last executing test programs: 3.328908317s ago: executing program 4 (id=3443): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001400010000000000000000c90300008008000280"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080028bd7000fcdbdf2582000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xff0f}], 0x2, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.226501879s ago: executing program 4 (id=3445): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x100, 0x6, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@generic={0x0, 0x3, "b1"}, @noop, @end]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', r0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000080)="17beed", &(0x7f00000003c0)=""/236, &(0x7f00000000c0)="895acf4aa5fa347636efa90f6b5c15424ab32ae6e68c3c67c14d32ff989eae7d6bc74facb525cf0505d81f36ac2d70c49b14e1cf16dbb8a77399ae7ad7846283b02f6d2fe11eb24e88a3edc15f54fc9b0bfeea7f44cdd9bd6d1e0367c4c593230db4bf156e801ad9ec60c0a37cc5f548e9f5bedf9e15f25e79860a", &(0x7f0000000580)="21332fe6051b3875514882d06d2159d49e55e7f91560e417f30c27ef951b81e6ab136500f693e4827f453f8f9336b949f7fc7a7c6bd41f65893adda96e816396a6a3bb4ad961846e3e8fcb623e72722e9da570a4e0afa1a1e84efc14d5c736ebaa5ba070989ff04c78eb7ee4a59d5d25a8b10c813698a43e0ed70ab9b113e41b4cd7d63b49b3f9e55302cd230898313c02a036b7c054f16192a4efaf942bb42fa5bf831b5706185cb1a48f521090660613180210e5651af1b0fad37dbf84960ae718763c2df85c4ca92aa3782a4a036f2b0587687e4ca06bf54760077ff90a", 0x6, 0x1, 0x4}, 0x38) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x4, 0x5, 0x5, @vifc_lcl_ifindex=r0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.174601293s ago: executing program 4 (id=3446): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async, rerun: 64) r1 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) (async, rerun: 32) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x1}, 0xc) (rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) 2.142004392s ago: executing program 4 (id=3457): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @private0, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x7, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x8000400) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="59c5", 0x2}], 0x1, 0x0, 0x0, 0x40100}, 0x4804) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) close(r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x800, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0xed95, 0x1, 0x2, 0x8}, {0xffff99e7, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x2000005, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xfb}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x4009, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0xc00000, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x9, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0xdd, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x5}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0xa, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0xf07c, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0x20de}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x0, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x2, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x0, 0x5, 0x1, r6}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000580)={r6, 0xd5, "86daa437b5531030a955f83484abec789df002a75028113f71e5bbb7ae0b398158f827a58cfb0621c989b44fe5082feff9d15eddc4be68c019bf1b327182deadbb7cc8883c0714a6bdc31ddadf0da1fe9f19294b2a25584661f6450ea086156266e4cc7b461923698dd8e64ef5d35fe89d04153411bf8b000085663fa43678d74b1b0817ca6dd1011c625e29adf5780b70c83272c874304249ef5cf56faa96418e396864ead00af604a31c579b14469ba31542bc862eb7e900da4b299fae091c60e1271a228fd21667afcaa37a075e7432ccead04e"}, &(0x7f0000000000)=0xdd) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x2, 0x10000, 0x432b, r10}, &(0x7f0000000180)=0x10) 2.141689085s ago: executing program 3 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100290100000400ffdbdf250a0000000000000000000000080018004e"], 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100290100000400ffdbdf250a0000000000000000000000080018004e"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 2.140947834s ago: executing program 2 (id=3459): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x8040) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000c40)={&(0x7f0000000440)=0x3, 0x966, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c00)}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000140)={0x11, @empty, 0xce20, 0x0, 'lc\x00', 0x2a, 0x401, 0x65}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2cc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x17, 0x3, "a58e4d0b569adcfec2b0c7082a94ca28f2ac05"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10001, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xad84e3c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}}}}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20020810}, 0x20000000) 1.877152768s ago: executing program 1 (id=3461): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000000ee000095", @ANYRESOCT], &(0x7f0000000280)='syzkaller\x00'}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000041ffffff0000000008f311009111db00000000009500000000000000cd7ab0d09b3834f4562c222799f8c501085927dc8142a49ff5512233e89d4534f28c8442c143e29e4e1b7394647fb63bd8ed8a64f1c7446b2c4095f77b136f15482d7c82457c8a6b295504fc393e4407280c860ce4836040651223e852ab4d4000e6227ea3d9fb1e11c05e1c61bc78389de4ca081af165146be9aaeca9b22564d4e46bd3f0776162a7836cbd6d3831993eec1a2c6ef25bd527cb73cc359eb157"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.871721969s ago: executing program 3 (id=3463): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0a030a000000000000000003000008100011800c000100636f756e746572000800074000000012acc03e033683cb63191e51ae22711fe76ccfea7be987b3347a411e356dca3768e60dce06b34eb383fabb15d0ff18bfb4882471bb433c959563518f64551cbcb84ae826164edfa7df4a724a7f6afc5e04e2c1e4abca2eba33c4850e602af3e33dbb9b90f302f6d34f8be30ab5774447fd89a5dd84f4c3b0ab463f9e02d29665481fc93ae9a9278d214fe9b8b5362c80f34fc1"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0a030a000000000000000003000008100011800c000100636f756e746572000800074000000012acc03e033683cb63191e51ae22711fe76ccfea7be987b3347a411e356dca3768e60dce06b34eb383fabb15d0ff18bfb4882471bb433c959563518f64551cbcb84ae826164edfa7df4a724a7f6afc5e04e2c1e4abca2eba33c4850e602af3e33dbb9b90f302f6d34f8be30ab5774447fd89a5dd84f4c3b0ab463f9e02d29665481fc93ae9a9278d214fe9b8b5362c80f34fc1"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x24, r3, 0x705, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x24, r3, 0x705, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf258200000008000300", @ANYRES32=r13, @ANYBLOB="87bb4dfefad845994d3690e25c85368de338155a7da1fae503a7fba87f068af2d9abd3b4f3f4"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0xa, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000900000000000000ce37000085200000040000008500e35c2a76aa14b517000037000000186200000700000000000000020000008520000004ac6b95e65500000f0000000000000000000000950000000000000063e67fe54b222e0179c465ea9805e50a964cce3a90de09b54892dd43da47efb690590c67ddf56eb47bea6dc75625567f0dbbc25a7fcf5d4075652ab05600e6e3d4a85f322daacdc6a861dbe63b31a3b8c360e963612465ac5fec28047f08ec8c9d6d57deecfc58fbf03f4b4a694f0a9d3f49cc31782050cc7f8a4502ce73a7f68a18856e7115d4b5754722019667cc000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffffff8, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x3, 0x8, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000013c0)=[{0x5, 0x2, 0xf, 0x1}, {0x3, 0x5}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000014c0)=r14, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000014c0)=r14, 0x4) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r15 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32, @ANYBLOB="012020003804000000000000000000190800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) 1.669053908s ago: executing program 3 (id=3465): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000f80)="f6fd4b4371b9cee432fc34e3b0cde3c10d835add05a2a055159b2312cff09dcbea4964835e21d0bdce7cec7a3ccf45ade70cdfa3244c6283342b161cf9be8a3390867042297df641f139ed0e0f6ee57129d551ca34c4b59067be7d74b1f483aee866db92965e73ce2299d0", 0x6b}, {&(0x7f0000000140)="e0c2e66c396af50c86950b5aa3c4d905f489b118a865ac614747e9f90200854a85fcebd0ff9355146e2ff7e43e6f39c5ea834c25e630240c022df9aac891d8a9c0b25dd7ef06f1e7dad414", 0x4b}], 0x3) readv(r2, &(0x7f0000002940)=[{&(0x7f0000008c40)=""/4111, 0x100f}, {&(0x7f0000002840)=""/90, 0x5a}, {0x0}, {&(0x7f0000007940)=""/142, 0x8e}, {0x0}, {0x0}], 0x6) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) socket$inet(0x2, 0x3, 0x81) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 1.573922429s ago: executing program 2 (id=3467): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a000100000008000100", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x81, @dev={0xac, 0x14, 0x14, 0x10}}], 0x10) (async) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 1.4853316s ago: executing program 2 (id=3468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x90, 0x1, [@m_bpf={0x8c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x61, 0x6, "62010000000000000065a031788a57b070b85993390bec7ff761e70407caf9882c352c3bfb7f4767591a73fda0b8771a281eb41d19e86ee39dedb7038e638b6f2fe277edeba241c3b8c4ad827f746ca628f13756000000000000000000"}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.434733752s ago: executing program 1 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000080)=""/31, &(0x7f0000000240)=0x1f) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @generic="3104d072"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.391778057s ago: executing program 1 (id=3471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) unshare(0x20000400) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x50000016}) socket$inet6(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x55b402, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3", 0x3}], 0x1, 0x6) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3", 0x3}], 0x1, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000007060500000000000000000007000007050001000700000008"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x20008001, 0x1}}, 0x44) 1.345347063s ago: executing program 2 (id=3473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x218}}, 0x20050800) 1.256901585s ago: executing program 1 (id=3474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x201, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x35, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast1}, "5efd7e9cbd071ffcf212112de632d21c1649f09f02940bf1bbadfb000000000000"}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000001000000000000000000071180700000000009581"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.175709913s ago: executing program 4 (id=3475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2000a, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000005cdd221700000001000100181b00001cbd5f92eba13af9acc5119a691a3845c93ed41e20bc7c7bdf39bcc2d4b512a14fc61728f53f58521cec3fe42c6260eb2360d8dbda4f6ef93522b03c6f0cad9a61b5572ab5dc51c438817e079b4bad39188cf66cc6289f3770ea2a6ce311784a8a75b363267f8a03e178f9e40b447662", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x55, &(0x7f0000000340)=""/85, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x0, 0x10, 0x101}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) close(r7) r8 = socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x4) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) shutdown(r8, 0x0) recvmmsg$unix(r8, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="07090000000100001c00128004000102800600030000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @generic={0x0, 0x8, 0x6, 0x5bf, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x6b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x5, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x1, 0x0, &(0x7f00000004c0)=[{0x1, 0x4, 0xa}], 0x10, 0x1}, 0x94) 1.061197817s ago: executing program 0 (id=3476): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) syz_emit_ethernet(0x3b6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca83740000000086dd00"/55}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.040913001s ago: executing program 2 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x54, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0xc, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x43}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) close(r5) 1.035804262s ago: executing program 1 (id=3478): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x280) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xe02, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000005bb3b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) unshare(0x400) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r5, 0x7434) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0x9}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010021, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$inet(r0, 0x0, 0x0) 917.427094ms ago: executing program 0 (id=3479): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8068986dd0300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r5, 0x5000}], 0x1, 0x14) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x81, 0xfd, 0xfffff024}, {0x6, 0x8, 0x0, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r9, r9, 0x2f}, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r10, 0x3, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r9, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r12, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r12], 0x108}}], 0x1, 0xc040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4048080) 803.315224ms ago: executing program 3 (id=3480): r0 = socket$inet6(0xa, 0x4, 0x183a) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f00000001c0)={0x2, 0x9, 0x1}) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000280)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) r3 = socket(0xb, 0x4, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x8}, 0xc) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000480)=0x4, 0x4) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000540)=0x10001, 0x12) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000800)={r0, &(0x7f0000000700)='nl80211\x00', 0x840, &(0x7f0000000740)={@_ha_fsid={[0x80, 0xd6]}, {0x1, 0x8001, 0xdd, 0x1}}, 0x9, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)}) r9 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000ac0)=0xe8) r11 = getgid() r12 = openat$cgroup_devices(r4, &(0x7f0000000b00)='devices.deny\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000b40)=0x0) r14 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001080)=0x0) sendmmsg$unix(r8, &(0x7f0000002e00)=[{{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000008c0)="e5993d8d2c1e9824bd0f21b7af5e291b47614d08ad259909c9ea69ccbbdef81c114fca94d9b39ba49572126294551f847da70b3d00bda964d38bd654101aae87a18f6e73d11ac23087c4ea8c72881be203c2836336f51ac92cf38e8130511ddae48b25d988e26761ba8483ac077afdef6a2c10", 0x73}, {&(0x7f0000000940)='.', 0x1}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0x60, 0x8004}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d00)="5375556c8c81919bb65273a2be38472b80be9cc35e2d1c3403856196443a8f80f69dd44ffd063ad1bd93bc87d1aea72b5e59bacd46b0da308d4f0f3aa52e22f68f492b", 0x43}, {&(0x7f0000000d80)="1b25fab2b66d94cba1e77759631676daf62dd0ce3f27701b2f4fba75ca13f2b1d6b09a92fc45dc38f62d933622f28630989903a8cffa03a6d82a326671b119afcbf9f6a0dcd17e6452de09b2099896e880521741fe31b47c6c10268820543519ca45f5020205f13a1b9dac8b2324f9c6bc0d0f54bd78891033f38625fb70e34b5e5be87185c09c9e6b03123924f48800d03ea2", 0x93}, {&(0x7f0000000e40)="edfbcc46aafa9ab30e96ed28a43091eafd38fadb979c18077fd347c66ece87cd39a3e2f580314acbed5b30536e2721b8c75bac81add271209c7d02e150836bbf94311de1690debbb5b82eb2c56bb34bfbf6082f0cdff4afae907d0253b8a4e9b7feec0f6f5f3326e68eb454d42efe4645929abca01cc4ae89eb066a6fc4ec2d11c1c6d3156ea2b7dd8a761ba175c41c743531ff1d31dabbf2dbbddca3e", 0x9d}, {&(0x7f0000000f00)="63b71d81526dbf045ae7ea1d1cb0b049f7f311043ac8c672df2fc22bda462bfad0ec93369c0b1706592a5da8db96ffc4537d9f3c3756f9e280b319fd19e01511df6b6e2dd413cbc5bbbf39340a", 0x4d}, {&(0x7f0000000f80)="51b7e0a2e0bc1316e03e0b3e43c827561592fb6ee20df3c98e4409adc975b93ded028527a60414d133a615445c903b409f7daa07120c1612d9527adfd67c6bc4d585c41dcf8845b583127b9908fb2ec1048563bfd4cb", 0x56}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {r16}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r0, r2, r1, r1]}}], 0xf8, 0x4}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001740)="62d0dc32a32af5bb7dfb3542096f8ab8e201c3ff74a0775dc298a87021a1d051638aa96856eb6f23fb603ae07275ed8d23a26a0e2e1cdbcfc44d5c88d812470a1969924f9e0d1138f2feb410b772b7ee8bfbeb5a964a03a9a8dafc04fb04ec5b707599e9e8ef6a5efbecd012ca6a3aa7ea45abb5ab5a0756e1d9660c20b12c32e4d25d5bde6b82ecc34e958675cd602c7a16a736f469a41739709f521f585021", 0xa0}], 0x1, 0x0, 0x0, 0x20000}}, {{&(0x7f0000001840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b80)=[{&(0x7f00000018c0)="c588504b1920188098e7992d6e9b9c105326571a2f02a730133ae6819bdd284cd6462f8383d4529baa8368c3feee808f6fa428f1bbdfaadbfa15eb626b0c0ff5eab73aaba586ee222441a670b78b0e899ac0fd226c352420931da34429f111a848e77c3de4d396150348e4078801350b7e9c74e660948ce430f8ab29b0955257e0a1d8e49bbc53af7d8299e1ca47b145b6a3fbcadfdb665a2e0d33c6d34d0c3e2e8d755e6b7db7b3484c6d963c3160b88a1a124ebb4a32eb4de6", 0xba}, {&(0x7f0000001980)="41294fa744e51fe76f8dc8b4ab7483a6869d0dffd1c5d89f3ace61ff572876765d2ca76495079a3470bae2a430fe61246f8b5d66b7e74fff5aa549df4641daea5885c1b7c7ae2701863bf8684b2abefa6eeb8fc553451bab89a98d7a92a7e9aa36a087838f4ffccbfcc647337b76dfbd77d9e8321b463cccc9d3564ea96c3b80a14bbe57d74d64dbc291532b3f1d55138cc89c1774ccd460654a09f3d5b97cc5249dab2afef082d4937ad51b6ecbac51c11343c9bc1f2e236997382bddea3bb71f8ffe302b3397691d9564533d734e1aaa17aebf31321c64bfa03e1c17d0f4a436e802515706cca6127e914fe98b2ffc16", 