 R08: 0000000000000000 R09: 0000000000000000 [ 394.016360][T14192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.016372][T14192] R13: 0000000000000000 R14: 00007fd6045b6080 R15: 00007ffe394c89c8 [ 394.016406][T14192] [ 394.407915][T14180] bond0: left promiscuous mode [ 394.412894][T14180] bridge_slave_1: left promiscuous mode [ 394.426156][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.472004][T14180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.505373][T14188] bridge0: port 3(syz_tun) entered disabled state [ 394.537071][T14188] syz_tun (unregistering): left allmulticast mode [ 394.543680][T14188] syz_tun (unregistering): left promiscuous mode [ 394.550366][T14188] bridge0: port 3(syz_tun) entered disabled state [ 394.573034][T14196] netlink: 'syz.2.2622': attribute type 29 has an invalid length. [ 394.585718][T14200] netlink: 'syz.2.2622': attribute type 29 has an invalid length. [ 395.037343][T14227] __nla_validate_parse: 6 callbacks suppressed [ 395.037390][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2629'. [ 395.185529][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2633'. [ 395.239858][T14235] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 395.508149][T14252] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 395.938276][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2640'. [ 395.948138][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2640'. [ 396.492081][T14286] validate_nla: 2 callbacks suppressed [ 396.492106][T14286] netlink: 'syz.1.2650': attribute type 29 has an invalid length. [ 396.532784][T14286] netlink: 'syz.1.2650': attribute type 29 has an invalid length. [ 396.563276][T14286] netlink: 'syz.1.2650': attribute type 29 has an invalid length. [ 396.586877][T14286] netlink: 'syz.1.2650': attribute type 29 has an invalid length. [ 396.696781][T14295] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 396.923789][T14304] pim6reg: left allmulticast mode [ 397.117776][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2662'. [ 397.157772][T14308] bridge0: port 2(30ªX¹¦D) entered disabled state [ 397.165243][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.337706][T14311] tipc: Started in network mode [ 397.357766][T14311] tipc: Node identity 3a48966b5524, cluster identity 4711 [ 397.379403][T14311] tipc: Enabled bearer , priority 0 [ 397.410318][T14315] syzkaller0: entered promiscuous mode [ 397.424542][T14315] syzkaller0: entered allmulticast mode [ 397.496621][T14310] tipc: Resetting bearer [ 397.563886][T14310] tipc: Disabling bearer [ 397.570342][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 397.596276][T14330] netlink: 'syz.2.2667': attribute type 29 has an invalid length. [ 397.618185][T14335] netlink: 'syz.2.2667': attribute type 29 has an invalid length. [ 397.641793][T14330] netlink: 'syz.2.2667': attribute type 29 has an invalid length. [ 397.668880][T14330] netlink: 'syz.2.2667': attribute type 29 has an invalid length. [ 397.827166][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2671'. [ 397.916713][T14348] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2674'. [ 397.928011][T14346] SET target dimension over the limit! [ 397.948295][T14350] netlink: 'syz.0.2676': attribute type 1 has an invalid length. [ 397.955138][T14347] xt_socket: unknown flags 0x2 [ 397.956554][T14344] delete_channel: no stack [ 398.038446][T14350] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 398.295129][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2677'. [ 398.383751][T14371] FAULT_INJECTION: forcing a failure. [ 398.383751][T14371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.409376][T14371] CPU: 1 UID: 0 PID: 14371 Comm: syz.0.2682 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 398.409404][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.409414][T14371] Call Trace: [ 398.409423][T14371] [ 398.409430][T14371] dump_stack_lvl+0x189/0x250 [ 398.409466][T14371] ? __pfx____ratelimit+0x10/0x10 [ 398.409575][T14371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.409601][T14371] ? __pfx__printk+0x10/0x10 [ 398.409623][T14371] ? fs_reclaim_acquire+0x7d/0x100 [ 398.409658][T14371] should_fail_ex+0x414/0x560 [ 398.409687][T14371] prepare_alloc_pages+0x213/0x610 [ 398.409714][T14371] __alloc_frozen_pages_noprof+0x123/0x370 [ 398.409739][T14371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.409775][T14371] alloc_pages_bulk_noprof+0x560/0x710 [ 398.409802][T14371] ? alloc_pages_noprof+0xbe/0x190 [ 398.409823][T14371] kasan_populate_vmalloc+0xba/0x1a0 [ 398.409853][T14371] alloc_vmap_area+0xd51/0x1490 [ 398.409883][T14371] ? __pfx_alloc_vmap_area+0x10/0x10 [ 398.409898][T14371] ? __kasan_kmalloc+0x93/0xb0 [ 398.409914][T14371] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 398.409931][T14371] ? __get_vm_area_node+0x13f/0x300 [ 398.409947][T14371] ? prealloc_init+0x123/0x630 [ 398.409974][T14371] __get_vm_area_node+0x1f8/0x300 [ 398.409996][T14371] __vmalloc_node_range_noprof+0x301/0x12f0 [ 398.410015][T14371] ? prealloc_init+0x123/0x630 [ 398.410035][T14371] ? __lock_acquire+0xab9/0xd20 [ 398.410083][T14371] ? do_raw_spin_lock+0x121/0x290 [ 398.410105][T14371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 398.410127][T14371] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 398.410155][T14371] bpf_map_area_alloc+0x12d/0x180 [ 398.410187][T14371] ? prealloc_init+0x123/0x630 [ 398.410216][T14371] prealloc_init+0x123/0x630 [ 398.410247][T14371] ? __percpu_counter_init_many+0x364/0x380 [ 398.410277][T14371] htab_map_alloc+0x6ce/0xc70 [ 398.410309][T14371] map_create+0x903/0x1150 [ 398.410339][T14371] ? security_bpf+0x7e/0x300 [ 398.410372][T14371] __sys_bpf+0x67e/0x860 [ 398.410397][T14371] ? __pfx___sys_bpf+0x10/0x10 [ 398.410430][T14371] ? ksys_write+0x22a/0x250 [ 398.410448][T14371] ? __pfx_ksys_write+0x10/0x10 [ 398.410461][T14371] ? rcu_is_watching+0x15/0xb0 [ 398.410496][T14371] __x64_sys_bpf+0x7c/0x90 [ 398.410518][T14371] do_syscall_64+0xfa/0x3b0 [ 398.410533][T14371] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.410557][T14371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.410575][T14371] ? clear_bhb_loop+0x60/0xb0 [ 398.410596][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.410614][T14371] RIP: 0033:0x7f7a8a18e929 [ 398.410630][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.410645][T14371] RSP: 002b:00007f7a8b02e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.410664][T14371] RAX: ffffffffffffffda RBX: 00007f7a8a3b5fa0 RCX: 00007f7a8a18e929 [ 398.410677][T14371] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 2100000000000000 [ 398.410688][T14371] RBP: 00007f7a8b02e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.410699][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.410709][T14371] R13: 0000000000000000 R14: 00007f7a8a3b5fa0 R15: 00007ffda0960ec8 [ 398.410734][T14371] [ 398.783818][T14373] netlink: 'syz.1.2684': attribute type 29 has an invalid length. [ 398.974504][ T6059] IPVS: starting estimator thread 0... [ 399.087966][T14386] IPVS: using max 30 ests per chain, 72000 per kthread [ 399.260561][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 399.766695][T14420] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20002 - 0 [ 399.814273][T14420] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 399.854407][T14420] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 399.877928][T14420] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 400.000964][T14429] FAULT_INJECTION: forcing a failure. [ 400.000964][T14429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.044588][T14429] CPU: 1 UID: 0 PID: 14429 Comm: syz.1.2698 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 400.044623][T14429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.044636][T14429] Call Trace: [ 400.044645][T14429] [ 400.044655][T14429] dump_stack_lvl+0x189/0x250 [ 400.044697][T14429] ? __pfx____ratelimit+0x10/0x10 [ 400.044730][T14429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.044763][T14429] ? __pfx__printk+0x10/0x10 [ 400.044789][T14429] ? fs_reclaim_acquire+0x7d/0x100 [ 400.044824][T14429] should_fail_ex+0x414/0x560 [ 400.044858][T14429] prepare_alloc_pages+0x213/0x610 [ 400.044905][T14429] __alloc_frozen_pages_noprof+0x123/0x370 [ 400.044936][T14429] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.045045][T14429] alloc_pages_bulk_noprof+0x560/0x710 [ 400.045079][T14429] ? alloc_pages_noprof+0xbe/0x190 [ 400.045106][T14429] kasan_populate_vmalloc+0xba/0x1a0 [ 400.045144][T14429] alloc_vmap_area+0xd51/0x1490 [ 400.045181][T14429] ? __pfx_alloc_vmap_area+0x10/0x10 [ 400.045201][T14429] ? __kasan_kmalloc+0x93/0xb0 [ 400.045221][T14429] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 400.045250][T14429] ? __get_vm_area_node+0x13f/0x300 [ 400.045271][T14429] ? prealloc_init+0x123/0x630 [ 400.045299][T14429] __get_vm_area_node+0x1f8/0x300 [ 400.045328][T14429] __vmalloc_node_range_noprof+0x301/0x12f0 [ 400.045351][T14429] ? prealloc_init+0x123/0x630 [ 400.045376][T14429] ? __lock_acquire+0xab9/0xd20 [ 400.045429][T14429] ? do_raw_spin_lock+0x121/0x290 [ 400.045455][T14429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.045483][T14429] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 400.045518][T14429] bpf_map_area_alloc+0x12d/0x180 [ 400.045551][T14429] ? prealloc_init+0x123/0x630 [ 400.045580][T14429] prealloc_init+0x123/0x630 [ 400.045610][T14429] ? __percpu_counter_init_many+0x364/0x380 [ 400.045643][T14429] htab_map_alloc+0x6ce/0xc70 [ 400.045678][T14429] map_create+0x903/0x1150 [ 400.045710][T14429] ? security_bpf+0x7e/0x300 [ 400.045738][T14429] __sys_bpf+0x67e/0x860 [ 400.045768][T14429] ? __pfx___sys_bpf+0x10/0x10 [ 400.045815][T14429] ? ksys_write+0x22a/0x250 [ 400.045836][T14429] ? __pfx_ksys_write+0x10/0x10 [ 400.045852][T14429] ? rcu_is_watching+0x15/0xb0 [ 400.045895][T14429] __x64_sys_bpf+0x7c/0x90 [ 400.045940][T14429] do_syscall_64+0xfa/0x3b0 [ 