last executing test programs: 3.621223461s ago: executing program 1 (id=407): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0xb5}}}, 0x108) unshare(0x4000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50) close(r0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001140)='ns/time_for_children\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt(0xffffffffffffffff, 0x28, 0x8001, 0xfffffffffffffffc, &(0x7f0000000000)) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000068690000000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003fae8a9ad451a727"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x35f59212925f2be2, &(0x7f0000000080)=""/4026, &(0x7f0000001180)=0xfffffffffffffd1f) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 3.501489818s ago: executing program 1 (id=409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005580)={0x6, 0xf, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='syzkaller\x00', 0x1, 0x1d, &(0x7f0000001380)=""/29, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x11e, 0x1, 0x0, &(0x7f0000000740)=0xfffffffffffffff1) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x11e, 0x1, 0x0, &(0x7f0000000740)=0xfffffffffffffff1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="007ef820000000000807f4000000", 0x0, 0xd686, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf251800000008000300", @ANYRES32, @ANYRESDEC], 0x40}}, 0x20008080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000002400017e09030000000000000000010040000400ae7e7aad328a99d5b92de6ccf0b5475dd342e08eeb423ab22209b1c3933cb62df60d92ac676312372176f5e96b944f286c2f4705602e17ef68c356190047b55b36fe0da6fba024c0c17bfe70df03f3714d9d911d6b0ee222f562ac803fc5436c90a06ee5180fe9add99767ba52bf151e2f7b80d47b89d89b6e13b2dcbe2d23f74839320d29185370bdb2fce9b96732288d6e8114e6d74cad1cb4e1dc26c94b819416eb0d6eff0378b4a0791586de78ca20094442e0fcd0b98b6df8e4ccf550f467a2590ba44ca838dc04dde997a3f6d0f31c8c015d6c9aa1047a9df0b8fa"], 0x18}}, 0x4044004) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x6}, 0x80000002}], 0x4, 0x0, 0x0) 3.129087504s ago: executing program 1 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000a4000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r1, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfcdc398bdbad3515}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.972603447s ago: executing program 1 (id=417): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYBLOB="010725bd700000000000670000000c009900090000004c0000000800c30001000000d100c50035b6fbed70649d6753fe25d4638733758641febe6fa40cf3f950c68275792eb17605ab7039bcca218013e5fbdbfe30e3b4d9c4dda8ea00657e3831256e1d22429cc00e0567099dfb8088c7bc953e05553dac238e5f51e6c2a9a1cf21068eede4e0f955ec56ecd72b014b9672a8b90de7ca82440c144ae937388dc6a351f886e7810aa36e6b1aa981"], 0xfc}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060103000000000000b11c00000a00000a05000e0007000000051004000200000011000300686173683a69702c6d61726b001083520191ec2100000005000500010007000000020073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.724159371s ago: executing program 1 (id=421): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="6eb03e6570e489c5", 0x8}], 0x1}}], 0x1, 0x2000c000) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="6eb03e6570e489c5", 0x8}], 0x1}}], 0x1, 0x2000c000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000f9ff070001"], 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x9f}, 0x94) 2.48261324s ago: executing program 4 (id=427): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x0, 0xc5, 0xe23, 0x401, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 2.384845317s ago: executing program 1 (id=429): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{r4, 0x1}, {r4, 0x46c2}], 0x2, 0x0, 0x0, 0x0) close(r0) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x627}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/110, 0x6e}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000003380)=""/4093, 0xffd}, {&(0x7f0000000280)=""/50, 0x32}], 0x5}, 0xffffbffc}], 0x2, 0x62, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x3, @mcast1, 0x3}, {0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x0, {[0x1, 0x7, 0x6, 0x0, 0x81, 0x6, 0xfffff34a, 0x2]}}, 0x5c) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x4010, r7, 0x0) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x3f9, 0x10, 0x70bd26, 0x25dfdbfd, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20054080}, 0x800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x12, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000100)="4d22c17f4a226f89250d0034bc45772508673b188ff0fa3aed2b60fb6e272243b6042de2f9965af52b6951d9b5f58574ec6c0313f2bcd60b9251f65451c9a2ea823305926e4834c7b831447344669d6ba8d95d7c74433013977fb671d06ad3d9ca7c150f5a2dd6948f8de44ce10f216f844e1fe2c4fae8fce2f2bf95d544ca35c8f15fae3ddbf54c269a5d96771ab39ed30e42bccd7ac3d4521c5e7fdb5c356437672365f36e64675abd86872408c14717da4256de05f1438dd2a9af9e83cd6d91016eca831cac", 0xc7) 1.889011116s ago: executing program 4 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_exit\x00', r1}, 0x18) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x946}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.797511808s ago: executing program 4 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x200000000000000) 1.652535134s ago: executing program 3 (id=437): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000674e7f7e225262538206244d9d8de6e114ce533ca42b82a4b752e891f42368bb593354e06de50b2056505c10b68e96842e60c31d2fba6786c145ccc7bb9a313b75db0b0013305b39fa9cddb1ff7c8d330631d8b05767ffb90536d1b6a009a552be213babd79e9c5d9e2bf3134ca13e35be25b245fb8494c6ab175d0b40256fe16ebb8b048ee25177e6e4d9e78f8d71", @ANYBLOB], 0x48) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0xb0de, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) 1.583451735s ago: executing program 4 (id=439): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="771a0000000000000acb47885fbe72341f29eadfcd4e39d126f131ba07983db26fdfa90d8d488bef96d1614d9c6678ecea1f2c491b4f884289900de32aaf996a7f73414959dab3bb43449f9a518e2e27f82c5fb764c6318a6e22bb47a2c50d01790d0638e54b274e9f176064635ff3ac1287b1ade758f4084c5518387861497568c62067b274c58790ae9df74fe409ff6435ff389078ff5f50484e46cbc33fe7843c6dcf99d279ff22a6255a12d88ae1afce9c4842d5931b34d7f3c97b0cbc11852f836d29fbf6339cebb5492401000100010200"/224], 0xe0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRESHEX=r1, @ANYBLOB="1c005a8018000180140003009e59080008001e0072000900000299e8", @ANYRESDEC=r0], 0x38}}, 0x0) 1.496935473s ago: executing program 2 (id=440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.486601992s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x21}, 0x40) 1.357006627s ago: executing program 2 (id=443): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffef, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.356714557s ago: executing program 4 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x38, r7, 0x1, 0x2, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x400c000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) r11 = getpid() sendmsg$unix(r10, &(0x7f0000000a00)={&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0xff0b, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x38, 0x40488d1}, 0x8000) r12 = getpid() r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r14, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_open_procfs$namespace(r12, 0xfffffffffffffffe) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x88, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) write$cgroup_pid(r5, &(0x7f00000001c0)=r12, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000340)=0x1a, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 1.343920571s ago: executing program 3 (id=445): getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.236710366s ago: executing program 0 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x900000000000000}, 0x0) 1.17683257s ago: executing program 2 (id=447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x500}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) 1.065730677s ago: executing program 2 (id=448): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'nicvf0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'bridge_slave_0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x0, 0x2a, 0x0, 0x1, 0x1002}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000104010200000000000000000a0002070500010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20020010}, 0x8000) 1.061332664s ago: executing program 0 (id=449): socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYBLOB="010725bd700000000000670000000c009900090000004c0000000800c30001000000d100c50035b6fbed70649d6753fe25d4638733758641febe6fa40cf3f950c68275792eb17605ab7039bcca218013e5fbdbfe30e3b4d9c4dda8ea00657e3831256e1d22429cc00e0567099dfb8088c7bc953e05553dac238e5f51e6c2a9a1cf21068eede4e0f955ec56ecd72b014b9672a8b90de7ca82440c144ae937388dc6a351f886e7810aa36e6b1aa981"], 0xfc}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060103000000000000b11c00000a00000a05000e0007000000051004000200000011000300686173683a69702c6d61726b001083520191ec2100000005000500010007000000020073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 886.568167ms ago: executing program 2 (id=450): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$can_bcm(r1, 0x0, 0x8d0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0200000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4423}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x4000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000000000000000c5e0463c000000000000000000000000000000000000000000010a00402000000064", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000200000000000000000000000000000100"/112], 0xb8}}, 0x0) getpeername$ax25(r1, &(0x7f0000000100)={{}, [@default, @netrom, @netrom, @null, @default, @netrom, @bcast, @netrom]}, &(0x7f00000001c0)=0x48) 748.752325ms ago: executing program 2 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0802000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r8, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000980)=ANY=[@ANYBLOB="500000000802190000010802110000000802110000000000000000000000000064000100010882848b960c121824969864df54da2ae83e1d13adec1743be95f905350d42d5f2c38d0f3e8a8c769c3c5231b8efbf46ad753bccebf32256db1181f1e80dabe17a52392c774040b1d4018cd53e57fe32ea87f8baca7b8d96b6f05a9d7811e3c5a6a67af4a5298935d6936587e18572"], 0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 748.511226ms ago: executing program 0 (id=452): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x8) writev(r0, &(0x7f0000000180), 0x0) 746.105563ms ago: executing program 3 (id=453): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x3f, 0x0, 0x0, 0x800}, 0x4000) 625.283632ms ago: executing program 0 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pread64(r3, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8042100000000000140003006d61637365633000000000000000000038bd04a77431835dfd5b021b43fc"], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x2000000000}) 561.99837ms ago: executing program 3 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a000000080003001c74d5b4cb240c36f0660a1eea04b3633eefa990cff77c50f939dd705d2909e6c599890e75e125465fb1ffdaf305de719aeea80574bd0a88bc0d8f341f4d3de1b3", @ANYRES32=r6, @ANYBLOB="05005b0052000000"], 0x24}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10, 0x0, 0x1}, 0x18) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='xprt_retransmit\x00', r12, 0x0, 0x7}, 0x18) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090094020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x10000800) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 196.769671ms ago: executing program 0 (id=456): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060103000000000000b11c00000a00000a05000e0007000000051004000200000011000300686173683a69702c6d61726b001083520191ec2100000005000500010007000000020073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 122.727139ms ago: executing program 3 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1, @ANYRES16=r3], 0x4c}}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf6, 0xf6, 0x7, [@typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @union={0x5, 0x1, 0x0, 0x5, 0x0, 0x400, [{0x1, 0x5, 0x329}]}, @enum64={0xd, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x7, 0x2, 0x8}]}, @float={0x6, 0x0, 0x0, 0x10, 0x2}, @enum={0x9, 0x8, 0x0, 0x6, 0x4, [{0x3, 0xffed}, {0x8, 0x6}, {0x5}, {0xf, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x8, 0xde}, {0x5, 0x7bd}]}, @datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x2, 0x6, 0x1}, {0x1, 0x7, 0x4}, {0x4, 0x2, 0x7}, {0x4, 0x8, 0xffffffff}, {0x5, 0x8, 0x8001}], "8fd1"}]}, {0x0, [0x85, 0x5f, 0x61, 0x5f, 0x0]}}, &(0x7f0000000600)=""/66, 0x117, 0x42, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 54.645062ms ago: executing program 0 (id=458): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0xb5}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) close(r0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001140)='ns/time_for_children\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt(0xffffffffffffffff, 0x28, 0x8001, 0xfffffffffffffffc, &(0x7f0000000000)) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000068690000000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003fae8a9ad451a727"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x35f59212925f2be2, &(0x7f0000000080)=""/4026, &(0x7f0000001180)=0xfffffffffffffd1f) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 0s ago: executing program 4 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000feffff7f0000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b0001"], 0xa8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 82.295763][ T5849] cgroup: Unknown subsys name 'net' [ 82.472250][ T5849] cgroup: Unknown subsys name 'cpuset' [ 82.482549][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.183405][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.744917][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.755218][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.763791][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.773955][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.781637][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.789159][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.797900][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.806317][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.814178][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.822376][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.830771][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.836688][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.838700][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.853139][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.853429][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.861414][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.898333][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.923635][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.935220][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.943928][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.958810][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.968785][ T5182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.976442][ T5182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.989601][ T5182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.997393][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.748010][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 87.801815][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 87.833224][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 87.915618][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 88.121792][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.129362][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.136778][ T5863] bridge_slave_0: entered allmulticast mode [ 88.144643][ T5863] bridge_slave_0: entered promiscuous mode [ 88.171537][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 88.182538][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.189814][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.196984][ T5869] bridge_slave_0: entered allmulticast mode [ 88.204416][ T5869] bridge_slave_0: entered promiscuous mode [ 88.213192][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.220488][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.227667][ T5863] bridge_slave_1: entered allmulticast mode [ 88.235221][ T5863] bridge_slave_1: entered promiscuous mode [ 88.269426][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.276733][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.284802][ T5869] bridge_slave_1: entered allmulticast mode [ 88.292178][ T5869] bridge_slave_1: entered promiscuous mode [ 88.312310][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.319573][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.326733][ T5874] bridge_slave_0: entered allmulticast mode [ 88.334205][ T5874] bridge_slave_0: entered promiscuous mode [ 88.394076][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.401745][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.409440][ T5874] bridge_slave_1: entered allmulticast mode [ 88.416752][ T5874] bridge_slave_1: entered promiscuous mode [ 88.467527][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.497498][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.505249][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.512819][ T5864] bridge_slave_0: entered allmulticast mode [ 88.520278][ T5864] bridge_slave_0: entered promiscuous mode [ 88.530328][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.542141][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.569424][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.576651][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.583928][ T5864] bridge_slave_1: entered allmulticast mode [ 88.591686][ T5864] bridge_slave_1: entered promiscuous mode [ 88.601019][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.627130][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.694792][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.743779][ T5863] team0: Port device team_slave_0 added [ 88.762622][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.770215][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.777392][ T5859] bridge_slave_0: entered allmulticast mode [ 88.785023][ T5859] bridge_slave_0: entered promiscuous mode [ 88.795010][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.806170][ T5869] team0: Port device team_slave_0 added [ 88.814088][ T5863] team0: Port device team_slave_1 added [ 88.833279][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.840888][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.848923][ T5859] bridge_slave_1: entered allmulticast mode [ 88.856178][ T5859] bridge_slave_1: entered promiscuous mode [ 88.865115][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.877269][ T5869] team0: Port device team_slave_1 added [ 88.896938][ T5874] team0: Port device team_slave_0 added [ 88.931091][ T5182] Bluetooth: hci1: command tx timeout [ 88.931091][ T5873] Bluetooth: hci2: command tx timeout [ 88.985493][ T5874] team0: Port device team_slave_1 added [ 89.006074][ T5864] team0: Port device team_slave_0 added [ 89.012242][ T5182] Bluetooth: hci3: command tx timeout [ 89.012251][ T5873] Bluetooth: hci0: command tx timeout [ 89.034610][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.042087][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.068885][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.088215][ T5182] Bluetooth: hci4: command tx timeout [ 89.098641][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.110081][ T5864] team0: Port device team_slave_1 added [ 89.116623][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.123705][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.149934][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.161798][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.169283][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.195562][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.223623][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.246115][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.253260][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.279948][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.301089][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.308186][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.334735][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.379924][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.386905][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.413475][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.438467][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.445451][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.471847][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.516921][ T5859] team0: Port device team_slave_0 added [ 89.523869][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.531794][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.557840][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.587610][ T5863] hsr_slave_0: entered promiscuous mode [ 89.594674][ T5863] hsr_slave_1: entered promiscuous mode [ 89.604294][ T5859] team0: Port device team_slave_1 added [ 89.636943][ T5869] hsr_slave_0: entered promiscuous mode [ 89.643852][ T5869] hsr_slave_1: entered promiscuous mode [ 89.650296][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 89.656142][ T5869] Cannot create hsr debugfs directory [ 89.729565][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.736555][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.762611][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.823310][ T5874] hsr_slave_0: entered promiscuous mode [ 89.830678][ T5874] hsr_slave_1: entered promiscuous mode [ 89.836826][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 89.842752][ T5874] Cannot create hsr debugfs directory [ 89.849784][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.856746][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.883339][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.927972][ T5864] hsr_slave_0: entered promiscuous mode [ 89.934649][ T5864] hsr_slave_1: entered promiscuous mode [ 89.941179][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 89.946950][ T5864] Cannot create hsr debugfs directory [ 90.253771][ T5859] hsr_slave_0: entered promiscuous mode [ 90.260363][ T5859] hsr_slave_1: entered promiscuous mode [ 90.266508][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 90.272371][ T5859] Cannot create hsr debugfs directory [ 90.595818][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.610089][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.641503][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.667147][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.717141][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.733026][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.765490][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.777865][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.852300][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.863574][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.876325][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.887683][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.980912][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.008836][ T5873] Bluetooth: hci2: command tx timeout [ 91.014461][ T5182] Bluetooth: hci1: command tx timeout [ 91.040314][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.080028][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.088486][ T5182] Bluetooth: hci0: command tx timeout [ 91.094235][ T5873] Bluetooth: hci3: command tx timeout [ 91.095670][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.165292][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.173366][ T5873] Bluetooth: hci4: command tx timeout [ 91.191685][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.213907][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.233860][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.253835][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.264278][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.303690][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.311018][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.334349][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.341503][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.424162][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.451991][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.514771][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.570452][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.581342][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.588663][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.617566][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.633110][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.640379][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.654302][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.661507][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.709508][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.716703][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.739847][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.765700][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.805141][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.812469][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.852620][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.860251][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.900834][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.929813][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.944744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.951959][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.968841][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.975965][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.056261][ T982] cfg80211: failed to load regulatory.db [ 92.106229][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.352409][ T5869] veth0_vlan: entered promiscuous mode [ 92.433163][ T5869] veth1_vlan: entered promiscuous mode [ 92.501930][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.557518][ T5869] veth0_macvtap: entered promiscuous mode [ 92.580091][ T5869] veth1_macvtap: entered promiscuous mode [ 92.625851][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.671909][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.718768][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.733903][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.761470][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771734][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.781178][ T5863] veth0_vlan: entered promiscuous mode [ 92.821146][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.830530][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.874268][ T5874] veth0_vlan: entered promiscuous mode [ 92.892088][ T5863] veth1_vlan: entered promiscuous mode [ 92.905032][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.931597][ T5874] veth1_vlan: entered promiscuous mode [ 93.031275][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.042684][ T5863] veth0_macvtap: entered promiscuous mode [ 93.064123][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.084396][ T5864] veth0_vlan: entered promiscuous mode [ 93.102471][ T5873] Bluetooth: hci1: command tx timeout [ 93.108021][ T5873] Bluetooth: hci2: command tx timeout [ 93.123241][ T5863] veth1_macvtap: entered promiscuous mode [ 93.140479][ T5864] veth1_vlan: entered promiscuous mode [ 93.168960][ T5182] Bluetooth: hci0: command tx timeout [ 93.174476][ T5873] Bluetooth: hci3: command tx timeout [ 93.185280][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.190969][ T5874] veth0_macvtap: entered promiscuous mode [ 93.204344][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.211914][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.253520][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.259182][ T5873] Bluetooth: hci4: command tx timeout [ 93.273178][ T5874] veth1_macvtap: entered promiscuous mode [ 93.312950][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.332549][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.366706][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.395893][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.454259][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.474054][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.517247][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527603][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589684][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.600590][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.615035][ T5864] veth0_macvtap: entered promiscuous mode [ 93.673551][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.701065][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.723371][ T5864] veth1_macvtap: entered promiscuous mode [ 93.732221][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.857869][ T5859] veth0_vlan: entered promiscuous mode [ 93.877626][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.901614][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.924503][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.942435][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.960243][ T5859] veth1_vlan: entered promiscuous mode [ 93.979823][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.987766][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.002370][ T5996] FAULT_INJECTION: forcing a failure. [ 94.002370][ T5996] name failslab, interval 1, probability 0, space 0, times 1 [ 94.025146][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 94.025173][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.025192][ T5996] Call Trace: [ 94.025201][ T5996] [ 94.025209][ T5996] dump_stack_lvl+0x189/0x250 [ 94.025241][ T5996] ? __pfx____ratelimit+0x10/0x10 [ 94.025263][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.025286][ T5996] ? __pfx__printk+0x10/0x10 [ 94.025319][ T5996] ? __pfx___might_resched+0x10/0x10 [ 94.025337][ T5996] ? fs_reclaim_acquire+0x7d/0x100 [ 94.025368][ T5996] should_fail_ex+0x414/0x560 [ 94.025402][ T5996] should_failslab+0xa8/0x100 [ 94.025433][ T5996] __kmalloc_cache_noprof+0x70/0x3d0 [ 94.025459][ T5996] ? rtnl_newlink+0xed/0x1c70 [ 94.025480][ T5996] ? kasan_save_free_info+0x46/0x50 [ 94.025504][ T5996] rtnl_newlink+0xed/0x1c70 [ 94.025524][ T5996] ? netlink_sendmsg+0x805/0xb30 [ 94.025546][ T5996] ? __sock_sendmsg+0x219/0x270 [ 94.025561][ T5996] ? ____sys_sendmsg+0x505/0x830 [ 94.025584][ T5996] ? ___sys_sendmsg+0x21f/0x2a0 [ 94.025607][ T5996] ? __x64_sys_sendmsg+0x19b/0x260 [ 94.025630][ T5996] ? do_syscall_64+0xfa/0x3b0 [ 94.025650][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.025683][ T5996] ? __pfx_rtnl_newlink+0x10/0x10 [ 94.025729][ T5996] ? kasan_quarantine_put+0xdd/0x220 [ 94.025753][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.025780][ T5996] ? nlmon_xmit+0xb0/0x100 [ 94.025800][ T5996] ? kmem_cache_free+0x18f/0x400 [ 94.025832][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 94.025851][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.025872][ T5996] ? __local_bh_enable_ip+0x12d/0x1c0 [ 94.025909][ T5996] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 94.025933][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 94.025962][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 94.025988][ T5996] ? __dev_queue_xmit+0x27b/0x3b50 [ 94.026015][ T5996] ? __dev_queue_xmit+0x1d79/0x3b50 [ 94.026046][ T5996] ? __lock_acquire+0xab9/0xd20 [ 94.026101][ T5996] ? __pfx_rtnl_newlink+0x10/0x10 [ 94.026129][ T5996] rtnetlink_rcv_msg+0x7cf/0xb70 [ 94.026156][ T5996] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 94.026178][ T5996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.026199][ T5996] ? ref_tracker_free+0x63a/0x7d0 [ 94.026219][ T5996] ? __asan_memcpy+0x40/0x70 [ 94.026241][ T5996] ? __pfx_ref_tracker_free+0x10/0x10 [ 94.026258][ T5996] ? __skb_clone+0x63/0x7a0 [ 94.026295][ T5996] netlink_rcv_skb+0x208/0x470 [ 94.026319][ T5996] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.026343][ T5996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.026391][ T5996] ? netlink_deliver_tap+0x2e/0x1b0 [ 94.026423][ T5996] netlink_unicast+0x82c/0x9e0 [ 94.026454][ T5996] ? __pfx_netlink_unicast+0x10/0x10 [ 94.026477][ T5996] ? netlink_sendmsg+0x642/0xb30 [ 94.026499][ T5996] ? skb_put+0x11b/0x210 [ 94.026539][ T5996] netlink_sendmsg+0x805/0xb30 [ 94.026572][ T5996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.026598][ T5996] ? aa_sock_msg_perm+0xf1/0x1d0 [ 94.026620][ T5996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 94.026642][ T5996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.026666][ T5996] __sock_sendmsg+0x219/0x270 [ 94.026689][ T5996] ____sys_sendmsg+0x505/0x830 [ 94.026719][ T5996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.026755][ T5996] ? import_iovec+0x74/0xa0 [ 94.026785][ T5996] ___sys_sendmsg+0x21f/0x2a0 [ 94.026813][ T5996] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.026876][ T5996] ? __fget_files+0x2a/0x420 [ 94.026893][ T5996] ? __fget_files+0x3a0/0x420 [ 94.026921][ T5996] __x64_sys_sendmsg+0x19b/0x260 [ 94.026951][ T5996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.026987][ T5996] ? __pfx_ksys_write+0x10/0x10 [ 94.027011][ T5996] ? rcu_is_watching+0x15/0xb0 [ 94.027036][ T5996] ? do_syscall_64+0xbe/0x3b0 [ 94.027062][ T5996] do_syscall_64+0xfa/0x3b0 [ 94.027082][ T5996] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.027101][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.027121][ T5996] ? clear_bhb_loop+0x60/0xb0 [ 94.027145][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.027163][ T5996] RIP: 0033:0x7f5f8d78eba9 [ 94.027190][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.027206][ T5996] RSP: 002b:00007f5f8e66a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.027230][ T5996] RAX: ffffffffffffffda RBX: 00007f5f8d9d5fa0 RCX: 00007f5f8d78eba9 [ 94.027244][ T5996] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 94.027255][ T5996] RBP: 00007f5f8e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 94.027267][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.027278][ T5996] R13: 00007f5f8d9d6038 R14: 00007f5f8d9d5fa0 R15: 00007fff54306418 [ 94.027309][ T5996] [ 94.574827][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.584744][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.590751][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.593347][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.677778][ T151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.691174][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711149][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.761590][ T5859] veth0_macvtap: entered promiscuous mode [ 94.795300][ T5859] veth1_macvtap: entered promiscuous mode [ 94.907253][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.950962][ T6002] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.981620][ T6002] ip6gretap0: entered promiscuous mode [ 