last executing test programs: 5.718532041s ago: executing program 4 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x7c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @beacon={{{}, {0xde1}}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x34}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf30, 0x0, 0x41, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x7, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x7c}, 0x1, 0xe00, 0x0, 0x4000000}, 0x20000080) 4.43609515s ago: executing program 4 (id=928): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbf9, 0x2ffffffff}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000017c0)=r3, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 4.36579893s ago: executing program 1 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair(0x26, 0x80005, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095", @ANYRESHEX=0x0, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.848111182s ago: executing program 4 (id=934): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000f8070000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.840427923s ago: executing program 3 (id=935): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006ffef00ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.755097253s ago: executing program 1 (id=936): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000003ed00000000000000000008000000000000000800"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a9972b1cad205dfdcf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x48, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x12, 0x1, './cgroup/syz1\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0xffffd000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x31, 0x0, &(0x7f0000001840)) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000004440)={0xfffffff7, 0x7ff, 0x3}, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, &(0x7f0000000100)) 3.632717609s ago: executing program 2 (id=938): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x0, r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x22020400) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300754f91c51983ae7773f15e9921d70bc814b2cffb6a30ef42e5581ebe1c9c3b6c714c571dd72f8521d6c59e6c0f7d0020978c62dc9ee97103641698731aad9da577005bc9244387a03ecc4fcd21c0f209bf6d65370d4e9d656a86159829d5f90be5d1b872a99f497b934152b121ae30393e353a4ed5e281c9df9f3783ed64361f1e062b3516fd3df9950f4fcc27b67ec8d25ba4018d023570b72d4693ba36e98659360a9df1f44cb5a6f947988ac4dbed69a6c0d70d175704daf22a5720e8d93a1d2a78000000000000000000", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff06, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) unshare(0x6a040000) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10000000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r7, 0x0, 0x8000) sendto$inet6(r7, &(0x7f00000000c0)="b3", 0x1, 0x24000084, 0x0, 0x0) 3.607870864s ago: executing program 4 (id=939): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01024000000000000000010000000900030073797a32000000000900010073797a310000000030000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xa4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x2, 0x22, 0x0) socket(0x400000000010, 0x6, 0xdc1f) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x73, &(0x7f0000000080)=0xfffffffffc000000) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x207fffffff, 0xfffffffffffffffc}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x42000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aac100089078"], 0x0) close(r7) socket(0x10, 0x3, 0x0) 3.352785906s ago: executing program 3 (id=940): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0xfd, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x1200}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000dc0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b8530d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d6aea5003ecc673368b95cd36406dfa8c4ed1eb362d343a52ee11780b3426", 0xbe}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) 3.177539504s ago: executing program 3 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff7fe}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x10) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x4}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 2.748114955s ago: executing program 0 (id=943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc0201a8000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 2.728959355s ago: executing program 1 (id=944): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000024000087fea227e41fa2e5843e16d0a1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) connect$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @bcast, @null]}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850019c30000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000780)={&(0x7f0000000440), 0x10, &(0x7f0000000740)={&(0x7f00000006c0)={0x7, 0x4, 0x80000000, {r9, r10/1000+60000}, {}, {0x2, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x4, 0x0, 0x0, 0x0, "ebf0a2b244dd300a"}}, 0x48}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bind$alg(r7, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x200000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0xff80000}}}}}, 0x0) r12 = epoll_create1(0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000000)={0x10000000}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r14 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r14, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000880)=""/129, 0x81}], 0x2}, 0x10001}], 0x2, 0x10, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf257900000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES64=r3, @ANYRES32=r3, @ANYRES64=r3], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x44041) 2.664938244s ago: executing program 0 (id=945): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x303, 0x6bb, 0x97a9, 0x10, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x8}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069840b000000000000000800010002"], 0x20}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fcc7f9daa82c93fd221579dae40dd7f1de1210ecb6540bf30c0cbd903eae9ae84df06032d1b39ac68924991ba587a914785c04dd3220afcf08dafe4275a1ca759b2c625586b7a662716ef2896e7007a3a951ea", @ANYBLOB="010725bd700000000000670000000c009900090000004c0000000800c30001000000d100c50035b6fbed70649d6753fe25d4638733758641febe6fa40cf3f950c68275792eb17605ab7039bcca218013e5fbdbfe30e3b4"], 0xfc}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000cff5000000000000000000000700f0ce6382448d1af9d8e4790008000000000000b27183106d3679a4fd389de016c6cf614d04e45246054b9813a6f7a15a706fb4fe35ddef462d0eea00", @ANYRES32=0x0, @ANYBLOB="00000000000000001d00128008000100687372001400028008000200", @ANYRES32=0x0, @ANYBLOB="080001"], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.664371913s ago: executing program 2 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0x6}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) 2.403821347s ago: executing program 0 (id=947): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r5, &(0x7f0000000300), 0x14) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc60000000000000005527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b334dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfa706574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632e8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b9657141446528dc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300"/1613], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1f}, 0x94) 2.2555772s ago: executing program 2 (id=948): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, 0x0, 0x60040050) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) connect$inet(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 2.205308787s ago: executing program 4 (id=949): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0xfd, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x1200, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000dc0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b8530d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d6aea5003ecc673368b95cd36406dfa8c4ed1eb362d343a52ee11780b3426", 0xbe}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) 2.081017701s ago: executing program 3 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg(r2, &(0x7f0000003580)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4005) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x11}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x74, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfd68}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x74}}, 0x4004000) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) (async) sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) (async) unshare(0x22020600) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xb88a3ecef35668b8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r11}]}, 0x3c}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) recvfrom$ax25(r9, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.080684605s ago: executing program 4 (id=951): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1400, 0x3a, 0x1, 0x0, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0xd, 0xd}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8c00) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendto$inet6(r0, &(0x7f0000001040)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x6, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r11, 0x0) 1.990103522s ago: executing program 1 (id=952): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0xfd, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2800}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000dc0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b8530d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d6aea5003ecc673368b95cd36406dfa8c4ed1eb362d343a52ee11780b3426", 0xbe}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) 1.817151941s ago: executing program 0 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) (fail_nth: 6) 1.767291582s ago: executing program 1 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x8, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffff801, 0xdd46, 0x2077, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x8}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x7, 0xe122, {{0x22, 0x4, 0x1, 0x4, 0x88, 0x68, 0x0, 0xe2, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xb9, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @ssrr={0x89, 0x13, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @local]}, @noop, @noop, @cipso={0x86, 0x4a, 0x0, [{0x2, 0x5, "ecf000"}, {0x6, 0xb, "9d959fab43d31dd339"}, {0x7, 0x9, "96d029c156a473"}, {0x2, 0xc, "48d05d6fe9e4f038d060"}, {0x5, 0xd, "21a80a47e504ffafb05e70"}, {0x2, 0x12, "bc72b394a416470aabb962df1649adea"}]}, @timestamp={0x44, 0x8, 0xd0, 0x0, 0x0, [0x1]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/241, 0xf1, 0x0, &(0x7f0000000440)=""/105, 0x69}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1d, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r9}, 0x10) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x80, 0x28}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1e, 0x100, 0xfffffffd, 0x4, 0x40080, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x980}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x800}, 0xc) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r14, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r14, 0x0) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x7, 0x94, 0x6, 0x21000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0xd}, 0x50) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0xffffffff, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0x8, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @jmp={0x5, 0x0, 0x4, 0xa, 0xa, 0x18, 0xffffffffffffffff}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}], &(0x7f00000001c0)='GPL\x00', 0xfff, 0x9d, &(0x7f0000000200)=""/157, 0x41000, 0x13, '\x00', r5, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r9, 0x1, &(0x7f00000008c0)=[r2, r10, r11, r12, 0x1, r13, r14, r15, r16, r17], &(0x7f0000000900)=[{0x0, 0x3, 0x9, 0x3}], 0x10, 0x8b83}, 0x94) 860.085816ms ago: executing program 3 (id=955): socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1, 0x25, 0x2, @void}, 0x10) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010403000000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f14001280a30001006271000008000000000079c9"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c0003800500"], 0x38}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) (async) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) unshare(0x22020600) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7b17}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 783.314739ms ago: executing program 0 (id=956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000200000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 692.428921ms ago: executing program 1 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00002000"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) accept$unix(r4, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}}, &(0x7f00000004c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00002000"], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) (async) listen(r4, 0x0) (async) socket(0x28, 0x5, 0x0) (async) accept$unix(r4, 0x0, 0x0) (async) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}}, &(0x7f00000004c0)='GPL\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async) 666.727874ms ago: executing program 2 (id=958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000002000000fedbdf2505001a007f000001000000000000000000000000640101000000000000000000000000002c003000"], 