0xf1}, {&(0x7f0000001a80)="e66f76216bf2582ba50e053ead520189dc7e9cf723a11d5b70e1d0ebd1b49f3d35688789f69da9a48470c1e02f5eb05509ea2f6aefd8dc723749272b86149f5f532102858e0604e54ed9d85d286a8f49c2285ce8e84395b33e412daafd22f0fc5eb1f3d3b73195ffbe2c0325068f9cbbf8381778076715106655f57f31ac6de7b00965a302f130eb4ab5e67f1097323954a0e5c7be16e36617bb2e61b8247e788903cb2688e71384c138aad23f468d2468bfe6f479e6e3f08d0328186234f0d181181f857cc38e0f01ef678a790de989f840a303750441bb93a0e92a38aefea3581dee7713f890793fa0de5b2aa00165f9ddd7a252e1c580c3888880b3bf83c34e797201ca3211aef32eb5200dbe9f634523534ab881f6a00fac970674b9d19efdc3de318307d215069992653e29944115190443dda61b2b3d663a099274155351d3ca0ad04907e9a5fe1c7537c5422cd4b18c803d424e5153e41609bee1f5aa5c10e4a71bd4907c24ef326fd34dca35e17e99626080e6417442d389c3148f6e81d0d8524768666c38ddcc52abd81103ef4b3ed55de59561e9abda560a6dfde920a3a03f6d08f62aa7f2a687e779db4626b0055262804f5eae803318bdce0be16a836b709e0660759777ae5eb9e9b87f207de41c4cc3f60a86e0adde63614004cf350c6cd6cc52eb27cf218a75f605d5f0bdf8b1096724cf9795b36a24c6b77632ce3e3ded5cd59b3a404dac1d5ee981b3d14e057b9f4d8079a07f763451875c827447bce2f0acd38b4b64b69672eafdd2952cfcc7e85b108855b43c7cece8c673317dc3e41bc332fc320a70f295c56c591d7adc886199f175d5fa33ccb28d289b4bd3f873956df4605822c35cc06ad229f9080749382f015ef4da0424728aff9e680790000a246ab2362303e8736a9959b03ac72a23da9eb6600853664b386424f2d0cddc62cae43bc10902c19ab7c0127d8c898302bc346bd59ca3aad7753af71a83bd84f8800e8bb2a539a85a8a031a81fc72d7b317c7cb8df6df0b26d168898621e60d7daf41bf6d60bd75959a94a5b5fccb83ba326aa65630d9aef46e8fd9bce480991cebe6084167f2b0b2ea203619c3b723d14d629e6259afe10d306b9ad356cac90aaf4f6fe02af9831dda809d2577bcc123ac3f7474759c659416421ac10d3ff557619bb067b0dedd7e52e2a44ad4d0a5a99c87ba84b2be30755814e6cb1e440f9a108c202af508f16c15d24cef968b7969367da0f75f977d2d5f6895082a8b0f1b4e359bf05a192eb8b3a018a2ace4361c3662d0ec3fb577fdc6bb6d23bb0b11320d809cd3d54018a8770d15b1730e0f2bb31ec851cbc7e4b74413d0f625a75d137fe0239e446ff0740d56b8917de43d6a3af4505f3c684e37c80cd4f2d344da3e2050a598e0a2b81c29c1b3c75c7ecca3df98ec99c36a2b737fbb3846f469d479e4da5c4cde17538a3a9540df0f4601e87b9a673b5a25c1bc9355a3a18961be8447e5d94dc11299998d51e97eefa38ec014352f1cbf8d5ac422aab5aa924e88130ed40e96ffeb926b6a0700127316a61a27f93063d2d4a495f585b0e287c22c7b44d6c80831cf1c1af60be534d19ae35c1a892ca0a0295979c8984793ac787c263dc2c905aef509672a31fdc104f1736b2bd78a4f2dd605177f27d195669000fa4e3294db5d324a3d6a20d9e700436caa2382559706a2f2a5d11259e9a9e6a37d1f1376eb1527874e896d0cd8fe6edf8d14ddd4fea368e27b73abbec0217eef62d5ec2b746225dbb8d021bc0ebafe67b5ddd7b0aeeb46edf0804eb4849438e097881a5af59c8404e2349238c4cf786c90ae50aff9ef88efc8c432b0c49c943e82f7074d0c75027f4cc0add6a0136115d54c1372cf2ccc396b0116d70a65fd203d01d3a290da3523f558c85fb2761509bb7eb52b3f6faddf01fa44c4e4930c339201303b985583868fb52b9e739aab9379dde33821b812dd4c8590df3cff9ba493ab8a6a5699244734fa65bebe506d9c2866b1373fa1138a20aa45f20a01f949d506dc3e3b2d0a5557f92371a6660c3a9d8108b746998ea7a35250ecf82b0fde7c3644ac4ba0f80e08781d02ef742350dafbc00bd5829255e6b61f7637640e8a2ec2b0cd2e17d121961b8c4e6ba4589a25c4a6d86a2ada22a2743e457719cb31753579aa86ee03ef64fe96ff2792a46494b5516c25bd803b49f604895e6b2d8beb70d1eef468e0fcfd1f7cc42da8dafe787748668975c43a485894a0aae4ee9f3525f2ab5272e5e9632cb5dd338831a1ffd5ed6d65fa05a9a3b0900e541b4a8fed95db010956c3381a973b23d32a95f5af2d686c95bd173f1ae459cc27d55830da5eb731f93451ac6a9e6e0fcedf8d5bb9c8dba72ae4f3e86adfaf10500dd981abfd7548362b347ef427aa576521a81371ce373f1010d29f4bdcaa06f96892877f734911e916b6a89eaf3784bd930f6cf90663e44d75fa72d7a1bfb1ae68f1498d9cc5c5b9cb8cf97f18b4e17a29d879b5054dfffa051ce8a0bded21b5fba552e8585982369c74188cc24d2545bb867555f78b11b029e1a9c1775780a80e362284a72b3c814c45cfc5b703dd87cc4bbaa0c845cf925d4b5c70a9de3ce5ac973cd464a2bcc9ae507c0b6915a35aa94ba37d0cd6a096995fd66ab1e039726c69c8291a30e30aeaffe7dd35e955ddcc88da3d3e44d4f191468cfc4c47ffc0676917ecb67a74e1983c63ffc8bbf9e088ea2d7dedd1875ec66ebdae80757874cc00ca5c8c6a6b815f07e941323f6186661694006028b4b7e40b367939eb8eeb72553b15a10acf9594976255767b1ea0a5fc0c6563ac6bc9fcf3032e2f8e74835838a2188371ba7d72bc2e6c3d607e011b051ab03fd30567cc55aca3c50bbfe37472ad809143892d055b74e2c42e9388c23642d4f1109f1bc444186adcaf4651549a03ac99a4d6b1a937ea22de7946f4cc5e101d44b201bf14a12c86e42d3a429656797c509674e6637ee177fcf749e13e46bd007a3d0ce6a4d1f3f049ae8dbc25dac1d8f6b75d8f9a89c4d401b008cc16d1fd7d7a8655a18a2549dee2be47c10a58734b0f2d393dd28e43ab791175a79a66e28e341d04e9a6d284bb936866ddce2820536f9824f943afd1ea635ea901a66e00a04afad0668608aa9ad140937dd0f6042adb62310b7a1c25cdb45cbeb9806704687d0d9f8cacd3b146ae43a2f3f8d5d66b1c94a69f1ba85da19c3e5d5410b4f16af42a9b9e715a260d1b4db18bda9cb01725870a309b4b4ad44e1d71e08b88e47cb7d1549900a5a6518dca28fc1b49b6b61d03f9b5d26ce2c7a2616dd960c1930a107ef14bab1b0f8ce28f27afe516ecade30a6ccd4c0e21443ac6a8631a100c7fca50917a034c1f9e641ead4587912f1559fc74a95bbd5eb63e6ef449439a30b86308688670444a3c2b815916023855a5a9b708a2e65aeb00e1c046140cc4f93c91debf96892efeec8ab6f6213fd63b4630f0e7b23a22ddeed037c20f2972a52d2a102fbd581a1982cb9dd0166b6f971bd02e04bb656ee6e083261d6005aa33426fb053c35106197215b31d26239753bae2f1ef37c90fd37a02a7242bde2653c43da3f36c0dd856de1715b32954db107ed560abfba65b9c584d7dd317a26f9d1140d93fee3bd1c583bfdd08e335c69d85878666e83162fb1dccab6acdf828af196288ccf6a8d59a125516e4c61103d9167bcafb6307da874cec619043b400c62c81e8713922f9b2e64ff9a91cd6c8909ec2547e96d5782fe4cdf8a66f7cc9652126f91838ed73283b6584c049e34747c95d3ab911be5b6628b57275257513569958ab771d4312e0cf2e1c02dc6b86414ad205c523156aa5fbe4d4973567fcd7b5843dd68b842d13279d5ef3e8eaea4a9ce4879fc9461dee1a33d369e6e768ed12a126cf8fe0ae4cc89ecbe728b978f6426fa8ee255194b292838b5bb88d052588d7e6db95094ecb67e26884f253fe7ac35d619c371bdfc3ba3cc0175a97557c5b78a6c6320451f56d98e1fba30ea699787471e5ba0b619f79e07e96894b392f1a93261313bce3a9a9616f9f63a3cf93cbae0828e79f06773751b26af57a026ece4017696dbe2ee8a3999ded6be06517ebb38b190c846ccd0003c1da34a4ba45486f17ee7e3c7cc9bcaff5f5c2b9327f832420afeba5d03aca9cd25d210a765157474e85652dcde749b8dd225b3b61c039a4c479c32b65561b95d67f1dec77060c9a637fc96f35080a1a91191ec6971231b2f8e73249e2e3519691a737831aa2aea44c0d100d91591a9b8cea6b1f3d0e97caaac8b5eacbaf2d88e4e0f4ecb2b487212f3e775450803c487aac9b8fc84c5678be9916b8e73d9c9ea578ad65f82ba4d48c1ff55135628e570dd782c92f704d897d612ca0ea317994b641004e41e90829c73536c124d4b52dfda4b9209ef4110c835edd238f5dab51859a7d8af694d06ea17436c0f5e48e4d04dcbfd18b80442eec120fc95a8735216cb58fda7d7757c5f37a54de49ef8cdd0ca410fb4240cccfd6001fe0379996681ac2eeea684ce20cf01658c040e38fe181996f24e48dcc2143b28d3fb419d3aa4921d75b018d412215fd9bbcdd4ba6153ff356e57d16c86019f955419f19d603c00196e82cb8382bcb31d5a5711d49d656db8a7ecae400e85e5ecb6b74ba0f8d11b15f7f75d6664241c70cc7cb9bdd498bc04b7b2efd878de75254e1f94c6411e0b01497667dd0934f4a1d43cb0edafa928e6398af94102b7356651340509562c1f4bfebb6411273580d42dbecb3cf457cdefb79448459b017ed86ca73b6574089b531be4627cbf7e719682beef74013d578ed7b04baf1320bd8901583b0214f645f73154de6f9eaf41e1661bec820161c10c33673f6ebc9aaad85b67ec3cf0a7495ef492a5cd4f3e3eabd0289e0fa06077d66bd7d34fbea35d8b55e377734424c76137193b2cee48bb171bc2858b37197b4023c73ed41cd3b22820889de4f67ef7497112bc586e04e9736d10b5cc8cbf882bbc868b0dc58dab6d6a5df3bba1b3377e501d0222c4e6ec38b9952bd72edaf6dedc13faf7a2bbc05f2711ee631b4c9a8adc3813a98ea0cb0c289ea0466f62aff77abaa9830c97a819300271da46ca1c9117d3b5e395d398464f76c5beb224c2d13fcfa4d0cbc3c0df70e8a1a3bb42571cbae2ecca688ef8e41d74bb0ffd2ec2444fa0a9c9f8a91fed14f688a95e58c83dde6a7a88e7e51012ac67712072e26e728a3859a6f774c20be0192375dd6581d5e051f7b1fb3fee16eaa8a33f1cdaf2eb58e3e3c685751c00d4c5f353180a084075d524ea39c5f6b98ab43c6c5391e0b489ef2d7e0baf69b7acc435d792027268f7fb4cab234489000ccf816bc5b0c006fd951f7945de16e786d6ba1c4e38ee66d24154abccd6f327716886f1c3bb5a29cca8e9d446f01fb0340b32667bc0f87c9ef4f81d1902857c1d0bdc5fc70a71f8e2ada4a9bb1e462f161a3c00727f8c1e7a364e3c3fbfa5027041d70f3fb472c48dc623b4797bc04efd8b17ce8fdd4acac89d360904d8348d5c3aa6864c67471ecf9abb6598ddb446f3b23b0c1df8201bcab77db30efd5ae419d5e43842773ef1c8d7bb8d402d5b7146a160d74c922e5d3dfe5980ec7848efcabb4627dd9b55397a38a782c36a185ace260e2737b83e1ecfcb50a345071b9ebfb439f4807f88e000c174481ae75f0811c5b65152a9892209585ecc2d5d80dfc389563749530ea5c02759f945de2cd467e90c82030f1fc4a9a3626eb78479e70014e66a7cc60", 0x1000}, {&(0x7f0000002a80)="581034f1a62491ae8ebdb168b2c8142f7c5d81cf2173b72c986697fe7111c33cdc914e0db2ab604baf0d2cece43f31b9f0602bea481a34fdbd6c8c00aab38a5054413b9db2d1f60640d88c27722d2d19fe8e8ab55b489d42962369986ac16deb384e8c4c5276baf3a9db1c2e6f22356e3443a0663e9dcd594089a7ecdefaac6743a8a5ab7169af69bb03af26f1856d57ebb4150d8639ae81c6012fc0f636e2cd2df1554ad57c9d86c6f016a24a8002c56f30011cc4e25cf7925fb45fa0c7dbf7995594c54e42095486d985d58bd574a8b5a6c2d2b0a0b6f92e63943c11c035a630f4630ef6970f8e70f23a", 0xeb}], 0x4, &(0x7f0000002d40)=[@rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, r1]}}, @rights={{0x38, 0x1, 0x1, [r5, r3, r2, r4, r5, r2, r5, r4, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r3, r3]}}], 0xa0, 0x40}}], 0x4, 0x4000000) 553.319894ms ago: executing program 0 (id=3481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x488c0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x80000000}) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001200)={0x14, r2, 0x1, 0xfffffffd, 0x25dfdbfb, {0x25}}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x150, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000801) 552.470109ms ago: executing program 3 (id=3482): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0xc, 0x1, 0x4}}]}}]}, 0x44}}, 0x24040004) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, r8, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x229}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x900}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x205}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x284}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x708}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x529}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ea}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1bba}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x64}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x14486ae}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x80, 0x1, 0x4, 0x7, 0x4]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000044c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r9, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="3c0012801100010062"], 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) r10 = accept(r2, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000001c0)=0x80) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000095) 421.691514ms ago: executing program 1 (id=3483): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00f061", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00f061", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x7d, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r5, &(0x7f0000000500), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r5, &(0x7f0000000500), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ecff0000000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22008000}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r4, 0xfff) r9 = accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$FIOCLEX(r4, 0x5451) (async) ioctl$FIOCLEX(r4, 0x5451) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000094}, 0x80) getsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000440), &(0x7f00000004c0)=0x4) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 421.44847ms ago: executing program 0 (id=3484): socket$kcm(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r0 = socket$kcm(0x21, 0x2, 0xa) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28) (async, rerun: 32) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) 322.371986ms ago: executing program 0 (id=3485): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r3) sendfile(r0, r1, 0x0, 0x8) 295.314328ms ago: executing program 3 (id=3486): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x10, 0x80000801}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200), 0xffffffffffffff05) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) r4 = socket(0x11, 0xa, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004008580020000000100009304000000f8ffffff020000000900000000007100"], &(0x7f0000000400)=""/116, 0x34, 0x74, 0x1, 0xfffffa15}, 0x28) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @loopback}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="07000000269fc5924a00a3e3", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000140)={{[0x5, 0x8, 0xfff, 0x9]}, 0x0, 0x3, 0x81, 0x0, &(0x7f0000000580)=[{{@align=0x5, {0x6, 0x1ff, 0x8, 0x686}}, 0x2, 0x0, '\x00'}, {{@_ha_fsid={[0xb, 0x237]}, {0x9682, 0xe, 0x74, 0x4}}, 0xea, 0x0, '\x00'}]}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x2e, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000000906059d6e6adaa5a30111399fe70000200000a3f8b9a401000066ce76050900020073797a30000000000500010007000000080009400000000004000880cca094816f9d2ef1a86b586642119cf43ead1a75f4c0fa15382208dfa72e795db1d2c67d270e078760b554da33040fb158a3df04ec"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=0x28) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007000010025bd7000fbdbdf250700000028"], 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 158.573788ms ago: executing program 4 (id=3487): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b00030002000600010005800000050056a705251e638294ff0051f60a84c9f4d4938037e786a6d072c6c95300"/92, 0x5c}], 0x1, 0x0, 0x3, 0x1f00c00e}, 0x4048000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060006000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000884) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b00030002000600010005800000050056a705251e638294ff0051f60a84c9f4d4938037e786a6d072c6c95300"/92, 0x5c}], 0x1, 0x0, 0x3, 0x1f00c00e}, 0x4048000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060006000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000884) (async) 80.772459ms ago: executing program 2 (id=3488): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016802400010401000000000000000000040100000000fe880000000000000000000000000001"], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) (async) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r3], 0x18, 0x20040801}}], 0x1, 0x4000000) (async) r7 = accept4$unix(r3, 0x0, 0x0, 0x80800) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r8 = socket$inet(0x2, 0x4, 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="4f00000000000000720c0000000000000100000000000000", @ANYRES32=r8, @ANYBLOB="00000000020000000000000000000000000000000000000080000000"]) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) clock_gettime(0x6, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r7, 0x2200}, {r6, 0x8000}, {r8, 0x470}, {r3, 0x1c0}, {r9, 0x8002}, {r7, 0x1050}, {r7, 0x8408}, {r1}], 0x8, &(0x7f0000000300)={r10, r11+10000000}, &(0x7f0000000340)={[0x3]}, 0x8) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket(0x14, 0x2, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) (async) getsockname$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) 0s ago: executing program 0 (id=3489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000003f50b164a0700a3029bfee65b658600", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20000854}, 0x40000c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000480)={0x1d, r6}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008", @ANYRES32=r8], 0x84}}, 0x20008040) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1000, 0xab8, 0x6493, 0x100, 0x1, 0x1, '\x00', r8, r1, 0x5, 0x2, 0x0, 0x2}, 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r10, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 45][T15299] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 433.829980][T15299] ? __fget_files+0x2a/0x420 [ 433.829999][T15299] ? aa_sock_opt_perm+0xd4/0x1a0 [ 433.830020][T15299] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 433.830039][T15299] do_sock_setsockopt+0x11b/0x1b0 [ 433.830064][T15299] __x64_sys_setsockopt+0x13d/0x1b0 [ 433.830097][T15299] do_syscall_64+0x14d/0xf80 [ 433.830116][T15299] ? trace_irq_disable+0x3b/0x150 [ 433.830135][T15299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.830150][T15299] ? clear_bhb_loop+0x40/0x90 [ 433.830167][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.830181][T15299] RIP: 0033:0x7f8498b9c799 [ 433.830195][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.830208][T15299] RSP: 002b:00007f8499aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 433.830223][T15299] RAX: ffffffffffffffda RBX: 00007f8498e15fa0 RCX: 00007f8498b9c799 [ 433.830233][T15299] RDX: 0000000000000020 RSI: 0000000000000001 RDI: 0000000000000004 [ 433.830241][T15299] RBP: 00007f8499aaf090 R08: 0000000000000004 R09: 0000000000000000 [ 433.830250][T15299] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 433.830259][T15299] R13: 00007f8498e16038 R14: 00007f8498e15fa0 R15: 00007ffeee6f7e38 [ 433.830282][T15299] [ 434.018408][T15295] netlink: 'syz.3.2391': attribute type 2 has an invalid length. [ 434.066237][T15303] syzkaller0: entered promiscuous mode [ 434.082153][T15303] syzkaller0: entered allmulticast mode [ 434.148185][T15308] raw_sendmsg: syz.1.2395 forgot to set AF_INET. Fix it! [ 434.307791][T15311] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 434.466797][T15319] bond6: (slave veth3): Enslaving as an active interface with a down link [ 434.496897][T15335] netlink: 'syz.1.2403': attribute type 11 has an invalid length. [ 434.647951][T15345] FAULT_INJECTION: forcing a failure. [ 434.647951][T15345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.667536][T15320] bond6: (slave veth5): Enslaving as an active interface with a down link [ 434.705258][T15345] CPU: 1 UID: 0 PID: 15345 Comm: syz.3.2405 Not tainted syzkaller #0 PREEMPT(full) [ 434.705283][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.705295][T15345] Call Trace: [ 434.705302][T15345] [ 434.705310][T15345] dump_stack_lvl+0xe8/0x150 [ 434.705340][T15345] should_fail_ex+0x412/0x560 [ 434.705368][T15345] _copy_to_user+0x31/0xb0 [ 434.705396][T15345] simple_read_from_buffer+0xe1/0x170 [ 434.705427][T15345] proc_fail_nth_read+0x1bb/0x230 [ 434.705493][T15345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.705520][T15345] ? rw_verify_area+0x2a6/0x4d0 [ 434.705538][T15345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.705563][T15345] vfs_read+0x20c/0xa70 [ 434.705580][T15345] ? fdget_pos+0x246/0x320 [ 434.705610][T15345] ? __pfx___mutex_lock+0x10/0x10 [ 434.705636][T15345] ? __pfx_vfs_read+0x10/0x10 [ 434.705655][T15345] ? __fget_files+0x2a/0x420 [ 434.705684][T15345] ? __fget_files+0x3a0/0x420 [ 434.705706][T15345] ? __fget_files+0x2a/0x420 [ 434.705737][T15345] ksys_read+0x150/0x270 [ 434.705757][T15345] ? __pfx_ksys_read+0x10/0x10 [ 434.705786][T15345] do_syscall_64+0x14d/0xf80 [ 434.705810][T15345] ? trace_irq_disable+0x3b/0x150 [ 434.705834][T15345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.705852][T15345] ? clear_bhb_loop+0x40/0x90 [ 434.705875][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.705891][T15345] RIP: 0033:0x7f097b35cfce [ 434.705908][T15345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.705922][T15345] RSP: 002b:00007f097c316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.705951][T15345] RAX: ffffffffffffffda RBX: 00007f097c3176c0 RCX: 00007f097b35cfce [ 434.705963][T15345] RDX: 000000000000000f RSI: 00007f097c3170a0 RDI: 0000000000000008 [ 434.705974][T15345] RBP: 00007f097c317090 R08: 0000000000000000 R09: 0000000000000000 [ 434.705984][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.705994][T15345] R13: 00007f097b616038 R14: 00007f097b615fa0 R15: 00007ffd8b691028 [ 434.706024][T15345] [ 435.470600][T15384] syzkaller0: entered promiscuous mode [ 435.496663][T15384] syzkaller0: entered allmulticast mode [ 435.887040][T15415] netlink: 'syz.0.2425': attribute type 1 has an invalid length. [ 435.997427][T15415] trusted_key: syz.0.2425 sent an empty control message without MSG_MORE. [ 436.057974][T15420] bond3: (slave bridge6): making interface the new active one [ 436.079279][T15420] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 436.103895][T15421] netlink: 'syz.4.2426': attribute type 2 has an invalid length. [ 436.112029][T15421] tipc: Cannot configure node identity twice [ 436.462070][T15448] __nla_validate_parse: 10 callbacks suppressed [ 436.462089][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 