95.016501][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.027971][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.037180][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.071126][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.169100][ T5873] Bluetooth: hci2: command tx timeout [ 95.174558][ T5873] Bluetooth: hci1: command tx timeout [ 95.189265][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.208147][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.249459][ T5873] Bluetooth: hci3: command tx timeout [ 95.254926][ T5873] Bluetooth: hci0: command tx timeout [ 95.291767][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.305124][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.328782][ T5873] Bluetooth: hci4: command tx timeout [ 95.373692][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.468710][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.476826][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.595956][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.611113][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.765511][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.844431][ T78] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.897605][ T78] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.927354][ T78] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.955379][ T78] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.223258][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.260946][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.400706][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.425643][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.134523][ T6045] Zero length message leads to an empty skb [ 97.219706][ T6048] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 97.392904][ T6056] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 97.684195][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.866093][ T6074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'. [ 98.031900][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 98.054803][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 98.113398][ T6076] dummy0: entered promiscuous mode [ 98.147477][ T6076] macsec1: entered promiscuous mode [ 98.178908][ T6076] macsec1: entered allmulticast mode [ 98.195321][ T6076] dummy0: entered allmulticast mode [ 98.630085][ T6085] FAULT_INJECTION: forcing a failure. [ 98.630085][ T6085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.675097][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.4.35 Not tainted syzkaller #0 PREEMPT(full) [ 98.675124][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.675135][ T6085] Call Trace: [ 98.675144][ T6085] [ 98.675152][ T6085] dump_stack_lvl+0x189/0x250 [ 98.675180][ T6085] ? __pfx____ratelimit+0x10/0x10 [ 98.675202][ T6085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.675226][ T6085] ? __pfx__printk+0x10/0x10 [ 98.675255][ T6085] ? fs_reclaim_acquire+0x7d/0x100 [ 98.675284][ T6085] should_fail_ex+0x414/0x560 [ 98.675319][ T6085] prepare_alloc_pages+0x213/0x610 [ 98.675347][ T6085] __alloc_frozen_pages_noprof+0x123/0x370 [ 98.675372][ T6085] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 98.675403][ T6085] ? policy_nodemask+0x27c/0x720 [ 98.675428][ T6085] ? do_raw_spin_lock+0x121/0x290 [ 98.675458][ T6085] alloc_pages_mpol+0x232/0x4a0 [ 98.675492][ T6085] alloc_pages_noprof+0xa9/0x190 [ 98.675523][ T6085] __pmd_alloc+0x3a/0x3b0 [ 98.675553][ T6085] __handle_mm_fault+0x9ad/0x5440 [ 98.675596][ T6085] ? __pfx___handle_mm_fault+0x10/0x10 [ 98.675644][ T6085] ? find_vma+0xe7/0x160 [ 98.675668][ T6085] ? __pfx_find_vma+0x10/0x10 [ 98.675696][ T6085] handle_mm_fault+0x40a/0x8e0 [ 98.675733][ T6085] do_user_addr_fault+0x764/0x1390 [ 98.675780][ T6085] exc_page_fault+0x76/0xf0 [ 98.675804][ T6085] asm_exc_page_fault+0x26/0x30 [ 98.675822][ T6085] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 98.675851][ T6085] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 98.675867][ T6085] RSP: 0018:ffffc9000b09fa18 EFLAGS: 00050206 [ 98.675885][ T6085] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 98.675899][ T6085] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: ffffc9000b09faa0 [ 98.675912][ T6085] RBP: ffffc9000b09fc30 R08: ffffc9000b09fad7 R09: 1ffff92001613f5a [ 98.675925][ T6085] R10: dffffc0000000000 R11: fffff52001613f5b R12: 0000000000000300 [ 98.675939][ T6085] R13: dffffc0000000000 R14: ffffc9000b09faa0 R15: 00002000000055c0 [ 98.675979][ T6085] _copy_from_user+0x7a/0xb0 [ 98.676007][ T6085] ___sys_recvmsg+0x12e/0x510 [ 98.676060][ T6085] ? __pfx____sys_recvmsg+0x10/0x10 [ 98.676117][ T6085] ? __fget_files+0x3a0/0x420 [ 98.676147][ T6085] do_recvmmsg+0x307/0x770 [ 98.676186][ T6085] ? __pfx_do_recvmmsg+0x10/0x10 [ 98.676228][ T6085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.676272][ T6085] __x64_sys_recvmmsg+0x190/0x240 [ 98.676304][ T6085] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 98.676331][ T6085] ? rcu_is_watching+0x15/0xb0 [ 98.676357][ T6085] ? do_syscall_64+0xbe/0x3b0 [ 98.676384][ T6085] do_syscall_64+0xfa/0x3b0 [ 98.676405][ T6085] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.676426][ T6085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.676446][ T6085] ? clear_bhb_loop+0x60/0xb0 [ 98.676471][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.676490][ T6085] RIP: 0033:0x7f056338eba9 [ 98.676507][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.676522][ T6085] RSP: 002b:00007f0564243038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.676542][ T6085] RAX: ffffffffffffffda RBX: 00007f05635d5fa0 RCX: 00007f056338eba9 [ 98.676556][ T6085] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 98.676569][ T6085] RBP: 00007f0564243090 R08: 0000000000000000 R09: 0000000000000000 [ 98.676581][ T6085] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 98.676592][ T6085] R13: 00007f05635d6038 R14: 00007f05635d5fa0 R15: 00007ffc058a1f18 [ 98.676625][ T6085] [ 99.285163][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 99.294166][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 99.482292][ T6106] netlink: 'syz.4.40': attribute type 10 has an invalid length. [ 99.552206][ T6109] netlink: 'syz.4.40': attribute type 10 has an invalid length. [ 99.560923][ T6109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40'. [ 99.599431][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 99.625057][ T6110] netlink: 'syz.2.41': attribute type 5 has an invalid length. [ 99.646262][ T6110] netlink: 48 bytes leftover after parsing attributes in process `syz.2.41'. [ 99.678339][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.698922][ T6106] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.719329][ T6109] batadv0: entered promiscuous mode [ 99.736133][ T6109] batadv0: entered allmulticast mode [ 99.781673][ T6109] bond0: (slave batadv0): Releasing backup interface [ 99.818862][ T6109] bridge0: port 3(batadv0) entered blocking state [ 99.838512][ T6109] bridge0: port 3(batadv0) entered disabled state [ 99.905155][ T6110] geneve2: entered promiscuous mode [ 99.918221][ T6110] geneve2: entered allmulticast mode [ 100.083173][ T6108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.121276][ T151] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 100.169223][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 100.178849][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 100.200805][ T151] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 100.212213][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 100.434166][ T6121] team0: No ports can be present during mode change [ 100.652729][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'. [ 100.940812][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 101.070516][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 101.103686][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 101.202177][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.53'. [ 101.408756][ T6152] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 101.571110][ T6163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.59'. [ 101.647060][ T6108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.701290][ T6108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 101.739951][ T6168] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 101.780906][ T6108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.792015][ T6108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 101.860500][ T6171] netlink: 5 bytes leftover after parsing attributes in process `syz.1.63'. [ 101.891229][ T6108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.916792][ T6108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 101.941602][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'. [ 101.952727][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 102.093854][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 102.103586][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 102.160086][ T1328] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 102.168454][ T1328] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 102.187578][ T1328] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 102.195846][ T1328] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 102.230353][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 102.241472][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 102.613913][ T6188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.69'. [ 102.681450][ T6191] tipc: Enabling of bearer rejected, failed to enable media [ 102.691008][ T6192] warning: `syz.4.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.912287][ T6193] veth1_macvtap: left promiscuous mode [ 103.149136][ T6202] syzkaller0: entered promiscuous mode [ 103.168745][ T6202] syzkaller0: entered allmulticast mode [ 103.557834][ T6215] netem: incorrect gi model size [ 103.563310][ T6215] netem: change failed [ 104.386637][ T6241] netlink: 'syz.3.87': attribute type 16 has an invalid length. [ 104.458249][ T6241] netlink: 'syz.3.87': attribute type 17 has an invalid length. [ 104.612802][ T6241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.501399][ T6263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.678330][ T6270] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 105.903412][ T6277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.177706][ T6316] bridge_slave_0: left allmulticast mode [ 107.187302][ T6316] bridge_slave_0: left promiscuous mode [ 107.202078][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.235830][ T6316] bridge_slave_1: left allmulticast mode [ 107.247617][ T6316] bridge_slave_1: left promiscuous mode [ 107.285077][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.331563][ T6316] bond0: (slave bond_slave_0): Releasing backup interface [ 107.393030][ T6316] bond0: (slave bond_slave_1): Releasing backup interface [ 107.426895][ T6316] team0: Failed to send options change via netlink (err -105) [ 107.470671][ T6316] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 107.506424][ T6316] team0: Port device team_slave_0 removed [ 107.549535][ T6316] team0: Failed to send options change via netlink (err -105) [ 107.558686][ T6316] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 107.575323][ T6316] team0: Port device team_slave_1 removed [ 107.592224][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.601983][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.613141][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.621103][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.631677][ T6316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.662789][ T6319] team0: Failed to send options change via netlink (err -105) [ 107.671678][ T6319] team0: Mode changed to "activebackup" [ 108.118466][ T6352] __nla_validate_parse: 9 callbacks suppressed [ 108.118486][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 