last executing test programs: 7.689061255s ago: executing program 0 (id=2700): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 4.139306151s ago: executing program 0 (id=2740): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87585d85da215305627e5695c108", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$packet(0x11, 0x2, 0x300) socket(0x1d, 0x4, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 2.636495624s ago: executing program 1 (id=2752): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) (async) r4 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async) socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) (async) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x30, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r0) (async) r11 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r10, 0x8, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x44000) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001b00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (rerun: 64) 1.991686178s ago: executing program 1 (id=2754): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f00000005c0)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c91"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000029000000340000007f0000000000000014000000000000002900000008000000bf000000000000001400000000000000290000000b000000000000020000000024000000000000002900000032000000fe80000000000000000000000000001c", @ANYRES32=0x0, @ANYBLOB="00000000140000000010000029000d074200003400000000fcffff00000000"], 0x88}}], 0x2, 0x2400c044) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000800)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000e40)=""/240, 0xf0}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000500)}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f0000000900)=""/30, 0x18}, {&(0x7f0000000a80)=""/151}], 0x10000000000000f3}, 0x7}], 0x1, 0x22, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x240000c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 1.984395903s ago: executing program 4 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r4, 0xaedf}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.666302652s ago: executing program 4 (id=2758): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a231", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) r1 = socket(0x8000000010, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0x37}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x27b}, {&(0x7f0000000cc0)="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", 0xe2c}], 0x5, 0x0, 0x0, 0x4001}], 0x1, 0x48800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x30, r1, 0x7f82f000) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) write(r1, &(0x7f00000002c0)="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", 0xfc) 1.528186211s ago: executing program 1 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae0000000800024039000001080001"], 0xb4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.341236369s ago: executing program 3 (id=2762): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x4, 0x7}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x8001, 0x5, 0x2, 0x5, 0x804, 0x0, 0xffffffff, 0x80, r4}, &(0x7f0000000300)=0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x58, r2, 0x405, 0x70bd27, 0x25dfdbfa, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 1.151940943s ago: executing program 4 (id=2763): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async, rerun: 32) syz_emit_ethernet(0xd6, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f5d8ff00a03c00fe800000000000ffff000000000000aaff0200000000000000000000000000010003000000000000c910fc"], 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket(0x2c, 0x2, 0x5) 1.040145827s ago: executing program 4 (id=2765): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000000740)=[{&(0x7f0000000540)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="5a0244584ec82214fdb20c1b407d1779ebc4f6d587a0efd21b1e6f31fed8f43f84240ae2ca54d920342dcdbafbc4f4942f7826ef08cd894db5026d0780b94b481f3bfb95736cdd5a678828eb819532ba25d44a16607ae32dfad3b68918b094f24166570c9fd50d3ea7", 0x69}, {&(0x7f0000000600)="94b07c74580f2665bf728c2d505cb61e273be7ee7308b91cc6d25a37adcb152440603da65cf6caeb0e07b4eb0b16e1c6f6d2a3cfcab94f2ee8930222c7acff0ba2d5f834e4da25726c4a63c14d8995bc534f3037cd3bc1aa8c9ff59a1f55d85e1cb9782694863374bd199549fe47b39f81af2a8103ecd9ca5566835ff87aa1600488629da85d0ca89da1932ccf339e01626b124c83ad074723197e63f4b6b6af2d550bcd7173ba40f4ddd898db4f39f8c91a8319a134e05d60304b60f80e4963b57179ccc353f2d81c3043f43d03829acce19c4a3d41aca677888b2ac2a3da12d38a4f", 0xe3}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x48800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x14, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xfff1, 0xd}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_delrule={0x74, 0x21, 0x22, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x14, 0xd, 0x8, 0x0, 0x0, 0x6, 0x1b}, [@FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}, @FRA_DST={0x14, 0x1, @private2}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000200000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 1.029563134s ago: executing program 3 (id=2766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000400"], 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b70400000000000085000000"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.012240194s ago: executing program 2 (id=2767): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet(0x2, 0x6, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080)=0x8, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) 951.522771ms ago: executing program 1 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r1, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x3af, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "8bae73", 0x371, 0x21, 0xff, @remote, @private1, {[@fragment={0x2f, 0x0, 0x8, 0x1, 0x0, 0x5, 0x67}, @hopopts={0x2f, 0x34, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x1, [0xbaf, 0x0, 0x8, 0x80000000, 0x4, 0x7, 0xc, 0x7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x6, 0x7}}, @generic={0xc, 0x4f, "a6e223f73e55e4fd86d440b5134912a35bb5aecec81fa23df4ec82ca05623b0134e9c016ca67d3f4f404d143d9a3b2fb928d5f8119ced2f0ebcddc0f530028b04ab454ef34c944dab3b12c347a4354"}, @generic={0x2, 0xda, "bdd7498420e1a04ff2c78ba0d238f93741945edae60c944939537d511ec70c8c12d4e13417d5538cfc710205526e600bed2fd75f9394e56c0e56a76b4fb25dfc75ff48bff944273bbda0b66bf83d8c0b73d459779423fbf3f144db9976b623a8b052ba078edc371e5f5b4e6c7210a3e54acd6e8642a59debba66f218756fce2b0be9d63b1d3b58cce6e471be1613280eb0f76a29619432d92a6b2def2ad1a141a8d192bf67ed25d6cc513d90667144576114c23f51a2a4ea27836be9e4c9aad08c838e6c3c4efeb0ab4fbdf5695c86c8c4e0260583edbac9aea2"}]}, @dstopts={0x3b, 0x0, '\x00', [@pad1]}, @fragment={0x87, 0x0, 0x6, 0x0, 0x0, 0x5, 0x64}, @fragment={0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x66}, @srh={0x8, 0x14, 0x4, 0xa, 0xe, 0x20, 0x401, [@private1, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @empty}]}, @dstopts={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @pad1]}, @srh={0x0, 0x8, 0x4, 0x4, 0x2, 0xc, 0x3, [@private0, @private1, @empty, @local]}], {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x6, "a4d33b", 0x0, "34f11a"}, "86ca42a874dec7caf8a0d87f7d9d57ea4b9ef64a1dc7a31008c36ede36c952186e39d1061cf6576780658062bfcea6b207d6fdd633c4b1f5601c7fdf6c9711c76c52d9e2855d56add8868ed312041e8c018553a190b1d2ca96bc03e249adbd0bf5ef4460053af0da8ae297cee42bc2631b45cff8f7db31eeb6faa6859a6e2a0239a819aee32d98e1d2"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_emit_ethernet(0x3af, &(0x7f0000000000)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "8bae73", 0x371, 0x21, 0xff, @remote, @private1, {[@fragment={0x2f, 0x0, 0x8, 0x1, 0x0, 0x5, 0x67}, @hopopts={0x2f, 0x34, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x1, [0xbaf, 0x0, 0x8, 0x80000000, 0x4, 0x7, 0xc, 0x7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x6, 0x7}}, @generic={0xc, 0x4f, "a6e223f73e55e4fd86d440b5134912a35bb5aecec81fa23df4ec82ca05623b0134e9c016ca67d3f4f404d143d9a3b2fb928d5f8119ced2f0ebcddc0f530028b04ab454ef34c944dab3b12c347a4354"}, @generic={0x2, 0xda, "bdd7498420e1a04ff2c78ba0d238f93741945edae60c944939537d511ec70c8c12d4e13417d5538cfc710205526e600bed2fd75f9394e56c0e56a76b4fb25dfc75ff48bff944273bbda0b66bf83d8c0b73d459779423fbf3f144db9976b623a8b052ba078edc371e5f5b4e6c7210a3e54acd6e8642a59debba66f218756fce2b0be9d63b1d3b58cce6e471be1613280eb0f76a29619432d92a6b2def2ad1a141a8d192bf67ed25d6cc513d90667144576114c23f51a2a4ea27836be9e4c9aad08c838e6c3c4efeb0ab4fbdf5695c86c8c4e0260583edbac9aea2"}]}, @dstopts={0x3b, 0x0, '\x00', [@pad1]}, @fragment={0x87, 0x0, 0x6, 0x0, 0x0, 0x5, 0x64}, @fragment={0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x66}, @srh={0x8, 0x14, 0x4, 0xa, 0xe, 0x20, 0x401, [@private1, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @empty}]}, @dstopts={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @pad1]}, @srh={0x0, 0x8, 0x4, 0x4, 0x2, 0xc, 0x3, [@private0, @private1, @empty, @local]}], {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x6, "a4d33b", 0x0, "34f11a"}, "86ca42a874dec7caf8a0d87f7d9d57ea4b9ef64a1dc7a31008c36ede36c952186e39d1061cf6576780658062bfcea6b207d6fdd633c4b1f5601c7fdf6c9711c76c52d9e2855d56add8868ed312041e8c018553a190b1d2ca96bc03e249adbd0bf5ef4460053af0da8ae297cee42bc2631b45cff8f7db31eeb6faa6859a6e2a0239a819aee32d98e1d2"}}}}}}, 0x0) (async) 942.490645ms ago: executing program 0 (id=2769): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) 863.574367ms ago: executing program 4 (id=2770): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x10, {{0x29, 0x0, 0x3e000000, @dev={0xfe, 0x80, '\x00', 0xd}, 0x400}}}, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r0, &(0x7f0000000500)="cfa4687c1f2c1e57d1213c37446b53c011aff135d3a0a4d96bfc53a6fbf85807b6b9c4632e0e9c31c32bde3062a773243e3473620c5274508a423c684a0395cacf0778e62e8009ad2b76a536dfeb1da3a10ed7dc3ac4a1a14581a92bb715b6fd41f8da2ba0b5d776c320725aa4e80f434b782d5173c409beeebe1b9d81857f5a2fbdd5a443fb34495c51523003", 0x8d, 0x4040, &(0x7f0000000100)={0xa, 0x4e23, 0xfff, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x700, 0x40, 0x9, 0x800, {{0x15, 0x4, 0x1, 0x22, 0x54, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_prespec={0x44, 0x1c, 0x6a, 0x3, 0x9, [{@private=0xa010102, 0x4}, {@private=0xa010101, 0x7b79}, {@loopback, 0x5}]}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @rr={0x7, 0x7, 0x5e, [@private=0xa010102]}, @timestamp={0x44, 0x4, 0xa7}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) sendfile(r4, r6, &(0x7f0000000240)=0x6, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) 812.087597ms ago: executing program 1 (id=2771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffea8}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) (async) syz_emit_ethernet(0xae, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x1, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2202"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "437d65c32f71"}]}}}}}}, 0x0) 810.283219ms ago: executing program 3 (id=2772): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async, rerun: 32) r4 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0xe5, @empty, 0x4e21, 0x2, 'wrr\x00', 0x2, 0x9, 0x61}, 0x2c) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f740e9830000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000002fedbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="05003500340005000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf25240000000a0001007770614a6f000000"], 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) (async, rerun: 64) r10 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r11) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010025bd7000fddbdf251300000008000100", @ANYRES32=0x0, @ANYBLOB="b8f7eb0aaba44df8c16acb450a63d98f56289320ef027eca9c057d0eb852284cf7732724"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r11, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="0d0725bd7000ffdbdf251f0000000ced050003000000000000005df206ac355687562ed44940", @ANYRES32=0x0, @ANYRES32=r13], 0x2c}, 0x1, 0x0, 0x0, 0x44022}, 0x2400e080) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000480)=0x20) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async, rerun: 32) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000500)=""/33, 0x1003000, 0x1800, 0x2, 0x1}, 0x20) (rerun: 32) r15 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r15, 0x0, 0x34004811) 763.664548ms ago: executing program 0 (id=2773): r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 727.628013ms ago: executing program 2 (id=2774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000003c0)) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x6c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x73}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x37}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000014}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000280)="8000398d3b160bd2", 0x8, 0x90, &(0x7f0000000000)={0xa, 0x4e20, 0x77ffffff, @loopback, 0x8001}, 0x1c) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x40020040, 0x0) listen(r1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x988f, 0x9, 0x7, 0x7aa0ffec}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 672.019011ms ago: executing program 1 (id=2775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r10, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket$pppoe(0x18, 0x1, 0x0) 616.266745ms ago: executing program 0 (id=2776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c91"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000200)="647a656a951ec30fb81209747de07b0352a7d2818592dcca2459", 0x1a}, {&(0x7f0000000840)="bbb7e266f28da590162a3e32f1c85fc8e80276f8c657a7010f56ad4591f4091179bdb656ff3ed04d1a96f102e2ce8b997019e461a9b4a8cb2460674fdbd41927f804c521bae8b6bab6cc8e67c12cb57d1cdf59e06aeffc683ed726694673959e8d913f83caca2284d4f2ab4431624d8957d239a1a17d4e04296bde6e2b6e0324d7fb8feedf5537be5ab4a8e989765d5646e0cb452f747103e86cc69757bf1317719eb707e142c3ff69bbc65211767f71f5c13db4c022aab29e9e5a9d7ae777960ceb219c2bfc3ea03bbd35fa1f021d840770355a2d91a1c2307ac6adee1e1eb3c39666d974d5deb9be835a308b", 0xed}, {&(0x7f0000000240)="407413c79facf2766d9d13a6c26aca20437c8395b74e473dee5aa9993f63580681c4872f70651abad59e3602220da1", 0x2f}, {&(0x7f0000000980)="4fc0884b0394b68e8f477fbbb3581d6aa0fed73981d6b8ac8818d31b4b094b712e4df3a441d055e5cc57eb5065c03a3aa7d11fe36b1601714071962597f32de455f3df9837f49add5e2c337f964ed88102d3f8272cf09a5905d46a7c4719461766c6867171ed269f1ae65e1447453b53ae120eeec0a6bceaec88065eec3cf5015219f32f256f63b66e96978933360b98f4f237362495eae175e41e125bf3ce023f3d8e25c24a11c39e1ea06aa851447ffa90b8ef359f2d4a5c220c3c26c7c8f5", 0xc0}, {&(0x7f0000000ac0)="b0d83299bf203cf82a3897feb6aec8543c8abd4dafa7762bdd6ea09ee352210878c0f795c1f7107d4af25d91a6be74e658a345b0ae315ef7af669701632dc94e8fe18de1d4b6d57b2a2770f095abc3aa65c035877e5a5d32b49d9ff238ce1b6442cf9f9ac8659a2147982c854fc3d51f7429d3ad200a2635093e20781da19a5fc474814040a3313af6ed80f5a4dd1c4a8699464b4822f0203d90100c8ed80212c97546878c5be8a3f515b7332b79107a2e3c964d8deff6ba783c3f49017469fac5a877724b51adb4bbdc081b4ee1bd08ef9863468a1fb4092d27c1c74a1cbfbc5abbf8879525a6466b9cb3c507a4e0badc29ec", 0xf3}], 0x5}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x786ba9af, @private0, 0x7}, 0x1c, &(0x7f00000006c0), 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="000000001400000000000000290000003400000000fcffff00000000", @ANYRES8=r1], 0x88}}], 0x2, 0x2400c044) shutdown(r2, 0x1) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000480)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket(0x15, 0x5, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000100)=0x1974424c, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@gettfilter={0x54, 0x2e, 0x708, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x9, 0xffff}, {0x3, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x5c77db9e}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x1}]}, 0x54}}, 0xc000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000002000ffdbdf2501000000140002007767310000000000000000000000000038000880340000800600b000080d000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000980"], 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000001c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 608.217411ms ago: executing program 3 (id=2777): socket$inet6(0xa, 0x80003, 0xff) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3983}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) 552.082759ms ago: executing program 2 (id=2778): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800110101000000000000000a000000000200081c010000060012"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x249}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000040)=0xfffffffd, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x71, &(0x7f0000000840)}, 0xfffffffffffffd71) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000000000105000000080000000000000001000003"], 0x0, 0x5a, 0x0, 0x0, 0x100}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r5, 0x7, 0x8000, 0x85, 0x1, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x1, [{@loopback, 0x91cf}]}, @noop]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b7ffffff1000010800"/20, @ANYRES32=r9, @ANYBLOB="3121020000df0000c8ed83b5ec1454dfc6e458a9d538d72d7d1f94d5c478e00d2772ebdf2f708e1fab98e5174a90468de3abd681a3d915818949266d8c048c69dce4981cd2e97730487f5a403b7521e1a670469be547c26724fcb1492f0394b424f80c41d9e8ca41d251f309f644c6d38cc48bfd2a4c188780bde9b65d21bd35"], 0x60}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000611274000000000095"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r10, 0x27f8) (async) accept4$x25(r10, 0x0, 0x0, 0x0) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r11, 0x0, 0x6}, 0x18) 333.677903ms ago: executing program 3 (id=2779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010035bd7000fcdbdf2500000006", @ANYRES32=r1, @ANYBLOB="818c040001800700340016801800018014000a00000000800000000000000000000000001800018014000a000700000000000000090000000000000008000400ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) r4 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r2, r3, r4}, 0xc) 313.655166ms ago: executing program 2 (id=2780): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000000740)=[{&(0x7f0000000540)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="5a0244584ec82214fdb20c1b407d1779ebc4f6d587a0efd21b1e6f31fed8f43f84240ae2ca54d920342dcdbafbc4f4942f7826ef08cd894db5026d0780b94b481f3bfb95736cdd5a678828eb819532ba25d44a16607ae32dfad3b68918b094f24166570c9fd50d3ea7", 