last executing test programs: 2.312406083s ago: executing program 1 (id=1377): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80, 0xb, 0x4}}}}]}, 0x40}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0xffff}}]}, 0x24}}, 0x840) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000060a0b040000000000000000020000003c000480380001800a0001006cdc73c01291540b3ce312696d6974000000280002800800034000000004080004400000000008000340000000030c000140000000004a9c010073797a30000000002400058008000140000000050800014000008917080001400000001d0800014000000004140000001100e50000000000000000000000000a00"/178], 0xa8}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104f0000200000956088fe00000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.969068913s ago: executing program 1 (id=1385): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r3 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:4\t\nm'], 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 1.841718566s ago: executing program 1 (id=1389): socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 1.722271963s ago: executing program 3 (id=1394): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x4dcfb000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 1.661570836s ago: executing program 4 (id=1395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c430d000000000000000000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf52120000000a000600ff"], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1.560956978s ago: executing program 2 (id=1397): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @default, @remote, @netrom, @netrom, @remote, @default, @null]}, &(0x7f00000000c0)=0x48, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x1, 0x6, 0x32, &(0x7f0000000180)=""/50}) 1.503555689s ago: executing program 2 (id=1398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000023c0)={@cgroup, 0x36, 0x0, 0x2, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002400)={@fallback=r0, r0, 0x9, 0x4, 0x0, @void, @value=r0, @void, @void, r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002440)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x2}, &(0x7f0000002500)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002600)={r4, 0xa4, &(0x7f0000002540)=[@in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0xca, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000002640)=0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x91}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000080)="8a10cc3adf7312c8a5446bd736182a6f3a09a81bbc06286e564041767856cf5bd14f12fcfc2fe01cc07f30eedb98990ad096efbd1f99fd805ffc5c230d33d3ea0699fab423d5d81dbc73b9b9fcdfa3342f06a367233296e1883bc20ae4058af9f5bb2a701a8d6a9f58ff9f4cbee9289fe24623a787713aac2ad48de9ae0d21a7eafe74fc1854ed8bdb66f28631e761dbb36630223fa7706bc540a2b8e48696efee575e45da72b9bb10", &(0x7f0000000240)=""/4096, &(0x7f0000001240)="0a1a68f819ab60289e284b38e80203dcc5985caa04fbbb20c6ab337f278b5de76590270247c0e6f9cbcef8fb8ed936e606aef25e326738849634e7358d3c2321b6a9df1b52087c3b92b8d3e4dfc530911cd113aabb804afb732c86b4d7343923865dd5db39d834d4a71a440a95bf32a58714c16eff90170b3fc18864132284c4b6b0c7568d64339eb60a7e99022a3cf49a01241f7ca5d22013c71b0223fea00889b676b691af8d921904d58246a8d6f18dd80b7d123ada576310f9e3492d2b737f95dd9ed5fa543088f55449dd4a69f1a008508f76406968d22474f74bfbcee7d6497936669cc7469d67eda5eaf545ff5c8e91ba93b01669e8ddc83f5d78a865d011d700c05967b961269080b322e72f959502e80d72eeb2467c3318c60c40610ec01249e68bf60a567f4f70be67d2f65320dcbaabebf92cdab98d30439eef600e28112e5040533108942d6865d22d784085da397e6e499f56fd3f381bd274694d08536c9b6c7539e096141dd1b3ba9269979bb96c796cdf6c00d4b6164956c33cab95d7b95dd49d7dc810e431c712b87a9b22b44c288a12597a13681fba933426ecdb095f893c4fd469f65fe059d749939983b09505c155375e70adb85fd3452b9780263a196249ada452705ca0fc8745cfa7da9b04da71f00726432576e474c137f70eae0f3de9c7ce8197057fceb8ee6f432d5a3b74e4021121a7a1ca997a2e6232f9ddc646f8f124a0d2246202a15a8c3b471a4dc3071260c5dd3e9d4b8711dbb8a9707ead9add1b091dc6d42ee84c0c350f613a7982e5bd72d6a2a5c9aea9b951fef9535c64f11b5b4514c934de4e65875709c3f90f413e03e5aaf29b3793a87ef4e5de96e8c8a136283b1eaf3a02aab35768568d3be513163ba82f9a20229099e379537237ae64fb638f4d305d712e0ac73ef1e26ad164fd9e2055e9c86259b675bdc8641ccb2d5ff22d504cb0063997978aa985b07c5a1dcd941a7c5ea66875bd89c9da68707c68056ceb055a59ed0580b75124a10b36086592e064b3380c26353ecfa3917b6ea1286d626b7f75e65673b3802f51b0e3d1a595a587586f6525d5dde7ce8ee9d893674f77bb27533ae04433b81daa09eb08e9004fd68237382a11416f7d4cfd66aaa328a88eeb8f626b2fead9e67fbf5113551894bc0431c6439bab288117ead3625ccbe8a4253c3b74e4ae10bc4542b95ab8bebd2f04ef256647b0717d5a35d2bfb608922231cd95908b67d391dd65fcbafd347c80bdfa14f499e35f60e3bb3584d4a37b25ee40fe4b45cf737f4df03b943e017ead3e86835d5a089223eaffffcd62714dce294e3d9234e30667bb1a0a667bc5a2b999b859a63204ffe365469178ee814eace6f54221e236f5a9466944327f4fc2ae4105eec4bfde8beea26a1c1a392da599de4e5ac0725dc8e1fd0c8fd7c0e30097916b51f0b5fdefd004baa743b1fe6dee1bf1f216bbdb9e3d06ec5a854bc722bde7bed4601a5d9501cb4e5b5b6489fdd71b51df12c6151ce06e5423a9d0190c1c50228671193e28c2ae4e41e818d4e74dab7375f49dd7200d83280b7a04276462d3886f3452aaf509ae69e28c7f1bc15e8a902a6d819574788fbbfbaffe535319340d853f0009156e6ef86e1980d26264cdca2f2455d35ce146a12d0b267a6c2acfa891fd45982cd871684c81a908355dfca40dda661e01a1652902e477550d8561d1cd31771279ef305d5033a19975dcbb446cb00e89913ac9785dcc201e1c6ecf778e269b35a92c58ab64a7c2cc802020700fb602b1c0f6c00668ba3b8f166efb3704cf7d3ac2e5ad2a6b8205112fb19dcb03e97b5f82a04d5ed775d7cb7acb958366b09f85b506ad825460f137cc7c17d4c454186b82370d0156c1ee45edb00f2778145095b9ad5cddf54c1632848b923778fa249a6e7973911fe67ebd5c3fbd10994bd184a6aef75cbc73ca7be28bb50d68b3670bc79f129972cb8dcef14396c2bb3caef013c075f5669ed8a6e23ea89778b529daf0942ebf0bc431158e6795930dcbd07e5473cb1a038ad70e1f91660a1c76ac5655711a2ac3053f6638394c220a558ad79b5cd737e9b8ed0a783e52f76258994ba356542c174e671d1a32d7d03805946de975f6fefd316f9c430aafcec2d3f60fb5f61d9340a3a9417abea6a3cd6abf95d4abf5c0d4cb2b895d40bd38c938b284a27dffb891e747a7cac96af77135ee7a42e7e6ded6c6f6267861c0d8a548e6952ffc6ff2b5d3afb4e50e8206988333a45a25a2291c90ef93deccff69e8ea721977b7b9ebb4b62f17c916f6e4272ef7146b72331bd5d1e4ebac7730b02655266fc1ac9b51e1083aec39c94a896e8211fd0d92ed6df4d6558aa60d9575d48252cad18114999f36b8e4c332612f0892f3519c9ee36fa8239918633adb0b88aaa3f08cd89cd69507b13c71f21ad63f6f20a15f04dbfcb7422000c5c2ca778f8cebff502a18d2e7e70c4023ad4cd8366362aeba124ec3459820ca82e7fd06f58ed9f04e3016230a24abdbc613b241cb086c22e7265e6a15e9acde9e7663b47e3388c13639d5f7a44c21390ebf118a6a414b2c74d2da50eb3280bc84860dd6a87fbe7fb50c6043abf7e4129447d84eff417e90c287a7d49a78a02fd4057e92bd9b35f49a1b2c0ae3571f0501da030339662434fe25e1256db9c75fc967e1f9cda28d79b4b8d10b90ac9d5fb742fa9760c6dadc766e2fefb1d33f0669509d0ede87ee94341a94432fe31c433bb5340d8925180b782e5e0ae5b6693d6f566ada292c2c62ca1030035626e1f558204a7556592f499f833459495f8393c727008289a67ae840719d4dc8441112445b8486b33d7cfebfc5207f70bf8eef7fcc44c48d603d5243e8d25a8877aeae32187b0bd2c50c2e641a4a1aade133ca6d2d1ecfb7775ec2940250216f5450e418eb986d09090b241d0d71beb09156997761b774e2038cef82c8fef19e53509bef5c5746db3ceda8f4ab0a5d751a94281d44159b22f5503386e01be77843ba1aee7ba94bfd7c3009a090db00d50fe07d45be13cd3ceceac6b1fddd730cb5619228335e522fbb1dd0609b97a8d287d215c1771aa0e0475b0ad9e661e5c260882414ec563691122b49b9d643b0d41e76fb0f3a1f1df8fc3e8fc2321a13c115ce3353663a9208214197d5fe2b05d43b128d6d88d071ca7dc9f1f53ad41661844cbd5d12b16f059ba3877b2ede92241dceb720dad0580805084e80d45ec0b529a35122e0fc4c5681b1daf126587a7e219011e80d2303b675b6990601f0e0215e1da5bd87035d3ed819bdc670fe0863905515a6e36227f9f4085b4e36df58a5bdd27a46c33aeed745b14701d18c448abf1ed283ed634cd4b42c3cd90bcf158221f65a3bcf85e1a38e183859e44a30d125215990512f277f863d66437588804cf648ef3d57497d0e88195e998c4ec8a58d72e618360907d2ee3bd2dcc1df42a0b69a675c9ac619e15ed71e9181bbfb5e62905d2a937e13d1c606c664e5e12708f32478d5123e58831d303cb5a45888cd8974979b34600834959bf650a609bcb2719bc9cf681f3137a55a4060252985e9a18ab60dfb2090f6f42fd8a210720d764060096c54e85a7e2011807cdedf44761f6613a88cbb257983e37cea212aaea15f17e83233827a5de5bf551c3b5a3a40a5f2e5ccbe098d04b9c15a2e64bec64c75a29a712b69166576f3c8206fb5501833ac51468a88c74e1598f42fd32c14bb386d50ebfef83511e0e2915624257cf7b5ec63875a9e3d580251ac3aaa06ba852209394429bf39318aaa5b74b4333812a390c050f4cc2b819b779b27987eed1cf6296142707ce543c097307ee71f555c34dfb7ac7235e80f32915dfeac68333e187c7ed8d3de7c9002d0a6563fe6b737e9716937e9e07a456de4e23a9217653d2e1b9ccafa8690c35266fb91e74fdb4485875c41ea08007893af3326c10aece671c69fa26431b2a2213de9afe6c1462ced3b70448b72e056bcb0d4b397f2a0594452b979e21ec347bb1bb87a1627feeab4ed847003a54cf826d7b490f152bcbe8c624ff77d2d0f28a7413d880df7e2e41b2cc2744284711b6dc5739d7f2f6b79bc85cf3242d7de49ffef891b884eaa364c4a565d0e02afabc77ae992470447db145aa9ea8bb7dd1672bf181d39b26a4ada37b01da750b82d39e5f991540dd9f6e41dd6838be2a47133e2796db3dc08ac3ac9ac4fa5bc509970fc703b4dfca176538f1b873153d977276aeb4248dc3a5960720dcf07fb5d02cd69131cdec032ad7fd8aec18066ee035ecc7d6e895bbdf3b01434d3d401597ffe2542bd712aef92deece4f60704ea5e4fb141b4e2bc684f77cff03221780378a9e7a1ce900dc93a5065118282e4f5fd87f865780b1fbf2acedbededdaea5359e2b16b5f84d3d970857ebcec9034ddf2526737daba773c5d4942704a180d23035880e34dfa1b6d23452598175c9c02922dee42527cc4a58adfcf2d5bee6851622c7cdaab4537ef094d347c8adf8960956a1d9625ed8244eccdfa2767f418bb96d8ccee7cdb00fedfed75a9db86bdb52f2102066847a4250ca33663610c5231b90927124d9ac898401a8ab4ab48dbcd317c01539460caf45662b61775256facdcc9d4a5954902625c629ab6368e412ce7ac28ddc84f17d2d53d3f29a38eace88a7bfaf415ec7678b41c1157a44fb94419162fa32adcc68624719699562cf0131cf0adb0ed1d16fb81ccf5a7c4119d080549503de1b44744b3abba9dfa62fd2a63e16933f890715ded466ba6e7746aaea5c0de4353ae60175ff8e1bfa7f590ad70a2858df8e4a75dae24e9e5d57ccab04441412fc90e41475a5fb569248a3cf3be4301a1d9441d1eeadd9949107ab2b00c7de5f6f0d34421a4f6d2a5802f2c81876c1fad8778a941d14f1df2a495044063d81555fc74bee41a0cb0e9eb5ff8d923f5949f8597b21ee1927269a638eb9c30a992439a9b44fee48a71e7c3aef78695ab66949a99a7a608b10ca1a22c03861e9ce1f2de48b34d3d9413b75e87476f65cca5ba32d5280db6f214c3b486321d1b6df468a7f2f523b27ec961fc619f53b415866af1277d3cdab38c1ecbaa06683b87dbf0f9ca586f5bf3dac5afbf6e9fd66f5d6c1ca1e7f5c48c597b1e615100882f5ed8bc544e640d027a3e7ae8cde9adcb029bb47d9ef2f64cdcd8c7abdfeffd22e33a6fb54cf6d57d151c064e7f43592ce210bfd7d87b98c07038ec097f397ab7a87aadf90347ecc6cb8623fbce0b92bde8457bc3acb5a622b3be36b50c1ed3eea3f967feb4078b14c0680ab2b80898e3bc625018e2e1293fa4c84687618a061137e61c4a3d3cfeb1c0ce570f894dc9ad833e89d28b4e4b1807fcc74c0e8cf0b2418c811dde947403d87496bae89a5eeb8a5ecdde47933ab23def3d1c3c779067d20d01d6fb35b0ed5675cf07b7ec2743804102708a353d3c3374a9d82ed1d0b6681bcbbc1bd49f90ca01433a56e231102c7139fc2cb4d2f6aa1054f0eb564cfe4c25bc3374bd3303b6fd0aca49dc7c832374c532cc02811f5a1f8e342de600dc6f2d777a04c2648de53304b8bffbdfabd2d05785b0cec3ca24d92da457858ca96ac4c5071b8c26525e6b9be933e21be4eaa10b1e56f18e576cb2fa8ea974cc70003bf3dbdb0bad88e25ab4c7637dc1597b9cdd0e5c632b74f996e4d562fd49da12867191603d41dfa8c952827b20cd08b3112a3968271a97fbd04809bf96caaea37411cdf32f441dbe882bf3cd95f90f5fc9042a5eafe491f67d099bfb", &(0x7f0000002240)="4087d28cc2619feb9c284f35f55f6c240758a5b3f5ddc82356fcaebaa3e895ba861bdd466e6fc0af24f622a05ec37c364b03b473622485ac326c2e47c0757e13020ab9ed496949e5ad08979c5f5123f1b97efbe5412ab047c76b833ce8644a70ebcb66ba567f814a8057802d87e2fc87466154", 0x2, r2, 0x4}, 0x38) 1.341036283s ago: executing program 4 (id=1400): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffe4, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001a00)=""/146, 0x92}, {&(0x7f0000001ac0)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4060, 0xfdc}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4dd}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x102, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x17000000}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) bind$tipc(r0, 0x0, 0x0) 1.29583541s ago: executing program 2 (id=1403): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@multicast2, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) 1.109181113s ago: executing program 2 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfcfd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.064339933s ago: executing program 4 (id=1406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) 900.984071ms ago: executing program 3 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r2 = socket(0x10, 0x5, 0xfffffffa) write(r2, &(0x7f0000000040)="2400000011005f0414c5a5b0554038d64500000100010000950000000000000000000100", 0x85) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x1ce0ef95c5c0bdc8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r4, &(0x7f00000000c0)="63c9ae05f1eef8adf196a8a01e6ccb26bfe3dd726a963821928a24d7646cd79b06384d1e8886f68cb8ca68984edc1e0235985932fd04979fee82841957b023d736d03d5d82ec257802a47d612bd46892b9c080724d407607f73dd6", &(0x7f0000000240)=""/220}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f00000004c0)=""/246, &(0x7f0000000380)=0xf6) 899.623976ms ago: executing program 4 (id=1408): r0 = socket$inet(0x2, 0xa, 0x90) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff50000fa00ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r5], 0x50}}, 0x4040040) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYBLOB="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", @ANYRES32=r11], 0x128}, 0x24008041) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r14, @ANYBLOB], 0x40}}, 0x24008810) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) setsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 869.463945ms ago: executing program 2 (id=1409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) 869.172126ms ago: executing program 0 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000"], 0xdc}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r7}, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)={0x1, 0x2b8, 0x401, {}, {r8, r9/1000+10000}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x38, 0x2, 0x0, 0x0, "67ea9de9016688940312c0f9c8887d7635e8dd6ae342b7b5f83ea3998dacbfcd624de6b3b85500e10f1886dc3816f403627e81bfafacabfa2bd03e3671c18f8c"}}, 0x80}, 0x1, 0x0, 0x0, 0x4024}, 0x20000000) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) shutdown(r1, 0x1) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) 826.330063ms ago: executing program 1 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES8=r1, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0xa0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r3], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 825.132441ms ago: executing program 3 (id=1412): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9d7769b0f539d000e684f7754bfd824a47ff"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0xc) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x6}, {0x0}, &(0x7f0000000080)=[{&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/4104, 0x1008}, {&(0x7f00000001c0)=""/216, 0xd8}], 0x4, 0xb}}], 0x48}, 0x4) 673.212711ms ago: executing program 2 (id=1413): unshare(0x22020600) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) (async) read(r0, &(0x7f0000000080)=""/186, 0xba) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 672.873799ms ago: executing program 1 (id=1414): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="480100001000130727bd700000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000150000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000007f00000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=r1, @ANYBLOB="060000004c0014007368613100"/80], 0x148}}, 0x0) 663.822357ms ago: executing program 4 (id=1415): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xdc, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x2c}]}, @lsrr={0x83, 0xf, 0xed, [@multicast2, @loopback, @broadcast]}, @generic={0x89, 0xb, "9264ed39f367d88c22"}, @end, @noop, @generic={0x83, 0xe, "0b70e9494bda3bca5a9d11c7"}]}}, "eb"}}}}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001880)={r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x5, 0x8, 0xe, 0xffff, 0x0, 0x81, 0xd424}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @empty, @void, {@canfd={0xd, {{0x1}, 0x3d, 0x0, 0x0, 0x0, "f6688a91c694cadd537d1f1365790f3ef68c65834c06f7646d050687da12b38d375e883abb5059880d3dbfe3f522ec3dcd94d7a92124a050e69f797b8f80eb5d"}}}}, &(0x7f0000000040)={0x1, 0x3, [0x99, 0x6e1, 0x18e, 0xa7d]}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000300ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}}, 0x4040040) 608.608269ms ago: executing program 3 (id=1416): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@generic={0x0, 0x4, 'Z\x00'}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@private}, {@broadcast}]}]}}}}}) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="d3faf53aa6ded8786da40c51cf42cb1676aae306107badebb913e8c0c057185a03fca7d48a548f82808c7bf8bbbeed28264931416267ee097dfe8fce0d3b328eaee60794ec32af08be79ea1a7b364b50feee1ed9d3f05844d87648e6528e4ae4bcbee8ca4601d4ae87e45ecaadf67add5077778a8915e138c3a77f2323e3586077884c7014ca007df5a2a610208ce6871bdfed86e1b1e6778a5d4e92984f3b9cc967ec67cd7856e32dad011ead929279b9", 