last executing test programs: 4.511975146s ago: executing program 3 (id=2272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0019000e"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000, 0x204}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2a}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r4, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c050}, 0x24004000) 4.23657276s ago: executing program 3 (id=2276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="040025bd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="06c15233a5e6aaec6227c4e5cf240d00000017e0a0d40fee9b325211b35485e8fcb5171a848a1401814da4835629064e55a6ec710baf0a2e2d25b5"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000e4ff00000000000003000000003000"], &(0x7f0000000280)=""/164, 0x1b, 0xa4, 0x3ff, 0xff}, 0x28) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000004000000070000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x1410, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20001051}, 0x40048c4) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0xf07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0xdffffff6}}], 0x18}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r11, 0x0, 0x9, &(0x7f00000004c0), &(0x7f0000000580)) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000005c0), 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r12, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r12, &(0x7f00000002c0)="ed", 0x51, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x7f}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000500)="bd3c441a8ba2c22e90864eb2bbe14399b40a969c857a997ea8d7804aabf11416bee61c125c284e4b0b1989b02332c9d69063f28b7750f043a60ea2e3762d3d12cd3c5906d0a7dcd13b0e39b496062cf60fa27c2dc13ae8f54c22412281590b8e6aff4e39b1b26179", &(0x7f0000000440)=@tcp=r10}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 3.947538741s ago: executing program 3 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x35, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xa}, {0xfff7, 0x9}, {0x1}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4890) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000014e17c6770c814255fc28c5a3fab6bf8c0195fc630fd6e2bc04eff3f2a2c4f8aefd2162ab49ac2bb9d3889da91ad734fa673c3b0be5afd16905b56df108c4506d534f4c19ab8f8fa8abf96340c046fd495d49dc3831", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0xcc, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080049b400ba00000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000028c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994a0f699859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e06e0ab3ff09e0b30cee48c8b49d03205044d6261597fe8ff4328a09206d3e45af82f2d67a60fe589fa9a1dccd7bb9404413d4d938edf023dc79c654c8e3063dc42933345da6286cb307f1a888cea8d0005ec6ce7eeb714906e0849639"], 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.708014065s ago: executing program 0 (id=2281): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000880)=0x7fff, 0x4) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket(0x8, 0x3, 0x0) 3.199966483s ago: executing program 2 (id=2289): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.033755759s ago: executing program 2 (id=2290): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xb, '7v'}], 0x18}, 0x7c40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c004}, 0xc054) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x9, @none}, 0xe) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000700)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.747366897s ago: executing program 3 (id=2293): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x2, 0x0}, 0x20008010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325c57000fcffffff07000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r2, @ANYBLOB="0000000000000103b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000809500000000000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r4) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000045}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x16) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) accept4$nfc_llcp(r4, &(0x7f00000001c0), &(0x7f0000000280)=0x60, 0x80800) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000500), &(0x7f00000003c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xffffffff}, 0x1c) listen(r9, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @multicast}, 0x10) 2.725170904s ago: executing program 0 (id=2294): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 2.599973201s ago: executing program 2 (id=2295): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x24}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.937522754s ago: executing program 1 (id=2298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 1.936056673s ago: executing program 2 (id=2299): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r2, 0xd371f000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xba2}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10007}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x108013, r7, 0x724ff000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004400000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000085000000a00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x50) r11 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000006c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffd95, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000844) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000500)) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000480)={{r10}, 0xd, 0x2, 0x49e1}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7dc3, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.93252607s ago: executing program 0 (id=2300): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = bpf$PROG_LOAD(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="08000800140000054514033600000000082f9078000000005effffff810022eb000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000f59ff6a0dc9f072d4ebc1cd6da26"], 0x44) epoll_create(0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r4}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r4}, 0x14) pipe(&(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r5], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b100000002dbccfc3b822d36b060000003aa700000000040000391040563367227840bbd6e9ba286000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x1c, &(0x7f0000000280)=ANY=[@ANYRES16=r9, @ANYRES8=r0, @ANYRESOCT=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000c95fbee0c1aeee9ff8b20000000056080000000000008500000007000000b700000000000000950000000000000084039b30d9bf2290791cd7d520214f327c239f3d80aa425fb3d4af05e0af4e0c55ad11144fc1e6f446816cd0d33cb0eaa3a089fddd9085ab12e015c12746239d9b5b2ff3506cf4dd83ed9a6341033368e524db5c1dc104eec13aeb291bcf3a3fe8c474adf3cc86ba5296"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 1.859733013s ago: executing program 4 (id=2301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0xb}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44008040}, 0x40008d2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x7, 0x0, 0x0, 0xfe, 0x9, @remote}, 0x10) unshare(0x20000400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000f3ffffff0000002280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 1.464094293s ago: executing program 1 (id=2302): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="36bd1279a5343c48ea46b1ecc5952852818430fbe639a09e08dd8be4308274b9f06060de0173ec6049ee3c6508f0f0911a28e34d40378a1d7e529263b6930701f19aaa5279bffdb36dbae27bee2285586c591f04b9007ffa27ff5b8c0476917d7eff9555e7a71c361db3d53963eef4b35d895fc3828081a347ea3244b9c905f319dd52743627b6051bd57abeb4dcdd3250b314ed08", @ANYBLOB="074e725d889c37c378d6defba6f1429caf354b40a3d297eaa72b008e2f0ccc3b8170eb264970cd614616d0c87b9d4254935758cd39"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.420605772s ago: executing program 4 (id=2303): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x6, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={r1, 0x200, 0x10001, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x6b93901c5fd0ac4a}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20008084) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/142, 0x8e}], 0x2, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r9, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000001040)=0x0) sendmsg$nl_xfrm(r9, &(0x7f0000001240)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1004041}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)=@polexpire={0x17c, 0x1b, 0x200, 0x70bd25, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@local, 0x4e24, 0x4, 0x4e23, 0x2ea7, 0x2, 0x20, 0x100, 0x6, r11, r12}, {0x8, 0x10000, 0x80000000, 0x7, 0x7, 0x5, 0x7ff, 0x5}, {0x9, 0x9, 0x2, 0x7ff}, 0x401, 0x6e6bbc, 0x0, 0x0, 0x2}, 0x1}, [@sec_ctx={0x8e, 0x8, {0x8a, 0x8, 0x1, 0x0, 0x82, "03ea27359734bce7446bf52c04d7d1a650c70aa931a4224ffb13ac5fa7506c0b2a17cbe1ee32da865e2e3b74232fe9517a838654b6c14f2ac317b8e5b00cec9401c971b432b08579c63f8c1114ac739ab6a7fef1753cfedf12ac781cbea49157997d53975f7b1a261919671303d2a7154109b4642e2930d8657436a32de83bd2115f"}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2d, 0x70bd25, 0x70bd25, 0x70bd2b, 0x7fff, [0x0, 0x1, 0x0, 0x9]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@bridge_newneigh={0x68, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, r11, 0x20, 0x2, 0xa}, [@NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}, @NDA_PROBES={0x8, 0x4, 0x1}, @NDA_MASTER={0x8, 0x9, 0x2}, @NDA_CACHEINFO={0x14, 0x3, {0x401, 0x1, 0x4, 0x7}}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_PROBES={0x8, 0x4, 0xfffffffb}, @NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0xc4) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xcc, r13, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x11) ioctl$AUTOFS_IOC_FAIL(r10, 0x9361, 0x9) syz_emit_ethernet(0x62, &(0x7f00000015c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x6}, {0x9, 0x0, 0x1}], @generic="9aff9f131482ce26401b73fe810a92a8984f6d0eded8cc4983ce0a7b7e207af4f1427779d1d3b3455ae36bac035349db4c6e1e93129b2d129588a3b1c364ab71b92e45e9"}}}}, &(0x7f0000001640)={0x1, 0x1, [0x1ad, 0x5b, 0x313, 0x5ef]}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001680)={r9}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000016c0)={'wlan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x3, 0x6, 0x5, 0x20080, 0xffffffffffffffff, 0xe, '\x00', r11, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x5}, 0x50) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r14, &(0x7f0000001c80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001800)={0x410, r15, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xc3, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x100, @val=0xf8c, @void, @void}}, @prep={0x83, 0x1f, {{}, 0x3, 0x4, @device_b, 0x4, @void, 0x8, 0x1, @device_b, 0x4}}, @perr={0x84, 0x2f, {0x9, 0x3, [{{}, @broadcast, 0x7f8, @void, 0x25}, {{}, @device_a, 0x5, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0xc00000, @value=@device_b, 0xe}]}}, @preq={0x82, 0x57, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x7f, 0xdf, 0x6, @device_a, 0x1, @value, 0x7, 0x1, 0x5, [{{0x1}, @device_a, 0x80000001}, {{0x0, 0x0, 0x1}, @device_a, 0x3}, {{}, @device_a, 0xffffffff}, {{}, @device_b, 0x4}, {{}, @broadcast, 0x7fff}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0x101, 0xc6}}, @challenge={0x10, 0x1, 0x5d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "8240838425f8887d2223a9097013ec8f400c6810cc987b3bc658a72a59120f710ad534ac800dac492bc29ea923b1"}, @NL80211_ATTR_FILS_ERP_REALM={0xee, 0xfa, "7903ca93ce37e7b4c36d1aa6325ab763d301a3546e6a63c572bd340f6c03efdb1b66fef95d07e4ed5cfa6d162605acc479b452e54fa2d64810816be7ceeb4e8b9748af2b696e02a0f7bd80352c76d6e6d9eec97f790ef04ef8fab309d23879344dc05dcc491c994ed234ab4063b26686c8aea8befdc85de3fba7448291e94960530d11228f7b4e6dba462ae3693e3b736123bc253c23546bf51c5a9770885747bf6ec828e63446f835c767a1431e82c2b469d141af9e77adcd13e40dc0539a22637beb052a1ca4b523f3a1f1e7c5f4cdbe3262af22adad49e62db2bbd8d544acd0fa407193ad91bbf7a1"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1000}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "0cf2ade264"}, @NL80211_ATTR_FILS_ERP_REALM={0xcc, 0xfa, "90481e30ad0723206f5e8fe2bfdc7e2b2f5a0dde552c1621f70c3a8dbf1b8cbeac31c8fc2e03229271cf3404f0de4eca2af96482e2317eb9c3cdd1410661212423eafcd918f9f6eced88202092939b4100102903584eb8a2cb6c0c9106dab8f1684ca5f24dbb13ff42615e3c2eea7e4db1623ba8dad01e3d533bed6aa781c0d81300e8c21e495abe379fab8682b08a496f93d52a6f4eb60aa18b0e4826fe3ca9550d6516ceea099396e159db0d30f7a95803100a79487c8944ee1fc6a9bf74db1f1f27390d49eb24"}], @NL80211_ATTR_IE={0xef, 0x2a, [@measure_req={0x26, 0xca, {0x6, 0x3, 0xbf, "b8fa8c1315542bf4cb606ed1d690eed3fe6cf8e6cd3ad624934b31dd2cd0a849435f852f62d7bed4bd9f29fb33f061579f690d0e7d22e856410ae04fce3944d596ecf90cd86d9aa61d04c30be23f36c71c44b48b6f108ba33e67b03fb636f5f4840b74f3ed06b26643da7e8a3223bfce469c9c7e5e7a15d7668beab461ca83f6c37d43aa8ba870069e6eafe674451cb7db09d902babe02da5dc75c358bf1633a0d5ca8bf01d6ca02ccf03f50f6239621248153a9ec34a84acfe85bb1eb1f8ce9665056609cc48d"}}, @mesh_chsw={0x76, 0x6, {0xe0, 0x41, 0x3e, 0x9}}, @link_id={0x65, 0x12, {@random="fbe30f0d9cc7", @broadcast, @broadcast}}, @dsss={0x3, 0x1, 0x2}]}, @NL80211_ATTR_IE={0x39, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @preq={0x82, 0x30, {{0x1}, 0x3, 0x6, 0x2, @device_b, 0x5, @void, 0x800, 0xf, 0x2, [{{0x1}, @device_a, 0x401}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}]}}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x1}, 0x5) sendmsg$tipc(r8, &(0x7f0000002000)={&(0x7f0000001cc0)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x1}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001d00)="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", 0xfe}, {&(0x7f0000001e00)="2de0f021dd72529929c430e98e1dba7cf8c7b5b088bc56a4dcb9d024e31b5614344d8a452e68acf3f4f79d48508376421092357ac1ab82565c9289de0c50db921363331d1b0f3cc73a6cdca0c054fb87d0e8bda83abe8ba81953e52a1655f6eccaadac9f9d7469fee84f99f2f49a26f24362afdf192f83389da61e588d11b35e1c17f9c3", 0x84}, {&(0x7f0000001ec0)="254c64b927042de80c02c1b49943bbd7b19992c24b56cc206672cea18bbc37814dd9ee4456ff73dd6d5b52b58357b6cf7ba1269c736d943250ce2cd799006194eabc3ba5db5277e5ddf8f1ca86a7e041ece36e145ecde77bfa7b09dc41e99fecd70b95e8041e5668b294588ea1cad5c73ad6a0dc9bbacc06138da8bfdb35c1", 0x7f}], 0x3, &(0x7f0000001f80)="4dbb0e7a41946bc8c907b59f5de17e247838d605675e1e77b12917d1071ed768b3ae2886eec6d5e1ee07865b96786628e9ebc727bb54675dc207892463bcdab1aee67d9c90b5d1cefdcbf12907dc3955b45ebebeef4827aa0aee132a397af547", 0x60, 0x20008800}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@bloom_filter={0x1e, 0x8, 0x1, 0x2, 0x20008, r6, 0x4d, '\x00', r11, r7, 0x3, 0x0, 0x0, 0x5}, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000020c0)={@mcast1, 0x7f, r11}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000002100)=0x40, 0x4) r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r16, &(0x7f0000002140)={0x1f, 0x1, 0x1}, 0x6) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000021c0), r10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x4c, r17, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcce5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044091}, 0x4008040) 1.388694216s ago: executing program 2 (id=2304): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) unshare(0x6a040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000880)=0x7fff, 0x4) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket(0x8, 0x3, 0x0) 1.216028065s ago: executing program 0 (id=2305): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r2, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r5}, &(0x7f0000000c00), &(0x7f0000000c40)=r3}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c00028006001200", @ANYBLOB="0400140008001d00027f"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) (async) unshare(0x8000400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, &(0x7f0000000240), 0x40f00, 0x14, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x7, 0xfffffffa}, 0x10, 0x2902e, 0xffffffffffffffff, 0xa, &(0x7f0000000300)=[r6], &(0x7f0000000340)=[{0x0, 0x1, 0x9, 0xb}, {0x3, 0x5, 0x9, 0xc}, {0x3, 0x2, 0x3, 0x2}, {0x4, 0x3, 0x1, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x4, 0x3, 0x6, 0x3}, {0x0, 0x2, 0xc, 0x4}, {0x3, 0x1, 0x5, 0x4}, {0x1, 0x3, 0x6, 0x5}, {0x3, 0x3, 0x1, 0x3}], 0x10, 0x2}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x81}]}, 0xfffffdae}}, 0x0) 1.205170385s ago: executing program 4 (id=2306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008850}, 0x45000) 1.06189942s ago: executing program 0 (id=2307): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.003897745s ago: executing program 3 (id=2308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="606f3af9", 0x4}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x40, @loopback, 0xa7}]}, &(0x7f0000000500)=0x10) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, r6, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30001148}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x120, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0x9b, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7c8dad273ffabc41}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.003184323s ago: executing program 4 (id=2309): socket$kcm(0x2, 0x5, 0x84) (async) r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a00)={{r0, &(0x7f0000000180)='GPL\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0xd7a0, 0x9]}, {0x7, 0x5, 0x10, 0x100}}, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x80d}, 0x6, &(0x7f0000000940)=[{0x2, 0x6, &(0x7f0000000300)='!