400.045958][T14429] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.045989][T14429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.046011][T14429] ? clear_bhb_loop+0x60/0xb0 [ 400.046038][T14429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.046059][T14429] RIP: 0033:0x7fdfb8b8e929 [ 400.046079][T14429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.046099][T14429] RSP: 002b:00007fdfb9933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.046122][T14429] RAX: ffffffffffffffda RBX: 00007fdfb8db5fa0 RCX: 00007fdfb8b8e929 [ 400.046137][T14429] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 2100000000000000 [ 400.046151][T14429] RBP: 00007fdfb9933090 R08: 0000000000000000 R09: 0000000000000000 [ 400.046165][T14429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.046177][T14429] R13: 0000000000000000 R14: 00007fdfb8db5fa0 R15: 00007ffdfe05fd58 [ 400.046211][T14429] [ 400.588609][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 401.170515][T14479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2715'. [ 401.193610][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 401.597516][T14498] validate_nla: 4 callbacks suppressed [ 401.597540][T14498] netlink: 'syz.4.2717': attribute type 64 has an invalid length. [ 401.633042][T14479] veth3: entered allmulticast mode [ 401.757178][T14506] netlink: 'syz.2.2722': attribute type 3 has an invalid length. [ 401.784735][T14498] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2717'. [ 401.795574][T14506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2722'. [ 401.821435][T14509] netem: change failed [ 401.930461][T14515] FAULT_INJECTION: forcing a failure. [ 401.930461][T14515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.959414][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.1.2725 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 401.959447][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.959460][T14515] Call Trace: [ 401.959468][T14515] [ 401.959477][T14515] dump_stack_lvl+0x189/0x250 [ 401.959518][T14515] ? __pfx____ratelimit+0x10/0x10 [ 401.959549][T14515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.959580][T14515] ? __pfx__printk+0x10/0x10 [ 401.959614][T14515] should_fail_ex+0x414/0x560 [ 401.959665][T14515] _copy_to_user+0x31/0xb0 [ 401.959691][T14515] simple_read_from_buffer+0xe1/0x170 [ 401.959719][T14515] proc_fail_nth_read+0x1df/0x250 [ 401.959750][T14515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.959779][T14515] ? rw_verify_area+0x258/0x650 [ 401.959811][T14515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.959837][T14515] vfs_read+0x200/0x980 [ 401.959874][T14515] ? __pfx___mutex_lock+0x10/0x10 [ 401.959925][T14515] ? __pfx_vfs_read+0x10/0x10 [ 401.959958][T14515] ? __fget_files+0x2a/0x420 [ 401.960070][T14515] ? __fget_files+0x3a0/0x420 [ 401.960093][T14515] ? __fget_files+0x2a/0x420 [ 401.960124][T14515] ksys_read+0x145/0x250 [ 401.960160][T14515] ? __pfx_ksys_read+0x10/0x10 [ 401.960188][T14515] ? rcu_is_watching+0x15/0xb0 [ 401.960227][T14515] ? do_syscall_64+0xbe/0x3b0 [ 401.960251][T14515] do_syscall_64+0xfa/0x3b0 [ 401.960267][T14515] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.960297][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.960318][T14515] ? clear_bhb_loop+0x60/0xb0 [ 401.960343][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.960363][T14515] RIP: 0033:0x7fdfb8b8d33c [ 401.960381][T14515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 401.960399][T14515] RSP: 002b:00007fdfb9933030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 401.960426][T14515] RAX: ffffffffffffffda RBX: 00007fdfb8db5fa0 RCX: 00007fdfb8b8d33c [ 401.960441][T14515] RDX: 000000000000000f RSI: 00007fdfb99330a0 RDI: 0000000000000008 [ 401.960454][T14515] RBP: 00007fdfb9933090 R08: 0000000000000000 R09: 0000000000000000 [ 401.960466][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.960478][T14515] R13: 0000000000000000 R14: 00007fdfb8db5fa0 R15: 00007ffdfe05fd58 [ 401.960509][T14515] [ 402.531183][T14521] netlink: 'syz.1.2728': attribute type 5 has an invalid length. [ 402.570017][T14526] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 402.601644][T14526] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 402.810941][T14546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2735'. [ 402.820607][T14549] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 402.858828][T14546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2735'. [ 402.879388][T14546] tls_set_device_offload: netdev not found [ 403.383911][T14566] FAULT_INJECTION: forcing a failure. [ 403.383911][T14566] name failslab, interval 1, probability 0, space 0, times 0 [ 403.427704][T14575] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2742'. [ 403.442798][T14566] CPU: 1 UID: 0 PID: 14566 Comm: syz.1.2741 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 403.442829][T14566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.442842][T14566] Call Trace: [ 403.442850][T14566] [ 403.442859][T14566] dump_stack_lvl+0x189/0x250 [ 403.442899][T14566] ? __pfx____ratelimit+0x10/0x10 [ 403.442931][T14566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.442961][T14566] ? __pfx__printk+0x10/0x10 [ 403.442986][T14566] ? __pfx___might_resched+0x10/0x10 [ 403.443014][T14566] ? fs_reclaim_acquire+0x7d/0x100 [ 403.443044][T14566] should_fail_ex+0x414/0x560 [ 403.443076][T14566] should_failslab+0xa8/0x100 [ 403.443099][T14566] kmem_cache_alloc_noprof+0x73/0x3c0 [ 403.443128][T14566] ? getname_flags+0xb8/0x540 [ 403.443156][T14566] getname_flags+0xb8/0x540 [ 403.443183][T14566] __x64_sys_mkdirat+0x7a/0xa0 [ 403.443232][T14566] do_syscall_64+0xfa/0x3b0 [ 403.443250][T14566] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.443278][T14566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.443299][T14566] ? clear_bhb_loop+0x60/0xb0 [ 403.443322][T14566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.443341][T14566] RIP: 0033:0x7fdfb8b8e929 [ 403.443359][T14566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.443376][T14566] RSP: 002b:00007fdfb9933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 403.443397][T14566] RAX: ffffffffffffffda RBX: 00007fdfb8db5fa0 RCX: 00007fdfb8b8e929 [ 403.443412][T14566] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 0000000000000009 [ 403.443424][T14566] RBP: 00007fdfb9933090 R08: 0000000000000000 R09: 0000000000000000 [ 403.443436][T14566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.443447][T14566] R13: 0000000000000000 R14: 00007fdfb8db5fa0 R15: 00007ffdfe05fd58 [ 403.443478][T14566] [ 404.022228][T14597] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 404.079654][T14599] x_tables: duplicate underflow at hook 1 [ 404.303419][T14611] FAULT_INJECTION: forcing a failure. [ 404.303419][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.347918][T14611] CPU: 1 UID: 0 PID: 14611 Comm: syz.2.2756 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 404.347953][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.347966][T14611] Call Trace: [ 404.347975][T14611] [ 404.347983][T14611] dump_stack_lvl+0x189/0x250 [ 404.348024][T14611] ? __pfx____ratelimit+0x10/0x10 [ 404.348054][T14611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.348085][T14611] ? __pfx__printk+0x10/0x10 [ 404.348130][T14611] should_fail_ex+0x414/0x560 [ 404.348161][T14611] strncpy_from_user+0x36/0x290 [ 404.348190][T14611] getname_flags+0xf3/0x540 [ 404.348219][T14611] __x64_sys_mkdirat+0x7a/0xa0 [ 404.348251][T14611] do_syscall_64+0xfa/0x3b0 [ 404.348267][T14611] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.348296][T14611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.348315][T14611] ? clear_bhb_loop+0x60/0xb0 [ 404.348339][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.348357][T14611] RIP: 0033:0x7f6ecc38e929 [ 404.348376][T14611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.348393][T14611] RSP: 002b:00007f6eca1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 404.348414][T14611] RAX: ffffffffffffffda RBX: 00007f6ecc5b5fa0 RCX: 00007f6ecc38e929 [ 404.348429][T14611] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 0000000000000009 [ 404.348441][T14611] RBP: 00007f6eca1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.348454][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.348465][T14611] R13: 0000000000000000 R14: 00007f6ecc5b5fa0 R15: 00007ffde391aed8 [ 404.348495][T14611] [ 404.636172][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 404.683124][ T30] audit: type=1800 audit(1750145991.267:3): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2758" name="memory.events" dev="tmpfs" ino=2780 res=0 errno=0 [ 404.704780][ T30] audit: type=1804 audit(1750145991.277:4): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2758" name="/newroot/545/memory.events" dev="tmpfs" ino=2780 res=1 errno=0 [ 404.752729][T14618] team0: Port device team_slave_0 removed [ 404.912951][T14633] FAULT_INJECTION: forcing a failure. [ 404.912951][T14633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.933017][T14633] CPU: 0 UID: 0 PID: 14633 Comm: syz.3.2764 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 404.933048][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.933073][T14633] Call Trace: [ 404.933082][T14633] [ 404.933090][T14633] dump_stack_lvl+0x189/0x250 [ 404.933129][T14633] ? __pfx____ratelimit+0x10/0x10 [ 404.933159][T14633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.933187][T14633] ? __pfx__printk+0x10/0x10 [ 404.933208][T14633] ? __might_fault+0xb0/0x130 [ 404.933241][T14633] should_fail_ex+0x414/0x560 [ 404.933270][T14633] _copy_from_user+0x2d/0xb0 [ 404.933291][T14633] __sys_bpf+0x1ed/0x860 [ 404.933318][T14633] ? __pfx___sys_bpf+0x10/0x10 [ 404.933355][T14633] ? ksys_write+0x22a/0x250 [ 404.933375][T14633] ? __pfx_ksys_write+0x10/0x10 [ 404.933389][T14633] ? rcu_is_watching+0x15/0xb0 [ 404.933426][T14633] __x64_sys_bpf+0x7c/0x90 [ 404.933450][T14633] do_syscall_64+0xfa/0x3b0 [ 