0x38}}, 0x40408c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000200)}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000fc0)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd26, 0x25dfdbfb, {{@in6=@empty, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0xc, 0xa, 0xa0, 0x20, 0x2f}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) write$cgroup_pid(r8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003400010300bd7000fedbdb2503"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) 443.996107ms ago: executing program 0 (id=959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="010027bd7000fddbdf251a0000490c0006000100000001e10000"], 0x20}}, 0x8000) socket(0xa, 0x5, 0x6) epoll_create1(0x0) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae6371b84a5a1a7ce0e9582b1e020000000000"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettaction={0xc8, 0x32, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2166cc38}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}]}]}, 0xc8}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRESHEX=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000018000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 370.56539ms ago: executing program 3 (id=960): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$kcm(0x2, 0x3, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x800, 0x5) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x1b32, 0x4) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1) sendto$inet(r2, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40012002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x1) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000dcb7e8f3410b18c648c2594f96b4a0224fc60", 0x16}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffeb2) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x48880}, 0x24000840) 277.540326ms ago: executing program 2 (id=961): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0xfd, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2800, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000dc0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b8530d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d6aea5003ecc673368b95cd36406dfa8c4ed1eb362d343a52ee11780b3426", 0xbe}], 0x3, 0x0, 0x0, 0x900}}], 0x2, 0x0) 0s ago: executing program 2 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0x10}, {0x3, 0xfff1}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4}, {0x0, 0x5}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0x10}, {0x3, 0xfff1}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4}, {0x0, 0x5}}}, 0x24}}, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 87.755121][ T5853] cgroup: Unknown subsys name 'net' [ 87.875754][ T5853] cgroup: Unknown subsys name 'cpuset' [ 87.886411][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.505575][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.364896][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.378028][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.406286][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.433405][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.458507][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.467456][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.484008][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.484240][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.495884][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.505960][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.523370][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.534524][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.545157][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.545552][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.562659][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.567843][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.586714][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.592148][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.597538][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.617564][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.620993][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.632805][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.651363][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.676558][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.686659][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.602730][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 93.825592][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 93.859041][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 93.917669][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 93.947387][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 94.032546][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.041662][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.052008][ T5864] bridge_slave_0: entered allmulticast mode [ 94.061262][ T5864] bridge_slave_0: entered promiscuous mode [ 94.082020][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.093017][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.102266][ T5864] bridge_slave_1: entered allmulticast mode [ 94.111196][ T5864] bridge_slave_1: entered promiscuous mode [ 94.263047][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.275088][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.284732][ T5879] bridge_slave_0: entered allmulticast mode [ 94.295766][ T5879] bridge_slave_0: entered promiscuous mode [ 94.334064][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.363356][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.374359][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.386222][ T5879] bridge_slave_1: entered allmulticast mode [ 94.397303][ T5879] bridge_slave_1: entered promiscuous mode [ 94.443321][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.503321][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.514215][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.525347][ T5873] bridge_slave_0: entered allmulticast mode [ 94.535261][ T5873] bridge_slave_0: entered promiscuous mode [ 94.597755][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.609613][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.622736][ T5873] bridge_slave_1: entered allmulticast mode [ 94.634924][ T5873] bridge_slave_1: entered promiscuous mode [ 94.645022][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.654470][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.664187][ T5863] bridge_slave_0: entered allmulticast mode [ 94.674036][ T5863] bridge_slave_0: entered promiscuous mode [ 94.686182][ T5864] team0: Port device team_slave_0 added [ 94.695807][ T5880] Bluetooth: hci3: command tx timeout [ 94.696065][ T51] Bluetooth: hci1: command tx timeout [ 94.704310][ T5868] Bluetooth: hci0: command tx timeout [ 94.714974][ T5864] team0: Port device team_slave_1 added [ 94.728790][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.741303][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.750425][ T5865] bridge_slave_0: entered allmulticast mode [ 94.758584][ T5865] bridge_slave_0: entered promiscuous mode [ 94.772118][ T5880] Bluetooth: hci4: command tx timeout [ 94.779601][ T5868] Bluetooth: hci2: command tx timeout [ 94.787461][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.814530][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.824485][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.835515][ T5863] bridge_slave_1: entered allmulticast mode [ 94.845752][ T5863] bridge_slave_1: entered promiscuous mode [ 94.870302][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.880490][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.890391][ T5865] bridge_slave_1: entered allmulticast mode [ 94.903900][ T5865] bridge_slave_1: entered promiscuous mode [ 94.917185][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.999782][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.033948][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.045714][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.084727][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.135758][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.151539][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.164002][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.173398][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.208200][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.225071][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.241891][ T5879] team0: Port device team_slave_0 added [ 95.273917][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.297302][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.312704][ T5879] team0: Port device team_slave_1 added [ 95.385069][ T5873] team0: Port device team_slave_0 added [ 95.451195][ T5873] team0: Port device team_slave_1 added [ 95.465026][ T5863] team0: Port device team_slave_0 added [ 95.490648][ T5865] team0: Port device team_slave_0 added [ 95.501860][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.511408][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.546419][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.577522][ T5863] team0: Port device team_slave_1 added [ 95.593714][ T5864] hsr_slave_0: entered promiscuous mode [ 95.603140][ T5864] hsr_slave_1: entered promiscuous mode [ 95.623989][ T5865] team0: Port device team_slave_1 added [ 95.631031][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.644454][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.678853][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.758344][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.767583][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.804965][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.819445][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.828662][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.866090][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.885906][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.909064][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.952456][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.016636][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.027472][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.078804][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.094501][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.105470][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.145015][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.161652][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.175198][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.211868][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.302122][ T5879] hsr_slave_0: entered promiscuous mode [ 96.311770][ T5879] hsr_slave_1: entered promiscuous mode [ 96.323141][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 96.331533][ T5879] Cannot create hsr debugfs directory [ 96.457543][ T5873] hsr_slave_0: entered promiscuous mode [ 96.467895][ T5873] hsr_slave_1: entered promiscuous mode [ 96.475546][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 96.484353][ T5873] Cannot create hsr debugfs directory [ 96.579697][ T5865] hsr_slave_0: entered promiscuous mode [ 96.587200][ T5865] hsr_slave_1: entered promiscuous mode [ 96.595479][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 96.602864][ T5865] Cannot create hsr debugfs directory [ 96.617079][ T5863] hsr_slave_0: entered promiscuous mode [ 96.626911][ T5863] hsr_slave_1: entered promiscuous mode [ 96.638807][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 96.646344][ T5863] Cannot create hsr debugfs directory [ 96.772422][ T5868] Bluetooth: hci1: command tx timeout [ 96.779369][ T5868] Bluetooth: hci0: command tx timeout [ 96.786594][ T5880] Bluetooth: hci3: command tx timeout [ 96.852411][ T5880] Bluetooth: hci4: command tx timeout [ 96.859104][ T5868] Bluetooth: hci2: command tx timeout [ 97.170215][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.185914][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.234132][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.253097][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.397266][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.423129][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.434105][ T980] cfg80211: failed to load regulatory.db [ 97.451318][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.465559][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.574656][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.602961][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.627626][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.649304][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.785782][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.800130][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.825605][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.841839][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.953805][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.967195][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.981828][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.015982][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.038352][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.064403][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.127283][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.161512][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.191065][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.200584][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.215424][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.225920][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.261206][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.272308][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.293247][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.303615][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.409141][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.513998][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.551878][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.611043][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.628426][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.639138][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.689387][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.697998][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.766593][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.805057][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.840058][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.848774][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.852455][ T5868] Bluetooth: hci0: command tx timeout [ 98.868920][ T5880] Bluetooth: hci3: command tx timeout [ 98.871636][ T51] Bluetooth: hci1: command tx timeout [ 98.932166][ T51] Bluetooth: hci2: command tx timeout [ 98.932228][ T5868] Bluetooth: hci4: command tx timeout [ 98.976140][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.984915][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.022331][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.033212][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.105153][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.119558][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.199225][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.276778][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.554633][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.570367][ T5879] veth0_vlan: entered promiscuous mode [ 99.672837][ T5864] veth0_vlan: entered promiscuous mode [ 99.696632][ T5864] veth1_vlan: entered promiscuous mode [ 99.711571][ T5879] veth1_vlan: entered promiscuous mode [ 99.859394][ T5879] veth0_macvtap: entered promiscuous mode [ 99.905358][ T5879] veth1_macvtap: entered promiscuous mode [ 99.925274][ T5864] veth0_macvtap: entered promiscuous mode [ 99.939223][ T5864] veth1_macvtap: entered promiscuous mode [ 99.979110][ T5873] veth0_vlan: entered promiscuous mode [ 100.010155][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.027472][ T5873] veth1_vlan: entered promiscuous mode [ 100.047586][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.068969][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.127192][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.158418][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.206193][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.249040][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.288256][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.322907][ T5873] veth0_macvtap: entered promiscuous mode [ 100.352397][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.364338][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.391722][ T5865] veth0_vlan: entered promiscuous mode [ 100.411854][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.424290][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.443097][ T5873] veth1_macvtap: entered promiscuous mode [ 100.469785][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.484161][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.514567][ T5865] veth1_vlan: entered promiscuous mode [ 100.666737][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.684657][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.712604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.741253][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.811438][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.826357][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.866348][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.878956][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.897494][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.912462][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.931424][ T5865] veth0_macvtap: entered promiscuous mode [ 100.933582][ T5868] Bluetooth: hci0: command tx timeout [ 100.940373][ T51] Bluetooth: hci3: command tx timeout [ 100.950762][ T5880] Bluetooth: hci1: command tx timeout [ 101.014334][ T5880] Bluetooth: hci2: command tx timeout [ 101.023971][ T5868] Bluetooth: hci4: command tx timeout [ 101.035888][ T5865] veth1_macvtap: entered promiscuous mode [ 101.078467][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.091634][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.160225][ T5863] veth0_vlan: entered promiscuous mode [ 101.180708][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.214634][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.237228][ T5863] veth1_vlan: entered promiscuous mode [ 101.266560][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.323675][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.346330][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.376720][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.406860][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.540453][ T5989] IPVS: length: 24 != 1272 [ 101.596365][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.617717][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.661195][ T3501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.692270][ T3501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.738295][ T3501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.779709][ T3501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.881006][ T5863] veth0_macvtap: entered promiscuous mode [ 102.241004][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.249991][ T6003] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 102.252771][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.267820][ T6003] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8'. [ 102.448089][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.513756][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.775238][ T3484] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.813282][ T3484] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.863291][ T5863] veth1_macvtap: entered promiscuous mode [ 102.920518][ T3484] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.941108][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 102.951531][ T3484] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.971801][ T6009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.123724][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.134678][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.150509][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.186567][ T6012] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 103.371444][ T6012] team0: Port device dummy0 added [ 103.439831][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.501351][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.526277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.548513][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.564225][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.580855][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.699846][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.778850][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12'. [ 104.420857][ T6028] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 104.499016][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.546287][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.131853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.176058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.193662][ T6048] tipc: Started in network mode [ 105.204078][ T6048] tipc: Node identity ac14140f, cluster identity 4711 [ 105.213509][ T6048] tipc: New replicast peer: 255.255.255.255 [ 105.223890][ T6048] tipc: Enabled bearer , priority 10 [ 105.730456][ T6055] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.5'. [ 105.940709][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 105.965507][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.088437][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 106.353354][ T5935] tipc: Node number set to 2886997007 [ 107.053356][ T6081] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.173284][ T6081] batadv_slave_1: entered promiscuous mode [ 107.285715][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 107.358988][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 107.490608][ T6089] netlink: 277 bytes leftover after parsing attributes in process `syz.0.26'. [ 107.537163][ T6081] bridge_slave_1: left allmulticast mode [ 107.553676][ T6081] bridge_slave_1: left promiscuous mode [ 107.584012][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.650614][ T6081] bridge_slave_0: left allmulticast mode [ 107.666783][ T6081] bridge_slave_0: left promiscuous mode [ 107.676152][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.781374][ T6086] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 107.840081][ T6080] batadv_slave_1: left promiscuous mode [ 108.312478][ T6105] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.32'. [ 108.455052][ T6106] wg1 speed is unknown, defaulting to 1000 [ 108.545297][ T6106] wg1 speed is unknown, defaulting to 1000 [ 108.645543][ T6106] wg1 speed is unknown, defaulting to 1000 [ 108.789132][ T6106] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.921382][ T6106] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.016124][ T6106] wg1 speed is unknown, defaulting to 1000 [ 109.052385][ T6106] wg1 speed is unknown, defaulting to 1000 [ 109.076507][ T6106] wg1 speed is unknown, defaulting to 1000 [ 109.098968][ T6106] wg1 speed is unknown, defaulting to 1000 [ 109.148858][ T6106] wg1 speed is unknown, defaulting to 1000 [ 109.507486][ T6127] netlink: 'syz.4.37': attribute type 10 has an invalid length. [ 109.526675][ T6127] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.853135][ T6136] Illegal XDP return value 1888574446 on prog (id 15) dev N/A, expect packet loss! [ 110.662880][ T6161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.869321][ T6169] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 111.800305][ T6192] netlink: 'syz.0.56': attribute type 7 has an invalid length. [ 112.145466][ T6199] netlink: 92 bytes leftover after parsing attributes in process `syz.2.59'. [ 112.180348][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 112.222991][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 112.376199][ T6205] wg1 speed is unknown, defaulting to 1000 [ 113.361532][ T6227] dvmrp0: entered allmulticast mode [ 113.480833][ T6232] syz_tun: entered allmulticast mode [ 113.513096][ T6232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.71'. [ 113.540354][ T6232] unsupported nlmsg_type 40 [ 113.798048][ T6231] syz_tun: left allmulticast mode [ 113.814446][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 114.233559][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 114.344643][ T6257] netlink: 19 bytes leftover after parsing attributes in process `syz.1.78'. [ 114.411615][ T6257] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 114.516374][ T6262] batadv_slave_1: entered promiscuous mode [ 114.656996][ T6264] wg1 speed is unknown, defaulting to 1000 [ 114.661397][ T6262] batadv_slave_1: left promiscuous mode [ 114.965223][ T6280] vlan2: entered allmulticast mode [ 114.982155][ T6280] macvtap0: entered allmulticast mode [ 114.990227][ T6280] veth0_macvtap: entered allmulticast mode [ 115.078972][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 115.092088][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 115.104873][ T6292] netlink: 'syz.3.89': attribute type 18 has an invalid length. [ 115.121479][ T6283] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 115.179569][ T6283] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.900941][ T6311] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET) [ 115.907755][ T6306] wg1 speed is unknown, defaulting to 1000 [ 115.941321][ T6299] netlink: 144 bytes leftover after parsing attributes in process `syz.2.91'. [ 115.946802][ T6317] netlink: 'syz.0.96': attribute type 15 has an invalid length. [ 115.962625][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 116.853351][ T6341] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 116.998732][ T6351] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.107'. [ 117.086894][ T6341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.195227][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.107'. [ 117.339507][ T6362] wg1 speed is unknown, defaulting to 1000 [ 118.492817][ T6410] syzkaller1: entered promiscuous mode [ 118.520863][ T6410] syzkaller1: entered allmulticast mode [ 118.973907][ T6414] syzkaller0: entered promiscuous mode [ 119.002876][ T6414] syzkaller0: entered allmulticast mode [ 119.207274][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.275784][ T6422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.127'. [ 119.721285][ T6449] tipc: Started in network mode [ 119.729412][ T6449] tipc: Node identity 42fb91f811d4, cluster identity 4711 [ 119.759790][ T6449] tipc: Enabled bearer , priority 0 [ 120.221581][ T6468] Zero length message leads to an empty skb [ 120.537965][ T6480] netlink: 'syz.3.139': attribute type 21 has an invalid length. [ 120.764176][ T3092] tipc: Node number set to 1395626488 [ 122.027046][ T6446] syzkaller0: entered promiscuous mode [ 122.036217][ T6446] syzkaller0: entered allmulticast mode [ 122.057142][ T6458] tipc: Resetting bearer [ 