436.545602][T15454] netlink: 'syz.0.2432': attribute type 3 has an invalid length. [ 436.554318][T15454] netlink: 'syz.0.2432': attribute type 3 has an invalid length. [ 436.596705][T15457] tipc: Enabled bearer , priority 0 [ 436.616154][T15457] syzkaller0: entered promiscuous mode [ 436.621659][T15457] syzkaller0: entered allmulticast mode [ 436.726070][T15457] tipc: Resetting bearer [ 436.732028][T15457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.740494][T15457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.796300][T15453] tipc: Resetting bearer [ 436.841531][T15453] tipc: Disabling bearer [ 437.112361][T15487] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2437'. [ 437.295549][T15501] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2439'. [ 437.394671][T15505] netlink: 'syz.2.2440': attribute type 2 has an invalid length. [ 437.409458][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 437.433830][T15505] tipc: Cannot configure node identity twice [ 437.798337][T15517] tls: option downdelay: invalid value (18446744073709547007) [ 437.807684][T15517] tls: option downdelay: allowed values 0 - 2147483647 [ 437.819926][T15517] tls (unregistering): Released all slaves [ 438.185805][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 438.210826][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 438.264401][T15532] macvtap1: entered promiscuous mode [ 438.270253][T15532] veth1_to_hsr: entered promiscuous mode [ 438.276599][T15532] macvtap1: entered allmulticast mode [ 438.289059][T15532] veth1_to_hsr: entered allmulticast mode [ 438.310294][T15537] lo speed is unknown, defaulting to 1000 [ 438.348171][T15537] lo speed is unknown, defaulting to 1000 [ 438.368292][T15537] lo speed is unknown, defaulting to 1000 [ 438.586390][T15549] netlink: 'syz.2.2453': attribute type 2 has an invalid length. [ 438.623225][T15549] tipc: Cannot configure node identity twice [ 438.648984][T15547] xt_cgroup: path and classid specified [ 438.864288][T15537] infiniband sqz0: set active [ 438.871168][ T8568] lo speed is unknown, defaulting to 1000 [ 438.908856][T15537] infiniband sqz0: added lo [ 439.035840][T15537] RDS/IB: sqz0: added [ 439.062346][T15537] smc: adding ib device sqz0 with port count 1 [ 439.084692][T15537] smc: ib device sqz0 port 1 has no pnetid [ 439.090969][ T8568] lo speed is unknown, defaulting to 1000 [ 439.099308][T15537] lo speed is unknown, defaulting to 1000 [ 439.178410][T15570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2458'. [ 439.580478][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 439.950838][T15537] lo speed is unknown, defaulting to 1000 [ 440.046477][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 440.083086][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2463'. [ 440.244657][T15615] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 440.268959][T15616] netlink: 'syz.0.2465': attribute type 2 has an invalid length. [ 440.276934][T15616] tipc: Cannot configure node identity twice [ 440.516593][T15537] lo speed is unknown, defaulting to 1000 [ 440.639820][T15537] lo speed is unknown, defaulting to 1000 [ 440.761868][T15537] lo speed is unknown, defaulting to 1000 [ 447.219104][T15649] __nla_validate_parse: 1 callbacks suppressed [ 447.219124][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2472'. [ 447.244347][T15655] netlink: 'syz.2.2471': attribute type 3 has an invalid length. [ 447.279799][T15655] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2471'. [ 447.301700][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 447.499960][T15677] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2479'. [ 447.563997][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 447.570792][T15680] : entered promiscuous mode [ 447.600231][T15682] bond0: entered promiscuous mode [ 447.607320][T15682] batadv_slave_0: entered promiscuous mode [ 447.621209][T15682] debugfs: 'hsr1' already exists in 'hsr' [ 447.643370][T15682] Cannot create hsr debugfs directory [ 447.747439][T15694] netlink: 'syz.3.2485': attribute type 1 has an invalid length. [ 447.794083][T15694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 447.848734][T15695] bond7: (slave geneve2): making interface the new active one [ 447.867420][T15695] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 448.004646][T15711] syzkaller0: entered promiscuous mode [ 448.010152][T15711] syzkaller0: entered allmulticast mode [ 448.251815][T15721] netlink: 'syz.3.2491': attribute type 298 has an invalid length. [ 448.254194][T15723] ip6gretap0: entered promiscuous mode [ 448.273484][T15723] vlan3: entered promiscuous mode [ 448.609554][T15741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.697864][T15745] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 448.888370][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 449.397030][T15776] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2509'. [ 449.557896][T15701] lo speed is unknown, defaulting to 1000 [ 449.564390][T15793] netlink: 'syz.2.2514': attribute type 1 has an invalid length. [ 449.606097][T15795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2513'. [ 449.646989][T15793] syzkaller0: entered promiscuous mode [ 449.652494][T15793] syzkaller0: entered allmulticast mode [ 449.704078][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 449.720933][T15798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.740343][T15793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2514'. [ 449.776710][T15795] syzkaller0: entered promiscuous mode [ 449.782223][T15795] syzkaller0: entered allmulticast mode [ 449.821854][T15805] netlink: 'syz.0.2517': attribute type 21 has an invalid length. [ 450.041907][T15809] netlink: 'syz.0.2518': attribute type 3 has an invalid length. [ 450.423102][T15691] lo speed is unknown, defaulting to 1000 [ 450.423304][T15820] tipc: Enabled bearer , priority 0 [ 450.441717][T15822] syzkaller0: entered promiscuous mode [ 450.449286][T15822] syzkaller0: entered allmulticast mode [ 450.526924][T15820] tipc: Resetting bearer [ 450.550686][T15819] tipc: Resetting bearer [ 450.589686][T15819] tipc: Disabling bearer [ 450.657212][T15826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.685280][T15826] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.705869][T15826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.874785][T15789] lo speed is unknown, defaulting to 1000 [ 450.999590][T15837] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 451.030384][T15836] vlan3: entered promiscuous mode [ 451.086825][T15836] gretap0: entered promiscuous mode [ 451.106862][T15836] gretap0: left promiscuous mode [ 451.544784][T15849] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 452.282365][T15882] veth2: entered allmulticast mode [ 452.727399][T15894] __nla_validate_parse: 7 callbacks suppressed [ 452.727421][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 452.964768][T15900] xt_TCPMSS: Only works on TCP SYN packets [ 452.984842][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 453.130701][T15905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 453.520174][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2552'. [ 453.557856][T15922] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 453.675790][T15927] batman_adv: batadv0: Removing interface: ipvlan2 [ 453.828378][T15937] tipc: Enabled bearer , priority 0 [ 453.837740][T15937] syzkaller0: entered promiscuous mode [ 453.843632][T15937] syzkaller0: entered allmulticast mode [ 453.967544][T15940] tipc: Resetting bearer [ 454.000062][T15943] netlink: 'syz.2.2560': attribute type 21 has an invalid length. [ 454.013839][T15936] tipc: Resetting bearer [ 454.060341][T15936] tipc: Disabling bearer [ 454.087085][T15943] netlink: 'syz.2.2560': attribute type 6 has an invalid length. [ 454.102816][T15943] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2560'. [ 454.172904][T15947] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2562'. [ 454.557146][T15962] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.574215][T15962] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.714963][T15962] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.734228][T15962] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.888766][T15962] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.903313][T15962] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.983950][T15962] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.003770][T15962] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.043451][T15991] tipc: Enabled bearer , priority 0 [ 455.068783][T15991] syzkaller0: entered promiscuous mode [ 455.082518][T15991] syzkaller0: entered allmulticast mode [ 455.155229][T15228] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.173230][T15228] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.189663][T15949] lo speed is unknown, defaulting to 1000 [ 455.244034][T15228] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.257208][T15228] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.283549][T15228] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.292466][T15228] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.319475][T15228] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.339789][T15228] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.365068][T15985] tipc: Resetting bearer [ 455.410506][T15984] tipc: Resetting bearer [ 455.482581][T15984] tipc: Disabling bearer [ 455.930519][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2582'. [ 456.005161][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2582'. [ 456.090420][T16033] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2584'. [ 456.480454][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2588'. [ 456.809014][T16062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.926924][ T30] audit: type=1107 audit(1773858368.155:10): pid=16069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 457.346379][T16080] syzkaller1: entered promiscuous mode [ 457.362412][T16080] syzkaller1: entered allmulticast mode [ 458.554707][T16131] __nla_validate_parse: 1 callbacks suppressed [ 458.554726][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2605'. [ 458.594073][T16131] netlink: 'syz.3.2605': attribute type 4 has an invalid length. [ 458.601917][T16131] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2605'. [ 458.630264][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2605'. [ 458.788372][T16125] lo speed is unknown, defaulting to 1000 [ 464.518411][T16161] syzkaller0: entered promiscuous mode [ 464.535116][T16161] syzkaller0: entered allmulticast mode [ 464.641625][T16183] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2613'. [ 466.228980][T16210] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2618'. [ 466.315260][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2620'. [ 466.347519][T16221] ip6gre1: entered promiscuous mode [ 466.356780][T16221] ip6gre1: entered allmulticast mode [ 466.838644][T16255] netlink: 'syz.1.2633': attribute type 1 has an invalid length. [ 466.867270][T16255] netlink: 'syz.1.2633': attribute type 2 has an invalid length. [ 466.903507][T16255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.910781][T16255] IPv6: NLM_F_CREATE should be set when creating new route [ 467.147605][T16250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2630'. [ 467.366601][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 467.379222][T16262] openvswitch: netlink: Flow key attr not present in new flow. [ 467.381709][T16263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 467.397372][T16263] openvswitch: netlink: Flow key attr not present in new flow. [ 467.596462][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.632769][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.822153][T16271] netlink: 'syz.4.2636': attribute type 2 has an invalid length. [ 467.838105][T16271] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 467.847429][T16271] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2636'. [ 468.039781][T16255] bridge1: left allmulticast mode [ 468.071661][T16255] ip6erspan1: left allmulticast mode [ 468.083612][T16255] veth5: left promiscuous mode [ 468.096172][T16255] bond2: left promiscuous mode [ 468.101301][T16255] veth7: left promiscuous mode [ 468.301139][T16255] hsr1: left allmulticast mode [ 468.314091][T16255] batadv0: left allmulticast mode [ 468.321378][T16255] bond0: left allmulticast mode [ 468.327165][T16255] bond_slave_0: left allmulticast mode [ 468.332935][T16255] bond_slave_1: left allmulticast mode [ 468.363736][T16255] ipvlan2: left promiscuous mode [ 468.372685][T16255] ipvlan2: left allmulticast mode [ 468.378086][T16255] bond10: left allmulticast mode [ 468.388031][ T8561] lo speed is unknown, defaulting to 1000 [ 468.403109][ T8561] sqz0: Port: 1 Link DOWN [ 468.502774][T15225] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.529268][T15225] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.550642][ T8561] lo speed is unknown, defaulting to 1000 [ 468.566880][T15225] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.593728][T15225] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.612166][T15225] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.623793][T15225] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.649126][T16302] netlink: 'syz.4.2640': attribute type 2 has an invalid length. [ 468.658743][T15225] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.692826][T16302] netlink: 'syz.4.2640': attribute type 2 has an invalid length. [ 468.705518][T15225] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.008864][T16247] lo speed is unknown, defaulting to 1000 [ 469.598866][T16302] lo speed is unknown, defaulting to 1000 [ 470.123709][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2646'. [ 470.310165][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2647'. [ 470.337056][T16310] lo speed is unknown, defaulting to 1000 [ 470.660401][T16306] smc: removing ib device syz0 [ 470.673361][T16302] lo speed is unknown, defaulting to 1000 [ 470.704553][T16302] lo speed is unknown, defaulting to 1000 [ 470.876650][T16376] syzkaller0: entered promiscuous mode [ 470.882241][T16376] syzkaller0: entered allmulticast mode [ 471.421352][T16337] lo speed is unknown, defaulting to 1000 [ 472.303604][T16302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 472.371201][T16302] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 472.821472][T16395] lo speed is unknown, defaulting to 1000 [ 472.930163][T16393] lo speed is unknown, defaulting to 1000 [ 472.930762][T16302] lo speed is unknown, defaulting to 1000 [ 472.944987][T16302] lo speed is unknown, defaulting to 1000 [ 472.953690][T16302] lo speed is unknown, defaulting to 1000 [ 472.962584][T16395] lo speed is unknown, defaulting to 1000 [ 472.970517][T16302] lo speed is unknown, defaulting to 1000 [ 472.978389][T16302] lo speed is unknown, defaulting to 1000 [ 472.998956][T16302] lo speed is unknown, defaulting to 1000 [ 473.006796][T16302] lo speed is unknown, defaulting to 1000 [ 473.526309][T16403] syzkaller1: entered promiscuous mode [ 473.531947][T16403] syzkaller1: entered allmulticast mode [ 475.051360][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2663'. [ 475.067576][T16428] netlink: 'syz.0.2663': attribute type 2 has an invalid length. [ 475.125382][T16428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'. [ 475.150821][T16427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.410451][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 475.536372][T16413] lo speed is unknown, defaulting to 1000 [ 475.671706][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2672'. [ 475.964190][T16474] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2676'. [ 476.136439][T16413] lo speed is unknown, defaulting to 1000 [ 481.994080][T16503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2677'. [ 482.036356][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 482.141963][T16517] netlink: 'syz.4.2684': attribute type 29 has an invalid length. [ 482.164987][T16514] netlink: 'syz.4.2684': attribute type 29 has an invalid length. [ 482.182578][T16516] syzkaller1: entered promiscuous mode [ 482.192228][T16516] syzkaller1: entered allmulticast mode [ 482.207208][T16521] netlink: 'syz.3.2683': attribute type 7 has an invalid length. [ 482.371582][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'. [ 482.706706][T16552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2696'. [ 482.716188][T16552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2696'. [ 482.725854][T16552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2696'. [ 483.046140][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 483.125440][T16580] veth0_virt_wifi: entered allmulticast mode [ 483.191741][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 483.239546][T16587] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2708'. [ 483.680511][T16609] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2714'. [ 483.692924][T16609] netlink: 'syz.2.2714': attribute type 9 has an invalid length. [ 483.885905][T16634] pimreg3: entered allmulticast mode [ 484.039015][T16644] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 484.769514][T16675] SET target dimension over the limit! [ 485.489561][T16712] can: request_module (can-proto-0) failed. [ 485.566069][T16724] openvswitch: netlink: IP tunnel dst address not specified [ 485.850788][T16730] syzkaller0: entered promiscuous mode [ 485.857136][T16730] syzkaller0: entered allmulticast mode [ 487.840718][T16769] macvlan3: entered promiscuous mode [ 487.846991][T16769] macvlan3: entered allmulticast mode [ 487.857089][T16769] veth1_to_batadv: entered allmulticast mode [ 487.898846][T16782] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 487.977065][T16793] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 488.053445][T16796] __nla_validate_parse: 10 callbacks suppressed [ 488.053464][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 488.103507][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2760'. [ 488.127533][T16802] wg1: entered promiscuous mode [ 488.132545][T16802] wg1: entered allmulticast mode [ 488.185928][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2762'. [ 488.451868][T16821] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2765'. [ 488.490545][T16821] syzkaller1: entered promiscuous mode [ 488.514584][T16821] syzkaller1: entered allmulticast mode [ 488.540766][T16821] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2765'. [ 488.611962][T16752] lo speed is unknown, defaulting to 1000 [ 488.679168][T16834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2767'. [ 488.866350][T16752] lo speed is unknown, defaulting to 1000 [ 495.919932][T16859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.919989][T16862] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 495.990947][T16869] syzkaller0: entered promiscuous mode [ 495.997051][T16869] syzkaller0: entered allmulticast mode [ 496.356003][T16866] lo speed is unknown, defaulting to 1000 [ 496.888865][T16887] team0: No ports can be present during mode change [ 496.910647][T16887] team0: No ports can be present during mode change [ 496.935145][T16864] lo speed is unknown, defaulting to 1000 [ 496.952077][T16866] lo speed is unknown, defaulting to 1000 [ 497.105489][T16892] tipc: Enabled bearer , priority 0 [ 497.161182][T16892] syzkaller0: entered promiscuous mode [ 497.169924][T16892] syzkaller0: entered allmulticast mode [ 497.185514][T16892] tipc: Resetting bearer [ 497.231688][T16864] lo speed is unknown, defaulting to 1000 [ 497.373906][T16890] tipc: Resetting bearer [ 498.798446][T16890] tipc: Disabling bearer [ 498.822444][T16906] ip6tnl1: entered promiscuous mode [ 498.828350][T16906] ip6tnl1: entered allmulticast mode [ 498.856014][ T5966] tipc: Node number set to 1635196574 [ 498.946792][T16914] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 499.171785][T16926] x_tables: duplicate underflow at hook 2 [ 499.181847][T16928] tipc: Enabling of bearer rejected, failed to enable media [ 499.220679][T16927] tipc: Enabling of bearer rejected, failed to enable media [ 499.360897][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2791'. [ 499.704531][T16947] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 499.743965][T16916] lo speed is unknown, defaulting to 1000 [ 499.751088][T16947] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2795'. [ 499.801759][T16949] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 499.817569][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.827347][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.838388][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.847134][T16949] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2795'. [ 499.857439][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.873601][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 499.916217][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 499.939462][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.953119][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.963854][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.997545][T16953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 500.037397][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.048563][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.310727][ T5829] team0: Port device syz_tun removed [ 500.340662][T16969] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 500.431291][T16916] lo speed is unknown, defaulting to 1000 [ 500.527917][T16974] netlink: 'syz.4.2801': attribute type 1 has an invalid length. [ 500.583172][T16977] netlink: 'syz.2.2803': attribute type 11 has an invalid length. [ 500.656383][T16974] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.742852][T16948] lo speed is unknown, defaulting to 1000 [ 500.742907][T16974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2801'. [ 500.789017][T16974] sctp: [Deprecated]: syz.4.2801 (pid 16974) Use of int in maxseg socket option. [ 500.789017][T16974] Use struct sctp_assoc_value instead [ 500.916147][T16989] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 500.927452][T16989] tipc: Failed to remove unknown binding: 66,1,1/0:62906870/62906872 [ 500.939469][T16989] tipc: Failed to remove unknown binding: 66,1,1/0:62906870/62906872 [ 500.948744][T16989] tipc: Failed to remove unknown binding: 66,1,1/0:62906870/62906872 [ 501.006171][T16996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2807'. [ 501.049964][T17000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2807'. [ 501.149660][T16948] lo speed is unknown, defaulting to 1000 [ 501.392228][T17010] netlink: 'syz.1.2810': attribute type 1 has an invalid length. [ 501.849460][T17021] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 501.889063][T17021] bond4 (unregistering): Released all slaves [ 501.911738][T16948] chnl_net:caif_netlink_parms(): no params data found [ 501.951473][T17027] netlink: 'syz.3.2814': attribute type 15 has an invalid length. [ 502.088854][T16948] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.095102][ T5833] Bluetooth: hci5: command tx timeout [ 502.114996][T16948] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.122406][T16948] bridge_slave_0: entered allmulticast mode [ 502.132153][T16948] bridge_slave_0: entered promiscuous mode [ 502.173823][T16948] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.181072][T16948] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.200484][T16948] bridge_slave_1: entered allmulticast mode [ 502.212852][T17042] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2816'. [ 502.218285][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 502.235674][T16948] bridge_slave_1: entered promiscuous mode [ 502.335774][T16948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.361941][T16948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.429743][T16948] team0: Port device team_slave_0 added [ 502.444215][T16948] team0: Port device team_slave_1 added [ 502.520094][T16948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.527901][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.559461][T16948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.586241][T17065] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 502.605133][T16948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.612191][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.640069][T16948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.774700][T16948] hsr_slave_0: entered promiscuous mode [ 502.809087][T16948] hsr_slave_1: entered promiscuous mode [ 502.825452][T16948] debugfs: 'hsr0' already exists in 'hsr' [ 502.831304][T16948] Cannot create hsr debugfs directory [ 502.898538][T17074] syzkaller0: entered promiscuous mode [ 502.929041][T17074] syzkaller0: entered allmulticast mode [ 502.988019][T17074] netlink: 'syz.1.2823': attribute type 33 has an invalid length. [ 503.068886][T17081] macsec2: entered promiscuous mode [ 503.289527][T17092] tipc: New replicast peer: 0.0.0.0 [ 503.316363][T17092] tipc: Enabled bearer , priority 10 [ 503.337151][T17106] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 503.461896][T16948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.495891][T16948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.528195][T16948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 503.656949][T16948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.672816][T16948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.683516][T16948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 503.825857][T17137] bond11: Removing last ns target with arp_interval on [ 503.836589][T16948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.863404][T16948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.873768][T16948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 503.896114][T17145] syzkaller0: entered promiscuous mode [ 503.902166][T17145] syzkaller0: entered allmulticast mode [ 503.928832][T17134] tipc: Enabled bearer , priority 0 [ 503.938328][T17141] syzkaller0: entered promiscuous mode [ 503.944834][T17141] syzkaller0: entered allmulticast mode [ 503.975200][T16948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 503.987737][T16948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.999117][T16948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 504.057658][T17141] tipc: Resetting bearer [ 504.090503][T17132] tipc: Resetting bearer [ 504.135431][T17132] tipc: Disabling bearer [ 504.146991][T17140] tipc: Enabled bearer , priority 0 [ 504.158809][T17161] netlink: 'syz.1.2846': attribute type 3 has an invalid length. [ 504.174096][ T5833] Bluetooth: hci5: command tx timeout [ 504.205086][T17139] tipc: Resetting bearer [ 504.244581][T17139] tipc: Disabling bearer [ 504.565151][T17192] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 504.573681][T17192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.627970][T17194] __nla_validate_parse: 9 callbacks suppressed [ 504.627988][T17194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2854'. [ 504.806513][T17202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 504.993085][ T5955] tipc: Node number set to 330626909 [ 506.254892][ T5833] Bluetooth: hci5: command tx timeout [ 507.268642][T17169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.279713][T16948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.326367][T16948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.366217][T16948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.409064][T17220] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 507.424338][T17220] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2859'. [ 507.437967][T16948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.508978][T17230] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2862'. [ 507.629452][T16948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.679658][T16948] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.709578][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.716807][T15220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.777729][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.785028][T15220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.862603][T17248] netlink: 'syz.2.2866': attribute type 30 has an invalid length. [ 507.917279][T17248] bond5: option arp_missed_max: invalid value (0) [ 507.927618][T17248] bond5: option arp_missed_max: allowed values 1 - 255 [ 507.938990][T17248] bond5 (unregistering): Released all slaves [ 507.974990][T17251] veth17: entered promiscuous mode [ 508.118291][T16948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.158894][T16948] veth0_vlan: entered promiscuous mode [ 508.169314][T16948] veth1_vlan: entered promiscuous mode [ 508.194959][T16948] veth0_macvtap: entered promiscuous mode [ 508.205912][T16948] veth1_macvtap: entered promiscuous mode [ 508.221822][T16948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.236600][T16948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.251559][T15228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.261113][T15228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.272826][T15228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.283110][T15228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.334783][ T5833] Bluetooth: hci5: command tx timeout [ 508.342237][T15228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.350623][T15228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.381844][T15227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.390343][T15227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.414864][ T5833] Bluetooth: hci5: command tx timeout [ 514.424693][T17283] tipc: Started in network mode [ 514.441515][T17283] tipc: Node identity f6436dad2133, cluster identity 4711 [ 514.453808][T17283] tipc: Enabled bearer , priority 0 [ 514.486414][T17296] syzkaller0: entered promiscuous mode [ 514.506629][T17296] syzkaller0: entered allmulticast mode [ 514.580800][T17283] tipc: Resetting bearer [ 514.600190][T17280] tipc: Resetting bearer [ 514.605390][T17305] IPVS: set_ctl: invalid protocol: 27767 49.0.0.0:0 [ 514.629535][T17280] tipc: Disabling bearer [ 514.647409][T17303] syzkaller0: entered promiscuous mode [ 514.656198][T17303] syzkaller0: entered allmulticast mode [ 514.666476][T17303] 0: reclassify loop, rule prio 0, protocol 800 [ 514.929610][T17321] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 514.949150][T17321] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 515.164042][T17334] tipc: Enabled bearer , priority 0 [ 515.228634][T17334] syzkaller0: entered promiscuous mode [ 515.238286][T17334] syzkaller0: entered allmulticast mode [ 515.247198][T17334] tipc: Resetting bearer [ 515.373974][T17333] tipc: Resetting bearer [ 515.712751][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 515.726258][T17360] netlink: 'syz.1.2886': attribute type 5 has an invalid length. [ 515.734696][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'. [ 515.794234][T17363] netlink: 'syz.2.2888': attribute type 1 has an invalid length. [ 517.122574][T17333] tipc: Disabling bearer [ 517.155840][T17329] lo speed is unknown, defaulting to 1000 [ 517.201033][T17360] geneve3: entered promiscuous mode [ 517.206456][T17360] geneve3: entered allmulticast mode [ 517.265128][T15227] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 517.273538][T15227] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 517.386637][T15227] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 517.433164][T15227] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 517.513726][T17378] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2890'. [ 517.770872][T17329] lo speed is unknown, defaulting to 1000 [ 517.898695][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 517.927729][ T5966] IPVS: starting estimator thread 0... [ 518.023560][T17398] IPVS: using max 27 ests per chain, 64800 per kthread [ 518.049457][T17344] lo speed is unknown, defaulting to 1000 [ 518.331411][T17344] lo speed is unknown, defaulting to 1000 [ 524.013283][T17485] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 524.128283][T17494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2920'. [ 524.520218][T17513] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 524.632676][T17519] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.663600][T17519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.676982][T17519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.688335][T17519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.698663][T17519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.723076][T17523] bridge0: entered allmulticast mode [ 525.091426][T17535] tipc: Enabled bearer , priority 0 [ 525.118407][T17535] syzkaller0: entered promiscuous mode [ 525.143033][T17535] syzkaller0: entered allmulticast mode [ 525.208084][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 525.218646][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 525.236808][T17538] tipc: Cannot configure node identity twice [ 525.266788][T17535] tipc: Resetting bearer [ 525.301089][T17534] tipc: Resetting bearer [ 525.342207][T17534] tipc: Disabling bearer [ 525.357527][T17517] lo speed is unknown, defaulting to 1000 [ 525.358528][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 525.372895][T17526] nr2: entered promiscuous mode [ 525.378517][T17526] nr2: entered allmulticast mode [ 525.541406][T17553] nbd: socks must be embedded in a SOCK_ITEM attr [ 525.576504][T17552] nbd: socks must be embedded in a SOCK_ITEM attr [ 525.866006][T17520] udevd[17520]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 525.891253][T17517] lo speed is unknown, defaulting to 1000 [ 525.929281][T17568] xt_connbytes: Forcing CT accounting to be enabled [ 526.180777][T17583] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2947'. [ 526.190950][T17580] tipc: Enabled bearer , priority 0 [ 526.200177][T17583] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2947'. [ 526.212181][T17580] syzkaller0: entered promiscuous mode [ 526.233112][T17580] syzkaller0: entered allmulticast mode [ 526.258907][T17517] chnl_net:caif_netlink_parms(): no params data found [ 526.291701][T17589] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 526.303113][T17591] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2947'. [ 526.316798][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2947'. [ 526.345508][T17594] tipc: Resetting bearer [ 526.385513][T17592] batadv_slave_0: entered promiscuous mode [ 526.392249][T17579] tipc: Resetting bearer [ 526.410391][T17579] tipc: Disabling bearer [ 526.486551][T17590] batadv_slave_0: left promiscuous mode [ 526.516559][T17605] IPv6: Can't replace route, no match found [ 526.525412][T17605] IPv6: Can't replace route, no match found [ 526.531562][T17605] IPv6: Can't replace route, no match found [ 526.566390][T17517] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.583173][T17517] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.599961][T17517] bridge_slave_0: entered allmulticast mode [ 526.609231][T17517] bridge_slave_0: entered promiscuous mode [ 526.618281][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 526.647633][T17517] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.655245][T17517] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.662608][T17517] bridge_slave_1: entered allmulticast mode [ 526.672080][T17614] netlink: 'syz.0.2953': attribute type 13 has an invalid length. [ 526.672250][T17517] bridge_slave_1: entered promiscuous mode [ 526.703579][T17614] netlink: 'syz.0.2953': attribute type 17 has an invalid length. [ 526.739523][ T5833] Bluetooth: hci4: command tx timeout [ 526.822450][T17614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.826108][T17623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 526.864400][T17517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.916060][T17517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.008107][T17517] team0: Port device team_slave_0 added [ 527.056732][T17517] team0: Port device team_slave_1 added [ 527.076848][T17633] tipc: Enabled bearer , priority 0 [ 527.084808][T17633] syzkaller0: entered promiscuous mode [ 527.090292][T17633] syzkaller0: entered allmulticast mode [ 527.151622][T17517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.171470][T17517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.214553][T17517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.239604][T17633] tipc: Resetting bearer [ 527.262041][T17517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.283031][T17517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.314102][T17643] netlink: 'syz.0.2963': attribute type 9 has an invalid length. [ 527.314102][T17644] netlink: 'syz.0.2963': attribute type 9 has an invalid length. [ 527.334986][T17517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.369737][T17632] tipc: Resetting bearer [ 527.388243][T17632] tipc: Disabling bearer [ 527.415606][T17642] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 527.562196][T17517] hsr_slave_0: entered promiscuous mode [ 527.594298][T17517] hsr_slave_1: entered promiscuous mode [ 527.628589][T17517] debugfs: 'hsr0' already exists in 'hsr' [ 527.634967][T17517] Cannot create hsr debugfs directory [ 527.649599][T17626] lo speed is unknown, defaulting to 1000 [ 527.680318][T17656] openvswitch: netlink: IP tunnel dst address not specified [ 527.701875][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2967'. [ 527.779871][T17656] 8021q: adding VLAN 0 to HW filter on device bond8 [ 527.864797][T17660] ipvlan2: entered promiscuous mode [ 527.873379][T17660] ipvlan2: entered allmulticast mode [ 527.873861][T17665] xt_TCPMSS: Only works on TCP SYN packets [ 527.878907][T17660] bond8: entered allmulticast mode [ 527.893246][T17660] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 527.901086][T17660] team0: Device ipvlan2 failed to register rx_handler [ 528.085086][T17626] lo speed is unknown, defaulting to 1000 [ 528.450327][T17688] syzkaller0: entered promiscuous mode [ 528.485281][T17688] syzkaller0: entered allmulticast mode [ 528.814808][ T5833] Bluetooth: hci4: command tx timeout [ 529.151478][T17517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 529.187365][T17517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 529.256591][T17517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.323268][T17517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 