last executing test programs: 5.074820159s ago: executing program 3 (id=1416): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000e40)={0x0}, &(0x7f0000000e80)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast2}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="cd5454f05f77bb1e680094f51e974f1fbf9128cf79502698feb3d3d16f4f327751d98b2ad0aae7df85b7b0683658fa91d50552e37a480f4b3c9566f253f5e4f75fd3d3b37e72aed0ce14ad251d2128493afb5e1df0bb0b475d133250da9e485e3d7932de7406ec6f5ae3c84847b659093df41cbb445e450566d2ff70880f41a0323d4918a5c7134ded96ddf813cb33f5db380ee3a3785e30c37a54eaecd1c55535c28f427f23a61ad64f7935a0c99684af41bb14871403a387dbb823c6b68a9163708d0a7b75693db2b39238bc3629c67c526ca52dd98a71a2ae6d982c7d9985cf25ebb4520fc50844cad22591d7714cefaa2000a85cf812", 0xf8}, {&(0x7f0000000280)="6e83d333e94f1dd9693594e57cb17c6ab35d5eea7cfd5875dd660c206a60b13ee843c6f7e05f2410185a26b7f37c026fc45ca8b5b85a03602d503009017f82c9606b2db680c1b6903c88dfbe856a3c47a5b6021ab45b33b6d3263faf09b9b76a60", 0x61}, {&(0x7f0000000300)="dcd61aac21132e9a259e4c510529c91f32b2222a037f253b0b2312e7654113f74f57b85fddba718c8a0711ff15d51ad09dafc114f0c9c6dd5e8b192bc7971d8e039fe1312fda4fc203bbc40b264745266eee8281fc592eeb03a12bc6a73fc72066af2612d1a724f2", 0x68}, {&(0x7f0000000380)="2c0ba9a130ed3b119aba0e654d9cfabc29516cfca89102e1a06a80828194d13068548d20f2355b02029524aa732a6585fac26759d9762368f89407fdd7c80021f990731094e8f9841266a96281c1c9d337f53f73cc66f31334839a7396d07531f25fec4509cb97163fc9c040ccfda9a4a68b3f45e0", 0x75}, {&(0x7f0000000400)="d247c2cf1bf213938db990279f3e6c3df125a53dc36189dc7d48b131fae809af23154ae25d18094dad88f8211d276efeea257139c698d8711ec1545b41710c3e4cfbae6605c0c3d47b1dbe3ca4cd55aa9bd925c9bdc9206d04530aba122f70827593637797ab73383f48e9c067c9fffefe21eae6962016ee15e5c590a463e72060f502469e46e66a730d5e98d15d5b", 0x8f}, {&(0x7f00000004c0)="30ed29597a3ce5b51aeb41632b8529408222b23b33d7b43d1d9ff284c910c543e2dfb3450e261a5426527628f8ea4582b8cac44a7adebb9b8cfede89b7df7d7fa90ba05ea4b944c046fea1f858878f8ddc13a034755c0c", 0x57}, {&(0x7f0000000540)="3949b85fb9625d24e5387ee3c91edd85cbd8f083ca91d8854910c87bca3863b191cf15af907ba4bbe1c1c87501108dc311ee5c46a727b98ab974ddf48fdba79badf8407e8d8a216b4cbec94835f04fef017c4c7e17444c282d439b48357a690a149c756d6b9c2cb7", 0x68}, {&(0x7f00000005c0)="8c34e74b74bc6584e6e623b9e44f27056712bb55246f6d6327559bd313815063dd991146519c3de4ab1f1150850c346d67f33eafe5c256861224e01b3e51c159cecfb5", 0x43}, {&(0x7f0000000640)="2815baa99dc9bc77316b7a51bbd0eb88f1254075f3065f813d555e9f4c5aaba29265fa40a092a5e26e09194d62994cc165aa79e79eb1a4cd66754086fa62ac648db0cab024a39bb3ddd3d0c4ee6177ebdd09f3419ef22ab09af09ead79f0d4f93b2b58c939e4dfb8b769e738573fcfbb26dbf318ef3b4cb0ae96c23d32913d27b4380d4398787b83e1e3c206742122ab0a726ead51893b4c834814eace4e7302a00b750227feb83bc2f0bba7223658ba99938b48d7851826d6e841d475bf4975a22b47b42e6b48aa7c18d046c50eeab329a3760b8b617c45d90383b0c4ec500d791d873ca07e312b", 0xe8}], 0xa, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}], 0x20, 0x880}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000008c0)="6a9d0bf47694a6880cc275a190631c2b8729c5f85c1fff12f23eb0a8850b6fe9e44febb4d0e94ee493330ac05a9221e012cdf42e1ab986ded9a3db17623233c4c0a565e371a5dcca18e358c34cf09cab199824c7dd843b5ea9b6f7b3112075d1ba00972a8c515dca306fc6df93b58deca318da279b27834c72c21a049102fc89642a6fc1df5508163688bcbaffc4d75f4be3f1baa6b9da84a70231ab1c5d1d215dce29ee52b379382651198a51bcc258e94d0a73f11ae1d4881fd80f704a9dc4161af123ce935f575f99484df8aa115e0ccaeff4d3d302b5", 0xd8}, {&(0x7f00000009c0)="c58953131eb9785ab92ddc059252ae8dcc3b006f3a8aafa543a0cabc3702ae2ba823b8d54db4b6ae8bffb12a2480e5507e21c937a8ebecee6ed20fa5eddaa9ff594daf756db0935d32604f5daef8b59436bbaaeb8a2835114482a09f6f3a7c5b207b042fea9d89ff5fa96c7556ca62940058d8253a2342e3ba4211f13776bb75bdbd8c912f51fb062ee02ae7d5aa6b1ba22df8bf277688660d6b124cbf7695fd77a943da318856f5aef85f16e4c45ea023f7d3a0eeb315c45f608ccef8ea30c4e713c9febc3f049a5aa1de11195463290d9e344d586d0d7dc0b190e50b754e0552", 0xe1}, {&(0x7f0000000ac0)="3ad46c2fed35f78e02f6342a4b7e1d9c27ff629d3937b861aeca613a54c2fad10f16478ddfb07af5380e3acc7451d12b9836e04f42fb0151c5dcc751b914f02eda82342bbd13e78fca21b6d8cf1e2f4436cafa90", 0x54}, {&(0x7f0000000b40)="7517748e5f6d055d69b5d917778c8039a1d85153b43b281e40c084cf7704be8997f8a04f832908c97c32aa284aa7196e2e90355dba2ed10fd3967123219ecf77c7eb39e55c079b2cb090d82f37594fe999fdf9eb5c0621dab7185816f4634de03dd9135b14a1ad9ce2a477613c36f6b9f7e0f280555709ca24ecff7d8410677e3ef0879f7602552a97619319f836043c56e6dc42f310d8b075175463cb78dfdd3dbad04c173b2e1405075905370a11", 0xaf}, {&(0x7f0000000c00)="7b3c2d99072682f753ae94ca15b84401c41139bb4d", 0x15}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="7c8f3fce9836871c3a199a5a1df3070233998aff9d3b40e5e9d26ef2886760cfa1f57539", 0x24}, {&(0x7f0000000cc0)="52a375d74917288da71dd7f4bb18eaf9c5481abbf35b51bb1d5e446e07d5b1bddb571717bb7580c90c4a6082ef210b32193e8f3b3cfa39df88a4e0c31be9a72d1cbf2a770306e24f6beb72d5a5313f6106dee7a75d884d1fae214ffa9b48d189637dd1d2d49c7cc69e0969f4d674a7f945a9b6964768abb64954b2ab8f368ea891cf4b99260bda88a6bfd69629315c4ea0d05b39b5c176fedd2d7cdcd508531ca0ceda7b64baa376d33a47f673cca15100b19d69dfc6135b92aca3c6b3e726ebee4434ed3b7b8fbf12a31d5ecdd0aa78b3d6dde2570a4e495c8c292b9d08606534308eed685a1615ce84095d38b9c8fa6e30031757", 0xf5}], 0x8, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}], 0x20, 0x801}}, {{&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000010c0)="56bbfd5cd8a76b10bad473da892184a63289f8b1f8e730b05852863a0d0d7fd2019fc6e71731240d2cde2782ded1bed1c51210d630f669db3a87aeb4f3521e430acc28c75c346dc8f757cb3723ba07dd4aa32f8512d29a98c8ccd1332430bf2d04265e8f167d72df2fd026e4989caca544c80eedaf243cfb8b0b3ce9dad02323e1f46db8fe58218b558138dc07bedf8ce1a0c6423a8d9ce11691b2ddccf5095c143ec051ffd0bda101cf5687d359c40a681b24a8d6678a5b264ffc730e4cd3c0604414fbbc", 0xc5}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="b7fc75f3355c28190a68a43051ae5ceca47f32fcf04a86973a9ed7e6728f2463d3e67ac04dad1b0b032c9ffec81b836bc6a9433cae27c30ffc552893995adfef587dcbfb1c1d44c530ee8a23b9c34c93b8d73ac8754a8c726a618423f0e60dd15146ef9006740f81f51566c06d4d6734a5363c9b87e946e5449e09d72365c031ae4c5063824af32a08f671c43fa60e33d75eb745217bd7a9582d376e331b453231eac17a7910fe61951a6a22baa73cc3105bf4fe67cc9ae81363f0717feaa393c1ad5f660340600c142fa7aa1559786e", 0xd0}, {&(0x7f00000022c0)="df3c6da356e2f242aefb49bdf1807a8412574a4d2e26c09d332f470faa3e4a6d4ed6bf6f19589c37c77d8804566a04d07f76c2c4522abfad8ba4152361d0c929c4e5745d494fe63bc4bb79190dc39d16a25fc85fbf88bb202f659f2f19234a0bc9a4b6f55ee6360df03a9129eb494eb94c75924172e14f57724ba815b989fa0406e5cd30bb1846a499ef80ea59099d7ce5bfb7246d57f4f98e4c9b30016a0082b86aef08f23f5f81b1ed", 0xaa}], 0x4, &(0x7f00000023c0)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r1, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r2, r0, r2, r2, r1, r1, r2, r1]}}], 0x60, 0x4000}}, {{&(0x7f0000002440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000037c0)=[{&(0x7f00000024c0)="c98f85c54b0b6a69017490975c902f6db601e9ac3e75856b849cc2bcf7d7b521e2bda772e598e2d25e7bcfe18dd2828c1b8b4372c25d6640abe2668f04f91c979ae97e8ecc83e529406f96ebcd086b35a62b4d9fdf2a1f58f3d4c29b49907472", 0x60}, {&(0x7f0000002540)="381d48ef65", 0x5}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="eceb7c54d6c141a0b525815d7b74e14aac1f96ee82d778483357023ba9e32f35b988980bdea8838e996bc2faeb3845fe0a3781656fb84dc350738e633246cc5811e36894d61c39c910eed39ae68823e692d320ff165215b5fad810af693b83d3a22ff9a783e64a5853cc5c6888f7a66a0e9c24412622f4c5e82a0971cd89ce88768d0f7c3176a37b9cec42d1", 0x8c}, {&(0x7f0000003640)="017664edc3", 0x5}, {&(0x7f0000003680)="59979062b891b5c5f143aaabddf66c8edf7233329367407ed7f5ca2491abae8cd583862f2d2f110dcdd52eb0900be92786621de2", 0x34}, {&(0x7f00000036c0)="b13bbbf28d063cdbace0bae1fc265be4745a83353e2f857ec6797b97c91f403772caada8fea385f8f73534ed9927b3c27ffa975d23458c087c4fb8a308b9d0cfad49c6edbc47e225f039a0ef7350645d6eeccf479ca6232d29e4d0168ad255258f17bea127b0731ecadc42f038b8e2b49f44fbcfb6e94be9b309eb01206d0e1091949444d191d7a96171971540437c6d8819a0633c3999a247e454c6f7fb11c1898270e0a4d6d02291757fd2d1e97efa659c46d4d40d540c3da9682402700b3cc2150a5efb584d11", 0xc8}], 0x7, 0x0, 0x0, 0x8040}}], 0x4, 0x400c0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000003940)=""/54, &(0x7f0000003980)=0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a00)={0xb0, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x23}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xae, 0xe}}]}, @NL80211_ATTR_IE={0x83, 0x2a, [@preq={0x82, 0x7d, {{0x0, 0x1}, 0x49, 0xf8, 0x3, @device_a, 0x2, @void, 0x0, 0xa10f, 0x9, [{{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{}, @broadcast, 0xb6}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x1}, @device_b, 0x1}, {{}, @device_a, 0x5}, {{0x1}, @broadcast, 0x2}, {{0x1}, @device_a, 0xe}, {{0x0, 0x0, 0x1}, @broadcast, 0x8000}]}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x40001) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a00)={0xb0, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x23}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xae, 0xe}}]}, @NL80211_ATTR_IE={0x83, 0x2a, [@preq={0x82, 0x7d, {{0x0, 0x1}, 0x49, 0xf8, 0x3, @device_a, 0x2, @void, 0x0, 0xa10f, 0x9, [{{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{}, @broadcast, 0xb6}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x1}, @device_b, 0x1}, {{}, @device_a, 0x5}, {{0x1}, @broadcast, 0x2}, {{0x1}, @device_a, 0xe}, {{0x0, 0x0, 0x1}, @broadcast, 0x8000}]}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x40001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), r6) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x20, r7, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x40010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003cc0), r6) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000003ec0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003d00)={0x148, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc1e}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2555}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff01}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x59d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfea0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x40008004) (async) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000003ec0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003d00)={0x148, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9e}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc1e}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2555}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff01}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x59d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfea0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x40008004) getpeername$unix(r1, &(0x7f0000003f00), &(0x7f0000003f80)=0x6e) (async) getpeername$unix(r1, &(0x7f0000003f00), &(0x7f0000003f80)=0x6e) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000003fc0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000004000)=0x1c, 0x80000) setsockopt$inet6_int(r9, 0x29, 0xc9, &(0x7f0000004040)=0xfffffff9, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0xc9, &(0x7f0000004040)=0xfffffff9, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000004080), &(0x7f00000040c0)=0x4) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000004080), &(0x7f00000040c0)=0x4) socket$unix(0x1, 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000004100)={0x0, 0x25d5, 0x4}, &(0x7f0000004140)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000004100)={0x0, 0x25d5, 0x4}, &(0x7f0000004140)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000004180)={r11, 0xc08, 0x0, 0x3}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000041c0)) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004240), r6) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000045c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004580)={&(0x7f0000004280)={0x2e4, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x66}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x12000}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x278, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x41}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "35c280ee98f5c16a5a7a33bf49f5701d68e64d70bce03a2e1a7b8d7185f4add81f693bbfa17b33e7dc27e434baff74e427fd9b5f1bb6a5f136c219132fa1b16ea1b48460d38f411db01bccfc4ec5e257b67c476802e28a1c52a116c32362fba4333f6f5531e8abc97be9adeff9278025b81fc6f5ef80f2fe1bcbe6391a7b04421814c9adea44716313b084a85bce8218626e3391e69b8e21c59ba8880c7c7e0d25b0771005e2b23989400036ffd29b6020a498ab34a21a5d3971c12779ee38b9e824f005a159d5138ada0863f39a334a428ae87c2d848f965f532df406ce33"}, @TIPC_NLA_NODE_ID={0x2d, 0x3, "7d21550dad70a111535f87e937d7fa22ba24f7bf014d62527e7f7a93217876723e76c7267392f7b659"}, @TIPC_NLA_NODE_ID={0x72, 0x3, "c40ad847a88b5e36dfc67c59cb90f60462136d354df6732a149f140403763b9bef40152f8694e3916852514015868d1b34bc6f22e50fb08811f688346d81fa1cddcd03fb25c2d57d4aedbb0910bb5cb30883dfe69d935af259f3bfc0e6ec331fb36af6300787e963dcd981651dff"}, @TIPC_NLA_NODE_ID={0x91, 0x3, "35cdc1812e4b629d748f6ff30686b4dec09a87079b91f42bfcf200fa8d2e96257ed8a3b164b56791b2f4eb98df141cb03b816ac36982a8f33adde3a5454ef6f8b3e7336fb9d5196d2e1ce8b1439f9e40dc6a5775ac8122f4e7918729bc212b3d4f066530227718e80f9edeed060dccc8cf75c1b22d05e0dcddfe1da20e21b7b91c0fa84711b276b56f7c176eab"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13ae63462c9efac33ff3d3b46035898f89a58f6bbfb9a837"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x91}, 0x1) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000004600)="de2921acd59be752d358ecbca46250bda863b95e6ea72d0bf6504ee1f122dfb90451f9f0428247a465fa8c97d5cc7ee8aba8435b02dd184be8c6949cc714605a9bd1224a1c808bde989ae87063eaeaa7611301d3d226384d12c499214debbe183181f8cad2f6b402b1f16112b3432e9984621a236dc44a42f0d8f88f72ada1853e9986afe3d0b8475609cfacc085c866018075a95145297ef02bde3622354a6c5eda5f81b8c78151e68a2afe14210838c96bb3f974f7a344c39a5992019172237e17770eb30dabfa9d192f5b") connect$inet(r10, &(0x7f0000004700)={0x2, 0x4e23, @remote}, 0x10) (async) connect$inet(r10, &(0x7f0000004700)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000004740)=0x1a, 0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000004780)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x2c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x90) 