404.933466][T14633] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.933493][T14633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.933511][T14633] ? clear_bhb_loop+0x60/0xb0 [ 404.933534][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.933551][T14633] RIP: 0033:0x7fec3778e929 [ 404.933568][T14633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.933583][T14633] RSP: 002b:00007fec385bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.933603][T14633] RAX: ffffffffffffffda RBX: 00007fec379b5fa0 RCX: 00007fec3778e929 [ 404.933616][T14633] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 404.933627][T14633] RBP: 00007fec385bd090 R08: 0000000000000000 R09: 0000000000000000 [ 404.933639][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.933712][T14633] R13: 0000000000000000 R14: 00007fec379b5fa0 R15: 00007ffd52b28628 [ 404.933740][T14633] [ 405.340413][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'. [ 406.366475][T14690] rdma_op ffff88807ba509f0 conn xmit_rdma 0000000000000000 [ 406.373774][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 406.373801][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 406.373841][T14694] netlink: 'syz.2.2785': attribute type 12 has an invalid length. [ 406.373856][T14694] netlink: 'syz.2.2785': attribute type 11 has an invalid length. [ 406.435017][T14690] x_tables: duplicate underflow at hook 1 [ 406.512313][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 406.643470][T14710] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2790'. [ 406.681418][T14710] hsr_slave_0: left promiscuous mode [ 406.901570][T14718] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2794'. [ 408.481222][ T6804] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.509144][ T6804] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.592047][ T6804] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.614550][ T6804] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.615813][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.636764][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.644917][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.653743][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.671247][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.798980][T14771] gtp0: entered promiscuous mode [ 408.804034][T14771] gtp0: entered allmulticast mode [ 408.912501][ T6804] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.934450][ T6804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.956755][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 409.072023][ T6804] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.145033][ T6804] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.586956][ T6804] batadv1: left allmulticast mode [ 409.620015][ T6804] batadv1: left promiscuous mode [ 409.636820][ T6804] bridge0: port 4(batadv1) entered disabled state [ 409.657306][ T6804] bridge_slave_1: left allmulticast mode [ 409.663180][ T6804] bridge_slave_1: left promiscuous mode [ 409.670205][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.710643][ T6804] bridge_slave_0: left allmulticast mode [ 409.717297][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.761733][ T6804] tipc: Resetting bearer [ 410.338868][ T6804] tipc: Disabling bearer [ 410.455747][T14818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2832'. [ 410.754798][ T5854] Bluetooth: hci1: command tx timeout [ 411.061528][ T6804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.078131][ T6804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.090645][ T6804] bond0 (unregistering): (slave bond1): Releasing backup interface [ 411.099981][ T6804] bond0 (unregistering): Released all slaves [ 411.213615][ T6804] bond1 (unregistering): Released all slaves [ 411.232055][ T6804] bond2 (unregistering): Released all slaves [ 411.249108][ T6804] bond3 (unregistering): Released all slaves [ 411.270181][ T6804] bond4 (unregistering): Released all slaves [ 411.382144][ T6804] bond5 (unregistering): Released all slaves [ 411.501055][ T6804] bond6 (unregistering): Released all slaves [ 411.629403][ T6804] bond7 (unregistering): Released all slaves [ 411.646062][ T6804] bond8 (unregistering): Released all slaves [ 411.662936][ T6804] bond9 (unregistering): Released all slaves [ 411.775791][ T6804] bond10 (unregistering): Released all slaves [ 411.791731][ T6804] bond11 (unregistering): Released all slaves [ 412.834623][ T5854] Bluetooth: hci1: command tx timeout [ 413.565531][T14810] vlan3: entered allmulticast mode [ 413.570744][T14810] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 413.584234][T14812] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2829'. [ 413.628641][T14825] pim6reg: entered allmulticast mode [ 413.643243][T14827] pim6reg: left allmulticast mode [ 413.744808][T14836] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2837'. [ 413.749823][ T6804] tipc: Left network mode [ 414.503121][T14766] chnl_net:caif_netlink_parms(): no params data found [ 414.914508][ T5854] Bluetooth: hci1: command tx timeout [ 415.009470][T14878] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 415.256199][T14888] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 415.395095][T14878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 415.706906][T14894] bond7: entered promiscuous mode [ 415.811194][T14914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2857'. [ 415.922750][ T6804] hsr_slave_0: left promiscuous mode [ 415.934711][ T6804] hsr_slave_1: left promiscuous mode [ 415.940962][ T6804] batman_adv: batadv0: Removing interface: team0 [ 415.949859][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.958027][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.971584][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.979733][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.000572][ T6804] veth0_macvtap: left promiscuous mode [ 416.007038][ T6804] veth1_vlan: left promiscuous mode [ 416.013956][ T6804] veth0_vlan: left promiscuous mode [ 416.671836][ T6804] team0 (unregistering): Port device team_slave_1 removed [ 416.994497][ T5854] Bluetooth: hci1: command tx timeout [ 417.148654][T14909] netlink: 'syz.2.2856': attribute type 2 has an invalid length. [ 417.160079][T14909] netlink: 'syz.2.2856': attribute type 5 has an invalid length. [ 417.380161][T14766] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.404861][T14766] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.412294][T14766] bridge_slave_0: entered allmulticast mode [ 417.431066][T14766] bridge_slave_0: entered promiscuous mode [ 417.455908][T14766] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.463196][T14766] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.489047][T14766] bridge_slave_1: entered allmulticast mode [ 417.503318][T14766] bridge_slave_1: entered promiscuous mode [ 417.623639][T14766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.690928][T14766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.829790][T14766] team0: Port device team_slave_0 added [ 417.860515][T14766] team0: Port device team_slave_1 added [ 417.950237][ T6804] IPVS: stop unused estimator thread 0... [ 418.010777][T14766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.025900][T14947] netlink: 'syz.3.2866': attribute type 1 has an invalid length. [ 418.028152][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.096231][T14766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.120618][T14766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.142090][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.181159][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 418.198198][T14766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.323629][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 418.348120][T14957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2871'. [ 418.397845][T14766] hsr_slave_0: entered promiscuous mode [ 418.405573][T14766] hsr_slave_1: entered promiscuous mode [ 418.608462][T14969] netlink: 'syz.2.2874': attribute type 4 has an invalid length. [ 418.661376][T14969] netlink: 'syz.2.2874': attribute type 4 has an invalid length. [ 419.250997][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 419.303104][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 419.313544][T14766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.388471][T14766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.451491][T14766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.492947][T14766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.602126][T15003] syz_tun: entered allmulticast mode [ 419.634499][T15006] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 419.861636][T14996] syz_tun: left allmulticast mode [ 419.959578][T14766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.993539][T14766] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.022685][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.031723][ T6807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.067005][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.074419][ T6807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.189574][T15024] netlink: 'syz.1.2894': attribute type 23 has an invalid length. [ 420.219298][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 420.231665][T14766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.237711][T15025] openvswitch: netlink: Unknown nsh attribute 0 [ 420.254826][T15025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.478732][T15034] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2897'. [ 420.643354][T15041] tunl0: entered promiscuous mode [ 420.660670][T15041] netlink: 'syz.2.2900': attribute type 3 has an invalid length. [ 420.692465][T15041] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2900'. [ 420.785652][T14766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.901971][T14766] veth0_vlan: entered promiscuous mode [ 420.956805][T14766] veth1_vlan: entered promiscuous mode [ 421.117935][T14766] veth0_macvtap: entered promiscuous mode [ 421.149246][T14766] veth1_macvtap: entered promiscuous mode [ 421.202490][T15060] dvmrp0: entered allmulticast mode [ 421.240477][T14766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.303381][T15060] dvmrp0: left allmulticast mode [ 421.419580][T15074] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2910'. [ 421.421177][T14766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.481562][T14766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.498775][T14766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.511578][T14766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.523668][T14766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.792777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.826543][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.912373][T15089] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 421.965568][ T6804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.982672][ T6804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.258333][T15102] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2920'. [ 422.285352][T15104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2919'. [ 422.294789][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 422.317606][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 422.335702][T15106] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.382500][T15106] netlink: 'syz.0.2921': attribute type 4 has an invalid length. [ 422.413105][T15106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.072804][T15134] syzkaller1: entered promiscuous mode [ 423.092166][T15134] syzkaller1: entered allmulticast mode [ 423.413536][T15143] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 423.999919][T15156] netlink: 'syz.2.2939': attribute type 29 has an invalid length. [ 424.046005][T15156] netlink: 'syz.2.2939': attribute type 29 has an invalid length. [ 424.162036][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.172062][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.182842][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.193384][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.203245][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.242577][T15156] netlink: 'syz.2.2939': attribute type 29 has an invalid length. [ 424.289127][T15159] netlink: 'syz.2.2939': attribute type 29 has an invalid length. [ 424.506269][T15171] FAULT_INJECTION: forcing a failure. [ 424.506269][T15171] name failslab, interval 1, probability 0, space 0, times 0 [ 424.533692][T15171] CPU: 1 UID: 0 PID: 15171 Comm: syz.2.2945 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 424.533727][T15171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.533741][T15171] Call Trace: [ 424.533750][T15171] [ 424.533759][T15171] dump_stack_lvl+0x189/0x250 [ 424.533803][T15171] ? __pfx____ratelimit+0x10/0x10 [ 424.533839][T15171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.533872][T15171] ? __pfx__printk+0x10/0x10 [ 424.533900][T15171] ? __pfx___might_resched+0x10/0x10 [ 424.533962][T15171] ? fs_reclaim_acquire+0x7d/0x100 [ 424.533995][T15171] should_fail_ex+0x414/0x560 [ 424.534030][T15171] should_failslab+0xa8/0x100 [ 424.534062][T15171] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 424.534085][T15171] ? __request_module+0x2d1/0x5e0 [ 424.534121][T15171] kstrdup+0x42/0x100 [ 424.534150][T15171] __request_module+0x2d1/0x5e0 [ 424.534182][T15171] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 424.534220][T15171] ? __pfx___request_module+0x10/0x10 [ 424.534255][T15171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 424.534305][T15171] nfnetlink_rcv+0x68e/0x2520 [ 424.534364][T15171] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 424.534403][T15171] ? __dev_queue_xmit+0x27e/0x3a70 [ 424.534447][T15171] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 424.534505][T15171] ? ref_tracker_free+0x63a/0x7d0 [ 424.534534][T15171] ? __copy_skb_header+0xa7/0x550 [ 424.534564][T15171] ? __pfx_ref_tracker_free+0x10/0x10 [ 424.534613][T15171] ? skb_clone+0x246/0x3a0 [ 424.534645][T15171] ? __netlink_deliver_tap+0x807/0x850 [ 424.534670][T15171] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.534702][T15171] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.534726][T15171] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.534757][T15171] netlink_unicast+0x75b/0x8d0 [ 424.534791][T15171] netlink_sendmsg+0x805/0xb30 [ 424.534827][T15171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.534856][T15171] ? aa_sock_msg_perm+0x94/0x160 [ 424.534889][T15171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.534917][T15171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.534943][T15171] __sock_sendmsg+0x219/0x270 [ 424.534980][T15171] __sys_sendto+0x3bd/0x520 [ 424.535007][T15171] ? __pfx___sys_sendto+0x10/0x10 [ 424.535049][T15171] ? count_memcg_event_mm+0x21/0x260 [ 424.535109][T15171] ? exc_page_fault+0x76/0xf0 [ 424.535144][T15171] ? do_user_addr_fault+0xc8a/0x1390 [ 424.535178][T15171] __x64_sys_sendto+0xde/0x100 [ 424.535205][T15171] do_syscall_64+0xfa/0x3b0 [ 424.535223][T15171] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.535251][T15171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.535273][T15171] ? clear_bhb_loop+0x60/0xb0 [ 424.535298][T15171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.535325][T15171] RIP: 0033:0x7f6ecc3907bc [ 424.535356][T15171] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 424.535375][T15171] RSP: 002b:00007f6eca1f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.535404][T15171] RAX: ffffffffffffffda RBX: 00007f6eca1f4fc0 RCX: 00007f6ecc3907bc [ 424.535419][T15171] RDX: 0000000000000020 RSI: 00007f6eca1f5010 RDI: 0000000000000003 [ 424.535431][T15171] RBP: 0000000000000000 R08: 00007f6eca1f4f14 R09: 000000000000000c [ 424.535444][T15171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 424.535509][T15171] R13: 00007f6eca1f4f68 R14: 00007f6eca1f5010 R15: 0000000000000000 [ 424.535542][T15171] [ 424.939187][ T6816] batman_adv: batadv0: Removing interface: netdevsim0 [ 424.958271][T15139] netlink: 'syz.0.2930': attribute type 4 has an invalid length. [ 425.480635][T15187] FAULT_INJECTION: forcing a failure. [ 425.480635][T15187] name failslab, interval 1, probability 0, space 0, times 0 [ 425.493540][T15187] CPU: 0 UID: 0 PID: 15187 Comm: syz.3.2949 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 425.493570][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.493585][T15187] Call Trace: [ 425.493593][T15187] [ 425.493603][T15187] dump_stack_lvl+0x189/0x250 [ 425.493647][T15187] ? __pfx____ratelimit+0x10/0x10 [ 425.493681][T15187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.493715][T15187] ? __pfx__printk+0x10/0x10 [ 425.493753][T15187] ? rcu_is_watching+0x15/0xb0 [ 425.493799][T15187] should_fail_ex+0x414/0x560 [ 425.493866][T15187] should_failslab+0xa8/0x100 [ 425.493894][T15187] kmem_cache_alloc_noprof+0x73/0x3c0 [ 425.493929][T15187] ? skb_clone+0x212/0x3a0 [ 425.493966][T15187] skb_clone+0x212/0x3a0 [ 425.493999][T15187] bpf_clone_redirect+0xad/0x3d0 [ 425.494047][T15187] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 425.494077][T15187] ? preempt_schedule+0xae/0xc0 [ 425.494105][T15187] ? bpf_test_run+0x205/0x830 [ 425.494129][T15187] ? preempt_schedule_common+0x83/0xd0 [ 425.494159][T15187] ? preempt_schedule+0xae/0xc0 [ 425.494187][T15187] ? __pfx_preempt_schedule+0x10/0x10 [ 425.494213][T15187] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 425.494249][T15187] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 425.494290][T15187] ? __local_bh_disable_ip+0xf1/0x190 [ 425.494324][T15187] ? __pfx___cant_migrate+0x10/0x10 [ 425.494357][T15187] ? __local_bh_enable_ip+0x12d/0x1c0 [ 425.494389][T15187] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 425.494426][T15187] ? bpf_test_timer_continue+0x136/0x350 [ 425.494457][T15187] bpf_test_run+0x38b/0x830 [ 425.494495][T15187] ? bpf_test_run+0x205/0x830 [ 425.494527][T15187] ? __pfx_bpf_test_run+0x10/0x10 [ 425.494579][T15187] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 425.494604][T15187] ? convert___skb_to_skb+0x3d/0x590 [ 425.494630][T15187] bpf_prog_test_run_skb+0xb30/0x1560 [ 425.494673][T15187] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 425.494698][T15187] bpf_prog_test_run+0x2c7/0x340 [ 425.494735][T15187] __sys_bpf+0x4a4/0x860 [ 425.494767][T15187] ? __pfx___sys_bpf+0x10/0x10 [ 425.494811][T15187] ? ksys_write+0x22a/0x250 [ 425.494835][T15187] ? __pfx_ksys_write+0x10/0x10 [ 425.494851][T15187] ? rcu_is_watching+0x15/0xb0 [ 425.494893][T15187] __x64_sys_bpf+0x7c/0x90 [ 425.494920][T15187] do_syscall_64+0xfa/0x3b0 [ 425.494939][T15187] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.494970][T15187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.494991][T15187] ? clear_bhb_loop+0x60/0xb0 [ 425.495030][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.495051][T15187] RIP: 0033:0x7fec3778e929 [ 425.495069][T15187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.495088][T15187] RSP: 002b:00007fec385bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.495111][T15187] RAX: ffffffffffffffda RBX: 00007fec379b5fa0 RCX: 00007fec3778e929 [ 425.495126][T15187] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 425.495139][T15187] RBP: 00007fec385bd090 R08: 0000000000000000 R09: 0000000000000000 [ 425.495152][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.495164][T15187] R13: 0000000000000000 R14: 00007fec379b5fa0 R15: 00007ffd52b28628 [ 425.495204][T15187] [ 426.275056][ T5854] Bluetooth: hci3: command tx timeout [ 426.367318][T15207] __nla_validate_parse: 4 callbacks suppressed [ 426.367343][T15207] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2954'. [ 426.442865][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 427.050328][ T6816] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 427.068480][ T6816] bond0 (unregistering): Released all slaves [ 427.093409][ T6816] bond1 (unregistering): Released all slaves [ 427.112200][ T6816] bond2 (unregistering): Released all slaves [ 427.243497][ T6816] bond3 (unregistering): Released all slaves [ 427.260637][ T6816] bond4 (unregistering): Released all slaves [ 427.373926][ T6816] bond5 (unregistering): Released all slaves [ 427.391993][ T6816] bond6 (unregistering): Released all slaves [ 427.509239][ T6816] bond7 (unregistering): (slave veth7): Releasing active interface [ 427.520061][ T6816] bond7 (unregistering): Released all slaves [ 427.592731][T15211] vlan2: entered allmulticast mode [ 427.623819][T15211] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 427.790871][ T6816] tipc: Left network mode [ 427.912697][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 427.992483][T15226] netlink: 'syz.4.2960': attribute type 29 has an invalid length. [ 428.008193][T15234] netlink: 'syz.4.2960': attribute type 29 has an invalid length. [ 428.160228][T15226] netlink: 'syz.4.2960': attribute type 29 has an invalid length. [ 428.296699][T15234] netlink: 'syz.4.2960': attribute type 29 has an invalid length. [ 428.354509][ T5854] Bluetooth: hci3: command tx timeout [ 428.491937][T15160] chnl_net:caif_netlink_parms(): no params data found [ 428.667766][T15249] FAULT_INJECTION: forcing a failure. [ 428.667766][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 428.721439][T15249] CPU: 0 UID: 0 PID: 15249 Comm: syz.2.2966 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 428.721473][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.721485][T15249] Call Trace: [ 428.721494][T15249] [ 428.721503][T15249] dump_stack_lvl+0x189/0x250 [ 428.721546][T15249] ? __pfx____ratelimit+0x10/0x10 [ 428.721577][T15249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.721607][T15249] ? __pfx__printk+0x10/0x10 [ 428.721636][T15249] ? __pfx___might_resched+0x10/0x10 [ 428.721668][T15249] ? fs_reclaim_acquire+0x7d/0x100 [ 428.721709][T15249] should_fail_ex+0x414/0x560 [ 428.721742][T15249] should_failslab+0xa8/0x100 [ 428.721767][T15249] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.721788][T15249] ? nfnetlink_rcv+0x1fe9/0x2520 [ 428.721817][T15249] ? __alloc_skb+0x112/0x2d0 [ 428.721846][T15249] __alloc_skb+0x112/0x2d0 [ 428.721872][T15249] netlink_ack+0x146/0xa50 [ 428.721892][T15249] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.721944][T15249] nfnetlink_rcv+0x1f3f/0x2520 [ 428.721988][T15249] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 428.722026][T15249] ? __dev_queue_xmit+0x27e/0x3a70 [ 428.722084][T15249] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 428.722134][T15249] ? ref_tracker_free+0x63a/0x7d0 [ 428.722161][T15249] ? __copy_skb_header+0xa7/0x550 [ 428.722190][T15249] ? __pfx_ref_tracker_free+0x10/0x10 [ 428.722238][T15249] ? skb_clone+0x246/0x3a0 [ 428.722269][T15249] ? __netlink_deliver_tap+0x807/0x850 [ 428.722293][T15249] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.722324][T15249] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.722347][T15249] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.722376][T15249] netlink_unicast+0x75b/0x8d0 [ 428.722411][T15249] netlink_sendmsg+0x805/0xb30 [ 428.722446][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.722479][T15249] ? aa_sock_msg_perm+0x94/0x160 [ 428.722509][T15249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.722538][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.722565][T15249] __sock_sendmsg+0x219/0x270 [ 428.722602][T15249] __sys_sendto+0x3bd/0x520 [ 428.722627][T15249] ? __pfx___sys_sendto+0x10/0x10 [ 428.722664][T15249] ? count_memcg_event_mm+0x21/0x260 [ 428.722718][T15249] ? exc_page_fault+0x76/0xf0 [ 428.722754][T15249] ? do_user_addr_fault+0xc8a/0x1390 [ 428.722787][T15249] __x64_sys_sendto+0xde/0x100 [ 428.722815][T15249] do_syscall_64+0xfa/0x3b0 [ 428.722833][T15249] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.722863][T15249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.722884][T15249] ? clear_bhb_loop+0x60/0xb0 [ 428.722909][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.722929][T15249] RIP: 0033:0x7f6ecc3907bc [ 428.722949][T15249] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 428.722967][T15249] RSP: 002b:00007f6eca1f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 428.722989][T15249] RAX: ffffffffffffffda RBX: 00007f6eca1f4fc0 RCX: 00007f6ecc3907bc [ 428.723004][T15249] RDX: 0000000000000020 RSI: 00007f6eca1f5010 RDI: 0000000000000003 [ 428.723017][T15249] RBP: 0000000000000000 R08: 00007f6eca1f4f14 R09: 000000000000000c [ 428.723030][T15249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 428.723042][T15249] R13: 00007f6eca1f4f68 R14: 00007f6eca1f5010 R15: 0000000000000000 [ 428.723075][T15249] [ 429.441189][ T6816] hsr_slave_0: left promiscuous mode [ 429.455402][ T6816] hsr_slave_1: left promiscuous mode [ 429.562441][T15277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2969'. [ 430.419878][ T2135] smc: removing ib device syz0 [ 430.439251][ T5854] Bluetooth: hci3: command tx timeout [ 430.660245][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.672083][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.694675][T15160] bridge_slave_0: entered allmulticast mode [ 430.707386][T15160] bridge_slave_0: entered promiscuous mode [ 430.729094][T15273] tipc: Enabled bearer , priority 10 [ 430.776418][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.799099][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.979358][T15160] bridge_slave_1: entered allmulticast mode [ 431.041033][T15160] bridge_slave_1: entered promiscuous mode [ 431.138881][T15294] netlink: 'syz.4.2976': attribute type 2 has an invalid length. [ 431.154005][T15290] netlink: 'syz.0.2978': attribute type 29 has an invalid length. [ 431.183485][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 431.193606][T15295] netlink: 'syz.0.2978': attribute type 29 has an invalid length. [ 431.219875][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 431.346631][T15292] netlink: 'syz.0.2978': attribute type 29 has an invalid length. [ 431.411431][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.435299][T15290] netlink: 'syz.0.2978': attribute type 29 has an invalid length. [ 431.443794][T15300] netlink: 'syz.2.2980': attribute type 12 has an invalid length. [ 431.495075][T15301] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2980'. [ 431.532798][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.746749][T15160] team0: Port device team_slave_0 added [ 431.775720][T15160] team0: Port device team_slave_1 added [ 431.864846][ T6050] tipc: Node number set to 1869387371 [ 431.937785][T15306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.061065][T15323] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2984'. [ 432.191860][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.224320][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.268040][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.312129][T15335] IPVS: set_ctl: invalid protocol: 72 127.0.0.1:20002 [ 432.431038][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.459739][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.502650][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.514665][ T5854] Bluetooth: hci3: command tx timeout [ 432.582989][T15339] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2988'. [ 432.966746][T15160] hsr_slave_0: entered promiscuous mode [ 433.023849][T15160] hsr_slave_1: entered promiscuous mode [ 433.058257][T15160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.066500][T15160] Cannot create hsr debugfs directory [ 433.072997][T15349] validate_nla: 5 callbacks suppressed [ 433.073014][T15349] netlink: 'syz.0.2990': attribute type 29 has an invalid length. [ 433.097597][T15347] netlink: 'syz.0.2990': attribute type 29 has an invalid length. [ 433.470133][ T6059] IPVS: starting estimator thread 0... [ 433.484685][T15363] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.521520][T15351] netlink: 'syz.0.2990': attribute type 29 has an invalid length. [ 433.724203][T15368] IPVS: using max 29 ests per chain, 69600 per kthread [ 433.731194][T15373] netlink: 'syz.2.3000': attribute type 2 has an invalid length. [ 433.764956][T15373] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3000'. [ 433.818904][ T6816] IPVS: stop unused estimator thread 0... [ 434.502420][T15411] openvswitch: netlink: Multiple metadata blocks provided [ 434.525984][T15410] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 434.557790][T15413] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 434.591231][T15410] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 434.649781][T15413] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 434.818986][T15160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.840971][T15160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.862559][T15160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.891851][T15160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.066642][T15160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.106046][T15160] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.122347][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.129563][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.151225][T15442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3020'. [ 435.159579][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.160858][T15442] netlink: 'syz.2.3020': attribute type 7 has an invalid length. [ 435.167364][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.184625][T15442] netlink: 'syz.2.3020': attribute type 8 has an invalid length. [ 435.196366][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 435.309233][T15445] syz_tun: entered allmulticast mode [ 435.407438][T15444] syz_tun: left allmulticast mode [ 435.633775][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.770270][T15160] veth0_vlan: entered promiscuous mode [ 435.795746][T15160] veth1_vlan: entered promiscuous