*}\x00', &(0x7f0000000380)="4e96eaced810680a3fff62247668c62ed6001fd21ffa93003bd02515c8c9561424ff6b503f41af16d8b8f3ce4d69ccc6820b571d4cf2ebf90d672aaa1fa6f916e990155da15d5a696cb88be81c829a81159387abd68a5156a44744d70528fb756581bdf7ba8f657d85008769a46ac3105f630d7b32e167dd4313199d36db2e2ba0703db76eec62aa96c33e54a6bbba02c0c64c0558af4a50207b95078a75a4e97745969c8bf916843a77ab0fce18f3168bcb2e6e38c71e30e6ecb8b95553288d82573ee6c7545e7a644a10c4c5fb3c601768785d6aaf5bb3cf49cf", 0xdb, 0x8}, {0x2, 0x1, &(0x7f0000000480)='(#>@[\xab&#\x00', &(0x7f00000004c0)="082f36564b8a973baca11b64eec1713d31fb2734bd3d3e8e25e66be716cbd7ef935194850deddc46796954b1ef6e3575eb0acf38bb9a2c35a20e19b63e095680cfc4d3a4ddbd0aa03f6c6cb333272c88d701a8b6d9aeb595a61ce9c55826ea8fa05ae19e95300eb2e73f43c3d2b2d3522b6a35808910ed0c125e8d6456d7de1e58b4", 0x82, 0x20}, {0x3, 0x1, &(0x7f0000000580)='{(/[#\x00', &(0x7f00000005c0)="6c5b431249cea2e1cc3bd9804b19e5aa2ea3c7fee3351d7a11ee15949a8a38d4a32e2a616dc0084eb4de027645599175", 0x30, 0x1a}, {0x1, 0x1, &(0x7f0000000600)='%,*\x00', &(0x7f0000000640)="8883ee96475a9fd83bcf30787d2594186cd23bd08f2c061989e8e0858422d02c3b430a98a6a95744ba4a39df62369ab6ee457ecea29a58a300f0beee052c61b6585690097d5cb0a00ce267e8da04d206013373666e426dd20546271bd83c78dcee777febbb41e830a8652c3eb6339991637e777eaec24f1aeffec53e25789cab3430930529471e79b3793c79c12197181f3f2a8019a08027", 0x98, 0x20}, {0x2, 0x4, &(0x7f0000000700)='IPVS\x00', &(0x7f0000000740)="00342d5dea81063becc67415d968e3223ea339f54485f979ee77fa435209f3486dadc47c6e6cf86db99e38dd415df46e44e4db59503836b4d711aa80934a7b8e705cddccece4dad50ca8b4224d2ab896ba764cd8608c80b17c1ea8d6f57b7b50607c12e7e5fe5d4e7f2af65ec31835a67e8c2c4c6e631ebeda94f1850c6afb854fb2b996cd0061be118156d6e0c1351883b7d7d9a41c7a322efcfef8d99bce730994d8e11c0cd37210a64baab7b5a88feb971f31505d9e3ce01482d3312e44437822430dfab51a7c9d6656a358b40798f87dd33c41876eaaf8e0d260b2bd5065e9cf0e5d3337d76a", 0xe8, 0x2a}, {0x1, 0x7, &(0x7f0000000840)='\x00', &(0x7f0000000880)="9693bbd0f5bd3ba5413eebaf71458e895a16cbf31b8fb9232b0a38e78b3b364da8d9ba7e5473058c4d045e9929e811a0228c51b29114de05458bd8e83a688e1c96e49e2749358e64c8db4788c2ba4a3e4846d76a8366dd3ac21e0f8a3c88f3f36ca6b834a39ec9801fff7512cffcc76a4626408badfc40839ca5074dd9accf30b760d07b98c58c7fe2e2a5640fe141dee127f261d4f4175da80351203eb48d34742aaaa00045", 0xa6, 0x20}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000a80)='cpuacct.stat\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000a80)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000)=r2, 0x62) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="40000000000000009500010000000000"], &(0x7f0000000280)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0xffffd49c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) 932.775327ms ago: executing program 3 (id=2310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'NLBL_CIPSOv4\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'NLBL_CIPSOv4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x58}}, 0x0) 923.980956ms ago: executing program 0 (id=2311): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x4000800) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x400c840) 859.00671ms ago: executing program 4 (id=2312): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000030}, 0x11) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x80000000}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003880)=ANY=[@ANYBLOB="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"], 0x4718}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x82, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000000780)=0x2e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000007c0)="87167da334a85edb36b880d36c03a4e67579375b", &(0x7f0000000840)="b89e9772f85699acf3bdcf65ca2bd4979fdd5677eba9e627065fd10f6403d5f6d43f7032f2431351e2c854f53a29392ec56bfc691a878513046075f96dce4e", 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4001000000000000fe88000000000075f7229900eb00000120010000000000000000000000000000fffd00004e2400000200002000000000a670dff12f51ad466cf4f31b7ec88fd844314893d0998c7e6844d4d7e458b83f0015c9c499922cfb44aa2a790a5e3a2357a3b29bc725ca03f9fe35bcd5a3b8800bd0b8a9b5017de1383dc45b3d5bee412352d49a9e69bca997ca3bccb147e6090c8a0484ecd4c072b65e2ccff73c2279e7966d74154f25303b9f7e539ebe2b37bceda6c3dd29024e2469fe356887ed1aabb04a3d00"/224, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0100000000000000000000000000000000000000000000070000000000000000000000008000000400000000000000f7b500000000000004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f8000000000000000300000000000000040000000200000100000000000000004f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000004000000006ec8700"], 0x140}}, 0x844) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 356.778634ms ago: executing program 1 (id=2313): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) (fail_nth: 95) 237.770938ms ago: executing program 2 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@newlink={0x7c, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x50483, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe93d}, @IFLA_MAP={0x24, 0xe, {0x3, 0x431, 0x4, 0x1, 0x3, 0x9}}, @IFLA_TXQLEN={0x8, 0xd, 0x7ff}, @IFLA_WEIGHT={0x8, 0xf, 0xe1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9005}, 0x40008c0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) connect$nfc_raw(r1, &(0x7f00000000c0)={0x27, r3, 0xffffffffffffffff, 0x4}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x70, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x0, 0x80}}, [@sec_ctx={0xc, 0x8, {0x3}}, @mark={0xc, 0x15, {0x0, 0x100}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x70}}, 0x4004040) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) write$rfkill(r8, &(0x7f0000000400)={0x0, 0x8, 0x2, 0x0, 0x1}, 0x8) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001d80)={0x688, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x10, 0x3, "a2c53ad46925990ca585ea07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbb, 0x3, "2b05c25360d12d9831655ef2c472932f64c1ea4b9d5dd63f5b5bbe5ae0694c2cf447b24f0952373f58803f072182d72bd93a47c70fd4c87d3cb748bbdcd69eece8d194fbd54cb4772f6d30dcac7cfe24926931f696d038db734332080f0dfab8c14c10a4f2ac212cc75da7d77702e285daed075c184a12260c826bdd9e4e9ae78ca03d57f4c977a16e26b851796f9964fc902de944d9ca927613a26a6edcbab86f86fe59f518db4ba9789bd578a4f6d2d71fbe9ee2498b"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "de44b1756e24dac766c114129d6ea3421a34e3e927c5a8c1f2"}}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "f240480a44611e6553d2456c4822eb61c87e3b5004afa50e9e73f3c55a89a7dd5801d38cf62fab64789f6e9623b5c1e098f870ca1164848ebeab973b633e7a1edc78a258bcd6111639e65696c785a1308ff11cbdc5264fb6cffcff673a311721cbfb090663686ea30113fd10e99d387a27bad6e612a24e2c6abe85b3788e0ac23355620fdaab4236367434759d414bb362318054b1ee0afb95f6c2a522b8767124eb884f608331ab6a81173bcae805fa2f50d660e5d18b0968466287550ef945751fe88d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2c64}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3571fd17852d6df40083d9d1d84e9d9b7a44467cb671"}}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "3ad50a75039bba5d605c99646012d1d7a46e0e2d77f2b19690c98180ca36c1b6f828f2dcd7f08fe0e51b1185e4ad76409f05868b14f66bba8c9a7421738421d3db2e9cc0da6da155bfde8159de51cc1f80d790fde1c4ac3709128d9a16df46d6c34ed7148ed2269b401fded65c589437d4d060cb23c651e5106e99fc470a23a8b59f929a413253bf983a72737bc49c23e4a53c009ef297174d5b7809197591cff3d07eaa97df567832a3bb40413bed7702"}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x57}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a47}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x47bb}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff800000}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc50d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcadc}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x64}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa3a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3422}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63a17184}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47a7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x688}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000003c0001"], 0x50}}, 0x0) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0x1}, @func={0xb, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x61, 0x30]}}, &(0x7f0000000ec0)=""/181, 0x51, 0xb5, 0x1, 0x57, 0x10000}, 0x28) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001080)=[0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0], 0x0, 0xeb, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0xd, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r14}, &(0x7f0000000380), &(0x7f00000000c0)=r15}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)}, 0x20) (async, rerun: 32) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1a, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x101, 0xde, &(0x7f0000000d40)=""/222, 0x41000, 0x6, '\x00', r2, @tracing=0x1b, r12, 0x8, &(0x7f0000000fc0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0x1, 0x7, 0x9}, 0x10, r13, 0xffffffffffffffff, 0x3, &(0x7f0000001540)=[r14, r16, r17], &(0x7f0000001580)=[{0x1, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x8}, {0x3, 0x5, 0xa, 0xc}], 0x10, 0x1000}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x7}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xbf15}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 208.721988ms ago: executing program 1 (id=2315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x53e94e145082ecb3, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40148c0}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newqdisc={0xb0, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x1ff, 0x4, 0x1, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8000, 0x8, 0x7fffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7ff, 0x3, 0x7, 0x3e4}}, @NETEM_LOSS_GE={0x0, 0x2, {0x3e1695b3, 0xfffffff7, 0x2, 0x2}}, @NETEM_LOSS_GI={0xfffffffffffffe1e, 0x1, {0x400, 0x7, 0x1, 0x1, 0x5}}]}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r3, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f6d42ea10db3a3d9d7bca90ec417f65955f", 0x1f, 0x20000090, &(0x7f00000000c0)={0x11, 0x11, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 84.271927ms ago: executing program 1 (id=2316): r0 = socket(0x18, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3fd, 0xfffffffc, 0xc9, 0x0, 0x7f, 0x80000001, 0x80005}}) 58.495194ms ago: executing program 1 (id=2317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 0s ago: executing program 4 (id=2318): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x3c, 0x29, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x3, 0x9}, {0xfff0, 0x1}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, 0x0, 0x14) (async) write$nci(r1, 0x0, 0x14) kernel console output (not intermixed with test programs): ____sys_sendmsg+0x10/0x10 [ 259.054689][T11737] ? __fget_files+0x2a/0x420 [ 259.054714][T11737] ? __fget_files+0x3a2/0x420 [ 259.054747][T11737] __x64_sys_sendmsg+0x1b1/0x290 [ 259.054779][T11737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.054825][T11737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.054847][T11737] do_syscall_64+0x174/0x580 [ 259.054874][T11737] ? trace_irq_disable+0x3b/0x140 [ 259.054897][T11737] ? clear_bhb_loop+0x40/0x90 [ 259.054920][T11737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.054939][T11737] RIP: 0033:0x7f8caef9de59 [ 259.054957][T11737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.054973][T11737] RSP: 002b:00007f8cafe1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.054994][T11737] RAX: ffffffffffffffda RBX: 00007f8caf225fa0 RCX: 00007f8caef9de59 [ 259.055007][T11737] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 259.055019][T11737] RBP: 00007f8cafe1a090 R08: 0000000000000000 R09: 0000000000000000 [ 259.055030][T11737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.055041][T11737] R13: 00007f8caf226038 R14: 00007f8caf225fa0 R15: 00007ffeddd8b8e8 [ 259.055072][T11737] [ 259.346886][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 259.639836][T11741] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.691741][T11749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.708454][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 259.728491][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 259.978882][T11758] netlink: 'syz.0.1483': attribute type 1 has an invalid length. [ 260.002878][T11752] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 260.030549][T11752] bond8 (unregistering): Released all slaves [ 260.146982][T11766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.156804][T11766] bond4: (slave bond5): making interface the new active one [ 260.174637][T11766] bond4: (slave bond5): Enslaving as an active interface with an up link [ 260.205957][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1486'. [ 260.300064][T11775] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 260.464412][T11786] FAULT_INJECTION: forcing a failure. [ 260.464412][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 260.503452][T11786] CPU: 0 UID: 0 PID: 11786 Comm: syz.1.1489 Not tainted syzkaller #0 PREEMPT(full) [ 260.503478][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.503488][T11786] Call Trace: [ 260.503495][T11786] [ 260.503502][T11786] dump_stack_lvl+0xe8/0x150 [ 260.503536][T11786] should_fail_ex+0x40c/0x560 [ 260.503563][T11786] should_failslab+0xa8/0x100 [ 260.503597][T11786] __kmalloc_noprof+0xfe/0x720 [ 260.503628][T11786] ? ethnl_default_set_doit+0x169/0x1080 [ 260.503650][T11786] ? ethnl_default_set_doit+0x169/0x1080 [ 260.503676][T11786] ethnl_default_set_doit+0x169/0x1080 [ 260.503698][T11786] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 260.503728][T11786] genl_family_rcv_msg_doit+0x233/0x340 [ 260.503756][T11786] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 260.503790][T11786] ? bpf_lsm_capable+0x9/0x20 [ 260.503813][T11786] ? security_capable+0x7e/0x2c0 [ 260.503847][T11786] genl_rcv_msg+0x614/0x7a0 [ 260.503877][T11786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.503898][T11786] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 260.503921][T11786] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.503951][T11786] netlink_rcv_skb+0x226/0x4a0 [ 260.503981][T11786] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.504005][T11786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.504046][T11786] ? down_read+0x2be/0x330 [ 260.504070][T11786] genl_rcv+0x28/0x40 [ 260.504090][T11786] netlink_unicast+0x7bb/0x940 [ 260.504125][T11786] netlink_sendmsg+0x813/0xb40 [ 260.504147][T11786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.504166][T11786] ? aa_sock_msg_perm+0xf1/0x1b0 [ 260.504190][T11786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.504207][T11786] sock_sendmsg_nosec+0x13a/0x180 [ 260.504233][T11786] ____sys_sendmsg+0x54e/0x850 [ 260.504265][T11786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.504302][T11786] ? import_iovec+0x73/0xa0 [ 260.504333][T11786] ___sys_sendmsg+0x2a5/0x360 [ 260.504360][T11786] ? __lock_acquire+0x683/0x2cf0 [ 260.504391][T11786] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.504453][T11786] ? __fget_files+0x2a/0x420 [ 260.504477][T11786] ? __fget_files+0x3a2/0x420 [ 260.504511][T11786] __x64_sys_sendmsg+0x1b1/0x290 [ 260.504541][T11786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.504587][T11786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.504609][T11786] do_syscall_64+0x174/0x580 [ 260.504643][T11786] ? trace_irq_disable+0x3b/0x140 [ 260.504667][T11786] ? clear_bhb_loop+0x40/0x90 [ 260.504692][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.504711][T11786] RIP: 0033:0x7f83da79de59 [ 260.504729][T11786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.504745][T11786] RSP: 002b:00007f83db5a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.504766][T11786] RAX: ffffffffffffffda RBX: 00007f83daa26090 RCX: 00007f83da79de59 [ 260.504779][T11786] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 260.504791][T11786] RBP: 00007f83db5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 260.504803][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.504814][T11786] R13: 00007f83daa26128 R14: 00007f83daa26090 R15: 00007ffc91a24cf8 [ 260.504843][T11786] [ 260.542653][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1491'. [ 260.780039][T11795] tipc: Enabling of bearer rejected, failed to enable media [ 260.911269][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 261.174312][T11808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1496'. [ 261.319281][T11806] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 261.342304][T11806] bond6 (unregistering): Released all slaves [ 261.536655][T11816] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 261.586128][T11832] FAULT_INJECTION: forcing a failure. [ 261.586128][T11832] name failslab, interval 1, probability 0, space 0, times 0 [ 261.606245][T11832] CPU: 1 UID: 0 PID: 11832 Comm: syz.1.1503 Not tainted syzkaller #0 PREEMPT(full) [ 261.606276][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.606287][T11832] Call Trace: [ 261.606296][T11832] [ 261.606307][T11832] dump_stack_lvl+0xe8/0x150 [ 261.606343][T11832] should_fail_ex+0x40c/0x560 [ 261.606371][T11832] should_failslab+0xa8/0x100 [ 261.606400][T11832] __kmalloc_noprof+0xfe/0x720 [ 261.606424][T11832] ? ethnl_default_set_doit+0x169/0x1080 [ 261.606443][T11832] ? ethnl_default_set_doit+0x169/0x1080 [ 261.606470][T11832] ethnl_default_set_doit+0x169/0x1080 [ 261.606491][T11832] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 261.606522][T11832] genl_family_rcv_msg_doit+0x233/0x340 [ 261.606552][T11832] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.606588][T11832] ? bpf_lsm_capable+0x9/0x20 [ 261.606610][T11832] ? security_capable+0x7e/0x2c0 [ 261.606644][T11832] genl_rcv_msg+0x614/0x7a0 [ 261.606672][T11832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.606693][T11832] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 261.606722][T11832] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.606752][T11832] netlink_rcv_skb+0x226/0x4a0 [ 261.606782][T11832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.606805][T11832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.606845][T11832] ? down_read+0x2be/0x330 [ 261.606867][T11832] genl_rcv+0x28/0x40 [ 261.606887][T11832] netlink_unicast+0x7bb/0x940 [ 261.606926][T11832] netlink_sendmsg+0x813/0xb40 [ 261.606954][T11832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.606976][T11832] ? aa_sock_msg_perm+0xf1/0x1b0 [ 261.607000][T11832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.607017][T11832] sock_sendmsg_nosec+0x13a/0x180 [ 261.607045][T11832] ____sys_sendmsg+0x54e/0x850 [ 261.607080][T11832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.607116][T11832] ? import_iovec+0x73/0xa0 [ 261.607148][T11832] ___sys_sendmsg+0x2a5/0x360 [ 261.607176][T11832] ? __lock_acquire+0x683/0x2cf0 [ 261.607205][T11832] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.607267][T11832] ? __fget_files+0x2a/0x420 [ 261.607292][T11832] ? __fget_files+0x3a2/0x420 [ 261.607327][T11832] __x64_sys_sendmsg+0x1b1/0x290 [ 261.607357][T11832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.607397][T11832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.607416][T11832] do_syscall_64+0x174/0x580 [ 261.607440][T11832] ? trace_irq_disable+0x3b/0x140 [ 261.607463][T11832] ? clear_bhb_loop+0x40/0x90 [ 261.607486][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.607505][T11832] RIP: 0033:0x7f83da79de59 [ 