0xb1}, {&(0x7f0000000680)="760cf63bb81c0dc771f30e583913c8fbcc56b27671fae4b5922cc51db27d38eda3da5871c118da6dfe1281883ec657b227eb7d6f9e68fe08d09e2a9ebb1344f4696a58ca1b58a8cfd517f56d96be5b9508f475f1800536b60e7014481664d7cc2b708ad71724b9ea", 0x68}, {&(0x7f0000000780)="1108d1b59dae290da3e466f40db964302a963b91d7f6ff66e1e4bddeffeed1b7774958c03103e3fa75ca47a8f2fe7ae3ae3daa17ee1b32053ce64e10f04110a63c5098fb4bb61df75cdfebec097a4ab219c6adf682e5cc1602524e2d6375ff655bef0798f9d31d796112a2ec7bf890a4b48bd05029d6e5e779f0197fffca479b17d07fdb6c91ad08a4fec35023d2e3d77e3071d8d56d0cfde27489369a", 0x9d}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10b8}, 0x2000f7c9) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0xe22, 0x0, @private0, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x10000000, @local, 0x2}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delnexthop={0x30, 0x69, 0x122, 0x70bd2b, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x30}}, 0x24000805) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000ac0)={0x4c, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="eaffffff", @ANYRES16=r10, @ANYBLOB="01002cbd700004000000050000000800090002000000"], 0x1c}}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 477.024488ms ago: executing program 3 (id=1417): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x44}}, @rdma_args={0x0, 0x114, 0x1, {{0x9, 0xfff}, {&(0x7f0000000340)=""/8}, &(0x7f0000000400)=[{&(0x7f0000000380)}], 0x0, 0x40, 0x7fffffff}}], 0xd8, 0x40}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000140)=@ethtool_cmd={0x12, 0x6, 0xffffffff, 0x20, 0x0, 0x0, 0xe2, 0xfe, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x8, 0xfd, 0x45}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 454.764757ms ago: executing program 0 (id=1418): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000685b6c5617ad066276a881fb623f809321d994e14deca4f6f9ba3ab88eef6a61"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000040)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000280)=r3, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x3, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x576b}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x24002800) 365.839592ms ago: executing program 4 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfcfd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 320.987193ms ago: executing program 0 (id=1420): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/122, &(0x7f00000001c0)=0x7a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000004000000040000020000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000300), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x89fe, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000200)) 197.083371ms ago: executing program 0 (id=1421): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x10000001}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0xfff, 0x1, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x2c, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @exit, @ldst={0x0, 0x2, 0x3, 0xa, 0xa, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$MAP_CREATE(0x24, &(0x7f0000000080)=@bloom_filter, 0xa1) socketpair(0x21, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendto(0xffffffffffffffff, &(0x7f0000000100)="e34696b5f36dbe5bb9b13a452a879ae369b9381cd249f407e8fd3fa965675788bdf491f25e5bb22c9320c422b482a6ab2efc", 0x32, 0x3404c0d0, 0x0, 0x0) 116.107934ms ago: executing program 3 (id=1422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000be00)=[{&(0x7f000000ac40)="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", 0x5dd}], 0x1}}], 0x6, 0x20000004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028001}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r6, 0x10, 0x7d44, 0x1}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES64=r8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f00000008c0)={'veth0_vlan\x00', 0x7fff}) 45.148423ms ago: executing program 0 (id=1423): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.221121ms ago: executing program 1 (id=1424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0xd8, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xac, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x97, 0x2, "97bc82e3353123120f89fba1ec80000000e520f9cdd21a87e971b003f2fdf54e732f030ebdfba40139abde41009080f038e79a368c06df7102b61c2fcda8391c90ae58bbcd756fec259d42f5ad9b9415a8b13ea563af5d1d3d907933ae662267323ba0ab67fd0c6c259d3c1f25fd2dd3063facded9625a32fcef2b1458d8bddffd7e3f836ca120e0be00"/147}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa992}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4004014) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x3, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000002c0)={r6, 0x43, "ed5734bdf1dea0207958e5f7e2e8cdf2736339f279a3e451f3c4e45069e754aa80dc826e51f09be8b203728caa176df9b2278b6e16015c15f1bed0082a83a3674fc584"}, &(0x7f0000000340)=0x4b) 0s ago: executing program 0 (id=1425): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r5 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r5, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async) readv(r5, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 66.282180][ T5844] cgroup: Unknown subsys name 'net' [ 66.403715][ T5844] cgroup: Unknown subsys name 'cpuset' [ 66.411349][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.837985][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.571914][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.578285][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.749624][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.756878][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.764957][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.773113][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.780521][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.788586][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.796921][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.804642][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.805741][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.822438][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.825319][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.842898][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.851212][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.859494][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.867683][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.907803][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.915439][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.922981][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.930970][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.938369][ T5182] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.939548][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.946274][ T5182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.972245][ T5182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.980136][ T5182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.988486][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.122197][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 72.287641][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.295569][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.304068][ T5855] bridge_slave_0: entered allmulticast mode [ 72.311123][ T5855] bridge_slave_0: entered promiscuous mode [ 72.319849][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.327276][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.334989][ T5855] bridge_slave_1: entered allmulticast mode [ 72.342022][ T5855] bridge_slave_1: entered promiscuous mode [ 72.365002][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.396237][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.416643][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 72.444640][ T5855] team0: Port device team_slave_0 added [ 72.452774][ T5855] team0: Port device team_slave_1 added [ 72.459197][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 72.508019][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.515634][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.541821][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.560469][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 72.576583][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.583770][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.611000][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.708099][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.716036][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.723969][ T5854] bridge_slave_0: entered allmulticast mode [ 72.731129][ T5854] bridge_slave_0: entered promiscuous mode [ 72.747262][ T5855] hsr_slave_0: entered promiscuous mode [ 72.753803][ T5855] hsr_slave_1: entered promiscuous mode [ 72.760199][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 72.769720][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.777116][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.784451][ T5854] bridge_slave_1: entered allmulticast mode [ 72.791059][ T5854] bridge_slave_1: entered promiscuous mode [ 72.831119][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.838343][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.845844][ T5863] bridge_slave_0: entered allmulticast mode [ 72.853088][ T5863] bridge_slave_0: entered promiscuous mode [ 72.885926][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.893330][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.900754][ T5863] bridge_slave_1: entered allmulticast mode [ 72.907862][ T5863] bridge_slave_1: entered promiscuous mode [ 72.918868][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.950877][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.960414][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.968053][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.975527][ T5867] bridge_slave_0: entered allmulticast mode [ 72.983054][ T5867] bridge_slave_0: entered promiscuous mode [ 73.015215][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.022633][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.029819][ T5867] bridge_slave_1: entered allmulticast mode [ 73.037143][ T5867] bridge_slave_1: entered promiscuous mode [ 73.048600][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.060321][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.108177][ T5854] team0: Port device team_slave_0 added [ 73.115630][ T5854] team0: Port device team_slave_1 added [ 73.139379][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.146834][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.154113][ T5870] bridge_slave_0: entered allmulticast mode [ 73.160739][ T5870] bridge_slave_0: entered promiscuous mode [ 73.182754][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.197339][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.207547][ T5863] team0: Port device team_slave_0 added [ 73.214771][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.222002][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.229208][ T5870] bridge_slave_1: entered allmulticast mode [ 73.235900][ T5870] bridge_slave_1: entered promiscuous mode [ 73.250708][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.258810][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.286318][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.298714][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.305808][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.331910][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.360636][ T5863] team0: Port device team_slave_1 added [ 73.396436][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.408682][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.419787][ T5867] team0: Port device team_slave_0 added [ 73.444677][ T5867] team0: Port device team_slave_1 added [ 73.454541][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.461744][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.488283][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.529152][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.537550][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.564284][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.580562][ T5870] team0: Port device team_slave_0 added [ 73.589422][ T5854] hsr_slave_0: entered promiscuous mode [ 73.595848][ T5854] hsr_slave_1: entered promiscuous mode [ 73.602415][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 73.608247][ T5854] Cannot create hsr debugfs directory [ 73.620912][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.628203][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.654970][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.669042][ T5870] team0: Port device team_slave_1 added [ 73.692485][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.699809][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.729111][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.749853][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.757880][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.784055][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.796879][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.804134][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.830726][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.858745][ T5863] hsr_slave_0: entered promiscuous mode [ 73.865158][ T5863] hsr_slave_1: entered promiscuous mode [ 73.871047][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 73.876841][ T5863] Cannot create hsr debugfs directory [ 73.882575][ T5182] Bluetooth: hci1: command tx timeout [ 73.950899][ T5867] hsr_slave_0: entered promiscuous mode [ 73.958100][ T5867] hsr_slave_1: entered promiscuous mode [ 73.962111][ T5182] Bluetooth: hci2: command tx timeout [ 73.963935][ T5857] Bluetooth: hci0: command tx timeout [ 73.977057][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 73.983222][ T5867] Cannot create hsr debugfs directory [ 74.002343][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.030235][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.040702][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.052161][ T5857] Bluetooth: hci4: command tx timeout [ 74.052210][ T5182] Bluetooth: hci3: command tx timeout [ 74.062853][ T5870] hsr_slave_0: entered promiscuous mode [ 74.069249][ T5870] hsr_slave_1: entered promiscuous mode [ 74.075492][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 74.081705][ T5870] Cannot create hsr debugfs directory [ 74.099642][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.318321][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.330022][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.339572][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.352607][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.405586][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.425062][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.434542][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.454888][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.479189][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.492266][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.507650][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.528366][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.547052][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.564718][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.597842][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.608842][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.616563][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.639258][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.649909][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.657109][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.679007][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.689494][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.754476][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.790949][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.801402][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.819923][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.827112][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.846053][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.871116][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.878288][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.892756][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.899976][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.931259][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.938542][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.965768][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.028828][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.063646][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.105479][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.128213][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.136062][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.167235][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.194392][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.201608][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.236831][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.294608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.301912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.327026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.334945][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.391354][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.400765][ T5855] veth0_vlan: entered promiscuous mode [ 75.423827][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.444029][ T5855] veth1_vlan: entered promiscuous mode [ 75.506460][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.526916][ T5870] veth0_vlan: entered promiscuous mode [ 75.572862][ T5855] veth0_macvtap: entered promiscuous mode [ 75.592643][ T5870] veth1_vlan: entered promiscuous mode [ 75.609721][ T5855] veth1_macvtap: entered promiscuous mode [ 75.669780][ T5870] veth0_macvtap: entered promiscuous mode [ 75.682375][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.694382][ T5854] veth0_vlan: entered promiscuous mode [ 75.705329][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.713038][ T5870] veth1_macvtap: entered promiscuous mode [ 75.734635][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.757843][ T5854] veth1_vlan: entered promiscuous mode [ 75.767052][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.787566][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.796676][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.817966][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.831730][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850336][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.863151][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.882362][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.889392][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.899544][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.911278][ T5863] veth0_vlan: entered promiscuous mode [ 75.934532][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.954587][ T5863] veth1_vlan: entered promiscuous mode [ 75.963984][ T5182] Bluetooth: hci1: command tx timeout [ 75.980093][ T5854] veth0_macvtap: entered promiscuous mode [ 75.989270][ T5854] veth1_macvtap: entered promiscuous mode [ 76.035004][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.048459][ T5182] Bluetooth: hci2: command tx timeout [ 76.052884][ T5857] Bluetooth: hci0: command tx timeout [ 76.057679][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.100083][ T5863] veth0_macvtap: entered promiscuous mode [ 76.110152][ T5863] veth1_macvtap: entered promiscuous mode [ 76.124164][ T5857] Bluetooth: hci3: command tx timeout [ 76.124170][ T5182] Bluetooth: hci4: command tx timeout [ 76.138353][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.147773][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.152770][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.193749][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.228407][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.246206][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255491][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272537][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.284147][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.310836][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.326499][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.336298][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.367437][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.380057][ T5970] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.397732][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.409704][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.429776][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.431953][ T5867] veth0_vlan: entered promiscuous mode [ 76.443654][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.448729][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.460123][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.508679][ T5867] veth1_vlan: entered promiscuous mode [ 76.574423][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.591674][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.635898][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.639963][ T5867] veth0_macvtap: entered promiscuous mode [ 76.655331][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.677763][ T5867] veth1_macvtap: entered promiscuous mode [ 76.687773][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.719547][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.748850][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.795213][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.814234][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.830241][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.865140][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.873440][ T5981] sctp: [Deprecated]: syz.2.7 (pid 5981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.873440][ T5981] Use struct sctp_sack_info instead [ 76.924291][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.937938][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.955338][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.985476][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.215745][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.243836][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.326142][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.335515][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.421360][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.449353][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.461424][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.484273][ T6013] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 77.493830][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.509001][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'. [ 77.512936][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.518745][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.527810][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.537779][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.554170][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.562453][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.563098][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.570256][ T6011] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 77.594459][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.604178][ T6023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 77.660202][ T6015] Zero length message leads to an empty skb [ 77.683799][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.731339][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.763350][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.794055][ T6032] block nbd3: not configured, cannot reconfigure [ 77.844353][ T6037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.996465][ T6049] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 78.043911][ T5857] Bluetooth: hci1: command tx timeout [ 78.124678][ T5857] Bluetooth: hci2: command tx timeout [ 78.130812][ T5182] Bluetooth: hci0: command tx timeout [ 78.215654][ T5182] Bluetooth: hci4: command tx timeout [ 78.215724][ T5857] Bluetooth: hci3: command tx timeout [ 78.248169][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.257553][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.277648][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.297754][ T1341] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.475227][ T6075] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.481732][ T6075] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.574992][ T6079] bridge0: entered promiscuous mode [ 78.590230][ T6079] macsec1: entered promiscuous mode [ 78.605393][ T6079] bridge0: port 3(macsec1) entered blocking state [ 78.613749][ T6079] bridge0: port 3(macsec1) entered disabled state [ 78.621008][ T6079] macsec1: entered allmulticast mode [ 78.628586][ T6079] bridge0: entered allmulticast mode [ 78.638011][ T6079] macsec1: left allmulticast mode [ 78.645869][ T6079] bridge0: left allmulticast mode [ 78.659288][ T6079] bridge0: left promiscuous mode [ 78.834878][ T6094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.969073][ T6100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 80.029388][ T6159] Illegal XDP return value 4294967289 on prog (id 11) dev N/A, expect packet loss! [ 80.042282][ T6156] syzkaller1: entered promiscuous mode [ 80.048001][ T6156] syzkaller1: entered allmulticast mode [ 80.121656][ T5857] Bluetooth: hci1: command tx timeout [ 80.202302][ T5857] Bluetooth: hci0: command tx timeout [ 80.202319][ T5182] Bluetooth: hci2: command tx timeout [ 80.281600][ T5182] Bluetooth: hci4: command tx timeout [ 80.287167][ T5857] Bluetooth: hci3: command tx timeout [ 80.300385][ T6176] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 80.359009][ T6178] veth0: entered promiscuous mode [ 80.387037][ T6177] veth0: left promiscuous mode [ 81.076047][ T6222] syzkaller0: entered promiscuous mode [ 81.082900][ T6222] syzkaller0: entered allmulticast mode [ 81.097111][ T6226] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 81.107748][ T6221] tipc: Started in network mode [ 81.115482][ T6221] tipc: Node identity baf72e7809fa, cluster identity 4711 [ 81.124408][ T6221] tipc: Enabled bearer , priority 0 [ 81.148811][ T6223] syzkaller0: entered promiscuous mode [ 81.148901][ T6230] IPVS: length: 107 != 8 [ 81.154750][ T6223] syzkaller0: entered allmulticast mode [ 81.215350][ T6227] tipc: Resetting bearer [ 81.285854][ T6227] tipc: Disabling bearer [ 81.543033][ T6248] __nla_validate_parse: 21 callbacks suppressed [ 81.543054][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 81.614583][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 81.646033][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 81.780246][ T6267] tipc: Enabling of bearer rejected, failed to enable media [ 81.801070][ T6269] netlink: 152 bytes leftover after parsing attributes in process `syz.1.87'. [ 81.814884][ T6267] netlink: 216 bytes leftover after parsing attributes in process `syz.3.86'. [ 82.274635][ T6305] netlink: 96 bytes leftover after parsing attributes in process `syz.3.99'. [ 82.407033][ T6315] netlink: 64 bytes leftover after parsing attributes in process `syz.0.105'. [ 82.487656][ T6319] netlink: 72 bytes leftover after parsing attributes in process `syz.3.103'. [ 82.643680][ T6332] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 82.704527][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 83.079470][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 83.207803][ T6364] validate_nla: 58 callbacks suppressed [ 83.207825][ T6364] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 83.395106][ T6372] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 83.545163][ T6379] Bluetooth: MGMT ver 1.23 [ 83.900126][ T6395] netlink: 'syz.4.126': attribute type 16 has an invalid length. [ 83.922831][ T6395] netlink: 'syz.4.126': attribute type 17 has an invalid length. [ 84.019674][ T6395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.509931][ T6421] Bluetooth: MGMT ver 1.23 [ 84.875140][ T6454] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 84.894560][ T6446] netlink: zone id is out of range [ 84.899897][ T6446] netlink: zone id is out of range [ 84.909944][ T6446] netlink: zone id is out of range [ 84.916376][ T6446] netlink: zone id is out of range [ 84.925479][ T6446] netlink: get zone limit has 8 unknown bytes [ 85.085218][ T6473] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 85.105079][ T6476] pim6reg1: entered promiscuous mode [ 85.118965][ T6476] pim6reg1: entered allmulticast mode [ 85.267716][ T6486] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 85.294509][ T6486] bond1: entered promiscuous mode [ 85.301085][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.364765][ T6497] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 85.417219][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.445942][ T6486] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 85.459208][ T6486] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 85.476107][ T6486] bond1: (slave wireguard0): making interface the new active one [ 85.484653][ T6486] wireguard0: entered promiscuous mode [ 85.493908][ T6486] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 85.507882][ T6497] team0: Device hsr_slave_0 failed to register rx_handler [ 85.561501][ T6510] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.116210][ T6541] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 86.359108][ T6557] : entered promiscuous mode [ 86.567487][ T6576] __nla_validate_parse: 16 callbacks suppressed [ 86.567508][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 86.583399][ T6577] netlink: 'syz.0.178': attribute type 6 has an invalid length. [ 86.601821][ T5182] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.605986][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.624570][ T6577] netlink: 'syz.0.178': attribute type 7 has an invalid length. [ 86.634576][ T6577] netlink: 'syz.0.178': attribute type 8 has an invalid length. [ 86.663972][ T6576] macvtap1: entered promiscuous mode [ 86.670017][ T6576] vlan0: entered promiscuous mode [ 86.675944][ T6576] macvtap1: entered allmulticast mode [ 86.681751][ T6576] vlan0: entered allmulticast mode [ 86.687007][ T6576] veth0_vlan: entered allmulticast mode [ 86.694862][ T6577] netlink: 252 bytes leftover after parsing attributes in process `syz.0.178'. [ 86.742491][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 86.768687][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 86.777658][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.787186][ T6580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.808776][ T6584] dummy0: entered promiscuous mode [ 86.817878][ T6584] batadv_slave_1: entered promiscuous mode [ 86.935526][ T43] cfg80211: failed to load regulatory.db [ 86.961771][ T6590] IPv6: Can't replace route, no match found [ 86.990895][ T6590] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 87.014944][ T6590] netlink: 228 bytes leftover after parsing attributes in process `syz.1.183'. [ 87.046773][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 87.050711][ T6596] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 87.291549][ T6614] bridge_slave_0: left allmulticast mode [ 87.361722][ T6614] bridge_slave_0: left promiscuous mode [ 87.395240][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.444314][ T6614] bridge_slave_1: left allmulticast mode [ 87.460385][ T6614] bridge_slave_1: left promiscuous mode [ 87.471961][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.513871][ T6614] bond0: (slave bond_slave_0): Releasing backup interface [ 87.533250][ T6614] bond0: (slave bond_slave_1): Releasing backup interface [ 87.555632][ T6614] team0: Port device team_slave_0 removed [ 87.578433][ T6614] team0: Port device team_slave_1 removed [ 87.587444][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.596096][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.608247][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.617025][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.635777][ T6641] netlink: 604 bytes leftover after parsing attributes in process `syz.2.189'. [ 87.763640][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 87.803042][ T6614] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 87.829087][ T6026] IPVS: starting estimator thread 0... [ 87.905291][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'. [ 87.953562][ T6648] IPVS: using max 39 ests per chain, 93600 per kthread [ 88.262526][ T6677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.292122][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'. [ 88.312884][ T6677] validate_nla: 2 callbacks suppressed [ 88.312903][ T6677] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 88.332624][ T6677] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 88.357564][ T6687] warning: `syz.0.