529.604641][T17738] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 529.645588][T17517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.706594][T17517] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.738024][T15221] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.745219][T15221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.800607][T15221] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.808451][T15221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.847107][T17739] syzkaller1: entered promiscuous mode [ 529.854760][T17739] syzkaller1: entered allmulticast mode [ 529.984727][T17746] syzkaller0: entered promiscuous mode [ 530.034142][T17746] syzkaller0: entered allmulticast mode [ 530.267264][T17517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.305410][T17517] veth0_vlan: entered promiscuous mode [ 530.316795][T17517] veth1_vlan: entered promiscuous mode [ 530.345845][T17517] veth0_macvtap: entered promiscuous mode [ 530.355673][T17517] veth1_macvtap: entered promiscuous mode [ 530.377052][T17517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.392177][T17517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.406794][T15223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.418208][T15227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.434129][T15227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.443497][T15227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.504597][T15223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.512745][T15223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.537415][T15220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.547074][T15220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.593185][T17763] __nla_validate_parse: 4 callbacks suppressed [ 530.593205][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 530.609555][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2927'. [ 530.893297][ T5833] Bluetooth: hci4: command tx timeout [ 532.973176][ T5833] Bluetooth: hci4: command tx timeout [ 536.849247][T17789] tipc: Enabling of bearer rejected, failed to enable media [ 536.956301][T17519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.965622][T17519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.976746][T17519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.995289][T17519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.009364][T17519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.064728][T17791] 8021q: adding VLAN 0 to HW filter on device bond9 [ 537.107669][T17789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.224804][T17789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.344493][T17786] FAULT_INJECTION: forcing a failure. [ 537.344493][T17786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.369953][T17789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.434350][T17786] CPU: 0 UID: 0 PID: 17786 Comm: syz.2.2991 Not tainted syzkaller #0 PREEMPT(full) [ 537.434377][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.434387][T17786] Call Trace: [ 537.434393][T17786] [ 537.434401][T17786] dump_stack_lvl+0xe8/0x150 [ 537.434436][T17786] should_fail_ex+0x412/0x560 [ 537.434463][T17786] _copy_from_user+0x2d/0xb0 [ 537.434488][T17786] __sys_bpf+0x229/0x950 [ 537.434559][T17786] ? __pfx___sys_bpf+0x10/0x10 [ 537.434597][T17786] ? ksys_write+0x242/0x270 [ 537.434621][T17786] ? __pfx_ksys_write+0x10/0x10 [ 537.434648][T17786] __x64_sys_bpf+0x7c/0x90 [ 537.434673][T17786] do_syscall_64+0x14d/0xf80 [ 537.434699][T17786] ? trace_irq_disable+0x3b/0x150 [ 537.434724][T17786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.434747][T17786] ? clear_bhb_loop+0x40/0x90 [ 537.434769][T17786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.434786][T17786] RIP: 0033:0x7fabdaf9c799 [ 537.434804][T17786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.434819][T17786] RSP: 002b:00007fabdbe53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.434840][T17786] RAX: ffffffffffffffda RBX: 00007fabdb215fa0 RCX: 00007fabdaf9c799 [ 537.434852][T17786] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 537.434863][T17786] RBP: 00007fabdbe53090 R08: 0000000000000000 R09: 0000000000000000 [ 537.434873][T17786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.434884][T17786] R13: 00007fabdb216038 R14: 00007fabdb215fa0 R15: 00007ffce61175f8 [ 537.434912][T17786] [ 537.759562][T17789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.993613][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 537.995713][T15224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.016739][T15224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.043250][T17793] lo speed is unknown, defaulting to 1000 [ 538.045604][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 538.101194][T17825] n: the hash_elasticity option has been deprecated and is always 16 [ 538.124016][T17825] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 538.228026][T15224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.241919][T17834] netlink: 'syz.4.3004': attribute type 10 has an invalid length. [ 538.250053][T15224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.264903][T15227] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 538.312763][T17834] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.337044][T15227] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 538.360613][T15227] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 538.398792][T17836] sock: sock_timestamping_bind_phc: sock not bind to device [ 538.408792][T15227] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 538.507299][T15224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.518974][T15224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.550493][T17793] lo speed is unknown, defaulting to 1000 [ 538.701324][T15224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.721751][T15224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.844640][T17860] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 538.853865][T17849] ip6t_srh: unknown srh invflags 4000 [ 538.885550][T17857] syzkaller0: entered promiscuous mode [ 538.891357][T17857] syzkaller0: entered allmulticast mode [ 538.939257][T17861] tipc: Enabling of bearer rejected, failed to enable media [ 539.116735][T17861] syzkaller0: entered promiscuous mode [ 539.123403][T17861] syzkaller0: entered allmulticast mode [ 539.133032][T17519] Bluetooth: hci0: command tx timeout [ 539.186368][T17850] FAULT_INJECTION: forcing a failure. [ 539.186368][T17850] name failslab, interval 1, probability 0, space 0, times 0 [ 539.200112][T17850] CPU: 0 UID: 0 PID: 17850 Comm: syz.4.3010 Not tainted syzkaller #0 PREEMPT(full) [ 539.200139][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.200149][T17850] Call Trace: [ 539.200156][T17850] [ 539.200164][T17850] dump_stack_lvl+0xe8/0x150 [ 539.200193][T17850] should_fail_ex+0x412/0x560 [ 539.200220][T17850] should_failslab+0xa8/0x100 [ 539.200244][T17850] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 539.200265][T17850] ? __get_vm_area_node+0x13f/0x300 [ 539.200322][T17850] __get_vm_area_node+0x13f/0x300 [ 539.200336][T17850] ? unwind_next_frame+0xa5/0x23c0 [ 539.200373][T17850] __vmalloc_node_range_noprof+0x372/0x1730 [ 539.200393][T17850] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.200423][T17850] ? __lock_acquire+0x6b5/0x2cf0 [ 539.200464][T17850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 539.200484][T17850] ? aa_file_perm+0x192/0x15e0 [ 539.200527][T17850] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.200541][T17850] __vmalloc_noprof+0xd2/0x120 [ 539.200558][T17850] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.200574][T17850] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.200591][T17850] bpf_prog_alloc+0x3c/0x1a0 [ 539.200606][T17850] bpf_prog_load+0x7ba/0x1ae0 [ 539.200631][T17850] ? __pfx_bpf_prog_load+0x10/0x10 [ 539.200662][T17850] ? bpf_lsm_bpf+0x9/0x20 [ 539.200679][T17850] ? security_bpf+0x7e/0x2d0 [ 539.200760][T17850] __sys_bpf+0x618/0x950 [ 539.200783][T17850] ? __pfx___sys_bpf+0x10/0x10 [ 539.200815][T17850] ? ksys_write+0x242/0x270 [ 539.200832][T17850] ? __pfx_ksys_write+0x10/0x10 [ 539.200854][T17850] __x64_sys_bpf+0x7c/0x90 [ 539.200873][T17850] do_syscall_64+0x14d/0xf80 [ 539.200893][T17850] ? trace_irq_disable+0x3b/0x150 [ 539.200912][T17850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.200927][T17850] ? clear_bhb_loop+0x40/0x90 [ 539.200948][T17850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.200962][T17850] RIP: 0033:0x7f23bd79c799 [ 539.200978][T17850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.200990][T17850] RSP: 002b:00007f23be69f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.201007][T17850] RAX: ffffffffffffffda RBX: 00007f23bda15fa0 RCX: 00007f23bd79c799 [ 539.201018][T17850] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 539.201027][T17850] RBP: 00007f23be69f090 R08: 0000000000000000 R09: 0000000000000000 [ 539.201036][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.201044][T17850] R13: 00007f23bda16038 R14: 00007f23bda15fa0 R15: 00007ffd268a0918 [ 539.201069][T17850] [ 539.544679][T17850] syz.4.3010: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 539.576307][T17850] CPU: 0 UID: 0 PID: 17850 Comm: syz.4.3010 Not tainted syzkaller #0 PREEMPT(full) [ 539.576334][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.576345][T17850] Call Trace: [ 539.576352][T17850] [ 539.576360][T17850] dump_stack_lvl+0xe8/0x150 [ 539.576391][T17850] warn_alloc+0x249/0x340 [ 539.576426][T17850] ? __pfx_warn_alloc+0x10/0x10 [ 539.576447][T17850] ? __get_vm_area_node+0x13f/0x300 [ 539.576469][T17850] ? __get_vm_area_node+0x2b5/0x300 [ 539.576484][T17850] ? unwind_next_frame+0xa5/0x23c0 [ 539.576515][T17850] __vmalloc_node_range_noprof+0x397/0x1730 [ 539.576543][T17850] ? __lock_acquire+0x6b5/0x2cf0 [ 539.576576][T17850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 539.576596][T17850] ? aa_file_perm+0x192/0x15e0 [ 539.576631][T17850] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.576647][T17850] __vmalloc_noprof+0xd2/0x120 [ 539.576666][T17850] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.576687][T17850] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 539.576708][T17850] bpf_prog_alloc+0x3c/0x1a0 [ 539.576735][T17850] bpf_prog_load+0x7ba/0x1ae0 [ 539.576766][T17850] ? __pfx_bpf_prog_load+0x10/0x10 [ 539.576804][T17850] ? bpf_lsm_bpf+0x9/0x20 [ 539.576824][T17850] ? security_bpf+0x7e/0x2d0 [ 539.576847][T17850] __sys_bpf+0x618/0x950 [ 539.576875][T17850] ? __pfx___sys_bpf+0x10/0x10 [ 539.576913][T17850] ? ksys_write+0x242/0x270 [ 539.576936][T17850] ? __pfx_ksys_write+0x10/0x10 [ 539.576961][T17850] __x64_sys_bpf+0x7c/0x90 [ 539.576985][T17850] do_syscall_64+0x14d/0xf80 [ 539.577009][T17850] ? trace_irq_disable+0x3b/0x150 [ 539.577033][T17850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.577051][T17850] ? clear_bhb_loop+0x40/0x90 [ 539.577072][T17850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.577090][T17850] RIP: 0033:0x7f23bd79c799 [ 539.577108][T17850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.577124][T17850] RSP: 002b:00007f23be69f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.577142][T17850] RAX: ffffffffffffffda RBX: 00007f23bda15fa0 RCX: 00007f23bd79c799 [ 539.577155][T17850] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 539.577166][T17850] RBP: 00007f23be69f090 R08: 0000000000000000 R09: 0000000000000000 [ 539.577177][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.577188][T17850] R13: 00007f23bda16038 R14: 00007f23bda15fa0 R15: 00007ffd268a0918 [ 539.577217][T17850] [ 539.577237][T17850] Mem-Info: [ 539.719757][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3013'. [ 539.733586][T17850] active_anon:8587 inactive_anon:5 isolated_anon:0 [ 539.733586][T17850] active_file:3160 inactive_file:40567 isolated_file:0 [ 539.733586][T17850] unevictable:3821 dirty:152 writeback:0 [ 539.733586][T17850] slab_reclaimable:12667 slab_unreclaimable:155472 [ 539.733586][T17850] mapped:32716 shmem:4428 pagetables:1488 [ 539.733586][T17850] sec_pagetables:0 bounce:0 [ 539.733586][T17850] kernel_misc_reclaimable:0 [ 539.733586][T17850] free:1228309 free_pcp:25783 free_cma:0 [ 539.898808][T17850] Node 0 active_anon:34448kB inactive_anon:20kB active_file:12640kB inactive_file:162076kB unevictable:13748kB isolated(anon):0kB isolated(file):0kB mapped:93712kB dirty:608kB writeback:0kB shmem:16176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15004kB pagetables:5940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 539.936384][T17866] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 539.936384][T17850] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 539.957117][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 539.984023][T17850] Node 0 DMA free:11136kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:92kB free_cma:0kB [ 540.025292][T17850] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 540.031250][T17850] Node 0 DMA32 free:1207448kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34528kB inactive_anon:20kB active_file:12640kB inactive_file:162076kB unevictable:13824kB writepending:700kB zspages:0kB present:3129332kB managed:2552564kB mlocked:12288kB bounce:0kB free_pcp:41900kB local_pcp:27580kB free_cma:0kB [ 540.066886][T17850] lowmem_reserve[]: 0 0 0 0 0 [ 540.071645][T17850] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 540.101763][T17850] lowmem_reserve[]: 0 0 0 0 0 [ 540.112717][T17850] Node 1 Normal free:3694504kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61572kB local_pcp:27644kB free_cma:0kB [ 540.146129][T17850] lowmem_reserve[]: 0 0 0 0 0 [ 540.150899][T17850] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11136kB [ 540.166666][T17850] Node 0 DMA32: 7872*4kB (UE) 5391*8kB (UE) 3156*16kB (UM) 463*32kB (UM) 911*64kB (UME) 895*128kB (UME) 571*256kB (UME) 410*512kB (UME) 328*1024kB (UM) 99*2048kB (UM) 0*4096kB = 1207512kB [ 540.192495][T17850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 540.204680][T17850] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 9*16kB (UM) 7*32kB (UM) 12*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 899*4096kB (UM) = 3694504kB [ 540.222527][T17850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.232372][T17850] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.241960][T17850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.251807][T17850] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.261973][T17850] 48170 total pagecache pages [ 540.267001][T17850] 0 pages in swap cache [ 540.271374][T17850] Free swap = 124996kB [ 540.275989][T17850] Total swap = 124996kB [ 540.280220][T17850] 2097051 pages RAM [ 540.287805][T17850] 0 pages HighMem/MovableOnly [ 540.292528][T17850] 427074 pages reserved [ 540.297286][T17850] 0 pages cma reserved [ 541.223470][T17519] Bluetooth: hci0: command tx timeout [ 541.574149][T17877] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 541.589915][T17877] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 541.601532][T17877] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 541.696933][T15224] pimreg3: left allmulticast mode [ 541.846959][T17887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.092645][T15224] bond7 (unregistering): (slave geneve2): Releasing active interface [ 542.119786][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 542.142995][T17902] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3019'. [ 542.317130][T15224] bond2 (unregistering): (slave bridge4): Releasing active interface [ 542.627193][T15224] bond0 (unregistering): left promiscuous mode [ 542.635183][T15224] bond0 (unregistering): Released all slaves [ 542.646024][T15224] bond1 (unregistering): (slave veth3): Releasing active interface [ 542.659274][T15224] bond1 (unregistering): (slave veth5): Releasing active interface [ 542.672430][T15224] bond1 (unregistering): (slave veth7): Releasing active interface [ 542.682190][T15224] bond1 (unregistering): Released all slaves [ 542.696386][T15224] bond2 (unregistering): Released all slaves [ 542.710092][T15224] bond3 (unregistering): Released all slaves [ 542.724325][T15224] bond4 (unregistering): Released all slaves [ 542.737190][T15224] bond5 (unregistering): Released all slaves [ 542.751295][T15224] bond6 (unregistering): Released all slaves [ 542.765435][T15224] bond7 (unregistering): Released all slaves [ 542.974845][T15224] !: left promiscuous mode [ 543.046040][T17793] chnl_net:caif_netlink_parms(): no params data found [ 543.150548][T15224] tipc: Disabling bearer [ 543.181401][T15224] tipc: Left network mode [ 543.218725][T17919] netlink: 'syz.4.3024': attribute type 3 has an invalid length. [ 543.293413][T17519] Bluetooth: hci0: command tx timeout [ 543.315260][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.322644][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.330614][T17793] bridge_slave_0: entered allmulticast mode [ 543.338965][T17793] bridge_slave_0: entered promiscuous mode [ 543.366204][T17930] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3027'. [ 543.388395][T17924] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 543.472315][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.497365][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.512326][T17924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3025'. [ 543.513525][T17793] bridge_slave_1: entered allmulticast mode [ 543.548111][T17793] bridge_slave_1: entered promiscuous mode [ 543.833594][T17950] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 543.879269][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.036695][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.352311][T17793] team0: Port device team_slave_0 added [ 544.387970][T17793] team0: Port device team_slave_1 added [ 544.435577][T17962] macsec2: entered allmulticast mode [ 544.458086][T17962] veth1: entered allmulticast mode [ 544.513486][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 544.522702][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3034'. [ 544.549623][T17968] netlink: 'syz.1.3034': attribute type 14 has an invalid length. [ 544.569311][T17968] netlink: 'syz.1.3034': attribute type 12 has an invalid length. [ 544.613828][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.645582][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.696944][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.810127][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.835138][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.868550][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.110006][T17793] hsr_slave_0: entered promiscuous mode [ 545.124626][T17793] hsr_slave_1: entered promiscuous mode [ 545.139841][T17793] debugfs: 'hsr0' already exists in 'hsr' [ 545.156024][T17793] Cannot create hsr debugfs directory [ 545.373142][T17519] Bluetooth: hci0: command tx timeout [ 545.391511][T18000] tipc: Enabling of bearer rejected, failed to enable media [ 545.432790][T18000] hsr0: entered promiscuous mode [ 545.451324][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 545.524500][T18000] hsr_slave_0: left promiscuous mode [ 545.530459][T18000] hsr_slave_1: left promiscuous mode [ 545.545655][T18000] hsr0 (unregistering): left promiscuous mode [ 545.618618][T18011] gtp1: entered promiscuous mode [ 545.623834][T18011] gtp1: entered allmulticast mode [ 545.706900][T17973] lo speed is unknown, defaulting to 1000 [ 545.850156][T17973] lo speed is unknown, defaulting to 1000 [ 545.853369][T17972] lo speed is unknown, defaulting to 1000 [ 546.258093][T17972] lo speed is unknown, defaulting to 1000 [ 546.659455][T15224] batadv_slave_0: left promiscuous mode [ 546.686095][T15224] hsr_slave_0: left promiscuous mode [ 546.718700][T15224] hsr_slave_1: left promiscuous mode [ 546.746854][T15224] veth1_macvtap: left promiscuous mode [ 546.752689][T15224] veth1_vlan: left promiscuous mode [ 546.758350][T15224] veth0_vlan: left promiscuous mode [ 547.362201][T15224] IPVS: stop unused estimator thread 0... [ 548.293501][T17998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.305461][T17793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 548.351781][T17793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 548.380149][T17793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 548.392345][T17793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 548.515374][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.537976][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.551087][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.558359][T15220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.579182][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.586394][T15220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.810017][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.879772][T17793] veth0_vlan: entered promiscuous mode [ 548.897283][T17793] veth1_vlan: entered promiscuous mode [ 548.930996][T17793] veth0_macvtap: entered promiscuous mode [ 548.943217][T17793] veth1_macvtap: entered promiscuous mode [ 548.964046][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.980289][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.998778][T15224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.011636][T15224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.023695][T15224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.047457][T15224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.141257][T15224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.152899][T15224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.188267][T15221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.196913][T15221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.296461][T18045] nbd: couldn't find a device at index 0 [ 559.407252][T18103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3047'. [ 559.515957][T18098] team0: Port device syz_tun added [ 559.603755][ T30] audit: type=1804 audit(1773858470.815:11): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3050" name="/newroot/2/cgroup.controllers" dev="tmpfs" ino=28 res=1 errno=0 [ 559.673261][ T30] audit: type=1800 audit(1773858470.815:12): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3050" name="cgroup.controllers" dev="tmpfs" ino=28 res=0 errno=0 [ 559.716888][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 559.735775][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 559.753738][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.761758][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.770769][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 559.774732][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 559.834701][T18122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3053'. [ 559.873845][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 559.913209][T18122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3053'. [ 560.434109][T15224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.465152][T15224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 560.606166][T15224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.618858][T15224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 560.663637][T18112] lo speed is unknown, defaulting to 1000 [ 560.780427][T15224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.791718][T15224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 561.004477][T15224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.042185][T15224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 561.046984][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3067'. [ 561.126501][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 561.310733][T18179] syzkaller1: entered allmulticast mode [ 561.333619][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3067'. [ 561.396199][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3071'. [ 561.408122][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3071'. [ 561.417967][T18143] lo speed is unknown, defaulting to 1000 [ 561.424916][T18112] lo speed is unknown, defaulting to 1000 [ 561.863183][ T5833] Bluetooth: hci1: command tx timeout [ 561.934496][T15225] wlan1: Trigger new scan to find an IBSS to join [ 561.981966][T15224] bridge_slave_1: left allmulticast mode [ 562.001732][T15224] bridge_slave_1: left promiscuous mode [ 562.010209][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.044982][T15224] bridge_slave_0: left allmulticast mode [ 562.060890][T15224] bridge_slave_0: left promiscuous mode [ 562.080005][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.700216][T15224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.710414][T15224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.720320][T15224] bond0 (unregistering): Released all slaves [ 562.736431][T15224] bond1 (unregistering): Released all slaves [ 562.750020][T15224] team0: Port device bond2 removed [ 562.757590][T15224] bond2 (unregistering): Released all slaves [ 562.770639][T15224] bond3 (unregistering): Released all slaves [ 562.783452][T15224] bond4 (unregistering): Released all slaves [ 562.797571][T15224] bond5 (unregistering): Released all slaves [ 562.811150][T15224] bond6 (unregistering): (slave veth3): Releasing active interface [ 562.830699][T15224] bond6 (unregistering): (slave veth5): Releasing active interface [ 562.840711][T15224] bond6 (unregistering): Released all slaves [ 562.854628][T15224] bond7 (unregistering): Released all slaves [ 562.869424][T15224] bond8 (unregistering): Released all slaves [ 562.888440][T15224] bond9 (unregistering): Released all slaves [ 562.900253][T18143] lo speed is unknown, defaulting to 1000 [ 562.936327][T18221] bridge_slave_0: left allmulticast mode [ 562.942264][T18221] bridge_slave_0: left promiscuous mode [ 562.956901][T18221] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.997337][T18221] bridge_slave_1: left allmulticast mode [ 563.020428][T18221] bridge_slave_1: left promiscuous mode [ 563.037345][T18221] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.081512][T18221] bond0: (slave bond_slave_0): Releasing backup interface [ 563.093227][T18221] bond0: (slave bond_slave_1): Releasing backup interface [ 563.106812][T18221] team0: Port device team_slave_0 removed [ 563.116013][T18221] team0: Port device team_slave_1 removed [ 563.122400][T18221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.131433][T18221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.139929][T18221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.148276][T18221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.158739][T18221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 563.231512][T18225] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.239203][T18225] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.320035][T18225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.334956][T18225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.450262][T15224] : left promiscuous mode [ 563.487618][T15220] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.504625][T15220] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.524728][T18242] netlink: 'syz.3.3078': attribute type 1 has an invalid length. [ 563.587903][T15220] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.608228][T15224] tipc: Left network mode [ 563.648668][T15220] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.901698][T18258] xt_hashlimit: size too large, truncated to 1048576 [ 563.933191][ T5833] Bluetooth: hci1: command tx timeout [ 564.608246][T18112] chnl_net:caif_netlink_parms(): no params data found [ 564.974366][T15225] wlan1: Trigger new scan to find an IBSS to join [ 565.649578][T18302] __nla_validate_parse: 1 callbacks suppressed [ 565.649600][T18302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3089'. [ 565.652831][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'. [ 565.778416][T18112] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.792842][T18112] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.805493][T18305] netlink: 'syz.3.3090': attribute type 2 has an invalid length. [ 565.814233][T18112] bridge_slave_0: entered allmulticast mode [ 565.852876][T18112] bridge_slave_0: entered promiscuous mode [ 565.952679][T18305] 9: entered promiscuous mode [ 565.964899][T18112] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.985179][T18112] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.995374][T18112] bridge_slave_1: entered allmulticast mode [ 566.016529][ T5833] Bluetooth: hci1: command tx timeout [ 566.041469][T18112] bridge_slave_1: entered promiscuous mode [ 566.153584][T15224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.204016][T15224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.287932][T15224] veth1: left allmulticast mode [ 566.354602][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'. [ 566.367171][T18334] IPv6: addrconf: prefix option has invalid lifetime [ 566.407231][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'. [ 566.458862][T18344] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3099'. [ 566.481206][T18344] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3099'. [ 566.543230][T18345] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3096'. [ 566.583941][T18345] Cannot find add_set index 0 as target [ 566.922422][T15224] team0 (unregistering): Port device team_slave_1 removed [ 566.975438][T15224] team0 (unregistering): Port device team_slave_0 removed [ 567.331472][T18112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.361845][T18112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.504223][T18112] team0: Port device team_slave_0 added [ 567.525861][T18112] team0: Port device team_slave_1 added [ 567.630994][T18112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.652252][T18112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.752986][T18112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.782537][T18112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.796313][T18381] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3108'. [ 567.813023][T18112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.872510][T18112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.936290][T15225] wlan1: Creating new IBSS network, BSSID 72:e2:c2:6b:93:02 [ 568.034808][T15224] IPVS: stop unused estimator thread 0... [ 568.058302][T18112] hsr_slave_0: entered promiscuous mode [ 568.074817][T18112] hsr_slave_1: entered promiscuous mode [ 568.094828][ T5833] Bluetooth: hci1: command tx timeout [ 568.167617][T18389] Bluetooth: MGMT ver 1.23 [ 568.180823][T18389] netlink: 'syz.3.3111': attribute type 10 has an invalid length. [ 568.201263][T18389] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 568.403402][T18399] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3112'. [ 568.423389][T18398] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3112'. [ 568.693881][T18409] ip6tnl1: entered promiscuous mode [ 568.711603][T18409] ip6tnl1: entered allmulticast mode [ 569.128643][T18425] bond0: (slave wlan1): Releasing backup interface [ 569.651878][T18456] syzkaller0: entered promiscuous mode [ 569.683089][T18456] syzkaller0: entered allmulticast mode [ 569.930897][T18112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 569.942863][T18112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 569.976554][T18112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 569.996509][T18112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.114534][T18112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.139816][T18112] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.158077][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.165341][T15227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.203995][T15228] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.211154][T15228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.450281][T18112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.747218][T18112] veth0_vlan: entered promiscuous mode [ 570.761669][T18112] veth1_vlan: entered promiscuous mode [ 570.802254][T18112] veth0_macvtap: entered promiscuous mode [ 570.815872][T18112] veth1_macvtap: entered promiscuous mode [ 570.841974][T18112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.859394][T18112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.877587][T15228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.900940][T15228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.920236][T15228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.930500][T15228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.008927][T15228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.032974][T15228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.066934][T15225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.077100][T15225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.023397][T15225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.948315][T15195] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 629.545039][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 646.973079][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 657.873137][T15227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 662.333091][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 667.453306][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 677.128168][T18772] ip6gre2: entered promiscuous mode [ 677.187790][T18775] syzkaller0: entered promiscuous mode [ 677.203147][T18775] syzkaller0: entered allmulticast mode [ 677.225153][T18772] tc action pedit offset 128 out of bounds [ 677.231374][T18772] tc action pedit offset 128 out of bounds [ 677.237235][T18772] tc action pedit offset 128 out of bounds [ 677.243060][T18772] tc action pedit offset 128 out of bounds [ 677.248859][T18772] tc action pedit offset 128 out of bounds [ 677.254678][T18772] tc action pedit offset 128 out of bounds [ 677.260477][T18772] tc action pedit offset 128 out of bounds [ 677.266308][T18772] tc action pedit offset 128 out of bounds [ 677.272145][T18772] tc action pedit offset 128 out of bounds [ 677.278057][T18772] tc action pedit offset 128 out of bounds [ 677.284042][T18772] TC_ACT_REPEAT abuse ? [ 677.390671][T18785] bond0: (slave wlan1): Releasing backup interface [ 677.401335][T18775] TC_ACT_REPEAT abuse ? [ 677.541103][T18802] netem: change failed [ 677.554283][T18802] __nla_validate_parse: 4 callbacks suppressed [ 677.554302][T18802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3136'. [ 677.744961][T18809] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3137'. [ 677.780555][T18786] lo speed is unknown, defaulting to 1000 [ 677.828485][T18812] netlink: 'syz.0.3140': attribute type 21 has an invalid length. [ 677.837269][T18812] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3140'. [ 677.847757][T18813] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 677.882700][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'. [ 677.940586][T18816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3141'. [ 678.069043][T18822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3144'. [ 678.109793][T18827] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3146'. [ 678.138099][T18830] FAULT_INJECTION: forcing a failure. [ 678.138099][T18830] name failslab, interval 1, probability 0, space 0, times 0 [ 678.153272][T18830] CPU: 0 UID: 0 PID: 18830 Comm: syz.3.3147 Not tainted syzkaller #0 PREEMPT(full) [ 678.153297][T18830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.153308][T18830] Call Trace: [ 678.153314][T18830] [ 678.153321][T18830] dump_stack_lvl+0xe8/0x150 [ 678.153394][T18830] should_fail_ex+0x412/0x560 [ 678.153444][T18830] should_failslab+0xa8/0x100 [ 678.153482][T18830] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 678.153500][T18830] ? __alloc_skb+0x186/0x7d0 [ 678.153547][T18830] ? __alloc_skb+0x1d0/0x7d0 [ 678.153568][T18830] ? __local_bh_enable_ip+0xd0/0x130 [ 678.153605][T18830] __alloc_skb+0x1d0/0x7d0 [ 678.153633][T18830] netlink_sendmsg+0x5d4/0xb40 [ 678.153680][T18830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.153705][T18830] ? aa_sock_msg_perm+0xf1/0x1b0 [ 678.153754][T18830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.153788][T18830] ____sys_sendmsg+0x972/0x9f0 [ 678.153814][T18830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.153841][T18830] ? import_iovec+0x73/0xa0 [ 678.153890][T18830] ___sys_sendmsg+0x2a5/0x360 [ 678.153914][T18830] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.153966][T18830] ? __fget_files+0x2a/0x420 [ 678.153996][T18830] ? __fget_files+0x3a0/0x420 [ 678.154031][T18830] __x64_sys_sendmsg+0x1bd/0x2a0 [ 678.154054][T18830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.154082][T18830] ? __pfx_ksys_write+0x10/0x10 [ 678.154116][T18830] do_syscall_64+0x14d/0xf80 [ 678.154164][T18830] ? trace_irq_disable+0x3b/0x150 [ 678.154195][T18830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.154226][T18830] ? clear_bhb_loop+0x40/0x90 [ 678.154248][T18830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.154265][T18830] RIP: 0033:0x7f672679c799 [ 678.154283][T18830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.154299][T18830] RSP: 002b:00007f672759c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.154319][T18830] RAX: ffffffffffffffda RBX: 00007f6726a15fa0 RCX: 00007f672679c799 [ 678.154332][T18830] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 678.154343][T18830] RBP: 00007f672759c090 R08: 0000000000000000 R09: 0000000000000000 [ 678.154354][T18830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.154364][T18830] R13: 00007f6726a16038 R14: 00007f6726a15fa0 R15: 00007ffea13a6458 [ 678.154393][T18830] [ 679.455439][T18878] veth9: entered promiscuous mode [ 688.185268][T18944] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 688.527779][T18973] netlink: 'syz.2.3179': attribute type 21 has an invalid length. [ 688.564752][T18969] netlink: 'syz.3.3180': attribute type 1 has an invalid length. [ 688.572535][T18969] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3180'. [ 688.673043][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 688.675534][T18970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 688.682686][T18975] netlink: 'syz.3.3180': attribute type 1 has an invalid length. [ 688.720814][T18975] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3180'. [ 688.723427][T18973] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3179'. [ 688.763906][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 689.233413][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'. [ 