261.607525][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.607541][T11832] RSP: 002b:00007f83db5a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.607563][T11832] RAX: ffffffffffffffda RBX: 00007f83daa26090 RCX: 00007f83da79de59 [ 261.607576][T11832] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 261.607587][T11832] RBP: 00007f83db5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 261.607598][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.607609][T11832] R13: 00007f83daa26128 R14: 00007f83daa26090 R15: 00007ffc91a24cf8 [ 261.607638][T11832] [ 262.290289][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 262.300325][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.431373][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.443801][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.467250][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.495427][T11863] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 262.584485][T11863] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 262.628621][T11863] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 262.643420][T11859] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 262.692105][T11863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 262.813103][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.834789][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.867531][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.886422][T11863] wlan0 speed is unknown, defaulting to 1000 [ 262.904910][T11863] wlan0 speed is unknown, defaulting to 1000 [ 263.326244][T11879] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 263.361750][T11879] bond8 (unregistering): Released all slaves [ 263.688492][T11898] syzkaller1: entered promiscuous mode [ 263.713455][T11898] syzkaller1: entered allmulticast mode [ 263.751532][T11898] tipc: Started in network mode [ 263.772553][T11898] tipc: Node identity ac1e0004, cluster identity 4711 [ 263.782707][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 263.811944][T11898] tipc: Enabling of bearer rejected, failed to enable media [ 263.823370][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 263.827347][T11910] sctp: [Deprecated]: syz.3.1520 (pid 11910) Use of int in max_burst socket option deprecated. [ 263.827347][T11910] Use struct sctp_assoc_value instead [ 264.261802][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 264.362457][T11940] bond8: entered promiscuous mode [ 264.368785][T11940] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.409701][T11944] vlan4: entered allmulticast mode [ 264.424108][T11944] bond8: entered allmulticast mode [ 264.572798][T11946] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 264.606570][T11946] bond6 (unregistering): Released all slaves [ 264.638755][T11958] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1535'. [ 264.666892][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 264.691634][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1537'. [ 264.808087][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 265.617769][T11996] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 265.652719][T11996] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 265.701983][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.732942][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.759550][T12006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.791397][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 265.876951][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1550'. [ 266.974605][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 267.089050][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.117971][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.157358][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.181365][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.204506][T12056] tipc: Enabling of bearer rejected, failed to enable media [ 267.282763][T12062] netlink: 'syz.2.1558': attribute type 58 has an invalid length. [ 267.359092][T12067] netlink: 'syz.3.1562': attribute type 5 has an invalid length. [ 267.426677][T12070] netlink: 'syz.3.1562': attribute type 5 has an invalid length. [ 267.872439][T12079] dummy0: left promiscuous mode [ 267.929843][T12079] vlan2: left promiscuous mode [ 267.954492][T12079] bridge0: left promiscuous mode [ 267.972857][T12079] bond2: left promiscuous mode [ 267.987409][T12084] netlink: 'syz.4.1567': attribute type 30 has an invalid length. [ 267.998575][T12079] bond2: left allmulticast mode [ 268.010788][T12084] netlink: 'syz.4.1567': attribute type 29 has an invalid length. [ 268.034697][T12079] bond4: left promiscuous mode [ 268.154844][T12096] netlink: 'syz.2.1569': attribute type 5 has an invalid length. [ 268.186203][T12086] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 268.214196][T12096] geneve2: entered promiscuous mode [ 268.233138][T12096] geneve2: entered allmulticast mode [ 268.266537][ T61] netdevsim netdevsim2 €Â: set [1, 1] type 2 family 0 port 43893 - 0 [ 268.295123][ T61] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 43893 - 0 [ 268.331511][ T61] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 43893 - 0 [ 268.372848][ T61] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 43893 - 0 [ 268.426365][T12102] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 268.430529][T12103] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 268.519662][T12105] FAULT_INJECTION: forcing a failure. [ 268.519662][T12105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.555453][T12105] CPU: 0 UID: 0 PID: 12105 Comm: syz.3.1573 Not tainted syzkaller #0 PREEMPT(full) [ 268.555485][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.555496][T12105] Call Trace: [ 268.555504][T12105] [ 268.555513][T12105] dump_stack_lvl+0xe8/0x150 [ 268.555549][T12105] should_fail_ex+0x40c/0x560 [ 268.555584][T12105] prepare_alloc_pages+0x230/0x650 [ 268.555619][T12105] __alloc_frozen_pages_noprof+0x12f/0x380 [ 268.555648][T12105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.555670][T12105] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 268.555697][T12105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.555726][T12105] ? __pfx_policy_nodemask+0x10/0x10 [ 268.555758][T12105] __alloc_pages_noprof+0x10/0x100 [ 268.555784][T12105] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 268.555817][T12105] ? alloc_pages_noprof+0x13b/0x2a0 [ 268.555847][T12105] __kasan_populate_vmalloc+0xb7/0x1c0 [ 268.555877][T12105] alloc_vmap_area+0xd1a/0x1420 [ 268.555908][T12105] ? __pfx_alloc_vmap_area+0x10/0x10 [ 268.555924][T12105] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 268.555946][T12105] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 268.555975][T12105] ? __get_vm_area_node+0x136/0x300 [ 268.555992][T12105] ? __get_vm_area_node+0x136/0x300 [ 268.556013][T12105] __get_vm_area_node+0x1f2/0x300 [ 268.556032][T12105] ? xdp_umem_create+0x6bd/0x890 [ 268.556059][T12105] vmap+0x162/0x310 [ 268.556078][T12105] ? xdp_umem_create+0x6bd/0x890 [ 268.556107][T12105] xdp_umem_create+0x6bd/0x890 [ 268.556141][T12105] xsk_setsockopt+0x82f/0x960 [ 268.556161][T12105] ? __fget_files+0x2a/0x420 [ 268.556187][T12105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 268.556217][T12105] ? __fget_files+0x2a/0x420 [ 268.556239][T12105] ? aa_sock_opt_perm+0xff/0x1a0 [ 268.556262][T12105] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 268.556280][T12105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 268.556305][T12105] do_sock_setsockopt+0x17c/0x1b0 [ 268.556339][T12105] __x64_sys_setsockopt+0x13d/0x1b0 [ 268.556369][T12105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.556390][T12105] do_syscall_64+0x174/0x580 [ 268.556416][T12105] ? trace_irq_disable+0x3b/0x140 [ 268.556440][T12105] ? clear_bhb_loop+0x40/0x90 [ 268.556464][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.556483][T12105] RIP: 0033:0x7f8d7b19de59 [ 268.556503][T12105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.556519][T12105] RSP: 002b:00007f8d7c13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 268.556541][T12105] RAX: ffffffffffffffda RBX: 00007f8d7b425fa0 RCX: 00007f8d7b19de59 [ 268.556555][T12105] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 268.556565][T12105] RBP: 00007f8d7c13e090 R08: 0000000000000020 R09: 0000000000000000 [ 268.556586][T12105] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 268.556597][T12105] R13: 00007f8d7b426038 R14: 00007f8d7b425fa0 R15: 00007ffc1a3e5398 [ 268.556639][T12105] [ 269.065120][T12107] __nla_validate_parse: 19 callbacks suppressed [ 269.065148][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1574'. [ 269.170437][T12107] vlan3: entered promiscuous mode [ 269.178258][T12107] gretap0: entered promiscuous mode [ 269.462487][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1581'. [ 270.105923][T12154] FAULT_INJECTION: forcing a failure. [ 270.105923][T12154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.155264][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.1.1587 Not tainted syzkaller #0 PREEMPT(full) [ 270.155293][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.155304][T12154] Call Trace: [ 270.155312][T12154] [ 270.155319][T12154] dump_stack_lvl+0xe8/0x150 [ 270.155354][T12154] should_fail_ex+0x40c/0x560 [ 270.155382][T12154] prepare_alloc_pages+0x230/0x650 [ 270.155416][T12154] __alloc_frozen_pages_noprof+0x12f/0x380 [ 270.155451][T12154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.155474][T12154] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 270.155502][T12154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.155531][T12154] ? __pfx_policy_nodemask+0x10/0x10 [ 270.155561][T12154] __alloc_pages_noprof+0x10/0x100 [ 270.155586][T12154] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 270.155618][T12154] ? alloc_pages_noprof+0x13b/0x2a0 [ 270.155650][T12154] __kasan_populate_vmalloc+0xb7/0x1c0 [ 270.155678][T12154] alloc_vmap_area+0xd1a/0x1420 [ 270.155715][T12154] ? __pfx_alloc_vmap_area+0x10/0x10 [ 270.155732][T12154] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 270.155758][T12154] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 270.155782][T12154] ? __get_vm_area_node+0x136/0x300 [ 270.155800][T12154] ? __get_vm_area_node+0x136/0x300 [ 270.155825][T12154] __get_vm_area_node+0x1f2/0x300 [ 270.155848][T12154] ? xdp_umem_create+0x6bd/0x890 [ 270.155878][T12154] vmap+0x162/0x310 [ 270.155897][T12154] ? xdp_umem_create+0x6bd/0x890 [ 270.155922][T12154] xdp_umem_create+0x6bd/0x890 [ 270.155953][T12154] xsk_setsockopt+0x82f/0x960 [ 270.155975][T12154] ? __fget_files+0x2a/0x420 [ 270.155999][T12154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 270.156023][T12154] ? __fget_files+0x2a/0x420 [ 270.156043][T12154] ? aa_sock_opt_perm+0xff/0x1a0 [ 270.156064][T12154] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 270.156084][T12154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 270.156109][T12154] do_sock_setsockopt+0x17c/0x1b0 [ 270.156139][T12154] __x64_sys_setsockopt+0x13d/0x1b0 [ 270.156166][T12154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.156185][T12154] do_syscall_64+0x174/0x580 [ 270.156210][T12154] ? trace_irq_disable+0x3b/0x140 [ 270.156233][T12154] ? clear_bhb_loop+0x40/0x90 [ 270.156256][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.156273][T12154] RIP: 0033:0x7f83da79de59 [ 270.156290][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.156306][T12154] RSP: 002b:00007f83db5ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 270.156327][T12154] RAX: ffffffffffffffda RBX: 00007f83daa25fa0 RCX: 00007f83da79de59 [ 270.156341][T12154] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 270.156352][T12154] RBP: 00007f83db5ca090 R08: 0000000000000020 R09: 0000000000000000 [ 270.156363][T12154] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 270.156375][T12154] R13: 00007f83daa26038 R14: 00007f83daa25fa0 R15: 00007ffc91a24cf8 [ 270.156404][T12154] [ 270.499831][T12153] bond6: entered promiscuous mode [ 270.512369][T12153] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.739845][T12176] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 270.780203][T12176] : entered promiscuous mode [ 270.800473][T12171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1593'. [ 270.832697][T12172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1593'. [ 270.877879][T12171] netlink: 'syz.3.1593': attribute type 12 has an invalid length. [ 271.191638][T12185] batman_adv: batadv0: Adding interface: dummy0 [ 271.215258][T12185] batman_adv: batadv0: Interface activated: dummy0 [ 271.356038][T12188] batadv0: mtu less than device minimum [ 271.379497][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.394284][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.406363][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.418355][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.430139][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.442031][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.456913][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.468799][T12188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.763873][T12198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 272.126966][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 272.206548][T12201] ip6gre1: entered allmulticast mode [ 272.231967][T12201] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1601'. [ 272.478745][T12211] lo speed is unknown, defaulting to 1000 [ 272.510854][T12211] wlan0 speed is unknown, defaulting to 1000 [ 272.607202][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 272.719406][ T135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.760821][ T135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.796344][ T135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.829225][ T135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.857138][T12239] netlink: 'syz.3.1612': attribute type 13 has an invalid length. [ 272.910188][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1612'. [ 273.032898][T12235] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 273.041261][T12235] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 273.079706][T12248] netlink: 'syz.0.1613': attribute type 1 has an invalid length. [ 273.112136][T12242] bond_slave_0: entered promiscuous mode [ 273.118406][T12242] bond_slave_0: entered allmulticast mode [ 273.141869][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1613'. [ 273.238583][T12248] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.420095][T12257] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 273.443321][T12260] Bluetooth: MGMT ver 1.23 [ 273.687928][T12257] bond9: entered promiscuous mode [ 273.706992][T12257] 8021q: adding VLAN 0 to HW filter on device bond9 [ 274.163348][T12286] bond9: (slave veth9): making interface the new active one [ 274.194684][T12286] veth9: entered promiscuous mode [ 274.211701][T12286] bond9: (slave veth9): Enslaving as an active interface with an up link [ 274.249586][T12303] __nla_validate_parse: 1 callbacks suppressed [ 274.249635][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1621'. [ 274.446270][ T29] audit: type=1800 audit(1783978623.328:9): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1615" name="memory.events" dev="tmpfs" ino=1638 res=0 errno=0 [ 275.159554][T12342] net_ratelimit: 11 callbacks suppressed [ 275.159576][T12342] netlink: zone id is out of range [ 275.193344][T12342] netlink: zone id is out of range [ 275.207790][T12342] netlink: zone id is out of range [ 275.222900][T12342] netlink: zone id is out of range [ 275.241410][T12342] netlink: zone id is out of range [ 275.258474][T12342] netlink: zone id is out of range [ 275.273229][T12342] netlink: zone id is out of range [ 275.290904][T12348] syz_tun: entered allmulticast mode [ 275.291844][T12342] netlink: get zone limit has 4 unknown bytes [ 275.314304][T12344] syz_tun: left allmulticast mode [ 275.396900][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 275.423273][T12328] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1625'. [ 275.507197][T12328] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1625'. [ 275.731372][T12369] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 275.811098][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 275.940166][T12369] bond4: entered promiscuous mode [ 275.961750][T12369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.970491][T12376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.974376][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 276.034543][T12374] bond4 (unregistering): Released all slaves [ 276.440853][T12388] netlink: 'syz.3.1641': attribute type 13 has an invalid length. [ 276.472262][T12388] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1641'. [ 276.684687][T12392] lo speed is unknown, defaulting to 1000 [ 276.715155][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 276.735784][T12392] wlan0 speed is unknown, defaulting to 1000 [ 276.766939][T12402] dummy0: entered promiscuous mode [ 276.779930][T12409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 276.854956][T12409] nbd: socks must be embedded in a SOCK_ITEM attr [ 276.863026][T12411] bond0: Error: CAN devices cannot be enslaved [ 276.876855][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 276.892299][T10102] block nbd64: NBD_DISCONNECT [ 276.954497][T12402] nbd: device at index 64 is going down [ 277.244588][T10107] udevd[10107]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.319701][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.354785][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.442410][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.449843][T12430] netlink: 'syz.1.1651': attribute type 2 has an invalid length. [ 277.461809][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.677489][T12392] syzkaller0: entered promiscuous mode [ 277.683391][T12392] syzkaller0: entered allmulticast mode [ 277.889917][T12440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.095727][T12473] __nla_validate_parse: 1 callbacks suppressed [ 282.095751][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 282.554970][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 282.720114][T12487] netlink: 'syz.2.1669': attribute type 23 has an invalid length. [ 282.749557][T12487] netlink: 'syz.2.1669': attribute type 21 has an invalid length. [ 282.778554][T12498] netlink: 'syz.2.1669': attribute type 4 has an invalid length. [ 282.820324][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 282.969786][T12498] bond9: entered allmulticast mode [ 283.011479][T12510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1674'. [ 283.132675][T12514] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1675'. [ 283.148337][T12510] 8021q: adding VLAN 0 to HW filter on device .