108.147080][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 108.264982][ T6352] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 108.341422][ T6357] syzkaller0: entered promiscuous mode [ 108.355636][ T6357] syzkaller0: entered allmulticast mode [ 108.441801][ T6357] FAULT_INJECTION: forcing a failure. [ 108.441801][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.499651][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(full) [ 108.499680][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.499693][ T6357] Call Trace: [ 108.499701][ T6357] [ 108.499710][ T6357] dump_stack_lvl+0x189/0x250 [ 108.499740][ T6357] ? __pfx____ratelimit+0x10/0x10 [ 108.499762][ T6357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.499786][ T6357] ? __pfx__printk+0x10/0x10 [ 108.499813][ T6357] ? __might_fault+0xb0/0x130 [ 108.499853][ T6357] should_fail_ex+0x414/0x560 [ 108.499888][ T6357] _copy_from_user+0x2d/0xb0 [ 108.499923][ T6357] ___sys_sendmsg+0x158/0x2a0 [ 108.499955][ T6357] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.500022][ T6357] ? __fget_files+0x2a/0x420 [ 108.500041][ T6357] ? __fget_files+0x3a0/0x420 [ 108.500070][ T6357] __x64_sys_sendmsg+0x19b/0x260 [ 108.500102][ T6357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.500161][ T6357] ? __pfx_ksys_write+0x10/0x10 [ 108.500185][ T6357] ? rcu_is_watching+0x15/0xb0 [ 108.500216][ T6357] ? do_syscall_64+0xbe/0x3b0 [ 108.500243][ T6357] do_syscall_64+0xfa/0x3b0 [ 108.500265][ T6357] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.500285][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.500305][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 108.500330][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.500349][ T6357] RIP: 0033:0x7f9f2f98eba9 [ 108.500368][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.500384][ T6357] RSP: 002b:00007f9f2dbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.500405][ T6357] RAX: ffffffffffffffda RBX: 00007f9f2fbd6090 RCX: 00007f9f2f98eba9 [ 108.500420][ T6357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 108.500432][ T6357] RBP: 00007f9f2dbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 108.500444][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.500456][ T6357] R13: 00007f9f2fbd6128 R14: 00007f9f2fbd6090 R15: 00007ffd3f4be088 [ 108.500488][ T6357] [ 109.510258][ T6389] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 109.526405][ T6389] netlink: 224 bytes leftover after parsing attributes in process `syz.0.134'. [ 109.829328][ T6411] bridge0: port 4(batadv1) entered blocking state [ 109.849809][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.131'. [ 109.854122][ T6411] bridge0: port 4(batadv1) entered disabled state [ 109.917150][ T6411] batadv1: entered allmulticast mode [ 110.041031][ T6411] batadv1: entered promiscuous mode [ 110.150036][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 110.308215][ T1328] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 110.317514][ T1328] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 110.778993][ T6444] veth0_to_bridge: entered promiscuous mode [ 110.801424][ T6444] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 111.049072][ T6458] netlink: 96 bytes leftover after parsing attributes in process `syz.4.154'. [ 111.430738][ T6465] tipc: Started in network mode [ 111.443605][ T6465] tipc: Node identity 4ade46e5daca, cluster identity 4711 [ 111.458929][ T6465] tipc: Enabled bearer , priority 0 [ 111.612095][ T6465] syzkaller0: entered promiscuous mode [ 111.617915][ T6465] syzkaller0: entered allmulticast mode [ 111.650238][ T6474] netlink: 'syz.3.158': attribute type 1 has an invalid length. [ 111.661571][ T6474] netlink: 224 bytes leftover after parsing attributes in process `syz.3.158'. [ 111.671657][ T6465] tipc: Resetting bearer [ 111.702144][ T6463] tipc: Resetting bearer [ 111.728286][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 111.744134][ T6463] tipc: Disabling bearer [ 112.481551][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.167'. [ 112.506400][ T6503] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 112.629795][ T6508] netlink: 'syz.3.169': attribute type 4 has an invalid length. [ 112.644425][ T6508] netlink: 'syz.3.169': attribute type 2 has an invalid length. [ 112.930395][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 112.953580][ T6523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.175'. [ 113.127024][ T6525] veth0_to_bridge: entered promiscuous mode [ 113.144051][ T6525] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 113.533225][ T6544] veth0: entered promiscuous mode [ 113.808155][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 114.031154][ T6544] netlink: 'syz.3.181': attribute type 16 has an invalid length. [ 114.065215][ T6544] netlink: 'syz.3.181': attribute type 17 has an invalid length. [ 114.236244][ T6544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.682467][ T6572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.806652][ T6544] veth0: left promiscuous mode [ 115.732797][ T6592] bond1 (unregistering): Released all slaves [ 115.773817][ T6595] team0: No ports can be present during mode change [ 115.778787][ T6606] netlink: 64 bytes leftover after parsing attributes in process `syz.4.202'. [ 115.801646][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 115.992006][ T6614] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 116.016708][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.207'. [ 116.102673][ T6614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.115726][ T6621] netlink: 96 bytes leftover after parsing attributes in process `syz.4.207'. [ 116.133734][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 116.182855][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 116.199667][ T6625] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 116.257136][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 116.404718][ T6634] openvswitch: netlink: Key 14 has unexpected len 8 expected 28 [ 116.458737][ T6639] team0: No ports can be present during mode change [ 116.507847][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 116.628512][ T6647] netlink: 184 bytes leftover after parsing attributes in process `syz.4.218'. [ 116.703336][ T6651] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.278752][ T6668] team0: No ports can be present during mode change [ 117.381917][ T6671] FAULT_INJECTION: forcing a failure. [ 117.381917][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 117.440643][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 117.440671][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.440683][ T6671] Call Trace: [ 117.440691][ T6671] [ 117.440699][ T6671] dump_stack_lvl+0x189/0x250 [ 117.440729][ T6671] ? __pfx____ratelimit+0x10/0x10 [ 117.440751][ T6671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.440774][ T6671] ? __pfx__printk+0x10/0x10 [ 117.440809][ T6671] ? __pfx___might_resched+0x10/0x10 [ 117.440834][ T6671] should_fail_ex+0x414/0x560 [ 117.440869][ T6671] should_failslab+0xa8/0x100 [ 117.440901][ T6671] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 117.440929][ T6671] ? __alloc_skb+0x112/0x2d0 [ 117.440957][ T6671] __alloc_skb+0x112/0x2d0 [ 117.440985][ T6671] netlink_sendmsg+0x5c6/0xb30 [ 117.441029][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.441055][ T6671] ? aa_sock_msg_perm+0xf1/0x1d0 [ 117.441076][ T6671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.441096][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.441119][ T6671] __sock_sendmsg+0x219/0x270 [ 117.441148][ T6671] ____sys_sendmsg+0x505/0x830 [ 117.441179][ T6671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.441212][ T6671] ? import_iovec+0x74/0xa0 [ 117.441241][ T6671] ___sys_sendmsg+0x21f/0x2a0 [ 117.441268][ T6671] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.441350][ T6671] ? __fget_files+0x2a/0x420 [ 117.441367][ T6671] ? __fget_files+0x3a0/0x420 [ 117.441396][ T6671] __x64_sys_sendmsg+0x19b/0x260 [ 117.441427][ T6671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.441464][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 117.441488][ T6671] ? rcu_is_watching+0x15/0xb0 [ 117.441514][ T6671] ? do_syscall_64+0xbe/0x3b0 [ 117.441541][ T6671] do_syscall_64+0xfa/0x3b0 [ 117.441562][ T6671] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.441582][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.441602][ T6671] ? clear_bhb_loop+0x60/0xb0 [ 117.441626][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.441644][ T6671] RIP: 0033:0x7fa574d8eba9 [ 117.441666][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.441682][ T6671] RSP: 002b:00007fa575b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.441702][ T6671] RAX: ffffffffffffffda RBX: 00007fa574fd5fa0 RCX: 00007fa574d8eba9 [ 117.441717][ T6671] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 117.441730][ T6671] RBP: 00007fa575b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 117.441741][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.441753][ T6671] R13: 00007fa574fd6038 R14: 00007fa574fd5fa0 R15: 00007ffc2c0d0c68 [ 117.441785][ T6671] [ 117.901264][ T6681] veth1_macvtap: left promiscuous mode [ 117.944619][ T6681] macsec0: entered allmulticast mode [ 118.238568][ T6692] netlink: 'syz.1.232': attribute type 5 has an invalid length. [ 118.268911][ T6694] sctp: [Deprecated]: syz.4.235 (pid 6694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.268911][ T6694] Use struct sctp_sack_info instead [ 118.415716][ T6700] netlink: 'syz.4.235': attribute type 39 has an invalid length. [ 118.516871][ T6705] batman_adv: batadv0: Adding interface: dummy0 [ 118.550907][ T6705] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.597914][ T6705] batman_adv: batadv0: Interface activated: dummy0 [ 118.626682][ T6709] batadv0: mtu less than device minimum [ 118.634782][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.646934][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.659048][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.671033][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.683036][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.695014][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.707059][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.719139][ T6709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.762473][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.846500][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.181566][ T6728] FAULT_INJECTION: forcing a failure. [ 119.181566][ T6728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.200885][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT(full) [ 119.200913][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.200926][ T6728] Call Trace: [ 119.200934][ T6728] [ 119.200943][ T6728] dump_stack_lvl+0x189/0x250 [ 119.200979][ T6728] ? __pfx____ratelimit+0x10/0x10 [ 119.201002][ T6728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.201026][ T6728] ? __pfx__printk+0x10/0x10 [ 119.201053][ T6728] ? __might_fault+0xb0/0x130 [ 119.201094][ T6728] should_fail_ex+0x414/0x560 [ 119.201129][ T6728] _copy_from_iter+0x1de/0x1790 [ 119.201161][ T6728] ? __lock_acquire+0xab9/0xd20 [ 119.201197][ T6728] ? __pfx__copy_from_iter+0x10/0x10 [ 119.201238][ T6728] tun_get_user+0x219/0x3e20 [ 119.201285][ T6728] ? aa_file_perm+0x44d/0x1550 [ 119.201307][ T6728] ? __pfx_tun_get_user+0x10/0x10 [ 119.201329][ T6728] ? _parse_integer_limit+0x1ae/0x1f0 [ 119.201360][ T6728] ? __lock_acquire+0xab9/0xd20 [ 119.201396][ T6728] ? ref_tracker_alloc+0x318/0x460 [ 119.201413][ T6728] ? __lock_acquire+0xab9/0xd20 [ 119.201444][ T6728] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.201469][ T6728] ? tun_get+0x1c/0x2f0 [ 119.201499][ T6728] ? tun_get+0x1c/0x2f0 [ 119.201521][ T6728] ? tun_get+0x1c/0x2f0 [ 119.201549][ T6728] tun_chr_write_iter+0x113/0x200 [ 119.201576][ T6728] vfs_write+0x5c9/0xb30 [ 119.201609][ T6728] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 119.201634][ T6728] ? __pfx_vfs_write+0x10/0x10 [ 119.201673][ T6728] ? __fget_files+0x2a/0x420 [ 119.201701][ T6728] ksys_write+0x145/0x250 [ 119.201731][ T6728] ? __pfx_ksys_write+0x10/0x10 [ 119.201755][ T6728] ? rcu_is_watching+0x15/0xb0 [ 119.201781][ T6728] ? do_syscall_64+0xbe/0x3b0 [ 119.201809][ T6728] do_syscall_64+0xfa/0x3b0 [ 119.201830][ T6728] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.201852][ T6728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.201877][ T6728] ? clear_bhb_loop+0x60/0xb0 [ 119.201902][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.201921][ T6728] RIP: 0033:0x7f5f8d78eba9 [ 119.201939][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.201967][ T6728] RSP: 002b:00007f5f8e66a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.201989][ T6728] RAX: ffffffffffffffda RBX: 00007f5f8d9d5fa0 RCX: 00007f5f8d78eba9 [ 119.202004][ T6728] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 119.202017][ T6728] RBP: 00007f5f8e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 119.202029][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.202041][ T6728] R13: 00007f5f8d9d6038 R14: 00007f5f8d9d5fa0 R15: 00007fff54306418 [ 119.202073][ T6728] [ 119.607575][ T6729] batman_adv: batadv0: Interface deactivated: dummy0 [ 119.616404][ T6729] batman_adv: batadv0: Removing interface: dummy0 [ 119.763637][ T6733] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 119.859103][ T6733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.107281][ T6748] syz.2.246 (6748) used greatest stack depth: 17864 bytes left [ 120.174594][ T6751] Bluetooth: MGMT ver 1.23 [ 120.357474][ T6741] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 120.408766][ T6761] FAULT_INJECTION: forcing a failure. [ 120.408766][ T6761] name failslab, interval 1, probability 0, space 0, times 0 [ 120.460385][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.468228][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.478318][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.3.257 Not tainted syzkaller #0 PREEMPT(full) [ 120.478343][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.478354][ T6761] Call Trace: [ 120.478362][ T6761] [ 120.478370][ T6761] dump_stack_lvl+0x189/0x250 [ 120.478399][ T6761] ? __pfx____ratelimit+0x10/0x10 [ 120.478420][ T6761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.478443][ T6761] ? __pfx__printk+0x10/0x10 [ 120.478477][ T6761] ? __pfx___might_resched+0x10/0x10 [ 120.478495][ T6761] ? fs_reclaim_acquire+0x7d/0x100 [ 120.478519][ T6761] should_fail_ex+0x414/0x560 [ 120.478553][ T6761] should_failslab+0xa8/0x100 [ 120.478585][ T6761] __kmalloc_noprof+0xcb/0x4f0 [ 120.478609][ T6761] ? kernfs_fop_write_iter+0x158/0x540 [ 120.478643][ T6761] kernfs_fop_write_iter+0x158/0x540 [ 120.478679][ T6761] vfs_write+0x5c9/0xb30 [ 120.478712][ T6761] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 120.478742][ T6761] ? __pfx_vfs_write+0x10/0x10 [ 120.478780][ T6761] ? __fget_files+0x2a/0x420 [ 120.478808][ T6761] ksys_write+0x145/0x250 [ 120.478865][ T6761] ? __pfx_ksys_write+0x10/0x10 [ 120.478890][ T6761] ? rcu_is_watching+0x15/0xb0 [ 120.478917][ T6761] ? do_syscall_64+0xbe/0x3b0 [ 120.478956][ T6761] do_syscall_64+0xfa/0x3b0 [ 120.478976][ T6761] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.478997][ T6761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.479016][ T6761] ? clear_bhb_loop+0x60/0xb0 [ 120.479040][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.479059][ T6761] RIP: 0033:0x7f5f8d78eba9 [ 120.479076][ T6761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.479092][ T6761] RSP: 002b:00007f5f8e66a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.479112][ T6761] RAX: ffffffffffffffda RBX: 00007f5f8d9d5fa0 RCX: 00007f5f8d78eba9 [ 120.479126][ T6761] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000004 [ 120.479138][ T6761] RBP: 00007f5f8e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 120.479150][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.479161][ T6761] R13: 00007f5f8d9d6038 R14: 00007f5f8d9d5fa0 R15: 00007fff54306418 [ 120.479213][ T6761] [ 120.681285][ T6767] IPVS: Scheduler module ip_vs_sip not found [ 121.027877][ T6782] delete_channel: no stack [ 121.229384][ T6788] __nla_validate_parse: 10 callbacks suppressed [ 121.229406][ T6788] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.266'. [ 121.451144][ T6791] bridge0: port 3(batadv0) entered disabled state [ 121.474739][ T6791] bridge_slave_0: left allmulticast mode [ 121.497445][ T6791] bridge_slave_0: left promiscuous mode [ 121.517317][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.552817][ T6791] bridge_slave_1: left allmulticast mode [ 121.583314][ T6791] bridge_slave_1: left promiscuous mode [ 121.601128][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.674469][ T6791] bond0: (slave bond_slave_0): Releasing backup interface [ 121.701190][ T6791] bond0: (slave bond_slave_1): Releasing backup interface [ 121.728519][ T5182] Bluetooth: hci0: command 0x080f tx timeout [ 121.743618][ T6791] team0: Failed to send options change via netlink (err -105) [ 121.769329][ T6791] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 121.793828][ T6791] team0: Port device team_slave_0 removed [ 121.844599][ T6791] team0: Failed to send options change via netlink (err -105) [ 121.862472][ T6791] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 121.874084][ T6791] team0: Port device team_slave_1 removed [ 121.881786][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.889989][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.900396][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.913520][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.935668][ T6791] net_ratelimit: 12 callbacks suppressed [ 121.935688][ T6791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.962156][ T6794] team0: Failed to send options change via netlink (err -105) [ 122.018176][ T6794] team0: Mode changed to "activebackup" [ 122.067227][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 122.146938][ T6807] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 122.162268][ T6807] bridge2: entered promiscuous mode [ 122.173959][ T6807] bridge2: entered allmulticast mode [ 122.376790][ T6817] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 122.413322][ T6815] team0: No ports can be present during mode change [ 122.454746][ T6819] FAULT_INJECTION: forcing a failure. [ 122.454746][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 122.494866][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT(full) [ 122.494894][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.494906][ T6819] Call Trace: [ 122.494914][ T6819] [ 122.494922][ T6819] dump_stack_lvl+0x189/0x250 [ 122.494952][ T6819] ? __pfx____ratelimit+0x10/0x10 [ 122.494972][ T6819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.494996][ T6819] ? __pfx__printk+0x10/0x10 [ 122.495030][ T6819] ? __pfx___might_resched+0x10/0x10 [ 122.495049][ T6819] ? fs_reclaim_acquire+0x7d/0x100 [ 122.495086][ T6819] should_fail_ex+0x414/0x560 [ 122.495121][ T6819] should_failslab+0xa8/0x100 [ 122.495153][ T6819] __kmalloc_cache_noprof+0x70/0x3d0 [ 122.495181][ T6819] ? register_netdevice+0x58b/0x1ae0 [ 122.495215][ T6819] register_netdevice+0x58b/0x1ae0 [ 122.495258][ T6819] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 122.495279][ T6819] ? __pfx_register_netdevice+0x10/0x10 [ 122.495330][ T6819] ? __asan_memset+0x22/0x50 [ 122.495353][ T6819] ? dev_addr_mod+0x2ce/0x3d0 [ 122.495387][ T6819] macvlan_common_newlink+0x120a/0x1980 [ 122.495416][ T6819] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 122.495458][ T6819] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 122.495492][ T6819] ? __pfx_macvlan_newlink+0x10/0x10 [ 122.495525][ T6819] rtnl_newlink_create+0x310/0xb00 [ 122.495558][ T6819] ? __lock_acquire+0xab9/0xd20 [ 122.495593][ T6819] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 122.495624][ T6819] ? __pfx___mutex_lock+0x10/0x10 [ 122.495667][ T6819] ? ns_capable+0x8a/0xf0 [ 122.495692][ T6819] rtnl_newlink+0x16d6/0x1c70 [ 122.495718][ T6819] ? netlink_sendmsg+0x805/0xb30 [ 122.495762][ T6819] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.495813][ T6819] ? kasan_quarantine_put+0xdd/0x220 [ 122.495839][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.495867][ T6819] ? nlmon_xmit+0xb0/0x100 [ 122.495900][ T6819] ? kmem_cache_free+0x18f/0x400 [ 122.495936][ T6819] ? __local_bh_enable_ip+0x12d/0x1c0 [ 122.495956][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.495977][ T6819] ? __local_bh_enable_ip+0x12d/0x1c0 [ 122.495995][ T6819] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 122.496018][ T6819] ? __dev_queue_xmit+0x27b/0x3b50 [ 122.496047][ T6819] ? __dev_queue_xmit+0x27b/0x3b50 [ 122.496072][ T6819] ? __dev_queue_xmit+0x27b/0x3b50 [ 122.496100][ T6819] ? __dev_queue_xmit+0x1d79/0x3b50 [ 122.496133][ T6819] ? __lock_acquire+0xab9/0xd20 [ 122.496187][ T6819] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.496208][ T6819] rtnetlink_rcv_msg+0x7cf/0xb70 [ 122.496235][ T6819] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 122.496257][ T6819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.496277][ T6819] ? ref_tracker_free+0x63a/0x7d0 [ 122.496297][ T6819] ? __asan_memcpy+0x40/0x70 [ 122.496318][ T6819] ? __pfx_ref_tracker_free+0x10/0x10 [ 122.496335][ T6819] ? __skb_clone+0x63/0x7a0 [ 122.496373][ T6819] netlink_rcv_skb+0x208/0x470 [ 122.496398][ T6819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.496423][ T6819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.496459][ T6819] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.496491][ T6819] netlink_unicast+0x82c/0x9e0 [ 122.496522][ T6819] ? __pfx_netlink_unicast+0x10/0x10 [ 122.496546][ T6819] ? netlink_sendmsg+0x642/0xb30 [ 122.496567][ T6819] ? skb_put+0x11b/0x210 [ 122.496595][ T6819] netlink_sendmsg+0x805/0xb30 [ 122.496630][ T6819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.496666][ T6819] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.496688][ T6819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.496710][ T6819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.496735][ T6819] __sock_sendmsg+0x219/0x270 [ 122.496759][ T6819] ____sys_sendmsg+0x52d/0x830 [ 122.496792][ T6819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.496830][ T6819] ? import_iovec+0x74/0xa0 [ 122.496860][ T6819] ___sys_sendmsg+0x21f/0x2a0 [ 122.496890][ T6819] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.496959][ T6819] ? __fget_files+0x2a/0x420 [ 122.496975][ T6819] ? __fget_files+0x3a0/0x420 [ 122.497004][ T6819] __sys_sendmmsg+0x227/0x430 [ 122.497038][ T6819] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.497061][ T6819] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 122.497115][ T6819] ? ksys_write+0x22a/0x250 [ 122.497152][ T6819] ? __pfx_ksys_write+0x10/0x10 [ 122.497176][ T6819] ? rcu_is_watching+0x15/0xb0 [ 122.497204][ T6819] __x64_sys_sendmmsg+0xa0/0xc0 [ 122.497233][ T6819] do_syscall_64+0xfa/0x3b0 [ 122.497254][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.497274][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.497294][ T6819] ? clear_bhb_loop+0x60/0xb0 [ 122.497318][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.497337][ T6819] RIP: 0033:0x7f056338eba9 [ 122.497355][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.497371][ T6819] RSP: 002b:00007f0564243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.497392][ T6819] RAX: ffffffffffffffda RBX: 00007f05635d5fa0 RCX: 00007f056338eba9 [ 122.497406][ T6819] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b [ 122.497419][ T6819] RBP: 00007f0564243090 R08: 0000000000000000 R09: 0000000000000000 [ 122.497431][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.497442][ T6819] R13: 00007f05635d6038 R14: 00007f05635d5fa0 R15: 00007ffc058a1f18 [ 122.497476][ T6819] [ 122.689392][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.280'. [ 123.037588][ T6829] netlink: 48 bytes leftover after parsing attributes in process `syz.0.280'. [ 123.100893][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 123.114174][ T6839] netlink: 96 bytes leftover after parsing attributes in process `syz.3.282'. [ 123.200296][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.282'. [ 123.272192][ T6847] netlink: 132 bytes leftover after parsing attributes in process `syz.2.285'. [ 123.431845][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 123.636951][ T6857] tipc: Started in network mode [ 123.644199][ T6857] tipc: Node identity 4201c319fd52, cluster identity 4711 [ 123.645446][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 123.652134][ T6857] tipc: Enabled bearer , priority 0 [ 123.668540][ T6855] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 123.669240][ T6863] syzkaller0: entered promiscuous mode [ 123.684048][ T6863] syzkaller0: entered allmulticast mode [ 123.772564][ T6868] dummy0: entered promiscuous mode [ 123.791231][ T6868] macsec1: entered promiscuous mode [ 123.796694][ T6868] macsec1: entered allmulticast mode [ 123.838915][ T6868] dummy0: entered allmulticast mode [ 123.864596][ T6863] tipc: Resetting bearer [ 123.923965][ T6857] tipc: Resetting bearer [ 124.010614][ T6857] tipc: Disabling bearer [ 124.201083][ T6892] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 124.233510][ T6892] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 124.870622][ T6910] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 125.090867][ T6919] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.115599][ T6917] syzkaller0: entered promiscuous mode [ 125.138220][ T6917] syzkaller0: entered allmulticast mode [ 125.746752][ T6934] syzkaller1: entered promiscuous mode [ 125.758093][ T6934] syzkaller1: entered allmulticast mode [ 126.594317][ T6983] Bluetooth: MGMT ver 1.23 [ 127.152026][ T6986] syzkaller0: entered promiscuous mode [ 127.182624][ T6986] syzkaller0: entered allmulticast mode [ 127.313877][ T6986] __nla_validate_parse: 14 callbacks suppressed [ 127.313896][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.331'. [ 127.453247][ T7007] FAULT_INJECTION: forcing a failure. [ 127.453247][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.492234][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) [ 127.492269][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.492282][ T7007] Call Trace: [ 127.492290][ T7007] [ 127.492299][ T7007] dump_stack_lvl+0x189/0x250 [ 127.492327][ T7007] ? __pfx____ratelimit+0x10/0x10 [ 127.492349][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.492373][ T7007] ? __pfx__printk+0x10/0x10 [ 127.492402][ T7007] ? __might_fault+0xb0/0x130 [ 127.492443][ T7007] should_fail_ex+0x414/0x560 [ 127.492479][ T7007] _copy_from_iter+0x1de/0x1790 [ 127.492521][ T7007] ? __pfx__copy_from_iter+0x10/0x10 [ 127.492549][ T7007] ? rcu_is_watching+0x15/0xb0 [ 127.492570][ T7007] ? trace_kmalloc+0x1f/0xd0 [ 127.492596][ T7007] ? kernfs_fop_write_iter+0x158/0x540 [ 127.492631][ T7007] kernfs_fop_write_iter+0x19b/0x540 [ 127.492668][ T7007] vfs_write+0x5c9/0xb30 [ 127.492701][ T7007] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 127.492732][ T7007] ? __pfx_vfs_write+0x10/0x10 [ 127.492771][ T7007] ? __fget_files+0x2a/0x420 [ 127.492800][ T7007] ksys_write+0x145/0x250 [ 127.492830][ T7007] ? __pfx_ksys_write+0x10/0x10 [ 127.492853][ T7007] ? rcu_is_watching+0x15/0xb0 [ 127.492876][ T7007] ? do_syscall_64+0xbe/0x3b0 [ 127.492898][ T7007] do_syscall_64+0xfa/0x3b0 [ 127.492918][ T7007] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.492939][ T7007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.492959][ T7007] ? clear_bhb_loop+0x60/0xb0 [ 127.492984][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.493003][ T7007] RIP: 0033:0x7f056338eba9 [ 127.493022][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.493037][ T7007] RSP: 002b:00007f0564243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.493059][ T7007] RAX: ffffffffffffffda RBX: 00007f05635d5fa0 RCX: 00007f056338eba9 [ 127.493074][ T7007] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000004 [ 127.493086][ T7007] RBP: 00007f0564243090 R08: 0000000000000000 R09: 0000000000000000 [ 127.493096][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.493108][ T7007] R13: 00007f05635d6038 R14: 00007f05635d5fa0 R15: 00007ffc058a1f18 [ 127.493141][ T7007] [ 127.953218][ T7014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.007313][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.342'. [ 128.019748][ T7019] team0: Unable to change to the same mode the team is in [ 128.288353][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 128.317823][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 128.330934][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 128.342095][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 128.351368][ T7027] netlink: 'syz.0.345': attribute type 6 has an invalid length. [ 128.504453][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 128.520783][ T7035] netlink: 96 bytes leftover after parsing attributes in process `syz.2.347'. [ 128.543331][ T7035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.347'. [ 128.897264][ T7049] tipc: Started in network mode [ 128.909283][ T7049] tipc: Node identity d62fa4bca3ba, cluster identity 4711 [ 128.927863][ T7049] tipc: Enabled bearer , priority 0 [ 128.947005][ T7049] syzkaller0: entered promiscuous mode [ 128.965702][ T7049] syzkaller0: entered allmulticast mode [ 129.009329][ T7049] tipc: Resetting bearer [ 129.049050][ T7048] tipc: Resetting bearer [ 129.080066][ T7048] tipc: Disabling bearer [ 129.573881][ T7068] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.359'. [ 130.397786][ T7092] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 130.419150][ T7092] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.516891][ T7092] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 130.531386][ T7092] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.714852][ T7092] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 130.749236][ T7092] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.833844][ T7103] netlink: 'syz.0.369': attribute type 6 has an invalid length. [ 130.900731][ T7092] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 130.945549][ T7092] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 131.333445][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 131.343090][ T37] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.433047][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 131.463073][ T37] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.547829][ T7124] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 131.574159][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 131.595616][ T37] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.772096][ T7126] bond1 (unregistering): Released all slaves [ 131.831193][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 131.856526][ T37] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.928684][ T7137] veth1_macvtap: left promiscuous mode [ 131.943261][ T7137] macsec0: entered allmulticast mode [ 132.026555][ T7139] syzkaller0: entered promiscuous mode [ 132.033204][ T7139] syzkaller0: entered allmulticast mode [ 132.407635][ T7151] __nla_validate_parse: 9 callbacks suppressed [ 132.407654][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.387'. [ 132.435277][ T7151] netlink: 96 bytes leftover after parsing attributes in process `syz.1.387'. [ 132.453953][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'. [ 132.777208][ T7159] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 132.872902][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 132.966200][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 133.012776][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.240591][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.398'. [ 133.527903][ T7173] batadv0: left promiscuous mode [ 133.533060][ T7173] batadv0: left allmulticast mode [ 133.571058][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.398'. [ 133.649857][ T7173] veth0_to_bridge: left promiscuous mode [ 134.329619][ T7173] dummy0: left allmulticast mode [ 134.335883][ T7173] macsec1: left promiscuous mode [ 134.341622][ T7173] macsec1: left allmulticast mode [ 134.357880][ T7184] netlink: 96 bytes leftover after parsing attributes in process `syz.0.398'. [ 134.396258][ T7185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.397'. [ 134.430551][ T1328] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.449846][ T1328] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.476785][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.397'. [ 134.512888][ T1328] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.541964][ T1328] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.523677][ T7241] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 135.563268][ T7241] bridge3: entered promiscuous mode [ 135.853851][ T7257] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 135.894675][ T7255] team0: Failed to send options change via netlink (err -105) [ 135.910937][ T7255] team0: Mode changed to "loadbalance" [ 135.917153][ T7257] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 136.112722][ T7268] bridge_slave_0: left allmulticast mode [ 136.133570][ T7268] bridge_slave_0: left promiscuous mode [ 136.141032][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.161858][ T7268] bridge_slave_1: left allmulticast mode [ 136.174789][ T7268] bridge_slave_1: left promiscuous mode [ 136.183958][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.195116][ T7268] bond0: (slave bond_slave_0): Releasing backup interface [ 136.204044][ T7268] bond0: (slave bond_slave_1): Releasing backup interface [ 136.213688][ T7268] team0: Failed to send options change via netlink (err -105) [ 136.221983][ T7268] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 136.232023][ T7268] team0: Port device team_slave_0 removed [ 136.240339][ T7268] team0: Failed to send options change via netlink (err -105) [ 136.248505][ T7268] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 136.258743][ T7268] team0: Port device team_slave_1 removed [ 136.265008][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.273205][ T7268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.280983][ T7268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.298615][ T7274] bridge0: entered allmulticast mode [ 136.307024][ T7273] team0: Failed to send options change via netlink (err -105) [ 136.317889][ T7273] team0: Mode changed to "activebackup" [ 136.324039][ T7276] syzkaller0: entered promiscuous mode [ 136.330011][ T7276] syzkaller0: entered allmulticast mode [ 136.347138][ T7277] pim6reg: entered allmulticast mode [ 136.695578][ T7292] pimreg: tun_chr_ioctl cmd 2147767506 [ 136.748975][ T7294] ipvlan0: entered promiscuous mode [ 137.136731][ T7310] erspan0: entered promiscuous mode [ 137.185759][ T7314] syzkaller0: entered promiscuous mode [ 137.198289][ T7314] syzkaller0: entered allmulticast mode [ 137.854568][ T7341] netlink: 'syz.2.451': attribute type 13 has an invalid length. [ 137.883079][ T7341] netlink: 'syz.2.451': attribute type 17 has an invalid length. [ 137.923857][ T7343] __nla_validate_parse: 4 callbacks suppressed [ 137.923875][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 138.025662][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 138.052431][ T7341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.090661][ T7343] macsec0: entered allmulticast mode [ 138.130332][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 138.187537][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.204933][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.216954][ T7349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.446543][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 138.461692][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 138.490930][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 138.516513][ T7362] ------------[ cut here ]------------ [ 138.522644][ T7362] WARNING: CPU: 0 PID: 7362 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 138.533671][ T7362] Modules linked in: [ 138.537795][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) [ 138.547287][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.557429][ T7362] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 138.564468][ T7362] Code: fa be 02 00 00 00 eb 0a e8 75 97 a7 fa be 01 00 00 00 4c 89 f7 e8 c8 6d b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 59 97 a7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 138.585006][ T7362] RSP: 0018:ffffc90003a7ef08 EFLAGS: 00010287 [ 138.588717][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 138.591203][ T7362] RAX: ffffffff87181637 RBX: 0000000000000001 RCX: 0000000000080000 [ 138.608237][ T7362] RDX: ffffc9000d531000 RSI: 0000000000000559 RDI: 000000000000055a [ 138.616248][ T7362] RBP: dffffc0000000000 R08: ffff888057d6ec2f R09: 1ffff1100afadd85 [ 138.624727][ T7362] R10: dffffc0000000000 R11: ffffed100afadd86 R12: ffff88807dada000 [ 138.632812][ T7362] R13: ffffc90003a7f080 R14: 0000000000000000 R15: ffffc90003a7f098 [ 138.640854][ T7362] FS: 00007f5f8e6496c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 138.649892][ T7362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.656502][ T7362] CR2: 0000200000000000 CR3: 00000000752c0000 CR4: 00000000003526f0 [ 138.665648][ T7362] Call Trace: [ 138.666890][ T7358] netlink: 'syz.3.457': attribute type 6 has an invalid length. [ 138.669821][ T7362] [ 138.679754][ T7362] notifier_call_chain+0x1b3/0x3e0 [ 138.684904][ T7362] ? atomic_notifier_call_chain+0x26/0x180 [ 138.690820][ T7362] atomic_notifier_call_chain+0xda/0x180 [ 138.696492][ T7362] call_fib_notifiers+0x31/0x60 [ 138.701435][ T7362] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 138.707888][ T7362] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 138.715039][ T7362] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 138.720435][ T7362] inet6_rtm_newroute+0x12f5/0x18c0 [ 138.725685][ T7362] ? nlmon_xmit+0xb0/0x100 [ 138.730222][ T7362] ? kmem_cache_free+0x18f/0x400 [ 138.735199][ T7362] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 138.740923][ T7362] ? __local_bh_enable_ip+0x12d/0x1c0 [ 138.746352][ T7362] ? __dev_queue_xmit+0x27b/0x3b50 [ 138.751555][ T7362] ? __dev_queue_xmit+0x1d79/0x3b50 [ 138.756838][ T7362] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 138.762492][ T7362] rtnetlink_rcv_msg+0x7cf/0xb70 [ 138.768504][ T7362] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 138.773650][ T7362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.780092][ T7362] ? ref_tracker_free+0x63a/0x7d0 [ 138.785149][ T7362] ? __asan_memcpy+0x40/0x70 [ 138.789843][ T7362] ? __pfx_ref_tracker_free+0x10/0x10 [ 138.795244][ T7362] ? __skb_clone+0x63/0x7a0 [ 138.799863][ T7362] netlink_rcv_skb+0x208/0x470 [ 138.804667][ T7362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.810224][ T7362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.815573][ T7362] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.820863][ T7362] netlink_unicast+0x82c/0x9e0 [ 138.825683][ T7362] ? __pfx_netlink_unicast+0x10/0x10 [ 138.831179][ T7362] ? netlink_sendmsg+0x642/0xb30 [ 138.836140][ T7362] ? skb_put+0x11b/0x210 [ 138.840514][ T7362] netlink_sendmsg+0x805/0xb30 [ 138.845333][ T7362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.850719][ T7362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 138.855690][ T7362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.861085][ T7362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.866423][ T7362] __sock_sendmsg+0x219/0x270 [ 138.872414][ T7362] ____sys_sendmsg+0x52d/0x830 [ 138.877233][ T7362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.883454][ T7362] ? import_iovec+0x74/0xa0 [ 138.888082][ T7362] ___sys_sendmsg+0x21f/0x2a0 [ 138.892849][ T7362] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.898214][ T7362] ? __fget_files+0x2a/0x420 [ 138.902840][ T7362] ? __fget_files+0x3a0/0x420 [ 138.907559][ T7362] __sys_sendmmsg+0x227/0x430 [ 138.912329][ T7362] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.917736][ T7362] ? do_futex+0x333/0x420 [ 138.922262][ T7362] ? __pfx___sys_bpf+0x10/0x10 [ 138.927084][ T7362] ? rcu_is_watching+0x15/0xb0 [ 138.932244][ T7362] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.937147][ T7362] do_syscall_64+0xfa/0x3b0 [ 138.941751][ T7362] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.946979][ T7362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.953149][ T7362] ? clear_bhb_loop+0x60/0xb0 [ 138.957868][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.963861][ T7362] RIP: 0033:0x7f5f8d78eba9 [ 138.968420][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.989509][ T7362] RSP: 002b:00007f5f8e649038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.999230][ T7362] RAX: ffffffffffffffda RBX: 00007f5f8d9d6090 RCX: 00007f5f8d78eba9 [ 139.007243][ T7362] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 139.015321][ T7362] RBP: 00007f5f8d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.023376][ T7362] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000000 [ 139.031473][ T7362] R13: 00007f5f8d9d6128 R14: 00007f5f8d9d6090 R15: 00007fff54306418 [ 139.039530][ T7362] [ 139.042583][ T7362] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.049906][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) [ 139.059126][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.069206][ T7362] Call Trace: [ 139.072520][ T7362] [ 139.075487][ T7362] dump_stack_lvl+0x99/0x250 [ 139.080118][ T7362] ? __asan_memcpy+0x40/0x70 [ 139.084742][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.089951][ T7362] ? __pfx__printk+0x10/0x10 [ 139.094570][ T7362] vpanic+0x281/0x750 [ 139.098565][ T7362] ? __pfx__printk+0x10/0x10 [ 139.103174][ T7362] ? __pfx_vpanic+0x10/0x10 [ 139.107689][ T7362] ? is_bpf_text_address+0x26/0x2b0 [ 139.112913][ T7362] panic+0xb9/0xc0 [ 139.116641][ T7362] ? __pfx_panic+0x10/0x10 [ 139.121070][ T7362] __warn+0x31b/0x4b0 [ 139.125050][ T7362] ? nsim_fib_event_nb+0xed8/0x1080 [ 139.130288][ T7362] ? nsim_fib_event_nb+0xed8/0x1080 [ 139.135497][ T7362] report_bug+0x2be/0x4f0 [ 139.139834][ T7362] ? nsim_fib_event_nb+0xed8/0x1080 [ 139.145042][ T7362] ? nsim_fib_event_nb+0xed8/0x1080 [ 139.150343][ T7362] ? nsim_fib_event_nb+0xeda/0x1080 [ 139.155566][ T7362] handle_bug+0x84/0x160 [ 139.159827][ T7362] exc_invalid_op+0x1a/0x50 [ 139.164347][ T7362] asm_exc_invalid_op+0x1a/0x20 [ 139.169212][ T7362] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 139.175035][ T7362] Code: fa be 02 00 00 00 eb 0a e8 75 97 a7 fa be 01 00 00 00 4c 89 f7 e8 c8 6d b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 59 97 a7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 139.194655][ T7362] RSP: 0018:ffffc90003a7ef08 EFLAGS: 00010287 [ 139.200746][ T7362] RAX: ffffffff87181637 RBX: 0000000000000001 RCX: 0000000000080000 [ 139.208724][ T7362] RDX: ffffc9000d531000 RSI: 0000000000000559 RDI: 000000000000055a [ 139.216699][ T7362] RBP: dffffc0000000000 R08: ffff888057d6ec2f R09: 1ffff1100afadd85 [ 139.224672][ T7362] R10: dffffc0000000000 R11: ffffed100afadd86 R12: ffff88807dada000 [ 139.232649][ T7362] R13: ffffc90003a7f080 R14: 0000000000000000 R15: ffffc90003a7f098 [ 139.240637][ T7362] ? nsim_fib_event_nb+0xed7/0x1080 [ 139.245857][ T7362] ? nsim_fib_event_nb+0xed7/0x1080 [ 139.251074][ T7362] notifier_call_chain+0x1b3/0x3e0 [ 139.256288][ T7362] ? atomic_notifier_call_chain+0x26/0x180 [ 139.262103][ T7362] atomic_notifier_call_chain+0xda/0x180 [ 139.267749][ T7362] call_fib_notifiers+0x31/0x60 [ 139.272612][ T7362] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 139.279038][ T7362] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 139.286081][ T7362] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 139.291390][ T7362] inet6_rtm_newroute+0x12f5/0x18c0 [ 139.296608][ T7362] ? nlmon_xmit+0xb0/0x100 [ 139.301037][ T7362] ? kmem_cache_free+0x18f/0x400 [ 139.305994][ T7362] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 139.311557][ T7362] ? __local_bh_enable_ip+0x12d/0x1c0 [ 139.316953][ T7362] ? __dev_queue_xmit+0x27b/0x3b50 [ 139.322100][ T7362] ? __dev_queue_xmit+0x1d79/0x3b50 [ 139.327341][ T7362] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 139.332901][ T7362] rtnetlink_rcv_msg+0x7cf/0xb70 [ 139.337852][ T7362] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 139.342976][ T7362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.348451][ T7362] ? ref_tracker_free+0x63a/0x7d0 [ 139.353574][ T7362] ? __asan_memcpy+0x40/0x70 [ 139.358177][ T7362] ? __pfx_ref_tracker_free+0x10/0x10 [ 139.363554][ T7362] ? __skb_clone+0x63/0x7a0 [ 139.368083][ T7362] netlink_rcv_skb+0x208/0x470 [ 139.372863][ T7362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.378334][ T7362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.383640][ T7362] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.388853][ T7362] netlink_unicast+0x82c/0x9e0 [ 139.393659][ T7362] ? __pfx_netlink_unicast+0x10/0x10 [ 139.398967][ T7362] ? netlink_sendmsg+0x642/0xb30 [ 139.403910][ T7362] ? skb_put+0x11b/0x210 [ 139.408172][ T7362] netlink_sendmsg+0x805/0xb30 [ 139.412964][ T7362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.418267][ T7362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.423213][ T7362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.428509][ T7362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.433803][ T7362] __sock_sendmsg+0x219/0x270 [ 139.438498][ T7362] ____sys_sendmsg+0x52d/0x830 [ 139.443287][ T7362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.448596][ T7362] ? import_iovec+0x74/0xa0 [ 139.453118][ T7362] ___sys_sendmsg+0x21f/0x2a0 [ 139.457809][ T7362] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.463049][ T7362] ? __fget_files+0x2a/0x420 [ 139.467660][ T7362] ? __fget_files+0x3a0/0x420 [ 139.472354][ T7362] __sys_sendmmsg+0x227/0x430 [ 139.477052][ T7362] ? __pfx___sys_sendmmsg+0x10/0x10 [ 139.482261][ T7362] ? do_futex+0x333/0x420 [ 139.486615][ T7362] ? __pfx___sys_bpf+0x10/0x10 [ 139.491408][ T7362] ? rcu_is_watching+0x15/0xb0 [ 139.496184][ T7362] __x64_sys_sendmmsg+0xa0/0xc0 [ 139.501048][ T7362] do_syscall_64+0xfa/0x3b0 [ 139.505560][ T7362] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.510765][ T7362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.516837][ T7362] ? clear_bhb_loop+0x60/0xb0 [ 139.521524][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.527427][ T7362] RIP: 0033:0x7f5f8d78eba9 [ 139.531856][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.551466][ T7362] RSP: 002b:00007f5f8e649038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 139.559887][ T7362] RAX: ffffffffffffffda RBX: 00007f5f8d9d6090 RCX: 00007f5f8d78eba9 [ 139.567881][ T7362] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 139.575859][ T7362] RBP: 00007f5f8d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.583839][ T7362] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000000 [ 139.591813][ T7362] R13: 00007f5f8d9d6128 R14: 00007f5f8d9d6090 R15: 00007fff54306418 [ 139.599802][ T7362] [ 139.603204][ T7362] Kernel Offset: disabled [ 139.607530][ T7362] Rebooting in 86400 seconds..