4.179469179s ago: executing program 3 (id=1420): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x80) 3.98327617s ago: executing program 3 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r2, 0x0, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = accept$netrom(r3, &(0x7f0000000240)={{0x3, @netrom}, [@bcast, @remote, @netrom, @netrom, @bcast, @rose, @bcast, @rose]}, &(0x7f0000000100)=0xfffffffffffffeff) accept4$netrom(r4, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @netrom, @netrom, @netrom, @remote, @default, @rose, @null]}, &(0x7f00000001c0)=0x48, 0x80800) r5 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x1180, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x5, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x70}}, 0x4000010) 3.224209559s ago: executing program 3 (id=1428): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB, @ANYBLOB="936603e8e0", @ANYBLOB="ea53f6f121860b8a1e74f7d783f238d67215132c1da4ecb7219dfee7392cd8e2fb18fcc5046a567314fc395bf972b883f667edb07d0f8f6a541d85d43dfc1816c2145ad019c7180a2c47328a0776bac02532de1bd94d6d930bff6a509df8b3a0c96cf0e2a0cdf50cf3fae667d5f02c674abb24461eb9e3386cc215"], 0x48) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 2.594680122s ago: executing program 4 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0x164620, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$PROG_LOAD(0x5, 0xfffffffffffffffe, 0xaf) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000440)=0x8000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x7c, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8000000000000001}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x8902, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xa, 0x4}}}}}}, 0x0) 1.959242793s ago: executing program 0 (id=1440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) unshare(0x22020600) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x4e22, 0x8}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r4, 0x0, 0x0, 0x7fffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000090900010073797a310000000009000200"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r6 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f00000019c0)=0x1ff, 0x4) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd70100400000005"], 0x40}}, 0x20) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 1.514426614s ago: executing program 4 (id=1443): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000082}, 0x2004c000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016", @ANYBLOB="4c00000010004b0422000000000000007a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) (async) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000055) 1.30657293s ago: executing program 4 (id=1445): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044800}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{r3, 0x1}, {r3, 0x46c2}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x7, 0x0, 0x53) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000700000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x48) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) 1.17229723s ago: executing program 1 (id=1447): unshare(0x62040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="97", 0x1}], 0x1, 0x0, 0x0, 0x1d0}}], 0x1, 0x20008004) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000005c0)=0xfdfffdfd, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400026b87b0bf027fc81dc04f4492fa4401a1c2a907ffebd754aac729153d4667334fac81b449853f7118ca99587712073073096b9f77014752e653f4842bef34228469495adf48d0fae0f37340f59a727035e99a95c4cf2a9db0cc2456ea3b12eabe193e5be8e519c9b32fa5d57bc67e11ed09e4b88a1f149fab38555ca23966038c8a891255de3864946a5b58e7521b0c1ee347c196a2c7efcd99e67ffdef5be0abbc231abb5d3cbbe343"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) read(r4, &(0x7f0000000140)=""/166, 0xa6) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {0x3}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000380)={0x20000004}) getsockopt$rose(r7, 0x104, 0x210af98238b68dd1, &(0x7f0000000140), &(0x7f0000000180)=0x4) splice(r0, 0x0, r7, 0x0, 0xa, 0x2) r9 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x24060400) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x48, r10}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rss_stat\x00', r11, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b119a00000000008510000002000000850000000800"/48], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="300600003e000100000008c04555ddb6c6998700040000000c00018020001080040007800c000200000000000000000046793f908cd43bf3413951df6a2f9ed09ca772685bd57151240601f15035527cc4718f9bc5409d9a76cf79e3900ff45cac1be4d3a0792d4635f8ff82df91506d78c491b12932ed34bd0ed4057644122dd8d45f9d61c863c1e997a4549ac08e1ad01d6818eb006864ff4835803fab7178900c643f7e"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4) sendmmsg$inet6(r13, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x4880) 1.078004558s ago: executing program 0 (id=1448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00"], 0x23c}}, 0x0) 975.075016ms ago: executing program 0 (id=1450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r3, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r5}, 0x80, 0x0}}, {{&(0x7f0000000100)=@can={0x1d, r5}, 0x80, 0x0}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff62, 0x1, {0xa, 0x40007f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 866.96838ms ago: executing program 2 (id=1451): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x64, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r5 = socket(0x22, 0xa, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000400)=""/99, 0x63}], 0x3, &(0x7f0000000480)=""/190, 0xbe}, 0x1}, {{&(0x7f0000000540)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/191, 0xbf}], 0x1, &(0x7f0000000240)=""/7, 0x7}, 0xdf3}], 0x2, 0x20000062, &(0x7f0000000700)={0x0, 0x989680}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x3, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) 764.066785ms ago: executing program 1 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1200"/28], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 591.341169ms ago: executing program 1 (id=1453): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9febbb0018"], &(0x7f0000001640)=""/197, 0x45, 0xc5, 0x1}, 0x20) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0xfffffffc, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='host1x_channel_submit\x00', r3, 0x0, 0x6}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x970}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 590.794486ms ago: executing program 0 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x5, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x400}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0xfffffff9, @mcast1, 0xd}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000580)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x18, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000006d010000000000009500072824a74dcb416020c419d6a30de8cd9e34a45618ec0000000000084d2ce02467af3ea692d1b78dcaf5138efbe8d3de79787ab6e4750cf02eb50df2c52b6ca416f92a881c8e605b7d0a28c75f3732e866117844a7524501d542ab3a554de46ec5d0bce6a698c1f9baf061390a5abdccd67d835fe95de37e1fa5ce89b7ed7e417e9b353305b84625eccef77ae9a31b9611ff30e1e7cb0a4f1ae1bc26177824e0162a92fedccdde9c936b2b5f32a7d90a63c358a5e7aa1015327239e7d291bf5245c25cd31a782885ace8a2a0507ee53007c5fec01d4c3b6f2bb58a850852b802aa0c3a41e399970de12259419d1f076c59249f602e7c8957473998479a245062a39e1e65bed9966d161fda224bbc518a721f7a97baf26912bc385e04"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = accept$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000700)=@nat={'nat\x00', 0x19, 0x7, 0x8aa, [0x200000000b40, 0x0, 0x0, 0x200000000dfc, 0x2000000010c0], 0x0, &(0x7f00000002c0), &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}, 0x91e) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd56", 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8000095) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x13, 0x0, &(0x7f00000008c0)) unshare(0x42000300) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="3400000011001c0027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 564.967092ms ago: executing program 2 (id=1455): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x443}], 0x1, 0x9) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0xff, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8f}, 0x1c, 0x0}}], 0x1, 0x24004808) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004200)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="c52d8baf02", 0x5}, {&(0x7f0000000080)="59819e738eea5e1a825cd2a7cbd3c0e0987d33385933f2506cfe3637c79644da84f7e2fa4fd5", 0x26}, {&(0x7f00000000c0)="27f21a84a8585f0506cac8e5f0b78611d196e918e7", 0x15}], 0x3, 0x0, 0x0, 0x88042}], 0x1, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x9, 0x0, 0xfffff024}, {0x6, 0x9, 0x0, 0xfffffffa}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) socket$kcm(0x10, 0x2, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="232d0c03000000"], 0x7) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r10, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 515.318632ms ago: executing program 1 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x2c020680) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0xffffc000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x3d, 0x400, 0x70bd29, 0x25dfdbff, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 407.11058ms ago: executing program 0 (id=1457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58cbb8d061726b0000001000000000009c71bc311c55db5f8acdfedecfc288afdfa91d947df74d903dae6220d1c488b71d7e998e1d46a1f72eb7157126495e9dce8940e2ef7f7bceb6e93ebcc742c10971228d6d"], 0x58}}, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) unshare(0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x4, r4, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00800000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x401, @empty}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x6, 0x13}, {0x5, 0xd}}}, 0x24}}, 0x0) unshare(0x20000400) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/145, 0x91}, {0xffffffffffffffff}, {&(0x7f0000000640)=""/235, 0xeb}], 0x6, &(0x7f00000007c0)=""/214, 0xd6}, 0x7}, {{&(0x7f00000008c0)=@hci, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000100)=""/47, 0x2f}, {0x0}], 0x3, &(0x7f0000001b40)=""/73, 0x49}, 0x4ccc0fb}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4, 0x4}], 0x2}, 0xffffff58}], 0x3, 0x0, &(0x7f0000002e80)) 387.297979ms ago: executing program 1 (id=1458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x3ff}}}, &(0x7f0000000040)=0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x35, 0x0, 0x2, 0x90}, {0x6, 0x6, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x5e}]}, 0x10) 380.92103ms ago: executing program 2 (id=1459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="173f6d8b8601000000137aa32e0400185e75b8dd98c0b174e04556811ff430df05b09b364a0199db9c918fb73a0fd7adde6db34beaf57d1faaa13e38596f231bfa7364a763a365ead9c35cb68d476bac7f5d12dface167e409153543f40d0c4d19d4aab86bc136dd94374f1e6f6997a0b38441e5b04645a1a747695646963f19ec4efd16afab46b0b842b8975b522813a503cd4d726e93be553082301fa152f7a351938144465bfb3e64415b5b3ccb98d7dd6fb4a6dbbd0b960d45f072a75c8666609c", 0xc3, 0x804, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @local, 0x400000}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 319.391042ms ago: executing program 4 (id=1460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00"], 0x23c}}, 0x0) 317.348104ms ago: executing program 4 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000380004803400"], 0x8c}}, 0x0) 282.683672ms ago: executing program 2 (id=1462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) unshare(0x56020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40080) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$NL80211_CMD_VENDOR(r3, 0x0, 0x1) 260.136064ms ago: executing program 1 (id=1463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000007000000950000000000000088e1d7ac1329823889d4c97cefa179280848b9b2426c5f7a5a5a11f193fb91ef1c7f0f7f18d2c5b87d08af93f4f1d8992e495e494524f15b99432557fc1c14cb8d1b907f1ccce748c3ec13756302a155659b26b31b3a39910aa6"], &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8}, 0x94) r0 = socket(0x29, 0x5, 0x57b) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000180)) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) 173.309086ms ago: executing program 4 (id=1464): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x4, 0x9}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x4, 0x4000000000000, 0x82}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x1000, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x4000}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) pipe(&(0x7f0000000000)) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000018c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0x1, 0x0, 0x0}, 0x10) sendmmsg$inet(r5, &(0x7f00000031c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fbbb3c995d71235a43222cbf9a7d89204800fd2649c034b752f144b8c86b831b", 0x20}, {&(0x7f00000004c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="affb39da77ac21cf3100a5c5fa551d150f9266a090fde1ab3002111a6d98fa64d3a69081eff3b64a4d13961611097fbfb6110897edafa4b978e2750e84f842bf24593afb81c7ee4bbc3446477a492e2302fa59a78649630d6f40d2c6e184cf7e61de19fb0d3525acd063cc0f75c384f1a428338a0d087cd63690fa8a84bfe55badfcbe6788dbcdf0539417c5a8543aa3cb7ec12a11a9cf7e7c3a630289d2c9e961973f951f207902ffd2422fda1232e83d08a82f860817f3f3ea991b8ad420670cf18b88ada3026989deb8051cd1007e53fa50fdcd", 0xd5}, {&(0x7f0000000300)="eb27622c5dce7b032b327c1991aefc18702c8f1882f4cbb91a6535af40c6cb9b142b7ee8d92122ef353dd5bd465e8213eaab25ce0013fd568b59240be40a4a46f32e8e87b2d25848fb064bea6d", 0x4d}], 0x2, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff00}}, @ip_retopts={{0x10}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0xfc, [@broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast1, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000014c0)="e5127f224587d728c3c20aa40b401df6c8deeb1f793ea10434ef250d2fdeab908315097903b58b95729b1a400035a8efda65cdcf29db5c4de59491d8aeaf6d5c47017ec9e8647cfa5d3cb13d68184869be5fbc53093e8d3b63f3f8b7cc38981af5a1cc0a6aaedeb9ece4ffcba4add461ccf1dcd09e1b51fac24b8863ee85f44d42ebf05bbd3b46dc25af3a6abc0084eeb5d300b448b4fc78b7772850cd5b1ccc73b65a12a4d70b023bb7416267f7650e56f8dc612bbbbd43e6b2bcdced25dfc3677e93734fbdb01da6c0d7dbc4dbe03a29081bd9150230cca0a91bcebb55bb93f23c343cadbbdcceb159b2de7da33858bc8c93763c", 