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.733596][ T6716] netlink: 'syz.3.211': attribute type 23 has an invalid length. [ 89.085014][ T6738] delete_channel: no stack [ 89.213261][ T6743] IPv4: Oversized IP packet from 172.20.20.24 [ 89.220452][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 89.227118][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 89.515754][ T6773] nftables ruleset with unbound chain [ 89.745165][ T6791] tipc: Started in network mode [ 89.750177][ T6791] tipc: Node identity ac14140f, cluster identity 4711 [ 89.759997][ T6791] tipc: New replicast peer: 255.255.255.255 [ 89.777352][ T6791] tipc: Enabled bearer , priority 10 [ 89.952612][ T6804] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 90.888278][ T6871] pim6reg1: entered promiscuous mode [ 90.901624][ T5858] tipc: Node number set to 2886997007 [ 90.908507][ T6871] pim6reg1: entered allmulticast mode [ 91.230531][ T6904] sctp: [Deprecated]: syz.0.257 (pid 6904) Use of int in maxseg socket option. [ 91.230531][ T6904] Use struct sctp_assoc_value instead [ 91.777131][ T6954] __nla_validate_parse: 19 callbacks suppressed [ 91.777152][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 91.810519][ T6957] netlink: 'syz.0.270': attribute type 4 has an invalid length. [ 91.832933][ T6957] netlink: 17 bytes leftover after parsing attributes in process `syz.0.270'. [ 91.855085][ T6958] pimreg3: entered allmulticast mode [ 91.884212][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 92.025237][ T6975] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 92.033686][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 92.049052][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 92.069092][ T6970] veth3: entered allmulticast mode [ 92.094676][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.105951][ T6975] bond0: (slave team0): Enslaving as an active interface with a down link [ 92.107824][ T6970] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 92.146274][ T6970] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.165557][ T6977] openvswitch: netlink: Duplicate or invalid key (type 0). [ 92.182155][ T6977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.183268][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 92.233326][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.324578][ T6975] syz_tun: entered promiscuous mode [ 92.330546][ T6975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.331958][ T6995] netlink: 2296 bytes leftover after parsing attributes in process `syz.4.282'. [ 92.343000][ T6975] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 92.380783][ T6993] tipc: Enabling of bearer rejected, media not registered [ 92.493520][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 92.537960][ T6999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 92.587948][ T6999] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.595243][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 92.600513][ T6999] gretap1: entered promiscuous mode [ 92.614170][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 92.615539][ T6999] gretap1: entered allmulticast mode [ 92.917365][ T7026] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 92.939247][ T7023] bridge_slave_0: left allmulticast mode [ 92.956035][ T7023] bridge_slave_0: left promiscuous mode [ 92.964829][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.983541][ T7023] bridge_slave_1: left allmulticast mode [ 93.007471][ T7023] bridge_slave_1: left promiscuous mode [ 93.057043][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.104736][ T7023] bond0: (slave bond_slave_0): Releasing backup interface [ 93.163868][ T7023] bond0: (slave bond_slave_1): Releasing backup interface [ 93.225693][ T7023] team0: Port device team_slave_0 removed [ 93.257390][ T7023] team0: Port device team_slave_1 removed [ 93.266102][ T7023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.285137][ T7023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.306180][ T7023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.329622][ T7023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.367818][ T7024] geneve2: entered promiscuous mode [ 93.377825][ T7024] geneve2: entered allmulticast mode [ 93.646198][ T7074] Can't find ip_set type bitmap:ip,mac [ 93.823715][ T7087] syz_tun: entered allmulticast mode [ 93.850014][ T7087] syz_tun: left allmulticast mode [ 93.954860][ T7099] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 94.291138][ T7121] IPv6: sit1: Disabled Multicast RS [ 94.295096][ T7126] openvswitch: netlink: Message has 5 unknown bytes. [ 94.314817][ T7121] sit1: entered allmulticast mode [ 94.328448][ T7126] openvswitch: netlink: Message has 5 unknown bytes. [ 94.340876][ T7126] openvswitch: netlink: Message has 5 unknown bytes. [ 94.357724][ T7126] openvswitch: netlink: Message has 5 unknown bytes. [ 94.513708][ T7135] sctp: [Deprecated]: syz.1.327 (pid 7135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.513708][ T7135] Use struct sctp_sack_info instead [ 95.351344][ T7206] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 95.492258][ T7212] veth1_to_bond: entered allmulticast mode [ 95.515166][ T7211] veth1_to_bond: left allmulticast mode [ 96.134476][ T7250] veth5: entered promiscuous mode [ 96.139767][ T7250] veth5: entered allmulticast mode [ 96.301354][ T7266] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 96.328063][ T7265] sctp: [Deprecated]: syz.1.365 (pid 7265) Use of int in max_burst socket option. [ 96.328063][ T7265] Use struct sctp_assoc_value instead [ 96.511739][ T7278] nbd: illegal input index -8454144 [ 96.514281][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.562892][ T7283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.573314][ T7283] bond0: (slave bond3): Enslaving as an active interface with a down link [ 119.599138][ T7323] __nla_validate_parse: 20 callbacks suppressed [ 119.599160][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 119.772835][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'. [ 119.799051][ T7345] netlink: 88 bytes leftover after parsing attributes in process `syz.4.379'. [ 119.820009][ T7345] netem: invalid attributes len -24 [ 119.828415][ T7345] netem: change failed [ 119.857513][ T7347] tipc: Enabling of bearer rejected, failed to enable media [ 119.857971][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 119.868355][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 120.034990][ T7361] delete_channel: no stack [ 120.091281][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028e52400: rx timeout, send abort [ 120.169112][ T7375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.218736][ T7382] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 120.422754][ T7397] tipc: Enabling of bearer rejected, failed to enable media [ 120.497517][ T7399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.397'. [ 120.591413][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028e53000: rx timeout, send abort [ 120.599968][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028e52400: abort rx timeout. Force session deactivation [ 120.786255][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 120.797137][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'. [ 120.812429][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'. [ 120.899929][ T7417] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 121.037060][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.405'. [ 121.099801][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028e53000: abort rx timeout. Force session deactivation [ 121.142386][ T7426] tipc: Started in network mode [ 121.154884][ T7426] tipc: Node identity 9264e877cd07, cluster identity 4711 [ 121.172622][ T7426] tipc: Enabled bearer , priority 0 [ 121.267921][ T7426] syzkaller0: entered promiscuous mode [ 121.278015][ T7426] syzkaller0: entered allmulticast mode [ 121.285686][ T7426] tipc: Resetting bearer [ 121.374750][ T7424] tipc: Resetting bearer [ 121.422586][ T7424] tipc: Disabling bearer [ 121.507050][ T7448] syzkaller0: entered promiscuous mode [ 121.514424][ T7448] syzkaller0: entered allmulticast mode [ 121.525287][ T7450] netlink: 'syz.1.413': attribute type 4 has an invalid length. [ 121.604291][ T7455] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 121.615253][ T7455] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 121.905646][ T7486] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 122.123144][ T7501] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 122.868851][ T7557] bridge0: port 3(batadv1) entered blocking state [ 122.891795][ T7557] bridge0: port 3(batadv1) entered disabled state [ 122.904290][ T7557] batadv1: entered allmulticast mode [ 122.933138][ T7557] batadv1: entered promiscuous mode [ 123.279668][ T7584] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 123.365851][ T7478] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 123.375199][ T7478] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 123.448389][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.456041][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.533179][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.546253][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.610528][ T7602] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 123.639756][ T7589] geneve2: left promiscuous mode [ 123.648493][ T7596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.709477][ T7602] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 123.719120][ T7602] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 123.742350][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.761837][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.781264][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.807810][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.873545][ T7608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 123.890311][ T7608] team0: Failed to send port change of device bond4 via netlink (err -105) [ 123.900075][ T7608] team0: Failed to send options change via netlink (err -105) [ 123.909486][ T7608] team0: Port device bond4 added [ 123.940554][ T7615] Bluetooth: MGMT ver 1.23 [ 124.141060][ T7622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.241877][ T7639] trusted_key: syz.3.472 sent an empty control message without MSG_MORE. [ 124.444665][ T7651] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 124.691279][ T1211] IPVS: starting estimator thread 0... [ 124.743443][ T7682] netlink: zone id is out of range [ 124.755348][ T7682] netlink: zone id is out of range [ 124.782349][ T7682] netlink: zone id is out of range [ 124.799403][ T7684] netlink: 'syz.0.482': attribute type 4 has an invalid length. [ 124.808272][ T7682] netlink: zone id is out of range [ 124.827109][ T7682] netlink: zone id is out of range [ 124.847790][ T7679] IPVS: using max 49 ests per chain, 117600 per kthread [ 124.857942][ T7682] netlink: zone id is out of range [ 124.869683][ T7689] netlink: 'syz.3.481': attribute type 29 has an invalid length. [ 124.890823][ T7682] netlink: del zone limit has 4 unknown bytes [ 124.917994][ T6026] IPVS: starting estimator thread 0... [ 124.932936][ T7689] netlink: 'syz.3.481': attribute type 29 has an invalid length. [ 124.966988][ T7696] __nla_validate_parse: 11 callbacks suppressed [ 124.967010][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 124.991577][ T7689] netlink: 500 bytes leftover after parsing attributes in process `syz.3.481'. [ 125.016252][ T7702] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 125.036923][ T7695] delete_channel: no stack [ 125.057107][ T7693] IPVS: using max 47 ests per chain, 112800 per kthread [ 125.119745][ T7708] netlink: 'syz.1.488': attribute type 11 has an invalid length. [ 125.178327][ T7706] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 125.256806][ T7706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.296260][ T7708] vlan2: entered promiscuous mode [ 125.309542][ T7708] bond5: entered promiscuous mode [ 125.315855][ T7708] vlan2: entered allmulticast mode [ 125.321272][ T7708] bond5: entered allmulticast mode [ 125.348116][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 125.382240][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 125.914470][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 125.925813][ T7766] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 126.022584][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 126.220380][ T7782] bond5: entered promiscuous mode [ 126.225759][ T7782] bond5: entered allmulticast mode [ 126.232388][ T7782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 126.259063][ T7782] bond5 (unregistering): Released all slaves [ 126.569743][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 126.583503][ T7809] bridge_slave_1: left allmulticast mode [ 126.590088][ T7809] bridge_slave_1: left promiscuous mode [ 126.600864][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.613740][ T7809] bridge_slave_0: left allmulticast mode [ 126.621215][ T7809] bridge_slave_0: left promiscuous mode [ 126.631408][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.681394][ T7816] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 126.706507][ T7816] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 126.715649][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 127.073141][ T7843] ieee802154 phy1 wpan1: encryption failed: -126 [ 127.150489][ T7848] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 127.281875][ T7856] : renamed from hsr0 (while UP) [ 127.331246][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.567404][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 127.649996][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 127.672200][ T7883] netlink: 'syz.1.532': attribute type 6 has an invalid length. [ 127.759818][ T7890] netlink: 'syz.0.534': attribute type 25 has an invalid length. [ 127.836598][ T7888] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 127.919514][ T7901] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 128.025912][ T6026] IPVS: starting estimator thread 0... [ 128.141742][ T7910] IPVS: using max 46 ests per chain, 110400 per kthread [ 128.265625][ T7926] netlink: 'syz.3.545': attribute type 2 has an invalid length. [ 128.279990][ T7926] nbd: must specify a device to reconfigure [ 128.609101][ T7953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.622377][ T7953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.634276][ T7953] bond0 (unregistering): Released all slaves [ 128.719701][ T7957] vxcan1: tx address claim with dlc 1 [ 128.766220][ T7961] syzkaller0: tun_chr_ioctl cmd 1074030123 [ 129.671571][ T8010] dvmrp1: entered allmulticast mode [ 129.936635][ T8027] netlink: 'syz.3.579': attribute type 12 has an invalid length. [ 129.977753][ T8032] __nla_validate_parse: 17 callbacks suppressed [ 129.977775][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.580'. [ 130.054813][ T8035] vlan3: entered promiscuous mode [ 130.067614][ T8035] bridge0: entered promiscuous mode [ 130.328675][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 130.365307][ T5857] block nbd0: Receive control failed (result -32) [ 130.396721][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 130.477951][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 130.535025][ T8070] block nbd3: not configured, cannot reconfigure [ 130.663519][ T8083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.601'. [ 130.698268][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 130.717670][ T8083] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 130.960937][ T8106] FAULT_INJECTION: forcing a failure. [ 130.960937][ T8106] name failslab, interval 1, probability 0, space 0, times 1 [ 131.012653][ T8106] CPU: 1 UID: 0 PID: 8106 Comm: syz.2.609 Not tainted syzkaller #0 PREEMPT(full) [ 131.012681][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.012691][ T8106] Call Trace: [ 131.012699][ T8106] [ 131.012706][ T8106] dump_stack_lvl+0x189/0x250 [ 131.012744][ T8106] ? __pfx____ratelimit+0x10/0x10 [ 131.012770][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.012791][ T8106] ? __pfx__printk+0x10/0x10 [ 131.012815][ T8106] ? kasan_save_track+0x4f/0x80 [ 131.012839][ T8106] ? __pfx___might_resched+0x10/0x10 [ 131.012857][ T8106] ? lock_acquire+0x5f/0x360 [ 131.012883][ T8106] should_fail_ex+0x414/0x560 [ 131.012908][ T8106] should_failslab+0xa8/0x100 [ 131.012933][ T8106] __kmalloc_noprof+0xcb/0x4f0 [ 131.012962][ T8106] ? ethnl_default_notify+0x1af/0xb70 [ 131.012981][ T8106] ethnl_default_notify+0x1af/0xb70 [ 131.012997][ T8106] ? rcu_is_watching+0x15/0xb0 [ 131.013013][ T8106] ? __pfx_ethnl_default_notify+0x10/0x10 [ 131.013037][ T8106] ? mutex_is_locked+0x17/0x50 [ 131.013053][ T8106] ? rtnl_is_locked+0x15/0x20 [ 131.013074][ T8106] ethnl_default_set_doit+0x4f8/0x890 [ 131.013096][ T8106] genl_family_rcv_msg_doit+0x215/0x300 [ 131.013120][ T8106] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 131.013146][ T8106] ? bpf_lsm_capable+0x9/0x20 [ 131.013170][ T8106] ? security_capable+0x7e/0x2e0 [ 131.013198][ T8106] genl_rcv_msg+0x60e/0x790 [ 131.013221][ T8106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.013240][ T8106] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 131.013258][ T8106] ? __asan_memcpy+0x40/0x70 [ 131.013277][ T8106] ? __pfx_ref_tracker_free+0x10/0x10 [ 131.013301][ T8106] ? __skb_clone+0x63/0x7a0 [ 131.013321][ T8106] netlink_rcv_skb+0x208/0x470 [ 131.013354][ T8106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.013374][ T8106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.013403][ T8106] ? lock_release+0x4b/0x3e0 [ 131.013430][ T8106] ? down_read+0x1ad/0x2e0 [ 131.013448][ T8106] genl_rcv+0x28/0x40 [ 131.013466][ T8106] netlink_unicast+0x82c/0x9e0 [ 131.013493][ T8106] ? __pfx_netlink_unicast+0x10/0x10 [ 131.013516][ T8106] ? netlink_sendmsg+0x642/0xb30 [ 131.013541][ T8106] ? skb_put+0x11b/0x210 [ 131.013558][ T8106] netlink_sendmsg+0x805/0xb30 [ 131.013588][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.013614][ T8106] ? aa_sock_msg_perm+0xf1/0x1d0 [ 131.013633][ T8106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.013652][ T8106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.013678][ T8106] __sock_sendmsg+0x21c/0x270 [ 131.013702][ T8106] ____sys_sendmsg+0x505/0x830 [ 131.013722][ T8106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.013753][ T8106] ? import_iovec+0x74/0xa0 [ 131.013774][ T8106] ___sys_sendmsg+0x21f/0x2a0 [ 131.013793][ T8106] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.013826][ T8106] ? __fget_files+0x2a/0x420 [ 131.013852][ T8106] ? __fget_files+0x3a0/0x420 [ 131.013881][ T8106] __x64_sys_sendmsg+0x19b/0x260 [ 131.013901][ T8106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.013923][ T8106] ? __pfx_ksys_write+0x10/0x10 [ 131.013945][ T8106] ? rcu_is_watching+0x15/0xb0 [ 131.013964][ T8106] ? rcu_is_watching+0x15/0xb0 [ 131.013981][ T8106] do_syscall_64+0xfa/0x3b0 [ 131.014007][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.014024][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 131.014044][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.014061][ T8106] RIP: 0033:0x7f85e3d8ebe9 [ 131.014078][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.014092][ T8106] RSP: 002b:00007f85e4b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.014113][ T8106] RAX: ffffffffffffffda RBX: 00007f85e3fb5fa0 RCX: 00007f85e3d8ebe9 [ 131.014128][ T8106] RDX: 00000000000080d0 RSI: 0000200000000540 RDI: 0000000000000003 [ 131.014139][ T8106] RBP: 00007f85e4b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 131.014151][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.014162][ T8106] R13: 00007f85e3fb6038 R14: 00007f85e3fb5fa0 R15: 00007ffd5c720378 [ 131.014181][ T8106] [ 131.032380][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 131.292173][ T8126] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 131.469667][ T8126] bond4: entered promiscuous mode [ 131.475808][ T8126] bond4: entered allmulticast mode [ 131.481294][ T8126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.517201][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 131.756432][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.617'. [ 131.759014][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 131.908621][ T8162] FAULT_INJECTION: forcing a failure. [ 131.908621][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 131.951840][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) [ 131.951869][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.951880][ T8162] Call Trace: [ 131.951887][ T8162] [ 131.951894][ T8162] dump_stack_lvl+0x189/0x250 [ 131.951922][ T8162] ? __pfx____ratelimit+0x10/0x10 [ 131.951948][ T8162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.951968][ T8162] ? __pfx__printk+0x10/0x10 [ 131.951991][ T8162] ? __pfx___might_resched+0x10/0x10 [ 131.952009][ T8162] ? lock_acquire+0x5f/0x360 [ 131.952036][ T8162] should_fail_ex+0x414/0x560 [ 131.952063][ T8162] should_failslab+0xa8/0x100 [ 131.952091][ T8162] __kmalloc_noprof+0xcb/0x4f0 [ 131.952115][ T8162] ? ethnl_default_notify+0x1f5/0xb70 [ 131.952134][ T8162] ethnl_default_notify+0x1f5/0xb70 [ 131.952154][ T8162] ? rcu_is_watching+0x15/0xb0 [ 131.952174][ T8162] ? __pfx_ethnl_default_notify+0x10/0x10 [ 131.952200][ T8162] ? mutex_is_locked+0x17/0x50 [ 131.952217][ T8162] ? rtnl_is_locked+0x15/0x20 [ 131.952238][ T8162] ethnl_default_set_doit+0x4f8/0x890 [ 131.952261][ T8162] genl_family_rcv_msg_doit+0x215/0x300 [ 131.952286][ T8162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 131.952313][ T8162] ? bpf_lsm_capable+0x9/0x20 [ 131.952339][ T8162] ? security_capable+0x7e/0x2e0 [ 131.952369][ T8162] genl_rcv_msg+0x60e/0x790 [ 131.952392][ T8162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.952412][ T8162] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 131.952431][ T8162] ? __asan_memcpy+0x40/0x70 [ 131.952451][ T8162] ? __pfx_ref_tracker_free+0x10/0x10 [ 131.952476][ T8162] ? __skb_clone+0x63/0x7a0 [ 131.952499][ T8162] netlink_rcv_skb+0x208/0x470 [ 131.952525][ T8162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.952546][ T8162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.952577][ T8162] ? lock_release+0x4b/0x3e0 [ 131.952604][ T8162] ? down_read+0x1ad/0x2e0 [ 131.952624][ T8162] genl_rcv+0x28/0x40 [ 131.952642][ T8162] netlink_unicast+0x82c/0x9e0 [ 131.952671][ T8162] ? __pfx_netlink_unicast+0x10/0x10 [ 131.952696][ T8162] ? netlink_sendmsg+0x642/0xb30 [ 131.952730][ T8162] ? skb_put+0x11b/0x210 [ 131.952749][ T8162] netlink_sendmsg+0x805/0xb30 [ 131.952779][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.952808][ T8162] ? aa_sock_msg_perm+0xf1/0x1d0 [ 131.952826][ T8162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.952845][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.952871][ T8162] __sock_sendmsg+0x21c/0x270 [ 131.952896][ T8162] ____sys_sendmsg+0x505/0x830 [ 131.952917][ T8162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.952939][ T8162] ? import_iovec+0x74/0xa0 [ 131.952961][ T8162] ___sys_sendmsg+0x21f/0x2a0 [ 131.952980][ T8162] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.953013][ T8162] ? __fget_files+0x2a/0x420 [ 131.953040][ T8162] ? __fget_files+0x3a0/0x420 [ 131.953069][ T8162] __x64_sys_sendmsg+0x19b/0x260 [ 131.953088][ T8162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.953109][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 131.953131][ T8162] ? rcu_is_watching+0x15/0xb0 [ 131.953150][ T8162] ? rcu_is_watching+0x15/0xb0 [ 131.953169][ T8162] do_syscall_64+0xfa/0x3b0 [ 131.953195][ T8162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.953213][ T8162] ? clear_bhb_loop+0x60/0xb0 [ 131.953233][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.953250][ T8162] RIP: 0033:0x7f7a4eb8ebe9 [ 131.953268][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.953284][ T8162] RSP: 002b:00007f7a4fac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.953306][ T8162] RAX: ffffffffffffffda RBX: 00007f7a4edb5fa0 RCX: 00007f7a4eb8ebe9 [ 131.953319][ T8162] RDX: 00000000000080d0 RSI: 0000200000000540 RDI: 0000000000000003 [ 131.953332][ T8162] RBP: 00007f7a4fac0090 R08: 0000000000000000 R09: 0000000000000000 [ 131.953343][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.953355][ T8162] R13: 00007f7a4edb6038 R14: 00007f7a4edb5fa0 R15: 00007ffe327e3d58 [ 131.953382][ T8162] [ 132.467717][ T8174] gtp0: entered promiscuous mode [ 132.475475][ T8172] netlink: 'syz.4.627': attribute type 15 has an invalid length. [ 132.687782][ T8197] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 132.738269][ T8201] FAULT_INJECTION: forcing a failure. [ 132.738269][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 132.755628][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.3.636 Not tainted syzkaller #0 PREEMPT(full) [ 132.755657][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.755668][ T8201] Call Trace: [ 132.755675][ T8201] [ 132.755683][ T8201] dump_stack_lvl+0x189/0x250 [ 132.755722][ T8201] ? __pfx____ratelimit+0x10/0x10 [ 132.755748][ T8201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.755769][ T8201] ? __pfx__printk+0x10/0x10 [ 132.755795][ T8201] ? fs_reclaim_acquire+0x7d/0x100 [ 132.755821][ T8201] ? rcu_is_watching+0x15/0xb0 [ 132.755839][ T8201] ? __pfx___might_resched+0x10/0x10 [ 132.755856][ T8201] ? lock_acquire+0x5f/0x360 [ 132.755883][ T8201] should_fail_ex+0x414/0x560 [ 132.755910][ T8201] should_failslab+0xa8/0x100 [ 132.755938][ T8201] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 132.755962][ T8201] ? trace_rpm_usage+0x7e/0x1f0 [ 132.755980][ T8201] ? __alloc_skb+0x112/0x2d0 [ 132.756005][ T8201] ? __pfx_nsim_get_coalesce+0x10/0x10 [ 132.756034][ T8201] __alloc_skb+0x112/0x2d0 [ 132.756062][ T8201] ethnl_default_notify+0x5da/0xb70 [ 132.756085][ T8201] ? __pfx_ethnl_default_notify+0x10/0x10 [ 132.756108][ T8201] ? mutex_is_locked+0x17/0x50 [ 132.756125][ T8201] ? rtnl_is_locked+0x15/0x20 [ 132.756147][ T8201] ethnl_default_set_doit+0x4f8/0x890 [ 132.756168][ T8201] genl_family_rcv_msg_doit+0x215/0x300 [ 132.756194][ T8201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 132.756233][ T8201] ? bpf_lsm_capable+0x9/0x20 [ 132.756266][ T8201] ? security_capable+0x7e/0x2e0 [ 132.756295][ T8201] genl_rcv_msg+0x60e/0x790 [ 132.756319][ T8201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.756346][ T8201] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 132.756365][ T8201] ? __asan_memcpy+0x40/0x70 [ 132.756384][ T8201] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.756409][ T8201] ? __skb_clone+0x63/0x7a0 [ 132.756431][ T8201] netlink_rcv_skb+0x208/0x470 [ 132.756457][ T8201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.756492][ T8201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.756523][ T8201] ? lock_release+0x4b/0x3e0 [ 132.756551][ T8201] ? down_read+0x1ad/0x2e0 [ 132.756570][ T8201] genl_rcv+0x28/0x40 [ 132.756588][ T8201] netlink_unicast+0x82c/0x9e0 [ 132.756616][ T8201] ? __pfx_netlink_unicast+0x10/0x10 [ 132.756639][ T8201] ? netlink_sendmsg+0x642/0xb30 [ 132.756664][ T8201] ? skb_put+0x11b/0x210 [ 132.756683][ T8201] netlink_sendmsg+0x805/0xb30 [ 132.756722][ T8201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.756752][ T8201] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.756770][ T8201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.756790][ T8201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.756817][ T8201] __sock_sendmsg+0x21c/0x270 [ 132.756842][ T8201] ____sys_sendmsg+0x505/0x830 [ 132.756864][ T8201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.756887][ T8201] ? import_iovec+0x74/0xa0 [ 132.756910][ T8201] ___sys_sendmsg+0x21f/0x2a0 [ 132.756930][ T8201] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.756964][ T8201] ? __fget_files+0x2a/0x420 [ 132.756991][ T8201] ? __fget_files+0x3a0/0x420 [ 132.757021][ T8201] __x64_sys_sendmsg+0x19b/0x260 [ 132.757041][ T8201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.757065][ T8201] ? rcu_is_watching+0x15/0xb0 [ 132.757086][ T8201] ? rcu_is_watching+0x15/0xb0 [ 132.757106][ T8201] do_syscall_64+0xfa/0x3b0 [ 132.757134][ T8201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.757153][ T8201] ? clear_bhb_loop+0x60/0xb0 [ 132.757174][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.757192][ T8201] RIP: 0033:0x7f379158ebe9 [ 132.757210][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.757226][ T8201] RSP: 002b:00007f37923aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.757248][ T8201] RAX: ffffffffffffffda RBX: 00007f37917b5fa0 RCX: 00007f379158ebe9 [ 132.757263][ T8201] RDX: 00000000000080d0 RSI: 0000200000000540 RDI: 0000000000000003 [ 132.757275][ T8201] RBP: 00007f37923aa090 R08: 0000000000000000 R09: 0000000000000000 [ 132.757287][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.757298][ T8201] R13: 00007f37917b6038 R14: 00007f37917b5fa0 R15: 00007ffc63b9e198 [ 132.757319][ T8201] [ 133.171454][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288502][ T8214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.773754][ T8251] openvswitch: netlink: IP tunnel dst address not specified [ 133.911691][ T8251] sctp: [Deprecated]: syz.1.651 (pid 8251) Use of int in max_burst socket option deprecated. [ 133.911691][ T8251] Use struct sctp_assoc_value instead [ 133.953482][ T1341] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.984301][ T1341] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.024087][ T1341] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.052574][ T1341] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.386874][ T8287] netlink: 'syz.4.660': attribute type 4 has an invalid length. [ 134.449206][ T8289] netlink: 'syz.4.660': attribute type 4 has an invalid length. [ 134.670251][ T8304] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 134.996435][ T8326] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 135.020609][ T8326] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 135.097385][ T8332] team0: Device vti0 is of different type [ 135.128399][ T8337] sctp: [Deprecated]: syz.2.676 (pid 8337) Use of int in maxseg socket option. [ 135.128399][ T8337] Use struct sctp_assoc_value instead [ 135.150509][ T8339] __nla_validate_parse: 17 callbacks suppressed [ 135.150530][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 135.256918][ T8344] netlink: 'syz.3.679': attribute type 10 has an invalid length. [ 135.279736][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.299949][ T8344] bridge_slave_1: left allmulticast mode [ 135.308416][ T8344] bridge_slave_1: left promiscuous mode [ 135.317886][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.369757][ T8344] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 135.371370][ T8358] rdma_op ffff8880567fd9f0 conn xmit_rdma 0000000000000000 [ 135.413035][ T8361] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.421201][ T8358] rdma_op ffff8880567ff9f0 conn xmit_rdma 0000000000000000 [ 135.447589][ T8358] rdma_op ffff8880567fa9f0 conn xmit_rdma 0000000000000000 [ 135.449982][ T8361] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 135.469363][ T8358] rdma_op ffff8880567fc1f0 conn xmit_rdma 0000000000000000 [ 135.488676][ T8358] rdma_op ffff8880567fc9f0 conn xmit_rdma 0000000000000000 [ 135.499024][ T8358] rdma_op ffff8880567fd1f0 conn xmit_rdma 0000000000000000 [ 135.529928][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 135.552109][ T8366] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 135.556487][ T8358] rdma_op ffff888027c0a9f0 conn xmit_rdma 0000000000000000 [ 135.559996][ T8366] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 135.576260][ T8358] rdma_op ffff888027c091f0 conn xmit_rdma 0000000000000000 [ 135.597172][ T8358] rdma_op ffff888027c0a1f0 conn xmit_rdma 0000000000000000 [ 135.605432][ T8358] rdma_op ffff888027c089f0 conn xmit_rdma 0000000000000000 [ 135.627942][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 135.730326][ T8377] netlink: 192 bytes leftover after parsing attributes in process `syz.1.689'. [ 135.785332][ T8379] syz.4.691 uses old SIOCAX25GETINFO [ 135.814087][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.691'. [ 135.862453][ T8382] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 135.891503][ T8382] netlink: 224 bytes leftover after parsing attributes in process `syz.3.692'. [ 136.076008][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.700'. [ 136.086036][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.700'. [ 136.150526][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 136.372267][ T8410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.702'. [ 136.392164][ T8410] NCSI netlink: No device for ifindex 131080 [ 137.010040][ T8497] IPv4: Oversized IP packet from 172.20.20.24 [ 137.016649][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 137.023019][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 137.514514][ T8537] FAULT_INJECTION: forcing a failure. [ 137.514514][ T8537] name failslab, interval 1, probability 0, space 0, times 0 [ 137.579952][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.0.734 Not tainted syzkaller #0 PREEMPT(full) [ 137.579979][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.579990][ T8537] Call Trace: [ 137.579997][ T8537] [ 137.580005][ T8537] dump_stack_lvl+0x189/0x250 [ 137.580032][ T8537] ? __pfx____ratelimit+0x10/0x10 [ 137.580058][ T8537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.580079][ T8537] ? __pfx__printk+0x10/0x10 [ 137.580104][ T8537] ? fs_reclaim_acquire+0x7d/0x100 [ 137.580130][ T8537] ? rcu_is_watching+0x15/0xb0 [ 137.580147][ T8537] ? __pfx___might_resched+0x10/0x10 [ 137.580163][ T8537] ? lock_acquire+0x5f/0x360 [ 137.580187][ T8537] should_fail_ex+0x414/0x560 [ 137.580213][ T8537] should_failslab+0xa8/0x100 [ 137.580239][ T8537] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 137.580264][ T8537] ? __alloc_skb+0x112/0x2d0 [ 137.580293][ T8537] __alloc_skb+0x112/0x2d0 [ 137.580321][ T8537] netlink_sendmsg+0x5c6/0xb30 [ 137.580353][ T8537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.580381][ T8537] ? aa_sock_msg_perm+0xf1/0x1d0 [ 137.580400][ T8537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.580419][ T8537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.580446][ T8537] __sock_sendmsg+0x21c/0x270 [ 137.580471][ T8537] ____sys_sendmsg+0x505/0x830 [ 137.580491][ T8537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.580513][ T8537] ? import_iovec+0x74/0xa0 [ 137.580536][ T8537] ___sys_sendmsg+0x21f/0x2a0 [ 137.580554][ T8537] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.580588][ T8537] ? __fget_files+0x2a/0x420 [ 137.580614][ T8537] ? __fget_files+0x3a0/0x420 [ 137.580644][ T8537] __x64_sys_sendmsg+0x19b/0x260 [ 137.580664][ T8537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.580685][ T8537] ? __pfx_ksys_write+0x10/0x10 [ 137.580707][ T8537] ? rcu_is_watching+0x15/0xb0 [ 137.580727][ T8537] ? rcu_is_watching+0x15/0xb0 [ 137.580746][ T8537] do_syscall_64+0xfa/0x3b0 [ 137.580774][ T8537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.580791][ T8537] ? clear_bhb_loop+0x60/0xb0 [ 137.580812][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.580830][ T8537] RIP: 0033:0x7fd176b8ebe9 [ 137.580846][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.580861][ T8537] RSP: 002b:00007fd177a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.580883][ T8537] RAX: ffffffffffffffda RBX: 00007fd176db5fa0 RCX: 00007fd176b8ebe9 [ 137.580897][ T8537] RDX: 00000000000400d4 RSI: 0000200000000200 RDI: 0000000000000004 [ 137.580910][ T8537] RBP: 00007fd177a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.580921][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.580942][ T8537] R13: 00007fd176db6038 R14: 00007fd176db5fa0 R15: 00007ffe90ec87a8 [ 137.580964][ T8537] [ 137.945002][ T8548] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 138.055726][ T8563] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 138.109156][ T8563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.519580][ T8595] team0: Port device bond4 removed [ 138.538093][ T8604] Bluetooth: MGMT ver 1.23 [ 138.851878][ T8627] validate_nla: 4 callbacks suppressed [ 138.851900][ T8627] netlink: 'syz.0.762': attribute type 3 has an invalid length. [ 138.872900][ T8628] 8021q: VLANs not supported on sit0 [ 139.088812][ T8652] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 139.127669][ T8645] pim6reg: entered allmulticast mode [ 139.128015][ T8655] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 139.302674][ T8660] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 139.336021][ T8669] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 139.360749][ T8669] ipvlan1: entered promiscuous mode [ 139.384194][ T8669] ipvlan1: entered allmulticast mode [ 139.398732][ T8669] veth0_vlan: entered allmulticast mode [ 139.408374][ T8669] bridge0: port 4(ipvlan1) entered blocking state [ 139.417680][ T8669] bridge0: port 4(ipvlan1) entered disabled state [ 139.427981][ T8669] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 139.555797][ T8477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 139.574156][ T8477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 139.587747][ T7482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 139.615945][ T7482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 139.629987][ T8683] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.039747][ T8715] tipc: Enabled bearer , priority 0 [ 140.053586][ T8715] syzkaller0: entered allmulticast mode [ 140.061849][ T8715] tipc: Resetting bearer [ 140.080149][ T8714] tipc: Disabling bearer [ 140.090651][ T8718] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 140.100346][ T8718] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 140.109596][ T8718] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 140.119039][ T8718] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 140.128478][ T8718] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 140.139363][ T8718] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 140.147792][ T8718] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 140.388127][ T8735] bond0: option mode: unable to set because the bond device has slaves [ 140.404140][ T8741] __nla_validate_parse: 12 callbacks suppressed [ 140.404160][ T8741] netlink: 766 bytes leftover after parsing attributes in process `syz.0.797'. [ 140.423286][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 140.830158][ T8774] netlink: 148 bytes leftover after parsing attributes in process `syz.0.811'. [ 140.924580][ T8779] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.813'. [ 140.966971][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 140.987542][ T8781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.814'. [ 141.023167][ T8783] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.073509][ T8783] bond5: (slave veth7): Enslaving as an active interface with a down link [ 141.138449][ T8783] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 141.210910][ T8796] bond5: (slave veth9): Enslaving as an active interface with a down link [ 141.211093][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.272558][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 141.377964][ T8782] delete_channel: no stack [ 141.501313][ T8814] netlink: 516 bytes leftover after parsing attributes in process `syz.4.827'. [ 141.708067][ T8832] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.835'. [ 141.875837][ T8846] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 142.815275][ T8913] veth0_macvtap: left promiscuous mode [ 142.853869][ T8913] macvtap0: entered allmulticast mode [ 142.879309][ T8913] macvtap0: refused to change device tx_queue_len [ 143.030778][ T8935] FAULT_INJECTION: forcing a failure. [ 143.030778][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 143.070091][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.3.869 Not tainted syzkaller #0 PREEMPT(full) [ 143.070125][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.070137][ T8935] Call Trace: [ 143.070144][ T8935] [ 143.070152][ T8935] dump_stack_lvl+0x189/0x250 [ 143.070180][ T8935] ? __pfx____ratelimit+0x10/0x10 [ 143.070206][ T8935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.070228][ T8935] ? __pfx__printk+0x10/0x10 [ 143.070251][ T8935] ? genl_rcv+0x28/0x40 [ 143.070272][ T8935] ? ____sys_sendmsg+0x505/0x830 [ 143.070290][ T8935] ? __x64_sys_sendmsg+0x19b/0x260 [ 143.070308][ T8935] ? do_syscall_64+0xfa/0x3b0 [ 143.070335][ T8935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.070358][ T8935] should_fail_ex+0x414/0x560 [ 143.070385][ T8935] should_failslab+0xa8/0x100 [ 143.070413][ T8935] kmem_cache_alloc_noprof+0x73/0x3c0 [ 143.070437][ T8935] ? skb_clone+0x212/0x3a0 [ 143.070458][ T8935] skb_clone+0x212/0x3a0 [ 143.070479][ T8935] __netlink_deliver_tap+0x404/0x850 [ 143.070511][ T8935] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.070538][ T8935] netlink_deliver_tap+0x19c/0x1b0 [ 143.070575][ T8935] netlink_sendskb+0x68/0x140 [ 143.070599][ T8935] netlink_unicast+0x397/0x9e0 [ 143.070622][ T8935] ? __asan_memcpy+0x40/0x70 [ 143.070647][ T8935] ? __pfx_netlink_unicast+0x10/0x10 [ 143.070673][ T8935] netlink_rcv_skb+0x28c/0x470 [ 143.070699][ T8935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.070719][ T8935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.070750][ T8935] ? lock_release+0x4b/0x3e0 [ 143.070778][ T8935] ? down_read+0x1ad/0x2e0 [ 143.070796][ T8935] genl_rcv+0x28/0x40 [ 143.070814][ T8935] netlink_unicast+0x82c/0x9e0 [ 143.070841][ T8935] ? __pfx_netlink_unicast+0x10/0x10 [ 143.070865][ T8935] ? netlink_sendmsg+0x642/0xb30 [ 143.070891][ T8935] ? skb_put+0x11b/0x210 [ 143.070909][ T8935] netlink_sendmsg+0x805/0xb30 [ 143.070939][ T8935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.070968][ T8935] ? aa_sock_msg_perm+0xf1/0x1d0 [ 143.070987][ T8935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.071006][ T8935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.071033][ T8935] __sock_sendmsg+0x21c/0x270 [ 143.071057][ T8935] ____sys_sendmsg+0x505/0x830 [ 143.071077][ T8935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.071139][ T8935] ? import_iovec+0x74/0xa0 [ 143.071163][ T8935] ___sys_sendmsg+0x21f/0x2a0 [ 143.071182][ T8935] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.071212][ T8935] ? __fget_files+0x2a/0x420 [ 143.071248][ T8935] ? __fget_files+0x3a0/0x420 [ 143.071280][ T8935] __x64_sys_sendmsg+0x19b/0x260 [ 143.071301][ T8935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.071324][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 143.071348][ T8935] ? rcu_is_watching+0x15/0xb0 [ 143.071369][ T8935] ? rcu_is_watching+0x15/0xb0 [ 143.071388][ T8935] do_syscall_64+0xfa/0x3b0 [ 143.071415][ T8935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.071432][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 143.071452][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.071469][ T8935] RIP: 0033:0x7f379158ebe9 [ 143.071487][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.071502][ T8935] RSP: 002b:00007f37923aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.071524][ T8935] RAX: ffffffffffffffda RBX: 00007f37917b5fa0 RCX: 00007f379158ebe9 [ 143.071538][ T8935] RDX: 00000000000400d4 RSI: 0000200000000200 RDI: 0000000000000004 [ 143.071550][ T8935] RBP: 00007f37923aa090 R08: 0000000000000000 R09: 0000000000000000 [ 143.071572][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.071584][ T8935] R13: 00007f37917b6038 R14: 00007f37917b5fa0 R15: 00007ffc63b9e198 [ 143.071605][ T8935] [ 144.402685][ T9014] validate_nla: 130 callbacks suppressed [ 144.402705][ T9014] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 144.659322][ T9029] openvswitch: netlink: Flow key attr not present in new flow. [ 145.125294][ T9072] FAULT_INJECTION: forcing a failure. [ 145.125294][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.139261][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.1.906 Not tainted syzkaller #0 PREEMPT(full) [ 145.139291][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.139303][ T9072] Call Trace: [ 145.139311][ T9072] [ 145.139318][ T9072] dump_stack_lvl+0x189/0x250 [ 145.139347][ T9072] ? __pfx____ratelimit+0x10/0x10 [ 145.139373][ T9072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.139396][ T9072] ? __pfx__printk+0x10/0x10 [ 145.139419][ T9072] ? __might_fault+0xb0/0x130 [ 145.139449][ T9072] ? rcu_is_watching+0x15/0xb0 [ 145.139469][ T9072] should_fail_ex+0x414/0x560 [ 145.139496][ T9072] _copy_from_iter+0x1db/0x16f0 [ 145.139520][ T9072] ? __pfx__copy_from_iter+0x10/0x10 [ 145.139551][ T9072] ? rcu_is_watching+0x15/0xb0 [ 145.139570][ T9072] ? trace_kmalloc+0x1f/0xd0 [ 145.139594][ T9072] ? kernfs_fop_write_iter+0x158/0x4f0 [ 145.139623][ T9072] kernfs_fop_write_iter+0x19f/0x4f0 [ 145.139652][ T9072] vfs_write+0x5c9/0xb30 [ 145.139679][ T9072] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 145.139705][ T9072] ? __pfx_vfs_write+0x10/0x10 [ 145.139734][ T9072] ? __fget_files+0x2a/0x420 [ 145.139765][ T9072] ksys_write+0x145/0x250 [ 145.139789][ T9072] ? __pfx_ksys_write+0x10/0x10 [ 145.139810][ T9072] ? rcu_is_watching+0x15/0xb0 [ 145.139829][ T9072] ? rcu_is_watching+0x15/0xb0 [ 145.139848][ T9072] do_syscall_64+0xfa/0x3b0 [ 145.139877][ T9072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.139895][ T9072] ? clear_bhb_loop+0x60/0xb0 [ 145.139915][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.139934][ T9072] RIP: 0033:0x7f7a4eb8ebe9 [ 145.139952][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.139967][ T9072] RSP: 002b:00007f7a4fa9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.139991][ T9072] RAX: ffffffffffffffda RBX: 00007f7a4edb6090 RCX: 00007f7a4eb8ebe9 [ 145.140005][ T9072] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000005 [ 145.140017][ T9072] RBP: 00007f7a4fa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.140029][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.140040][ T9072] R13: 00007f7a4edb6128 R14: 00007f7a4edb6090 R15: 00007ffe327e3d58 [ 145.140061][ T9072] [ 145.742912][ T9098] netlink: 'syz.3.919': attribute type 2 has an invalid length. [ 145.760534][ T9102] __nla_validate_parse: 84 callbacks suppressed [ 145.760554][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 145.806751][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 145.817029][ T9107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.922'. [ 145.827218][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 145.839017][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 145.915720][ T9110] tipc: MTU too low for tipc bearer [ 145.935025][ T9111] netlink: 44 bytes leftover after parsing attributes in process `syz.2.923'. [ 146.227800][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 146.334291][ T9150] IPv6: sit1: Disabled Multicast RS [ 146.348959][ T9150] sit1: entered allmulticast mode [ 146.564486][ T9172] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 146.589348][ T9172] netlink: 228 bytes leftover after parsing attributes in process `syz.0.941'. [ 146.652091][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 147.023840][ T9199] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 147.170194][ T9204] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 147.296163][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 147.310332][ T8477] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.330018][ T8477] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.350463][ T8477] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.367506][ T7482] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.570481][ T9241] netlink: 'syz.0.959': attribute type 11 has an invalid length. [ 147.786066][ T9253] tipc: Started in network mode [ 147.799094][ T9253] tipc: Node identity 46107e96dbc8, cluster identity 4711 [ 147.807224][ T9253] tipc: Enabled bearer , priority 0 [ 147.815391][ T9253] syzkaller0: entered promiscuous mode [ 147.820998][ T9253] syzkaller0: entered allmulticast mode [ 147.831207][ T9253] tipc: Resetting bearer [ 147.838826][ T9251] tipc: Resetting bearer [ 147.846377][ T9251] tipc: Disabling bearer [ 148.000949][ T9266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.015740][ T9266] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.143034][ T9280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.216664][ T9284] batadv_slave_0: entered promiscuous mode [ 148.242521][ T9283] batadv_slave_0: left promiscuous mode [ 148.244896][ T9287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.724729][ T9304] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 148.999215][ T9319] tipc: Enabled bearer , priority 0 [ 149.026476][ T9318] tipc: Disabling bearer [ 149.123364][ T9326] tipc: Enabling of bearer rejected, failed to enable media [ 149.546449][ T9358] dvmrp0: entered allmulticast mode [ 149.573414][ T9360] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 150.399866][ T9393] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 150.497200][ T9396] netlink: 'syz.0.1015': attribute type 17 has an invalid length. [ 150.688232][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028e61000: rx timeout, send abort [ 150.696772][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028e61000: 0x03300: (3) A timeout occurred and this is the connection abort to close the session. [ 150.827264][ T9417] __nla_validate_parse: 16 callbacks suppressed [ 150.827286][ T9417] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1023'. [ 151.026396][ T9436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1030'. [ 151.121508][ T9443] netlink: 'syz.0.1031': attribute type 83 has an invalid length. [ 151.214574][ T9457] netlink: 'syz.0.1034': attribute type 22 has an invalid length. [ 151.224934][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 151.239424][ T8475] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.239490][ T9457] netlink: 'syz.0.1034': attribute type 22 has an invalid length. [ 151.256078][ T8475] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.256748][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 151.266610][ T8475] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.286712][ T8475] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.692212][ T9498] tipc: Enabling of bearer rejected, failed to enable media [ 151.755859][ T9502] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1048'. [ 152.089170][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 152.390370][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 152.714168][ T9549] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 152.756933][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 152.803310][ T9562] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 152.828719][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 152.861372][ T9567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1067'. [ 152.881896][ T9562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.922267][ T9562] bond6: (slave veth11): Enslaving as an active interface with a down link [ 152.946989][ T9562] bond6: (slave veth13): Enslaving