0x69}, {&(0x7f0000000600)="94b07c74580f2665bf728c2d505cb61e273be7ee7308b91cc6d25a37adcb152440603da65cf6caeb0e07b4eb0b16e1c6f6d2a3cfcab94f2ee8930222c7acff0ba2d5f834e4da25726c4a63c14d8995bc534f3037cd3bc1aa8c9ff59a1f55d85e1cb9782694863374bd199549fe47b39f81af2a8103ecd9ca5566835ff87aa1600488629da85d0ca89da1932ccf339e01626b124c83ad074723197e63f4b6b6af2d550bcd7173ba40f4ddd898db4f39f8c91a8319a134e05d60304b60f80e4963b57179ccc353f2d81c3043f43d03829acce19c4a3d41aca677888b2ac2a3da12d38a4f", 0xe3}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x48800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x14, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xfff1, 0xd}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_delrule={0x74, 0x21, 0x22, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x14, 0xd, 0x8, 0x0, 0x0, 0x6, 0x1b}, [@FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}, @FRA_DST={0x14, 0x1, @private2}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000001000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 253.127845ms ago: executing program 4 (id=2781): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000002030300000000000000000002000001fc000540bd0f22ce0800047163bc4000cf742f2676124ac4beddcb72c7ca"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x880) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r5], 0x21c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0xfffffffffffffca3}}, 0x4000) r10 = getpid() r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r11) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r12, 0x72b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x2, 0x2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r14, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r5, &(0x7f00000006c0)=r10, 0x12) 203.450632ms ago: executing program 0 (id=2782): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0xc000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket(0x10, 0x803, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='+n\x00c<'], 0x5) r6 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38fbffff0f160104ffffffffff", @ANYRES32=r7, @ANYBLOB="0000000014110000180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, 0x40008}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x800007}}, 0x10) unshare(0x2c020400) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x1, 0x4a}, 0x2c) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) 142.164322ms ago: executing program 2 (id=2783): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000004c00350000000000000000000c0029"], 0x83}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001200010000000000000000001c0000004c00350000000000000000000c0029"], 0x83}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x1, 0x2, 0x7f, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x1, 0x2, 0x7f, 0x7}, 0x20) 117.14263ms ago: executing program 3 (id=2784): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x300, 0x0, 0x25dfdbfb, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="257c0100000065666efda463d8", 0xd}, {&(0x7f0000000540)="0d763c2ffdae045976a5fc3bec1a35a5e4ac8ee4", 0x14}], 0x2, 0x0, 0x0, 0x4c840}, 0x4000001) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f00000004c0)=""/95, 0x5f}, 0xfffffffc}], 0x1, 0x12260, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000002000000030000005800018044000400200001000a000004000000000000000000000000005885d6a76549ccd9000000200002000a00000000000000fe8000000000000000000000000000bb000000000d000100756470"], 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x24008840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) r9 = socket(0x1, 0x5, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x8c, r8, 0x39cd53c16ec7ec96, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xf17, 0x63}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="74d2012f89895a110bbe7f3d6de2059d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "5a9b997b91a12628c1487a533b1bfd04"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2b07bf19c22f"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100feffffff000000005c00000008000300", @ANYRES32=r13, @ANYBLOB="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"], 0x1c}}, 0x8000) 0s ago: executing program 2 (id=2785): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x4}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000000)=0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r4, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (async) kernel console output (not intermixed with test programs): have been left with an inconsistent configuration, please check. [ 242.272044][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 242.281833][T12020] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.328567][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.474353][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 242.616938][T12023] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.880763][T12034] netlink: 'syz.2.1524': attribute type 39 has an invalid length. [ 242.955860][T12038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1524'. [ 242.968316][T12038] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1524'. [ 242.979096][T12038] netlink: 'syz.2.1524': attribute type 5 has an invalid length. [ 242.988882][T12038] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1524'. [ 243.103328][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 243.379705][T11998] lo speed is unknown, defaulting to 1000 [ 243.387649][T11998] lo speed is unknown, defaulting to 1000 [ 243.394417][T12020] lo speed is unknown, defaulting to 1000 [ 243.408452][T11999] lo speed is unknown, defaulting to 1000 [ 243.837410][T12063] ip6gretap2: entered promiscuous mode [ 243.851023][T12023] lo speed is unknown, defaulting to 1000 [ 243.905331][T12065] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 243.946227][T12065] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 244.005125][T12020] lo speed is unknown, defaulting to 1000 [ 244.318125][T12086] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 244.499924][T11999] lo speed is unknown, defaulting to 1000 [ 244.579109][T12096] netlink: 'syz.3.1540': attribute type 21 has an invalid length. [ 244.973235][T12023] lo speed is unknown, defaulting to 1000 [ 245.100288][T12115] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 245.174078][T12120] __nla_validate_parse: 5 callbacks suppressed [ 245.174097][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 245.211341][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 245.214195][T12119] sctp: [Deprecated]: syz.3.1545 (pid 12119) Use of int in max_burst socket option. [ 245.214195][T12119] Use struct sctp_assoc_value instead [ 245.229676][T12115] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 245.243801][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1544'. [ 245.365707][T12112] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.414039][T12112] lo speed is unknown, defaulting to 1000 [ 246.423053][T12130] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.474192][T12112] lo speed is unknown, defaulting to 1000 [ 246.849128][T12130] lo speed is unknown, defaulting to 1000 [ 246.953775][T12130] lo speed is unknown, defaulting to 1000 [ 247.153247][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 247.764972][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 247.765880][T12156] virt_wifi0 speed is unknown, defaulting to 1000 [ 248.432002][T12156] lo speed is unknown, defaulting to 1000 [ 248.451975][T12156] lo speed is unknown, defaulting to 1000 [ 248.596586][T12184] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 248.853523][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 249.358239][T12219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 249.542126][T12227] netlink: 'syz.0.1576': attribute type 33 has an invalid length. [ 249.557632][T12227] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1576'. [ 249.575028][T12230] netlink: 'syz.0.1576': attribute type 33 has an invalid length. [ 249.593932][T12230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1576'. [ 250.284781][T12251] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.334187][T12254] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.383680][T12260] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.384436][T12258] veth0: entered promiscuous mode [ 250.459905][T12267] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1587'. [ 250.489535][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 250.662388][T12270] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.845686][T12251] lo speed is unknown, defaulting to 1000 [ 250.853948][T12251] lo speed is unknown, defaulting to 1000 [ 250.994290][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 251.009377][T12258] veth0: left promiscuous mode [ 251.090318][T12292] nbd: must specify a device to reconfigure [ 251.309373][T12254] lo speed is unknown, defaulting to 1000 [ 251.396216][T12254] lo speed is unknown, defaulting to 1000 [ 251.418298][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 251.843865][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1599'. [ 251.872437][T12260] lo speed is unknown, defaulting to 1000 [ 252.141013][T12260] lo speed is unknown, defaulting to 1000 [ 252.511693][T12270] lo speed is unknown, defaulting to 1000 [ 252.511741][T12335] virt_wifi0 speed is unknown, defaulting to 1000 [ 252.888783][T12349] netlink: 'syz.1.1604': attribute type 3 has an invalid length. [ 252.897797][T12349] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 252.905625][T12349] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1604'. [ 253.160442][T12357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1605'. [ 253.310042][T12270] lo speed is unknown, defaulting to 1000 [ 253.310868][T12335] lo speed is unknown, defaulting to 1000 [ 253.452108][T12335] lo speed is unknown, defaulting to 1000 [ 253.687670][T12357] siw: device registration error -23 [ 253.878063][T12363] netlink: 'syz.1.1606': attribute type 9 has an invalid length. [ 253.886669][T12363] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1606'. [ 254.077383][T12368] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1608'. [ 254.088511][T12368] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1608'. [ 254.470794][T12375] siw: device registration error -23 [ 254.709717][T12378] syzkaller1: entered promiscuous mode [ 254.715218][T12378] syzkaller1: entered allmulticast mode [ 255.636981][T12416] vlan0: entered promiscuous mode [ 255.642069][T12416] team0: entered promiscuous mode [ 255.652982][T12416] team_slave_0: entered promiscuous mode [ 255.677995][T12416] team_slave_1: entered promiscuous mode [ 255.695006][T12416] vlan0: entered allmulticast mode [ 255.700033][T12421] netlink: 'syz.1.1623': attribute type 15 has an invalid length. [ 255.708168][T12416] team0: entered allmulticast mode [ 255.708191][T12416] team_slave_0: entered allmulticast mode [ 255.708207][T12416] team_slave_1: entered allmulticast mode [ 255.729050][T12421] netlink: 'syz.1.1623': attribute type 17 has an invalid length. [ 255.731338][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753948][T12421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.846941][T12425] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.012209][T12437] IPVS: length: 22 != 8 [ 256.084286][T12430] netlink: 'syz.2.1626': attribute type 5 has an invalid length. [ 256.140043][T12443] __nla_validate_parse: 8 callbacks suppressed [ 256.140062][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 256.274572][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1629'. [ 256.319099][T12406] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 256.334952][T12425] lo speed is unknown, defaulting to 1000 [ 256.342848][T12425] lo speed is unknown, defaulting to 1000 [ 256.545935][T12447] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.777417][T12458] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1633'. [ 256.953861][T12447] lo speed is unknown, defaulting to 1000 [ 256.980256][T12447] lo speed is unknown, defaulting to 1000 [ 257.009296][T12440] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 257.059067][T12468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1635'. [ 257.110475][T12468] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.191164][T12468] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.239759][T12474] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 257.295235][T12474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.310591][T12468] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.387465][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 257.396724][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 257.409726][T12474] veth1: entered promiscuous mode [ 257.425032][T12474] bond4: (slave veth1): Enslaving as an active interface with an up link [ 257.493876][T12477] ip6tnl2: entered promiscuous mode [ 257.532627][T12477] ip6tnl2: entered allmulticast mode [ 257.550554][T12468] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.566814][ T5883] Bluetooth: hci2: command 0x0401 tx timeout [ 257.627009][T12480] 0ªX¹¦À: left allmulticast mode [ 257.634548][T12480] veth1_to_batadv: left allmulticast mode [ 257.649648][T12480] batadv_slave_1: left promiscuous mode [ 257.661082][T12483] nbd: must specify a device to reconfigure [ 257.671166][T12480] vlan2: left promiscuous mode [ 257.686282][T12480] geneve1: left promiscuous mode [ 257.691959][T12480] vlan2: left allmulticast mode [ 257.701855][T12480] geneve1: left allmulticast mode [ 257.714994][T12480] geneve2: left promiscuous mode [ 257.731858][T12480] geneve2: left allmulticast mode [ 257.750616][T12480] bridge3: left allmulticast mode [ 257.787987][T12480] veth1: left promiscuous mode [ 257.814435][ T9611] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.825417][ T9611] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.889039][ T9611] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.907062][ T9611] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.040515][ T9646] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.076727][ T9646] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.159798][ T9646] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.203205][ T9637] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.211723][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 258.312679][T12510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 258.808866][T12526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1652'. [ 258.907549][T12534] veth0: entered promiscuous mode [ 258.917090][T12534] batadv_slave_0: entered promiscuous mode [ 258.940974][T12534] batman_adv: batadv0: Adding interface: ip6gretap1 [ 258.951184][T12534] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.981187][T12534] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 259.039171][T12533] batadv_slave_0: left promiscuous mode [ 259.047100][T12533] veth0: left promiscuous mode [ 259.494511][T12561] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1663'. [ 259.506690][T12563] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1663'. [ 259.929194][T12573] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.245651][T12573] lo speed is unknown, defaulting to 1000 [ 260.254189][T12573] lo speed is unknown, defaulting to 1000 [ 260.811539][T12601] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.902971][T12613] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 261.308151][T12633] netlink: 'syz.1.1679': attribute type 2 has an invalid length. [ 261.311988][T12601] lo speed is unknown, defaulting to 1000 [ 261.317766][T12633] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 261.324478][T12601] lo speed is unknown, defaulting to 1000 [ 261.337419][T12633] __nla_validate_parse: 4 callbacks suppressed [ 261.337436][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 261.787285][T12650] Bluetooth: MGMT ver 1.23 [ 261.889689][T12658] netlink: 'syz.1.1685': attribute type 13 has an invalid length. [ 261.907505][T12658] netlink: 'syz.1.1685': attribute type 17 has an invalid length. [ 261.959778][T12658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.173124][T12655] virt_wifi0 speed is unknown, defaulting to 1000 [ 262.553097][T12655] lo speed is unknown, defaulting to 1000 [ 262.561514][T12655] lo speed is unknown, defaulting to 1000 [ 262.702030][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1695'. [ 263.046764][T12695] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.172138][T12699] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.667000][T12715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1702'. [ 263.683420][T12715] netlink: 245 bytes leftover after parsing attributes in process `syz.1.1702'. [ 263.717288][T12717] syzkaller1: entered promiscuous mode [ 263.722790][T12717] syzkaller1: entered allmulticast mode [ 263.873464][T12723] netlink: 'syz.1.1703': attribute type 1 has an invalid length. [ 263.974318][T12723] bond5: entered promiscuous mode [ 263.982129][T12723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.991757][T12726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.999095][T12726] IPv6: NLM_F_CREATE should be set when creating new route [ 264.006395][T12726] IPv6: NLM_F_CREATE should be set when creating new route [ 264.014583][T12726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.034826][T12723] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1703'. [ 264.053554][T12724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.063258][T12724] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 264.074450][T12724] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 264.088850][T12724] bond5: (slave wireguard1): making interface the new active one [ 264.096766][T12724] wireguard1: entered promiscuous mode [ 264.105456][T12724] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 264.414062][T12739] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1708'. [ 264.426733][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1708'. [ 264.431880][T12699] lo speed is unknown, defaulting to 1000 [ 264.457105][T12695] lo speed is unknown, defaulting to 1000 [ 264.492829][T12699] lo speed is unknown, defaulting to 1000 [ 264.723639][T12747] virt_wifi0 speed is unknown, defaulting to 1000 [ 265.040664][T12747] lo speed is unknown, defaulting to 1000 [ 265.108023][T12695] lo speed is unknown, defaulting to 1000 [ 265.224029][T12768] bond0: (slave team0): Releasing backup interface [ 265.248705][T12768] batadv0: left allmulticast mode [ 265.254189][T12768] batadv0: left promiscuous mode [ 265.264217][T12768] bridge0: port 2(batadv0) entered disabled state [ 265.285610][T12768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.443067][T12775] netlink: 'syz.1.1714': attribute type 3 has an invalid length. [ 265.491619][T12777] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1715'. [ 