mode [ 435.909204][T15160] veth0_macvtap: entered promiscuous mode [ 435.945029][T15160] veth1_macvtap: entered promiscuous mode [ 436.014017][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.056023][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.098384][T15160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.131612][T15160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.150522][T15160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.160022][T15160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.196356][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 436.443631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.469675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.566713][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.601357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.855778][T15505] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3041'. [ 436.884764][T15503] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3040'. [ 437.602381][T15527] syz_tun: entered allmulticast mode [ 437.794938][T15526] syz_tun: left allmulticast mode [ 437.852362][T15535] nbd: couldn't find a device at index 27392 [ 438.019142][T15544] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3053'. [ 438.132658][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.143073][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.151788][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.161039][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.174940][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.431368][T15567] FAULT_INJECTION: forcing a failure. [ 438.431368][T15567] name failslab, interval 1, probability 0, space 0, times 0 [ 438.444164][T15567] CPU: 0 UID: 0 PID: 15567 Comm: syz.1.3060 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 438.444191][T15567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.444204][T15567] Call Trace: [ 438.444222][T15567] [ 438.444231][T15567] dump_stack_lvl+0x189/0x250 [ 438.444271][T15567] ? __pfx____ratelimit+0x10/0x10 [ 438.444301][T15567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.444388][T15567] ? __pfx__printk+0x10/0x10 [ 438.444413][T15567] ? rcu_is_watching+0x15/0xb0 [ 438.444454][T15567] should_fail_ex+0x414/0x560 [ 438.444487][T15567] should_failslab+0xa8/0x100 [ 438.444512][T15567] kmem_cache_alloc_noprof+0x73/0x3c0 [ 438.444543][T15567] ? skb_clone+0x212/0x3a0 [ 438.444574][T15567] skb_clone+0x212/0x3a0 [ 438.444603][T15567] bpf_clone_redirect+0xad/0x3d0 [ 438.444645][T15567] bpf_prog_64e505a7b7f97a05+0x5e/0x67 [ 438.444670][T15567] ? ktime_get+0x3e/0x1f0 [ 438.444696][T15567] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 438.444716][T15567] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.444744][T15567] ? ktime_get+0x3e/0x1f0 [ 438.444761][T15567] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 438.444787][T15567] ? __local_bh_disable_ip+0xf1/0x190 [ 438.444814][T15567] ? __pfx___cant_migrate+0x10/0x10 [ 438.444843][T15567] ? __local_bh_enable_ip+0x12d/0x1c0 [ 438.444888][T15567] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 438.444922][T15567] ? bpf_test_timer_continue+0x136/0x350 [ 438.444953][T15567] bpf_test_run+0x38b/0x830 [ 438.444987][T15567] ? bpf_test_run+0x205/0x830 [ 438.445017][T15567] ? __pfx_bpf_test_run+0x10/0x10 [ 438.445074][T15567] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 438.445097][T15567] ? convert___skb_to_skb+0x3d/0x590 [ 438.445123][T15567] bpf_prog_test_run_skb+0xb30/0x1560 [ 438.445164][T15567] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 438.445187][T15567] bpf_prog_test_run+0x2c7/0x340 [ 438.445224][T15567] __sys_bpf+0x4a4/0x860 [ 438.445254][T15567] ? __pfx___sys_bpf+0x10/0x10 [ 438.445296][T15567] ? ksys_write+0x22a/0x250 [ 438.445319][T15567] ? __pfx_ksys_write+0x10/0x10 [ 438.445334][T15567] ? rcu_is_watching+0x15/0xb0 [ 438.445374][T15567] __x64_sys_bpf+0x7c/0x90 [ 438.445399][T15567] do_syscall_64+0xfa/0x3b0 [ 438.445417][T15567] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.445446][T15567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.445467][T15567] ? clear_bhb_loop+0x60/0xb0 [ 438.445492][T15567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.445513][T15567] RIP: 0033:0x7f2c2938e929 [ 438.445538][T15567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.445556][T15567] RSP: 002b:00007f2c2a10e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.445576][T15567] RAX: ffffffffffffffda RBX: 00007f2c295b5fa0 RCX: 00007f2c2938e929 [ 438.445591][T15567] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 438.445603][T15567] RBP: 00007f2c2a10e090 R08: 0000000000000000 R09: 0000000000000000 [ 438.445616][T15567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.445629][T15567] R13: 0000000000000000 R14: 00007f2c295b5fa0 R15: 00007ffc0dadf278 [ 438.445661][T15567] [ 438.966114][T15551] chnl_net:caif_netlink_parms(): no params data found [ 439.042896][T15581] syz_tun: entered allmulticast mode [ 439.132749][T15589] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3065'. [ 439.145785][T15590] xt_CONNSECMARK: invalid mode: 0 [ 439.311894][T15551] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.330499][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.343752][T15551] bridge_slave_0: entered allmulticast mode [ 439.352391][T15551] bridge_slave_0: entered promiscuous mode [ 439.375846][T15580] syz_tun: left allmulticast mode [ 439.385862][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.402446][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.421722][T15551] bridge_slave_1: entered allmulticast mode [ 439.465195][T15551] bridge_slave_1: entered promiscuous mode [ 439.663670][T15551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.701856][T15551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.823158][T15551] team0: Port device team_slave_0 added [ 439.836771][T15551] team0: Port device team_slave_1 added [ 439.916568][T15551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.924006][T15622] netlink: 'syz.0.3075': attribute type 4 has an invalid length. [ 439.932020][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.968272][T15551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.989618][T15551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.994950][T15626] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3079'. [ 440.002740][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.072436][T15551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.208021][T15551] hsr_slave_0: entered promiscuous mode [ 440.215604][T15551] hsr_slave_1: entered promiscuous mode [ 440.222150][T15551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.230472][T15551] Cannot create hsr debugfs directory [ 440.275001][ T5857] Bluetooth: hci2: command tx timeout [ 440.281059][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3081'. [ 440.290616][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3081'. [ 440.777653][T15651] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3086'. [ 440.812158][T15655] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3089'. [ 440.823826][T15651] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3086'. [ 440.847109][T15551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.896820][T15653] openvswitch: netlink: Flow key attr not present in new flow. [ 441.036174][T15551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.123167][T15666] netlink: 'syz.0.3091': attribute type 83 has an invalid length. [ 441.250004][T15551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.581859][T15683] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 441.921801][T15551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.943535][T15715] __nla_validate_parse: 4 callbacks suppressed [ 441.943557][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 441.986318][T15551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.021006][T15551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.067182][T15551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.278367][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3104'. [ 442.355507][ T5857] Bluetooth: hci2: command tx timeout [ 442.389926][T15730] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 442.401520][T15551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.423803][T15551] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.432402][T15730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3105'. [ 442.454502][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.461795][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.494027][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.501378][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.504833][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 442.632006][T15734] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3105'. [ 442.634698][T15743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3109'. [ 442.652486][T15734] netlink: 'syz.1.3105': attribute type 5 has an invalid length. [ 443.091166][T11537] IPVS: starting estimator thread 0... [ 443.097748][T15768] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 443.225856][T15771] IPVS: using max 27 ests per chain, 64800 per kthread [ 443.252394][T15551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.299614][T15774] tipc: Started in network mode [ 443.305557][T15774] tipc: Node identity 62e8424f68e6, cluster identity 4711 [ 443.313087][T15774] tipc: Enabled bearer , priority 0 [ 443.399584][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 443.440081][T15779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3117'. [ 443.468192][T15779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3117'. [ 443.489771][T15774] syzkaller0: entered promiscuous mode [ 443.522418][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 443.532172][T15774] syzkaller0: entered allmulticast mode [ 443.535579][T15774] tipc: Resetting bearer [ 443.661156][T15791] netlink: 