122.066896][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 122.225836][ T6470] syzkaller1: entered promiscuous mode [ 122.237417][ T6470] syzkaller1: entered allmulticast mode [ 122.246369][ T6480] netlink: 156 bytes leftover after parsing attributes in process `syz.3.139'. [ 122.352837][ T6461] wg1 speed is unknown, defaulting to 1000 [ 122.741719][ T6506] openvswitch: netlink: IP tunnel dst address not specified [ 122.773015][ T6506] netlink: 'syz.3.148': attribute type 12 has an invalid length. [ 122.810085][ T6506] netlink: 'syz.3.148': attribute type 29 has an invalid length. [ 122.820556][ T6506] netlink: 148 bytes leftover after parsing attributes in process `syz.3.148'. [ 123.002432][ T6461] tipc: Resetting bearer [ 123.018399][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 123.097693][ T6461] tipc: Disabling bearer [ 123.543243][ T6526] trusted_key: syz.4.156 sent an empty control message without MSG_MORE. [ 123.589825][ T6526] team_slave_0: entered promiscuous mode [ 123.597365][ T6526] team_slave_1: entered promiscuous mode [ 123.641070][ T6526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.060601][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 124.155815][ T6544] netlink: 240 bytes leftover after parsing attributes in process `syz.3.160'. [ 124.410660][ T6540] bridge_slave_1: left allmulticast mode [ 124.438371][ T6540] bridge_slave_1: left promiscuous mode [ 124.446859][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.490497][ T6559] delete_channel: no stack [ 124.493315][ T6540] bridge_slave_0: left allmulticast mode [ 124.507631][ T6540] bridge_slave_0: left promiscuous mode [ 124.555554][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.741116][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.754592][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.791884][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.814258][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.963953][ T6571] kthread_run failed with err -4 [ 124.982800][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 125.866143][ T6599] wg1 speed is unknown, defaulting to 1000 [ 126.175547][ T6614] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.208316][ T6618] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.208379][ T6615] netlink: 'syz.4.179': attribute type 5 has an invalid length. [ 126.227272][ T6612] !: renamed from dummy0 (while UP) [ 126.247067][ T6617] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 126.539923][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.184'. [ 127.253128][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 127.343407][ T6642] erspan0: entered promiscuous mode [ 127.433848][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.190'. [ 127.454739][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.190'. [ 127.652794][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 128.337703][ T6684] vlan2: entered allmulticast mode [ 129.496654][ T6725] netlink: 'syz.4.211': attribute type 11 has an invalid length. [ 129.843072][ T6733] batadv1: entered promiscuous mode [ 129.861354][ T6733] batadv1: entered allmulticast mode [ 130.131289][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.141396][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.389615][ T6749] __nla_validate_parse: 1 callbacks suppressed [ 130.389636][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 130.431221][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.461312][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.756644][ T3501] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.802114][ T3501] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.842150][ T3501] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.899330][ T3501] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.173571][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 131.187376][ T6775] netlink: 'syz.2.223': attribute type 10 has an invalid length. [ 131.259416][ T6769] block nbd0: server does not support multiple connections per device. [ 131.320370][ T6769] block nbd0: shutting down sockets [ 131.374204][ T6775] team0: Port device dummy0 added [ 131.583342][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 131.646540][ T6791] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 131.667416][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'. [ 131.710143][ T6792] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 131.857493][ T6797] netlink: 'syz.3.230': attribute type 5 has an invalid length. [ 132.472435][ T6819] wg1 speed is unknown, defaulting to 1000 [ 132.509759][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'. [ 132.542481][ T6825] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 132.602146][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 132.792244][ T6825] bond1: entered promiscuous mode [ 132.825035][ T6825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.944075][ T6837] tipc: Started in network mode [ 132.971501][ T6837] tipc: Node identity 3242a2f564e6, cluster identity 4711 [ 132.994340][ T6837] tipc: Enabled bearer , priority 0 [ 133.039538][ T6828] tipc: Enabled bearer , priority 0 [ 133.159796][ T6839] syzkaller0: entered promiscuous mode [ 133.177399][ T6839] syzkaller0: entered allmulticast mode [ 133.264290][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.275743][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346643][ T6815] tipc: Disabling bearer [ 133.396857][ T6839] tipc: Resetting bearer [ 133.468597][ T6850] wg1 speed is unknown, defaulting to 1000 [ 133.524778][ T6830] tipc: Resetting bearer [ 133.554648][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 133.622991][ T6830] tipc: Disabling bearer [ 133.714935][ T6847] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925) [ 133.771062][ T6847] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 133.870442][ T6855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.953843][ T6856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.985349][ T6856] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 134.021478][ T6866] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 134.034145][ T6856] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 134.129672][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 134.516425][ T6877] warning: `syz.4.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.797724][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 135.125080][ T6893] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 135.428558][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.263'. [ 135.527150][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 136.086041][ T6937] tipc: Started in network mode [ 136.141189][ T6937] tipc: Node identity e2dac58278ce, cluster identity 4711 [ 136.173906][ T6937] tipc: Enabled bearer , priority 0 [ 136.260025][ T6945] netlink: 'syz.0.275': attribute type 5 has an invalid length. [ 136.305741][ T6945] ip6erspan0: entered promiscuous mode [ 136.334081][ T6937] tipc: Disabling bearer [ 136.510146][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 136.637292][ T6955] netlink: 'syz.1.281': attribute type 13 has an invalid length. [ 136.719365][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 138.047715][ T7002] wg1 speed is unknown, defaulting to 1000 [ 138.198448][ T7015] Bluetooth: MGMT ver 1.23 [ 138.592600][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 138.611422][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 138.627774][ T7027] netlink: 'syz.3.298': attribute type 15 has an invalid length. [ 138.727500][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 138.755101][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 138.770750][ T1147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 138.782452][ T7027] netlink: 'syz.3.298': attribute type 15 has an invalid length. [ 138.782956][ T1147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 138.810049][ T1147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 138.868495][ T1147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 139.232763][ T7041] wg1 speed is unknown, defaulting to 1000 [ 139.363717][ T7038] block nbd0: server does not support multiple connections per device. [ 139.391401][ T7038] block nbd0: shutting down sockets [ 139.426853][ T7050] ipvlan0: entered promiscuous mode [ 139.504876][ T7058] netlink: 'syz.4.307': attribute type 21 has an invalid length. [ 139.548667][ T7057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.309'. [ 139.564570][ T7058] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 139.577144][ T7058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.307'. [ 140.733441][ T7096] __nla_validate_parse: 1 callbacks suppressed [ 140.733459][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 140.758178][ T7099] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 141.187181][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'. [ 141.593673][ T7129] syzkaller0: entered promiscuous mode [ 141.609687][ T7129] syzkaller0: entered allmulticast mode [ 141.661408][ T7127] netlink: 256 bytes leftover after parsing attributes in process `syz.3.330'. [ 141.715871][ T7136] netlink: 'syz.0.334': attribute type 41 has an invalid length. [ 141.889704][ T7140] wg1 speed is unknown, defaulting to 1000 [ 142.191065][ T7149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.143907][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.286533][ T7222] vlan2: entered allmulticast mode [ 144.312297][ T7222] macvtap0: entered allmulticast mode [ 144.319982][ T7222] veth0_macvtap: entered allmulticast mode [ 144.721538][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'. [ 144.913500][ T7245] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 144.964641][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 145.027149][ T7245] bridge2: entered promiscuous mode [ 145.071489][ T7245] bridge2: entered allmulticast mode [ 145.112666][ T7245] team0: Port device bridge2 added [ 145.361325][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 146.006040][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.382'. [ 146.034227][ T7295] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 146.054950][ T7291] IPVS: stopping backup sync thread 7295 ... [ 146.093960][ T7288] wg1 speed is unknown, defaulting to 1000 [ 146.365470][ T7314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.388'. [ 146.487967][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 147.409069][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.397'. [ 147.434151][ T7351] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 147.567409][ T7352] wg1 speed is unknown, defaulting to 1000 [ 147.760284][ T7368] netlink: 300 bytes leftover after parsing attributes in process `syz.0.404'. [ 148.101674][ T7382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.410'. [ 148.627753][ T7408] tipc: Enabled bearer , priority 10 [ 149.168169][ T7432] netlink: 'syz.0.425': attribute type 21 has an invalid length. [ 149.222640][ T7432] netlink: 156 bytes leftover after parsing attributes in process `syz.0.425'. [ 149.567993][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 149.680037][ T7450] dvmrp8: entered allmulticast mode [ 149.774862][ T7451] wg1 speed is unknown, defaulting to 1000 [ 149.796979][ T7425] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 150.288524][ T7449] dvmrp8: left allmulticast mode [ 150.509149][ T7479] vlan2: entered allmulticast mode [ 151.517165][ T7499] _ÐZ`Ô€@S!: entered promiscuous mode [ 152.114980][ T7516] netlink: 3 bytes leftover after parsing attributes in process `syz.2.445'. [ 152.159352][ T7516] batadv2: entered promiscuous mode [ 152.200071][ T7511] syz.1.444: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 152.221511][ T7516] batadv2: entered allmulticast mode [ 152.242394][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 152.242422][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.242441][ T7511] Call Trace: [ 152.242449][ T7511] [ 152.242457][ T7511] dump_stack_lvl+0x189/0x250 [ 152.242496][ T7511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.242519][ T7511] ? __pfx__printk+0x10/0x10 [ 152.242546][ T7511] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 152.242569][ T7511] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 152.242593][ T7511] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 152.242619][ T7511] warn_alloc+0x214/0x310 [ 152.242654][ T7511] ? __pfx_warn_alloc+0x10/0x10 [ 152.242692][ T7511] ? __get_vm_area_node+0x28f/0x300 [ 152.242718][ T7511] ? xskq_create+0xbf/0x170 [ 152.242741][ T7511] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 152.242800][ T7511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.242827][ T7511] ? xskq_create+0x56/0x170 [ 152.242848][ T7511] ? __kasan_kmalloc+0x93/0xb0 [ 152.242877][ T7511] vmalloc_user_noprof+0xad/0xf0 [ 152.242902][ T7511] ? xskq_create+0xbf/0x170 [ 152.242920][ T7511] xskq_create+0xbf/0x170 [ 152.242941][ T7511] xsk_init_queue+0xb0/0x110 [ 152.242961][ T7511] xsk_setsockopt+0x57b/0x8d0 [ 152.242993][ T7511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.243019][ T7511] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.243047][ T7511] ? __fget_files+0x2a/0x420 [ 152.243061][ T7511] ? aa_sock_opt_perm+0xff/0x1b0 [ 152.243083][ T7511] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 152.243103][ T7511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.243130][ T7511] do_sock_setsockopt+0x179/0x1b0 [ 152.243236][ T7511] __x64_sys_setsockopt+0x13f/0x1b0 [ 152.243275][ T7511] do_syscall_64+0xfa/0x3b0 [ 152.243296][ T7511] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.243313][ T7511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.243332][ T7511] ? clear_bhb_loop+0x60/0xb0 [ 