0xf5}, {&(0x7f00000015c0)="9abe08bf8bf58d36d0991fb3fa368eaa206e44762adc0742627e0de4f6eb185918b67955f11fd63307d15eabd68b4639f2e494de851153b9147c58c99e5cf08616398965fc357bf0692494f1d1233404d42ef79f47ef81333dccd1fc2bc67d770892615d0ecbe558df82e3aef8327218496c70cfed5d32239fb58628b8676c4642c7b1ef1e39c59a09202b809c1cdd7c0b6c1a06e029e8f7d615b5d9bd547bdbfb46293c698e43b4c8c806e8f2515c2cfec08f1b44b7f5385647d7c21e966294afdeb9aaeb45b06a2a28f95ab5250cba11fc5a09c715", 0xd6}, {&(0x7f00000016c0)="35fa969f823ac9af54bdef4bf16af9bc1ed3d5f47b38df0c6674b6e2e6d4a46d14", 0x21}, {&(0x7f0000001700)="ea90991410dcc6c828c90659d08aea01950742baa4084eb3ba8314e8a2f168af01817917d374e6c0bfc81e81be4ef24ed4c3631080df41b44d27b441cd2ba215dc1237cab8c239c5e54c712ab50940c69a7f026e07937e4d6c0abef308103819dbb3a5669f28d19570e46745bcee168403", 0x71}, {&(0x7f0000001780)="12366d9d2bc1ad36cba15dec9a36a7086e799fad99edb639a82f89de44fcdee15c08b224c728a0ffd7f0545bf86ac2109d44c9b54d8530f855de", 0x3a}, {&(0x7f00000017c0)="4fd818ac849155b1f80113851b1027808dc020f6775b54ddd2ebd923524270fd504e79aea95e58c0a77c5c06f997760620ce069960498fbb62", 0x39}, {&(0x7f0000001800)="91b7d2e65f6079e9be79f0d0df20ccbdd31c", 0x12}], 0x7, &(0x7f0000001a80)=[@ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x4, "edcb"}, {0x5, 0x4, "20fe"}, {0x5, 0x11, "f57680f674937dea937c1641265f1f"}, {0x6, 0x10, "f9f2279d9864f57fa1630c2c4f9a"}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb, 0x0, 0x7, [0x2, 0x114]}, @timestamp={0x44, 0xc, 0x91, 0x0, 0x1, [0x7, 0x93]}, @ssrr={0x89, 0x1f, 0x54, [@private=0xa010101, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @local]}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @lsrr={0x83, 0x1b, 0xf3, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @broadcast, @broadcast]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101}}}], 0x188}}, {{&(0x7f0000001c40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001c80)="8ef8a8ab8fbe4b2a875b26da082b347cd90036972d04e2cd46fba63de82742a5d7ccf3102de274f943ebab8b4a5369581e30eaf467418f06eefb8080844a990f046fc698b1b046e59b23c0a2b83a71cfca0b4d6673", 0x55}, {&(0x7f0000001d00)="7ed21db6e37fc3f53033b26f15545593f8b0badc1446b1018ca0c604cc0b3d4eecb41935a13fc03a0e56e08407928ba1cb2c185b8c56c153770b68e3d29e983b6f5a280c9ad7708b8d56cd1a15a083967efec0fc1b788fb3122207703be381f636d88092b1e1ca5dec15cbb6bd56e03b8b24ff4a0ef46c866fafe3851a20cee1736a5bf39ed2ca741b1de867d5199e3f5281a2cc3d92a5e17451a870cb8b9ecff81bbad491b224c462465182ee505154738b5c069a060ca28d10baa574e1c8afe538b2915412be91b7e3d7ba8e60182567ded1d2cead8dfb2cd83d946f79ee1ed6867dc2b6e81a007678e1887cefd643597127bca1248b0c88b7a9a5459dff52325e7f6844df6279034eb3363919aa84e39bc4ce9c357abdfd683d42a19f99f0f00b4d64e714a53a6f24010ffc5cf3190067a004852188cd36adf600131a475001f4fb94536b50ed7f11c27ade452b7769ce08f18d7d09f1f5a2a4fa6bae1b47840abc946a5fd8f85917b9e1f8e4105c2177023f5c775ca353dda0480038c2ec2cadc2a6d29fca7efd2be4e9ba5f0f87a773d8e4c993ef3f2844bd7f120da5f23bbd20841b14a689dfe6cf5fac9dc30535c955d5807bc296b6c0f1ec57bb33ef80a9ef3a2073d9083f2dd73a8f54b7d603e1241d333cb97cb09f247ae0e380c69ea87f1679fe218ba16a11576558a23ec592ac6ce193aaa9c133d2691658d164616f04f13c8b791a043062386390c787ad59388793795b3c7a39e6e03a1ce6f08089d8acf5dfdb5189f1786a241598dcdb9c9698b7506cc46b591969518b62e11481e7244e1f318c3cfc45a7b159ffe374c297b4cec43a1bf8cd77355ef542a94a8684eb7151723a25a811ba4fc14214f83fe6d0db1b606499201b86ed3533fd113baca47f1db16afa3461a8da8cda8e1944084efc94f2418a650eb687539b7ee1cf8072bc3a1e7d96f55ed32096a324f0fbba3bfdaac7b8abe7570a432d93faddb55b07b64ad8afab8277af4237f7be147ff4fd2e8cfa48b823b3f15a5e362a415fd4c3f0fdb0d4999906fa937e22d3484174bda91edf95dd4adadce203289b5a7f663e1e05580df012b5c0ba67ac45f0be769ff8482e072abfd6d7192b40adc060ea8d99510a132052f3744053414dcf515ca65a83da0829c785e8e412336e63595e4c80d251e23d4ce1955827cfbc523c3d8948da2cb943e6a18b45b0ab3242f32adc93313d3d6aab03b04e097a26440e552121eb0e70a263eab259e8b2331f45a4cee58055cf899a2f17e3e04f3365b13f32c607eae718f03574c222dcdb8314d85bb94d8172524ce0ecfbb2cb044ce9c00ef0c52b141f3bf0ca823bdd282ead8f249bd5a320d065c94fef538ab471e0f4b87e13ee2c8c4cca78e70424236bd626c79df90bf7739c0c6d5169e6dd9e1a439d56df3dd8195619190839705d9168c68fd150a7bf7cadaa8679a6085d64b054e6b9e19b0ecde1ff0d7ced572cefdff99613d1516d3401fa652bd102438ee47d1dc952cdbbb244ccd358c11ae0f54e68d6a57b0f7c723b1eeb418651f8010fc540e02b7c12160fb6f7ed2a8c312c562e7915c2f431eaa51e051c0c38598b7a7abe55ef6db877508b3ecd35f9fab01dba4b00fc3d98611bce0fc7f2c48ecfb6dd5c1e5145c129a30380a345c264b44dd68e52f79327e45e98e6cec206509e1ac8a720f4697a3fca823ee13e5b158ad1d5325f620050bc31f53f8cc44fd568157e6a3ffc3a3c40ebecb68522519bf01d8573d5307de960eef5a505c2923d687425225b8f3a955d825394c0ece8c8ac1e8dffd8745dd3cd782939afac5d61594ba4c43a980953a7d3b7edb40ca0e612c0b70b31929047904590414473ac6cace3dd27230d190990e7f354c461fc44a262a76e1a7a276754b93f60527b9463226a0b12f48510ecc74d1701ee6922ab78674ee44538386c25ccd0705f9a707defa3f626c143ca1ff1c07d38305cb9f8b97608141060028d0a6ac5cc910e83c84b0dc414cedb046760e703b221fb6128e72e035e2e6f34820e0a385ca8720214a0f2d61f697eb1d60d85e9dd9779f54844c9f65cd95d31d325437bd0485b65a024e0f2f61d6ed2a3b3a7e34f273ef76f1b0ce363eb95cbc3d66f02cf97d455b64d30504b7ac01896d99563b8c7e19d155241d0de70dd028de23d6e4f478bf035b26d2c7dc503897c0fbe42ac748dd58b0ee8703f99ddb8d9b87022a7403ec111c70778351e1fbe1d945bbe784669961842d2aa7a212e058da69d5544beab3f9a5ee500fd4d585241bd6ed24799c3d925cbe8fadc629b448d9971d391a7f6c6865bcc4d08c5e146064e24d94c5eb7c75f5ce93a09f712b0fe20eb26a80a33a048dc3794d267de1bb4d2d73e1e8dacef7817b3e3698fdd5777a27ed2453972f46238ad6ee38aaa824b92c402268735a32e6bcf6bebe15daf9c7c2c8a06eacfd281c3bf884b4b4615a824b0814806415515bdde2bf2f35a0634be81b6ab41eccdc725f86801b53057f567daf0a61559380a0323bea2430ee8fcf4717c317ace323c2f1ae8f0d2d9584258647c508da3a17b06889f8be0c65445ad04fdce70c4633da18d53b03bd419f9c4a427a8c992d9b12f4c7b4e669c081f0c8900c33ad8a7fe8d67f5060a5bc46310f9311630a673ebb8ece5d872ab2b20b9e7a782f3f72432716fac34746beeec60515e889e47ddd94612d87e9a5628d74cdf661ebf0a23734339115d17111c41e6133feb0a067742aa84a5af4c8e45706e1137909a220f11e322c5d7eea0ca1ec4ba80c0ae5b1e6cc98691b41bc317a717623562c1f7b293d161f52d2fab7ca05df965bb63a3c78cf7cbd398ab4ed42013ea7d1357890aa12382f3f9cef7c2671bc234d8a6a215b5f628579771eab365ff9f379818176ed9fcda422720f5e5f582de4f14ab701677062676c24e04ad7d85d335c4acf243c55bf97ebdf9b36908ed9154250d68337e4a84f03f450798f069c773be7c1f4927e27f97f60e7e32e2b56f41c7a5d8eef93f5d4666e40de9a6a07f4879a221dc2659e469abdcfb273adefb931c0fc883331be1af46122d44a75c83f89fc65f58a4e0bf48f79e5973bd320a57ac8856236646edb4328c1c9fc3df3b58fd964aa0d628ab81f3079ed003de4159d1537347dbf9ddff2873332e648f984b27b775e17938178e579562c965cbf1af941988560f7c0b6bec40e0aa9d8b84a26fef03eca4c38b9e3a77c703a7f752090bc04602215506eb83d6256e64e5ed076d4b9b044d62650be142f335452a02c6becdbc45daa868c62485d09261220de439e37df1da368e72c10864add22e071c3b06020801a486ec711800e7288aa33d9512db305877b286a66f9dfcffcb596d8918b42a4d4ba022db04f67a275432a1bc96d8151e13284e19403c4f410b1dcfd61c439ce3aef97049713041d53fdcca04e0720624c06e91eb1b2c26094c842bc231a01187f15b0dae93a779804632ce92852f55b0cd3cf4be8e517fafbd115288a40a3559c20e84f49e32bf89ea85c34cc878a5b94ba6127493621f8fb6ee20e96e944e288c109629adbe391644310f6f9e3dfc99498d6982fe5c2190b1cb6fad7666469728693aeac9bc3771b82fe2a32dcf57e5441bdeda24a144321f65aeb6c86907ced3f41927a4599a4ca7606487b58050173c9d95f5d00270ef5b88c948ddab09e8a609271d10dd84c1bdab1a73c410a32b83987fba69da6703ebbe7ce43827902681ce4af7902302fc9f02f186a0878e27278dc842d0e9ecfd05a3464c2dad4f1b448aea9c1dedb9d41540e17cc96009f8dc2db66afcdb392e679302d86d14f150a8b0add7f3b31c8fd1c042a8e27ac7f30788511c2dc6892fef88fa736b7328940d14a2d8cc77f7202e058af4aa81308f3e2bb960efc66d9e857ea2d2154babc19afaed24a1d8097c12af8de649c7392fe8d4073482217b6b219cde98c5c2a34287fdbff59e9d2000cc09c806f7173d6e42a95c418999c015b21100361775aa51c34343510d5205d4cb6b8d652ba9e33fe5614baf896ebf663d57f47e100b8fcc22a78ad5d57a9ffc74fdf7b84bc94fcd7444449ee413847c13c6b6dbbac632f9326f1c56e0d83f4df1f32bc77f3c74f28c8db08cebc5682dff65c0bf42e662368feeb24e12624b0f0aeadd29c91e8786a9b64cf301cbc0e8dc327be77ed161ad7ec89fce6be404c3d2a42914b49d6d68032e571d74f0b2e8e93e495b5d0cc7129429645613a8eede619045904c80923cbd5c2de2151bb9033dfedca6374664df88ae752b91309cad7a4f8383451c706b2f2ce60851c8e255003e71bf865b4e2a8bf6839bdcfca1c19eef2f63c71a72717e7bbc4d461e4cdd111e926d112d70ff7dc79efa744822aa9b755ec9aebc2ef6f7d6b7d7b32ce1bbc2eb54fbfa7ad26f507b8bf96dc28504984dc693bc0ca5d85a8c2a8832f70b51c7e4aa6e1f91607736af2e0d5b1b843dabf66ae4aa11ac7614104940f8240b5eb39fa9f330860a48e6a5b455e68512108d63ed763f93fd9fd425e382508352a697d432bad5d3072d8fd0d45cd1868c7d93f7a640f822fde546fe8208a8d2e7ef824e88613c44c4ef374d26e74077ed51eadac5e9e3eb33efa05d6c343f00a5f482a7dd723d9b9bd7c7a8f94bd0cff0cf431f7aa506403f400c3e197206ca5f03417c28f097366c191cdd03d9bb6d58b31643e653394e4f55b3dd12b062662b914a99629ad7f0af8085215488c53e3f7be39b123cee42bcae2b36278dc1e2e6a8293d4874155a7ec9f0e4fb59b0bda9f46b50d29ec234a9ba4458b00d1be82ea6a176e58b55604f2cd61a81c82652f8d85a8feaa2855c00a32193f0b8a71b31364fab2c8159556270b958615693fdf9d6c94005d59d14c6f0aa32543ec4a6ec4f6781e2fd82cf6020465efab9fcf07fc6a48f8c7e8424a17b71d46fb96f5602a0444ad260072a1b2f54625562e0e720d8e3ad15089eb037507ce8da11aca8a4ecb7ab9a08cf4521c3dd52ab7f968b0fb0de5fd1a790c521458e139cfa1790b7cc01bf06f87768eebe08ab0d84570b8e31a86a91dc8e059f704873fa78c96e5541f25f9e44600160e37f1733265950448c228f2aae1a692d6ddcb30369a47e427c79bf424a835221445da062b9be5d8f61f8adc18d9085c5adf5d7ed4c229313a933dc0f59fa115f34b1c7f48d09bcaacd95d0daada6c7d1cea89368c8e7723009f6ecfdfbcff55b7d6abf8d6501cac6ccacae75db3e874b5a467130158375b9bcc11e3c004f7083166b352bc20149aa859d2d149e0927a7baac71e72db0084146aa4ffdac10e59cd72aa0e2cad5f393ad96af2e7c71b4a030409da34d87eb45d4778ca1468ea9f91ef6313dc197beb8314fa422d99bcde4f6e8c1d4fc02e831a7841119a67a97f2b116636f6d80a40e4bc3a700ff1b754d35bc8bb4b5573efa107f31cccd2152f4d6bd6e5b3befb6c0401cb848822f93f10141eb4c7326ff44c633ff02674ab641f415d5fed339944e859bf365498ac2932e83771369831d61d0de209d59c4fd9ee28af9b0a8b97a4729ec1a3049a749671212c37856f3344ef466f86ab19d554757effc1b2e0726ed13a50929ec3d8ba487b4924d4f47e872ef0af5228a35bc513c3f41cae1d22c69240c94bcff34f82bc76f1c4346aa30ef4bfc83b969fe58537ed52e390d80a8e09cd695f182081088bd6a1b5989e5062ae259c23088d2d4245a89a2f4364b80c20f147d613f5a5499a3504b6f0167840e20b232a2a4a8fbed2b", 0x1000}, {&(0x7f0000002d00)="d1ec82afd636118f9ecb1c136486851cdfc3824452969507072936a5a29712ed959d7716debe94396b7e58a271bf988007e493a378ecb6c018c75156cf53ec6ae3fe36af232605a6922d6cfbcf07b1d01563f0604f45a2ecdcb179809cda90fb6a74124e093b6ffd2c5e636de65685717a170fbc3a888b5e904b", 0x7a}, {&(0x7f0000002d80)="2a45ead2a738c1708490a7851bcbc3240af266bfac49a367d3e853ac3f5fd00227174b0bacd6496a9dcb83b310fb6a46132c8ded74e6d69d011cedb611932ddc8f63a94c0354fd841cd6306030d027fb113ef72180b0b2d689d490c078648ef27df8805a54abd3d791ce9e6e0f1e2e6bcbb9b778ab053d842d517db1afdd6b04d87b0d704b1209ab4ec7d1abcb50b69a9c3c102bd92ec8592533bd9f8367f43e04684ff2d35630da01c41279bcca67e53f3a607581e34b8e6a60dbc814777699a2fc5917c69cc4f21c0e905ce5ac473e9027e86ccc30dd343440ab212a1f1e1133771e51b971", 0xe6}, {&(0x7f0000002e80)="45a10752ffae3d278e4653a86f22cd3a083c1e7e533a2b55b1c06031d750d8f2d10d8d243c096ed176b910d1ebfff56f86f8f13b5cbfd8fa09c69f54facf3f5a3831de6fd28d54793b80ce280da7278b3b2547b0afdef43fc4d54767bb0fc3b83265940079a63fa008b99c815149647d8688ceb6782816f82d6cff486dc458e0b2c0ce4c1ceb4384ca47c842c69bdeccb359d32b615a6eac969a8aa5152a4918ea51b1a9dba5db201bc2b7a13a5e052f0830cf041fcf8cc8d64991d3b9ca9fee17b5c6b00b255f595df234f9fd39899d324ce54ee024f0873471acf543f2600ccc9f351dad1ac6e411fec09cd5bd7725bfb23958d3d8", 0xf6}, {&(0x7f0000002f80)="f9d5ee7b061345c4de76", 0xa}, {&(0x7f0000002fc0)="a4964f57e2d3fec4d2bafe4ccb3ef7a1464f1524e4cabf4de1627473ba7721c4f9c3d5b9a5f4d44f3c8eb3e9d5de7a0b5d5a3c5ab746800f25fa1519255e362cc78aca1f2a90b54a14e24715e358ef6f67e475a5f5e17616e297886783ab1d96347ab13eec5724f6984f16c2b09d2d5fd1848ada60d542c2cdf5240ba399799c32095e", 0x83}], 0x7, &(0x7f0000003100)=ANY=[@ANYBLOB="94000000000000000000000007000000443ce703ac1414aa00000060ac1e010100000006ac14140e7fffffffffffffff000000036401010115ebc932ac1414bb8323c8e0000001ac1e0101ac14143aac1414bbffffffff0a010100ffffffffac1e000101441c7e43ac1414aa000007ffac1414bb000015c1ac141425000000068307d8ffffffff00"/152], 0x98}}], 0x4, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f00000032c0)={0x7, 'netdevsim0\x00', {0x3}, 0x8000}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000f2ffffffffff040000000c000440000000000000000338000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000000c0004800800014000000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x1000000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x207) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) 167.536349ms ago: executing program 3 (id=1465): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x6) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000880), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000000000000000000007000000861000000003010a"], 0x28}}], 0x1, 0x24000004) r2 = accept(r0, 0x0, 0x0) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="0800000000000000000000be0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000680)="a742f6b907f75dba1e72a7b8f7568bb1d909e1edf34e1f7e8ba4fc6eed09ddccd119e413398c3d48619c6f928217c7873e6853f336d7e899de400f808393c2ddb2300708686777a35583b04ad3295b1948cc3f6f9a1e4aa32ef3c82f8f9aed12da922eb1c607ae608e8e66fd79476632f56a8e2e2c238b6549538d84f1f069c78295ede9fcc5331c7572cb2c00"/151, &(0x7f00000002c0)=@tcp6=r2}, 0x20) (async) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)=@newqdisc={0x2c, 0x24, 0x400, 0x70b927, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0x1, 0xb}, {0xd, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) (rerun: 64) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x3, 0x2}, 0xe) listen(r6, 0xa1) (async) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) 115.152104ms ago: executing program 2 (id=1466): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xc040ff0b, 