` [ 283.168502][T12510] batman_adv: batadv0: Interface activated: dummy0 [ 283.178707][T12510] batadv0: mtu less than device minimum [ 283.192875][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.205326][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.217442][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.229558][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.241799][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.253739][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.265995][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.277820][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.289740][T12510] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 283.368367][T12510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.437250][T12510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.483303][T12510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.532566][T12510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.550219][T12510] veth1_vlan: left promiscuous mode [ 283.556988][T12510] veth0_vlan: left promiscuous mode [ 283.563475][T12510] veth0_vlan: entered promiscuous mode [ 283.570351][T12510] veth1_vlan: entered promiscuous mode [ 283.582980][T12510] veth1_macvtap: left promiscuous mode [ 283.590135][T12510] veth0_macvtap: left promiscuous mode [ 283.597040][T12510] veth0_macvtap: entered promiscuous mode [ 283.604262][T12510] veth1_macvtap: entered promiscuous mode [ 283.613465][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.621697][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.630504][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.639328][T12510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.655281][T12521] veth0: entered promiscuous mode [ 283.759629][T12523] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.872327][T12519] veth0: left promiscuous mode [ 283.890170][ T135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.908782][ T135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.918364][ T6047] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.079005][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 284.105186][T12540] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1682'. [ 284.119046][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 284.237628][T12553] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 284.362226][T12556] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 284.425600][ T6047] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.479834][T12559] syzkaller0: entered promiscuous mode [ 284.492111][T12559] syzkaller0: entered allmulticast mode [ 284.518108][T12564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.536505][ T1224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.191477][T12570] syzkaller1: entered promiscuous mode [ 288.197231][T12570] syzkaller1: entered allmulticast mode [ 288.210507][T12575] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 288.294191][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.554874][ T6786] net_ratelimit: 51 callbacks suppressed [ 288.554914][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 288.576644][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 288.739670][T12617] FAULT_INJECTION: forcing a failure. [ 288.739670][T12617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.764119][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.4.1699 Not tainted syzkaller #0 PREEMPT(full) [ 288.764149][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.764160][T12617] Call Trace: [ 288.764168][T12617] [ 288.764177][T12617] dump_stack_lvl+0xe8/0x150 [ 288.764212][T12617] should_fail_ex+0x40c/0x560 [ 288.764241][T12617] prepare_alloc_pages+0x230/0x650 [ 288.764275][T12617] __alloc_frozen_pages_noprof+0x12f/0x380 [ 288.764303][T12617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 288.764325][T12617] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 288.764349][T12617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 288.764377][T12617] ? __pfx_policy_nodemask+0x10/0x10 [ 288.764410][T12617] __alloc_pages_noprof+0x10/0x100 [ 288.764436][T12617] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 288.764469][T12617] ? alloc_pages_noprof+0x13b/0x2a0 [ 288.764499][T12617] __kasan_populate_vmalloc+0xb7/0x1c0 [ 288.764536][T12617] alloc_vmap_area+0xd1a/0x1420 [ 288.764572][T12617] ? __pfx_alloc_vmap_area+0x10/0x10 [ 288.764590][T12617] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 288.764615][T12617] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 288.764638][T12617] ? __get_vm_area_node+0x136/0x300 [ 288.764657][T12617] ? __get_vm_area_node+0x136/0x300 [ 288.764682][T12617] __get_vm_area_node+0x1f2/0x300 [ 288.764704][T12617] ? xdp_umem_create+0x6bd/0x890 [ 288.764733][T12617] vmap+0x162/0x310 [ 288.764753][T12617] ? xdp_umem_create+0x6bd/0x890 [ 288.764782][T12617] xdp_umem_create+0x6bd/0x890 [ 288.764816][T12617] xsk_setsockopt+0x82f/0x960 [ 288.764838][T12617] ? __fget_files+0x2a/0x420 [ 288.764864][T12617] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.764894][T12617] ? __fget_files+0x2a/0x420 [ 288.764915][T12617] ? aa_sock_opt_perm+0xff/0x1a0 [ 288.764938][T12617] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 288.764955][T12617] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.764978][T12617] do_sock_setsockopt+0x17c/0x1b0 [ 288.765011][T12617] __x64_sys_setsockopt+0x13d/0x1b0 [ 288.765043][T12617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.765064][T12617] do_syscall_64+0x174/0x580 [ 288.765093][T12617] ? clear_bhb_loop+0x40/0x90 [ 288.765117][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.765136][T12617] RIP: 0033:0x7f8caef9de59 [ 288.765155][T12617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.765172][T12617] RSP: 002b:00007f8cafe1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.765194][T12617] RAX: ffffffffffffffda RBX: 00007f8caf225fa0 RCX: 00007f8caef9de59 [ 288.765209][T12617] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 288.765220][T12617] RBP: 00007f8cafe1a090 R08: 0000000000000020 R09: 0000000000000000 [ 288.765232][T12617] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 288.765244][T12617] R13: 00007f8caf226038 R14: 00007f8caf225fa0 R15: 00007ffeddd8b8e8 [ 288.765276][T12617] [ 288.835747][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'. [ 289.099311][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1704'. [ 289.214833][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 289.229657][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 289.491214][T12649] veth1_to_hsr: entered promiscuous mode [ 289.511389][T12654] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1709'. [ 289.525237][T12649] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1706'. [ 289.557138][T12649] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 289.795143][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 289.803805][ T1123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 289.819450][ T1123] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 289.907127][T12674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1713'. [ 289.909440][T12679] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1713'. [ 289.951555][T12672] bond0 (unregistering): Released all slaves [ 290.309578][T12697] netlink: 'syz.4.1719': attribute type 9 has an invalid length. [ 290.340546][T12693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1718'. [ 290.366259][T12693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1718'. [ 290.386774][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 290.399363][T12693] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1718'. [ 290.401741][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 290.509713][ T29] audit: type=1804 audit(1783978639.388:10): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1717" name="/newroot/333/cgroup.controllers" dev="tmpfs" ino=1735 res=1 errno=0 [ 290.556979][ T29] audit: type=1800 audit(1783978639.418:11): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1717" name="cgroup.controllers" dev="tmpfs" ino=1735 res=0 errno=0 [ 290.654764][T12701] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 290.675044][T12701] syzkaller1: linktype set to 778 [ 291.020199][T12730] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 291.046677][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 291.261102][T12746] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 291.299887][T12746] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 291.969999][T12780] netlink: 'syz.4.1741': attribute type 12 has an invalid length. [ 292.314441][T12800] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 292.396924][T12804] netlink: 'syz.1.1747': attribute type 2 has an invalid length. [ 292.402369][T12800] bond7: entered promiscuous mode [ 292.405949][T12804] netlink: 'syz.1.1747': attribute type 8 has an invalid length. [ 292.419752][T12800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.452817][T12802] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.469365][T12802] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 292.483402][T12802] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 292.496769][T12805] netlink: 'syz.1.1747': attribute type 2 has an invalid length. [ 292.518864][T12805] netlink: 'syz.1.1747': attribute type 8 has an invalid length. [ 292.909419][T12825] netlink: 'syz.3.1751': attribute type 4 has an invalid length. [ 292.923303][T12827] FAULT_INJECTION: forcing a failure. [ 292.923303][T12827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.941072][T12827] CPU: 1 UID: 0 PID: 12827 Comm: syz.0.1752 Not tainted syzkaller #0 PREEMPT(full) [ 292.941101][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.941112][T12827] Call Trace: [ 292.941119][T12827] [ 292.941127][T12827] dump_stack_lvl+0xe8/0x150 [ 292.941164][T12827] should_fail_ex+0x40c/0x560 [ 292.941192][T12827] prepare_alloc_pages+0x230/0x650 [ 292.941225][T12827] __alloc_frozen_pages_noprof+0x12f/0x380 [ 292.941252][T12827] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.941276][T12827] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 292.941303][T12827] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.941332][T12827] ? __pfx_policy_nodemask+0x10/0x10 [ 292.941365][T12827] __alloc_pages_noprof+0x10/0x100 [ 292.941401][T12827] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 292.941434][T12827] ? alloc_pages_noprof+0x13b/0x2a0 [ 292.941466][T12827] __kasan_populate_vmalloc+0xb7/0x1c0 [ 292.941495][T12827] alloc_vmap_area+0xd1a/0x1420 [ 292.941530][T12827] ? __pfx_alloc_vmap_area+0x10/0x10 [ 292.941549][T12827] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 292.941574][T12827] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 292.941599][T12827] ? __get_vm_area_node+0x136/0x300 [ 292.941621][T12827] ? __get_vm_area_node+0x136/0x300 [ 292.941647][T12827] __get_vm_area_node+0x1f2/0x300 [ 292.941668][T12827] ? xdp_umem_create+0x6bd/0x890 [ 292.941696][T12827] vmap+0x162/0x310 [ 292.941712][T12827] ? xdp_umem_create+0x6bd/0x890 [ 292.941736][T12827] xdp_umem_create+0x6bd/0x890 [ 292.941767][T12827] xsk_setsockopt+0x82f/0x960 [ 292.941789][T12827] ? __fget_files+0x2a/0x420 [ 292.941810][T12827] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.941834][T12827] ? __fget_files+0x2a/0x420 [ 292.941853][T12827] ? aa_sock_opt_perm+0xff/0x1a0 [ 292.941874][T12827] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 292.941892][T12827] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.941916][T12827] do_sock_setsockopt+0x17c/0x1b0 [ 292.941948][T12827] __x64_sys_setsockopt+0x13d/0x1b0 [ 292.941976][T12827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.941998][T12827] do_syscall_64+0x174/0x580 [ 292.942021][T12827] ? trace_irq_disable+0x3b/0x140 [ 292.942042][T12827] ? clear_bhb_loop+0x40/0x90 [ 292.942062][T12827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.942079][T12827] RIP: 0033:0x7f381b59de59 [ 292.942097][T12827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.942114][T12827] RSP: 002b:00007f381c451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 292.942136][T12827] RAX: ffffffffffffffda RBX: 00007f381b825fa0 RCX: 00007f381b59de59 [ 292.942150][T12827] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 292.942160][T12827] RBP: 00007f381c451090 R08: 0000000000000020 R09: 0000000000000000 [ 292.942171][T12827] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 292.942180][T12827] R13: 00007f381b826038 R14: 00007f381b825fa0 R15: 00007ffc6da264c8 [ 292.942206][T12827] [ 293.325408][T12831] 8021q: VLANs not supported on sit0 [ 293.440808][T12835] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 293.452984][T12835] bond0 (unregistering): Released all slaves [ 293.586470][T12840] net_ratelimit: 10 callbacks suppressed [ 293.586497][T12840] openvswitch: netlink: IP tunnel TTL not specified. [ 293.595704][T12838] geneve3: entered promiscuous mode [ 293.601087][T12840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.650062][T12838] geneve3: entered allmulticast mode [ 293.764581][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 293.779437][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 294.201473][T12862] __nla_validate_parse: 22 callbacks suppressed [ 294.201499][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 294.261134][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 294.334815][T12868] FAULT_INJECTION: forcing a failure. [ 294.334815][T12868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.374094][ T61] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 294.384004][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1766'. [ 294.392541][ T61] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 294.404942][T12868] CPU: 0 UID: 0 PID: 12868 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(full) [ 294.404970][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.404983][T12868] Call Trace: [ 294.404990][T12868] [ 294.404999][T12868] dump_stack_lvl+0xe8/0x150 [ 294.405035][T12868] should_fail_ex+0x40c/0x560 [ 294.405064][T12868] prepare_alloc_pages+0x230/0x650 [ 294.405098][T12868] __alloc_frozen_pages_noprof+0x12f/0x380 [ 294.405127][T12868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.405151][T12868] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 294.405179][T12868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.405207][T12868] ? __pfx_policy_nodemask+0x10/0x10 [ 294.405239][T12868] __alloc_pages_noprof+0x10/0x100 [ 294.405265][T12868] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 294.405296][T12868] ? alloc_pages_noprof+0x13b/0x2a0 [ 294.405327][T12868] __kasan_populate_vmalloc+0xb7/0x1c0 [ 294.405357][T12868] alloc_vmap_area+0xd1a/0x1420 [ 294.405391][T12868] ? __pfx_alloc_vmap_area+0x10/0x10 [ 294.405409][T12868] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 294.405434][T12868] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 294.405457][T12868] ? __get_vm_area_node+0x136/0x300 [ 294.405475][T12868] ? __get_vm_area_node+0x136/0x300 [ 294.405500][T12868] __get_vm_area_node+0x1f2/0x300 [ 294.405521][T12868] ? xdp_umem_create+0x6bd/0x890 [ 294.405548][T12868] vmap+0x162/0x310 [ 294.405568][T12868] ? xdp_umem_create+0x6bd/0x890 [ 294.405597][T12868] xdp_umem_create+0x6bd/0x890 [ 294.405630][T12868] xsk_setsockopt+0x82f/0x960 [ 294.405653][T12868] ? __fget_files+0x2a/0x420 [ 294.405678][T12868] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.405707][T12868] ? __fget_files+0x2a/0x420 [ 294.405728][T12868] ? aa_sock_opt_perm+0xff/0x1a0 [ 294.405751][T12868] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 294.405771][T12868] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.405796][T12868] do_sock_setsockopt+0x17c/0x1b0 [ 294.405830][T12868] __x64_sys_setsockopt+0x13d/0x1b0 [ 294.405858][T12868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.405885][T12868] do_syscall_64+0x174/0x580 [ 294.405912][T12868] ? trace_irq_disable+0x3b/0x140 [ 294.405934][T12868] ? clear_bhb_loop+0x40/0x90 [ 294.405958][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.405976][T12868] RIP: 0033:0x7f83da79de59 [ 294.405995][T12868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.406012][T12868] RSP: 002b:00007f83db5ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.406033][T12868] RAX: ffffffffffffffda RBX: 00007f83daa25fa0 RCX: 00007f83da79de59 [ 294.406046][T12868] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 294.406057][T12868] RBP: 00007f83db5ca090 R08: 0000000000000020 R09: 0000000000000000 [ 294.406069][T12868] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 294.406080][T12868] R13: 00007f83daa26038 R14: 00007f83daa25fa0 R15: 00007ffc91a24cf8 [ 294.406111][T12868] [ 295.004390][T12867] smbdirect: ib_dev[syz2] removed [ 295.274920][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 295.290062][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 295.833930][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 295.848474][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 297.268257][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.309595][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 297.320074][T12900] tipc: Enabled bearer , priority 0 [ 298.285290][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 298.419470][ T6048] tipc: Node number set to 470483072 [ 298.516213][T12948] validate_nla: 3 callbacks suppressed [ 298.516238][T12948] netlink: 'syz.3.1785': attribute type 1 has an invalid length. [ 298.571286][T12948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.745468][T12964] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1788'. [ 298.755063][T12964] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1788'. [ 298.946641][ T46] net_ratelimit: 11 callbacks suppressed [ 298.946665][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 298.967396][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 299.237247][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 299.247956][T12996] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 299.319129][T12997] pimreg: entered allmulticast mode [ 299.511357][ T61] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 299.526167][ T61] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 299.725750][T13028] syzkaller1: entered promiscuous mode [ 299.755120][T13028] syzkaller1: entered allmulticast mode [ 299.788099][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 300.084432][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1811'. [ 300.098981][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 