152.243354][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.243369][ T7511] RIP: 0033:0x7f007e18eba9 [ 152.243414][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.243430][ T7511] RSP: 002b:00007f007f01a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.243450][ T7511] RAX: ffffffffffffffda RBX: 00007f007e3d5fa0 RCX: 00007f007e18eba9 [ 152.243465][ T7511] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 152.243476][ T7511] RBP: 00007f007e211e19 R08: 0000000000000004 R09: 0000000000000000 [ 152.243488][ T7511] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 152.243500][ T7511] R13: 00007f007e3d6038 R14: 00007f007e3d5fa0 R15: 00007fff83a8b628 [ 152.243527][ T7511] [ 152.243539][ T7511] Mem-Info: [ 152.632217][ T7511] active_anon:9299 inactive_anon:0 isolated_anon:0 [ 152.632217][ T7511] active_file:3085 inactive_file:39877 isolated_file:0 [ 152.632217][ T7511] unevictable:918 dirty:196 writeback:0 [ 152.632217][ T7511] slab_reclaimable:10801 slab_unreclaimable:97964 [ 152.632217][ T7511] mapped:29431 shmem:5022 pagetables:1151 [ 152.632217][ T7511] sec_pagetables:0 bounce:0 [ 152.632217][ T7511] kernel_misc_reclaimable:0 [ 152.632217][ T7511] free:1317036 free_pcp:19863 free_cma:0 [ 152.739972][ T7511] Node 0 active_anon:37196kB inactive_anon:0kB active_file:12340kB inactive_file:159300kB unevictable:3236kB isolated(anon):0kB isolated(file):0kB mapped:118824kB dirty:784kB writeback:0kB shmem:19752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11988kB pagetables:4452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.913984][ T7511] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 153.042286][ T7511] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.112002][ T7511] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 153.153857][ T7511] Node 0 DMA32 free:1376832kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23052kB inactive_anon:0kB active_file:12340kB inactive_file:157732kB unevictable:10236kB writepending:784kB present:3129332kB managed:2557384kB mlocked:8700kB bounce:0kB free_pcp:56660kB local_pcp:37128kB free_cma:0kB [ 153.242807][ T7511] lowmem_reserve[]: 0 0 1 1 1 [ 153.248012][ T7511] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 153.340980][ T7532] wg1 speed is unknown, defaulting to 1000 [ 153.352660][ T7511] lowmem_reserve[]: 0 0 0 0 0 [ 153.397723][ T7511] Node 1 Normal free:3884180kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21216kB local_pcp:11360kB free_cma:0kB [ 153.462429][ T7511] lowmem_reserve[]: 0 0 0 0 0 [ 153.472883][ T7511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.482801][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 153.496872][ T7511] Node 0 DMA32: 3*4kB (U) 42*8kB (UM) 14*16kB (UME) 276*32kB (UE) 63*64kB (UE) 33*128kB (UME) 17*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 328*4096kB (M) = 1372156kB [ 153.540427][ T7542] vxcan1: entered allmulticast mode [ 153.602045][ T7511] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 153.619763][ T7543] vxcan1: left allmulticast mode [ 153.652723][ T7511] Node 1 Normal: 205*4kB (UE) 48*8kB (UME) 46*16kB (UME) 72*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3884180kB [ 153.730426][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.455'. [ 153.779617][ T7511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.797070][ T7511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.808351][ T7511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 153.821679][ T7511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 153.833102][ T7511] 47052 total pagecache pages [ 153.838771][ T7511] 0 pages in swap cache [ 153.844008][ T7511] Free swap = 124996kB [ 153.849864][ T7511] Total swap = 124996kB [ 153.854772][ T7511] 2097051 pages RAM [ 153.860156][ T7511] 0 pages HighMem/MovableOnly [ 153.868134][ T7511] 425679 pages reserved [ 153.874044][ T7511] 0 pages cma reserved [ 153.913977][ T7542] raw_sendmsg: syz.4.454 forgot to set AF_INET. Fix it! [ 154.582279][ T7572] netlink: 60 bytes leftover after parsing attributes in process `syz.4.461'. [ 155.088989][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 155.153737][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 155.170912][ T7583] pim6reg99999999: entered allmulticast mode [ 155.247507][ T7587] pimreg: entered allmulticast mode [ 155.525873][ T7597] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 155.641324][ T7601] xt_time: unknown flags 0xf4 [ 156.117598][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 156.135065][ T7620] netlink: 'syz.4.478': attribute type 19 has an invalid length. [ 156.187902][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 156.287319][ T78] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.287417][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 156.311459][ T78] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.328375][ T7620] netlink: 'syz.4.478': attribute type 19 has an invalid length. [ 156.334341][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 156.364539][ T78] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.404556][ T7626] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 156.445144][ T78] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.827214][ T7634] wg1 speed is unknown, defaulting to 1000 [ 157.158509][ T7648] bridge1: entered allmulticast mode [ 157.412809][ T7660] __nla_validate_parse: 2 callbacks suppressed [ 157.412960][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'. [ 157.425905][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 157.516497][ T7662] netlink: 'syz.2.493': attribute type 5 has an invalid length. [ 157.565017][ T7662] netlink: 'syz.2.493': attribute type 7 has an invalid length. [ 157.680828][ T7662] : entered promiscuous mode [ 157.729477][ T7666] lo speed is unknown, defaulting to 1000 [ 157.769498][ T7666] lo speed is unknown, defaulting to 1000 [ 157.800461][ T7666] lo speed is unknown, defaulting to 1000 [ 157.894815][ T7666] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.000915][ T7675] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 158.008733][ T7666] lo speed is unknown, defaulting to 1000 [ 158.028956][ T7675] netlink: 228 bytes leftover after parsing attributes in process `syz.0.496'. [ 158.145913][ T7666] lo speed is unknown, defaulting to 1000 [ 158.358215][ T7666] lo speed is unknown, defaulting to 1000 [ 158.387737][ T7679] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 158.429170][ T7679] batman_adv: batadv0: Adding interface: gretap2 [ 158.441747][ T7679] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.483844][ T7679] batman_adv: batadv0: Interface activated: gretap2 [ 158.502020][ T7666] lo speed is unknown, defaulting to 1000 [ 158.525221][ T7666] lo speed is unknown, defaulting to 1000 [ 158.563626][ T7666] lo speed is unknown, defaulting to 1000 [ 158.636308][ T7682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'. [ 158.687037][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 158.870564][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.503'. [ 159.411700][ T7708] netlink: 'syz.4.509': attribute type 23 has an invalid length. [ 159.526535][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 159.565778][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 159.626234][ T7718] netlink: 'syz.0.512': attribute type 13 has an invalid length. [ 159.649824][ T7722] dvmrp8: entered allmulticast mode [ 159.682129][ T7718] netlink: 'syz.0.512': attribute type 12 has an invalid length. [ 159.828865][ T7722] wg1 speed is unknown, defaulting to 1000 [ 159.842403][ T7722] lo speed is unknown, defaulting to 1000 [ 160.509895][ T7745] wg1 speed is unknown, defaulting to 1000 [ 160.595721][ T7745] lo speed is unknown, defaulting to 1000 [ 161.660383][ T7779] wg1 speed is unknown, defaulting to 1000 [ 161.698030][ T7779] lo speed is unknown, defaulting to 1000 [ 161.841427][ T7786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 161.851680][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 161.967787][ T7793] netlink: 'syz.1.531': attribute type 4 has an invalid length. [ 162.037034][ T7795] netlink: 'syz.1.531': attribute type 4 has an invalid length. [ 162.549136][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.909256][ T7854] dummy0: entered promiscuous mode [ 163.969277][ T7853] dummy0: left promiscuous mode [ 164.265251][ T7870] __nla_validate_parse: 2 callbacks suppressed [ 164.265276][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 164.659319][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 164.736143][ T7880] tipc: Enabled bearer , priority 0 [ 164.774281][ T7880] sctp: [Deprecated]: syz.2.564 (pid 7880) Use of int in max_burst socket option. [ 164.774281][ T7880] Use struct sctp_assoc_value instead [ 164.861652][ T7880] tipc: Resetting bearer [ 164.936463][ T7879] tipc: Disabling bearer [ 165.040038][ T7891] vlan2: entered allmulticast mode [ 165.045998][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'. [ 165.081992][ T7891] macvtap0: entered allmulticast mode [ 165.239865][ T7894] netlink: 'syz.0.569': attribute type 5 has an invalid length. [ 165.505287][ T7902] tipc: Enabling of bearer rejected, failed to enable media [ 165.513006][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 166.061044][ T7915] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 166.061146][ T7903] wg1 speed is unknown, defaulting to 1000 [ 166.150181][ T7903] lo speed is unknown, defaulting to 1000 [ 166.471292][ T7921] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 166.493427][ T7921] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 166.504045][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.577'. [ 166.533348][ T7921] netlink: 'syz.0.578': attribute type 2 has an invalid length. [ 166.573365][ T7921] netlink: 'syz.0.578': attribute type 2 has an invalid length. [ 166.632222][ T7921] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 166.674464][ T7921] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 166.722290][ T7928] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 166.764329][ T7934] openvswitch: netlink: Key type 29 is not supported [ 166.855331][ T7934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.580'. [ 167.019993][ T7941] validate_nla: 5 callbacks suppressed [ 167.020012][ T7941] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 167.380249][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 167.569862][ T7962] netlink: 'syz.3.588': attribute type 13 has an invalid length. [ 167.628897][ T7962] netlink: 'syz.3.588': attribute type 17 has an invalid length. [ 167.697766][ T7962] gretap0: refused to change device tx_queue_len [ 167.713594][ T7962] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.744860][ T7971] netlink: 104 bytes leftover after parsing attributes in process `syz.1.591'. [ 167.773133][ T43] lo speed is unknown, defaulting to 1000 [ 167.785703][ T43] syz2: Port: 1 Link ACTIVE [ 167.832702][ T7973] erspan0: entered promiscuous mode [ 167.842715][ T7973] macsec1: entered promiscuous mode [ 167.861999][ T7973] erspan0: left promiscuous mode [ 167.922593][ T7964] wg1 speed is unknown, defaulting to 1000 [ 167.939479][ T7964] lo speed is unknown, defaulting to 1000 [ 168.836154][ T8001] syzkaller1: entered promiscuous mode [ 168.843962][ T8012] netlink: 136 bytes leftover after parsing attributes in process `syz.1.603'. [ 168.874339][ T8001] syzkaller1: entered allmulticast mode [ 169.109778][ T8020] netlink: 200 bytes leftover after parsing attributes in process `syz.0.607'. [ 169.133263][ T8020] netlink: 'syz.0.607': attribute type 49 has an invalid length. [ 169.147162][ T8020] netlink: 'syz.0.607': attribute type 49 has an invalid length. [ 169.209307][ T8022] ipvlan2: entered promiscuous mode [ 169.218737][ T8022] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 169.953979][ T8044] __nla_validate_parse: 1 callbacks suppressed [ 169.954002][ T8044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.616'. [ 169.992999][ T8040] wg1 speed is unknown, defaulting to 1000 [ 170.012629][ T8040] lo speed is unknown, defaulting to 1000 [ 170.848426][ T5952] IPVS: starting estimator thread 0... [ 170.866936][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.002334][ T8086] IPVS: using max 31 ests per chain, 74400 per kthread [ 171.096715][ T8085] wg1 speed is unknown, defaulting to 1000 [ 171.142563][ T8085] lo speed is unknown, defaulting to 1000 [ 171.146589][ T8087] wg1 speed is unknown, defaulting to 1000 [ 171.211652][ T8087] lo speed is unknown, defaulting to 1000 [ 171.838952][ T8107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.637'. [ 172.089188][ T8115] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 172.132772][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 172.158960][ T8122] netlink: 'syz.1.643': attribute type 9 has an invalid length. [ 172.169839][ T8115] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 172.247528][ T8115] netlink: 'syz.3.640': attribute type 21 has an invalid length. [ 172.352220][ T8127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 172.455961][ T8133] netlink: 92 bytes leftover after parsing attributes in process `syz.0.647'. [ 172.495447][ T8130] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 172.525709][ T8130] netlink: 'syz.2.646': attribute type 4 has an invalid length. [ 172.538475][ T8130] netlink: 188 bytes leftover after parsing attributes in process `syz.2.646'. [ 172.569677][ T8130] NCSI netlink: No device for ifindex 3321692160 [ 172.726191][ T8141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.651'. [ 172.949796][ T8143] team_slave_0: left promiscuous mode [ 172.960152][ T8143] team_slave_1: left promiscuous mode [ 173.137591][ T8143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.167408][ T8143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.260207][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 173.359815][ T8143] veth0_macvtap: left allmulticast mode [ 173.546446][ T10] wg1 speed is unknown, defaulting to 1000 [ 173.611344][ T10] syz0: Port: 1 Link DOWN [ 173.617489][ T3464] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.668789][ T3464] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.684387][ T3464] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.698682][ T3464] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.715654][ T8160] wg1 speed is unknown, defaulting to 1000 [ 173.779557][ T3464] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.816264][ T3464] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.868463][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 173.873015][ T3464] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.080198][ T3464] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.120227][ T8160] lo speed is unknown, defaulting to 1000 [ 174.129052][ T8170] veth0: entered promiscuous mode [ 174.163940][ T8175] netlink: 68 bytes leftover after parsing attributes in process `syz.1.660'. [ 174.294674][ T8171] veth0 (unregistering): left promiscuous mode [ 174.863950][ T8180] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 175.050599][ T8191] __nla_validate_parse: 2 callbacks suppressed [ 175.050620][ T8191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.665'. [ 175.136304][ T8183] bond1 (unregistering): Released all slaves [ 175.873483][ T8199] vlan2: entered allmulticast mode [ 175.894612][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 175.929180][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 175.934180][ T8199] macvtap0: entered allmulticast mode [ 176.178788][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 176.199007][ T8204] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.237695][ T8204] team0: Failed to send options change via netlink (err -105) [ 176.255191][ T8204] team0: Port device batadv1 added [ 176.544382][ T8203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.731869][ T8209] wg1 speed is unknown, defaulting to 1000 [ 176.795653][ T8209] lo speed is unknown, defaulting to 1000 [ 177.088344][ T8203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.177721][ T8233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 177.471831][ T8203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.505665][ T8237] openvswitch: netlink: Key 6 has unexpected len 21 expected 2 [ 177.650225][ T8233] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.836433][ T8203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.363686][ T8244] bridge: RTM_NEWNEIGH with invalid ether address [ 178.667276][ T1147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.815774][ T78] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.944386][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.046230][ T78] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.419527][ T8270] netlink: 68 bytes leftover after parsing attributes in process `syz.3.695'. [ 180.455591][ T8267] wg1 speed is unknown, defaulting to 1000 [ 180.631211][ T8267] lo speed is unknown, defaulting to 1000 [ 181.076907][ T8279] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 181.330890][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 181.396907][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 181.450533][ T8285] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 181.527104][ T8285] team0: Failed to send options change via netlink (err -105) [ 181.545236][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 181.581613][ T8285] team0: Port device batadv1 added [ 181.826458][ T8290] bond0: (slave bond_slave_1): Releasing backup interface [ 182.179195][ T8293] vlan2: entered allmulticast mode [ 183.209626][ T8305] netlink: 68 bytes leftover after parsing attributes in process `syz.4.708'. [ 183.305171][ T8307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.709'. [ 183.714893][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 184.289253][ T8320] netlink: 16028 bytes leftover after parsing attributes in process `syz.0.714'. [ 184.906066][ T8335] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.720'. [ 185.375352][ T8349] netlink: 60 bytes leftover after parsing attributes in process `syz.4.725'. [ 185.415840][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.727'. [ 185.813478][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 185.831944][ C1] sched: DL replenish lagged too much [ 186.087128][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 186.165350][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 186.299808][ T8367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.490244][ T8366] delete_channel: no stack [ 186.502777][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'. [ 186.618792][ T8364] wg1 speed is unknown, defaulting to 1000 [ 186.637281][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 186.729858][ T8364] lo speed is unknown, defaulting to 1000 [ 187.842771][ T8393] vlan2: entered allmulticast mode [ 188.742780][ T8409] netlink: 'syz.1.749': attribute type 4 has an invalid length. [ 190.848151][ T8439] wg1 speed is unknown, defaulting to 1000 [ 191.077613][ T8439] lo speed is unknown, defaulting to 1000 [ 191.210869][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 191.421362][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.594713][ T8455] netlink: 'syz.1.763': attribute type 13 has an invalid length. [ 191.739664][ T8459] netlink: 'syz.3.764': attribute type 13 has an invalid length. [ 191.824809][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 191.842108][ T8459] netlink: 'syz.3.764': attribute type 17 has an invalid length. [ 191.946846][ T8456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.279931][ T8466] netlink: 68 bytes leftover after parsing attributes in process `syz.0.765'. [ 192.368965][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.407903][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.454388][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.524674][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.569940][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.625544][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.671145][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.756875][ T8459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.800009][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 192.896238][ T8462] wg1 speed is unknown, defaulting to 1000 [ 192.926932][ T8462] lo speed is unknown, defaulting to 1000 [ 193.688619][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 194.723305][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.734177][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.153768][ T8502] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 195.182405][ T8502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.741224][ T8521] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 196.030885][ T8521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.361179][ T8518] veth5: entered promiscuous mode [ 196.515341][ T8529] batadv_slave_1: entered promiscuous mode [ 196.537632][ T8534] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 196.561420][ T8528] batadv_slave_1: left promiscuous mode [ 196.574774][ T8531] IPVS: stopping backup sync thread 8534 ... [ 196.862298][ T8537] vlan2: entered allmulticast mode [ 197.296068][ T8546] __nla_validate_parse: 2 callbacks suppressed [ 197.296088][ T8546] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.786'. [ 198.317054][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 198.416926][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 198.483063][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 198.682197][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 198.823960][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 198.995373][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.144372][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.234767][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.418093][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.470032][ T8566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.808975][ T8582] geneve2: entered promiscuous mode [ 199.834682][ T8582] geneve2: entered allmulticast mode [ 200.294965][ T8591] vlan2: entered allmulticast mode [ 200.586365][ T8599] batadv_slave_1: entered promiscuous mode [ 200.661377][ T8598] batadv_slave_1: left promiscuous mode [ 203.118733][ T8649] __nla_validate_parse: 10 callbacks suppressed [ 203.118756][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.826'. [ 203.200552][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 203.290059][ T8656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.827'. [ 203.865172][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 203.924666][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 204.238038][ T8671] vlan2: entered allmulticast mode [ 204.432222][ T8675] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.835'. [ 205.472418][ T8694] netlink: 9 bytes leftover after parsing attributes in process `syz.3.837'. [ 205.536712][ T8694] ..0·: renamed from hsr0 [ 205.724478][ T8694] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.922930][ T8694] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.131289][ T8694] ..0·: entered allmulticast mode [ 206.149507][ T8694] hsr_slave_0: entered allmulticast mode [ 206.183744][ T8694] hsr_slave_1: entered allmulticast mode [ 206.199707][ T8707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.842'. [ 206.260190][ T8694] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 207.633387][ T8726] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 207.717986][ T8726] netlink: 'syz.1.851': attribute type 13 has an invalid length. [ 207.800376][ T8726] netlink: 'syz.1.851': attribute type 17 has an invalid length. [ 207.966843][ T8737] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 208.000653][ T8736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.855'. [ 208.022096][ T8726] gretap0: refused to change device tx_queue_len [ 208.033988][ T8726] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.394358][ T8747] netlink: 128 bytes leftover after parsing attributes in process `syz.4.858'. [ 208.408684][ T8747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 208.483916][ T8753] openvswitch: netlink: IP tunnel dst address not specified [ 208.549179][ T8749] ip6gretap0: entered promiscuous mode [ 208.580573][ T8749] macsec1: entered allmulticast mode [ 208.593397][ T8749] ip6gretap0: entered allmulticast mode [ 208.611412][ T8749] ip6gretap0: left allmulticast mode [ 208.640020][ T8749] ip6gretap0: left promiscuous mode [ 209.153432][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.866'. [ 209.397116][ T8779] FAULT_INJECTION: forcing a failure. [ 209.397116][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 209.489290][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.3.868 Not tainted syzkaller #0 PREEMPT(full) [ 209.489317][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.489328][ T8779] Call Trace: [ 209.489335][ T8779] [ 209.489343][ T8779] dump_stack_lvl+0x189/0x250 [ 209.489374][ T8779] ? __pfx____ratelimit+0x10/0x10 [ 209.489393][ T8779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.489414][ T8779] ? __pfx__printk+0x10/0x10 [ 209.489441][ T8779] ? __might_fault+0xb0/0x130 [ 209.489478][ T8779] should_fail_ex+0x414/0x560 [ 209.489510][ T8779] _copy_from_user+0x2d/0xb0 [ 209.489534][ T8779] ___sys_sendmsg+0x158/0x2a0 [ 209.489632][ T8779] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.489697][ T8779] ? __fget_files+0x2a/0x420 [ 209.489714][ T8779] ? __fget_files+0x3a0/0x420 [ 209.489741][ T8779] __x64_sys_sendmsg+0x19b/0x260 [ 209.489766][ T8779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.489914][ T8779] ? __pfx_ksys_write+0x10/0x10 [ 209.489936][ T8779] ? rcu_is_watching+0x15/0xb0 [ 209.489961][ T8779] ? do_syscall_64+0xbe/0x3b0 [ 209.489985][ T8779] do_syscall_64+0xfa/0x3b0 [ 209.490004][ T8779] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.490030][ T8779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.490048][ T8779] ? clear_bhb_loop+0x60/0xb0 [ 209.490068][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.490083][ T8779] RIP: 0033:0x7f328a38eba9 [ 209.490101][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.490117][ T8779] RSP: 002b:00007f328b1a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.490138][ T8779] RAX: ffffffffffffffda RBX: 00007f328a5d5fa0 RCX: 00007f328a38eba9 [ 209.490152][ T8779] RDX: 0000000004000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 209.490164][ T8779] RBP: 00007f328b1a3090 R08: 0000000000000000 R09: 0000000000000000 [ 209.490174][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.490183][ T8779] R13: 00007f328a5d6038 R14: 00007f328a5d5fa0 R15: 00007ffe73740c48 [ 209.490210][ T8779] [ 209.536741][ T8782] vlan2: entered allmulticast mode [ 209.854237][ T8790] netlink: 'syz.3.873': attribute type 39 has an invalid length. [ 210.431052][ T8809] FAULT_INJECTION: forcing a failure. [ 210.431052][ T8809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.498823][ T8809] CPU: 1 UID: 0 PID: 8809 Comm: syz.3.881 Not tainted syzkaller #0 PREEMPT(full) [ 210.498852][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.498863][ T8809] Call Trace: [ 210.498871][ T8809] [ 210.498879][ T8809] dump_stack_lvl+0x189/0x250 [ 210.498908][ T8809] ? __pfx____ratelimit+0x10/0x10 [ 210.498928][ T8809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.498951][ T8809] ? __pfx__printk+0x10/0x10 [ 210.498978][ T8809] ? __might_fault+0xb0/0x130 [ 210.499015][ T8809] should_fail_ex+0x414/0x560 [ 210.499057][ T8809] _copy_from_user+0x2d/0xb0 [ 210.499084][ T8809] do_sock_getsockopt+0x17d/0x450 [ 210.499113][ T8809] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 210.499137][ T8809] ? write_ibpb+0x30/0x40 [ 210.499157][ T8809] ? __fget_files+0x3a0/0x420 [ 210.499174][ T8809] ? __fget_files+0x2a/0x420 [ 210.499198][ T8809] __x64_sys_getsockopt+0x1a5/0x250 [ 210.499222][ T8809] ? write_ibpb+0x30/0x40 [ 210.499243][ T8809] ? write_ibpb+0x30/0x40 [ 210.499267][ T8809] do_syscall_64+0xfa/0x3b0 [ 210.499287][ T8809] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.499307][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.499344][ T8809] ? clear_bhb_loop+0x60/0xb0 [ 210.499368][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.499386][ T8809] RIP: 0033:0x7f328a38eba9 [ 210.499403][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.499419][ T8809] RSP: 002b:00007f328b182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 210.499459][ T8809] RAX: ffffffffffffffda RBX: 00007f328a5d6090 RCX: 00007f328a38eba9 [ 210.499474][ T8809] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 210.499485][ T8809] RBP: 00007f328b182090 R08: 0000200000000240 R09: 0000000000000000 [ 210.499498][ T8809] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 210.499514][ T8809] R13: 00007f328a5d6128 R14: 00007f328a5d6090 R15: 00007ffe73740c48 [ 210.499545][ T8809] [ 211.295911][ T8822] syz_tun: entered allmulticast mode [ 211.362758][ T8822] wg1 speed is unknown, defaulting to 1000 [ 211.407210][ T8822] lo speed is unknown, defaulting to 1000 [ 211.697955][ T8821] syz_tun: left allmulticast mode [ 211.712691][ T8834] FAULT_INJECTION: forcing a failure. [ 211.712691][ T8834] name failslab, interval 1, probability 0, space 0, times 1 [ 211.842135][ T8834] CPU: 0 UID: 0 PID: 8834 Comm: syz.2.889 Not tainted syzkaller #0 PREEMPT(full) [ 211.842163][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.842175][ T8834] Call Trace: [ 211.842182][ T8834] [ 211.842191][ T8834] dump_stack_lvl+0x189/0x250 [ 211.842220][ T8834] ? __pfx____ratelimit+0x10/0x10 [ 211.842241][ T8834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.842263][ T8834] ? __pfx__printk+0x10/0x10 [ 211.842295][ T8834] ? __pfx___might_resched+0x10/0x10 [ 211.842320][ T8834] should_fail_ex+0x414/0x560 [ 211.842353][ T8834] should_failslab+0xa8/0x100 [ 211.842435][ T8834] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 211.842462][ T8834] ? __alloc_skb+0x112/0x2d0 [ 211.842506][ T8834] __alloc_skb+0x112/0x2d0 [ 211.842533][ T8834] netlink_sendmsg+0x5c6/0xb30 [ 211.842568][ T8834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.842594][ T8834] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.842616][ T8834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.842637][ T8834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.842668][ T8834] __sock_sendmsg+0x21c/0x270 [ 211.842691][ T8834] ____sys_sendmsg+0x505/0x830 [ 211.842722][ T8834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.842757][ T8834] ? import_iovec+0x74/0xa0 [ 211.842786][ T8834] ___sys_sendmsg+0x21f/0x2a0 [ 211.842814][ T8834] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.842877][ T8834] ? __fget_files+0x2a/0x420 [ 211.842892][ T8834] ? __fget_files+0x3a0/0x420 [ 211.842919][ T8834] __x64_sys_sendmsg+0x19b/0x260 [ 211.842948][ T8834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.842984][ T8834] ? __pfx_ksys_write+0x10/0x10 [ 211.843006][ T8834] ? rcu_is_watching+0x15/0xb0 [ 211.843031][ T8834] ? do_syscall_64+0xbe/0x3b0 [ 211.843057][ T8834] do_syscall_64+0xfa/0x3b0 [ 211.843074][ T8834] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.843092][ T8834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.843111][ T8834] ? clear_bhb_loop+0x60/0xb0 [ 211.843134][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.843152][ T8834] RIP: 0033:0x7f4f95b8eba9 [ 211.843171][ T8834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.843187][ T8834] RSP: 002b:00007f4f96a99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.843208][ T8834] RAX: ffffffffffffffda RBX: 00007f4f95dd5fa0 RCX: 00007f4f95b8eba9 [ 211.843223][ T8834] RDX: 0000000004000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 211.843235][ T8834] RBP: 00007f4f96a99090 R08: 0000000000000000 R09: 0000000000000000 [ 211.843247][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.843258][ T8834] R13: 00007f4f95dd6038 R14: 00007f4f95dd5fa0 R15: 00007ffc623b7fc8 [ 211.843290][ T8834] [ 212.939957][ T8851] FAULT_INJECTION: forcing a failure. [ 212.939957][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.005452][ T8851] CPU: 1 UID: 0 PID: 8851 Comm: syz.0.896 Not tainted syzkaller #0 PREEMPT(full) [ 213.005479][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.005491][ T8851] Call Trace: [ 213.005498][ T8851] [ 213.005507][ T8851] dump_stack_lvl+0x189/0x250 [ 213.005533][ T8851] ? __pfx____ratelimit+0x10/0x10 [ 213.005550][ T8851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.005572][ T8851] ? __pfx__printk+0x10/0x10 [ 213.005593][ T8851] ? __might_fault+0xb0/0x130 [ 213.005626][ T8851] should_fail_ex+0x414/0x560 [ 213.005656][ T8851] _copy_from_user+0x2d/0xb0 [ 213.005684][ T8851] sctp_getsockopt_enable_strreset+0xb5/0x4e0 [ 213.005717][ T8851] ? __pfx_sctp_getsockopt_enable_strreset+0x10/0x10 [ 213.005757][ T8851] sctp_getsockopt+0xa55/0xb60 [ 213.005867][ T8851] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 213.005891][ T8851] do_sock_getsockopt+0x36f/0x450 [ 213.005919][ T8851] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 213.005944][ T8851] ? write_ibpb+0x30/0x40 [ 213.005964][ T8851] ? __fget_files+0x3a0/0x420 [ 213.005978][ T8851] ? __fget_files+0x2a/0x420 [ 213.005999][ T8851] __x64_sys_getsockopt+0x1a5/0x250 [ 213.006023][ T8851] ? write_ibpb+0x30/0x40 [ 213.006042][ T8851] ? write_ibpb+0x30/0x40 [ 213.006063][ T8851] do_syscall_64+0xfa/0x3b0 [ 213.006084][ T8851] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.006104][ T8851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.006123][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 213.006148][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.006167][ T8851] RIP: 0033:0x7f9f5458eba9 [ 213.006185][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.006200][ T8851] RSP: 002b:00007f9f553fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 213.006221][ T8851] RAX: ffffffffffffffda RBX: 00007f9f547d6090 RCX: 00007f9f5458eba9 [ 213.006235][ T8851] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 213.006247][ T8851] RBP: 00007f9f553fc090 R08: 0000200000000240 R09: 0000000000000000 [ 213.006260][ T8851] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 213.006273][ T8851] R13: 00007f9f547d6128 R14: 00007f9f547d6090 R15: 00007ffe29ba3058 [ 213.006306][ T8851] [ 213.682276][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 213.698679][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.901'. [ 213.803206][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 213.862115][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 214.112402][ T8882] tap0: tun_chr_ioctl cmd 1074025677 [ 214.143072][ T8882] tap0: linktype set to 776 [ 214.179616][ T8882] tipc: Enabled bearer , priority 0 [ 214.193302][ T8882] syzkaller0: entered promiscuous mode [ 214.243846][ T8882] syzkaller0: entered allmulticast mode [ 214.398047][ T8887] vlan2: entered allmulticast mode [ 214.847077][ T8895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.913'. [ 215.195870][ T5987] tipc: Node number set to 2585052546 [ 215.684621][ T8901] FAULT_INJECTION: forcing a failure. [ 215.684621][ T8901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.723821][ T8901] CPU: 0 UID: 0 PID: 8901 Comm: syz.2.915 Not tainted syzkaller #0 PREEMPT(full) [ 215.723850][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.723862][ T8901] Call Trace: [ 215.723870][ T8901] [ 215.723878][ T8901] dump_stack_lvl+0x189/0x250 [ 215.723907][ T8901] ? __pfx____ratelimit+0x10/0x10 [ 215.723929][ T8901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.723951][ T8901] ? __pfx__printk+0x10/0x10 [ 215.723991][ T8901] should_fail_ex+0x414/0x560 [ 215.724025][ T8901] _copy_to_user+0x31/0xb0 [ 215.724054][ T8901] simple_read_from_buffer+0xe1/0x170 [ 215.724088][ T8901] proc_fail_nth_read+0x1b3/0x220 [ 215.724113][ T8901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.724138][ T8901] ? rw_verify_area+0x2a6/0x4d0 [ 215.724162][ T8901] ? __lock_acquire+0xab9/0xd20 [ 215.724188][ T8901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.724211][ T8901] vfs_read+0x200/0xa30 [ 215.724235][ T8901] ? fdget_pos+0x247/0x320 [ 215.724256][ T8901] ? __pfx___mutex_lock+0x10/0x10 [ 215.724279][ T8901] ? __pfx_vfs_read+0x10/0x10 [ 215.724305][ T8901] ? __fget_files+0x2a/0x420 [ 215.724327][ T8901] ? __fget_files+0x3a0/0x420 [ 215.724342][ T8901] ? __fget_files+0x2a/0x420 [ 215.724368][ T8901] ksys_read+0x145/0x250 [ 215.724396][ T8901] ? __pfx_ksys_read+0x10/0x10 [ 215.724418][ T8901] ? rcu_is_watching+0x15/0xb0 [ 215.724455][ T8901] ? do_syscall_64+0xbe/0x3b0 [ 215.724481][ T8901] do_syscall_64+0xfa/0x3b0 [ 215.724501][ T8901] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.724521][ T8901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.724541][ T8901] ? clear_bhb_loop+0x60/0xb0 [ 215.724564][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.724583][ T8901] RIP: 0033:0x7f4f95b8d5bc [ 215.724601][ T8901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.724617][ T8901] RSP: 002b:00007f4f96a78030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.724638][ T8901] RAX: ffffffffffffffda RBX: 00007f4f95dd6090 RCX: 00007f4f95b8d5bc [ 215.724652][ T8901] RDX: 000000000000000f RSI: 00007f4f96a780a0 RDI: 0000000000000004 [ 215.724664][ T8901] RBP: 00007f4f96a78090 R08: 0000000000000000 R09: 0000000000000000 [ 215.724676][ T8901] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 215.724687][ T8901] R13: 00007f4f95dd6128 R14: 00007f4f95dd6090 R15: 00007ffc623b7fc8 [ 215.724720][ T8901] [ 216.199882][ T8920] FAULT_INJECTION: forcing a failure. [ 216.199882][ T8920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.219271][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.0.923 Not tainted syzkaller #0 PREEMPT(full) [ 216.219298][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.219310][ T8920] Call Trace: [ 216.219321][ T8920] [ 216.219331][ T8920] dump_stack_lvl+0x189/0x250 [ 216.219360][ T8920] ? __pfx____ratelimit+0x10/0x10 [ 216.219381][ T8920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.219404][ T8920] ? __pfx__printk+0x10/0x10 [ 216.220578][ T8920] ? __might_fault+0xb0/0x130 [ 216.220700][ T8920] should_fail_ex+0x414/0x560 [ 216.220742][ T8920] _copy_from_iter+0x1de/0x1790 [ 216.220773][ T8920] ? rcu_is_watching+0x15/0xb0 [ 216.220794][ T8920] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 216.220823][ T8920] ? __pfx__copy_from_iter+0x10/0x10 [ 216.220847][ T8920] ? __build_skb_around+0x257/0x3e0 [ 216.220875][ T8920] ? netlink_sendmsg+0x642/0xb30 [ 216.220896][ T8920] ? skb_put+0x11b/0x210 [ 216.220923][ T8920] netlink_sendmsg+0x6b2/0xb30 [ 216.220957][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.220984][ T8920] ? aa_sock_msg_perm+0xf1/0x1d0 [ 216.221005][ T8920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.221026][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.221050][ T8920] __sock_sendmsg+0x21c/0x270 [ 216.221074][ T8920] ____sys_sendmsg+0x505/0x830 [ 216.221106][ T8920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.221141][ T8920] ? import_iovec+0x74/0xa0 [ 216.221169][ T8920] ___sys_sendmsg+0x21f/0x2a0 [ 216.221197][ T8920] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.221260][ T8920] ? __fget_files+0x2a/0x420 [ 216.221276][ T8920] ? __fget_files+0x3a0/0x420 [ 216.221304][ T8920] __x64_sys_sendmsg+0x19b/0x260 [ 216.221333][ T8920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.221368][ T8920] ? __pfx_ksys_write+0x10/0x10 [ 216.221385][ T8920] ? rcu_is_watching+0x15/0xb0 [ 216.221403][ T8920] ? do_syscall_64+0xbe/0x3b0 [ 216.221423][ T8920] do_syscall_64+0xfa/0x3b0 [ 216.221439][ T8920] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.222994][ T8920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.223010][ T8920] ? clear_bhb_loop+0x60/0xb0 [ 216.223030][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.223047][ T8920] RIP: 0033:0x7f9f5458eba9 [ 216.223066][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.223083][ T8920] RSP: 002b:00007f9f5541d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.223104][ T8920] RAX: ffffffffffffffda RBX: 00007f9f547d5fa0 RCX: 00007f9f5458eba9 [ 216.223118][ T8920] RDX: 0000000004000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 216.223131][ T8920] RBP: 00007f9f5541d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.223143][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.223154][ T8920] R13: 00007f9f547d6038 R14: 00007f9f547d5fa0 R15: 00007ffe29ba3058 [ 216.223186][ T8920] [ 216.827361][ T8921] netlink: 'syz.1.924': attribute type 11 has an invalid length. [ 217.045287][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 217.063144][ T8935] netlink: 'syz.4.928': attribute type 21 has an invalid length. [ 217.252062][ T5885] Bluetooth: hci3: command 0x0406 tx timeout [ 217.252135][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 217.264658][ T5885] Bluetooth: hci1: command 0x0406 tx timeout [ 217.403277][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'. [ 217.608802][ T8953] vlan2: entered allmulticast mode [ 218.052496][ T8960] tc_dump_action: action bad kind [ 218.115908][ T8969] wg1 speed is unknown, defaulting to 1000 [ 