689.269245][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 689.282803][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 689.292076][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 689.301104][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 689.315380][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 689.368334][T18963] udevd[18963]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 689.420911][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 689.507720][T18998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3185'. [ 689.529440][T18998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3185'. [ 689.550106][T18949] lo speed is unknown, defaulting to 1000 [ 689.561144][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 689.595598][T19005] tipc: Started in network mode [ 689.602106][T19005] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 689.624614][T19005] tipc: Enabled bearer , priority 0 [ 689.752184][T18998] bond1 (unregistering): Released all slaves [ 689.818249][T15195] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 689.910909][T15195] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 689.981466][T19014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.006935][T15195] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 690.084650][T15195] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 690.336262][T15195] bridge_slave_1: left allmulticast mode [ 690.352066][T15195] bridge_slave_1: left promiscuous mode [ 690.378771][T15195] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.436879][T15195] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.300120][T15195] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 691.373977][ T5833] Bluetooth: hci2: command tx timeout [ 691.500215][T15195] bond0 (unregistering): left promiscuous mode [ 691.506819][T15195] bond_slave_0: left promiscuous mode [ 691.512590][T15195] bond_slave_1: left promiscuous mode [ 691.520678][T15195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.536855][T15195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.548636][T15195] bond0 (unregistering): Released all slaves [ 691.569362][T15195] bond1 (unregistering): (slave veth3): Releasing active interface [ 691.583742][T15195] bond1 (unregistering): Released all slaves [ 691.606694][T15195] bond2 (unregistering): (slave veth7): Releasing backup interface [ 691.616728][T15195] bond2 (unregistering): Released all slaves [ 691.631661][T15195] bond3 (unregistering): Released all slaves [ 691.648878][T15195] bond4 (unregistering): Released all slaves [ 691.663024][T15195] bond5 (unregistering): Released all slaves [ 691.675978][T15195] bond6 (unregistering): Released all slaves [ 691.691814][T15195] bond7 (unregistering): Released all slaves [ 691.705499][T15195] bond8 (unregistering): Released all slaves [ 691.727959][T15195] bond9 (unregistering): Released all slaves [ 691.744042][T15195] bond10 (unregistering): Released all slaves [ 691.756507][T15195] bond11 (unregistering): Released all slaves [ 691.770951][T18985] lo speed is unknown, defaulting to 1000 [ 691.784844][ T8568] tipc: Node number set to 10005162 [ 691.805115][T19045] syzkaller0: entered promiscuous mode [ 691.825909][T19045] syzkaller0: entered allmulticast mode [ 691.964517][T19059] bond1: option ad_actor_sys_prio: invalid value (0) [ 692.003215][T19059] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 692.025691][T19059] bond1 (unregistering): Released all slaves [ 692.030995][T19062] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 692.039281][T19062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.110162][T15195] tipc: Left network mode [ 692.321728][T19000] lo speed is unknown, defaulting to 1000 [ 693.053285][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 693.192747][T19087] vlan2: entered allmulticast mode [ 693.213151][T19087] bridge0: entered allmulticast mode [ 693.453075][T17519] Bluetooth: hci2: command tx timeout [ 694.038813][T15195] batadv0: left promiscuous mode [ 694.203269][T15195] hsr_slave_0: left promiscuous mode [ 694.212643][T15195] hsr_slave_1: left promiscuous mode [ 694.229527][T15195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.244933][T19132] openvswitch: netlink: ct_state flags 01ffdfe0 unsupported [ 694.291923][T15195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.393230][T19086] infiniband syz0: set down [ 694.410139][T19086] infiniband syz0: added bond0 [ 694.426272][T19086] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 694.433394][T19086] infiniband syz0: Couldn't open port 1 [ 694.492312][T19142] __nla_validate_parse: 13 callbacks suppressed [ 694.492332][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'. [ 694.518748][T19086] RDS/IB: syz0: added [ 694.523718][T19086] smc: adding ib device syz0 with port count 1 [ 694.549320][T19086] smc: ib device syz0 port 1 has no pnetid [ 694.669768][T15195] team0 (unregistering): Port device team_slave_1 removed [ 694.687959][T15195] team0 (unregistering): Port device team_slave_0 removed [ 694.819259][T19000] chnl_net:caif_netlink_parms(): no params data found [ 695.028228][T19148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.143727][T19000] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.151527][T19000] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.197888][T19000] bridge_slave_0: entered allmulticast mode [ 695.244751][T19000] bridge_slave_0: entered promiscuous mode [ 695.267841][T19000] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.283150][T19000] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.323192][T19000] bridge_slave_1: entered allmulticast mode [ 695.341203][T19000] bridge_slave_1: entered promiscuous mode [ 695.534028][T17519] Bluetooth: hci2: command tx timeout [ 695.559426][T19000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.644332][T19000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.759573][T19000] team0: Port device team_slave_0 added [ 695.785973][T19000] team0: Port device team_slave_1 added [ 695.812340][T19186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3209'. [ 695.874740][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 695.879609][T19000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.906826][T19000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.936486][T19000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.973798][T19186] syzkaller1: entered promiscuous mode [ 695.979300][T19186] syzkaller1: entered allmulticast mode [ 696.004175][T19000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.011160][T19000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.078771][T19000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.170459][T19196] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 696.211295][T19193] tipc: Enabled bearer , priority 0 [ 696.220669][T19193] syzkaller0: entered promiscuous mode [ 696.226469][T19193] syzkaller0: entered allmulticast mode [ 696.255513][T19193] tipc: Resetting bearer [ 696.262791][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3211'. [ 696.367118][T19193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.420126][T19000] hsr_slave_0: entered promiscuous mode [ 696.433774][T19000] hsr_slave_1: entered promiscuous mode [ 696.440178][T19000] debugfs: 'hsr0' already exists in 'hsr' [ 696.454333][T19000] Cannot create hsr debugfs directory [ 696.472001][T19205] x_tables: duplicate underflow at hook 2 [ 696.485635][T19202] dvmrp1: entered allmulticast mode [ 696.493461][T19192] tipc: Resetting bearer [ 696.530237][T19192] tipc: Disabling bearer [ 696.549929][T19204] dvmrp1: left allmulticast mode [ 697.216944][T19213] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3216'. [ 697.267419][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3216'. [ 697.616303][T17519] Bluetooth: hci2: command tx timeout [ 698.077272][T15220] smc: removing ib device syz1 [ 698.078662][T19220] lo speed is unknown, defaulting to 1000 [ 699.636612][T15225] smc: removing ib device sqz0 [ 700.505810][T19297] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3224'. [ 700.950496][T19000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.998328][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'. [ 701.020555][T19000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 701.063140][T19000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 701.097158][T19000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 701.393966][T19000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.462095][T19000] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.503931][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.511337][T15220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.555229][T19327] hsr0: entered promiscuous mode [ 701.567535][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.574852][T15220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.631346][T19325] hsr0: left promiscuous mode [ 701.780990][T19000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.203791][T19000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.307072][T19000] veth0_vlan: entered promiscuous mode [ 702.327254][T19000] veth1_vlan: entered promiscuous mode [ 702.409309][T19000] veth0_macvtap: entered promiscuous mode [ 702.459895][T19000] veth1_macvtap: entered promiscuous mode [ 702.497176][T19000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.554821][T19000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.595076][T15220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.608163][T15220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.672566][T15220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.694116][T15220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.858236][T15223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.878977][T15223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.948645][T15220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.969578][T15220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.197617][T15195] IPVS: stop unused estimator thread 0... [ 705.778974][T19378] netlink: 'syz.0.3229': attribute type 7 has an invalid length. [ 705.797500][T19378] netlink: 'syz.0.3229': attribute type 8 has an invalid length. [ 706.106406][T19399] netlink: 'syz.4.3236': attribute type 8 has an invalid length. [ 706.116798][T19391] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 706.142984][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3236'. [ 706.382131][T19410] netlink: 'syz.3.3240': attribute type 2 has an invalid length. [ 706.398207][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 706.403331][ T8563] IPVS: starting estimator thread 0... [ 706.443899][T19414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3242'. [ 706.502971][T19415] IPVS: using max 33 ests per chain, 79200 per kthread [ 706.547686][T19418] vlan2: entered promiscuous mode [ 706.552884][T19418] bridge0: entered promiscuous mode [ 706.631656][T19420] syzkaller0: entered promiscuous mode [ 706.643084][T19420] syzkaller0: entered allmulticast mode [ 706.684961][T19420] 0: reclassify loop, rule prio 0, protocol 800 [ 707.033430][T19448] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 707.566457][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 708.109167][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 708.178460][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'. [ 708.189566][T19487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3260'. [ 708.477005][T19499] bridge0: entered promiscuous mode [ 708.802395][T19484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.201175][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3267'. [ 709.236538][T19520] ip6gre1: entered promiscuous mode [ 709.241787][T19520] ip6gre1: entered allmulticast mode [ 709.577807][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 710.291195][T19574] FAULT_INJECTION: forcing a failure. [ 710.291195][T19574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.315903][T19576] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 710.342091][T19574] CPU: 0 UID: 0 PID: 19574 Comm: syz.0.3285 Not tainted syzkaller #0 PREEMPT(full) [ 710.342115][T19574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.342125][T19574] Call Trace: [ 710.342133][T19574] [ 710.342141][T19574] dump_stack_lvl+0xe8/0x150 [ 710.342171][T19574] should_fail_ex+0x412/0x560 [ 710.342198][T19574] _copy_from_user+0x2d/0xb0 [ 710.342223][T19574] ___sys_sendmsg+0x1c6/0x360 [ 710.342245][T19574] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.342288][T19574] ? __fget_files+0x2a/0x420 [ 710.342314][T19574] ? __fget_files+0x3a0/0x420 [ 710.342347][T19574] __x64_sys_sendmsg+0x1bd/0x2a0 [ 710.342367][T19574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 710.342391][T19574] ? __pfx_ksys_write+0x10/0x10 [ 710.342416][T19574] do_syscall_64+0x14d/0xf80 [ 710.342440][T19574] ? trace_irq_disable+0x3b/0x150 [ 710.342463][T19574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.342481][T19574] ? clear_bhb_loop+0x40/0x90 [ 710.342502][T19574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.342519][T19574] RIP: 0033:0x7ff06099c799 [ 710.342536][T19574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.342551][T19574] RSP: 002b:00007ff061824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.342569][T19574] RAX: ffffffffffffffda RBX: 00007ff060c15fa0 RCX: 00007ff06099c799 [ 710.342582][T19574] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 710.342593][T19574] RBP: 00007ff061824090 R08: 0000000000000000 R09: 0000000000000000 [ 710.342604][T19574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.342614][T19574] R13: 00007ff060c16038 R14: 00007ff060c15fa0 R15: 00007ffe84f40898 [ 710.342642][T19574] [ 710.344694][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3286'. [ 710.855978][T19586] netlink: 'syz.0.3289': attribute type 10 has an invalid length. [ 710.868028][T19586] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.875867][T19586] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.210972][T19613] bridge_slave_1: left allmulticast mode [ 711.217596][T19613] bridge_slave_1: left promiscuous mode [ 711.225990][T19613] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.264149][T19619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3298'. [ 711.285809][T19613] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 711.335531][T19619] syzkaller1: entered promiscuous mode [ 711.361469][T19619] syzkaller1: entered allmulticast mode [ 711.410512][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 711.425676][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 711.450632][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3298'. [ 711.623706][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 711.633312][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 711.642442][T19632] bridge_slave_1: left allmulticast mode [ 711.648504][T19632] bridge_slave_1: left promiscuous mode [ 711.655017][T19632] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.684561][T19632] bridge_slave_0: left allmulticast mode [ 711.690243][T19632] bridge_slave_0: left promiscuous mode [ 711.701218][T19632] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.757441][T19639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3305'. [ 711.840973][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 711.932579][ T8561] IPVS: starting estimator thread 0... [ 711.940970][T19649] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 711.956223][T19653] netlink: 'syz.3.3310': attribute type 4 has an invalid length. [ 711.970095][T19653] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3310'. [ 711.970839][T19650] wireguard0: entered promiscuous mode [ 711.987155][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 712.052983][T19651] IPVS: using max 33 ests per chain, 79200 per kthread [ 712.071606][T19658] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 712.152280][T19662] macvlan0: entered promiscuous mode [ 712.165186][T19662] netlink: 'syz.2.3314': attribute type 2 has an invalid length. [ 712.217066][T19667] netlink: 'syz.4.3311': attribute type 13 has an invalid length. [ 712.236312][T19667] netlink: 'syz.4.3311': attribute type 17 has an invalid length. [ 712.380647][T19667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.579579][T19680] syzkaller1: entered promiscuous mode [ 712.585569][T19680] syzkaller1: entered allmulticast mode [ 714.557283][T19755] syzkaller1: entered promiscuous mode [ 714.567723][T19755] syzkaller1: entered allmulticast mode [ 714.586944][T19763] syzkaller0: entered promiscuous mode [ 714.593357][T19763] syzkaller0: entered allmulticast mode [ 714.605995][T19774] tipc: Started in network mode [ 714.610908][T19774] tipc: Node identity b22bd3fccddc, cluster identity 4711 [ 714.646778][T19774] tipc: Enabled bearer , priority 0 [ 715.153534][T19770] tipc: Resetting bearer [ 715.176794][T19765] tipc: Disabling bearer [ 715.417063][T19791] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 715.450649][T19791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 729.574444][T19858] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 729.576103][T19854] __nla_validate_parse: 7 callbacks suppressed [ 729.576121][T19854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3346'. [ 729.582299][T19858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 729.632947][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 729.695264][T19865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3349'. [ 729.770417][T19865] syzkaller1: entered promiscuous mode [ 729.799348][T19865] syzkaller1: entered allmulticast mode [ 729.817711][T19864] netlink: 'syz.1.3351': attribute type 1 has an invalid length. [ 729.833210][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 730.291735][T19894] netlink: 'syz.3.3356': attribute type 10 has an invalid length. [ 730.538337][T19915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3360'. [ 730.869718][T19939] xt_bpf: check failed: parse error [ 730.890727][T19922] netlink: 'syz.2.3361': attribute type 6 has an invalid length. [ 731.218038][T19955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3366'. [ 731.279158][T19939] lo speed is unknown, defaulting to 1000 [ 731.364034][T19939] lo speed is unknown, defaulting to 1000 [ 731.384049][T19939] lo speed is unknown, defaulting to 1000 [ 731.414880][T19939] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 731.485978][T19939] lo speed is unknown, defaulting to 1000 [ 731.500025][T19952] syzkaller1: entered promiscuous mode [ 731.515062][T19952] syzkaller1: entered allmulticast mode [ 731.537073][T19939] lo speed is unknown, defaulting to 1000 [ 731.552247][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'. [ 731.558125][T19939] lo speed is unknown, defaulting to 1000 [ 731.563579][T19972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3370'. [ 731.594772][T19939] lo speed is unknown, defaulting to 1000 [ 731.604720][T19939] lo speed is unknown, defaulting to 1000 [ 731.629440][T19939] lo speed is unknown, defaulting to 1000 [ 731.651154][T19939] lo speed is unknown, defaulting to 1000 [ 731.997399][T19987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3374'. [ 732.098513][T19991] xt_policy: neither incoming nor outgoing policy selected [ 