'syz.1.3123': attribute type 2 has an invalid length. [ 443.661944][ T2135] tipc: Resetting bearer [ 443.682684][T15773] tipc: Resetting bearer [ 444.408219][T11533] tipc: Node number set to 168706639 [ 444.436151][ T5857] Bluetooth: hci2: command tx timeout [ 445.295147][T15773] tipc: Disabling bearer [ 445.358143][T15551] veth0_vlan: entered promiscuous mode [ 445.404332][T15551] veth1_vlan: entered promiscuous mode [ 445.521615][T15551] veth0_macvtap: entered promiscuous mode [ 445.562228][T15551] veth1_macvtap: entered promiscuous mode [ 445.779259][T15551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.811517][T15551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.846279][T15551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.863947][T15551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.873466][T15551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.883559][T15551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.020066][ T6816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.039200][ T6816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.150546][ T6807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.160691][ T6807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.514711][ T5857] Bluetooth: hci2: command tx timeout [ 446.591486][T15847] netlink: 'syz.2.3137': attribute type 11 has an invalid length. [ 447.140441][T15864] IPv4: Oversized IP packet from 127.202.26.0 [ 447.362371][T15877] netlink: 'syz.1.3146': attribute type 2 has an invalid length. [ 447.442997][T15881] __nla_validate_parse: 2 callbacks suppressed [ 447.443023][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 447.520771][T15881] netlink: 'syz.3.3149': attribute type 5 has an invalid length. [ 447.580640][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3149'. [ 447.827483][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 447.925910][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 447.969304][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3153'. [ 447.998835][T15899] Bluetooth: MGMT ver 1.23 [ 448.151066][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3154'. [ 448.902382][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.923216][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.932582][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.941356][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.967565][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.264635][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3165'. [ 449.265260][T15944] IPv6: Can't replace route, no match found [ 449.683427][T15924] chnl_net:caif_netlink_parms(): no params data found [ 449.812071][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3174'. [ 449.897526][T15974] netlink: 'syz.3.3176': attribute type 10 has an invalid length. [ 449.910227][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'. [ 450.221062][T15924] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.263235][T15924] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.285305][T15924] bridge_slave_0: entered allmulticast mode [ 450.285488][T15987] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3182'. [ 450.293911][T15924] bridge_slave_0: entered promiscuous mode [ 450.319122][T15924] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.343842][T15924] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.361982][T15924] bridge_slave_1: entered allmulticast mode [ 450.376964][T15924] bridge_slave_1: entered promiscuous mode [ 450.393636][T15991] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 450.709642][T15924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.787782][T15924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.071971][T15924] team0: Port device team_slave_0 added [ 451.081530][ T5854] Bluetooth: hci0: command tx timeout [ 451.119226][T15924] team0: Port device team_slave_1 added [ 451.250292][T15924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.258137][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.315045][T15924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.385629][T15924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.409094][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.441898][T16033] netlink: 'syz.3.3198': attribute type 1 has an invalid length. [ 451.465098][T16033] netlink: 'syz.3.3198': attribute type 1 has an invalid length. [ 451.469394][T15924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.473980][T16033] netlink: 'syz.3.3198': attribute type 1 has an invalid length. [ 451.499966][T16033] netlink: 'syz.3.3198': attribute type 2 has an invalid length. [ 451.535938][T16034] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 451.673033][T15924] hsr_slave_0: entered promiscuous mode [ 451.688958][T15924] hsr_slave_1: entered promiscuous mode [ 451.716814][T15924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.727128][T16042] sctp: [Deprecated]: syz.3.3200 (pid 16042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.727128][T16042] Use struct sctp_sack_info instead [ 451.744532][T15924] Cannot create hsr debugfs directory [ 451.751794][T16042] sctp: [Deprecated]: syz.3.3200 (pid 16042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.751794][T16042] Use struct sctp_sack_info instead [ 452.300315][T16066] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 452.331841][T16066] bond1: entered promiscuous mode [ 452.337628][T16066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.428116][T16066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.465818][T16066] bond1: (slave bond2): making interface the new active one [ 452.473239][T16066] bond2: entered promiscuous mode [ 452.494006][T16066] bond1: (slave bond2): Enslaving as an active interface with an up link [ 452.770577][T15924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 452.789240][T15924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.806344][T15924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.852760][T15924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.004685][T16098] __nla_validate_parse: 40 callbacks suppressed [ 453.004710][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 453.104202][T16104] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 453.156691][ T5854] Bluetooth: hci0: command tx timeout [ 453.189390][T15924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.218627][T15924] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.246080][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.253371][ T6811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.293844][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.301075][ T6811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.317592][T16110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 453.400305][T16116] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3224'. [ 453.933646][T15924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.031207][T16136] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 454.206420][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 454.617574][T16160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3237'. [ 454.725715][T16167] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 454.830005][T16167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.839488][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 454.861903][T15924] veth0_vlan: entered promiscuous mode [ 454.899192][T16167] netlink: 'syz.0.3238': attribute type 10 has an invalid length. [ 454.901317][T16163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.916304][T16163] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 454.931373][T16163] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 455.113304][T16167] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.148538][T16167] bond0: (slave team0): Enslaving as an active interface with an up link [ 455.171622][T16173] gretap0: entered allmulticast mode [ 455.230331][T16173] bond1: (slave gretap0): making interface the new active one [ 455.234433][ T5854] Bluetooth: hci0: command tx timeout [ 455.239411][T16173] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 455.281262][T15924] veth1_vlan: entered promiscuous mode [ 455.349469][T15924] veth0_macvtap: entered promiscuous mode [ 455.361683][T15924] veth1_macvtap: entered promiscuous mode [ 455.427253][T15924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.470072][T15924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.568535][T15924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.607595][T15924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.626498][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 455.633944][T15924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.659565][T15924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.933595][T16204] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3250'. [ 456.265789][ T6811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.273863][ T6811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.314510][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 456.402594][ T6811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.413176][ T6811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.539433][T16223] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 456.578116][T16223] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 456.614636][T16222] unknown channel width for channel at 909000KHz? [ 456.753292][T16233] netlink: 'syz.0.3260': attribute type 33 has an invalid length. [ 456.761758][T16233] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3260'. [ 456.939245][T16226] netlink: 'syz.0.3260': attribute type 33 has an invalid length. [ 457.095894][T16235] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.126932][T16235] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.314965][ T5854] Bluetooth: hci0: command tx timeout [ 457.424701][T16250] bridge0: port 3(gretap0) entered blocking state [ 457.455494][T16250] bridge0: port 