0x0) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000000a00)={0x0, "b55882235ad0ced8773830140ee58044"}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$PPPIOCSMRU(r11, 0x40047452, &(0x7f0000000140)=0xfffffffe) 65.723583ms ago: executing program 0 (id=1467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x44, r3, 0x100, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x44}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x25a5, 0x5, {{0x1b, 0x4, 0x3, 0xd, 0x6c, 0x67, 0x20, 0x6, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, {[@ssrr={0x89, 0x1f, 0xf7, [@empty, @empty, @multicast2, @multicast1, @private=0xa010101, @broadcast, @rand_addr=0x64010102]}, @end, @timestamp_addr={0x44, 0x34, 0x87, 0x1, 0x8, [{@loopback, 0xffff8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@remote, 0xfffffffc}, {@broadcast, 0xaac}, {@multicast1, 0x1}, {@private=0xa010101, 0x1}]}, @end]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x4e22, 0x6bd, 0x4e24, 0x12, 0x2, 0xa0, 0xa0, 0x3a, r8, r9}, {0x1, 0x8, 0x0, 0xfffffffffffffff8, 0x27, 0x7, 0x6, 0xb}, {0xb, 0x8, 0x6, 0xfffffffffffffffe}, 0x401, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xba9e}}, 0xe8) (async) writev(r5, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) (async) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000080)={'wg1\x00', {0x2, 0x0, @multicast1}}) (async, rerun: 64) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000040)={0x1, 0xe}) (rerun: 64) 31.477652ms ago: executing program 3 (id=1468): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006300)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@nested={0x4, 0x115}]}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 0s ago: executing program 2 (id=1469): r0 = socket(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000003c0)=""/141, &(0x7f00000000c0)=0x8d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0xe, 0x0, &(0x7f0000000040)="c674ed63e46033c470d8d400eb00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, 0x0}], 0x1, 0x4000) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x400c000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100004008000300", @ANYRES32=r8, @ANYBLOB="90017d808000010083687c61574801c40b5946f4bfd44c4baa825efadf0d9adaafd2e9a6b07bb326cc2cb32b32b493a4652239d730fea2aef2b68c29eef9828c3f30c59fa6a8fb77ae1f59d12b0383644d06c716bb4f8fc375d7a9485d2937bdcb6f774e1b3084"], 0x1ac}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00022dbd70000000010007000000080001000e00000008000300", @ANYRES32=r10, @ANYBLOB="1c00178004000100040005000405d300040003100400010004000500"], 0x40}, 0x1, 0x0, 0x0, 0x400a000}, 0x4000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000103415ecae080001000000000000004b940000000a20000000080a050000a599ee256451b39ade90d1ac4bb8d500000000000000020000000900017a01000000000000000000000000e7000000"], 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000010008188040f80ec51acbc0413a1810039000000000bf0ffff2101000e000a000f000000018002002d1f", 0x2e}], 0x1}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 62.442948][ T5844] cgroup: Unknown subsys name 'net' [ 62.567098][ T5844] cgroup: Unknown subsys name 'cpuset' [ 62.574696][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.926726][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.534729][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.541961][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.552622][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.557981][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.560154][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.573855][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.577311][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.581264][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.595454][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.603696][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.611077][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.612384][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.619688][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.626236][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.632878][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.640416][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.647735][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.654021][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.668342][ T5182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.669468][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.680599][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.691727][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.695479][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.723399][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.732874][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.020678][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 68.130623][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 68.141457][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 68.201775][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.209011][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.216554][ T5855] bridge_slave_0: entered allmulticast mode [ 68.223183][ T5855] bridge_slave_0: entered promiscuous mode [ 68.233312][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.241243][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.248619][ T5855] bridge_slave_1: entered allmulticast mode [ 68.255518][ T5855] bridge_slave_1: entered promiscuous mode [ 68.264758][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 68.285156][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 68.339645][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.383311][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.396346][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.403486][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.411598][ T5869] bridge_slave_0: entered allmulticast mode [ 68.419841][ T5869] bridge_slave_0: entered promiscuous mode [ 68.429771][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.437139][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.445197][ T5854] bridge_slave_0: entered allmulticast mode [ 68.451822][ T5854] bridge_slave_0: entered promiscuous mode [ 68.468321][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.476269][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.483486][ T5869] bridge_slave_1: entered allmulticast mode [ 68.490197][ T5869] bridge_slave_1: entered promiscuous mode [ 68.499770][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.506937][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.514551][ T5854] bridge_slave_1: entered allmulticast mode [ 68.521075][ T5854] bridge_slave_1: entered promiscuous mode [ 68.552171][ T5855] team0: Port device team_slave_0 added [ 68.585270][ T5855] team0: Port device team_slave_1 added [ 68.599677][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.616970][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.632516][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.640170][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.648028][ T5864] bridge_slave_0: entered allmulticast mode [ 68.655468][ T5864] bridge_slave_0: entered promiscuous mode [ 68.663497][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.673140][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.680364][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.687828][ T5856] bridge_slave_0: entered allmulticast mode [ 68.694889][ T5856] bridge_slave_0: entered promiscuous mode [ 68.703069][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.718822][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.726283][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.733557][ T5864] bridge_slave_1: entered allmulticast mode [ 68.740337][ T5864] bridge_slave_1: entered promiscuous mode [ 68.752964][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.760671][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.767977][ T5856] bridge_slave_1: entered allmulticast mode [ 68.774604][ T5856] bridge_slave_1: entered promiscuous mode [ 68.788281][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.795316][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.821612][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.833590][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.840884][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.867046][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.921301][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.931888][ T5869] team0: Port device team_slave_0 added [ 68.939487][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.951062][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.961387][ T5854] team0: Port device team_slave_0 added [ 68.973059][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.983154][ T5869] team0: Port device team_slave_1 added [ 68.996689][ T5854] team0: Port device team_slave_1 added [ 69.010566][ T5856] team0: Port device team_slave_0 added [ 69.042814][ T5856] team0: Port device team_slave_1 added [ 69.061998][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.069548][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.095654][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.108175][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.115294][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.141630][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.172192][ T5864] team0: Port device team_slave_0 added [ 69.183016][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.190087][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.216468][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.237992][ T5855] hsr_slave_0: entered promiscuous mode [ 69.244262][ T5855] hsr_slave_1: entered promiscuous mode [ 69.251470][ T5864] team0: Port device team_slave_1 added [ 69.265822][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.272788][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.299016][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.310471][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.317466][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.343487][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.355597][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.362560][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.389444][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.444356][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.451342][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.477536][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.490063][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.497184][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.523962][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.549533][ T5869] hsr_slave_0: entered promiscuous mode [ 69.555655][ T5869] hsr_slave_1: entered promiscuous mode [ 69.561630][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 69.567516][ T5869] Cannot create hsr debugfs directory [ 69.608652][ T5856] hsr_slave_0: entered promiscuous mode [ 69.614903][ T5856] hsr_slave_1: entered promiscuous mode [ 69.621016][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 69.627259][ T5856] Cannot create hsr debugfs directory [ 69.660019][ T5854] hsr_slave_0: entered promiscuous mode [ 69.666261][ T5854] hsr_slave_1: entered promiscuous mode [ 69.672323][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 69.678142][ T5854] Cannot create hsr debugfs directory [ 69.684058][ T5865] Bluetooth: hci1: command tx timeout [ 69.718275][ T5864] hsr_slave_0: entered promiscuous mode [ 69.724860][ T5864] hsr_slave_1: entered promiscuous mode [ 69.730782][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 69.736895][ T5864] Cannot create hsr debugfs directory [ 69.763948][ T5865] Bluetooth: hci4: command tx timeout [ 69.764091][ T5860] Bluetooth: hci2: command tx timeout [ 69.769398][ T5182] Bluetooth: hci3: command tx timeout [ 69.774870][ T51] Bluetooth: hci0: command tx timeout [ 69.948141][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.970976][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.980081][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.009367][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.065832][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.075562][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.092564][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.106855][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.141642][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.152577][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.171936][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.187626][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.228845][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.240657][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.251512][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.261531][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.305671][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.340254][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.352703][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.367022][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.374237][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.387292][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.396527][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.407446][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.441171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.448415][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.501841][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.533727][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.567937][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.592426][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.609387][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.621746][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.628926][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.649527][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.656753][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.677606][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.706272][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.713520][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.751847][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.759008][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.768118][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.775361][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.787708][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.794893][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.838252][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.857709][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.923523][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.961847][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.969037][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.993857][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.001455][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.041885][ T5855] veth0_vlan: entered promiscuous mode [ 71.063031][ T5855] veth1_vlan: entered promiscuous mode [ 71.231528][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.248578][ T5855] veth0_macvtap: entered promiscuous mode [ 71.268415][ T5855] veth1_macvtap: entered promiscuous mode [ 71.293448][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.311023][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.362831][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.399179][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.423640][ T3478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.435118][ T3478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.447399][ T5856] veth0_vlan: entered promiscuous mode [ 71.480743][ T3478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.494791][ T3478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.516463][ T5856] veth1_vlan: entered promiscuous mode [ 71.525211][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.535468][ T5864] veth0_vlan: entered promiscuous mode [ 71.576812][ T5864] veth1_vlan: entered promiscuous mode [ 71.607400][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.613742][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637528][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.651038][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.692367][ T5856] veth0_macvtap: entered promiscuous mode [ 71.698899][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.700793][ T5864] veth0_macvtap: entered promiscuous mode [ 71.709103][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.726612][ T5856] veth1_macvtap: entered promiscuous mode [ 71.746154][ T5864] veth1_macvtap: entered promiscuous mode [ 71.756241][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.764524][ T5854] veth0_vlan: entered promiscuous mode [ 71.778496][ T51] Bluetooth: hci1: command tx timeout [ 71.794560][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.807831][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.837417][ T5869] veth0_vlan: entered promiscuous mode [ 71.846083][ T51] Bluetooth: hci3: command tx timeout [ 71.850673][ T5854] veth1_vlan: entered promiscuous mode [ 71.851513][ T51] Bluetooth: hci4: command tx timeout [ 71.859184][ T5860] Bluetooth: hci0: command tx timeout [ 71.862601][ T51] Bluetooth: hci2: command tx timeout [ 71.880410][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.896650][ T3478] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.905976][ T3478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.921826][ T5869] veth1_vlan: entered promiscuous mode [ 71.934336][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.945620][ T3478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.954727][ T3478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.982027][ T3478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.992029][ T3478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.012773][ T3478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.031949][ T3478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.079552][ T5869] veth0_macvtap: entered promiscuous mode [ 72.102889][ T5869] veth1_macvtap: entered promiscuous mode [ 72.122381][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.125919][ T5854] veth0_macvtap: entered promiscuous mode [ 72.131947][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.197506][ T5854] veth1_macvtap: entered promiscuous mode [ 72.206626][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.214200][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.231095][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.242013][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.266911][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.299982][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.332888][ T3597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.347572][ T3597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.360399][ T3597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.381736][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.391473][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.403519][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.415964][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.418771][ T3597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.434344][ T3597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.443416][ T3597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.452854][ T3597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.463399][ T5980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7'. [ 72.488247][ T3597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546504][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.566411][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.643187][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.673019][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.751699][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.776700][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.800146][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.832537][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.946058][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 73.298227][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.396790][ T6012] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 73.410550][ T6012] syzkaller1: entered promiscuous mode [ 73.416763][ T6012] syzkaller1: entered allmulticast mode [ 73.652243][ T6017] geneve2: entered promiscuous mode [ 73.685649][ T67] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.708704][ T67] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.747599][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 73.844146][ T51] Bluetooth: hci1: command tx timeout [ 73.869272][ T6031] openvswitch: netlink: IP tunnel dst address not specified [ 73.889213][ T67] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.900958][ T67] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.934149][ T51] Bluetooth: hci2: command tx timeout [ 73.934163][ T5182] Bluetooth: hci0: command tx timeout [ 73.934194][ T5182] Bluetooth: hci4: command tx timeout [ 73.939595][ T51] Bluetooth: hci3: command tx timeout [ 74.100187][ T6035] tipc: Started in network mode [ 74.111652][ T6035] tipc: Node identity f2e8ae80e4de, cluster identity 4711 [ 74.129819][ T6035] tipc: Enabled bearer , priority 0 [ 74.207742][ T6042] syzkaller0: entered promiscuous mode [ 74.215037][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'. [ 74.232333][ T6042] syzkaller0: entered allmulticast mode [ 74.257869][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'. [ 74.267345][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'. [ 74.337704][ T6035] tipc: Resetting bearer [ 74.432277][ T6034] tipc: Resetting bearer [ 74.453712][ T6034] tipc: Disabling bearer [ 74.492123][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 74.656156][ T6062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.851714][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 75.330610][ T6077] geneve2: entered promiscuous mode [ 75.338619][ T6077] geneve2: entered allmulticast mode [ 75.470265][ T6097] Zero length message leads to an empty skb [ 75.488673][ T6097] netlink: 80 bytes leftover after parsing attributes in process `syz.4.29'. [ 75.830981][ T6121] trusted_key: syz.2.36 sent an empty control message without MSG_MORE. [ 75.856117][ T6124] netlink: 'syz.4.33': attribute type 15 has an invalid length. [ 75.871306][ T6123] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 75.925092][ T51] Bluetooth: hci1: command tx timeout [ 75.926082][ T6123] team0: Device veth0_macvtap failed to register rx_handler [ 76.011649][ T51] Bluetooth: hci4: command tx timeout [ 76.011806][ T5865] Bluetooth: hci2: command tx timeout [ 76.017230][ T51] Bluetooth: hci0: command tx timeout [ 76.031628][ T5182] Bluetooth: hci3: command tx timeout [ 76.152374][ T6138] netlink: 'syz.1.40': attribute type 17 has an invalid length. [ 76.187490][ T6129] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 76.264874][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.272479][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.691997][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.704769][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.903657][ T6141] vlan2: entered allmulticast mode [ 76.909210][ T6141] dummy0: entered allmulticast mode [ 76.932096][ T6129] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.043274][ T6179] netlink: 'syz.1.45': attribute type 18 has an invalid length. [ 77.138472][ T6166] syzkaller0: entered promiscuous mode [ 77.179307][ T6190] netlink: 'syz.3.47': attribute type 11 has an invalid length. [ 77.187866][ T6166] syzkaller0: entered allmulticast mode [ 77.239534][ T6193] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 77.296316][ T6193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.372274][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.391858][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.408076][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.427190][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.991071][ T6236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.085794][ T5865] Bluetooth: hci2: command tx timeout [ 78.347887][ T6260] __nla_validate_parse: 7 callbacks suppressed [ 78.347907][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 78.376460][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 78.632528][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 78.642992][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 78.721001][ T6256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.880213][ T6256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.101925][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 79.116729][ T6256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.124766][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.178441][ T6309] netlink: 'syz.1.68': attribute type 2 has an invalid length. [ 79.198753][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 79.264210][ T6310] vlan2: entered promiscuous mode [ 79.285566][ T6310] bridge0: entered promiscuous mode [ 79.332703][ T6256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.588818][ T6321] netlink: 264 bytes leftover after parsing attributes in process `syz.2.72'. [ 79.620188][ T1340] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.647426][ T6321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.72'. [ 79.673899][ T1340] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.700192][ T1340] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.716728][ T6329] netlink: 'syz.0.74': attribute type 11 has an invalid length. [ 79.729846][ T1340] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.168630][ T6362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.334596][ T6371] sock: sock_timestamping_bind_phc: sock not bind to device [ 80.390445][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.398147][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.514712][ T6377] netlink: 14 bytes leftover after parsing attributes in process `syz.1.86'. [ 80.586072][ T6377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.632016][ T6377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.687872][ T6377] bond0 (unregistering): Released all slaves [ 80.859247][ T6387] !: renamed from dummy0 (while UP) [ 81.088195][ T6396] netlink: 'syz.1.89': attribute type 2 has an invalid length. [ 81.548114][ T6416] netlink: 'syz.3.90': attribute type 9 has an invalid length. [ 81.566414][ T6416] netlink: 'syz.3.90': attribute type 6 has an invalid length. [ 82.656766][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.103'. [ 82.759986][ T6478] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.082004][ T6492] ip6gre1: entered allmulticast mode [ 83.138569][ T6494] syzkaller0: entered promiscuous mode [ 83.144295][ T6494] syzkaller0: entered allmulticast mode [ 83.151656][ T6494] tipc: Started in network mode [ 83.156745][ T6494] tipc: Node identity 9aab97a8adda, cluster identity 4711 [ 83.174623][ T6494] tipc: Enabled bearer , priority 0 [ 83.184751][ T6494] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 83.232252][ T6494] tipc: Resetting bearer [ 83.272042][ T6493] tipc: Resetting bearer [ 83.330367][ T6493] tipc: Disabling bearer [ 83.407003][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 83.434077][ T30] audit: type=1800 audit(1756364239.918:2): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.109" name="cgroup.controllers" dev="tmpfs" ino=115 res=0 errno=0 [ 83.476228][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 83.516394][ T6498] hsr0: entered promiscuous mode [ 83.536836][ T6498] macsec1: entered promiscuous mode [ 83.548336][ T6498] macsec1: entered allmulticast mode [ 83.563646][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 83.574176][ T6498] hsr0: entered allmulticast mode [ 83.579382][ T6498] hsr_slave_0: entered allmulticast mode [ 83.587228][ T6498] hsr_slave_1: entered allmulticast mode [ 83.595626][ T6498] hsr0: left allmulticast mode [ 83.600510][ T6498] hsr_slave_0: left allmulticast mode [ 83.608051][ T6498] hsr_slave_1: left allmulticast mode [ 83.648695][ T6503] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 83.992608][ T6529] FAULT_INJECTION: forcing a failure. [ 83.992608][ T6529] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.027832][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.4.118 