218.188137][ T8969] lo speed is unknown, defaulting to 1000 [ 218.356752][ T8977] batadv_slave_1: entered promiscuous mode [ 218.421307][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 218.502684][ T8977] bridge_slave_1: left allmulticast mode [ 218.521734][ T8977] bridge_slave_1: left promiscuous mode [ 218.544516][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.613613][ T8977] bridge_slave_0: left allmulticast mode [ 218.652562][ T8977] bridge_slave_0: left promiscuous mode [ 218.681925][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.986334][ T8976] batadv_slave_1: left promiscuous mode [ 219.045996][ T8993] pim6reg: entered allmulticast mode [ 219.064254][ T8993] pim6reg: left allmulticast mode [ 219.378061][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 219.420550][ T9004] C: renamed from team_slave_0 [ 219.455410][ T9004] netlink: 'syz.3.950': attribute type 3 has an invalid length. [ 219.532979][ T9004] netlink: 152 bytes leftover after parsing attributes in process `syz.3.950'. [ 219.588365][ T9004] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.654312][ T9002] veth0: entered promiscuous mode [ 219.668072][ T9002] veth0: left promiscuous mode [ 219.686605][ T9020] FAULT_INJECTION: forcing a failure. [ 219.686605][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 219.725414][ T9020] CPU: 1 UID: 0 PID: 9020 Comm: syz.0.953 Not tainted syzkaller #0 PREEMPT(full) [ 219.725442][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.725455][ T9020] Call Trace: [ 219.725463][ T9020] [ 219.725472][ T9020] dump_stack_lvl+0x189/0x250 [ 219.725501][ T9020] ? __pfx____ratelimit+0x10/0x10 [ 219.725523][ T9020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.725547][ T9020] ? __pfx__printk+0x10/0x10 [ 219.725580][ T9020] ? __pfx___might_resched+0x10/0x10 [ 219.725608][ T9020] ? fs_reclaim_acquire+0x7d/0x100 [ 219.725643][ T9020] should_fail_ex+0x414/0x560 [ 219.725678][ T9020] should_failslab+0xa8/0x100 [ 219.725709][ T9020] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 219.725736][ T9020] ? __alloc_skb+0x112/0x2d0 [ 219.725764][ T9020] __alloc_skb+0x112/0x2d0 [ 219.725791][ T9020] netlink_ack+0x146/0xa50 [ 219.725816][ T9020] ? ref_tracker_free+0x63a/0x7d0 [ 219.725835][ T9020] ? __asan_memcpy+0x40/0x70 [ 219.725856][ T9020] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.725883][ T9020] netlink_rcv_skb+0x28c/0x470 [ 219.725904][ T9020] ? __lock_acquire+0xab9/0xd20 [ 219.725932][ T9020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.725961][ T9020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.726004][ T9020] ? down_read+0x1ad/0x2e0 [ 219.726031][ T9020] genl_rcv+0x28/0x40 [ 219.726056][ T9020] netlink_unicast+0x82f/0x9e0 [ 219.726086][ T9020] ? __pfx_netlink_unicast+0x10/0x10 [ 219.726108][ T9020] ? netlink_sendmsg+0x642/0xb30 [ 219.726129][ T9020] ? skb_put+0x11b/0x210 [ 219.726160][ T9020] netlink_sendmsg+0x805/0xb30 [ 219.726704][ T9020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.726736][ T9020] ? aa_sock_msg_perm+0xf1/0x1d0 [ 219.726757][ T9020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.726777][ T9020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.726801][ T9020] __sock_sendmsg+0x21c/0x270 [ 219.726824][ T9020] ____sys_sendmsg+0x505/0x830 [ 219.726857][ T9020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.726892][ T9020] ? import_iovec+0x74/0xa0 [ 219.726922][ T9020] ___sys_sendmsg+0x21f/0x2a0 [ 219.726951][ T9020] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.727017][ T9020] ? __fget_files+0x2a/0x420 [ 219.727034][ T9020] ? __fget_files+0x3a0/0x420 [ 219.727069][ T9020] __x64_sys_sendmsg+0x19b/0x260 [ 219.727094][ T9020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.727131][ T9020] ? __pfx_ksys_write+0x10/0x10 [ 219.727153][ T9020] ? rcu_is_watching+0x15/0xb0 [ 219.727179][ T9020] ? do_syscall_64+0xbe/0x3b0 [ 219.729338][ T9020] do_syscall_64+0xfa/0x3b0 [ 219.729357][ T9020] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.729381][ T9020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.729401][ T9020] ? clear_bhb_loop+0x60/0xb0 [ 219.729424][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.729442][ T9020] RIP: 0033:0x7f9f5458eba9 [ 219.729459][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.729988][ T9020] RSP: 002b:00007f9f553fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.730007][ T9020] RAX: ffffffffffffffda RBX: 00007f9f547d6090 RCX: 00007f9f5458eba9 [ 219.730018][ T9020] RDX: 0000000004000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 219.730027][ T9020] RBP: 00007f9f553fc090 R08: 0000000000000000 R09: 0000000000000000 [ 219.730036][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.730047][ T9020] R13: 00007f9f547d6128 R14: 00007f9f547d6090 R15: 00007ffe29ba3058 [ 219.730101][ T9020] [ 220.468413][ T9013] tipc: Enabled bearer , priority 0 [ 220.602125][ T9018] syzkaller0: entered promiscuous mode [ 220.655676][ T9018] syzkaller0: entered allmulticast mode [ 220.723482][ T9032] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.898053][ T9011] tipc: Resetting bearer [ 221.167333][ T9005] tipc: Resetting bearer [ 221.441700][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 221.453719][ T9005] tipc: Disabling bearer [ 221.475953][ T9052] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 221.531005][ T9054] ------------[ cut here ]------------ [ 221.533473][ T9045] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 221.544546][ T9054] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 221.567759][ T9054] WARNING: CPU: 0 PID: 9054 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 221.586862][ T9054] Modules linked in: [ 221.595124][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.0.959 Not tainted syzkaller #0 PREEMPT(full) [ 221.611277][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.633709][ T9054] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 221.646311][ T9054] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 80 43 b0 8c e8 d6 b9 99 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 67 1e d6 f6 90 0f 0b 90 42 80 7c 3d [ 221.684791][ T9054] RSP: 0018:ffffc9000ddff910 EFLAGS: 00010246 [ 221.699801][ T9054] RAX: 365232af63dbba00 RBX: 0000000000000000 RCX: 0000000000080000 [ 221.715348][ T9054] RDX: ffffc9000f637000 RSI: 0000000000038ab7 RDI: 0000000000038ab8 [ 221.738440][ T9054] RBP: ffff888052c89728 R08: 0000000000000003 R09: 0000000000000004 [ 221.751814][ T9054] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888052c8a9d8 [ 221.766737][ T9054] R13: ffff888052c88d80 R14: 1ffff1100a5912e5 R15: dffffc0000000000 [ 221.786985][ T9054] FS: 00007f9f553db6c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 221.801316][ T9054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.810204][ T9054] CR2: 00007f4f95b74660 CR3: 000000007e958000 CR4: 00000000003526f0 [ 221.823167][ T9054] Call Trace: [ 221.828297][ T9054] [ 221.837844][ T9054] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 221.847176][ T9054] __ieee80211_link_release_channel+0x33b/0x4a0 [ 221.857836][ T9054] ieee80211_if_change_type+0x14c/0x990 [ 221.865745][ T9054] ieee80211_change_iface+0xd5/0x510 [ 221.872391][ T9054] cfg80211_change_iface+0x792/0xef0 [ 221.880077][ T9054] cfg80211_wext_siwmode+0x1db/0x2b0 [ 221.888798][ T9054] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 221.897599][ T9054] ? full_name_hash+0x92/0xe0 [ 221.904683][ T9054] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 221.912486][ T9054] ioctl_standard_call+0xc8/0x1b0 [ 221.919679][ T9054] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 221.926496][ T9054] wext_ioctl_dispatch+0xeb/0x410 [ 221.933547][ T9054] ? __pfx_ioctl_standard_call+0x10/0x10 [ 221.941829][ T9054] wext_handle_ioctl+0x100/0x1c0 [ 221.950150][ T9054] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 221.958858][ T9054] ? __lock_acquire+0xab9/0xd20 [ 221.966806][ T9054] sock_ioctl+0x15f/0x790 [ 221.974254][ T9054] ? __pfx_sock_ioctl+0x10/0x10 [ 221.981728][ T9054] ? __fget_files+0x2a/0x420 [ 221.989738][ T9054] ? __fget_files+0x3a0/0x420 [ 221.995738][ T9054] ? __fget_files+0x2a/0x420 [ 222.004826][ T9054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.012048][ T9054] ? __pfx_sock_ioctl+0x10/0x10 [ 222.019464][ T9054] __se_sys_ioctl+0xfc/0x170 [ 222.025167][ T9054] do_syscall_64+0xfa/0x3b0 [ 222.031195][ T9054] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.039544][ T9054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.046974][ T9054] ? clear_bhb_loop+0x60/0xb0 [ 222.053203][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.059879][ T9054] RIP: 0033:0x7f9f5458eba9 [ 222.067588][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.094642][ T9054] RSP: 002b:00007f9f553db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.107222][ T9054] RAX: ffffffffffffffda RBX: 00007f9f547d6180 RCX: 00007f9f5458eba9 [ 222.132444][ T9054] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000009 [ 222.143383][ T9054] RBP: 00007f9f54611e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.156455][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.171623][ T9054] R13: 00007f9f547d6218 R14: 00007f9f547d6180 R15: 00007ffe29ba3058 [ 222.182158][ T9054] [ 222.186615][ T9054] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.198323][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.0.959 Not tainted syzkaller #0 PREEMPT(full) [ 222.210243][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.229174][ T9054] Call Trace: [ 222.237666][ T9054] [ 222.246191][ T9054] dump_stack_lvl+0x99/0x250 [ 222.257483][ T9054] ? __asan_memcpy+0x40/0x70 [ 222.264834][ T9054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.272185][ T9054] ? __pfx__printk+0x10/0x10 [ 222.279865][ T9054] vpanic+0x281/0x750 [ 222.286839][ T9054] ? __pfx__printk+0x10/0x10 [ 222.293110][ T9054] ? __pfx_vpanic+0x10/0x10 [ 222.299408][ T9054] ? is_bpf_text_address+0x292/0x2b0 [ 222.305992][ T9054] panic+0xb9/0xc0 [ 222.313269][ T9054] ? __pfx_panic+0x10/0x10 [ 222.321318][ T9054] __warn+0x31b/0x4b0 [ 222.325818][ T9054] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.333792][ T9054] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.342874][ T9054] report_bug+0x2be/0x4f0 [ 222.347435][ T9054] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.354766][ T9054] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.361633][ T9054] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 222.368122][ T9054] handle_bug+0x84/0x160 [ 222.375983][ T9054] exc_invalid_op+0x1a/0x50 [ 222.381505][ T9054] asm_exc_invalid_op+0x1a/0x20 [ 222.387878][ T9054] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 222.399645][ T9054] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 80 43 b0 8c e8 d6 b9 99 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 67 1e d6 f6 90 0f 0b 90 42 80 7c 3d [ 222.433001][ T9054] RSP: 0018:ffffc9000ddff910 EFLAGS: 00010246 [ 222.440505][ T9054] RAX: 365232af63dbba00 RBX: 0000000000000000 RCX: 0000000000080000 [ 222.451307][ T9054] RDX: ffffc9000f637000 RSI: 0000000000038ab7 RDI: 0000000000038ab8 [ 222.466945][ T9054] RBP: ffff888052c89728 R08: 0000000000000003 R09: 0000000000000004 [ 222.479457][ T9054] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888052c8a9d8 [ 222.492256][ T9054] R13: ffff888052c88d80 R14: 1ffff1100a5912e5 R15: dffffc0000000000 [ 222.503096][ T9054] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 222.510915][ T9054] __ieee80211_link_release_channel+0x33b/0x4a0 [ 222.518679][ T9054] ieee80211_if_change_type+0x14c/0x990 [ 222.524547][ T9054] ieee80211_change_iface+0xd5/0x510 [ 222.530896][ T9054] cfg80211_change_iface+0x792/0xef0 [ 222.537887][ T9054] cfg80211_wext_siwmode+0x1db/0x2b0 [ 222.544614][ T9054] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 222.554581][ T9054] ? full_name_hash+0x92/0xe0 [ 222.562950][ T9054] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 222.569960][ T9054] ioctl_standard_call+0xc8/0x1b0 [ 222.576783][ T9054] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 222.584712][ T9054] wext_ioctl_dispatch+0xeb/0x410 [ 222.592941][ T9054] ? __pfx_ioctl_standard_call+0x10/0x10 [ 222.599707][ T9054] wext_handle_ioctl+0x100/0x1c0 [ 222.606835][ T9054] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 222.613205][ T9054] ? __lock_acquire+0xab9/0xd20 [ 222.618992][ T9054] sock_ioctl+0x15f/0x790 [ 222.625208][ T9054] ? __pfx_sock_ioctl+0x10/0x10 [ 222.632287][ T9054] ? __fget_files+0x2a/0x420 [ 222.640910][ T9054] ? __fget_files+0x3a0/0x420 [ 222.648959][ T9054] ? __fget_files+0x2a/0x420 [ 222.658606][ T9054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.665197][ T9054] ? __pfx_sock_ioctl+0x10/0x10 [ 222.673587][ T9054] __se_sys_ioctl+0xfc/0x170 [ 222.680975][ T9054] do_syscall_64+0xfa/0x3b0 [ 222.687499][ T9054] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.703502][ T9054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.714424][ T9054] ? clear_bhb_loop+0x60/0xb0 [ 222.721074][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.728821][ T9054] RIP: 0033:0x7f9f5458eba9 [ 222.735964][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.760949][ T9054] RSP: 002b:00007f9f553db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.772367][ T9054] RAX: ffffffffffffffda RBX: 00007f9f547d6180 RCX: 00007f9f5458eba9 [ 222.784279][ T9054] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000009 [ 222.794192][ T9054] RBP: 00007f9f54611e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.804571][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.818324][ T9054] R13: 00007f9f547d6218 R14: 00007f9f547d6180 R15: 00007ffe29ba3058 [ 222.830231][ T9054] [ 222.837271][ T9054] Kernel Offset: disabled [ 222.843091][ T9054] Rebooting in 86400 seconds..