732.143073][T19996] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 732.171582][T19996] netlink: 'syz.2.3377': attribute type 2 has an invalid length. [ 732.204667][T20000] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3376'. [ 732.393845][T20012] netlink: 'syz.0.3381': attribute type 14 has an invalid length. [ 732.749898][T20040] siw: device registration error -23 [ 732.840322][T20042] bond0: option arp_validate: invalid value (55553) [ 732.840701][T15223] bond0: (slave bond_slave_0): interface is now down [ 732.863227][T15223] bond0: (slave bond_slave_1): interface is now down [ 732.878435][T15223] bond0: (slave bridge_slave_1): interface is now down [ 732.897948][T15223] bond0: now running without any active interface! [ 733.506784][T20058] tipc: Enabled bearer , priority 0 [ 733.560446][T20058] tipc: Resetting bearer [ 733.672771][T20074] netlink: 'syz.3.3396': attribute type 2 has an invalid length. [ 733.706588][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 733.742966][T20074] tipc: Started in network mode [ 733.748135][T20074] tipc: Node identity 1340008, cluster identity 4711 [ 733.755851][T20074] tipc: Node number set to 20185096 [ 733.762278][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 733.769291][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 733.817410][T20057] tipc: Disabling bearer [ 733.922679][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 733.963929][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 733.970261][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.016972][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.054104][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.060760][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.099133][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.117739][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.127136][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.136614][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.146438][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.154168][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.161280][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.183659][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.195278][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.209847][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.218549][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.229261][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.235907][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.242341][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.263056][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.271929][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.278330][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.285135][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.291686][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.298207][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.306542][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.313264][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.319856][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 734.327498][T20078] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 737.102026][T15192] bridge_slave_1: left allmulticast mode [ 737.108249][T15192] bridge_slave_1: left promiscuous mode [ 737.115450][T15192] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.125457][T15192] bridge_slave_0: left allmulticast mode [ 737.131256][T15192] bridge_slave_0: left promiscuous mode [ 737.137753][T15192] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.257697][T15192] bond1 (unregistering): (slave geneve4): Releasing active interface [ 737.265925][T15192] geneve4 (unregistering): left promiscuous mode [ 737.272386][T15192] geneve4 (unregistering): left allmulticast mode [ 737.304973][T15192] team0: Port device geneve0 removed [ 737.566540][T15192] bond3 (unregistering): (slave bridge6): Releasing active interface [ 737.647198][T15192] bond0 (unregistering): left promiscuous mode [ 737.653537][T15192] bond_slave_0: left promiscuous mode [ 737.659075][T15192] bond_slave_1: left promiscuous mode [ 737.666210][T15192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.676147][T15192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.687027][T15192] bond0 (unregistering): Released all slaves [ 737.699840][T15192] bond1 (unregistering): Released all slaves [ 737.712804][T15192] bond2 (unregistering): Released all slaves [ 737.725391][T15192] bond3 (unregistering): Released all slaves [ 737.820570][T15192] : left promiscuous mode [ 737.872315][T15192] tipc: Left network mode [ 737.888189][T15192] IPVS: stopping backup sync thread 7475 ... [ 738.269309][T15192] batadv0: left promiscuous mode [ 738.277830][T15192] hsr_slave_0: left promiscuous mode [ 738.284719][T15192] hsr_slave_1: left promiscuous mode [ 738.290525][T15192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.298596][T15192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.306900][T15192] veth1_to_hsr: left allmulticast mode [ 738.312726][T15192] veth1_to_hsr: left promiscuous mode [ 738.421924][T15192] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 738.457383][T15192] team0 (unregistering): Port device team_slave_1 removed [ 738.481581][T15192] team0 (unregistering): Port device team_slave_0 removed [ 738.810249][T15192] IPVS: stop unused estimator thread 0... [ 740.572720][T20123] __nla_validate_parse: 3 callbacks suppressed [ 740.572738][T20123] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3405'. [ 740.606202][T20123] dvmrp0: entered allmulticast mode [ 740.630282][T20123] dvmrp0: left allmulticast mode [ 740.743760][T20135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3406'. [ 740.803851][T20135] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3406'. [ 741.566363][T20193] pimreg: tun_chr_ioctl cmd 1074025677 [ 741.573981][T20193] pimreg: linktype set to 0 [ 741.992326][T20208] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3430'. [ 742.040803][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3431'. [ 742.108479][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3431'. [ 742.315526][T20231] pimreg: entered allmulticast mode [ 742.456275][T20241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3437'. [ 742.477606][T20241] ip6gre2: entered promiscuous mode [ 742.483627][T20241] ip6gre2: entered allmulticast mode [ 742.565818][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'. [ 742.862603][T20267] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20001 [ 742.886242][T20269] netlink: 'syz.1.3448': attribute type 1 has an invalid length. [ 742.961294][T20270] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 742.972773][T20270] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 742.987878][T20270] bond1: (slave ip6gre1): making interface the new active one [ 742.996766][T20270] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 743.315872][T20288] netlink: 'syz.2.3452': attribute type 21 has an invalid length. [ 743.333323][T20288] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 743.355586][T20288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3452'. [ 743.582398][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3453'. [ 743.692753][T20301] netlink: 'syz.2.3456': attribute type 1 has an invalid length. [ 743.738390][T16272] lo speed is unknown, defaulting to 1000 [ 743.744863][ T8563] lo speed is unknown, defaulting to 1000 [ 744.012999][T17519] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 744.507012][T20355] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 744.522723][T20350] veth1_macvtap: renamed from vlan1 [ 744.718271][T20367] vlan3: entered promiscuous mode [ 745.378900][T20392] lo speed is unknown, defaulting to 1000 [ 745.498125][T20415] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 745.832528][T20431] netlink: 'syz.3.3486': attribute type 10 has an invalid length. [ 745.871741][T20435] __nla_validate_parse: 9 callbacks suppressed [ 745.871757][T20435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3487'. [ 745.900345][T20431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.920230][T20431] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 745.988992][T20435] ------------[ cut here ]------------ [ 745.995588][T20435] !rwb [ 745.995616][T20435] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.4.3487/20435 [ 746.009764][T20435] Modules linked in: [ 746.015043][T20435] CPU: 1 UID: 0 PID: 20435 Comm: syz.4.3487 Not tainted syzkaller #0 PREEMPT(full) [ 746.025004][T20435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.035547][T20435] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 746.042521][T20435] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 bd 7b 25 fd eb 18 e8 b6 7b 25 fd eb 0d e8 af 7b 25 fd 4c 89 ff e8 47 9d 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 96 11 07 [ 746.064245][T20435] RSP: 0018:ffffc900038a6e30 EFLAGS: 00010282 [ 746.071208][T20435] RAX: 3ec0106436c85200 RBX: 1ffff1100ababb04 RCX: 0000000000000046 [ 746.079822][T20435] RDX: 0000000000000006 RSI: ffffffff8df20a53 RDI: ffffffff8c27b500 [ 746.088452][T20435] RBP: dffffc0000000000 R08: ffffffff90112bb7 R09: 1ffffffff2022576 [ 746.097846][T20435] R10: dffffc0000000000 R11: fffffbfff2022577 R12: ffff888055d5d820 [ 746.106420][T20435] R13: 0000000000000000 R14: ffff88807e5b7000 R15: ffff888055d5d800 [ 746.115237][T20435] FS: 00007f81323056c0(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 746.124853][T20435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.131578][T20435] CR2: 000055556469b9e8 CR3: 000000007e09a000 CR4: 00000000003526f0 [ 746.140140][T20435] Call Trace: [ 746.144197][T20435] [ 746.147994][T20435] blk_register_queue+0x382/0x430 [ 746.154705][T20435] __add_disk+0x677/0xd50 [ 746.159367][T20435] ? down_read+0x272/0x2e0 [ 746.164479][T20435] add_disk_fwnode+0xfb/0x480 [ 746.169212][T20435] nbd_dev_add+0x72c/0xb50 [ 746.174442][T20435] ? __pfx_nbd_dev_add+0x10/0x10 [ 746.180145][T20435] ? bpf_lsm_capable+0x9/0x20 [ 746.185356][T20435] ? security_capable+0x7e/0x2c0 [ 746.190524][T20435] ? radix_tree_lookup+0x25c/0x290 [ 746.195867][T20435] nbd_genl_connect+0x962/0x1cf0 [ 746.200846][T20435] ? __pfx___nla_validate_parse+0x10/0x10 [ 746.206767][T20435] ? __pfx_nbd_genl_connect+0x10/0x10 [ 746.212188][T20435] ? rcu_is_watching+0x15/0xb0 [ 746.217723][T20435] ? trace_kmalloc+0x2a/0x110 [ 746.222560][T20435] ? __nla_parse+0x40/0x60 [ 746.227110][T20435] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 746.233521][T20435] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 746.239985][T20435] genl_family_rcv_msg_doit+0x22a/0x330 [ 746.246088][T20435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 746.252210][T20435] ? __lock_acquire+0x6b5/0x2cf0 [ 746.257380][T20435] genl_rcv_msg+0x61c/0x7a0 [ 746.261953][T20435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.267055][T20435] ? __pfx_nbd_genl_connect+0x10/0x10 [ 746.272554][T20435] ? __lock_acquire+0x6b5/0x2cf0 [ 746.277635][T20435] netlink_rcv_skb+0x232/0x4b0 [ 746.282436][T20435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.287584][T20435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.292949][T20435] ? down_read+0x272/0x2e0 [ 746.297392][T20435] ? genl_rcv+0xd/0x40 [ 746.301579][T20435] genl_rcv+0x28/0x40 [ 746.305667][T20435] netlink_unicast+0x80f/0x9b0 [ 746.310467][T20435] ? __pfx_netlink_unicast+0x10/0x10 [ 746.316727][T20435] ? netlink_sendmsg+0x650/0xb40 [ 746.321699][T20435] ? skb_put+0x11b/0x210 [ 746.326041][T20435] netlink_sendmsg+0x813/0xb40 [ 746.330852][T20435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.336420][T20435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 746.341513][T20435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.347039][T20435] ____sys_sendmsg+0x972/0x9f0 [ 746.351938][T20435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.357336][T20435] ? import_iovec+0x73/0xa0 [ 746.361964][T20435] ___sys_sendmsg+0x2a5/0x360 [ 746.366855][T20435] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.372092][T20435] ? futex_wake+0x4ac/0x580 [ 746.376738][T20435] ? __fget_files+0x2a/0x420 [ 746.381441][T20435] ? __fget_files+0x3a0/0x420 [ 746.388235][T20435] __x64_sys_sendmsg+0x1bd/0x2a0 [ 746.393799][T20435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.399380][T20435] ? rcu_is_watching+0x15/0xb0 [ 746.404396][T20435] do_syscall_64+0x14d/0xf80 [ 746.409191][T20435] ? trace_irq_disable+0x3b/0x150 [ 746.414389][T20435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.420649][T20435] ? clear_bhb_loop+0x40/0x90 [ 746.425470][T20435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.431407][T20435] RIP: 0033:0x7f813139c799 [ 746.435908][T20435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.455815][T20435] RSP: 002b:00007f8132305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.464824][T20435] RAX: ffffffffffffffda RBX: 00007f8131615fa0 RCX: 00007f813139c799 [ 746.472804][T20435] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 746.481190][T20435] RBP: 00007f8131432c99 R08: 0000000000000000 R09: 0000000000000000 [ 746.489268][T20435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.497392][T20435] R13: 00007f8131616038 R14: 00007f8131615fa0 R15: 00007ffc270c3348 [ 746.505541][T20435] [ 746.508677][T20435] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 746.516229][T20435] CPU: 1 UID: 0 PID: 20435 Comm: syz.4.3487 Not tainted syzkaller #0 PREEMPT(full) [ 746.525611][T20435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.535663][T20435] Call Trace: [ 746.539025][T20435] [ 746.541972][T20435] vpanic+0x56c/0xa60 [ 746.545978][T20435] ? __pfx__printk+0x10/0x10 [ 746.550655][T20435] ? __pfx_vpanic+0x10/0x10 [ 746.555345][T20435] ? is_bpf_text_address+0x292/0x2b0 [ 746.560624][T20435] ? is_bpf_text_address+0x26/0x2b0 [ 746.565815][T20435] panic+0xc5/0xd0 [ 746.569540][T20435] ? __pfx_panic+0x10/0x10 [ 746.573979][T20435] __warn+0x315/0x4f0 [ 746.577956][T20435] ? wbt_init_enable_default+0x18a/0x220 [ 746.583584][T20435] ? wbt_init_enable_default+0x18a/0x220 [ 746.589211][T20435] __report_bug+0x29a/0x540 [ 746.593708][T20435] ? netlink_rcv_skb+0x232/0x4b0 [ 746.598815][T20435] ? genl_rcv+0x28/0x40 [ 746.603049][T20435] ? netlink_unicast+0x80f/0x9b0 [ 746.607984][T20435] ? wbt_init_enable_default+0x18a/0x220 [ 746.613789][T20435] ? __pfx___report_bug+0x10/0x10 [ 746.618906][T20435] ? wbt_init_enable_default+0x18a/0x220 [ 746.624532][T20435] report_bug+0x16a/0x220 [ 746.629035][T20435] ? wbt_init_enable_default+0x18a/0x220 [ 746.634751][T20435] ? wbt_init_enable_default+0x18c/0x220 [ 746.640401][T20435] handle_bug+0x9c/0x200 [ 746.644638][T20435] exc_invalid_op+0x1a/0x50 [ 746.649398][T20435] asm_exc_invalid_op+0x1a/0x20 [ 746.654333][T20435] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 746.660577][T20435] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 bd 7b 25 fd eb 18 e8 b6 7b 25 fd eb 0d e8 af 7b 25 fd 4c 89 ff e8 47 9d 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 96 11 07 [ 746.680535][T20435] RSP: 0018:ffffc900038a6e30 EFLAGS: 00010282 [ 746.686611][T20435] RAX: 3ec0106436c85200 RBX: 1ffff1100ababb04 RCX: 0000000000000046 [ 746.694665][T20435] RDX: 0000000000000006 RSI: ffffffff8df20a53 RDI: ffffffff8c27b500 [ 746.702720][T20435] RBP: dffffc0000000000 R08: ffffffff90112bb7 R09: 1ffffffff2022576 [ 746.710766][T20435] R10: dffffc0000000000 R11: fffffbfff2022577 R12: ffff888055d5d820 [ 746.718911][T20435] R13: 0000000000000000 R14: ffff88807e5b7000 R15: ffff888055d5d800 [ 746.727006][T20435] blk_register_queue+0x382/0x430 [ 746.732137][T20435] __add_disk+0x677/0xd50 [ 746.736480][T20435] ? down_read+0x272/0x2e0 [ 746.740890][T20435] add_disk_fwnode+0xfb/0x480 [ 746.745572][T20435] nbd_dev_add+0x72c/0xb50 [ 746.750084][T20435] ? __pfx_nbd_dev_add+0x10/0x10 [ 746.755034][T20435] ? bpf_lsm_capable+0x9/0x20 [ 746.759705][T20435] ? security_capable+0x7e/0x2c0 [ 746.764653][T20435] ? radix_tree_lookup+0x25c/0x290 [ 746.769787][T20435] nbd_genl_connect+0x962/0x1cf0 [ 746.774910][T20435] ? __pfx___nla_validate_parse+0x10/0x10 [ 746.780641][T20435] ? __pfx_nbd_genl_connect+0x10/0x10 [ 746.786048][T20435] ? rcu_is_watching+0x15/0xb0 [ 746.790907][T20435] ? trace_kmalloc+0x2a/0x110 [ 746.795582][T20435] ? __nla_parse+0x40/0x60 [ 746.800003][T20435] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 746.806598][T20435] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 746.812947][T20435] genl_family_rcv_msg_doit+0x22a/0x330 [ 746.818583][T20435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 746.824655][T20435] ? __lock_acquire+0x6b5/0x2cf0 [ 746.829596][T20435] genl_rcv_msg+0x61c/0x7a0 [ 746.834199][T20435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.839218][T20435] ? __pfx_nbd_genl_connect+0x10/0x10 [ 746.844585][T20435] ? __lock_acquire+0x6b5/0x2cf0 [ 746.849710][T20435] netlink_rcv_skb+0x232/0x4b0 [ 746.854824][T20435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 746.859871][T20435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.865259][T20435] ? down_read+0x272/0x2e0 [ 746.869788][T20435] ? genl_rcv+0xd/0x40 [ 746.873852][T20435] genl_rcv+0x28/0x40 [ 746.877823][T20435] netlink_unicast+0x80f/0x9b0 [ 746.882794][T20435] ? __pfx_netlink_unicast+0x10/0x10 [ 746.888076][T20435] ? netlink_sendmsg+0x650/0xb40 [ 746.893016][T20435] ? skb_put+0x11b/0x210 [ 746.897460][T20435] netlink_sendmsg+0x813/0xb40 [ 746.902235][T20435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.907532][T20435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 746.912576][T20435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.917963][T20435] ____sys_sendmsg+0x972/0x9f0 [ 746.922733][T20435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.928063][T20435] ? import_iovec+0x73/0xa0 [ 746.932643][T20435] ___sys_sendmsg+0x2a5/0x360 [ 746.937316][T20435] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.942510][T20435] ? futex_wake+0x4ac/0x580 [ 746.947203][T20435] ? __fget_files+0x2a/0x420 [ 746.951791][T20435] ? __fget_files+0x3a0/0x420 [ 746.956474][T20435] __x64_sys_sendmsg+0x1bd/0x2a0 [ 746.961406][T20435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 746.966869][T20435] ? rcu_is_watching+0x15/0xb0 [ 746.971730][T20435] do_syscall_64+0x14d/0xf80 [ 746.976323][T20435] ? trace_irq_disable+0x3b/0x150 [ 746.981358][T20435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.987425][T20435] ? clear_bhb_loop+0x40/0x90 [ 746.992098][T20435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.998078][T20435] RIP: 0033:0x7f813139c799 [ 747.002488][T20435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.022262][T20435] RSP: 002b:00007f8132305028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.030762][T20435] RAX: ffffffffffffffda RBX: 00007f8131615fa0 RCX: 00007f813139c799 [ 747.038735][T20435] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 747.046693][T20435] RBP: 00007f8131432c99 R08: 0000000000000000 R09: 0000000000000000 [ 747.054669][T20435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.062721][T20435] R13: 00007f8131616038 R14: 00007f8131615fa0 R15: 00007ffc270c3348 [ 747.070699][T20435] [ 747.074118][T20435] Kernel Offset: disabled [ 747.078433][T20435] Rebooting in 86400 seconds..