265.510150][T12747] lo speed is unknown, defaulting to 1000 [ 265.628373][T12779] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 265.639725][T12779] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 265.956394][T12788] batadv_slave_1: entered promiscuous mode [ 266.012048][T12788] xt_HMARK: spi-set and port-set can't be combined [ 266.169386][T12788] batadv_slave_1: left promiscuous mode [ 266.517976][T12796] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1721'. [ 266.636233][ T97] block nbd0: Possible stuck request ffff888025550000: control (read@0,1024B). Runtime 180 seconds [ 266.647144][ T97] block nbd0: Possible stuck request ffff8880255501c0: control (read@1024,1024B). Runtime 180 seconds [ 266.659070][ T97] block nbd0: Possible stuck request ffff888025550380: control (read@2048,1024B). Runtime 180 seconds [ 266.670925][ T97] block nbd0: Possible stuck request ffff888025550540: control (read@3072,1024B). Runtime 180 seconds [ 266.692692][T12795] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.011070][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 267.020439][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 267.034850][T12800] netlink: 30 bytes leftover after parsing attributes in process `syz.4.1722'. [ 267.156114][T12795] lo speed is unknown, defaulting to 1000 [ 267.175755][T12795] lo speed is unknown, defaulting to 1000 [ 267.861321][T12815] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1726'. [ 267.886823][T12815] netlink: zone id is out of range [ 267.892013][T12815] netlink: get zone limit has 8 unknown bytes [ 268.402523][T12829] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 268.582419][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'. [ 268.680164][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'. [ 268.887485][T12852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1734'. [ 269.380018][T12857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 269.436285][T12861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 269.662871][ T5865] IPVS: starting estimator thread 0... [ 269.768267][T12868] IPVS: using max 32 ests per chain, 76800 per kthread [ 269.848403][T12872] batadv1: entered promiscuous mode [ 269.853649][T12872] batadv1: entered allmulticast mode [ 270.091492][T12877] netlink: 'syz.1.1742': attribute type 7 has an invalid length. [ 270.100580][T12877] netlink: 'syz.1.1742': attribute type 8 has an invalid length. [ 270.128989][T12884] netlink: 'syz.2.1744': attribute type 9 has an invalid length. [ 270.373167][T12890] dvmrp8: entered allmulticast mode [ 270.514655][T12891] virt_wifi0 speed is unknown, defaulting to 1000 [ 270.932022][T12901] bond0: entered promiscuous mode [ 270.938621][T12901] veth1_to_bridge: entered promiscuous mode [ 270.945360][T12901] debugfs: 'hsr1' already exists in 'hsr' [ 270.954846][T12901] Cannot create hsr debugfs directory [ 270.960560][T12901] hsr1: entered promiscuous mode [ 271.169385][T12911] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 271.318300][T12917] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.381711][T12891] lo speed is unknown, defaulting to 1000 [ 271.436502][T12891] lo speed is unknown, defaulting to 1000 [ 271.553439][T12927] IPv6: NLM_F_REPLACE set, but no existing node found! [ 272.397700][T12917] lo speed is unknown, defaulting to 1000 [ 272.494260][T12917] lo speed is unknown, defaulting to 1000 [ 272.643237][T12947] __nla_validate_parse: 5 callbacks suppressed [ 272.643257][T12947] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1759'. [ 273.349642][T12955] team0: Port device team_slave_0 removed [ 273.534122][T12963] delete_channel: no stack [ 273.555962][T12963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1763'. [ 273.908828][T12975] netlink: 'syz.0.1767': attribute type 3 has an invalid length. [ 274.322545][T12994] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 274.390158][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'. [ 274.447007][T12993] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1772'. [ 274.551515][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 274.968190][T13017] netlink: 'syz.3.1780': attribute type 1 has an invalid length. [ 275.036618][T13017] netlink: 'syz.3.1780': attribute type 2 has an invalid length. [ 275.069343][T13017] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.154254][T13031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1784'. [ 275.194187][T13038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1786'. [ 275.207997][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 275.294439][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 275.375306][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1792'. [ 275.491613][T13056] veth0_to_bridge: entered promiscuous mode [ 275.523619][T13072] sctp: [Deprecated]: syz.1.1794 (pid 13072) Use of int in maxseg socket option. [ 275.523619][T13072] Use struct sctp_assoc_value instead [ 275.553306][T13072] siw: device registration error -23 [ 275.559085][T13066] syzkaller1: entered promiscuous mode [ 275.564571][T13066] syzkaller1: entered allmulticast mode [ 275.684804][T13078] sctp: [Deprecated]: syz.3.1797 (pid 13078) Use of int in max_burst socket option. [ 275.684804][T13078] Use struct sctp_assoc_value instead [ 276.021657][T13056] veth0_to_bridge: left promiscuous mode [ 276.049597][T13093] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 276.147154][T13103] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 276.304919][T13103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.399534][ T9644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.456416][ T9644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.187650][T13164] erspan0: left promiscuous mode [ 277.252679][T13164] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.273963][T13164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.496347][T13190] netlink: 'syz.2.1825': attribute type 6 has an invalid length. [ 277.595337][T13199] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 277.607254][T13199] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 277.660305][T13188] virt_wifi0 speed is unknown, defaulting to 1000 [ 277.738783][T13199] netlink: 'syz.1.1828': attribute type 39 has an invalid length. [ 277.754793][T13199] __nla_validate_parse: 7 callbacks suppressed [ 277.754812][T13199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1828'. [ 277.780324][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 277.844968][T13207] virt_wifi0 speed is unknown, defaulting to 1000 [ 277.892842][T13210] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 277.939243][T13188] lo speed is unknown, defaulting to 1000 [ 278.034995][T13213] batadv_slave_1: entered promiscuous mode [ 278.043245][T13213] batman_adv: batadv0: Adding interface: macsec1 [ 278.050102][T13213] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.082178][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.100752][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.111484][T13213] batman_adv: batadv0: Interface activated: macsec1 [ 278.124562][T13188] lo speed is unknown, defaulting to 1000 [ 278.164137][T13207] lo speed is unknown, defaulting to 1000 [ 278.373945][T13226] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 278.650995][T13207] lo speed is unknown, defaulting to 1000 [ 279.048762][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 279.178311][T13257] bond6: entered promiscuous mode [ 279.922092][T13286] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.088689][T13294] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 280.572932][T13312] netlink: 'syz.1.1858': attribute type 4 has an invalid length. [ 280.755373][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 280.817956][T13316] macsec2: entered allmulticast mode [ 280.828840][T13316] bridge0: entered allmulticast mode [ 280.845457][T13316] bridge0: port 2(macsec2) entered blocking state [ 280.863101][T13316] bridge0: port 2(macsec2) entered disabled state [ 280.889171][T13316] bridge0: left allmulticast mode [ 280.926952][T13286] lo speed is unknown, defaulting to 1000 [ 280.957682][T13286] lo speed is unknown, defaulting to 1000 [ 281.133695][T13322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.169048][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 281.205728][T13330] netlink: 'syz.4.1865': attribute type 3 has an invalid length. [ 281.632785][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 281.662922][T13341] virt_wifi0 speed is unknown, defaulting to 1000 [ 282.000836][T13355] syzkaller1: entered promiscuous mode [ 282.021868][T13355] syzkaller1: entered allmulticast mode [ 282.057824][T13341] lo speed is unknown, defaulting to 1000 [ 282.095052][T13341] lo speed is unknown, defaulting to 1000 [ 282.242367][T13367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1876'. [ 282.550089][T13374] netlink: 'syz.4.1878': attribute type 1 has an invalid length. [ 282.569220][T13374] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1878'. [ 282.631663][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 282.691109][T13384] vlan4: entered promiscuous mode [ 282.699232][T13384] erspan0: entered promiscuous mode [ 282.738725][T13385] dvmrp8: entered allmulticast mode [ 282.817687][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 282.925966][T13385] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.599851][T13421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1890'. [ 283.658266][T13385] lo speed is unknown, defaulting to 1000 [ 283.682918][T13385] lo speed is unknown, defaulting to 1000 [ 283.872035][T13425] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.980331][T13432] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1894'. [ 284.193498][T13434] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.213668][T13437] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 284.223327][T13437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1895'. [ 284.244174][T13437] batman_adv: batadv0: Adding interface: virt_wifi0 [ 284.275250][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1895'. [ 284.284754][T13437] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.311956][T13437] batman_adv: batadv0: Interface activated: virt_wifi0 [ 284.699749][ T8693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.702246][ T9611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.712217][ T8693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.715573][ T9611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.958567][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 285.035465][T13457] bridge3: port 1(veth13) entered blocking state [ 285.042059][T13457] bridge3: port 1(veth13) entered disabled state [ 285.056397][T13457] veth13: entered allmulticast mode [ 285.069512][T13461] netlink: 'syz.1.1901': attribute type 21 has an invalid length. [ 285.080813][T13457] veth13: entered promiscuous mode [ 285.086915][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 285.110941][T13463] bridge3: port 2(veth0_to_bond) entered blocking state [ 285.127074][T13463] bridge3: port 2(veth0_to_bond) entered disabled state [ 285.150286][T13463] veth0_to_bond: entered allmulticast mode [ 285.176271][T13463] veth0_to_bond: entered promiscuous mode [ 285.246576][T13463] vlan2: entered allmulticast mode [ 285.251885][T13463] veth1: entered allmulticast mode [ 285.263017][T13463] bridge3: port 3(vlan2) entered blocking state [ 285.286335][T13463] bridge3: port 3(vlan2) entered disabled state [ 285.298933][T13463] vlan2: entered promiscuous mode [ 285.313692][T13463] veth1: entered promiscuous mode [ 285.320720][T13434] lo speed is unknown, defaulting to 1000 [ 285.328794][T13460] virt_wifi0 speed is unknown, defaulting to 1000 [ 285.329981][T13425] lo speed is unknown, defaulting to 1000 [ 285.342906][T13434] lo speed is unknown, defaulting to 1000 [ 285.809506][T13460] lo speed is unknown, defaulting to 1000 [ 285.835636][T13425] lo speed is unknown, defaulting to 1000 [ 286.254825][T13460] lo speed is unknown, defaulting to 1000 [ 286.679557][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 287.780137][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 288.210935][T13531] netlink: 'syz.3.1913': attribute type 83 has an invalid length. [ 288.255991][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 288.275605][T13535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1916'. [ 288.313304][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 288.702904][T13548] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.719238][T13548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.751896][ T10] lo speed is unknown, defaulting to 1000 [ 288.908200][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1922'. [ 288.938572][T13558] block nbd0: reconnected socket [ 288.943993][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1922'. [ 288.965223][T13556] tipc: Enabled bearer , priority 0 [ 288.997058][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1922'. [ 289.012801][T13556] syzkaller0: entered promiscuous mode [ 289.020055][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1922'. [ 289.036315][T13556] syzkaller0: entered allmulticast mode [ 289.048053][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1922'. [ 289.077477][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1922'. [ 289.089576][T13556] tipc: Resetting bearer [ 289.096704][T13556] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1921'. [ 289.192515][ T5883] block nbd0: Receive control failed (result -32) [ 289.207917][T13564] sctp: [Deprecated]: syz.3.1924 (pid 13564) Use of int in max_burst socket option deprecated. [ 289.207917][T13564] Use struct sctp_assoc_value instead [ 289.247195][T13555] tipc: Resetting bearer [ 289.347843][T13555] tipc: Disabling bearer [ 289.462373][T13573] virt_wifi0 speed is unknown, defaulting to 1000 [ 289.487570][T13567] 8021q: VLANs not supported on ip6tnl0 [ 289.584818][T13583] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 289.943426][T13599] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 290.049261][T13603] netlink: 'syz.4.1936': attribute type 10 has an invalid length. [ 290.060550][T13603] team0: Port device 0! added [ 290.227129][T13609] virt_wifi0 speed is unknown, defaulting to 1000 [ 290.310392][T13573] lo speed is unknown, defaulting to 1000 [ 290.326947][T13573] lo speed is unknown, defaulting to 1000 [ 290.519418][T13623] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 290.889839][T13638] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.917443][T13609] lo speed is unknown, defaulting to 1000 [ 290.936023][T13632] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.112365][T13609] lo speed is unknown, defaulting to 1000 [ 291.500783][T13645] team0 (unregistering): Port device 0! removed [ 291.542373][T13632] lo speed is unknown, defaulting to 1000 [ 291.552825][T13632] lo speed is unknown, defaulting to 1000 [ 291.727190][T13654] batman_adv: batadv0: Removing interface: ip6gretap1 [ 292.566432][T13682] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 292.697586][T13671] veth0_to_bond: entered promiscuous mode [ 292.729279][T13671] veth0_to_bond: entered allmulticast mode [ 292.882951][T13691] netlink: 'syz.4.1958': attribute type 10 has an invalid length. [ 293.130797][T13699] gtp2: entered promiscuous mode [ 293.138750][T13699] gtp2: entered allmulticast mode [ 293.161984][T13699] sctp: [Deprecated]: syz.1.1960 (pid 13699) Use of int in max_burst socket option. [ 293.161984][T13699] Use struct sctp_assoc_value instead [ 293.420756][T13708] __nla_validate_parse: 106 callbacks suppressed [ 293.420775][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1962'. [ 293.495926][T13712] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 293.510382][T13712] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1964'. [ 293.767402][T13727] Set syz1 is full, maxelem 6117 reached [ 293.877973][T13737] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 294.060587][T13743] gretap1: entered promiscuous mode [ 294.072210][T13747] tc_dump_action: action bad kind [ 294.162429][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 294.191750][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1974'. [ 294.496255][T13771] !: renamed from dummy0 [ 294.609429][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 294.617614][T13774] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.885678][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 294.971713][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 294.996763][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1985'. [ 295.049746][T13801] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 295.280640][T13774] lo speed is unknown, defaulting to 1000 [ 295.300591][T13774] lo speed is unknown, defaulting to 1000 [ 295.313258][T13809] virt_wifi0 speed is unknown, defaulting to 1000 [ 295.685349][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1992'. [ 295.694619][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 296.010165][T13830] bond7: entered promiscuous mode [ 296.026337][T13830] bond7: entered allmulticast mode [ 296.031919][T13830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.081176][T13845] virt_wifi0 speed is unknown, defaulting to 1000 [ 296.214223][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1988'. [ 296.391835][T13809] lo speed is unknown, defaulting to 1000 [ 296.400538][T13809] lo speed is unknown, defaulting to 1000 [ 296.686359][ T97] block nbd0: Possible stuck request ffff888025550000: control (read@0,1024B). Runtime 210 seconds [ 296.705627][ T97] block nbd0: Possible stuck request ffff8880255501c0: control (read@1024,1024B). Runtime 210 seconds [ 296.717715][ T97] block nbd0: Possible stuck request ffff888025550380: control (read@2048,1024B). Runtime 210 seconds [ 296.730610][ T97] block nbd0: Possible stuck request ffff888025550540: control (read@3072,1024B). Runtime 210 seconds [ 296.742629][ T97] block nbd0: Dead connection, failed to find a fallback [ 296.751955][ T97] block nbd0: shutting down sockets [ 296.759660][ T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.771919][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 296.780261][ T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.789678][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 296.797580][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.807064][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 296.814895][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.824190][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 296.833830][ T5864] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.844681][ T5864] Buffer I/O error on dev nbd0, logical block 0, async page read [ 296.854961][ T5864] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.866295][ T5864] Buffer I/O error on dev nbd0, logical block 1, async page read [ 296.874249][ T5864] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.886137][ T5864] Buffer I/O error on dev nbd0, logical block 2, async page read [ 296.894059][ T5864] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.903371][ T5864] Buffer I/O error on dev nbd0, logical block 3, async page read [ 296.911558][ T5864] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.920886][ T5864] Buffer I/O error on dev nbd0, logical block 0, async page read [ 296.929233][ T5864] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.939187][ T5864] Buffer I/O error on dev nbd0, logical block 1, async page read [ 296.951660][ T5864] ldm_validate_partition_table(): Disk read failed. [ 296.960990][ T5864] Dev nbd0: unable to read RDB block 0 [ 296.969870][ T5864] nbd0: unable to read partition table [ 297.012720][ T5864] ldm_validate_partition_table(): Disk read failed. [ 297.029631][ T5864] Dev nbd0: unable to read RDB block 0 [ 297.043445][ T5864] nbd0: unable to read partition table [ 297.127741][ T5864] udevd[5864]: failed to send result of seq 11305 to main daemon: Connection refused [ 297.144324][T13845] lo speed is unknown, defaulting to 1000 [ 297.184633][T13845] lo speed is unknown, defaulting to 1000 [ 297.487936][T13880] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 297.602423][T13883] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.275770][T13883] lo speed is unknown, defaulting to 1000 [ 298.315806][T13883] lo speed is unknown, defaulting to 1000 [ 298.820971][T13898] virt_wifi0 speed is unknown, defaulting to 1000 [ 299.895697][T13898] lo speed is unknown, defaulting to 1000 [ 299.913893][T13911] virt_wifi0 speed is unknown, defaulting to 1000 [ 299.921748][T13898] lo speed is unknown, defaulting to 1000 [ 300.119091][T13917] __nla_validate_parse: 1 callbacks suppressed [ 300.119113][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'. [ 300.400731][T13911] lo speed is unknown, defaulting to 1000 [ 300.510376][T13911] lo speed is unknown, defaulting to 1000 [ 302.237685][T13956] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20002 [ 302.827715][T13979] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.913545][T13984] netlink: 344 bytes leftover after parsing attributes in process `syz.4.2024'. [ 303.381480][T13979] lo speed is unknown, defaulting to 1000 [ 303.400548][T13979] lo speed is unknown, defaulting to 1000 [ 303.408518][T14000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.417125][T14000] batadv_slave_0: entered promiscuous mode [ 303.545139][T14002] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 303.569445][T14002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2030'. [ 303.589382][T14002] veth0_vlan: left promiscuous mode [ 303.601660][T14002] veth0_vlan: entered promiscuous mode [ 303.620463][T14002] veth0_vlan: entered allmulticast mode [ 303.641296][T14002] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 303.824471][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 303.837114][T14008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2032'. [ 304.901650][T14028] syzkaller1: entered promiscuous mode [ 304.919753][T14028] syzkaller1: entered allmulticast mode [ 305.085736][T14070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 305.197534][T14075] vlan4: entered promiscuous mode [ 305.208995][T14075] geneve1: entered promiscuous mode [ 305.233696][T14075] vlan4: entered allmulticast mode [ 305.247268][T14075] geneve1: entered allmulticast mode [ 305.309948][T14080] syz_tun: entered allmulticast mode [ 305.327161][T14079] syz_tun: left allmulticast mode [ 305.380176][T14085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2058'. [ 305.406624][T14086] netlink: 'syz.0.2059': attribute type 21 has an invalid length. [ 305.415931][T14085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2058'. [ 305.429931][T14085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2058'. [ 305.439037][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2059'. [ 305.448377][T14085] tipc: Invalid UDP bearer configuration [ 305.448434][T14085] tipc: Enabling of bearer rejected, failed to enable media [ 305.465611][T14086] tipc: Enabled bearer , priority 0 [ 305.468737][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2058'. [ 305.473251][T14086] syzkaller0: entered promiscuous mode [ 305.487413][T14086] syzkaller0: entered allmulticast mode [ 305.503657][T14087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2057'. [ 305.525686][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 305.622306][T14094] bond3: entered promiscuous mode [ 305.634825][T14094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.644652][T14090] tipc: Resetting bearer [ 305.668261][T14083] tipc: Resetting bearer [ 305.748721][T14083] tipc: Disabling bearer [ 305.764217][T14082] lo speed is unknown, defaulting to 1000 [ 305.773908][T14082] lo speed is unknown, defaulting to 1000 [ 305.781972][T14101] FAULT_INJECTION: forcing a failure. [ 305.781972][T14101] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 305.795913][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.3.2064 Not tainted syzkaller #0 PREEMPT(full) [ 305.795941][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.795964][T14101] Call Trace: [ 305.795973][T14101] [ 305.795982][T14101] dump_stack_lvl+0x189/0x250 [ 305.796009][T14101] ? __pfx____ratelimit+0x10/0x10 [ 305.796035][T14101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.796055][T14101] ? __pfx__printk+0x10/0x10 [ 305.796077][T14101] ? __might_fault+0xb0/0x130 [ 305.796112][T14101] should_fail_ex+0x414/0x560 [ 305.796142][T14101] _copy_from_iter+0x404/0x1790 [ 305.796180][T14101] ? __pfx__copy_from_iter+0x10/0x10 [ 305.796203][T14101] ? __lock_acquire+0xab9/0xd20 [ 305.796235][T14101] ? skb_put+0x11b/0x210 [ 305.796261][T14101] l2cap_skbuff_fromiovec+0x9f/0x530 [ 305.796293][T14101] ? skb_put+0x11b/0x210 [ 305.796320][T14101] l2cap_chan_send+0x36a/0x2790 [ 305.796347][T14101] ? __lock_acquire+0xab9/0xd20 [ 305.796386][T14101] ? __pfx_l2cap_chan_send+0x10/0x10 [ 305.796404][T14101] ? __local_bh_enable_ip+0x12d/0x1c0 [ 305.796467][T14101] l2cap_sock_sendmsg+0x32e/0x4a0 [ 305.796500][T14101] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 305.796533][T14101] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.796565][T14101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.796585][T14101] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 305.796614][T14101] __sock_sendmsg+0x21c/0x270 [ 305.796649][T14101] ____sys_sendmsg+0x52d/0x830 [ 305.796681][T14101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.796716][T14101] ? import_iovec+0x74/0xa0 [ 305.796755][T14101] ___sys_sendmsg+0x21f/0x2a0 [ 305.796784][T14101] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.796851][T14101] ? __fget_files+0x2a/0x420 [ 305.796878][T14101] ? __fget_files+0x3a0/0x420 [ 305.796918][T14101] __sys_sendmmsg+0x227/0x430 [ 305.796949][T14101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 305.796972][T14101] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 305.797026][T14101] ? ksys_write+0x22a/0x250 [ 305.797053][T14101] ? __pfx_ksys_write+0x10/0x10 [ 305.797074][T14101] ? rcu_is_watching+0x15/0xb0 [ 305.797100][T14101] __x64_sys_sendmmsg+0xa0/0xc0 [ 305.797128][T14101] do_syscall_64+0xfa/0x3b0 [ 305.797150][T14101] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.797170][T14101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.797190][T14101] ? clear_bhb_loop+0x60/0xb0 [ 305.797213][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.797232][T14101] RIP: 0033:0x7f8b0a58eec9 [ 305.797251][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.797268][T14101] RSP: 002b:00007f8b0b45c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 305.797290][T14101] RAX: ffffffffffffffda RBX: 00007f8b0a7e5fa0 RCX: 00007f8b0a58eec9 [ 305.797304][T14101] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000004 [ 305.797315][T14101] RBP: 00007f8b0b45c090 R08: 0000000000000000 R09: 0000000000000000 [ 305.797326][T14101] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 305.797337][T14101] R13: 00007f8b0a7e6038 R14: 00007f8b0a7e5fa0 R15: 00007fffe439ad58 [ 305.797380][T14101] [ 306.165213][T14104] delete_channel: no stack [ 306.194372][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 306.230235][T14107] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2066'. [ 306.244439][T14103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2063'. [ 306.417097][T14112] netlink: 'syz.2.2068': attribute type 13 has an invalid length. [ 306.886726][T14127] batman_adv: batadv0: Adding interface: macvtap1 [ 306.904613][T14127] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.998949][T14127] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 307.184022][T14149] FAULT_INJECTION: forcing a failure. [ 307.184022][T14149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.245265][T14149] CPU: 0 UID: 0 PID: 14149 Comm: syz.1.2076 Not tainted syzkaller #0 PREEMPT(full) [ 307.245291][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.245303][T14149] Call Trace: [ 307.245311][T14149] [ 307.245320][T14149] dump_stack_lvl+0x189/0x250 [ 307.245346][T14149] ? __pfx____ratelimit+0x10/0x10 [ 307.245367][T14149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.245397][T14149] ? __pfx__printk+0x10/0x10 [ 307.245423][T14149] ? __might_fault+0xb0/0x130 [ 307.245460][T14149] should_fail_ex+0x414/0x560 [ 307.245493][T14149] _copy_from_iter+0x589/0x1790 [ 307.245531][T14149] ? __pfx__copy_from_iter+0x10/0x10 [ 307.245555][T14149] ? __lock_acquire+0xab9/0xd20 [ 307.245587][T14149] ? skb_put+0x11b/0x210 [ 307.245615][T14149] l2cap_skbuff_fromiovec+0x9f/0x530 [ 307.245646][T14149] ? skb_put+0x11b/0x210 [ 307.245673][T14149] l2cap_chan_send+0x36a/0x2790 [ 307.245701][T14149] ? __lock_acquire+0xab9/0xd20 [ 307.245739][T14149] ? __pfx_l2cap_chan_send+0x10/0x10 [ 307.245758][T14149] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.245806][T14149] l2cap_sock_sendmsg+0x32e/0x4a0 [ 307.245837][T14149] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 307.245868][T14149] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.245896][T14149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.245915][T14149] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 307.245944][T14149] __sock_sendmsg+0x21c/0x270 [ 307.245978][T14149] ____sys_sendmsg+0x52d/0x830 [ 307.246009][T14149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.246046][T14149] ? import_iovec+0x74/0xa0 [ 307.246070][T14149] ___sys_sendmsg+0x21f/0x2a0 [ 307.246097][T14149] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.246158][T14149] ? __fget_files+0x2a/0x420 [ 307.246183][T14149] ? __fget_files+0x3a0/0x420 [ 307.246217][T14149] __sys_sendmmsg+0x227/0x430 [ 307.246245][T14149] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.246266][T14149] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 307.246314][T14149] ? ksys_write+0x22a/0x250 [ 307.246340][T14149] ? __pfx_ksys_write+0x10/0x10 [ 307.246360][T14149] ? rcu_is_watching+0x15/0xb0 [ 307.246391][T14149] __x64_sys_sendmmsg+0xa0/0xc0 [ 307.246419][T14149] do_syscall_64+0xfa/0x3b0 [ 307.246439][T14149] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.246460][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.246479][T14149] ? clear_bhb_loop+0x60/0xb0 [ 307.246504][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.246522][T14149] RIP: 0033:0x7f8496d8eec9 [ 307.246540][T14149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.246558][T14149] RSP: 002b:00007f8497bdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.246579][T14149] RAX: ffffffffffffffda RBX: 00007f8496fe5fa0 RCX: 00007f8496d8eec9 [ 307.246593][T14149] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000004 [ 307.246606][T14149] RBP: 00007f8497bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 307.246618][T14149] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 307.246629][T14149] R13: 00007f8496fe6038 R14: 00007f8496fe5fa0 R15: 00007ffe80718688 [ 307.246661][T14149] [ 307.706891][T14152] veth7: entered promiscuous mode [ 307.725498][T14112] lo speed is unknown, defaulting to 1000 [ 307.786358][T14112] lo speed is unknown, defaulting to 1000 [ 307.909096][T14165] bond8: entered promiscuous mode [ 307.920571][T14165] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.000078][T14170] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.013862][T14170] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 308.025305][T14170] bond8: (slave vcan1): Error -95 calling set_mac_address [ 308.048882][T14181] netlink: 'syz.3.2081': attribute type 10 has an invalid length. [ 308.060972][T14175] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 308.280092][T14189] syzkaller0: entered promiscuous mode [ 308.296619][T14189] syzkaller0: entered allmulticast mode [ 309.004430][T14226] can: request_module (can-proto-5) failed. [ 309.016201][T14227] vti0: entered promiscuous mode [ 309.376501][ T30] audit: type=1107 audit(1759175411.019:7): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 309.457849][T14257] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (13) [ 309.811688][T14271] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 310.609336][T14291] lo speed is unknown, defaulting to 1000 [ 310.665379][T14291] lo speed is unknown, defaulting to 1000 [ 310.705738][T14312] __nla_validate_parse: 9 callbacks suppressed [ 310.705758][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2122'. [ 310.754489][T14312] netlink: 'syz.2.2122': attribute type 10 has an invalid length. [ 310.774490][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2122'. [ 311.449547][T14320] netlink: 'syz.2.2125': attribute type 13 has an invalid length. [ 311.458153][T14320] netlink: 'syz.2.2125': attribute type 17 has an invalid length. [ 311.543806][T14320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.555716][T14320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.597317][T14301] lo speed is unknown, defaulting to 1000 [ 311.895509][T14301] lo speed is unknown, defaulting to 1000 [ 311.907405][T14308] lo speed is unknown, defaulting to 1000 [ 312.261324][T14308] lo speed is unknown, defaulting to 1000 [ 312.409780][T14321] lo speed is unknown, defaulting to 1000 [ 312.942360][T14321] lo speed is unknown, defaulting to 1000 [ 313.132747][ T30] audit: type=1800 audit(1759175414.789:8): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2130" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2335 res=0 errno=0 [ 313.196148][ T30] audit: type=1804 audit(1759175414.819:9): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2130" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2335 res=1 errno=0 [ 313.260305][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2132'. [ 313.849706][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 313.928673][T14353] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 314.454005][T14344] lo speed is unknown, defaulting to 1000 [ 314.527490][T14344] lo speed is unknown, defaulting to 1000 [ 315.941437][T14419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2151'. [ 315.980565][T14420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 316.080071][T14425] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2146'. [ 316.180470][T14420] nbd: socks must be embedded in a SOCK_ITEM attr [ 316.206713][T14418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 316.215767][T14418] nbd: device at index 64 is going down [ 316.433906][T14435] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2156'. [ 316.661788][T14446] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 316.716615][T14450] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2158'. [ 316.740349][T14446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.864010][ T5883] Bluetooth: hci4: link tx timeout [ 316.870345][ T5883] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 316.882805][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2163'. [ 316.964246][T14469] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 317.171775][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.189306][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 317.281474][T14491] netlink: 'syz.3.2173': attribute type 2 has an invalid length. [ 317.293198][T14491] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 317.321636][T14491] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2173'. [ 317.332948][T14488] geneve2: entered promiscuous mode [ 317.348410][T14488] geneve2: entered allmulticast mode [ 317.361206][ T8693] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 40317 - 0 [ 317.376339][ T8693] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 40317 - 0 [ 317.404369][ T8693] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 40317 - 0 [ 317.435737][ T8693] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 40317 - 0 [ 317.461157][T14498] netlink: 'syz.2.2175': attribute type 4 has an invalid length. [ 317.498675][ T5882] Bluetooth: hci4: link tx timeout [ 317.503851][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 317.505972][T14498] netlink: 'syz.2.2175': attribute type 10 has an invalid length. [ 317.653419][T14498] netlink: 'syz.2.2175': attribute type 10 has an invalid length. [ 317.671018][T14504] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 317.696984][T14504] netlink: 95 bytes leftover after parsing attributes in process `syz.4.2179'. [ 317.972530][T14496] lo speed is unknown, defaulting to 1000 [ 317.980316][T14496] lo speed is unknown, defaulting to 1000 [ 318.236396][T14531] veth0_to_bond: left promiscuous mode [ 318.665095][T14554] netlink: 'syz.3.2193': attribute type 1 has an invalid length. [ 318.927545][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 319.322096][T14526] lo speed is unknown, defaulting to 1000 [ 319.375229][T14526] lo speed is unknown, defaulting to 1000 [ 319.378768][T14525] lo speed is unknown, defaulting to 1000 [ 319.993919][T14602] veth7: entered promiscuous mode [ 320.069755][T14544] lo speed is unknown, defaulting to 1000 [ 320.155658][T14525] lo speed is unknown, defaulting to 1000 [ 320.479785][T14546] lo speed is unknown, defaulting to 1000 [ 320.562965][T14616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.647079][T14544] lo speed is unknown, defaulting to 1000 [ 321.006354][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 321.080572][T14625] veth0: entered promiscuous mode [ 321.089421][T14625] __nla_validate_parse: 7 callbacks suppressed [ 321.089440][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 321.132272][T14625] veth0 (unregistering): left promiscuous mode [ 321.212706][T14546] lo speed is unknown, defaulting to 1000 [ 