300.113937][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 300.128527][T13056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1814'. [ 300.206756][T13052] vlan0: entered promiscuous mode [ 300.269717][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1813'. [ 300.386052][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805581d000: rx timeout, send abort [ 300.409375][T13075] lo: Caught tx_queue_len zero misconfig [ 300.653944][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 300.668579][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 300.886512][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805581e000: rx timeout, send abort [ 300.897415][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805581d000: abort rx timeout. Force session deactivation [ 301.185149][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 301.199811][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 301.310109][T13092] syzkaller0: entered promiscuous mode [ 301.315828][T13092] syzkaller0: entered allmulticast mode [ 301.394867][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805581e000: abort rx timeout. Force session deactivation [ 303.107184][T13057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.468821][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 303.499837][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 303.671579][T13122] sctp: [Deprecated]: syz.1.1833 (pid 13122) Use of int in max_burst socket option deprecated. [ 303.671579][T13122] Use struct sctp_assoc_value instead [ 304.136043][T13104] tipc: Resetting bearer [ 304.158761][T13146] net_ratelimit: 10 callbacks suppressed [ 304.158785][T13146] openvswitch: netlink: Multiple metadata blocks provided [ 304.166704][T13104] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 304.179674][T13104] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 304.189976][T13104] geneve2: left promiscuous mode [ 304.198247][T13104] geneve2: left allmulticast mode [ 304.236662][T13104] bond9: left allmulticast mode [ 304.247169][ T46] netdevsim netdevsim2 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.257423][ T46] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.267126][ T46] netdevsim netdevsim2 €Â: unset [1, 1] type 2 family 0 port 43893 - 0 [ 304.276380][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 304.290868][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 304.297102][ T46] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.338924][ T46] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.348461][ T46] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 43893 - 0 [ 304.377551][ T46] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.403721][ T46] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.423788][ T46] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 43893 - 0 [ 304.432862][ T46] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.436608][T13152] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 304.454718][ T46] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.483713][ T46] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 43893 - 0 [ 304.539888][T13148] wlan0 speed is unknown, defaulting to 1000 [ 304.662514][T13160] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1842'. [ 304.750151][T13151] bond0: (slave gretap3): making interface the new active one [ 304.824121][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 304.839265][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 304.865485][T13151] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 304.920043][T13152] macvlan4: entered promiscuous mode [ 304.934639][T13152] macvlan4: entered allmulticast mode [ 304.949295][T13152] bond0: entered promiscuous mode [ 304.961766][T13152] gretap3: entered promiscuous mode [ 304.963379][T13175] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1847'. [ 304.970231][T13152] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 304.989449][T13152] bond0: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 305.006850][T13152] bond0: left promiscuous mode [ 305.016909][T13152] gretap3: left promiscuous mode [ 305.062473][T13153] ip6gre1: entered allmulticast mode [ 305.080619][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 305.137391][T13173] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 305.150175][T13173] bond4 (unregistering): Released all slaves [ 305.186378][ T1054] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.326883][T13184] veth9: entered allmulticast mode [ 305.337720][T13184] bond9: (slave veth9): Enslaving as an active interface with an up link [ 305.359824][T13188] openvswitch: netlink: Missing key (keys=40, expected=100) [ 305.378546][T13192] openvswitch: netlink: Missing key (keys=40, expected=100) [ 305.426477][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 305.441429][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.586827][T13201] wlan0 speed is unknown, defaulting to 1000 [ 305.901308][T13218] tipc: New replicast peer: 255.255.255.255 [ 305.917216][T13218] tipc: Enabled bearer , priority 10 [ 305.996083][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 306.314764][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 306.499090][T13237] xt_hashlimit: max too large, truncated to 1048576 [ 307.027593][ T1224] tipc: Node number set to 612016856 [ 307.264918][T13253] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 307.302831][T13253] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 307.342408][T13253] tipc: Resetting bearer [ 307.940849][T13266] bond7 (unregistering): Released all slaves [ 307.965965][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1868'. [ 308.031573][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1868'. [ 308.056589][T13276] lo speed is unknown, defaulting to 1000 [ 308.080833][T13276] lo speed is unknown, defaulting to 1000 [ 308.104842][T13276] lo speed is unknown, defaulting to 1000 [ 308.111823][T13276] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 308.165510][T13276] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 308.184880][T13276] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 308.275124][T13276] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 308.480521][T13276] lo speed is unknown, defaulting to 1000 [ 308.495403][T13276] lo speed is unknown, defaulting to 1000 [ 308.503458][T13276] lo speed is unknown, defaulting to 1000 [ 308.559649][T13276] lo speed is unknown, defaulting to 1000 [ 308.610117][T13276] lo speed is unknown, defaulting to 1000 [ 308.666534][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 308.969740][T13327] xt_hashlimit: size too large, truncated to 1048576 [ 308.978425][T13320] gretap1: entered allmulticast mode [ 309.151035][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 309.173859][T13345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.181342][T13345] IPv6: NLM_F_CREATE should be set when creating new route [ 309.188672][T13345] IPv6: NLM_F_CREATE should be set when creating new route [ 309.201627][T13346] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1882'. [ 309.321076][T13338] syzkaller1: entered promiscuous mode [ 309.326820][T13338] syzkaller1: entered allmulticast mode [ 309.414028][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.603829][ T6786] net_ratelimit: 13 callbacks suppressed [ 309.603847][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 309.624338][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.143827][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 310.158558][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.673874][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 310.688496][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.214071][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.228805][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.743863][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.758395][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.885870][T13323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.897987][T13344] netlink: 'syz.2.1882': attribute type 11 has an invalid length. [ 311.908478][T13344] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1882'. [ 312.156096][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1891'. [ 312.230483][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 312.249748][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 312.336216][T13382] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 312.363393][T13389] wlan0 speed is unknown, defaulting to 1000 [ 312.451375][T13382] bond4: entered promiscuous mode [ 312.471843][T13382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.513413][T13387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.525852][T13387] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 312.533890][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 312.537351][T13387] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 312.559550][T13387] bond4: (slave ip6gre1): making interface the new active one [ 312.568112][T13387] ip6gre1: entered promiscuous mode [ 312.575951][T13387] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 312.585290][T13389] lo speed is unknown, defaulting to 1000 [ 312.585350][T13394] dummy0: entered allmulticast mode [ 312.862642][T13406] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 312.884975][T13406] bond10 (unregistering): Released all slaves [ 313.593012][T13438] syz_tun: entered allmulticast mode [ 313.629835][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 313.675689][T13436] syz_tun: left allmulticast mode [ 313.859444][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 313.876472][T13451] tipc: Enabling of bearer rejected, failed to enable media [ 313.904195][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 314.075405][T13465] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 314.133468][T13465] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 314.534008][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.559567][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 314.737885][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1920'. [ 314.834213][ T1054] net_ratelimit: 11 callbacks suppressed [ 314.834238][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 314.855333][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.443893][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 315.458864][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.547515][T13527] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 315.629000][T13527] syzkaller0: entered promiscuous mode [ 315.643773][T13527] syzkaller0: entered allmulticast mode [ 316.064160][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 316.078747][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.158138][T13547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.268050][T13553] gretap0: entered promiscuous mode [ 316.312249][T13553] 0ªî{X¹¦: renamed from gretap0 [ 316.331514][T13553] 0ªî{X¹¦: left promiscuous mode [ 316.338049][T13553] 0ªî{X¹¦: entered allmulticast mode [ 316.347278][T13553] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.392339][T13561] bond0: entered promiscuous mode [ 316.403392][T13561] batadv0: entered promiscuous mode [ 316.421104][T13561] debugfs: 'hsr1' already exists in 'hsr' [ 316.444388][T13561] Cannot create hsr debugfs directory [ 316.465697][T13561] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 316.492442][T13561] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 316.509921][T13561] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 316.518920][T13561] bond0: left promiscuous mode [ 316.526108][T13561] batadv0: left promiscuous mode [ 316.603881][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 316.622441][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.856973][T13556] wlan0 speed is unknown, defaulting to 1000 [ 316.917547][T13556] lo speed is unknown, defaulting to 1000 [ 316.990602][T13576] wlan0 speed is unknown, defaulting to 1000 [ 317.123221][T13576] lo speed is unknown, defaulting to 1000 [ 317.500760][T13597] netlink: 'syz.2.1941': attribute type 12 has an invalid length. [ 317.641249][T13609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.662191][T13619] __nla_validate_parse: 11 callbacks suppressed [ 317.662210][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 317.727331][T13609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.744105][T13609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.763178][T13609] veth1_vlan: left promiscuous mode [ 317.770541][T13609] veth0_vlan: left promiscuous mode [ 317.778374][T13609] veth0_vlan: entered promiscuous mode [ 317.787276][T13609] veth1_vlan: entered promiscuous mode [ 317.799701][T13609] veth1_macvtap: left promiscuous mode [ 317.808153][T13609] veth0_macvtap: left promiscuous mode [ 317.819010][T13609] veth0_macvtap: entered promiscuous mode [ 317.827741][T13609] veth1_macvtap: entered promiscuous mode [ 317.843945][T13609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.852891][T13609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.862231][T13609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.871097][T13609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.885904][T13609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.896403][T13609] bridge1: port 1(erspan0) entered blocking state [ 317.903426][T13609] bridge1: port 1(erspan0) entered forwarding state [ 317.918323][T13609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.926969][T13609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.945353][T13609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.960298][T13609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.970310][T13609] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.005533][ T5619] lo speed is unknown, defaulting to 1000 [ 318.057218][ T6786] bridge0: port 2(bridge_slave_0) entered blocking state [ 318.064487][ T6786] bridge0: port 2(bridge_slave_0) entered forwarding state [ 318.171416][T13619] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 318.315480][ T46] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.338528][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.349534][ T46] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.360359][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.373919][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.406994][ T46] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.428296][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.482396][ T46] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.521492][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.599270][T13643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.621099][T13645] xt_nfacct: accounting object `\$‚9ZúM#íü¾¦Eµ|¡^cÁ\F9YⳈ«ÃÖ' does not exist [ 318.657464][T13645] IPVS: length: 15 != 8 [ 318.887151][T13653] netlink: 'syz.1.1953': attribute type 29 has an invalid length. [ 319.010095][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 319.090890][T13660] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 319.455952][T13674] wireguard0: entered promiscuous mode [ 319.690976][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'. [ 319.713828][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1963'. [ 320.043866][ T1054] net_ratelimit: 20 callbacks suppressed [ 320.043885][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 320.064074][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.078410][T13687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.264218][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 320.278700][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.364367][T13700] tipc: Enabling of bearer rejected, failed to enable media [ 320.531701][T13724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.597578][ T135] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 320.612364][ T135] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.700145][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1972'. [ 320.773201][T13737] netlink: 'syz.1.1972': attribute type 4 has an invalid length. [ 320.792200][T13735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.807121][T13737] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1972'. [ 320.823836][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 320.959570][T13737] .`: renamed from bond0 (while UP) [ 321.552186][T13776] syzkaller0: entered promiscuous mode [ 321.558079][T13776] syzkaller0: entered allmulticast mode [ 321.604979][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 321.609090][T13775] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 321.634132][T13775] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 322.065527][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 322.230155][T13805] netlink: 'syz.3.1994': attribute type 10 has an invalid length. [ 322.264907][T13803] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 322.559596][T13817] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.2000'. [ 322.581132][T13817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2000'. [ 322.813556][T13840] FAULT_INJECTION: forcing a failure. [ 322.813556][T13840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.868384][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.4.2005 Not tainted syzkaller #0 PREEMPT(full) [ 322.868413][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.868424][T13840] Call Trace: [ 322.868431][T13840] [ 322.868439][T13840] dump_stack_lvl+0xe8/0x150 [ 322.868473][T13840] should_fail_ex+0x40c/0x560 [ 322.868501][T13840] prepare_alloc_pages+0x230/0x650 [ 322.868537][T13840] __alloc_frozen_pages_noprof+0x12f/0x380 [ 322.868566][T13840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.868590][T13840] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 322.868617][T13840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.868645][T13840] ? __pfx_policy_nodemask+0x10/0x10 [ 322.868680][T13840] __alloc_pages_noprof+0x10/0x100 [ 322.868706][T13840] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 322.868745][T13840] ? alloc_pages_noprof+0x13b/0x2a0 [ 322.868774][T13840] __kasan_populate_vmalloc+0xb7/0x1c0 [ 322.868802][T13840] alloc_vmap_area+0xd1a/0x1420 [ 322.868839][T13840] ? __pfx_alloc_vmap_area+0x10/0x10 [ 322.868858][T13840] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 322.868885][T13840] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 322.868909][T13840] ? __get_vm_area_node+0x136/0x300 [ 322.868928][T13840] ? __get_vm_area_node+0x136/0x300 [ 322.868953][T13840] __get_vm_area_node+0x1f2/0x300 [ 322.868975][T13840] ? xdp_umem_create+0x6bd/0x890 [ 322.869005][T13840] vmap+0x162/0x310 [ 322.869025][T13840] ? xdp_umem_create+0x6bd/0x890 [ 322.869054][T13840] xdp_umem_create+0x6bd/0x890 [ 322.869089][T13840] xsk_setsockopt+0x82f/0x960 [ 322.869112][T13840] ? __fget_files+0x2a/0x420 [ 322.869140][T13840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.869168][T13840] ? __fget_files+0x2a/0x420 [ 322.869188][T13840] ? aa_sock_opt_perm+0xff/0x1a0 [ 322.869209][T13840] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 322.869226][T13840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.869249][T13840] do_sock_setsockopt+0x17c/0x1b0 [ 322.869279][T13840] __x64_sys_setsockopt+0x13d/0x1b0 [ 322.869309][T13840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.869330][T13840] do_syscall_64+0x174/0x580 [ 322.869354][T13840] ? trace_irq_disable+0x3b/0x140 [ 322.869377][T13840] ? clear_bhb_loop+0x40/0x90 [ 322.869402][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.869421][T13840] RIP: 0033:0x7f8caef9de59 [ 322.869439][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.869457][T13840] RSP: 002b:00007f8cafe1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.869478][T13840] RAX: ffffffffffffffda RBX: 00007f8caf225fa0 RCX: 00007f8caef9de59 [ 322.869491][T13840] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 322.869503][T13840] RBP: 00007f8cafe1a090 R08: 0000000000000020 R09: 0000000000000000 [ 322.869515][T13840] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 322.869530][T13840] R13: 00007f8caf226038 R14: 00007f8caf225fa0 R15: 00007ffeddd8b8e8 [ 322.869562][T13840] [ 323.468827][T13858] tipc: Can't bind to reserved service type 1 [ 323.707598][T13874] __nla_validate_parse: 1 callbacks suppressed [ 323.707617][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 323.898155][T13885] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 323.965766][T13869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.007831][T13885] .