3(gretap0) entered disabled state [ 457.474600][T16250] gretap0: entered allmulticast mode [ 457.482038][T16250] gretap0: entered promiscuous mode [ 457.490645][T16250] bridge0: port 3(gretap0) entered blocking state [ 457.497339][T16250] bridge0: port 3(gretap0) entered forwarding state [ 457.945417][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.970800][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.982954][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.011187][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.019316][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 458.070488][T16255] __nla_validate_parse: 7 callbacks suppressed [ 458.070512][T16255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3265'. [ 458.307506][T16271] macvtap1: entered promiscuous mode [ 458.312911][T16271] vlan0: entered promiscuous mode [ 458.339458][T16271] macvtap1: entered allmulticast mode [ 458.346726][T16271] vlan0: entered allmulticast mode [ 458.351911][T16271] veth0_vlan: entered allmulticast mode [ 458.375403][T16271] vlan0: left allmulticast mode [ 458.381268][T16271] veth0_vlan: left allmulticast mode [ 458.387314][T16271] vlan0: left promiscuous mode [ 458.398206][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 458.905419][T16296] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 458.912467][T16296] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.116699][ T5854] Bluetooth: hci5: command tx timeout [ 460.657539][T16299] syz_tun: entered allmulticast mode [ 460.663717][T16299] syz_tun: left allmulticast mode [ 460.828243][ T6811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.894479][ T6811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 460.928743][ T6811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 461.136428][ T6811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.171538][ T6811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 461.186646][ T6811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 461.281494][T16323] netlink: 'syz.1.3287': attribute type 29 has an invalid length. [ 461.336366][ T6811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.354145][ T6811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 461.366006][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'. [ 461.372596][ T6811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 461.487767][T16337] netlink: 'syz.1.3291': attribute type 29 has an invalid length. [ 461.530736][T16343] netlink: 'syz.1.3291': attribute type 29 has an invalid length. [ 461.643311][ T6811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.661941][ T6811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 461.704198][ T6811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 461.734594][T16337] netlink: 'syz.1.3291': attribute type 29 has an invalid length. [ 461.776811][T16343] netlink: 'syz.1.3291': attribute type 29 has an invalid length. [ 461.796801][T16346] syz_tun: entered allmulticast mode [ 461.806918][T16261] chnl_net:caif_netlink_parms(): no params data found [ 461.962201][T16345] syz_tun: left allmulticast mode [ 462.195051][ T5854] Bluetooth: hci5: command tx timeout [ 462.252807][T16261] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.261161][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'. [ 462.290201][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3298'. [ 462.303290][T16261] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.320332][T16261] bridge_slave_0: entered allmulticast mode [ 462.335039][T16362] netlink: 'syz.0.3298': attribute type 14 has an invalid length. [ 462.345299][T16261] bridge_slave_0: entered promiscuous mode [ 462.384691][T16261] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.392437][T16261] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.400550][T16261] bridge_slave_1: entered allmulticast mode [ 462.413882][T16261] bridge_slave_1: entered promiscuous mode [ 462.541386][T16261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.874484][T16380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.432547][ T6811] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 463.449390][ T6811] geneve2 (unregistering): left promiscuous mode [ 463.923541][ T6811] bond0 (unregistering): left promiscuous mode [ 463.930303][ T6811] bond_slave_0: left promiscuous mode [ 463.936395][ T6811] bond_slave_1: left promiscuous mode [ 463.942523][ T6811] dummy0: left promiscuous mode [ 463.949625][ T6811] bridge_slave_1: left promiscuous mode [ 463.964352][ T6811] team0: Port device bond0 removed [ 463.973157][ T6811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.984268][ T6811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.995124][ T6811] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 464.008382][ T6811] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 464.022165][ T6811] bond0 (unregistering): Released all slaves [ 464.039260][ T6811] bond1 (unregistering): Released all slaves [ 464.172913][ T6811] bond2 (unregistering): Released all slaves [ 464.274617][ T5854] Bluetooth: hci5: command tx timeout [ 464.282631][ T6811] bond3 (unregistering): Released all slaves [ 464.406502][ T6811] bond4 (unregistering): Released all slaves [ 464.422969][ T6811] bond5 (unregistering): Released all slaves [ 464.440936][ T6811] bond6 (unregistering): Released all slaves [ 464.478077][ C0] ------------[ cut here ]------------ [ 464.483777][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 464.489820][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 464.496119][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 464.508024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.518087][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 464.523296][ C0] Code: 73 af 00 e9 45 ff ff ff e8 b2 fc 4b 00 48 c7 c7 50 f3 fa 8d 48 89 de 4c 89 f2 e8 a0 58 82 03 e9 4d ff ff ff e8 96 fc 4b 00 90 <0f> 0b e8 8e fc 4b 00 90 0f 0b e8 86 fc 4b 00 90 0f 0b 0f 1f 00 90 [ 464.542914][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 464.549000][ C0] RAX: ffffffff8174625a RBX: 00007780ffff0000 RCX: ffff88801ced3c00 [ 464.557002][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 464.564996][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a8bc04 [ 464.572988][ C0] R10: dffffc0000000000 R11: ffffffff89ed54e0 R12: ffffffff89ed54e0 [ 464.580972][ C0] R13: ffffffff81a8bc04 R14: 000000017fff0000 R15: dffffc0000000000 [ 464.588978][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 464.597934][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.604555][ C0] CR2: 00007f2c271f5f98 CR3: 0000000076638000 CR4: 00000000003526f0 [ 464.612570][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.620581][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.628575][ C0] Call Trace: [ 464.631871][ C0] [ 464.634816][ C0] ? in_dev_free_rcu+0x49/0x60 [ 464.639604][ C0] kfree+0x77/0x440 [ 464.643456][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 464.648766][ C0] ? rcu_core+0xc34/0x1710 [ 464.653200][ C0] in_dev_free_rcu+0x49/0x60 [ 464.657846][ C0] rcu_core+0xca5/0x1710 [ 464.662142][ C0] ? __lock_acquire+0xab9/0xd20 [ 464.667044][ C0] ? __pfx_rcu_core+0x10/0x10 [ 464.671757][ C0] ? rcu_qs+0xc4/0x170 [ 464.675845][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 464.680362][ C0] ? sched_clock_cpu+0x74/0x430 [ 464.685238][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 464.690019][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 464.695253][ C0] handle_softirqs+0x286/0x870 [ 464.700057][ C0] ? schedule+0x165/0x360 [ 464.704409][ C0] ? run_ksoftirqd+0x9b/0x100 [ 464.709107][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 464.714437][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 464.719510][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 464.724567][ C0] run_ksoftirqd+0x9b/0x100 [ 464.729086][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 464.734211][ C0] smpboot_thread_fn+0x53f/0xa60 [ 464.739173][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 464.744254][ C0] kthread+0x70e/0x8a0 [ 464.748383][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 464.753877][ C0] ? __pfx_kthread+0x10/0x10 [ 464.758481][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.763704][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.768923][ C0] ? __pfx_kthread+0x10/0x10 [ 464.773534][ C0] ret_from_fork+0x3fc/0x770 [ 464.778154][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.783299][ C0] ? __switch_to_asm+0x39/0x70 [ 464.788094][ C0] ? __switch_to_asm+0x33/0x70 [ 464.792962][ C0] ? __pfx_kthread+0x10/0x10 [ 464.797573][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.802369][ C0] [ 464.805489][ C0] Modules linked in: [ 464.809620][ C0] ---[ end trace 0000000000000000 ]--- [ 464.815171][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 464.820417][ C0] Code: 73 af 00 e9 45 ff ff ff e8 b2 fc 4b 00 48 c7 c7 50 f3 fa 8d 48 89 de 4c 89 f2 e8 a0 58 82 03 e9 4d ff ff ff e8 96 fc 4b 00 90 <0f> 0b e8 8e fc 4b 00 90 0f 0b e8 86 fc 4b 00 90 0f 0b 0f 1f 00 90 [ 464.840105][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 464.846255][ C0] RAX: ffffffff8174625a RBX: 00007780ffff0000 RCX: ffff88801ced3c00 [ 464.854306][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 464.862298][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a8bc04 [ 464.870321][ C0] R10: dffffc0000000000 R11: ffffffff89ed54e0 R12: ffffffff89ed54e0 [ 464.878399][ C0] R13: ffffffff81a8bc04 R14: 000000017fff0000 R15: dffffc0000000000 [ 464.886431][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 464.895431][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.902036][ C0] CR2: 00007f2c271f5f98 CR3: 0000000076638000 CR4: 00000000003526f0 [ 464.910050][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.918065][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.926109][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 464.933806][ C0] Kernel Offset: disabled [ 464.938147][ C0] Rebooting in 86400 seconds..