321.450247][T14641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 321.487892][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2218'. [ 321.562274][T14641] bond5: entered promiscuous mode [ 321.573277][T14641] bond5: entered allmulticast mode [ 321.581954][T14641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.616273][T14609] lo speed is unknown, defaulting to 1000 [ 321.631544][T14609] lo speed is unknown, defaulting to 1000 [ 323.265470][T14675] netlink: 'syz.1.2225': attribute type 21 has an invalid length. [ 323.275337][T14675] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2225'. [ 323.285212][T14662] lo speed is unknown, defaulting to 1000 [ 323.293692][T14648] lo speed is unknown, defaulting to 1000 [ 323.294295][T14662] lo speed is unknown, defaulting to 1000 [ 323.782016][T14648] lo speed is unknown, defaulting to 1000 [ 325.421041][T14697] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.461971][T14701] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 325.731347][T14720] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 325.776600][T14720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 325.807463][T14720] bond8: (slave ip6gretap3): making interface the new active one [ 325.817036][T14720] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link [ 325.861104][T14720] veth15: entered promiscuous mode [ 325.871142][T14720] bond8: (slave veth15): Enslaving as an active interface with a down link [ 325.888344][T14720] erspan0: entered allmulticast mode [ 325.902272][T14720] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 326.634987][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 326.645196][T14783] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 326.667113][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 326.780262][T14783] 8021q: adding VLAN 0 to HW filter on device bond9 [ 326.841387][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 326.861427][T14785] pim6reg: left allmulticast mode [ 326.870836][T14785] bridge0: left allmulticast mode [ 326.932474][T14779] lo speed is unknown, defaulting to 1000 [ 326.942413][T14779] lo speed is unknown, defaulting to 1000 [ 327.082976][T14807] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 327.571007][ T30] audit: type=1800 audit(1759175429.229:10): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2255" name="memory.events" dev="tmpfs" ino=2499 res=0 errno=0 [ 327.652798][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'. [ 327.760922][T14811] lo speed is unknown, defaulting to 1000 [ 327.768777][T14811] lo speed is unknown, defaulting to 1000 [ 328.062719][T14821] netlink: 'syz.2.2258': attribute type 10 has an invalid length. [ 328.464476][T14832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2260'. [ 328.496785][T14832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2260'. [ 328.670310][T14834] veth0: entered promiscuous mode [ 328.682306][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2261'. [ 328.737464][T14834] veth0 (unregistering): left promiscuous mode [ 328.770153][T14835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 328.785423][T14834] bond4: (slave veth1): Releasing backup interface [ 329.215698][T14855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2265'. [ 329.249274][T14855] netlink: 352 bytes leftover after parsing attributes in process `syz.4.2265'. [ 329.292464][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 329.503563][T14845] lo speed is unknown, defaulting to 1000 [ 329.519463][T14845] lo speed is unknown, defaulting to 1000 [ 329.744329][ T9645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.757936][ T9645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.194002][T14866] lo speed is unknown, defaulting to 1000 [ 330.201169][T14866] lo speed is unknown, defaulting to 1000 [ 330.893931][T14891] pim6reg: entered allmulticast mode [ 330.959821][T14897] pim6reg: left allmulticast mode [ 331.534653][T14845] delete_channel: no stack [ 331.763549][T14919] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.887695][T14919] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.998113][T14919] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.087563][T14908] lo speed is unknown, defaulting to 1000 [ 332.105474][T14919] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.270959][T14908] lo speed is unknown, defaulting to 1000 [ 332.473152][ T8693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.523735][ T9637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.585020][T14940] vlan0: entered promiscuous mode [ 332.595193][T14940] bond0: entered promiscuous mode [ 332.660257][T14942] netlink: 'syz.3.2293': attribute type 3 has an invalid length. [ 332.669139][ T9638] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.680561][T14911] lo speed is unknown, defaulting to 1000 [ 332.720539][ T9638] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.805356][T14911] lo speed is unknown, defaulting to 1000 [ 332.878564][T14947] __nla_validate_parse: 5 callbacks suppressed [ 332.878584][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 333.178925][T14953] netlink: 'syz.2.2297': attribute type 21 has an invalid length. [ 333.240549][T14953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2297'. [ 333.677234][T14942] lo speed is unknown, defaulting to 1000 [ 333.710725][T14942] lo speed is unknown, defaulting to 1000 [ 334.264283][T14987] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 335.048506][T15005] sch_tbf: burst 5 is lower than device lo mtu (18) ! [ 335.181679][T15005] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2312'. [ 335.444671][T15015] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2315'. [ 335.468744][T15015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2315'. [ 335.981078][T15044] netlink: 'syz.0.2323': attribute type 2 has an invalid length. [ 336.213612][T15024] lo speed is unknown, defaulting to 1000 [ 336.223082][T15024] lo speed is unknown, defaulting to 1000 [ 336.303030][T15069] netlink: 'syz.4.2329': attribute type 11 has an invalid length. [ 337.179613][T15083] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2335'. [ 337.221305][T15085] tipc: Enabled bearer , priority 0 [ 337.243643][T15085] syzkaller0: entered promiscuous mode [ 337.258132][T15085] syzkaller0: entered allmulticast mode [ 337.347771][T15085] tipc: Resetting bearer [ 337.371360][T15084] tipc: Resetting bearer [ 337.423938][T15084] tipc: Disabling bearer [ 337.448450][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2337'. [ 337.694345][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'. [ 337.734588][T15089] 8021q: VLANs not supported on nlmon0 [ 337.757592][T15094] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 337.803441][T15098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 337.953181][T15104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 338.088321][T15106] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.255541][T15110] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2343'. [ 338.306813][T15110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2343'. [ 338.396903][T15120] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 338.563806][T15126] netlink: 'syz.2.2349': attribute type 16 has an invalid length. [ 338.573310][T15126] netlink: 'syz.2.2349': attribute type 17 has an invalid length. [ 338.634942][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 338.655398][T15126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.733862][T15133] netlink: 'syz.0.2352': attribute type 21 has an invalid length. [ 338.767252][T15133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2352'. [ 338.770808][T15138] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2351'. [ 338.786673][ T30] audit: type=1800 audit(1759175440.429:11): pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2351" name="memory.events" dev="tmpfs" ino=2447 res=0 errno=0 [ 338.833622][T15137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2353'. [ 338.836289][ T30] audit: type=1804 audit(1759175440.429:12): pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2351" name="/newroot/470/memory.events" dev="tmpfs" ino=2447 res=1 errno=0 [ 338.852966][T15137] netlink: 'syz.4.2353': attribute type 7 has an invalid length. [ 338.899892][T15137] netlink: 'syz.4.2353': attribute type 8 has an invalid length. [ 338.909154][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2354'. [ 338.921209][T15140] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 338.933303][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 339.196773][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 339.804465][T15165] team_slave_0: left promiscuous mode [ 339.832352][T15165] team_slave_0: left allmulticast mode [ 339.858485][T15165] team0 (unregistering): Port device team_slave_0 removed [ 339.888184][T15165] team_slave_1: left promiscuous mode [ 339.893758][T15165] team_slave_1: left allmulticast mode [ 339.917731][T15165] team0 (unregistering): Port device team_slave_1 removed [ 339.995403][T15179] team0: Port device dummy0 removed [ 340.002723][T15179] batman_adv: batadv0: Adding interface: dummy0 [ 340.009559][T15179] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.037547][T15179] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 340.370325][T15200] IPv6: Can't replace route, no match found [ 344.405360][T15224] __nla_validate_parse: 6 callbacks suppressed [ 344.405383][T15224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'. [ 346.035068][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'. [ 354.236819][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'. [ 354.311520][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2385'. [ 354.455685][T15254] netlink: 'syz.0.2388': attribute type 1 has an invalid length. [ 354.655459][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2390'. [ 354.689039][T15271] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2391'. [ 354.960741][T15276] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2393'. [ 355.064366][T15280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2394'. [ 355.148652][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 355.267308][T15291] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 355.423350][T15300] netlink: 'syz.3.2400': attribute type 6 has an invalid length. [ 355.443218][T15300] netlink: 14573 bytes leftover after parsing attributes in process `syz.3.2400'. [ 355.601164][T15306] syzkaller1: entered promiscuous mode [ 355.616400][T15306] syzkaller1: entered allmulticast mode [ 355.699781][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2403'. [ 355.955462][T15324] netlink: 'syz.4.2408': attribute type 13 has an invalid length. [ 355.964721][T15324] netlink: 'syz.4.2408': attribute type 17 has an invalid length. [ 355.994997][T15330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2404'. [ 356.022240][T15330] netlink: 'syz.2.2404': attribute type 32 has an invalid length. [ 356.203329][T15324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.231716][T15324] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 356.267703][T15330] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 356.380424][T15339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.474401][T15344] macsec2: entered promiscuous mode [ 356.487958][T15344] macsec2: entered allmulticast mode [ 357.119127][T15332] lo speed is unknown, defaulting to 1000 [ 357.140197][T15332] lo speed is unknown, defaulting to 1000 [ 358.112866][T15410] 0ªX¹¦À: renamed from caif0 [ 358.120326][T15410] 0ªX¹¦À: entered allmulticast mode [ 358.125592][T15410] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 358.554853][T15409] bond7: left promiscuous mode [ 358.566220][T15409] bond7: left allmulticast mode [ 359.583690][T15459] macsec1: entered promiscuous mode [ 359.596228][T15459] macsec1: entered allmulticast mode [ 359.813411][T15462] IPVS: Scheduler module ip_vs_sip not found [ 359.821919][T15406] lo speed is unknown, defaulting to 1000 [ 359.829665][T15464] IPVS: length: 141 != 8 [ 359.853717][T15406] lo speed is unknown, defaulting to 1000 [ 359.990885][T15466] __nla_validate_parse: 24 callbacks suppressed [ 359.990905][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 360.055587][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 360.116029][T15470] macvtap1: entered promiscuous mode [ 360.121967][T15470] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 360.258239][T15485] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 360.278145][T15479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2454'. [ 360.727329][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 360.728790][T15500] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2458'. [ 360.768173][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 361.138465][T15500] lo speed is unknown, defaulting to 1000 [ 361.183863][T15500] lo speed is unknown, defaulting to 1000 [ 362.191453][T15527] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 362.271126][T15527] 8021q: adding VLAN 0 to HW filter on device bond10 [ 362.339054][T15529] bond10: (slave geneve3): making interface the new active one [ 362.351032][T15529] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 362.359295][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2465'. [ 362.368684][T15522] lo speed is unknown, defaulting to 1000 [ 362.370604][T15522] lo speed is unknown, defaulting to 1000 [ 362.394731][T15527] bond10: entered promiscuous mode [ 362.422718][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2465'. [ 362.427302][T15527] geneve3: entered promiscuous mode [ 362.473725][T15532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2465'. [ 362.995985][T15558] macsec2: entered promiscuous mode [ 363.009471][T15558] macsec2: entered allmulticast mode [ 363.755637][T15563] syzkaller0: entered promiscuous mode [ 363.772655][T15563] syzkaller0: entered allmulticast mode [ 363.965583][T15578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2477'. [ 364.157905][T15583] nbd: must specify a size in bytes for the device [ 364.181633][T15583] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 366.603950][T15604] netlink: 'syz.4.2486': attribute type 29 has an invalid length. [ 366.700569][T15628] __nla_validate_parse: 1 callbacks suppressed [ 366.700589][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2492'. [ 366.860019][T15634] bond0: option arp_validate: invalid value (18446744073491447809) [ 366.860328][ T8693] bond0: (slave bond_slave_0): interface is now down [ 366.895801][ T8693] bond0: (slave bond_slave_1): interface is now down [ 366.909431][ T8693] bond0: now running without any active interface! [ 367.423933][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 367.479845][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 367.522200][T15667] netlink: 'syz.2.2502': attribute type 12 has an invalid length. [ 367.539546][T15671] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 367.573612][T15671] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2503'. [ 367.597199][T15667] netlink: 'syz.2.2502': attribute type 11 has an invalid length. [ 367.654232][T15671] veth1_to_batadv: entered allmulticast mode [ 367.705440][T15671] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 368.128305][T15646] lo speed is unknown, defaulting to 1000 [ 368.161107][T15646] lo speed is unknown, defaulting to 1000 [ 368.415363][T15684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2505'. [ 368.684621][T15693] : renamed from bond_slave_0 [ 368.698826][T15648] lo speed is unknown, defaulting to 1000 [ 368.783842][T15648] lo speed is unknown, defaulting to 1000 [ 368.862572][T15699] tipc: Enabling of bearer rejected, failed to enable media [ 369.205778][T15711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2514'. [ 369.277916][T15669] lo speed is unknown, defaulting to 1000 [ 369.304529][T15669] lo speed is unknown, defaulting to 1000 [ 370.240039][T15725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2518'. [ 370.575733][T15737] FAULT_INJECTION: forcing a failure. [ 370.575733][T15737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.593546][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.0.2521 Not tainted syzkaller #0 PREEMPT(full) [ 370.593574][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.593590][T15737] Call Trace: [ 370.593601][T15737] [ 370.593610][T15737] dump_stack_lvl+0x189/0x250 [ 370.593637][T15737] ? __pfx____ratelimit+0x10/0x10 [ 370.593657][T15737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.593677][T15737] ? __pfx__printk+0x10/0x10 [ 370.593703][T15737] ? __might_fault+0xb0/0x130 [ 370.593741][T15737] should_fail_ex+0x414/0x560 [ 370.593773][T15737] _copy_from_user+0x2d/0xb0 [ 370.593799][T15737] ___sys_sendmsg+0x158/0x2a0 [ 370.593829][T15737] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.593893][T15737] ? __fget_files+0x2a/0x420 [ 370.593920][T15737] ? __fget_files+0x3a0/0x420 [ 370.593958][T15737] __x64_sys_sendmsg+0x19b/0x260 [ 370.593987][T15737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.594024][T15737] ? __pfx_ksys_write+0x10/0x10 [ 370.594047][T15737] ? rcu_is_watching+0x15/0xb0 [ 370.594071][T15737] ? do_syscall_64+0xbe/0x3b0 [ 370.594098][T15737] do_syscall_64+0xfa/0x3b0 [ 370.594119][T15737] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.594140][T15737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.594161][T15737] ? clear_bhb_loop+0x60/0xb0 [ 370.594191][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.594211][T15737] RIP: 0033:0x7f178778eec9 [ 370.594230][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.594248][T15737] RSP: 002b:00007f17886a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.594269][T15737] RAX: ffffffffffffffda RBX: 00007f17879e5fa0 RCX: 00007f178778eec9 [ 370.594284][T15737] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 370.594298][T15737] RBP: 00007f17886a7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.594311][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.594323][T15737] R13: 00007f17879e6038 R14: 00007f17879e5fa0 R15: 00007fff63ef5298 [ 370.594353][T15737] [ 371.147248][T15755] ieee802154 phy0 wpan0: encryption failed: -90 [ 371.214140][T15758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2526'. [ 371.263500][T15763] sctp: [Deprecated]: syz.4.2527 (pid 15763) Use of int in maxseg socket option. [ 371.263500][T15763] Use struct sctp_assoc_value instead [ 371.368317][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2530'. [ 371.660562][T15786] FAULT_INJECTION: forcing a failure. [ 371.660562][T15786] name failslab, interval 1, probability 0, space 0, times 0 [ 371.691681][T15786] CPU: 1 UID: 0 PID: 15786 Comm: syz.2.2535 Not tainted syzkaller #0 PREEMPT(full) [ 371.691710][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.691722][T15786] Call