`: (slave batadv0): Error -22 calling dev_set_mtu [ 324.094148][T13892] FAULT_INJECTION: forcing a failure. [ 324.094148][T13892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.108062][T13892] CPU: 1 UID: 0 PID: 13892 Comm: syz.4.2019 Not tainted syzkaller #0 PREEMPT(full) [ 324.108088][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.108099][T13892] Call Trace: [ 324.108107][T13892] [ 324.108115][T13892] dump_stack_lvl+0xe8/0x150 [ 324.108148][T13892] should_fail_ex+0x40c/0x560 [ 324.108175][T13892] prepare_alloc_pages+0x230/0x650 [ 324.108209][T13892] __alloc_frozen_pages_noprof+0x12f/0x380 [ 324.108240][T13892] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.108265][T13892] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 324.108294][T13892] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.108324][T13892] ? __pfx_policy_nodemask+0x10/0x10 [ 324.108357][T13892] __alloc_pages_noprof+0x10/0x100 [ 324.108384][T13892] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 324.108419][T13892] ? alloc_pages_noprof+0x13b/0x2a0 [ 324.108460][T13892] __kasan_populate_vmalloc+0xb7/0x1c0 [ 324.108489][T13892] alloc_vmap_area+0xd1a/0x1420 [ 324.108526][T13892] ? __pfx_alloc_vmap_area+0x10/0x10 [ 324.108544][T13892] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 324.108569][T13892] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 324.108593][T13892] ? __get_vm_area_node+0x136/0x300 [ 324.108612][T13892] ? __get_vm_area_node+0x136/0x300 [ 324.108638][T13892] __get_vm_area_node+0x1f2/0x300 [ 324.108660][T13892] ? xdp_umem_create+0x6bd/0x890 [ 324.108687][T13892] vmap+0x162/0x310 [ 324.108707][T13892] ? xdp_umem_create+0x6bd/0x890 [ 324.108738][T13892] xdp_umem_create+0x6bd/0x890 [ 324.108773][T13892] xsk_setsockopt+0x82f/0x960 [ 324.108797][T13892] ? __fget_files+0x2a/0x420 [ 324.108823][T13892] ? __pfx_xsk_setsockopt+0x10/0x10 [ 324.108853][T13892] ? __fget_files+0x2a/0x420 [ 324.108875][T13892] ? aa_sock_opt_perm+0xff/0x1a0 [ 324.108898][T13892] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 324.108918][T13892] ? __pfx_xsk_setsockopt+0x10/0x10 [ 324.108942][T13892] do_sock_setsockopt+0x17c/0x1b0 [ 324.108976][T13892] __x64_sys_setsockopt+0x13d/0x1b0 [ 324.109007][T13892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.109028][T13892] do_syscall_64+0x174/0x580 [ 324.109057][T13892] ? trace_irq_disable+0x3b/0x140 [ 324.109080][T13892] ? clear_bhb_loop+0x40/0x90 [ 324.109103][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.109123][T13892] RIP: 0033:0x7f8caef9de59 [ 324.109142][T13892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.109158][T13892] RSP: 002b:00007f8cafe1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.109178][T13892] RAX: ffffffffffffffda RBX: 00007f8caf225fa0 RCX: 00007f8caef9de59 [ 324.109192][T13892] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 324.109204][T13892] RBP: 00007f8cafe1a090 R08: 0000000000000020 R09: 0000000000000000 [ 324.109216][T13892] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 324.109229][T13892] R13: 00007f8caf226038 R14: 00007f8caf225fa0 R15: 00007ffeddd8b8e8 [ 324.109261][T13892] [ 324.442711][T13889] bond0 (unregistering): (slave geneve2): Releasing active interface [ 324.489413][T13889] bond0 (unregistering): Released all slaves [ 324.580794][T13869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.784240][T13901] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 324.791738][T13901] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 324.890141][T13869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.090062][T13869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.221537][T13927] netlink: 'syz.2.2030': attribute type 1 has an invalid length. [ 325.385674][T13933] net_ratelimit: 30 callbacks suppressed [ 325.385694][T13933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.412011][ T1054] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.439190][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 325.453833][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.457938][ T1054] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.476124][T13942] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 325.616076][ T6786] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.638261][T13947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2033'. [ 325.679147][ T3301] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.843156][T13954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'. [ 325.972979][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 326.035345][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2029'. [ 326.073817][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 326.088785][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.307092][T13972] syzkaller1: entered promiscuous mode [ 326.312807][T13972] syzkaller1: entered allmulticast mode [ 326.447679][T13986] x_tables: duplicate underflow at hook 1 [ 326.541664][T13990] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2046'. [ 326.634925][ T135] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 326.649682][ T135] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.715463][T13999] syzkaller0: entered promiscuous mode [ 326.728901][T13999] syzkaller0: entered allmulticast mode [ 327.006338][T14017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 327.078494][T14023] 0ªî{X¹¦: left allmulticast mode [ 327.096477][T14023] 8021q: adding VLAN 0 to HW filter on device .` [ 327.219736][T14023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.234139][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 327.248816][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 327.288249][T14023] geneve3: left promiscuous mode [ 327.293387][T14023] geneve3: left allmulticast mode [ 327.299801][T14023] vlan0: left promiscuous mode [ 327.307040][T14023] bond4: left promiscuous mode [ 327.312183][T14023] ip6gre1: left promiscuous mode [ 327.322965][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.330497][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.348957][ T6047] wlan0 speed is unknown, defaulting to 1000 [ 327.392392][T14033] syzkaller0: entered promiscuous mode [ 327.398353][T14033] syzkaller0: entered allmulticast mode [ 327.568676][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2059'. [ 327.712473][T14048] sctp: [Deprecated]: syz.0.2061 (pid 14048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.712473][T14048] Use struct sctp_sack_info instead [ 327.793998][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 327.854761][T14057] FAULT_INJECTION: forcing a failure. [ 327.854761][T14057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.891700][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.3.2063 Not tainted syzkaller #0 PREEMPT(full) [ 327.891739][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.891751][T14057] Call Trace: [ 327.891759][T14057] [ 327.891768][T14057] dump_stack_lvl+0xe8/0x150 [ 327.891805][T14057] should_fail_ex+0x40c/0x560 [ 327.891830][T14057] prepare_alloc_pages+0x230/0x650 [ 327.891865][T14057] __alloc_frozen_pages_noprof+0x12f/0x380 [ 327.891896][T14057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 327.891920][T14057] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 327.891947][T14057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 327.891976][T14057] ? __pfx_policy_nodemask+0x10/0x10 [ 327.892007][T14057] __alloc_pages_noprof+0x10/0x100 [ 327.892033][T14057] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 327.892069][T14057] ? alloc_pages_noprof+0x13b/0x2a0 [ 327.892100][T14057] __kasan_populate_vmalloc+0xb7/0x1c0 [ 327.892128][T14057] alloc_vmap_area+0xd1a/0x1420 [ 327.892161][T14057] ? __pfx_alloc_vmap_area+0x10/0x10 [ 327.892178][T14057] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 327.892202][T14057] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 327.892224][T14057] ? __get_vm_area_node+0x136/0x300 [ 327.892242][T14057] ? __get_vm_area_node+0x136/0x300 [ 327.892268][T14057] __get_vm_area_node+0x1f2/0x300 [ 327.892291][T14057] ? xdp_umem_create+0x6bd/0x890 [ 327.892320][T14057] vmap+0x162/0x310 [ 327.892340][T14057] ? xdp_umem_create+0x6bd/0x890 [ 327.892369][T14057] xdp_umem_create+0x6bd/0x890 [ 327.892401][T14057] xsk_setsockopt+0x82f/0x960 [ 327.892423][T14057] ? __fget_files+0x2a/0x420 [ 327.892450][T14057] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.892479][T14057] ? __fget_files+0x2a/0x420 [ 327.892501][T14057] ? aa_sock_opt_perm+0xff/0x1a0 [ 327.892523][T14057] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 327.892543][T14057] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.892565][T14057] do_sock_setsockopt+0x17c/0x1b0 [ 327.892599][T14057] __x64_sys_setsockopt+0x13d/0x1b0 [ 327.892639][T14057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.892659][T14057] do_syscall_64+0x174/0x580 [ 327.892686][T14057] ? trace_irq_disable+0x3b/0x140 [ 327.892716][T14057] ? clear_bhb_loop+0x40/0x90 [ 327.892737][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.892756][T14057] RIP: 0033:0x7f8d7b19de59 [ 327.892784][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.892802][T14057] RSP: 002b:00007f8d7c13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.892824][T14057] RAX: ffffffffffffffda RBX: 00007f8d7b425fa0 RCX: 00007f8d7b19de59 [ 327.892837][T14057] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 327.892849][T14057] RBP: 00007f8d7c13e090 R08: 0000000000000020 R09: 0000000000000000 [ 327.892861][T14057] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 327.892871][T14057] R13: 00007f8d7b426038 R14: 00007f8d7b425fa0 R15: 00007ffc1a3e5398 [ 327.892901][T14057] [ 328.321278][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021af3c00: rx timeout, send abort [ 328.330541][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021af3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 328.505282][T14079] dvmrp0: entered allmulticast mode [ 328.517778][T14072] syzkaller0: entered promiscuous mode [ 328.529844][T14072] syzkaller0: entered allmulticast mode [ 328.567223][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2068'. [ 328.790677][T14099] smbdirect: ib_dev[syz0] removed [ 328.917116][T14104] netlink: 'syz.0.2073': attribute type 7 has an invalid length. [ 328.987850][T14104] netlink: 'syz.0.2073': attribute type 7 has an invalid length. [ 329.119659][T14115] FAULT_INJECTION: forcing a failure. [ 329.119659][T14115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.135003][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.1.2077 Not tainted syzkaller #0 PREEMPT(full) [ 329.135030][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.135040][T14115] Call Trace: [ 329.135048][T14115] [ 329.135056][T14115] dump_stack_lvl+0xe8/0x150 [ 329.135090][T14115] should_fail_ex+0x40c/0x560 [ 329.135117][T14115] prepare_alloc_pages+0x230/0x650 [ 329.135152][T14115] __alloc_frozen_pages_noprof+0x12f/0x380 [ 329.135183][T14115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.135208][T14115] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 329.135236][T14115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.135266][T14115] ? __pfx_policy_nodemask+0x10/0x10 [ 329.135300][T14115] __alloc_pages_noprof+0x10/0x100 [ 329.135327][T14115] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 329.135359][T14115] ? alloc_pages_noprof+0x13b/0x2a0 [ 329.135390][T14115] __kasan_populate_vmalloc+0xb7/0x1c0 [ 329.135420][T14115] alloc_vmap_area+0xd1a/0x1420 [ 329.135457][T14115] ? __pfx_alloc_vmap_area+0x10/0x10 [ 329.135475][T14115] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 329.135500][T14115] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 329.135528][T14115] ? __get_vm_area_node+0x136/0x300 [ 329.135546][T14115] ? __get_vm_area_node+0x136/0x300 [ 329.135572][T14115] __get_vm_area_node+0x1f2/0x300 [ 329.135594][T14115] ? xdp_umem_create+0x6bd/0x890 [ 329.135623][T14115] vmap+0x162/0x310 [ 329.135644][T14115] ? xdp_umem_create+0x6bd/0x890 [ 329.135674][T14115] xdp_umem_create+0x6bd/0x890 [ 329.135705][T14115] xsk_setsockopt+0x82f/0x960 [ 329.135727][T14115] ? __fget_files+0x2a/0x420 [ 329.135752][T14115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.135782][T14115] ? __fget_files+0x2a/0x420 [ 329.135803][T14115] ? aa_sock_opt_perm+0xff/0x1a0 [ 329.135826][T14115] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 329.135847][T14115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.135871][T14115] do_sock_setsockopt+0x17c/0x1b0 [ 329.135913][T14115] __x64_sys_setsockopt+0x13d/0x1b0 [ 329.135942][T14115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.135964][T14115] do_syscall_64+0x174/0x580 [ 329.135992][T14115] ? trace_irq_disable+0x3b/0x140 [ 329.136016][T14115] ? clear_bhb_loop+0x40/0x90 [ 329.136041][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.136061][T14115] RIP: 0033:0x7f83da79de59 [ 329.136079][T14115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.136096][T14115] RSP: 002b:00007f83db5ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.136116][T14115] RAX: ffffffffffffffda RBX: 00007f83daa25fa0 RCX: 00007f83da79de59 [ 329.136130][T14115] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 329.136142][T14115] RBP: 00007f83db5ca090 R08: 0000000000000020 R09: 0000000000000000 [ 329.136154][T14115] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 329.136166][T14115] R13: 00007f83daa26038 R14: 00007f83daa25fa0 R15: 00007ffc91a24cf8 [ 329.136198][T14115] [ 329.177881][T14120] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2080'. [ 329.477329][T14135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2081'. [ 329.601892][T14142] hsr0: entered promiscuous mode [ 329.626133][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2085'. [ 329.687112][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 329.731127][ C1] vxcan0: j1939_session_tx_dat: 0xffff88808ae6e400: queue data error: -100 [ 329.882913][T14166] FAULT_INJECTION: forcing a failure. [ 329.882913][T14166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.898826][T14166] CPU: 1 UID: 0 PID: 14166 Comm: syz.0.2091 Not tainted syzkaller #0 PREEMPT(full) [ 329.898850][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.898861][T14166] Call Trace: [ 329.898868][T14166] [ 329.898876][T14166] dump_stack_lvl+0xe8/0x150 [ 329.898909][T14166] should_fail_ex+0x40c/0x560 [ 329.898933][T14166] prepare_alloc_pages+0x230/0x650 [ 329.898963][T14166] __alloc_frozen_pages_noprof+0x12f/0x380 [ 329.898992][T14166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.899014][T14166] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 329.899038][T14166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.899066][T14166] ? __pfx_policy_nodemask+0x10/0x10 [ 329.899094][T14166] __alloc_pages_noprof+0x10/0x100 [ 329.899116][T14166] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 329.899147][T14166] ? alloc_pages_noprof+0x13b/0x2a0 [ 329.899174][T14166] __kasan_populate_vmalloc+0xb7/0x1c0 [ 329.899203][T14166] alloc_vmap_area+0xd1a/0x1420 [ 329.899237][T14166] ? __pfx_alloc_vmap_area+0x10/0x10 [ 329.899258][T14166] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 329.899283][T14166] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 329.899307][T14166] ? __get_vm_area_node+0x136/0x300 [ 329.899323][T14166] ? __get_vm_area_node+0x136/0x300 [ 329.899348][T14166] __get_vm_area_node+0x1f2/0x300 [ 329.899366][T14166] ? xdp_umem_create+0x6bd/0x890 [ 329.899391][T14166] vmap+0x162/0x310 [ 329.899417][T14166] ? xdp_umem_create+0x6bd/0x890 [ 329.899447][T14166] xdp_umem_create+0x6bd/0x890 [ 329.899481][T14166] xsk_setsockopt+0x82f/0x960 [ 329.899502][T14166] ? __fget_files+0x2a/0x420 [ 329.899525][T14166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.899555][T14166] ? __fget_files+0x2a/0x420 [ 329.899575][T14166] ? aa_sock_opt_perm+0xff/0x1a0 [ 329.899596][T14166] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 329.899614][T14166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 329.899637][T14166] do_sock_setsockopt+0x17c/0x1b0 [ 329.899668][T14166] __x64_sys_setsockopt+0x13d/0x1b0 [ 329.899696][T14166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.899715][T14166] do_syscall_64+0x174/0x580 [ 329.899742][T14166] ? trace_irq_disable+0x3b/0x140 [ 329.899765][T14166] ? clear_bhb_loop+0x40/0x90 [ 329.899789][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.899808][T14166] RIP: 0033:0x7f381b59de59 [ 329.899826][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.899844][T14166] RSP: 002b:00007f381c451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.899864][T14166] RAX: ffffffffffffffda RBX: 00007f381b825fa0 RCX: 00007f381b59de59 [ 329.899878][T14166] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 329.899891][T14166] RBP: 00007f381c451090 R08: 0000000000000020 