Not tainted syzkaller #0 PREEMPT(full) [ 84.027861][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.027872][ T6529] Call Trace: [ 84.027880][ T6529] [ 84.027888][ T6529] dump_stack_lvl+0x189/0x250 [ 84.027917][ T6529] ? __pfx____ratelimit+0x10/0x10 [ 84.027945][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.027966][ T6529] ? __pfx__printk+0x10/0x10 [ 84.027994][ T6529] ? rcu_is_watching+0x15/0xb0 [ 84.028015][ T6529] should_fail_ex+0x414/0x560 [ 84.028041][ T6529] _copy_to_user+0x31/0xb0 [ 84.028064][ T6529] simple_read_from_buffer+0xe1/0x170 [ 84.028092][ T6529] proc_fail_nth_read+0x1b3/0x220 [ 84.028115][ T6529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.028138][ T6529] ? rw_verify_area+0x2a6/0x4d0 [ 84.028161][ T6529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.028181][ T6529] vfs_read+0x1fd/0xa30 [ 84.028213][ T6529] ? fdget_pos+0x247/0x320 [ 84.028232][ T6529] ? __pfx___mutex_lock+0x10/0x10 [ 84.028260][ T6529] ? __pfx_vfs_read+0x10/0x10 [ 84.028286][ T6529] ? __fget_files+0x3a0/0x420 [ 84.028302][ T6529] ? __fget_files+0x2a/0x420 [ 84.028328][ T6529] ksys_read+0x145/0x250 [ 84.028352][ T6529] ? __pfx_ksys_read+0x10/0x10 [ 84.028378][ T6529] ? rcu_is_watching+0x15/0xb0 [ 84.028398][ T6529] do_syscall_64+0xfa/0x3b0 [ 84.028415][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.028434][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 84.028454][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.028473][ T6529] RIP: 0033:0x7fee7718d5fc [ 84.028490][ T6529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.028507][ T6529] RSP: 002b:00007fee78035030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.028530][ T6529] RAX: ffffffffffffffda RBX: 00007fee773b6090 RCX: 00007fee7718d5fc [ 84.028544][ T6529] RDX: 000000000000000f RSI: 00007fee780350a0 RDI: 0000000000000004 [ 84.028556][ T6529] RBP: 00007fee78035090 R08: 0000000000000000 R09: 0000000000000000 [ 84.028568][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.028579][ T6529] R13: 00007fee773b6128 R14: 00007fee773b6090 R15: 00007ffeb8f0a498 [ 84.028600][ T6529] [ 84.447543][ T6535] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 84.456009][ T6535] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 84.475434][ T6536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.700261][ T6535] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 84.982954][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 85.002266][ T6563] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 85.054016][ T6563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.149289][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 85.336675][ T6570] hsr_slave_1 (unregistering): left promiscuous mode [ 85.380876][ T6578] netlink: 1946 bytes leftover after parsing attributes in process `syz.4.130'. [ 85.400428][ T6575] netlink: 1946 bytes leftover after parsing attributes in process `syz.4.130'. [ 85.438048][ T6576] netlink: 'syz.0.131': attribute type 8 has an invalid length. [ 85.573923][ T6593] syzkaller0: entered promiscuous mode [ 85.581236][ T6593] syzkaller0: entered allmulticast mode [ 85.602019][ T6590] can: request_module (can-proto-0) failed. [ 85.926814][ T6607] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.138'. [ 85.946499][ T6607] netlink: 'syz.4.138': attribute type 10 has an invalid length. [ 85.959003][ T6607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.086841][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.094279][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.101751][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.109013][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.151739][ T6611] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 86.394118][ T6619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.773315][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 86.856874][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 86.978871][ T1209] cfg80211: failed to load regulatory.db [ 87.552532][ T6670] tipc: Started in network mode [ 87.572256][ T6670] tipc: Node identity 462f154c463f, cluster identity 4711 [ 87.591915][ T6670] tipc: Enabled bearer , priority 0 [ 87.626755][ T6658] syzkaller0: entered promiscuous mode [ 87.640276][ T6658] syzkaller0: entered allmulticast mode [ 87.681765][ T6658] tipc: Resetting bearer [ 87.706462][ T6654] tipc: Resetting bearer [ 87.726631][ T6654] tipc: Disabling bearer [ 87.741716][ T6677] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 87.912425][ T6685] syzkaller0: entered promiscuous mode [ 87.919617][ T6685] syzkaller0: entered allmulticast mode [ 88.161391][ T6696] Bluetooth: MGMT ver 1.23 [ 88.541032][ T6715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.038552][ T6743] warning: `syz.1.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.326664][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.375085][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.398905][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.410141][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.489259][ T6760] __nla_validate_parse: 5 callbacks suppressed [ 89.489289][ T6760] netlink: 96 bytes leftover after parsing attributes in process `syz.0.180'. [ 89.549085][ T6764] netlink: 'syz.3.181': attribute type 7 has an invalid length. [ 89.591104][ T6764] netlink: 'syz.3.181': attribute type 8 has an invalid length. [ 89.625490][ T6764] netlink: 'syz.3.181': attribute type 15 has an invalid length. [ 89.759775][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 89.872127][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 89.895573][ T6790] team_slave_0: entered promiscuous mode [ 89.901293][ T6790] team_slave_1: entered promiscuous mode [ 89.917346][ T6790] macvtap1: entered promiscuous mode [ 89.922692][ T6790] team0: entered promiscuous mode [ 89.942339][ T6790] macvtap1: entered allmulticast mode [ 89.956267][ T6790] team0: entered allmulticast mode [ 89.970643][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'. [ 89.975563][ T6790] team_slave_0: entered allmulticast mode [ 89.986126][ T6790] team_slave_1: entered allmulticast mode [ 89.988769][ T6797] netlink: 'syz.2.190': attribute type 7 has an invalid length. [ 89.993020][ T6790] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 90.013535][ T6797] netlink: 'syz.2.190': attribute type 8 has an invalid length. [ 90.021579][ T6794] team0: left allmulticast mode [ 90.021863][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 90.027767][ T6794] team_slave_0: left allmulticast mode [ 90.040942][ T6794] team_slave_1: left allmulticast mode [ 90.047287][ T6794] team0: left promiscuous mode [ 90.052490][ T6794] team_slave_0: left promiscuous mode [ 90.058029][ T6794] team_slave_1: left promiscuous mode [ 90.207354][ T6805] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 90.207499][ T6806] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'. [ 90.220529][ T6805] netlink: 172 bytes leftover after parsing attributes in process `syz.4.192'. [ 90.232723][ T6806] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'. [ 90.520710][ T6828] netlink: 288 bytes leftover after parsing attributes in process `syz.4.200'. [ 90.575996][ T6836] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 90.583781][ T6836] netlink: 232 bytes leftover after parsing attributes in process `syz.1.202'. [ 90.612944][ T6836] macvtap1: entered allmulticast mode [ 90.627756][ T6836] veth0_macvtap: entered allmulticast mode [ 90.735720][ T6848] netlink: zone id is out of range [ 90.744220][ T6848] netlink: zone id is out of range [ 90.760134][ T6848] netlink: zone id is out of range [ 90.799904][ T6848] netlink: zone id is out of range [ 90.819611][ T6848] netlink: zone id is out of range [ 90.832814][ T6848] netlink: zone id is out of range [ 90.855629][ T6848] netlink: zone id is out of range [ 90.861021][ T6848] netlink: zone id is out of range [ 90.953964][ T6848] netlink: zone id is out of range [ 90.959261][ T6848] netlink: zone id is out of range [ 91.185482][ T6871] can: request_module (can-proto-0) failed. [ 91.319791][ T6885] netlink: 'syz.1.217': attribute type 5 has an invalid length. [ 91.556347][ T6899] bridge1: entered promiscuous mode [ 91.568553][ T6899] bridge1: entered allmulticast mode [ 91.591786][ T6899] team0: Port device bridge1 added [ 91.665507][ T6911] syzkaller1: entered promiscuous mode [ 91.750457][ T6911] syzkaller1: entered allmulticast mode [ 91.925296][ T6920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.109368][ T6925] IPVS: length: 34 != 285072 [ 92.426651][ T6948] pim6reg1: entered promiscuous mode [ 92.448559][ T6948] pim6reg1: entered allmulticast mode [ 93.160089][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.202254][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.271723][ T7001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.285045][ T7001] bond1: (slave bond2): Enslaving as an active interface with an up link [ 93.293721][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.311158][ T6995] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.323410][ T6995] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.329414][ T7001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.348358][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.371816][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.393620][ T6997] netlink: 'syz.2.252': attribute type 12 has an invalid length. [ 93.402659][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.412450][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.419728][ T6995] wg1 speed is unknown, defaulting to 1000 [ 93.568741][ T7015] bond0: Unable to set down delay as MII monitoring is disabled [ 93.803487][ T7027] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 93.984081][ T7032] veth0_macvtap: left allmulticast mode [ 94.242312][ T7050] netlink: 'syz.0.267': attribute type 4 has an invalid length. [ 94.251304][ T7047] wg1 speed is unknown, defaulting to 1000 [ 94.271030][ T7051] netlink: 'syz.0.267': attribute type 12 has an invalid length. [ 94.552016][ T7078] netlink: 'syz.3.274': attribute type 4 has an invalid length. [ 94.622972][ T7082] tipc: MTU too low for tipc bearer [ 94.707436][ T7086] veth3: entered promiscuous mode [ 94.742169][ T7089] __nla_validate_parse: 21 callbacks suppressed [ 94.742188][ T7089] netlink: 44 bytes leftover after parsing attributes in process `syz.3.277'. [ 94.764851][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'. [ 94.793969][ T7089] netlink: 44 bytes leftover after parsing attributes in process `syz.3.277'. [ 94.818420][ T7092] netlink: 256 bytes leftover after parsing attributes in process `syz.2.279'. [ 94.866641][ T7089] team0: Device sit1 is of different type [ 94.928206][ T7106] netlink: 80 bytes leftover after parsing attributes in process `syz.1.281'. [ 94.956034][ T7109] syzkaller0: entered promiscuous mode [ 94.961665][ T7109] syzkaller0: entered allmulticast mode [ 94.983462][ T7111] netlink: 192 bytes leftover after parsing attributes in process `syz.1.282'. [ 95.049443][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 95.561621][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 95.571544][ T7124] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 95.580158][ T7124] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 95.589658][ T7124] netlink: 80 bytes leftover after parsing attributes in process `syz.3.286'. [ 95.796448][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 95.949316][ T7155] wg1 speed is unknown, defaulting to 1000 [ 96.033121][ T7165] netlink: 'syz.4.298': attribute type 21 has an invalid length. [ 96.090253][ T7165] netlink: 'syz.4.298': attribute type 5 has an invalid length. [ 96.320220][ T7188] wg1 speed is unknown, defaulting to 1000 [ 96.482656][ T7195] bridge_slave_0: left allmulticast mode [ 96.506127][ T7195] bridge_slave_0: left promiscuous mode [ 96.526168][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.663109][ T7195] bridge_slave_1: left allmulticast mode [ 96.670492][ T7195] bridge_slave_1: left promiscuous mode [ 96.679061][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.691988][ T7195] bond0: (slave bond_slave_0): Releasing backup interface [ 96.703604][ T7195] bond0: (slave bond_slave_1): Releasing backup interface [ 96.718507][ T7195] team0: Port device team_slave_0 removed [ 96.741576][ T7195] team0: Port device team_slave_1 removed [ 96.749417][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.757393][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.767908][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.776015][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.809097][ T7195] team0: Port device bridge1 removed [ 96.819321][ T9] wg1 speed is unknown, defaulting to 1000 [ 96.824521][ T1209] net_ratelimit: 67 callbacks suppressed [ 96.824540][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.896186][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.941133][ T7212] netlink: 'syz.1.311': attribute type 4 has an invalid length. [ 97.241738][ T7233] netlink: 'syz.4.316': attribute type 11 has an invalid length. [ 97.353061][ T7233] syzkaller0: entered promiscuous mode [ 97.360542][ T7233] syzkaller0: entered allmulticast mode [ 97.562270][ T7272] wg1 speed is unknown, defaulting to 1000 [ 97.676040][ T7278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.827637][ T7285] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 98.464995][ T7312] wg1 speed is unknown, defaulting to 1000 [ 98.489685][ T7309] syz.3.337 (7309) used greatest stack depth: 17992 bytes left [ 98.669406][ T7323] validate_nla: 3 callbacks suppressed [ 98.669426][ T7323] netlink: 'syz.3.340': attribute type 3 has an invalid length. [ 99.704536][ T7389] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003 [ 99.749237][ T7392] __nla_validate_parse: 21 callbacks suppressed [ 99.749256][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 99.788950][ T7392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 99.889945][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 99.912084][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.921463][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 99.931457][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.951165][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.980993][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.011681][ T7412] tipc: Enabled bearer , priority 0 [ 100.027302][ T7412] syzkaller0: entered promiscuous mode [ 100.032821][ T7412] syzkaller0: entered allmulticast mode [ 100.056663][ T7412] tipc: Resetting bearer [ 100.070833][ T7407] tipc: Resetting bearer [ 100.088507][ T7407] tipc: Disabling bearer [ 100.247581][ T7426] bridge0: port 3(netdevsim2) entered blocking state [ 100.267401][ T7426] bridge0: port 3(netdevsim2) entered disabled state [ 100.281064][ T7426] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 100.305555][ T7426] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 100.315337][ T7426] bridge0: port 3(netdevsim2) entered blocking state [ 100.322159][ T7426] bridge0: port 3(netdevsim2) entered forwarding state [ 100.327565][ T30] audit: type=1800 audit(1756364256.818:3): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.364" name="memory.events" dev="tmpfs" ino=406 res=0 errno=0 [ 100.360701][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 100.404336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.417665][ T7432] bond3: entered allmulticast mode [ 100.464403][ T7438] netlink: 182 bytes leftover after parsing attributes in process `syz.2.374'. [ 100.502795][ T7442] wg1 speed is unknown, defaulting to 1000 [ 100.521047][ T7441] wg1 speed is unknown, defaulting to 1000 [ 100.532591][ T7444] netlink: 'syz.1.375': attribute type 13 has an invalid length. [ 100.540975][ T7444] netlink: 'syz.1.375': attribute type 17 has an invalid length. [ 100.606287][ T7444] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.621639][ T7444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.691068][ T7449] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 100.709337][ T7447] wg1 speed is unknown, defaulting to 1000 [ 100.750337][ T7449] wg1 speed is unknown, defaulting to 1000 [ 100.823387][ T7455] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.263789][ T7480] netlink: 92 bytes leftover after parsing attributes in process `syz.3.384'. [ 101.391563][ T7493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.388'. [ 101.432489][ T7496] netlink: 96 bytes leftover after parsing attributes in process `syz.0.389'. [ 101.448694][ T7496] netlink: 'syz.0.389': attribute type 17 has an invalid length. [ 101.548527][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.556112][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.667867][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.690491][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.740805][ T7512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.823374][ T7501] netlink: 'syz.3.391': attribute type 29 has an invalid length. [ 101.832696][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 101.931315][ T3597] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.966521][ T3597] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.984021][ T3597] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.998269][ T3597] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.023178][ T3597] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.032496][ T3597] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.043183][ T3597] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.053291][ T3597] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.099689][ T3597] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.134675][ T7537] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 102.156914][ T67] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.167290][ T7541] unsupported nlmsg_type 40 [ 102.197264][ T67] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.209347][ T5874] IPVS: starting estimator thread 0... [ 102.227521][ T67] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.240596][ T7540] wg1 speed is unknown, defaulting to 1000 [ 102.246900][ T7530] netlink: 'syz.3.401': attribute type 7 has an invalid length. [ 102.363941][ T7542] IPVS: using max 38 ests per chain, 91200 per kthread [ 102.875585][ T7589] netlink: 'syz.0.413': attribute type 39 has an invalid length. [ 103.315655][ T7618] wg1 speed is unknown, defaulting to 1000 [ 103.489888][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.497518][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.893167][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.933643][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.958931][ T7621] hsr0: left promiscuous mode [ 104.046472][ T6465] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.073333][ T6465] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.109824][ T6465] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.464589][ T7639] bridge0: port 3(netdevsim2) entered disabled state [ 104.471546][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.479020][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.833203][ T6465] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.861197][ T6465] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.908985][ T7675] netlink: 'syz.2.432': attribute type 2 has an invalid length. [ 104.973697][ T7656] bridge_slave_1: left allmulticast mode [ 104.984154][ T7656] bridge_slave_1: left promiscuous mode [ 104.990157][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.033182][ T7656] bridge_slave_0: left allmulticast mode [ 105.053182][ T7656] bridge_slave_0: left promiscuous mode [ 105.061140][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.075882][ T7686] __nla_validate_parse: 12 callbacks suppressed [ 105.075901][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 105.093360][ T7686] netlink: 92 bytes leftover after parsing attributes in process `syz.1.434'. [ 105.103517][ T7686] openvswitch: netlink: Message has 16 unknown bytes. [ 105.111232][ T7686] netlink: 'syz.1.434': attribute type 13 has an invalid length. [ 105.120143][ T7686] netlink: 'syz.1.434': attribute type 17 has an invalid length. [ 105.181533][ T6465] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.198674][ T7686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.234460][ T6465] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.243532][ T6465] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.260221][ T7677] wg1 speed is unknown, defaulting to 1000 [ 105.273215][ T7696] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.438'. [ 105.339039][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 105.670236][ T7714] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.444'. [ 105.682438][ T7714] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.444'. [ 105.727878][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 105.771757][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 105.786019][ T7718] netlink: 164548 bytes leftover after parsing attributes in process `syz.3.446'. [ 105.912020][ T7721] netlink: 88 bytes leftover after parsing attributes in process `syz.4.447'. [ 105.976287][ T7723] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 106.451346][ T7757] wg1 speed is unknown, defaulting to 1000 [ 106.516152][ T7760] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 106.590638][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.051839][ T7784] wg1 speed is unknown, defaulting to 1000 [ 107.292097][ T7795] wg1 speed is unknown, defaulting to 1000 [ 107.662340][ T7826] netlink: 'syz.0.483': attribute type 13 has an invalid length. [ 107.676558][ T7826] netlink: 'syz.0.483': attribute type 17 has an invalid length. [ 107.830988][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.841894][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.859040][ T7826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.928404][ T7829] wg1 speed is unknown, defaulting to 1000 [ 108.398860][ T7867] netlink: 'syz.1.494': attribute type 4 has an invalid length. [ 108.450130][ T7869] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 108.750297][ T7884] netlink: 'syz.3.497': attribute type 6 has an invalid length. [ 108.799700][ T7884] bond2: entered promiscuous mode [ 108.941746][ T7889] wg1 speed is unknown, defaulting to 1000 [ 109.016029][ T7898] IPv6: sit1: Disabled Multicast RS [ 109.022173][ T7898] sit1: entered allmulticast mode [ 109.531418][ T7933] wg1 speed is unknown, defaulting to 1000 [ 109.549651][ T7935] syzkaller1: entered allmulticast mode [ 109.557392][ T7935] syzkaller1: left allmulticast mode [ 109.756472][ T7944] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.781716][ T7652] IPVS: starting estimator thread 0... [ 109.894107][ T7950] IPVS: using max 41 ests per chain, 98400 per kthread [ 109.991477][ T7961] wg1 speed is unknown, defaulting to 1000 [ 110.320782][ T7984] __nla_validate_parse: 29 callbacks suppressed [ 110.320803][ T7984] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'. [ 110.342340][ T7986] netlink: 'syz.4.524': attribute type 23 has an invalid length. [ 110.404461][ T7985] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 110.658278][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 110.726085][ T8000] netlink: 'syz.1.529': attribute type 9 has an invalid length. [ 110.745549][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 110.757914][ T7997] bridge_slave_1: left allmulticast mode [ 110.763772][ T7997] bridge_slave_1: left promiscuous mode [ 110.772025][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.781161][ T7997] bridge_slave_0: left allmulticast mode [ 110.789307][ T7997] bridge_slave_0: left promiscuous mode [ 110.795354][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.913673][ T8000] macvlan2: entered promiscuous mode [ 110.931904][ T8000] hsr0: entered promiscuous mode [ 110.947672][ T8000] macvlan2: entered allmulticast mode [ 110.966675][ T8000] hsr0: entered allmulticast mode [ 110.992267][ T8000] hsr_slave_0: entered allmulticast mode [ 111.015266][ T8000] hsr_slave_1: entered allmulticast mode [ 111.285087][ T8029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.318196][ T8016] bond0: (slave dummy0): Releasing backup interface [ 111.361940][ T8016] batman_adv: batadv0: Adding interface: dummy0 [ 111.384821][ T8016] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.437042][ T8016] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 111.480451][ T8039] bond0: (slave bond_slave_0): Releasing backup interface [ 111.491120][ T8039] bond0: (slave bond_slave_1): Releasing backup interface [ 111.501388][ T8039] team0: Port device team_slave_0 removed [ 111.510606][ T8039] team0: Port device team_slave_1 removed [ 111.517176][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.530761][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.582215][ T8046] tipc: Enabling of bearer rejected, failed to enable media [ 111.601301][ T8045] netlink: 'syz.3.541': attribute type 6 has an invalid length. [ 111.656891][ T8045] netlink: 'syz.3.541': attribute type 12 has an invalid length. [ 111.685136][ T8045] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.541'. [ 112.404838][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.553'. [ 112.413947][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.553'. [ 112.439865][ T8090] !: entered promiscuous mode [ 112.471154][ T8090] !: left promiscuous mode [ 113.139191][ T8103] netlink: 176 bytes leftover after parsing attributes in process `syz.0.555'. [ 113.495341][ T8124] tipc: Enabling of bearer rejected, failed to enable media [ 113.943415][ T8139] wg1 speed is unknown, defaulting to 1000 [ 114.196085][ T8154] netlink: 224 bytes leftover after parsing attributes in process `syz.3.571'. [ 114.256172][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 114.703578][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 114.762987][ T8191] ‚: renamed from bond_slave_0 [ 114.949797][ T8199] wg1 speed is unknown, defaulting to 1000 [ 115.082670][ T8211] pim6reg1: entered promiscuous mode [ 115.098137][ T8211] pim6reg1: entered allmulticast mode [ 115.149880][ T8215] tipc: Started in network mode [ 115.156523][ T8215] tipc: Node identity 7ae2951632eb, cluster identity 4711 [ 115.164109][ T8215] tipc: Enabled bearer , priority 0 [ 115.170860][ T8213] C: renamed from team_slave_0 [ 115.178691][ T8213] netlink: 'syz.4.587': attribute type 3 has an invalid length. [ 115.193956][ T8213] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 115.219543][ T8215] syzkaller0: entered promiscuous mode [ 115.235272][ T8215] syzkaller0: entered allmulticast mode [ 115.252486][ T8215] tipc: Resetting bearer [ 115.262313][ T8214] tipc: Resetting bearer [ 115.269536][ T8214] tipc: Disabling bearer [ 115.280017][ T8218] syzkaller1: entered promiscuous mode [ 115.286142][ T8218] syzkaller1: entered allmulticast mode [ 115.380744][ T8222] wg1 speed is unknown, defaulting to 1000 [ 115.487747][ T8232] __nla_validate_parse: 3 callbacks suppressed [ 115.487768][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 115.669631][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 115.671428][ T8236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.593'. [ 115.822959][ T8248] wg1 speed is unknown, defaulting to 1000 [ 115.909584][ T8222] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.988713][ T8233] wg1 speed is unknown, defaulting to 1000 [ 116.097012][ T8270] netlink: 3 bytes leftover after parsing attributes in process `syz.3.600'. [ 116.144925][ T8270] batadv1: entered promiscuous mode [ 116.150510][ T8270] batadv1: entered allmulticast mode [ 116.160350][ T8272] netlink: 'syz.0.601': attribute type 7 has an invalid length. [ 116.169132][ T8272] netlink: 'syz.0.601': attribute type 8 has an invalid length. [ 116.210611][ T8274] wg1 speed is unknown, defaulting to 1000 [ 116.408253][ T8290] tipc: Started in network mode [ 116.417107][ T8290] tipc: Node identity b279425c2a37, cluster identity 4711 [ 116.430234][ T8290] tipc: Enabled bearer , priority 0 [ 116.440147][ T8290] syzkaller0: entered promiscuous mode [ 116.445904][ T8290] syzkaller0: entered allmulticast mode [ 116.482584][ T8290] tipc: Resetting bearer [ 116.493142][ T8289] tipc: Resetting bearer [ 116.508038][ T8289] tipc: Disabling bearer [ 116.588928][ T8274] netlink: 'syz.4.602': attribute type 6 has an invalid length. [ 116.610469][ T8295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.647727][ T8295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.878100][ T8312] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 