Trace: [ 371.691730][T15786] [ 371.691738][T15786] dump_stack_lvl+0x189/0x250 [ 371.691765][T15786] ? __pfx____ratelimit+0x10/0x10 [ 371.691787][T15786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.691821][T15786] ? __pfx__printk+0x10/0x10 [ 371.691852][T15786] ? __pfx___might_resched+0x10/0x10 [ 371.691886][T15786] should_fail_ex+0x414/0x560 [ 371.691919][T15786] should_failslab+0xa8/0x100 [ 371.691947][T15786] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 371.691974][T15786] ? __alloc_skb+0x112/0x2d0 [ 371.692000][T15786] __alloc_skb+0x112/0x2d0 [ 371.692027][T15786] netlink_sendmsg+0x5c6/0xb30 [ 371.692069][T15786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.692096][T15786] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.692127][T15786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.692145][T15786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.692167][T15786] __sock_sendmsg+0x21c/0x270 [ 371.692201][T15786] ____sys_sendmsg+0x505/0x830 [ 371.692232][T15786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.692266][T15786] ? import_iovec+0x74/0xa0 [ 371.692294][T15786] ___sys_sendmsg+0x21f/0x2a0 [ 371.692320][T15786] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.692383][T15786] ? __fget_files+0x2a/0x420 [ 371.692410][T15786] ? __fget_files+0x3a0/0x420 [ 371.692448][T15786] __x64_sys_sendmsg+0x19b/0x260 [ 371.692476][T15786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.692512][T15786] ? rcu_is_watching+0x15/0xb0 [ 371.692535][T15786] ? do_syscall_64+0xbe/0x3b0 [ 371.692562][T15786] do_syscall_64+0xfa/0x3b0 [ 371.692583][T15786] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.692602][T15786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.692621][T15786] ? clear_bhb_loop+0x60/0xb0 [ 371.692644][T15786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.692663][T15786] RIP: 0033:0x7f275e98eec9 [ 371.692680][T15786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.692697][T15786] RSP: 002b:00007f275f82a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.692718][T15786] RAX: ffffffffffffffda RBX: 00007f275ebe5fa0 RCX: 00007f275e98eec9 [ 371.692732][T15786] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 371.692745][T15786] RBP: 00007f275f82a090 R08: 0000000000000000 R09: 0000000000000000 [ 371.692757][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.692768][T15786] R13: 00007f275ebe6038 R14: 00007f275ebe5fa0 R15: 00007ffef6e1b718 [ 371.692800][T15786] [ 372.043744][T15792] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 372.054533][T15792] netlink: 'syz.4.2537': attribute type 2 has an invalid length. [ 372.057496][T15791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2538'. [ 372.093600][T15791] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2538'. [ 372.124320][T15791] netlink: 'syz.2.2538': attribute type 5 has an invalid length. [ 372.134676][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2537'. [ 372.146321][T15791] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2538'. [ 372.268053][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 372.355660][T15812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2543'. [ 373.418712][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 373.535032][T15828] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 373.582713][T15828] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 373.874422][T15814] lo speed is unknown, defaulting to 1000 [ 373.884198][T15814] lo speed is unknown, defaulting to 1000 [ 373.961141][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2554'. [ 374.785183][T15868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2558'. [ 374.795095][T15866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2559'. [ 374.816724][T15866] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 375.119409][T15879] FAULT_INJECTION: forcing a failure. [ 375.119409][T15879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.146226][T15879] CPU: 0 UID: 0 PID: 15879 Comm: syz.4.2562 Not tainted syzkaller #0 PREEMPT(full) [ 375.146254][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.146266][T15879] Call Trace: [ 375.146274][T15879] [ 375.146283][T15879] dump_stack_lvl+0x189/0x250 [ 375.146310][T15879] ? __pfx____ratelimit+0x10/0x10 [ 375.146332][T15879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.146354][T15879] ? __pfx__printk+0x10/0x10 [ 375.146379][T15879] ? __might_fault+0xb0/0x130 [ 375.146416][T15879] should_fail_ex+0x414/0x560 [ 375.146449][T15879] _copy_from_iter+0x1de/0x1790 [ 375.146479][T15879] ? rcu_is_watching+0x15/0xb0 [ 375.146499][T15879] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 375.146525][T15879] ? __pfx__copy_from_iter+0x10/0x10 [ 375.146547][T15879] ? __build_skb_around+0x257/0x3e0 [ 375.146575][T15879] ? netlink_sendmsg+0x642/0xb30 [ 375.146596][T15879] ? skb_put+0x11b/0x210 [ 375.146620][T15879] netlink_sendmsg+0x6b2/0xb30 [ 375.146666][T15879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.146690][T15879] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.146720][T15879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.146739][T15879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.146762][T15879] __sock_sendmsg+0x21c/0x270 [ 375.146794][T15879] ____sys_sendmsg+0x505/0x830 [ 375.146824][T15879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.146858][T15879] ? import_iovec+0x74/0xa0 [ 375.146892][T15879] ___sys_sendmsg+0x21f/0x2a0 [ 375.146920][T15879] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.146981][T15879] ? __fget_files+0x2a/0x420 [ 375.147008][T15879] ? __fget_files+0x3a0/0x420 [ 375.147045][T15879] __x64_sys_sendmsg+0x19b/0x260 [ 375.147074][T15879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.147109][T15879] ? __pfx_ksys_write+0x10/0x10 [ 375.147138][T15879] ? do_syscall_64+0xbe/0x3b0 [ 375.147165][T15879] do_syscall_64+0xfa/0x3b0 [ 375.147185][T15879] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.147205][T15879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.147224][T15879] ? clear_bhb_loop+0x60/0xb0 [ 375.147247][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.147266][T15879] RIP: 0033:0x7fab5c98eec9 [ 375.147283][T15879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.147301][T15879] RSP: 002b:00007fab5d89f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.147322][T15879] RAX: ffffffffffffffda RBX: 00007fab5cbe5fa0 RCX: 00007fab5c98eec9 [ 375.147336][T15879] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 375.147349][T15879] RBP: 00007fab5d89f090 R08: 0000000000000000 R09: 0000000000000000 [ 375.147361][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.147373][T15879] R13: 00007fab5cbe6038 R14: 00007fab5cbe5fa0 R15: 00007ffc5bb9be38 [ 375.147403][T15879] [ 375.470597][T15850] lo speed is unknown, defaulting to 1000 [ 375.478346][T15850] lo speed is unknown, defaulting to 1000 [ 375.572980][T15892] unsupported nlmsg_type 40 [ 375.709656][T15897] tipc: Enabled bearer , priority 0 [ 375.717814][T15897] syzkaller0: entered promiscuous mode [ 375.723300][T15897] syzkaller0: entered allmulticast mode [ 375.745101][T15897] tipc: Resetting bearer [ 375.758816][T15896] tipc: Resetting bearer [ 375.785865][T15896] tipc: Disabling bearer [ 376.222943][T15912] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 376.424301][T15916] netlink: 'syz.2.2570': attribute type 21 has an invalid length. [ 376.475434][T15919] netlink: 'syz.2.2570': attribute type 5 has an invalid length. [ 376.477145][T15916] netlink: 'syz.2.2570': attribute type 1 has an invalid length. [ 376.667182][T15925] FAULT_INJECTION: forcing a failure. [ 376.667182][T15925] name failslab, interval 1, probability 0, space 0, times 0 [ 376.696552][T15925] CPU: 1 UID: 0 PID: 15925 Comm: syz.2.2573 Not tainted syzkaller #0 PREEMPT(full) [ 376.696580][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.696592][T15925] Call Trace: [ 376.696600][T15925] [ 376.696609][T15925] dump_stack_lvl+0x189/0x250 [ 376.696636][T15925] ? __pfx____ratelimit+0x10/0x10 [ 376.696657][T15925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.696679][T15925] ? __pfx__printk+0x10/0x10 [ 376.696706][T15925] ? __lock_acquire+0xab9/0xd20 [ 376.696832][T15925] should_fail_ex+0x414/0x560 [ 376.696865][T15925] should_failslab+0xa8/0x100 [ 376.696894][T15925] kmem_cache_alloc_noprof+0x73/0x3c0 [ 376.696917][T15925] ? skb_clone+0x212/0x3a0 [ 376.696949][T15925] skb_clone+0x212/0x3a0 [ 376.696977][T15925] __netlink_deliver_tap+0x404/0x850 [ 376.697013][T15925] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.697037][T15925] netlink_deliver_tap+0x19c/0x1b0 [ 376.697061][T15925] netlink_unicast+0x7fa/0x9e0 [ 376.697090][T15925] ? __pfx_netlink_unicast+0x10/0x10 [ 376.697113][T15925] ? netlink_sendmsg+0x642/0xb30 [ 376.697133][T15925] ? skb_put+0x11b/0x210 [ 376.697159][T15925] netlink_sendmsg+0x805/0xb30 [ 376.697192][T15925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.697219][T15925] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.697250][T15925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.697270][T15925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.697293][T15925] __sock_sendmsg+0x21c/0x270 [ 376.697327][T15925] ____sys_sendmsg+0x505/0x830 [ 376.697359][T15925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.697394][T15925] ? import_iovec+0x74/0xa0 [ 376.697420][T15925] ___sys_sendmsg+0x21f/0x2a0 [ 376.697445][T15925] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.697508][T15925] ? __fget_files+0x2a/0x420 [ 376.697534][T15925] ? __fget_files+0x3a0/0x420 [ 376.697573][T15925] __x64_sys_sendmsg+0x19b/0x260 [ 376.697601][T15925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.697637][T15925] ? __pfx_ksys_write+0x10/0x10 [ 376.697659][T15925] ? rcu_is_watching+0x15/0xb0 [ 376.697683][T15925] ? do_syscall_64+0xbe/0x3b0 [ 376.697718][T15925] do_syscall_64+0xfa/0x3b0 [ 376.697738][T15925] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.697758][T15925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.697778][T15925] ? clear_bhb_loop+0x60/0xb0 [ 376.697801][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.697820][T15925] RIP: 0033:0x7f275e98eec9 [ 376.697838][T15925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.697855][T15925] RSP: 002b:00007f275f82a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.697875][T15925] RAX: ffffffffffffffda RBX: 00007f275ebe5fa0 RCX: 00007f275e98eec9 [ 376.697890][T15925] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 376.697902][T15925] RBP: 00007f275f82a090 R08: 0000000000000000 R09: 0000000000000000 [ 376.697914][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.697926][T15925] R13: 00007f275ebe6038 R14: 00007f275ebe5fa0 R15: 00007ffef6e1b718 [ 376.697958][T15925] [ 377.089922][T15925] macsec0: entered promiscuous mode [ 377.095167][T15925] macsec0: entered allmulticast mode [ 377.649199][T15953] __nla_validate_parse: 5 callbacks suppressed [ 377.649219][T15953] netlink: 212860 bytes leftover after parsing attributes in process `syz.4.2579'. [ 377.746418][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 377.824862][T15961] veth15: entered promiscuous mode [ 377.970955][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2584'. [ 378.023116][T15971] bridge0: entered promiscuous mode [ 378.036773][T15971] macsec2: entered promiscuous mode [ 378.049923][T15971] bridge0: port 4(macsec2) entered blocking state [ 378.058433][T15971] bridge0: port 4(macsec2) entered disabled state [ 378.065393][T15971] macsec2: entered allmulticast mode [ 378.074448][T15971] bridge0: entered allmulticast mode [ 378.093259][T15971] macsec2: left allmulticast mode [ 378.104256][T15971] bridge0: left allmulticast mode [ 378.111126][T15971] bridge0: left promiscuous mode [ 378.264756][T15983] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2588'. [ 378.625463][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.791701][T16000] ip6tnl4: entered promiscuous mode [ 378.939507][T16005] Bluetooth: MGMT ver 1.23 [ 378.997308][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2598'. [ 379.008612][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2596'. [ 379.067124][T15988] lo speed is unknown, defaulting to 1000 [ 379.111655][T15988] lo speed is unknown, defaulting to 1000 [ 379.203024][T16014] Can't find ip_set type bitmap:ip [ 379.204355][T16015] Can't find ip_set type bitmap:ip [ 379.571913][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2601'. [ 379.761844][T16030] bond6: entered promiscuous mode [ 379.775391][T16030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.879391][T16032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.905807][T16032] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 379.918880][T16032] bond6: (slave vcan1): Error -95 calling set_mac_address [ 379.959449][T15999] lo speed is unknown, defaulting to 1000 [ 379.988466][T15999] lo speed is unknown, defaulting to 1000 [ 380.054307][T16043] FAULT_INJECTION: forcing a failure. [ 380.054307][T16043] name failslab, interval 1, probability 0, space 0, times 0 [ 380.114915][T16043] CPU: 1 UID: 0 PID: 16043 Comm: syz.0.2604 Not tainted syzkaller #0 PREEMPT(full) [ 380.114943][T16043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.114956][T16043] Call Trace: [ 380.114963][T16043] [ 380.114972][T16043] dump_stack_lvl+0x189/0x250 [ 380.114998][T16043] ? __pfx____ratelimit+0x10/0x10 [ 380.115020][T16043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.115042][T16043] ? __pfx__printk+0x10/0x10 [ 380.115074][T16043] ? __pfx___might_resched+0x10/0x10 [ 380.115108][T16043] should_fail_ex+0x414/0x560 [ 380.115140][T16043] should_failslab+0xa8/0x100 [ 380.115170][T16043] __kmalloc_node_noprof+0xd1/0x4e0 [ 380.115194][T16043] ? crypto_create_tfm_node+0x83/0x3f0 [ 380.115227][T16043] crypto_create_tfm_node+0x83/0x3f0 [ 380.115260][T16043] crypto_alloc_tfm_node+0x172/0x3f0 [ 380.115298][T16043] macsec_validate_attr+0x109/0x460 [ 380.115322][T16043] ? __pfx_macsec_validate_attr+0x10/0x10 [ 380.115344][T16043] ? __nla_parse+0x40/0x60 [ 380.115367][T16043] rtnl_newlink+0xb62/0x1c80 [ 380.115388][T16043] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 380.115424][T16043] ? __x64_sys_sendmsg+0x19b/0x260 [ 380.115455][T16043] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.115505][T16043] ? kasan_quarantine_put+0xdd/0x220 [ 380.115527][T16043] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.115555][T16043] ? nlmon_xmit+0xb0/0x100 [ 380.115574][T16043] ? kmem_cache_free+0x18f/0x400 [ 380.115606][T16043] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.115636][T16043] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.115658][T16043] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.115686][T16043] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 380.115719][T16043] ? __dev_queue_xmit+0x27b/0x3b50 [ 380.115745][T16043] ? __dev_queue_xmit+0x27b/0x3b50 [ 380.115769][T16043] ? __dev_queue_xmit+0x27b/0x3b50 [ 380.115797][T16043] ? __dev_queue_xmit+0x1d79/0x3b50 [ 380.115830][T16043] ? __lock_acquire+0xab9/0xd20 [ 380.115885][T16043] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.115909][T16043] rtnetlink_rcv_msg+0x7cf/0xb70 [ 380.115935][T16043] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 380.115956][T16043] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.115975][T16043] ? ref_tracker_free+0x63a/0x7d0 [ 380.116005][T16043] ? __asan_memcpy+0x40/0x70 [ 380.116025][T16043] ? __pfx_ref_tracker_free+0x10/0x10 [ 380.116060][T16043] netlink_rcv_skb+0x205/0x470 [ 380.116082][T16043] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.116103][T16043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.116134][T16043] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.116161][T16043] netlink_unicast+0x82f/0x9e0 [ 380.116185][T16043] ? __pfx_netlink_unicast+0x10/0x10 [ 380.116207][T16043] ? netlink_sendmsg+0x642/0xb30 [ 380.116226][T16043] ? skb_put+0x11b/0x210 [ 380.116252][T16043] netlink_sendmsg+0x805/0xb30 [ 380.116284][T16043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.116310][T16043] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.116341][T16043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.116360][T16043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.116381][T16043] __sock_sendmsg+0x21c/0x270 [ 380.116422][T16043] ____sys_sendmsg+0x505/0x830 [ 380.116452][T16043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.116485][T16043] ? import_iovec+0x74/0xa0 [ 380.116511][T16043] ___sys_sendmsg+0x21f/0x2a0 [ 380.116537][T16043] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.116597][T16043] ? __fget_files+0x2a/0x420 [ 380.116621][T16043] ? __fget_files+0x3a0/0x420 [ 380.116659][T16043] __x64_sys_sendmsg+0x19b/0x260 [ 380.116687][T16043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.116722][T16043] ? __pfx_ksys_write+0x10/0x10 [ 380.116744][T16043] ? rcu_is_watching+0x15/0xb0 [ 380.116768][T16043] ? do_syscall_64+0xbe/0x3b0 [ 380.116794][T16043] do_syscall_64+0xfa/0x3b0 [ 380.116814][T16043] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.116834][T16043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.116853][T16043] ? clear_bhb_loop+0x60/0xb0 [ 380.116877][T16043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.116896][T16043] RIP: 0033:0x7f178778eec9 [ 380.116914][T16043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.116932][T16043] RSP: 002b:00007f17886a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.116953][T16043] RAX: ffffffffffffffda RBX: 00007f17879e5fa0 RCX: 00007f178778eec9 [ 380.116967][T16043] RDX: 0000000000000800 RSI: 0000200000000440 RDI: 0000000000000003 [ 380.116980][T16043] RBP: 00007f17886a7090 R08: 0000000000000000 R09: 0000000000000000 [ 380.116992][T16043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.117004][T16043] R13: 00007f17879e6038 R14: 00007f17879e5fa0 R15: 00007fff63ef5298 [ 380.117036][T16043] [ 381.273712][T16067] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2611'. [ 381.513513][T16078] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 381.847244][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2615'. [ 382.001025][T16079] bond6 (unregistering): Released all slaves [ 382.161672][T16085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2616'. [ 382.177134][T16083] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 382.535330][T16071] lo speed is unknown, defaulting to 1000 [ 382.559782][T16071] lo speed is unknown, defaulting to 1000 [ 382.863277][T16111] netlink: 'syz.4.2621': attribute type 4 has an invalid length. [ 383.576858][T16106] lo speed is unknown, defaulting to 1000 [ 383.586027][T16106] lo speed is unknown, defaulting to 1000 [ 384.231223][T16131] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 384.640216][T16159] xt_limit: Overflow, try lower: 271964/0 [ 