R09: 0000000000000000 [ 329.899903][T14166] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 329.899914][T14166] R13: 00007f381b826038 R14: 00007f381b825fa0 R15: 00007ffc6da264c8 [ 329.899942][T14166] [ 330.348038][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 330.349107][T14177] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 330.475526][T14146] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 330.491326][T14189] can: request_module (can-proto-0) failed. [ 330.512246][T14177] bond0: entered promiscuous mode [ 330.518585][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.637949][T14189] tipc: Enabling of bearer rejected, failed to enable media [ 330.734510][ T6786] net_ratelimit: 9 callbacks suppressed [ 330.734529][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 330.754793][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 330.770870][ T6786] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 330.830594][T14199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.893487][T14218] netlink: 'syz.2.2102': attribute type 29 has an invalid length. [ 331.253055][T14243] netlink: 'syz.3.2110': attribute type 13 has an invalid length. [ 331.274364][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 331.288750][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.406229][T14252] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 331.428239][T14243] dummy0: left promiscuous mode [ 331.430953][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2112'. [ 331.728856][ T35] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.882460][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 331.897734][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.912583][ T35] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.921628][ T35] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.931067][ T35] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.950158][T14261] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 332.415383][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 332.430171][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.711691][ T5620] block nbd4: Receive control failed (result -32) [ 332.722029][ T5636] block nbd4: Receive control failed (result -32) [ 332.881046][T14304] netlink: 'syz.3.2126': attribute type 4 has an invalid length. [ 332.912287][T14302] syzkaller1: entered promiscuous mode [ 332.925687][T14302] syzkaller1: entered allmulticast mode [ 332.997016][T14306] lo speed is unknown, defaulting to 1000 [ 333.519810][T14341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2134'. [ 333.732290][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 333.944121][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 333.974601][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'. [ 334.087758][ T12] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.111093][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.136946][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.173680][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.212545][T14378] __nla_validate_parse: 9 callbacks suppressed [ 334.212564][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 334.249617][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'. [ 334.928531][T14414] lo speed is unknown, defaulting to 1000 [ 335.653766][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.781462][T14431] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2152'. [ 336.033721][T14431] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 336.053150][T14431] syzkaller0: entered promiscuous mode [ 336.061117][T14431] syzkaller0: entered allmulticast mode [ 336.067278][ T12] net_ratelimit: 12 callbacks suppressed [ 336.067296][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 336.087469][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 336.200874][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 336.653984][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 336.668690][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.036398][T14493] lo speed is unknown, defaulting to 1000 [ 337.243739][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 337.258228][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.308639][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 337.353764][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 337.452901][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 337.464053][ T1054] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.492702][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 337.496429][ T1054] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.540178][ T1054] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.576421][ T1054] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.884274][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 337.899479][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.966322][T14522] kthread_run failed with err -4 [ 337.984899][T14521] netlink: 'syz.1.2175': attribute type 3 has an invalid length. [ 338.001315][T14521] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 338.020882][T14521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2175'. [ 338.063843][T14521] NCSI netlink: No device for ifindex 4294967295 [ 338.141186][T14539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2178'. [ 338.423993][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 338.439129][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 339.232374][T14581] bridge0: port 1(veth1_to_bridge) entered blocking state [ 339.244579][T14581] bridge0: port 1(veth1_to_bridge) entered disabled state [ 339.265541][T14581] veth1_to_bridge: entered allmulticast mode [ 339.284779][T14581] veth1_to_bridge: entered promiscuous mode [ 339.296630][T14581] bridge0: port 1(veth1_to_bridge) entered blocking state [ 339.304022][T14581] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 339.682096][T14607] __nla_validate_parse: 6 callbacks suppressed [ 339.682117][T14607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2200'. [ 339.732237][T14607] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2200'. [ 339.767263][T14607] netlink: 'syz.3.2200': attribute type 5 has an invalid length. [ 339.794856][T14607] netlink: 'syz.3.2200': attribute type 6 has an invalid length. [ 339.818248][T14615] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 339.847942][T14607] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2200'. [ 339.969440][T14615] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.970752][T14629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2209'. [ 340.004610][T14629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2209'. [ 340.101952][T14626] veth15: entered allmulticast mode [ 340.122207][T14626] bond10: (slave veth15): Enslaving as an active interface with a down link [ 340.184102][T14607] bond10: (slave veth0_to_bond): making interface the new active one [ 340.206305][T14607] veth0_to_bond: entered promiscuous mode [ 340.220428][T14607] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 340.251186][T14642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2206'. [ 340.328252][T14615] macvlan1: entered promiscuous mode [ 340.339593][T14615] macvlan1: entered allmulticast mode [ 340.352630][T14615] team0: Device macvlan1 is already an upper device of the team interface [ 340.871559][T14662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2214'. [ 341.585341][ T12] net_ratelimit: 43 callbacks suppressed [ 341.585360][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 341.605647][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 341.966301][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 342.047035][T14700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2223'. [ 342.096633][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2223'. [ 342.198057][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 342.204158][T14700] bridge0: entered allmulticast mode [ 342.212617][ T1054] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 342.278262][T14704] IPVS: persistence engine module ip_vs_pe_À not found [ 342.719467][T14727] openvswitch: netlink: Flow key attribute not present in set flow. [ 342.764108][T14721] tipc: Enabled bearer , priority 10 [ 342.781416][T14719] tipc: Enabled bearer , priority 0 [ 342.795315][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 342.809862][ T6786] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 342.827781][T14719] syzkaller0: entered promiscuous mode [ 342.852650][T14719] syzkaller0: entered allmulticast mode [ 342.905904][T14724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 342.975176][T14719] tipc: Resetting bearer [ 343.059874][T14718] tipc: Resetting bearer [ 343.363742][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 343.378310][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 343.396078][T14718] tipc: Disabling bearer [ 343.633381][T14736] team_slave_0 (unregistering): left promiscuous mode [ 343.662854][T14736] team_slave_0 (unregistering): left allmulticast mode [ 343.836262][T14736] team0: Port device team_slave_0 removed [ 343.925925][T14738] syzkaller1: entered promiscuous mode [ 343.948997][T14738] syzkaller1: entered allmulticast mode [ 343.993966][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 344.014854][T14769] FAULT_INJECTION: forcing a failure. [ 344.014854][T14769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.073156][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.3.2242 Not tainted syzkaller #0 PREEMPT(full) [ 344.073182][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.073193][T14769] Call Trace: [ 344.073201][T14769] [ 344.073209][T14769] dump_stack_lvl+0xe8/0x150 [ 344.073242][T14769] should_fail_ex+0x40c/0x560 [ 344.073265][T14769] prepare_alloc_pages+0x230/0x650 [ 344.073294][T14769] __alloc_frozen_pages_noprof+0x12f/0x380 [ 344.073319][T14769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.073341][T14769] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 344.073368][T14769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.073395][T14769] ? __pfx_policy_nodemask+0x10/0x10 [ 344.073426][T14769] __alloc_pages_noprof+0x10/0x100 [ 344.073451][T14769] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 344.073479][T14769] ? alloc_pages_noprof+0x13b/0x2a0 [ 344.073504][T14769] __kasan_populate_vmalloc+0xb7/0x1c0 [ 344.073530][T14769] alloc_vmap_area+0xd1a/0x1420 [ 344.073563][T14769] ? __pfx_alloc_vmap_area+0x10/0x10 [ 344.073579][T14769] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 344.073600][T14769] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 344.073622][T14769] ? __get_vm_area_node+0x136/0x300 [ 344.073639][T14769] ? __get_vm_area_node+0x136/0x300 [ 344.073664][T14769] __get_vm_area_node+0x1f2/0x300 [ 344.073686][T14769] ? xdp_umem_create+0x6bd/0x890 [ 344.073714][T14769] vmap+0x162/0x310 [ 344.073734][T14769] ? xdp_umem_create+0x6bd/0x890 [ 344.073764][T14769] xdp_umem_create+0x6bd/0x890 [ 344.073798][T14769] xsk_setsockopt+0x82f/0x960 [ 344.073820][T14769] ? __fget_files+0x2a/0x420 [ 344.073847][T14769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.073877][T14769] ? __fget_files+0x2a/0x420 [ 344.073906][T14769] ? aa_sock_opt_perm+0xff/0x1a0 [ 344.073929][T14769] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 344.073947][T14769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.073973][T14769] do_sock_setsockopt+0x17c/0x1b0 [ 344.074006][T14769] __x64_sys_setsockopt+0x13d/0x1b0 [ 344.074034][T14769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.074054][T14769] do_syscall_64+0x174/0x580 [ 344.074077][T14769] ? trace_irq_disable+0x3b/0x140 [ 344.074100][T14769] ? clear_bhb_loop+0x40/0x90 [ 344.074122][T14769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.074139][T14769] RIP: 0033:0x7f8d7b19de59 [ 344.074154][T14769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.074169][T14769] RSP: 002b:00007f8d7c13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.074188][T14769] RAX: ffffffffffffffda RBX: 00007f8d7b425fa0 RCX: 00007f8d7b19de59 [ 344.074199][T14769] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 344.074210][T14769] RBP: 00007f8d7c13e090 R08: 0000000000000020 R09: 0000000000000000 [ 344.074222][T14769] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 344.074232][T14769] R13: 00007f8d7b426038 R14: 00007f8d7b425fa0 R15: 00007ffc1a3e5398 [ 344.074263][T14769] [ 344.488903][T14782] netlink: 'syz.3.2245': attribute type 4 has an invalid length. [ 344.634537][T14791] bridge0: port 1(veth1_to_bridge) entered disabled state [ 344.988545][T14802] __nla_validate_parse: 8 callbacks suppressed [ 344.988564][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2250'. [ 345.216449][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.224869][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.811949][T14849] tipc: Enabled bearer , priority 0 [ 345.837050][T14847] lo speed is unknown, defaulting to 1000 [ 345.837336][T14849] syzkaller0: entered promiscuous mode [ 345.871040][T14849] syzkaller0: entered allmulticast mode [ 346.090370][T14852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2263'. [ 346.112499][T14862] tipc: Resetting bearer [ 346.410039][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 346.477309][T14880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2270'. [ 346.771098][T14889] netlink: 'syz.3.2272': attribute type 25 has an invalid length. [ 346.843926][ T6047] tipc: Node number set to 3567520928 [ 346.912882][T14891] lo speed is unknown, defaulting to 1000 [ 346.943447][T14897] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 347.017624][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 347.061643][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'. [ 347.086410][ T12] net_ratelimit: 11 callbacks suppressed [ 347.086496][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 347.090719][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'. [ 347.092249][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.108453][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'. [ 347.479462][T14923] tipc: Enabled bearer , priority 0 [ 347.525096][T14923] syzkaller0: entered promiscuous mode [ 347.553262][T14923] syzkaller0: entered allmulticast mode [ 347.585732][T14924] syzkaller0: entered promiscuous mode [ 347.596079][T14924] syzkaller0: entered allmulticast mode [ 347.609858][T14927] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 347.686194][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 347.700911][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.727134][T14848] tipc: Resetting bearer [ 347.753540][T14848] tipc: Disabling bearer [ 347.804176][T14929] lo speed is unknown, defaulting to 1000 [ 347.882359][T14940] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 347.980747][T14940] lo speed is unknown, defaulting to 1000 [ 348.077394][T14952] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 348.116046][T14955] bond0: Unable to set down delay as MII monitoring is disabled [ 348.145149][T14955] bond0 (unregistering): Released all slaves [ 348.179926][T14952] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 348.235100][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 348.258172][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 348.285481][T14920] tipc: Resetting bearer [ 348.347761][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'. [ 348.368495][T14920] tipc: Disabling bearer [ 348.420850][T14973] netlink: 'syz.1.2292': attribute type 39 has an invalid length. [ 348.678999][T14981] netlink: 'syz.2.2295': attribute type 2 has an invalid length. [ 348.707236][T14981] netlink: 'syz.2.2295': attribute type 2 has an invalid length. [ 348.763111][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 348.794781][T14982] batadv_slave_1: entered promiscuous mode [ 348.876058][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 348.890951][ T3301] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 348.925426][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.951823][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.011736][T14981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.043662][T14981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.069345][T14981] veth1_vlan: left promiscuous mode [ 349.076649][T14981] veth0_vlan: left promiscuous mode [ 349.082989][T14981] veth0_vlan: entered promiscuous mode [ 349.090913][T14981] veth1_vlan: entered promiscuous mode [ 349.100983][T14981] veth1_macvtap: left promiscuous mode [ 349.105105][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 349.107780][T14981] veth0_macvtap: left promiscuous mode [ 349.120755][T14981] veth0_macvtap: entered promiscuous mode [ 349.127814][T14981] veth1_macvtap: entered promiscuous mode [ 349.139846][T14981] 8021q: adding VLAN 0 to HW filter on device €Â [ 349.148127][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.157645][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.167332][T14981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.177557][T14981] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 349.401504][T14976] batadv_slave_1: left promiscuous mode [ 349.416732][ T12] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.453262][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.495171][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 349.557976][T14997] vlan1: entered allmulticast mode [ 349.589519][T14997] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 349.608613][T14997] bridge0: port 5(vlan1) entered blocking state [ 349.630950][T14997] bridge0: port 5(vlan1) entered disabled state [ 349.656005][T14997] vlan1: entered promiscuous mode [ 349.661892][T14997] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 349.693077][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.721930][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.765841][T15004] syzkaller1: entered promiscuous mode [ 349.783034][T15004] syzkaller1: entered allmulticast mode [ 349.982109][T15014] lo speed is unknown, defaulting to 1000 [ 350.081479][T15020] __nla_validate_parse: 56 callbacks suppressed [ 350.081523][T15020] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2305'. [ 350.445789][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2311'. [ 350.492041][T15049] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2312'. [ 350.660614][T15052] FAULT_INJECTION: forcing a failure. [ 350.660614][T15052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.674353][T15052] CPU: 0 UID: 0 PID: 15052 Comm: syz.1.2313 Not tainted syzkaller #0 PREEMPT(full) [ 350.674379][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.674392][T15052] Call Trace: [ 350.674467][T15052] [ 