as an active interface with a down link [ 152.966663][ T9571] syzkaller0: entered promiscuous mode [ 152.974197][ T9571] syzkaller0: entered allmulticast mode [ 152.989432][ T9567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.035738][ T9580] delete_channel: no stack [ 153.325942][ T9602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.454474][ T9614] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 153.480800][ T9614] ipvlan1: entered promiscuous mode [ 153.487094][ T9614] ipvlan1: entered allmulticast mode [ 153.493603][ T9614] veth0_vlan: entered allmulticast mode [ 153.515053][ T9614] bridge0: port 2(ipvlan1) entered blocking state [ 153.522418][ T9614] bridge0: port 2(ipvlan1) entered disabled state [ 153.556522][ T9614] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 153.755969][ T9632] openvswitch: netlink: Key type 76 is out of range max 32 [ 154.219963][ T9665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.241637][ T9663] syzkaller1: entered promiscuous mode [ 154.249319][ T9663] syzkaller1: entered allmulticast mode [ 154.445940][ T9681] FAULT_INJECTION: forcing a failure. [ 154.445940][ T9681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.468351][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.2.1101 Not tainted syzkaller #0 PREEMPT(full) [ 154.468381][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.468391][ T9681] Call Trace: [ 154.468398][ T9681] [ 154.468406][ T9681] dump_stack_lvl+0x189/0x250 [ 154.468444][ T9681] ? __pfx____ratelimit+0x10/0x10 [ 154.468471][ T9681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.468493][ T9681] ? __pfx__printk+0x10/0x10 [ 154.468516][ T9681] ? __might_fault+0xb0/0x130 [ 154.468545][ T9681] ? rcu_is_watching+0x15/0xb0 [ 154.468565][ T9681] should_fail_ex+0x414/0x560 [ 154.468591][ T9681] _copy_from_user+0x2d/0xb0 [ 154.468612][ T9681] ___sys_sendmsg+0x158/0x2a0 [ 154.468633][ T9681] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.468665][ T9681] ? __fget_files+0x2a/0x420 [ 154.468691][ T9681] ? __fget_files+0x3a0/0x420 [ 154.468721][ T9681] __x64_sys_sendmsg+0x19b/0x260 [ 154.468740][ T9681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.468760][ T9681] ? __pfx_ksys_write+0x10/0x10 [ 154.468782][ T9681] ? rcu_is_watching+0x15/0xb0 [ 154.468801][ T9681] ? rcu_is_watching+0x15/0xb0 [ 154.468820][ T9681] do_syscall_64+0xfa/0x3b0 [ 154.468848][ T9681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.468866][ T9681] ? clear_bhb_loop+0x60/0xb0 [ 154.468886][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.468904][ T9681] RIP: 0033:0x7f85e3d8ebe9 [ 154.468921][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.468937][ T9681] RSP: 002b:00007f85e4b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.468958][ T9681] RAX: ffffffffffffffda RBX: 00007f85e3fb5fa0 RCX: 00007f85e3d8ebe9 [ 154.468971][ T9681] RDX: 0000000000000080 RSI: 0000200000000780 RDI: 0000000000000003 [ 154.468984][ T9681] RBP: 00007f85e4b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 154.468995][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.469006][ T9681] R13: 00007f85e3fb6038 R14: 00007f85e3fb5fa0 R15: 00007ffd5c720378 [ 154.469027][ T9681] [ 154.921911][ T5857] Bluetooth: hci4: command tx timeout [ 154.995719][ T9714] netlink: 'syz.1.1109': attribute type 22 has an invalid length. [ 155.128629][ T9726] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 155.439799][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.459279][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.619230][ T9713] bond1: left promiscuous mode [ 155.628085][ T9713] wireguard0: left promiscuous mode [ 155.684152][ T9725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.715192][ T9727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.726891][ T9727] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.740442][ T9727] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 155.799069][ T7476] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.842171][ T7476] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.884530][ T7476] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.887366][ T9769] netlink: 'syz.0.1119': attribute type 21 has an invalid length. [ 155.908665][ T7476] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.910583][ T9769] __nla_validate_parse: 16 callbacks suppressed [ 155.910599][ T9769] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1119'. [ 155.958559][ T7476] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.969402][ T7476] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.015669][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 156.037759][ T7476] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.074266][ T7476] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.283741][ T9796] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.327696][ T9798] netlink: 'syz.2.1128': attribute type 9 has an invalid length. [ 156.357293][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1131'. [ 156.423501][ T9804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.760819][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 156.964152][ T9850] netlink: 'syz.4.1144': attribute type 12 has an invalid length. [ 157.101125][ T9853] FAULT_INJECTION: forcing a failure. [ 157.101125][ T9853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.115380][ T9853] CPU: 1 UID: 0 PID: 9853 Comm: syz.3.1146 Not tainted syzkaller #0 PREEMPT(full) [ 157.115406][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.115417][ T9853] Call Trace: [ 157.115425][ T9853] [ 157.115433][ T9853] dump_stack_lvl+0x189/0x250 [ 157.115461][ T9853] ? __pfx____ratelimit+0x10/0x10 [ 157.115487][ T9853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.115508][ T9853] ? __pfx__printk+0x10/0x10 [ 157.115530][ T9853] ? __might_fault+0xb0/0x130 [ 157.115558][ T9853] ? rcu_is_watching+0x15/0xb0 [ 157.115577][ T9853] should_fail_ex+0x414/0x560 [ 157.115604][ T9853] _copy_from_user+0x2d/0xb0 [ 157.115624][ T9853] ___sys_sendmsg+0x158/0x2a0 [ 157.115653][ T9853] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.115674][ T9853] ? kstrtouint+0x6e/0xe0 [ 157.115709][ T9853] ? __fget_files+0x2a/0x420 [ 157.115736][ T9853] ? __fget_files+0x3a0/0x420 [ 157.115767][ T9853] __sys_sendmmsg+0x227/0x430 [ 157.115788][ T9853] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.115804][ T9853] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 157.115843][ T9853] ? ksys_write+0x22a/0x250 [ 157.115867][ T9853] ? __pfx_ksys_write+0x10/0x10 [ 157.115889][ T9853] ? rcu_is_watching+0x15/0xb0 [ 157.115910][ T9853] __x64_sys_sendmmsg+0xa0/0xc0 [ 157.115931][ T9853] do_syscall_64+0xfa/0x3b0 [ 157.115958][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.115976][ T9853] ? clear_bhb_loop+0x60/0xb0 [ 157.115997][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.116014][ T9853] RIP: 0033:0x7f379158ebe9 [ 157.116032][ T9853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.116048][ T9853] RSP: 002b:00007f37923aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.116070][ T9853] RAX: ffffffffffffffda RBX: 00007f37917b5fa0 RCX: 00007f379158ebe9 [ 157.116085][ T9853] RDX: 0000000000000002 RSI: 00002000000066c0 RDI: 0000000000000003 [ 157.116097][ T9853] RBP: 00007f37923aa090 R08: 0000000000000000 R09: 0000000000000000 [ 157.116109][ T9853] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 157.116121][ T9853] R13: 00007f37917b6038 R14: 00007f37917b5fa0 R15: 00007ffc63b9e198 [ 157.116141][ T9853] [ 157.378554][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 157.394427][ T9859] netlink: 'syz.4.1148': attribute type 30 has an invalid length. [ 157.398590][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1147'. [ 157.403015][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 157.482525][ T9864] batadv1: entered allmulticast mode [ 157.693619][ T9877] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1153'. [ 157.773105][ T9881] dvmrp0: entered allmulticast mode [ 157.838070][ T9889] FAULT_INJECTION: forcing a failure. [ 157.838070][ T9889] name failslab, interval 1, probability 0, space 0, times 0 [ 157.851279][ T9889] CPU: 1 UID: 0 PID: 9889 Comm: syz.0.1156 Not tainted syzkaller #0 PREEMPT(full) [ 157.851306][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.851318][ T9889] Call Trace: [ 157.851326][ T9889] [ 157.851334][ T9889] dump_stack_lvl+0x189/0x250 [ 157.851362][ T9889] ? __pfx____ratelimit+0x10/0x10 [ 157.851388][ T9889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.851416][ T9889] ? __pfx__printk+0x10/0x10 [ 157.851442][ T9889] ? __pfx___might_resched+0x10/0x10 [ 157.851460][ T9889] ? lock_acquire+0x5f/0x360 [ 157.851487][ T9889] should_fail_ex+0x414/0x560 [ 157.851513][ T9889] should_failslab+0xa8/0x100 [ 157.851540][ T9889] __kmalloc_noprof+0xcb/0x4f0 [ 157.851564][ T9889] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.851589][ T9889] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.851624][ T9889] genl_family_rcv_msg_doit+0xb8/0x300 [ 157.851648][ T9889] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.851673][ T9889] ? apparmor_capable+0x137/0x1b0 [ 157.851697][ T9889] ? bpf_lsm_capable+0x9/0x20 [ 157.851721][ T9889] ? security_capable+0x7e/0x2e0 [ 157.851750][ T9889] genl_rcv_msg+0x60e/0x790 [ 157.851774][ T9889] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.851792][ T9889] ? __kasan_slab_alloc+0x6c/0x80 [ 157.851815][ T9889] ? __pfx_batadv_pre_doit+0x10/0x10 [ 157.851834][ T9889] ? __pfx_batadv_netlink_set_hardif+0x10/0x10 [ 157.851855][ T9889] ? __pfx_batadv_post_doit+0x10/0x10 [ 157.851875][ T9889] ? __netlink_lookup+0xbd/0x810 [ 157.851890][ T9889] ? rcu_is_watching+0x15/0xb0 [ 157.851912][ T9889] netlink_rcv_skb+0x208/0x470 [ 157.851938][ T9889] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.851959][ T9889] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.851991][ T9889] ? lock_release+0x4b/0x3e0 [ 157.852019][ T9889] ? down_read+0x1ad/0x2e0 [ 157.852038][ T9889] genl_rcv+0x28/0x40 [ 157.852056][ T9889] netlink_unicast+0x82c/0x9e0 [ 157.852084][ T9889] ? __pfx_netlink_unicast+0x10/0x10 [ 157.852108][ T9889] ? netlink_sendmsg+0x642/0xb30 [ 157.852135][ T9889] ? skb_put+0x11b/0x210 [ 157.852154][ T9889] netlink_sendmsg+0x805/0xb30 [ 157.852186][ T9889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.852215][ T9889] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.852233][ T9889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.852253][ T9889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.852281][ T9889] __sock_sendmsg+0x21c/0x270 [ 157.852307][ T9889] ____sys_sendmsg+0x505/0x830 [ 157.852329][ T9889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.852352][ T9889] ? import_iovec+0x74/0xa0 [ 157.852375][ T9889] ___sys_sendmsg+0x21f/0x2a0 [ 157.852395][ T9889] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.852431][ T9889] ? __fget_files+0x2a/0x420 [ 157.852457][ T9889] ? __fget_files+0x3a0/0x420 [ 157.852488][ T9889] __x64_sys_sendmsg+0x19b/0x260 [ 157.852509][ T9889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.852533][ T9889] ? __pfx_ksys_write+0x10/0x10 [ 157.852556][ T9889] ? rcu_is_watching+0x15/0xb0 [ 157.852577][ T9889] ? rcu_is_watching+0x15/0xb0 [ 157.852604][ T9889] do_syscall_64+0xfa/0x3b0 [ 157.852632][ T9889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.852650][ T9889] ? clear_bhb_loop+0x60/0xb0 [ 157.852671][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.852690][ T9889] RIP: 0033:0x7fd176b8ebe9 [ 157.852708][ T9889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.852724][ T9889] RSP: 002b:00007fd177a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.852747][ T9889] RAX: ffffffffffffffda RBX: 00007fd176db5fa0 RCX: 00007fd176b8ebe9 [ 157.852762][ T9889] RDX: 0000000000000080 RSI: 0000200000000780 RDI: 0000000000000003 [ 157.852774][ T9889] RBP: 00007fd177a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.852787][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.852798][ T9889] R13: 00007fd176db6038 R14: 00007fd176db5fa0 R15: 00007ffe90ec87a8 [ 157.852820][ T9889] [ 158.328438][ T9898] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1157'. [ 158.468269][ T9908] bond0: entered promiscuous mode [ 158.474228][ T9908] bond_slave_0: entered promiscuous mode [ 158.480320][ T9908] bond_slave_1: entered promiscuous mode [ 158.665594][ T9925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1168'. [ 158.738529][ T9929] FAULT_INJECTION: forcing a failure. [ 158.738529][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 158.774192][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.3.1171 Not tainted syzkaller #0 PREEMPT(full) [ 158.774219][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.774229][ T9929] Call Trace: [ 158.774236][ T9929] [ 158.774244][ T9929] dump_stack_lvl+0x189/0x250 [ 158.774272][ T9929] ? __pfx____ratelimit+0x10/0x10 [ 158.774298][ T9929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.774320][ T9929] ? __pfx__printk+0x10/0x10 [ 158.774343][ T9929] ? rcu_is_watching+0x15/0xb0 [ 158.774369][ T9929] ? __pfx___might_resched+0x10/0x10 [ 158.774386][ T9929] ? lock_acquire+0x5f/0x360 [ 158.774412][ T9929] should_fail_ex+0x414/0x560 [ 158.774438][ T9929] should_failslab+0xa8/0x100 [ 158.774466][ T9929] __kmalloc_noprof+0xcb/0x4f0 [ 158.774489][ T9929] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 158.774514][ T9929] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 158.774539][ T9929] genl_family_rcv_msg_doit+0xb8/0x300 [ 158.774563][ T9929] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.774589][ T9929] ? apparmor_capable+0x137/0x1b0 [ 158.774620][ T9929] ? bpf_lsm_capable+0x9/0x20 [ 158.774645][ T9929] ? security_capable+0x7e/0x2e0 [ 158.774674][ T9929] genl_rcv_msg+0x60e/0x790 [ 158.774696][ T9929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.774715][ T9929] ? __pfx_batadv_pre_doit+0x10/0x10 [ 158.774735][ T9929] ? __pfx_batadv_netlink_set_hardif+0x10/0x10 [ 158.774755][ T9929] ? __pfx_batadv_post_doit+0x10/0x10 [ 158.774776][ T9929] ? __asan_memcpy+0x40/0x70 [ 158.774797][ T9929] ? __pfx_ref_tracker_free+0x10/0x10 [ 158.774822][ T9929] ? __skb_clone+0x63/0x7a0 [ 158.774844][ T9929] netlink_rcv_skb+0x208/0x470 [ 158.774869][ T9929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.774890][ T9929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.774920][ T9929] ? lock_release+0x4b/0x3e0 [ 158.774947][ T9929] ? down_read+0x1ad/0x2e0 [ 158.774966][ T9929] genl_rcv+0x28/0x40 [ 158.774985][ T9929] netlink_unicast+0x82c/0x9e0 [ 158.775012][ T9929] ? __pfx_netlink_unicast+0x10/0x10 [ 158.775035][ T9929] ? netlink_sendmsg+0x642/0xb30 [ 158.775061][ T9929] ? skb_put+0x11b/0x210 [ 158.775077][ T9929] netlink_sendmsg+0x805/0xb30 [ 158.775108][ T9929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.775136][ T9929] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.775152][ T9929] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.775171][ T9929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.775198][ T9929] __sock_sendmsg+0x21c/0x270 [ 158.775223][ T9929] ____sys_sendmsg+0x505/0x830 [ 158.775244][ T9929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.775267][ T9929] ? import_iovec+0x74/0xa0 [ 158.775290][ T9929] ___sys_sendmsg+0x21f/0x2a0 [ 158.775308][ T9929] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.775343][ T9929] ? __fget_files+0x2a/0x420 [ 158.775368][ T9929] ? __fget_files+0x3a0/0x420 [ 158.775398][ T9929] __x64_sys_sendmsg+0x19b/0x260 [ 158.775418][ T9929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.775440][ T9929] ? __pfx_ksys_write+0x10/0x10 [ 158.775463][ T9929] ? rcu_is_watching+0x15/0xb0 [ 158.775483][ T9929] ? rcu_is_watching+0x15/0xb0 [ 158.775501][ T9929] do_syscall_64+0xfa/0x3b0 [ 158.775527][ T9929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.775545][ T9929] ? clear_bhb_loop+0x60/0xb0 [ 158.775564][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.775581][ T9929] RIP: 0033:0x7f379158ebe9 [ 158.775609][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.775624][ T9929] RSP: 002b:00007f37923aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.775648][ T9929] RAX: ffffffffffffffda RBX: 00007f37917b5fa0 RCX: 00007f379158ebe9 [ 158.775662][ T9929] RDX: 0000000000000080 RSI: 0000200000000780 RDI: 0000000000000003 [ 158.775674][ T9929] RBP: 00007f37923aa090 R08: 0000000000000000 R09: 0000000000000000 [ 158.775686][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.775696][ T9929] R13: 00007f37917b6038 R14: 00007f37917b5fa0 R15: 00007ffc63b9e198 [ 158.775718][ T9929] [ 159.273463][ T9933] dummy0: entered promiscuous mode [ 159.279924][ T9933] batadv_slave_1: entered promiscuous mode [ 159.289729][ T9933] debugfs: 'hsr1' already exists in 'hsr' [ 159.295641][ T9933] Cannot create hsr debugfs directory [ 159.322306][ T9935] IPVS: Error connecting to the multicast addr [ 159.475103][ T9949] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 159.584961][ T9964] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 159.676073][ T9949] veth15: entered promiscuous mode [ 159.697946][ T9949] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 159.750586][ T7475] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 159.763962][ T9964] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.834326][ T9992] sctp: [Deprecated]: syz.0.1185 (pid 9992) Use of int in max_burst socket option. [ 159.834326][ T9992] Use struct sctp_assoc_value instead [ 159.871799][ T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 159.903167][ T9968] veth9: entered allmulticast mode [ 160.333466][T10025] FAULT_INJECTION: forcing a failure. [ 160.333466][T10025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.370855][T10027] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 160.379259][T10028] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 160.391625][T10025] CPU: 0 UID: 0 PID: 10025 Comm: syz.3.1196 Not tainted syzkaller #0 PREEMPT(full) [ 160.391663][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.391674][T10025] Call Trace: [ 160.391682][T10025] [ 160.391690][T10025] dump_stack_lvl+0x189/0x250 [ 160.391718][T10025] ? __pfx____ratelimit+0x10/0x10 [ 160.391743][T10025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.391765][T10025] ? __pfx__printk+0x10/0x10 [ 160.391789][T10025] ? __might_fault+0xb0/0x130 [ 160.391817][T10025] ? rcu_is_watching+0x15/0xb0 [ 160.391837][T10025] should_fail_ex+0x414/0x560 [ 160.391864][T10025] _copy_from_user+0x2d/0xb0 [ 160.391886][T10025] ___sys_recvmsg+0x12e/0x510 [ 160.391910][T10025] ? __pfx____sys_recvmsg+0x10/0x10 [ 160.391932][T10025] ? __fget_files+0x2a/0x420 [ 160.391965][T10025] ? rcu_is_watching+0x15/0xb0 [ 160.391990][T10025] ? __fget_files+0x3a0/0x420 [ 160.392022][T10025] do_recvmmsg+0x307/0x770 [ 160.392046][T10025] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.392073][T10025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.392109][T10025] __x64_sys_recvmmsg+0x190/0x240 [ 160.392132][T10025] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 160.392155][T10025] ? rcu_is_watching+0x15/0xb0 [ 160.392174][T10025] do_syscall_64+0xfa/0x3b0 [ 160.392202][T10025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.392221][T10025] ? clear_bhb_loop+0x60/0xb0 [ 160.392242][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.392260][T10025] RIP: 0033:0x7f379158ebe9 [ 160.392278][T10025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.392294][T10025] RSP: 002b:00007f37923aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 160.392392][T10025] RAX: ffffffffffffffda RBX: 00007f37917b5fa0 RCX: 00007f379158ebe9 [ 160.392409][T10025] RDX: 0000000000000001 RSI: 0000200000003f00 RDI: 0000000000000006 [ 160.392421][T10025] RBP: 00007f37923aa090 R08: 0000000000000000 R09: 0000000000000000 [ 160.392432][T10025] R10: 0000000040010060 R11: 0000000000000246 R12: 0000000000000001 [ 160.392444][T10025] R13: 00007f37917b6038 R14: 00007f37917b5fa0 R15: 00007ffc63b9e198 [ 160.392467][T10025] [ 160.419051][T10027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.435614][T10028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.651269][ T7482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.662595][ T7482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.700900][T10043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.846292][T10052] hsr_slave_1 (unregistering): left promiscuous mode [ 160.869331][T10055] tipc: Enabled bearer , priority 0 [ 160.929896][T10055] tipc: Disabling bearer [ 160.996142][T10067] FAULT_INJECTION: forcing a failure. [ 160.996142][T10067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.027939][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.0.1211 Not tainted syzkaller #0 PREEMPT(full) [ 161.027968][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.027979][T10067] Call Trace: [ 161.027987][T10067] [ 161.027995][T10067] dump_stack_lvl+0x189/0x250 [ 161.028023][T10067] ? __pfx____ratelimit+0x10/0x10 [ 161.028050][T10067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.028071][T10067] ? __pfx__printk+0x10/0x10 [ 161.028100][T10067] ? rcu_is_watching+0x15/0xb0 [ 161.028126][T10067] should_fail_ex+0x414/0x560 [ 161.028154][T10067] _copy_to_user+0x31/0xb0 [ 161.028177][T10067] simple_read_from_buffer+0xe1/0x170 [ 161.028206][T10067] proc_fail_nth_read+0x1b3/0x220 [ 161.028227][T10067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.028249][T10067] ? rw_verify_area+0x2a6/0x4d0 [ 161.028271][T10067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.028291][T10067] vfs_read+0x200/0xa30 [ 161.028313][T10067] ? fdget_pos+0x247/0x320 [ 161.028333][T10067] ? __pfx___mutex_lock+0x10/0x10 [ 161.028360][T10067] ? __pfx_vfs_read+0x10/0x10 [ 161.028396][T10067] ? __fget_files+0x3a0/0x420 [ 161.028423][T10067] ? __fget_files+0x2a/0x420 [ 161.028453][T10067] ksys_read+0x145/0x250 [ 161.028478][T10067] ? __pfx_ksys_read+0x10/0x10 [ 161.028500][T10067] ? rcu_is_watching+0x15/0xb0 [ 161.028520][T10067] ? rcu_is_watching+0x15/0xb0 [ 161.028540][T10067] do_syscall_64+0xfa/0x3b0 [ 161.028569][T10067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.028587][T10067] ? clear_bhb_loop+0x60/0xb0 [ 161.028609][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.028626][T10067] RIP: 0033:0x7fd176b8d5fc [ 161.028644][T10067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.028660][T10067] RSP: 002b:00007fd177a4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.028683][T10067] RAX: ffffffffffffffda RBX: 00007fd176db5fa0 RCX: 00007fd176b8d5fc [ 161.028697][T10067] RDX: 000000000000000f RSI: 00007fd177a4f0a0 RDI: 0000000000000007 [ 161.028709][T10067] RBP: 00007fd177a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.028721][T10067] R10: 0000000040010060 R11: 0000000000000246 R12: 0000000000000001 [ 161.028733][T10067] R13: 00007fd176db6038 R14: 00007fd176db5fa0 R15: 00007ffe90ec87a8 [ 161.028755][T10067] [ 161.033769][T10065] __nla_validate_parse: 10 callbacks suppressed [ 161.033787][T10065] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1210'. [ 161.110028][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 161.643709][T10101] team0 (unregistering): Port device team_slave_0 removed [ 161.678926][T10101] team0 (unregistering): Port device team_slave_1 removed [ 161.708245][T10111] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1224'. [ 161.856490][T10117] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1227'. [ 161.926268][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 162.086103][T10136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 162.098409][T10136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 162.128855][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 162.280069][T10153] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1239'. [ 162.284802][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 162.626826][T10183] netlink: 'syz.4.1250': attribute type 4 has an invalid length. [ 162.733863][T10186] vlan3: entered promiscuous mode [ 162.774798][T10189] sock: sock_timestamping_bind_phc: sock not bind to device [ 162.786922][T10193] nbd: must specify at least one socket [ 162.818334][T10195] raw_sendmsg: syz.1.1255 forgot to set AF_INET. Fix it! [ 163.008938][T10215] geneve2: entered promiscuous mode [ 163.099175][T10223] lo: MTU too low for tipc bearer [ 163.104989][T10223] tipc: Enabling of bearer rejected, failed to enable media [ 163.224933][T10233] nft_compat: unsupported protocol 0 [ 163.240418][T10228] IPVS: persistence engine module ip_vs_pe_À not found [ 163.256816][T10233] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 163.267384][T10233] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 163.481567][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 163.829726][T10258] netlink: 'syz.4.1271': attribute type 11 has an invalid length. [ 163.841246][T10258] netlink: 'syz.4.1271': attribute type 11 has an invalid length. [ 163.859180][T10261] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 163.997409][T10270] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 164.166902][T10278] tipc: New replicast peer: 224.0.0.2 [ 164.269473][T10300] netlink: 'syz.0.1278': attribute type 2 has an invalid length. [ 164.531209][T10323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.543066][T10328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.554139][T10329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.555063][T10323] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 164.703431][T10323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.741358][T10323] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 164.829167][T10323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.858945][T10323] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 164.913046][T10323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.941558][T10323] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 165.044759][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.056806][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 165.073128][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.098883][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 165.117652][ T7475] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.134173][ T7475] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 165.184660][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.196105][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 165.301251][T10375] IPv6: sit1: Disabled Multicast RS [ 165.315493][T10380] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 165.323569][T10375] sit1: entered allmulticast mode [ 165.724018][T10409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.965398][T10421] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 165.973952][T10421] batadv0: entered promiscuous mode [ 165.979617][T10421] batadv0: entered allmulticast mode [ 165.993707][T10421] bridge0: port 1(batadv0) entered blocking state [ 166.018377][T10421] bridge0: port 1(batadv0) entered disabled state [ 166.028292][T10421] bridge0: port 1(batadv0) entered blocking state [ 166.034898][T10421] bridge0: port 1(batadv0) entered forwarding state [ 166.044288][T10427] __nla_validate_parse: 26 callbacks suppressed [ 166.044309][T10427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1322'. [ 166.263762][T10433] nbd1: detected capacity change from 0 to 127 [ 166.277223][ T5857] block nbd1: Receive control failed (result -32) [ 166.277223][ T5182] block nbd1: Receive control failed (result -104) [ 166.353591][ T7475] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 166.363184][ T7475] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 166.370469][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 166.388500][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 166.460342][T10459] netlink: 'syz.3.1335': attribute type 21 has an invalid length. [ 166.487520][T10463] lo: entered promiscuous mode [ 166.501633][T10463] netlink: 'syz.4.1338': attribute type 2 has an invalid length. [ 166.517418][T10463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.775490][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 166.923395][T10497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 166.927299][T10499] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1351'. [ 167.005528][T10499] !€ÿ: renamed from bond_slave_0 [ 167.151071][T10515] veth0_to_bond: entered allmulticast mode [ 167.185192][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 167.188953][T10518] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1359'. [ 167.229031][T10518] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1359'. [ 167.344093][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'. [ 167.387392][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 167.419698][T10535] IPv6: sit1: Disabled Multicast RS [ 167.754082][T10560] IPVS: Error connecting to the multicast addr [ 167.881838][T10571] netlink: 'syz.0.1379': attribute type 14 has an invalid length. [ 167.900349][T10571] netlink: 'syz.0.1379': attribute type 13 has an invalid length. [ 167.929432][T10570] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 168.577496][T10618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.302227][T10667] dummy0: entered promiscuous mode [ 169.308186][T10667] batadv_slave_1: entered promiscuous mode [ 169.328817][T10667] debugfs: 'hsr1' already exists in 'hsr' [ 169.336212][T10667] Cannot create hsr debugfs directory [ 169.683150][T10699] nbd: must specify a device to reconfigure [ 169.714997][T10696] veth1_to_bond: entered allmulticast mode [ 169.794075][T10696] bond0: (slave bond_slave_1): Releasing backup interface [ 169.812619][T10696] veth1_to_bond (unregistering): left allmulticast mode [ 170.130454][T10723] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 170.142519][T10723] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 170.151029][T10723] CPU: 0 UID: 0 PID: 10723 Comm: syz.3.1422 Not tainted syzkaller #0 PREEMPT(full) [ 170.160404][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.170556][T10723] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 170.176116][T10723] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 170.195873][T10723] RSP: 0018:ffffc9001a61fae0 EFLAGS: 00010202 [ 170.202043][T10723] RAX: 0000000000000000 RBX: ffff88805781bc00 RCX: 0000000000000002 [ 170.210016][T10723] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.217988][T10723] RBP: ffffc9001a61fc10 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 170.225965][T10723] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff888032b48500 [ 170.233963][T10723] R13: dffffc0000000000 R14: ffff888032b48500 R15: 0000000000000002 [ 170.242044][T10723] FS: 00007f37923aa6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 170.251060][T10723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.257643][T10723] CR2: 000000110c328a85 CR3: 0000000073c26000 CR4: 00000000003526f0 [ 170.265706][T10723] Call Trace: [ 170.269082][T10723] [ 170.272106][T10723] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 170.277230][T10723] ? bpf_lsm_capable+0x9/0x20 [ 170.281911][T10723] ? security_capable+0x7e/0x2e0 [ 170.286860][T10723] rose_ioctl+0x3ce/0x8b0 [ 170.291187][T10723] ? __pfx_rose_ioctl+0x10/0x10 [ 170.296121][T10723] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.301256][T10723] sock_do_ioctl+0xd9/0x300 [ 170.305851][T10723] ? __pfx_sock_do_ioctl+0x10/0x10 [ 170.311053][T10723] ? do_futex+0x395/0x420 [ 170.315570][T10723] sock_ioctl+0x576/0x790 [ 170.319918][T10723] ? lock_release+0x4b/0x3e0 [ 170.324519][T10723] ? __pfx_sock_ioctl+0x10/0x10 [ 170.329405][T10723] ? __fget_files+0x2a/0x420 [ 170.334001][T10723] ? __fget_files+0x3a0/0x420 [ 170.338705][T10723] ? __fget_files+0x2a/0x420 [ 170.343386][T10723] ? bpf_lsm_file_ioctl+0x9/0x20 [ 170.348403][T10723] ? __pfx_sock_ioctl+0x10/0x10 [ 170.353288][T10723] __se_sys_ioctl+0xfc/0x170 [ 170.357899][T10723] do_syscall_64+0xfa/0x3b0 [ 170.362441][T10723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.368520][T10723] ? clear_bhb_loop+0x60/0xb0 [ 170.373292][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.379223][T10723] RIP: 0033:0x7f379158ebe9 [ 170.383730][T10723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.403342][T10723] RSP: 002b:00007f37923aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.411798][T10723] RAX: ffffffffffffffda RBX: 00007f37917b5fa0 RCX: 00007f379158ebe9 [ 170.420033][T10723] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000008 [ 170.428009][T10723] RBP: 00007f3791611e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.436159][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.444151][T10723] R13: 00007f37917b6038 R14: 00007f37917b5fa0 R15: 00007ffc63b9e198 [ 170.452134][T10723] [ 170.455151][T10723] Modules linked in: [ 170.459269][T10723] ---[ end trace 0000000000000000 ]--- [ 170.464782][T10723] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 170.470297][T10723] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 170.490411][T10723] RSP: 0018:ffffc9001a61fae0 EFLAGS: 00010202 [ 170.496557][T10723] RAX: 0000000000000000 RBX: ffff88805781bc00 RCX: 0000000000000002 [ 170.504593][T10723] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.512635][T10723] RBP: ffffc9001a61fc10 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 170.520721][T10723] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff888032b48500 [ 170.528852][T10723] R13: dffffc0000000000 R14: ffff888032b48500 R15: 0000000000000002 [ 170.536887][T10723] FS: 00007f37923aa6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 170.545883][T10723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.552535][T10723] CR2: 000000110c328a85 CR3: 0000000073c26000 CR4: 00000000003526f0 [ 170.560728][T10723] Kernel panic - not syncing: Fatal exception in interrupt [ 170.568384][T10723] Kernel Offset: disabled [ 170.572853][T10723] Rebooting in 86400 seconds..