384.893035][T16169] __nla_validate_parse: 3 callbacks suppressed [ 384.893055][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 384.973117][T16173] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 385.202811][T16176] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 385.229439][T16176] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 385.298881][T16142] lo speed is unknown, defaulting to 1000 [ 385.307608][T16142] lo speed is unknown, defaulting to 1000 [ 385.738874][T16190] Bluetooth: MGMT ver 1.23 [ 386.307606][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 386.466962][T16211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2644'. [ 386.555944][T16193] lo speed is unknown, defaulting to 1000 [ 386.599014][T16193] lo speed is unknown, defaulting to 1000 [ 386.608093][T16215] syzkaller1: entered promiscuous mode [ 386.613644][T16215] syzkaller1: entered allmulticast mode [ 386.839436][T16231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2649'. [ 386.987354][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'. [ 387.370089][T16221] lo speed is unknown, defaulting to 1000 [ 387.384037][T16221] lo speed is unknown, defaulting to 1000 [ 387.615310][T16251] syz.2.2653: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.634460][T16251] CPU: 1 UID: 0 PID: 16251 Comm: syz.2.2653 Not tainted syzkaller #0 PREEMPT(full) [ 387.634487][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.634500][T16251] Call Trace: [ 387.634508][T16251] [ 387.634516][T16251] dump_stack_lvl+0x189/0x250 [ 387.634546][T16251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.634568][T16251] ? __pfx__printk+0x10/0x10 [ 387.634593][T16251] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.634616][T16251] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.634639][T16251] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 387.634664][T16251] warn_alloc+0x214/0x310 [ 387.634698][T16251] ? __pfx_warn_alloc+0x10/0x10 [ 387.634735][T16251] ? __get_vm_area_node+0x28f/0x300 [ 387.634761][T16251] ? xskq_create+0xbf/0x170 [ 387.634785][T16251] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 387.634850][T16251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.634883][T16251] ? __kasan_kmalloc+0x93/0xb0 [ 387.634912][T16251] vmalloc_user_noprof+0xad/0xf0 [ 387.634938][T16251] ? xskq_create+0xbf/0x170 [ 387.634958][T16251] xskq_create+0xbf/0x170 [ 387.634981][T16251] xsk_init_queue+0xb0/0x110 [ 387.635002][T16251] xsk_setsockopt+0x57b/0x8d0 [ 387.635034][T16251] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.635062][T16251] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.635094][T16251] ? __fget_files+0x2a/0x420 [ 387.635119][T16251] ? aa_sock_opt_perm+0xff/0x1b0 [ 387.635141][T16251] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 387.635160][T16251] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.635190][T16251] do_sock_setsockopt+0x17c/0x1b0 [ 387.635220][T16251] __x64_sys_setsockopt+0x13f/0x1b0 [ 387.635250][T16251] do_syscall_64+0xfa/0x3b0 [ 387.635271][T16251] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.635292][T16251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.635311][T16251] ? clear_bhb_loop+0x60/0xb0 [ 387.635334][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.635353][T16251] RIP: 0033:0x7f275e98eec9 [ 387.635370][T16251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.635387][T16251] RSP: 002b:00007f275f7e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.635408][T16251] RAX: ffffffffffffffda RBX: 00007f275ebe6180 RCX: 00007f275e98eec9 [ 387.635422][T16251] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 387.635434][T16251] RBP: 00007f275ea11f91 R08: 0000000000000004 R09: 0000000000000000 [ 387.635446][T16251] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 387.635459][T16251] R13: 00007f275ebe6218 R14: 00007f275ebe6180 R15: 00007ffef6e1b718 [ 387.635491][T16251] [ 387.635509][T16251] Mem-Info: [ 387.926322][T16251] active_anon:13696 inactive_anon:0 isolated_anon:0 [ 387.926322][T16251] active_file:3219 inactive_file:40007 isolated_file:0 [ 387.926322][T16251] unevictable:768 dirty:184 writeback:0 [ 387.926322][T16251] slab_reclaimable:12374 slab_unreclaimable:169518 [ 387.926322][T16251] mapped:37254 shmem:4228 pagetables:997 [ 387.926322][T16251] sec_pagetables:0 bounce:0 [ 387.926322][T16251] kernel_misc_reclaimable:0 [ 387.926322][T16251] free:1231303 free_pcp:19671 free_cma:0 [ 388.043176][T16251] Node 0 active_anon:54784kB inactive_anon:0kB active_file:12876kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140916kB dirty:736kB writeback:0kB shmem:15376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14000kB pagetables:3848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.059448][T16259] netlink: 'syz.0.2655': attribute type 12 has an invalid length. [ 388.081325][T16251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.133078][T16259] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2655'. [ 388.200700][T16251] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.294160][T16251] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 388.314702][T16251] Node 0 DMA32 free:1020688kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46736kB inactive_anon:0kB active_file:12876kB inactive_file:158016kB unevictable:1536kB writepending:736kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:66072kB local_pcp:33384kB free_cma:0kB [ 388.367569][T16251] lowmem_reserve[]: 0 0 1 1 1 [ 388.372322][T16251] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 388.418170][T16251] lowmem_reserve[]: 0 0 0 0 0 [ 388.422932][T16251] Node 1 Normal free:3891152kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17472kB local_pcp:8896kB free_cma:0kB [ 388.460801][T16251] lowmem_reserve[]: 0 0 0 0 0 [ 388.470796][T16251] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.497253][T16251] Node 0 DMA32: 821*4kB (M) 1467*8kB (UME) 698*16kB (UME) 673*32kB (UME) 84*64kB (UME) 72*128kB (UM) 24*256kB (UME) 10*512kB (UME) 17*1024kB (UM) 5*2048kB (UM) 226*4096kB (M) = 1026924kB [ 388.529865][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'. [ 388.540097][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'. [ 388.540797][T16251] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 388.578087][T16251] Node 1 Normal: 194*4kB (UM) 55*8kB (UME) 49*16kB (UME) 148*32kB (UME) 48*64kB (UME) 11*128kB (UME) 8*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3891152kB [ 388.583386][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 388.597683][T16251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.607235][T16265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2657'. [ 388.615150][T16251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.633669][T16251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.643417][T16251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.655081][T16251] 44601 total pagecache pages [ 388.659911][T16251] 0 pages in swap cache [ 388.664169][T16251] Free swap = 124996kB [ 388.668450][T16270] 8021q: adding VLAN 0 to HW filter on device bond11 [ 388.668796][T16251] Total swap = 124996kB [ 388.681903][T16251] 2097051 pages RAM [ 388.685731][T16251] 0 pages HighMem/MovableOnly [ 388.693274][T16251] 424998 pages reserved [ 388.697557][T16251] 0 pages cma reserved [ 389.043934][T16277] macsec2: entered promiscuous mode [ 389.052729][T16277] macsec2: entered allmulticast mode [ 389.079682][T16258] lo speed is unknown, defaulting to 1000 [ 389.095958][T16258] lo speed is unknown, defaulting to 1000 [ 389.190569][T16285] netlink: zone id is out of range [ 389.215919][T16285] netlink: get zone limit has 8 unknown bytes [ 389.368483][T16296] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 389.383945][T16296] veth15: left promiscuous mode [ 389.508893][T16296] macsec2: left promiscuous mode [ 389.513885][T16296] macsec2: left allmulticast mode [ 389.634865][T16300] geneve3: entered promiscuous mode [ 389.642160][T16300] geneve3: entered allmulticast mode [ 389.655483][T16304] syz_tun: entered allmulticast mode [ 389.687292][ T9639] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.706674][ T9639] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.802322][T16305] syz_tun (unregistering): left allmulticast mode [ 389.864772][ T9639] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.885915][ T9639] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.464390][T16322] bond0 (unregistering): left promiscuous mode [ 390.473542][T16322] bond_slave_0: left promiscuous mode [ 390.480055][T16322] bond_slave_1: left promiscuous mode [ 390.487050][T16322] !: left promiscuous mode [ 390.514128][T16322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.515971][T16326] __nla_validate_parse: 4 callbacks suppressed [ 390.515987][T16326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2675'. [ 390.543939][T16322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.558157][T16322] bond0 (unregistering): (slave 0!): Releasing backup interface [ 390.569956][T16322] bond0 (unregistering): Released all slaves [ 390.799971][T16333] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 390.809388][T16333] netlink: 'syz.2.2677': attribute type 2 has an invalid length. [ 391.190095][T16317] lo speed is unknown, defaulting to 1000 [ 391.243821][T16319] lo speed is unknown, defaulting to 1000 [ 391.367303][T16319] lo speed is unknown, defaulting to 1000 [ 391.638834][T16357] netlink: 'syz.2.2683': attribute type 29 has an invalid length. [ 391.658036][T16357] netlink: 'syz.2.2683': attribute type 29 has an invalid length. [ 391.764070][T16317] lo speed is unknown, defaulting to 1000 [ 392.489014][T16355] lo speed is unknown, defaulting to 1000 [ 392.516983][T16355] lo speed is unknown, defaulting to 1000 [ 392.647314][T16370] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2686'. [ 392.931499][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 394.272126][T16413] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.352193][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 395.045731][T16446] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 395.254644][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 395.318938][T16461] sctp: [Deprecated]: syz.4.2711 (pid 16461) Use of int in max_burst socket option deprecated. [ 395.318938][T16461] Use struct sctp_assoc_value instead [ 395.330742][T16466] bridge0: port 3(team0) entered disabled state [ 395.377751][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 395.397513][T16466] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 395.430652][T16469] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 395.518558][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2712'. [ 395.519162][T16461] IPVS: length: 236 != 8 [ 395.532039][T16459] IPVS: length: 236 != 8 [ 395.725592][ T9645] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.735236][ T9645] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.775762][ T9645] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.847923][ T9645] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.867688][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2718'. [ 395.885807][T16484] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 395.926178][T16428] lo speed is unknown, defaulting to 1000 [ 395.934836][T16428] lo speed is unknown, defaulting to 1000 [ 396.140715][T16497] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 396.176490][T16507] sctp: [Deprecated]: syz.2.2722 (pid 16507) Use of int in maxseg socket option. [ 396.176490][T16507] Use struct sctp_assoc_value instead [ 396.222998][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 396.246766][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2722'. [ 396.905472][T16514] lo speed is unknown, defaulting to 1000 [ 396.931017][T16514] lo speed is unknown, defaulting to 1000 [ 397.537418][T16551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.761391][T16560] tun0: tun_chr_ioctl cmd 1074812117 [ 397.953304][T16566] Unsupported ieee802154 address type: 0 [ 398.024133][T16572] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2739'. [ 398.155714][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 398.532630][T16579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2741'. [ 398.645162][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2743'. [ 398.960881][T16592] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 399.028217][T16592] netlink: 'syz.1.2746': attribute type 10 has an invalid length. [ 399.048188][T16592] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 399.089280][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 399.139641][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'. [ 399.163283][T16610] netlink: 'syz.4.2749': attribute type 1 has an invalid length. [ 399.201158][T16613] syz.3.2750: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.243933][T16613] CPU: 1 UID: 0 PID: 16613 Comm: syz.3.2750 Not tainted syzkaller #0 PREEMPT(full) [ 399.243963][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.243976][T16613] Call Trace: [ 399.243985][T16613] [ 399.243994][T16613] dump_stack_lvl+0x189/0x250 [ 399.244025][T16613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.244048][T16613] ? __pfx__printk+0x10/0x10 [ 399.244075][T16613] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 399.244099][T16613] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 399.244123][T16613] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 399.244149][T16613] warn_alloc+0x214/0x310 [ 399.244180][T16613] ? stack_depot_save_flags+0x40/0x860 [ 399.244212][T16613] ? __pfx_warn_alloc+0x10/0x10 [ 399.244244][T16613] ? kasan_save_track+0x4f/0x80 [ 399.244269][T16613] ? xskq_create+0x56/0x170 [ 399.244288][T16613] ? xsk_init_queue+0xb0/0x110 [ 399.244304][T16613] ? xsk_setsockopt+0x4dc/0x8d0 [ 399.244332][T16613] ? do_sock_setsockopt+0x17c/0x1b0 [ 399.244355][T16613] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 399.244378][T16613] ? do_syscall_64+0xfa/0x3b0 [ 399.244399][T16613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.244429][T16613] __vmalloc_node_range_noprof+0x125/0x12f0 [ 399.244491][T16613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.244527][T16613] ? __kasan_kmalloc+0x93/0xb0 [ 399.244556][T16613] vmalloc_user_noprof+0xad/0xf0 [ 399.244584][T16613] ? xskq_create+0xbf/0x170 [ 399.244605][T16613] xskq_create+0xbf/0x170 [ 399.244629][T16613] xsk_init_queue+0xb0/0x110 [ 399.244651][T16613] xsk_setsockopt+0x4dc/0x8d0 [ 399.244685][T16613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.244732][T16613] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.244766][T16613] ? aa_sock_opt_perm+0xff/0x1b0 [ 399.244788][T16613] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 399.244809][T16613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.244841][T16613] do_sock_setsockopt+0x17c/0x1b0 [ 399.244877][T16613] __x64_sys_setsockopt+0x13f/0x1b0 [ 399.244910][T16613] do_syscall_64+0xfa/0x3b0 [ 399.244932][T16613] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.244954][T16613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.244973][T16613] ? clear_bhb_loop+0x60/0xb0 [ 399.244998][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.245018][T16613] RIP: 0033:0x7f8b0a58eec9 [ 399.245037][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.245055][T16613] RSP: 002b:00007f8b0b43b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.245076][T16613] RAX: ffffffffffffffda RBX: 00007f8b0a7e6090 RCX: 00007f8b0a58eec9 [ 399.245092][T16613] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 399.245104][T16613] RBP: 00007f8b0a611f91 R08: 0000000000000004 R09: 0000000000000000 [ 399.245118][T16613] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.245130][T16613] R13: 00007f8b0a7e6128 R14: 00007f8b0a7e6090 R15: 00007fffe439ad58 [ 399.245164][T16613] [ 399.245177][T16613] Mem-Info: [ 399.580141][T16613] active_anon:12877 inactive_anon:0 isolated_anon:0 [ 399.580141][T16613] active_file:3219 inactive_file:40011 isolated_file:0 [ 399.580141][T16613] unevictable:768 dirty:157 writeback:0 [ 399.580141][T16613] slab_reclaimable:12623 slab_unreclaimable:165751 [ 399.580141][T16613] mapped:33056 shmem:4228 pagetables:1046 [ 399.580141][T16613] sec_pagetables:0 bounce:0 [ 399.580141][T16613] kernel_misc_reclaimable:0 [ 399.580141][T16613] free:1240101 free_pcp:14985 free_cma:0 [ 399.645122][T16613] Node 0 active_anon:51508kB inactive_anon:0kB active_file:12876kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132224kB dirty:628kB writeback:0kB shmem:15376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14116kB pagetables:3944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.682831][T16613] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 399.716657][T16613] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.748969][T16613] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 399.754961][T16613] Node 0 DMA32 free:1053864kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51460kB inactive_anon:0kB active_file:12876kB inactive_file:158032kB unevictable:1536kB writepending:628kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:42668kB local_pcp:21216kB free_cma:0kB [ 399.788996][T16613] lowmem_reserve[]: 0 0 1 1 1 [ 399.793967][T16613] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 399.827565][T16613] lowmem_reserve[]: 0 0 0 0 0 [ 399.832579][T16613] Node 1 Normal free:3891152kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17504kB local_pcp:8896kB free_cma:0kB [ 399.866721][T16613] lowmem_reserve[]: 0 0 0 0 0 [ 399.871582][T16613] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 399.884922][T16613] Node 0 DMA32: 269*4kB (U) 200*8kB (UE) 729*16kB (UE) 841*32kB (UME) 142*64kB (UME) 68*128kB (UME) 28*256kB (UME) 19*512kB (UM) 23*1024kB (UM) 6*2048kB (UM) 230*4096kB (UME) = 1053860kB [ 399.904555][T16613] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 399.920035][T16613] Node 1 Normal: 194*4kB (UM) 55*8kB (UME) 49*16kB (UME) 148*32kB (UME) 48*64kB (UME) 11*128kB (UME) 8*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3891152kB [ 399.942035][T16613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 399.952407][T16613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 399.963522][T16613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 399.974595][T16613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 399.986025][T16613] 47456 total pagecache pages [ 399.991808][T16613] 0 pages in swap cache [ 399.996514][T16613] Free swap = 124996kB [ 400.000843][T16613] Total swap = 124996kB [ 400.005097][T16613] 2097051 pages RAM [ 400.009582][T16613] 0 pages HighMem/MovableOnly [ 400.014393][T16613] 424998 pages reserved [ 400.019811][T16613] 0 pages cma reserved [ 400.184683][T16629] netlink: 'syz.1.2754': attribute type 13 has an invalid length. [ 