350.674529][T15052] dump_stack_lvl+0xe8/0x150 [ 350.674668][T15052] should_fail_ex+0x40c/0x560 [ 350.674760][T15052] prepare_alloc_pages+0x230/0x650 [ 350.674797][T15052] __alloc_frozen_pages_noprof+0x12f/0x380 [ 350.674820][T15052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.674875][T15052] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 350.674904][T15052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.674928][T15052] ? __pfx_policy_nodemask+0x10/0x10 [ 350.674946][T15052] __alloc_pages_noprof+0x10/0x100 [ 350.674961][T15052] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 350.674990][T15052] ? alloc_pages_noprof+0x13b/0x2a0 [ 350.675020][T15052] __kasan_populate_vmalloc+0xb7/0x1c0 [ 350.675063][T15052] alloc_vmap_area+0xd1a/0x1420 [ 350.675092][T15052] ? __pfx_alloc_vmap_area+0x10/0x10 [ 350.675102][T15052] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 350.675117][T15052] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 350.675137][T15052] ? __get_vm_area_node+0x136/0x300 [ 350.675147][T15052] ? __get_vm_area_node+0x136/0x300 [ 350.675164][T15052] __get_vm_area_node+0x1f2/0x300 [ 350.675175][T15052] ? xdp_umem_create+0x6bd/0x890 [ 350.675290][T15052] vmap+0x162/0x310 [ 350.675309][T15052] ? xdp_umem_create+0x6bd/0x890 [ 350.675337][T15052] xdp_umem_create+0x6bd/0x890 [ 350.675372][T15052] xsk_setsockopt+0x82f/0x960 [ 350.675389][T15052] ? __fget_files+0x2a/0x420 [ 350.675416][T15052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.675432][T15052] ? __fget_files+0x2a/0x420 [ 350.675444][T15052] ? aa_sock_opt_perm+0xff/0x1a0 [ 350.675493][T15052] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.675520][T15052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.675534][T15052] do_sock_setsockopt+0x17c/0x1b0 [ 350.675628][T15052] __x64_sys_setsockopt+0x13d/0x1b0 [ 350.675645][T15052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.675672][T15052] do_syscall_64+0x174/0x580 [ 350.675741][T15052] ? trace_irq_disable+0x3b/0x140 [ 350.675762][T15052] ? clear_bhb_loop+0x40/0x90 [ 350.675775][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.675785][T15052] RIP: 0033:0x7f83da79de59 [ 350.675802][T15052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.675811][T15052] RSP: 002b:00007f83db5ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.675850][T15052] RAX: ffffffffffffffda RBX: 00007f83daa25fa0 RCX: 00007f83da79de59 [ 350.675857][T15052] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 350.675863][T15052] RBP: 00007f83db5ca090 R08: 0000000000000020 R09: 0000000000000000 [ 350.675870][T15052] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 350.675876][T15052] R13: 00007f83daa26038 R14: 00007f83daa25fa0 R15: 00007ffc91a24cf8 [ 350.675892][T15052] [ 351.069968][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'. [ 351.318830][ C0] ================================================================== [ 351.327058][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 351.335323][ C0] Read of size 2 at addr ffff88817596a434 by task syz.1.2317/15071 [ 351.343268][ C0] [ 351.345648][ C0] CPU: 0 UID: 0 PID: 15071 Comm: syz.1.2317 Not tainted syzkaller #0 PREEMPT(full) [ 351.345728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.345736][ C0] Call Trace: [ 351.345743][ C0] [ 351.345752][ C0] dump_stack_lvl+0xe8/0x150 [ 351.345780][ C0] print_address_description+0x55/0x1e0 [ 351.345816][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 351.345828][ C0] print_report+0x58/0x70 [ 351.345840][ C0] kasan_report+0x117/0x150 [ 351.345855][ C0] ? __lock_acquire+0x683/0x2cf0 [ 351.345880][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 351.345893][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 351.345906][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 351.345919][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 351.345941][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.345957][ C0] ? ebt_do_table+0x2605/0x27d0 [ 351.346010][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 351.346022][ C0] ? ebt_do_table+0x2605/0x27d0 [ 351.346037][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 351.346052][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 351.346066][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 351.346080][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 351.346092][ C0] ? br_nf_post_routing+0x1c0/0xee0 [ 351.346131][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 351.346172][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 351.346186][ C0] NF_HOOK+0x360/0x3f0 [ 351.346198][ C0] ? net_generic+0x1e/0x240 [ 351.346212][ C0] ? NF_HOOK+0xa2/0x3f0 [ 351.346223][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 351.346236][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 351.346252][ C0] br_forward_finish+0xd3/0x130 [ 351.346264][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 351.346277][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 351.346290][ C0] NF_HOOK+0x360/0x3f0 [ 351.346302][ C0] ? NF_HOOK+0xa2/0x3f0 [ 351.346314][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 351.346326][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 351.346340][ C0] ? br_handle_vlan+0x5e/0x530 [ 351.346374][ C0] __br_forward+0x397/0x540 [ 351.346386][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 351.346405][ C0] br_flood+0x3e6/0x8d0 [ 351.346421][ C0] br_handle_frame_finish+0x1175/0x1990 [ 351.346438][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 351.346452][ C0] ? net_generic+0x1e/0x240 [ 351.346466][ C0] ? net_generic+0x1e/0x240 [ 351.346478][ C0] ? net_generic+0x1e/0x240 [ 351.346491][ C0] ? br_nf_pre_routing+0x70/0x14b0 [ 351.346505][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 351.346521][ C0] br_handle_frame+0x81b/0x1510 [ 351.346541][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 351.346556][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 351.346572][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 351.346586][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 351.346650][ C0] ? lock_acquire+0x106/0x350 [ 351.346663][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 351.346675][ C0] ? lock_acquire+0x106/0x350 [ 351.346688][ C0] ? unwind_next_frame+0x8f/0x2550 [ 351.346709][ C0] ? unwind_next_frame+0x8f/0x2550 [ 351.346720][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 351.346730][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 351.346746][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 351.346758][ C0] ? common_startup_64+0x13e/0x157 [ 351.346780][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 351.346794][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 351.346805][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 351.346818][ C0] ? dev_gro_receive+0x1097/0x2380 [ 351.346884][ C0] napi_complete_done+0x299/0x730 [ 351.346897][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 351.346909][ C0] ? gro_cell_poll+0x175/0x5d0 [ 351.346961][ C0] gro_cell_poll+0x5ab/0x5d0 [ 351.346977][ C0] ? gro_cell_poll+0x175/0x5d0 [ 351.346989][ C0] __napi_poll+0xaa/0x330 [ 351.347002][ C0] net_rx_action+0x61d/0xf50 [ 351.347018][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 351.347036][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 351.347051][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 351.347069][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 351.347082][ C0] ? sched_clock+0x3f/0x60 [ 351.347097][ C0] handle_softirqs+0x225/0x840 [ 351.347109][ C0] ? do_softirq+0x76/0xd0 [ 351.347120][ C0] ? tun_rx_batched+0x185/0x790 [ 351.347191][ C0] do_softirq+0x76/0xd0 [ 351.347208][ C0] [ 351.347212][ C0] [ 351.347216][ C0] __local_bh_enable_ip+0xf8/0x130 [ 351.347226][ C0] ? tun_rx_batched+0x185/0x790 [ 351.347239][ C0] tun_rx_batched+0x616/0x790 [ 351.347253][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 351.347265][ C0] ? tun_get_user+0x2717/0x4370 [ 351.347278][ C0] ? tun_get_user+0x2717/0x4370 [ 351.347290][ C0] ? tun_get_user+0x23cb/0x4370 [ 351.347302][ C0] ? tun_get_user+0x23cb/0x4370 [ 351.347320][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 351.347333][ C0] ? tun_get_user+0x2717/0x4370 [ 351.347345][ C0] ? tun_get_user+0x2717/0x4370 [ 351.347357][ C0] tun_get_user+0x2b44/0x4370 [ 351.347373][ C0] ? aa_file_perm+0x18b/0x15f0 [ 351.347414][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 351.347424][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 351.347450][ C0] ? __lock_acquire+0x683/0x2cf0 [ 351.347464][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 351.347476][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 351.347521][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 351.347536][ C0] ? tun_get+0x1c/0x2f0 [ 351.347548][ C0] ? tun_get+0x1c/0x2f0 [ 351.347561][ C0] ? tun_get+0x1c/0x2f0 [ 351.347573][ C0] ? tun_get+0x1c/0x2f0 [ 351.347586][ C0] tun_chr_write_iter+0x113/0x200 [ 351.347599][ C0] vfs_write+0x612/0xba0 [ 351.347616][ C0] ? __pfx_vfs_write+0x10/0x10 [ 351.347632][ C0] ? __fget_files+0x2a/0x420 [ 351.347646][ C0] ksys_write+0x150/0x270 [ 351.347661][ C0] ? __pfx_ksys_write+0x10/0x10 [ 351.347675][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 351.347696][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.347707][ C0] do_syscall_64+0x174/0x580 [ 351.347721][ C0] ? trace_irq_disable+0x3b/0x140 [ 351.347734][ C0] ? clear_bhb_loop+0x40/0x90 [ 351.347746][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.347756][ C0] RIP: 0033:0x7f83da79de59 [ 351.347768][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.347778][ C0] RSP: 002b:00007f83db588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.347790][ C0] RAX: ffffffffffffffda RBX: 00007f83daa26180 RCX: 00007f83da79de59 [ 351.347798][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 351.347805][ C0] RBP: 00007f83da833e6f R08: 0000000000000000 R09: 0000000000000000 [ 351.347812][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.347818][ C0] R13: 00007f83daa26218 R14: 00007f83daa26180 R15: 00007ffc91a24cf8 [ 351.347830][ C0] [ 351.347833][ C0] [ 352.030899][ C0] The buggy address belongs to the physical page: [ 352.037329][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17596a [ 352.046308][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 352.053687][ C0] raw: 057ff00000000000 ffffea0005d65a88 ffffea0005d65a88 0000000000000000 [ 352.062526][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 352.071096][ C0] page dumped because: kasan: bad access detected [ 352.077636][ C0] page_owner info is not present (never set?) [ 352.083688][ C0] [ 352.085996][ C0] Memory state around the buggy address: [ 352.091710][ C0] ffff88817596a300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 352.099850][ C0] ffff88817596a380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 352.107906][ C0] >ffff88817596a400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 352.116062][ C0] ^ [ 352.122387][ C0] ffff88817596a480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 352.124072][ T46] net_ratelimit: 9 callbacks suppressed [ 352.124087][ T46] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 352.130432][ C0] ffff88817596a500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 352.130444][ C0] ================================================================== [ 352.130652][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 352.130669][ C0] CPU: 0 UID: 0 PID: 15071 Comm: syz.1.2317 Not tainted syzkaller #0 PREEMPT(full) [ 352.130691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.130704][ C0] Call Trace: [ 352.130712][ C0] [ 352.130720][ C0] vpanic+0x56c/0xa60 [ 352.130755][ C0] ? __pfx_vpanic+0x10/0x10 [ 352.130788][ C0] panic+0xc5/0xd0 [ 352.130814][ C0] ? __pfx_panic+0x10/0x10 [ 352.130842][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 352.130869][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 352.130888][ C0] check_panic_on_warn+0x89/0xb0 [ 352.130917][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 352.130937][ C0] end_report+0x73/0x170 [ 352.130962][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 352.130980][ C0] kasan_report+0x128/0x150 [ 352.131006][ C0] ? __lock_acquire+0x683/0x2cf0 [ 352.131032][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 352.131055][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 352.131081][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 352.131105][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 352.131127][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.131154][ C0] ? ebt_do_table+0x2605/0x27d0 [ 352.131174][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 352.131195][ C0] ? ebt_do_table+0x2605/0x27d0 [ 352.131214][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 352.131241][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 352.131267][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.131294][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 352.131319][ C0] ? br_nf_post_routing+0x1c0/0xee0 [ 352.131351][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 352.131376][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 352.131403][ C0] NF_HOOK+0x360/0x3f0 [ 352.131425][ C0] ? net_generic+0x1e/0x240 [ 352.131459][ C0] ? NF_HOOK+0xa2/0x3f0 [ 352.131482][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.131507][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 352.131538][ C0] br_forward_finish+0xd3/0x130 [ 352.131561][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 352.131586][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.131611][ C0] NF_HOOK+0x360/0x3f0 [ 352.131636][ C0] ? NF_HOOK+0xa2/0x3f0 [ 352.131659][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.131683][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.131710][ C0] ? br_handle_vlan+0x5e/0x530 [ 352.131733][ C0] __br_forward+0x397/0x540 [ 352.131757][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 352.131783][ C0] br_flood+0x3e6/0x8d0 [ 352.131812][ C0] br_handle_frame_finish+0x1175/0x1990 [ 352.131846][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.131874][ C0] ? net_generic+0x1e/0x240 [ 352.131899][ C0] ? net_generic+0x1e/0x240 [ 352.131943][ C0] ? net_generic+0x1e/0x240 [ 352.131968][ C0] ? br_nf_pre_routing+0x70/0x14b0 [ 352.131995][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 352.132028][ C0] br_handle_frame+0x81b/0x1510 [ 352.132058][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 352.132087][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.132120][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 352.132147][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 352.132175][ C0] ? lock_acquire+0x106/0x350 [ 352.132202][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 352.132225][ C0] ? lock_acquire+0x106/0x350 [ 352.132251][ C0] ? unwind_next_frame+0x8f/0x2550 [ 352.132274][ C0] ? unwind_next_frame+0x8f/0x2550 [ 352.132295][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 352.132315][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 352.132345][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 352.132369][ C0] ? common_startup_64+0x13e/0x157 [ 352.132393][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 352.132419][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 352.132446][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 352.132474][ C0] ? dev_gro_receive+0x1097/0x2380 [ 352.132508][ C0] napi_complete_done+0x299/0x730 [ 352.132532][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 352.132556][ C0] ? gro_cell_poll+0x175/0x5d0 [ 352.132586][ C0] gro_cell_poll+0x5ab/0x5d0 [ 352.132615][ C0] ? gro_cell_poll+0x175/0x5d0 [ 352.132641][ C0] __napi_poll+0xaa/0x330 [ 352.132664][ C0] net_rx_action+0x61d/0xf50 [ 352.132693][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 352.132716][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 352.132746][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 352.132770][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 352.132794][ C0] ? sched_clock+0x3f/0x60 [ 352.132823][ C0] handle_softirqs+0x225/0x840 [ 352.132845][ C0] ? do_softirq+0x76/0xd0 [ 352.132867][ C0] ? tun_rx_batched+0x185/0x790 [ 352.132892][ C0] do_softirq+0x76/0xd0 [ 352.132912][ C0] [ 352.132919][ C0] [ 352.132926][ C0] __local_bh_enable_ip+0xf8/0x130 [ 352.132947][ C0] ? tun_rx_batched+0x185/0x790 [ 352.132970][ C0] tun_rx_batched+0x616/0x790 [ 352.132997][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 352.133021][ C0] ? tun_get_user+0x2717/0x4370 [ 352.133045][ C0] ? tun_get_user+0x2717/0x4370 [ 352.133069][ C0] ? tun_get_user+0x23cb/0x4370 [ 352.133092][ C0] ? tun_get_user+0x23cb/0x4370 [ 352.133115][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 352.133136][ C0] ? tun_get_user+0x2717/0x4370 [ 352.133158][ C0] ? tun_get_user+0x2717/0x4370 [ 352.133181][ C0] tun_get_user+0x2b44/0x4370 [ 352.133212][ C0] ? aa_file_perm+0x18b/0x15f0 [ 352.133235][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 352.133254][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 352.133278][ C0] ? __lock_acquire+0x683/0x2cf0 [ 352.133306][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 352.133327][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 352.133352][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 352.133375][ C0] ? tun_get+0x1c/0x2f0 [ 352.133398][ C0] ? tun_get+0x1c/0x2f0 [ 352.133423][ C0] ? tun_get+0x1c/0x2f0 [ 352.133445][ C0] ? tun_get+0x1c/0x2f0 [ 352.133475][ C0] tun_chr_write_iter+0x113/0x200 [ 352.133500][ C0] vfs_write+0x612/0xba0 [ 352.133532][ C0] ? __pfx_vfs_write+0x10/0x10 [ 352.133564][ C0] ? __fget_files+0x2a/0x420 [ 352.133591][ C0] ksys_write+0x150/0x270 [ 352.133619][ C0] ? __pfx_ksys_write+0x10/0x10 [ 352.133646][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 352.133670][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.133690][ C0] do_syscall_64+0x174/0x580 [ 352.133717][ C0] ? trace_irq_disable+0x3b/0x140 [ 352.133741][ C0] ? clear_bhb_loop+0x40/0x90 [ 352.133761][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.133780][ C0] RIP: 0033:0x7f83da79de59 [ 352.133798][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.133816][ C0] RSP: 002b:00007f83db588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.133838][ C0] RAX: ffffffffffffffda RBX: 00007f83daa26180 RCX: 00007f83da79de59 [ 352.133852][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003 [ 352.133865][ C0] RBP: 00007f83da833e6f R08: 0000000000000000 R09: 0000000000000000 [ 352.133877][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.133888][ C0] R13: 00007f83daa26218 R14: 00007f83daa26180 R15: 00007ffc91a24cf8 [ 352.133911][ C0] [ 352.136380][ C0] Kernel Offset: disabled