400.193050][T16629] netlink: 'syz.1.2754': attribute type 17 has an invalid length. [ 400.226967][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.235501][T16629] batman_adv: batadv0: Interface activated: dummy0 [ 400.249446][T16629] batadv0: mtu less than device minimum [ 400.257143][T16629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.269554][T16629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.281510][T16629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.293459][T16629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.305522][T16629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.317582][T16629] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.659745][T16650] __nla_validate_parse: 6 callbacks suppressed [ 400.659765][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2760'. [ 400.848116][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 400.868258][T16655] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 400.983164][T16661] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2762'. [ 401.328186][T16689] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2770'. [ 401.538507][T16702] netlink: 'syz.1.2775': attribute type 10 has an invalid length. [ 401.645394][T16702] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 401.665096][ T8693] bond0: (slave wlan1): interface is now down [ 401.690814][T16702] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 401.702459][ T8693] bond0: (slave wlan1): interface is now down [ 401.720279][T16702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 401.730817][ T8693] bond0: (slave wlan1): interface is now down [ 401.757236][ T9645] bond0: (slave wlan1): interface is now down [ 401.763840][ T9645] bond0: now running without any active interface! [ 401.829871][T16716] net_ratelimit: 14 callbacks suppressed [ 401.829891][T16716] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 402.004322][T16724] netlink: 'syz.2.2783': attribute type 41 has an invalid length. [ 402.013071][T16725] netlink: 'syz.2.2783': attribute type 41 has an invalid length. [ 402.110591][ T5883] Bluetooth: hci4: link tx timeout [ 402.162264][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 402.171262][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2784'. [ 402.201210][ T5883] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 402.205361][ C1] ------------[ cut here ]------------ [ 402.214765][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 402.225668][ C1] WARNING: CPU: 1 PID: 16722 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 402.235823][ C1] Modules linked in: [ 402.239774][ C1] CPU: 1 UID: 0 PID: 16722 Comm: syz.1.2775 Not tainted syzkaller #0 PREEMPT(full) [ 402.249189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.259289][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 402.265597][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 9d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 af 76 90 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 402.285253][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 402.291373][ C1] RAX: db955e37e573b900 RBX: 000000000000000c RCX: ffff888027b30000 [ 402.299414][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 402.307435][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 402.315437][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807f470b68 [ 402.323458][ C1] R13: 0000000000000000 R14: ffff888079df0e80 R15: ffff888079df3138 [ 402.331490][ C1] FS: 00007f8497b9a6c0(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 402.340476][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.347110][ C1] CR2: 0000200000001080 CR3: 000000002d818000 CR4: 00000000003526f0 [ 402.350547][T16739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2781'. [ 402.355093][ C1] Call Trace: [ 402.355107][ C1] [ 402.355131][ C1] rate_control_send_low+0x1a7/0x7b0 [ 402.375524][ C1] rate_control_get_rate+0x20b/0x5d0 [ 402.380883][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 402.386747][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 402.393096][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 402.398543][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 402.404294][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 402.409980][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 402.415468][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 402.421077][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 402.426593][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 402.432701][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 402.438292][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 402.445516][ C1] __iterate_interfaces+0x2ab/0x590 [ 402.450756][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 402.456884][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 402.464134][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 402.470262][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 402.477358][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 402.482605][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 402.488480][ C1] __hrtimer_run_queues+0x529/0xc60 [ 402.493736][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 402.499524][ C1] ? read_tsc+0x9/0x20 [ 402.503631][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 402.509515][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 402.514745][ C1] handle_softirqs+0x283/0x870 [ 402.519591][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 402.524380][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 402.529756][ C1] __irq_exit_rcu+0xca/0x1f0 [ 402.534365][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 402.539617][ C1] irq_exit_rcu+0x9/0x30 [ 402.543869][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 402.549564][ C1] [ 402.552507][ C1] [ 402.555456][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.561490][ C1] RIP: 0010:unwind_next_frame+0x174f/0x2390 [ 402.567433][ C1] Code: 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 19 0b 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 2b 0b 00 00 <48> 0f bf 03 49 01 c4 49 8d 56 40 4c 89 f7 4c 89 e6 eb 5d 49 8d 5e [ 402.587084][ C1] RSP: 0018:ffffc90004eceef8 EFLAGS: 00000246 [ 402.593175][ C1] RAX: 0000000000000000 RBX: ffffffff903fcff6 RCX: 0000000000000000 [ 402.601200][ C1] RDX: ffffffff903fcff7 RSI: 0000000000000001 RDI: ffffc90004ecf028 [ 402.609223][ C1] RBP: dffffc0000000000 R08: ffffc90004ecf027 R09: 0000000000000000 [ 402.617243][ C1] R10: ffffc90004ecf018 R11: fffff520009d9e05 R12: ffffc90004ecf370 [ 402.625236][ C1] R13: ffffc90004ecf018 R14: ffffc90004ecefc8 R15: 1ffffffff207f9ff [ 402.633285][ C1] ? unwind_next_frame+0xc98/0x2390 [ 402.638557][ C1] ? unwind_next_frame+0xa5/0x2390 [ 402.643702][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 402.648551][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 402.654738][ C1] arch_stack_walk+0x11c/0x150 [ 402.659575][ C1] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 402.666236][ C1] stack_trace_save+0x9c/0xe0 [ 402.670951][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 402.676385][ C1] ? stack_trace_save+0x9c/0xe0 [ 402.681280][ C1] ? stack_depot_save_flags+0x40/0x860 [ 402.686793][ C1] kasan_save_track+0x3e/0x80 [ 402.691481][ C1] ? kasan_save_track+0x3e/0x80 [ 402.696370][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 402.701216][ C1] __kasan_kmalloc+0x93/0xb0 [ 402.705804][ C1] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 402.712241][ C1] ? __kernfs_new_node+0x9c/0x7e0 [ 402.717304][ C1] kstrdup+0x42/0x100 [ 402.721297][ C1] __kernfs_new_node+0x9c/0x7e0 [ 402.726179][ C1] ? __lock_acquire+0xab9/0xd20 [ 402.731050][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 402.736544][ C1] ? kernfs_root+0x1c/0x230 [ 402.741064][ C1] ? kernfs_root+0x1c/0x230 [ 402.745560][ C1] ? kernfs_root+0x1c/0x230 [ 402.750086][ C1] ? kernfs_root+0x1c/0x230 [ 402.754591][ C1] kernfs_new_node+0x102/0x210 [ 402.759377][ C1] __kernfs_create_file+0x4b/0x2e0 [ 402.764487][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 402.769887][ C1] internal_create_group+0x66d/0x1110 [ 402.775256][ C1] ? kobject_add+0x155/0x220 [ 402.779898][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 402.785723][ C1] ? rcu_is_watching+0x15/0xb0 [ 402.790535][ C1] sysfs_create_groups+0x59/0x120 [ 402.795590][ C1] ib_setup_port_attrs+0x1407/0x2070 [ 402.800938][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 402.806603][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 402.812598][ C1] ? device_add+0x70b/0xb50 [ 402.817126][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 402.822155][ C1] rdma_dev_init_net+0x1dd/0x270 [ 402.827119][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 402.832582][ C1] ops_init+0x35c/0x5c0 [ 402.836788][ C1] setup_net+0x10c/0x320 [ 402.841022][ C1] ? __pfx_setup_net+0x10/0x10 [ 402.845786][ C1] ? copy_net_ns+0x304/0x4d0 [ 402.850428][ C1] ? down_read_killable+0x1d1/0x350 [ 402.855646][ C1] copy_net_ns+0x31b/0x4d0 [ 402.860079][ C1] create_new_namespaces+0x3f3/0x720 [ 402.865365][ C1] ? security_capable+0x7e/0x2e0 [ 402.870327][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 402.876081][ C1] ksys_unshare+0x4c8/0x8c0 [ 402.880602][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 402.885628][ C1] ? rcu_is_watching+0x15/0xb0 [ 402.890427][ C1] __x64_sys_unshare+0x38/0x50 [ 402.895185][ C1] do_syscall_64+0xfa/0x3b0 [ 402.899734][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.904950][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.911031][ C1] ? clear_bhb_loop+0x60/0xb0 [ 402.915704][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.921629][ C1] RIP: 0033:0x7f8496d8eec9 [ 402.926093][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.945738][ C1] RSP: 002b:00007f8497b9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 402.954178][ C1] RAX: ffffffffffffffda RBX: 00007f8496fe6180 RCX: 00007f8496d8eec9 [ 402.962176][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 402.970165][ C1] RBP: 00007f8496e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.978168][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.986188][ C1] R13: 00007f8496fe6218 R14: 00007f8496fe6180 R15: 00007ffe80718688 [ 402.994181][ C1] [ 402.997228][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 403.004504][ C1] CPU: 1 UID: 0 PID: 16722 Comm: syz.1.2775 Not tainted syzkaller #0 PREEMPT(full) [ 403.013863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.023907][ C1] Call Trace: [ 403.027185][ C1] [ 403.030046][ C1] dump_stack_lvl+0x99/0x250 [ 403.034626][ C1] ? __asan_memcpy+0x40/0x70 [ 403.039208][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.044407][ C1] ? __pfx__printk+0x10/0x10 [ 403.049002][ C1] vpanic+0x281/0x750 [ 403.052976][ C1] ? __pfx__printk+0x10/0x10 [ 403.057561][ C1] ? __pfx_vpanic+0x10/0x10 [ 403.062055][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 403.067345][ C1] panic+0xb9/0xc0 [ 403.071057][ C1] ? __pfx_panic+0x10/0x10 [ 403.075476][ C1] __warn+0x31b/0x4b0 [ 403.079448][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 403.085077][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 403.090706][ C1] report_bug+0x2be/0x4f0 [ 403.095023][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 403.100649][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 403.106276][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 403.111901][ C1] handle_bug+0x84/0x160 [ 403.116138][ C1] exc_invalid_op+0x1a/0x50 [ 403.120636][ C1] asm_exc_invalid_op+0x1a/0x20 [ 403.125474][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 403.131711][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 9d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 af 76 90 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 403.151311][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 403.157373][ C1] RAX: db955e37e573b900 RBX: 000000000000000c RCX: ffff888027b30000 [ 403.165335][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 403.173297][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 403.181285][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807f470b68 [ 403.189248][ C1] R13: 0000000000000000 R14: ffff888079df0e80 R15: ffff888079df3138 [ 403.197228][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 403.202875][ C1] rate_control_send_low+0x1a7/0x7b0 [ 403.208160][ C1] rate_control_get_rate+0x20b/0x5d0 [ 403.213445][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 403.219252][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 403.225570][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 403.230950][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 403.236670][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 403.242298][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 403.247747][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 403.253292][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 403.258751][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 403.264825][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 403.270371][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 403.277567][ C1] __iterate_interfaces+0x2ab/0x590 [ 403.282763][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 403.288821][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 403.296021][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 403.302098][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 403.309120][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 403.314320][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 403.320123][ C1] __hrtimer_run_queues+0x529/0xc60 [ 403.325333][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 403.331057][ C1] ? read_tsc+0x9/0x20 [ 403.335129][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 403.340942][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 403.346059][ C1] handle_softirqs+0x283/0x870 [ 403.350834][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 403.355605][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 403.360894][ C1] __irq_exit_rcu+0xca/0x1f0 [ 403.365475][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 403.370665][ C1] irq_exit_rcu+0x9/0x30 [ 403.374891][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 403.380515][ C1] [ 403.383438][ C1] [ 403.386358][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.392325][ C1] RIP: 0010:unwind_next_frame+0x174f/0x2390 [ 403.398207][ C1] Code: 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 19 0b 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 2b 0b 00 00 <48> 0f bf 03 49 01 c4 49 8d 56 40 4c 89 f7 4c 89 e6 eb 5d 49 8d 5e [ 403.417803][ C1] RSP: 0018:ffffc90004eceef8 EFLAGS: 00000246 [ 403.423867][ C1] RAX: 0000000000000000 RBX: ffffffff903fcff6 RCX: 0000000000000000 [ 403.431834][ C1] RDX: ffffffff903fcff7 RSI: 0000000000000001 RDI: ffffc90004ecf028 [ 403.439803][ C1] RBP: dffffc0000000000 R08: ffffc90004ecf027 R09: 0000000000000000 [ 403.447797][ C1] R10: ffffc90004ecf018 R11: fffff520009d9e05 R12: ffffc90004ecf370 [ 403.455762][ C1] R13: ffffc90004ecf018 R14: ffffc90004ecefc8 R15: 1ffffffff207f9ff [ 403.463839][ C1] ? unwind_next_frame+0xc98/0x2390 [ 403.469038][ C1] ? unwind_next_frame+0xa5/0x2390 [ 403.474140][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 403.478900][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 403.485047][ C1] arch_stack_walk+0x11c/0x150 [ 403.489811][ C1] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 403.496401][ C1] stack_trace_save+0x9c/0xe0 [ 403.501066][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 403.506430][ C1] ? stack_trace_save+0x9c/0xe0 [ 403.511273][ C1] ? stack_depot_save_flags+0x40/0x860 [ 403.516726][ C1] kasan_save_track+0x3e/0x80 [ 403.521395][ C1] ? kasan_save_track+0x3e/0x80 [ 403.526252][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 403.531051][ C1] __kasan_kmalloc+0x93/0xb0 [ 403.535635][ C1] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 403.542048][ C1] ? __kernfs_new_node+0x9c/0x7e0 [ 403.547252][ C1] kstrdup+0x42/0x100 [ 403.551249][ C1] __kernfs_new_node+0x9c/0x7e0 [ 403.556188][ C1] ? __lock_acquire+0xab9/0xd20 [ 403.561054][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 403.566527][ C1] ? kernfs_root+0x1c/0x230 [ 403.571039][ C1] ? kernfs_root+0x1c/0x230 [ 403.575540][ C1] ? kernfs_root+0x1c/0x230 [ 403.580034][ C1] ? kernfs_root+0x1c/0x230 [ 403.584531][ C1] kernfs_new_node+0x102/0x210 [ 403.589294][ C1] __kernfs_create_file+0x4b/0x2e0 [ 403.594401][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 403.599783][ C1] internal_create_group+0x66d/0x1110 [ 403.605156][ C1] ? kobject_add+0x155/0x220 [ 403.609739][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 403.615542][ C1] ? rcu_is_watching+0x15/0xb0 [ 403.620300][ C1] sysfs_create_groups+0x59/0x120 [ 403.625331][ C1] ib_setup_port_attrs+0x1407/0x2070 [ 403.630669][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 403.636314][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.642310][ C1] ? device_add+0x70b/0xb50 [ 403.646945][ C1] add_one_compat_dev+0x3d6/0x5c0 [ 403.652000][ C1] rdma_dev_init_net+0x1dd/0x270 [ 403.656961][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 403.662451][ C1] ops_init+0x35c/0x5c0 [ 403.666625][ C1] setup_net+0x10c/0x320 [ 403.670868][ C1] ? __pfx_setup_net+0x10/0x10 [ 403.675627][ C1] ? copy_net_ns+0x304/0x4d0 [ 403.680208][ C1] ? down_read_killable+0x1d1/0x350 [ 403.685417][ C1] copy_net_ns+0x31b/0x4d0 [ 403.689831][ C1] create_new_namespaces+0x3f3/0x720 [ 403.695117][ C1] ? security_capable+0x7e/0x2e0 [ 403.700054][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 403.705785][ C1] ksys_unshare+0x4c8/0x8c0 [ 403.710310][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 403.715344][ C1] ? rcu_is_watching+0x15/0xb0 [ 403.720114][ C1] __x64_sys_unshare+0x38/0x50 [ 403.724877][ C1] do_syscall_64+0xfa/0x3b0 [ 403.729379][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.734590][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.740672][ C1] ? clear_bhb_loop+0x60/0xb0 [ 403.745351][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.751251][ C1] RIP: 0033:0x7f8496d8eec9 [ 403.755690][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.775313][ C1] RSP: 002b:00007f8497b9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 403.783731][ C1] RAX: ffffffffffffffda RBX: 00007f8496fe6180 RCX: 00007f8496d8eec9 [ 403.791698][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 403.799659][ C1] RBP: 00007f8496e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.807623][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.815585][ C1] R13: 00007f8496fe6218 R14: 00007f8496fe6180 R15: 00007ffe80718688 [ 403.823650][ C1] [ 403.826806][ C1] Kernel Offset: disabled [ 403.831117][ C1] Rebooting in 86400 seconds..