116.888226][ T8312] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 116.955765][ T8312] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 116.977318][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.987640][ T8312] bond0: (slave wlan0): Opening slave failed [ 117.001622][ T8312] vlan3: entered allmulticast mode [ 117.006994][ T8312] veth1: entered allmulticast mode [ 117.013203][ T8312] bond0: (slave vlan3): Opening slave failed [ 117.228794][ T8327] netlink: 'syz.0.618': attribute type 6 has an invalid length. [ 117.248058][ T8327] netlink: 'syz.0.618': attribute type 12 has an invalid length. [ 117.258044][ T8327] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.618'. [ 117.441602][ T8335] block nbd4: not configured, cannot reconfigure [ 117.457451][ T8335] sctp: [Deprecated]: syz.4.619 (pid 8335) Use of int in max_burst socket option. [ 117.457451][ T8335] Use struct sctp_assoc_value instead [ 118.239392][ T8341] tipc: Enabled bearer , priority 0 [ 118.289281][ T8341] tipc: Disabling bearer [ 118.362663][ T30] audit: type=1800 audit(1756364274.848:4): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.620" name="memory.events" dev="tmpfs" ino=593 res=0 errno=0 [ 118.447748][ T8366] netlink: 208128 bytes leftover after parsing attributes in process `syz.3.628'. [ 118.481248][ T8366] openvswitch: netlink: Message has 4 unknown bytes. [ 118.677123][ T8376] vlan0: entered promiscuous mode [ 118.859622][ T8390] tipc: Enabled bearer , priority 0 [ 118.891997][ T8390] syzkaller0: entered promiscuous mode [ 118.915958][ T8390] syzkaller0: entered allmulticast mode [ 118.956228][ T8390] tipc: Resetting bearer [ 118.965980][ T8388] tipc: Resetting bearer [ 118.993694][ T8388] tipc: Disabling bearer [ 119.373508][ T8408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.644'. [ 119.705426][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.647'. [ 119.853053][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 119.885790][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'. [ 120.100865][ T8428] netlink: 'syz.3.651': attribute type 3 has an invalid length. [ 120.131664][ T8428] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 120.145125][ T8428] k›*·]‘: entered promiscuous mode [ 120.205084][ T8431] tipc: Enabled bearer , priority 0 [ 120.213231][ T8431] syzkaller0: entered promiscuous mode [ 120.233047][ T8431] syzkaller0: entered allmulticast mode [ 120.281941][ T8431] syzkaller0: mtu less than device minimum [ 120.337018][ T8439] openvswitch: netlink: IP tunnel dst address not specified [ 120.345205][ T8430] tipc: Resetting bearer [ 120.394524][ T8430] tipc: Disabling bearer [ 120.428851][ T8444] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1207) [ 120.455728][ T8444] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 120.472731][ T8441] dummy0: entered promiscuous mode [ 120.479635][ T8441] bond0: entered promiscuous mode [ 120.505957][ T8441] dummy0: left promiscuous mode [ 120.525389][ T8441] bond0: left promiscuous mode [ 120.559896][ T8445] __nla_validate_parse: 4 callbacks suppressed [ 120.559919][ T8445] netlink: 248 bytes leftover after parsing attributes in process `syz.0.657'. [ 120.563000][ T8450] syz_tun: entered allmulticast mode [ 120.685449][ T8450] dvmrp8: entered allmulticast mode [ 120.746193][ T8449] nbd4: detected capacity change from 0 to 63 [ 120.748654][ T8450] dvmrp8: left allmulticast mode [ 120.752895][ T8453] block nbd4: NBD_DISCONNECT [ 120.802998][ T8459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.661'. [ 120.812600][ T8453] block nbd4: Disconnected due to user request. [ 120.824881][ T8453] block nbd4: shutting down sockets [ 120.897307][ T8463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.661'. [ 121.079947][ T8473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.663'. [ 121.216319][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'. [ 121.284811][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'. [ 121.708831][ T8470] geneve2: left promiscuous mode [ 121.717657][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'. [ 121.721157][ T8470] geneve2: left allmulticast mode [ 121.733285][ T8470] macvtap1: left allmulticast mode [ 121.785134][ T8470] hsr0: left allmulticast mode [ 121.794304][ T8470] hsr_slave_0: left allmulticast mode [ 121.805601][ T8470] hsr_slave_1: left allmulticast mode [ 121.814283][ T8470] hsr0: left promiscuous mode [ 121.820080][ T8470] macvlan2: left promiscuous mode [ 121.827946][ T8470] macvlan2: left allmulticast mode [ 121.889705][ T3597] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.927369][ T3597] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.958296][ T3597] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.998302][ T3597] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.085084][ T8490] syzkaller0: entered promiscuous mode [ 122.101297][ T8490] syzkaller0: entered allmulticast mode [ 122.255962][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 122.482255][ T8500] batman_adv: batadv0: Adding interface: dummy0 [ 122.493776][ T8500] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.555703][ T8500] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 122.646469][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.678888][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.674'. [ 122.783216][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 123.657356][ T8564] validate_nla: 2 callbacks suppressed [ 123.657376][ T8564] netlink: 'syz.4.688': attribute type 13 has an invalid length. [ 123.811196][ T8572] wg1 speed is unknown, defaulting to 1000 [ 124.099584][ T8602] netlink: 'syz.2.700': attribute type 21 has an invalid length. [ 124.140012][ T8607] batman_adv: batadv0: Adding interface: ipvlan2 [ 124.147043][ T8607] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.173039][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.183989][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.193910][ T8607] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 124.207623][ T8605] tipc: Enabling of bearer rejected, failed to enable media [ 124.222225][ T8609] netlink: 'syz.2.703': attribute type 13 has an invalid length. [ 124.376722][ T8617] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 124.385521][ T8617] netdevsim netdevsim2 netdevsim2 (unregistering): left promiscuous mode [ 124.395318][ T8617] bridge0: port 3(netdevsim2) entered disabled state [ 124.424952][ T8621] wg1 speed is unknown, defaulting to 1000 [ 124.889122][ T8636] wg1 speed is unknown, defaulting to 1000 [ 124.963337][ T8647] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 125.017060][ T8652] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 125.087158][ T8613] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 125.318342][ T8673] wg1 speed is unknown, defaulting to 1000 [ 125.400236][ T8669] wg1 speed is unknown, defaulting to 1000 [ 125.424137][ T8682] tipc: Enabled bearer , priority 0 [ 125.476801][ T8682] syzkaller0: entered promiscuous mode [ 125.482410][ T8682] syzkaller0: entered allmulticast mode [ 125.627323][ T8686] tipc: Resetting bearer [ 125.657954][ T8678] tipc: Resetting bearer [ 125.688176][ T8678] tipc: Disabling bearer [ 125.723100][ T8694] __nla_validate_parse: 3 callbacks suppressed [ 125.723123][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.725'. [ 125.783322][ T8695] wg1 speed is unknown, defaulting to 1000 [ 125.805722][ T8700] netlink: 'syz.0.727': attribute type 13 has an invalid length. [ 125.815125][ T8694] netlink: 260 bytes leftover after parsing attributes in process `syz.4.725'. [ 125.839563][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 126.062276][ T8719] wg1 speed is unknown, defaulting to 1000 [ 126.269828][ T8740] netlink: 1 bytes leftover after parsing attributes in process `syz.3.734'. [ 126.316458][ T8739] syzkaller0: entered promiscuous mode [ 126.322116][ T8739] syzkaller0: entered allmulticast mode [ 126.386200][ T8725] netlink: 80 bytes leftover after parsing attributes in process `syz.4.733'. [ 126.907058][ T8724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.090334][ T8755] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 127.110955][ T8750] netlink: 'syz.3.739': attribute type 13 has an invalid length. [ 127.179668][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 127.191860][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 127.246147][ T8767] wg1 speed is unknown, defaulting to 1000 [ 127.279431][ T8770] netlink: 34 bytes leftover after parsing attributes in process `syz.2.746'. [ 127.907073][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'. [ 127.919443][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.754'. [ 127.923933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.338916][ T8819] netlink: 'syz.2.755': attribute type 13 has an invalid length. [ 128.559988][ T8845] tipc: Enabled bearer , priority 0 [ 128.570358][ T8850] tipc: Enabling of bearer rejected, already enabled [ 128.581830][ T8845] syzkaller0: entered promiscuous mode [ 128.587482][ T8845] syzkaller0: entered allmulticast mode [ 128.606496][ T8845] tipc: Resetting bearer [ 128.613661][ T8844] tipc: Resetting bearer [ 128.621835][ T8844] tipc: Disabling bearer [ 128.658235][ T8852] vlan0: left promiscuous mode [ 128.666859][ T8852] ip6gre1: left allmulticast mode [ 128.767548][ T8865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.774900][ T8865] IPv6: NLM_F_CREATE should be set when creating new route [ 128.787051][ T8869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.917723][ T8881] ntdevsim0: renamed from sit0 [ 128.925930][ T8881] A link change request failed with some changes committed already. Interface ntdevsim0 may have been left with an inconsistent configuration, please check. [ 128.948050][ T5182] Bluetooth: hci4: link tx timeout [ 128.953352][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.961455][ T5182] Bluetooth: hci4: link tx timeout [ 128.967212][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.975133][ T5182] Bluetooth: hci4: link tx timeout [ 128.980393][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.989339][ T5182] Bluetooth: hci4: link tx timeout [ 128.995234][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.438071][ T8897] Bluetooth: MGMT ver 1.23 [ 129.947684][ T8934] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 130.643996][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 130.888946][ T8993] __nla_validate_parse: 17 callbacks suppressed [ 130.888967][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 130.909796][ T8994] xt_socket: unknown flags 0xfc [ 130.925897][ T8994] netlink: 'syz.2.806': attribute type 5 has an invalid length. [ 130.934001][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 131.040682][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 131.099796][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 131.113337][ T9009] macvtap0: entered promiscuous mode [ 131.119713][ T9009] bond0: entered promiscuous mode [ 131.125939][ T9009] macvtap0: entered allmulticast mode [ 131.131472][ T9009] bond0: entered allmulticast mode [ 131.137978][ T9009] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 131.149113][ T9009] netlink: 'syz.0.815': attribute type 13 has an invalid length. [ 131.150947][ T9010] netlink: zone id is out of range [ 131.162385][ T9010] netlink: zone id is out of range [ 131.167904][ T9010] netlink: zone id is out of range [ 131.173131][ T9010] netlink: zone id is out of range [ 131.179660][ T9010] netlink: zone id is out of range [ 131.184976][ T9010] netlink: zone id is out of range [ 131.190485][ T9010] netlink: zone id is out of range [ 131.279596][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 131.405116][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 131.524733][ T9021] netlink: 'syz.4.819': attribute type 3 has an invalid length. [ 131.545372][ T9021] siw: device registration error -23 [ 131.583408][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.597763][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.614133][ T9021] batman_adv: batadv0: Interface activated: dummy0 [ 131.645430][ T9025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.820'. [ 131.657390][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 131.809839][ T9035] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 131.819505][ T9035] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 131.869874][ T9041] lo: entered allmulticast mode [ 131.875851][ T9041] lo: left allmulticast mode [ 131.883043][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 131.950160][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 132.175486][ T9056] wg1 speed is unknown, defaulting to 1000 [ 132.728357][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 132.802845][ T9081] wg1 speed is unknown, defaulting to 1000 [ 133.046652][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148240][ T9086] wg1 speed is unknown, defaulting to 1000 [ 133.281406][ T9096] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 133.405890][ T9101] wg1 speed is unknown, defaulting to 1000 [ 133.503505][ T9102] wg1 speed is unknown, defaulting to 1000 [ 133.739683][ T9116] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 133.807030][ T9119] batadv_slave_0: entered promiscuous mode [ 133.878814][ T9135] netlink: 'syz.2.848': attribute type 14 has an invalid length. [ 133.897110][ T9135] netlink: 'syz.2.848': attribute type 13 has an invalid length. [ 134.208058][ T9148] netlink: 'syz.4.851': attribute type 13 has an invalid length. [ 134.221607][ T9146] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 134.247572][ T9154] syz_tun: left allmulticast mode [ 134.346985][ T9146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.423448][ T9149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.436994][ T9149] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 134.462967][ T9149] bond2: (slave vcan1): Error -95 calling set_mac_address [ 134.740152][ T9179] tipc: Enabled bearer , priority 0 [ 134.755665][ T9179] syzkaller0: entered promiscuous mode [ 134.761182][ T9179] syzkaller0: entered allmulticast mode [ 134.818486][ T9179] tipc: Resetting bearer [ 134.866995][ T9178] tipc: Resetting bearer [ 134.886347][ T9178] tipc: Disabling bearer [ 135.219212][ T9214] net_ratelimit: 38 callbacks suppressed [ 135.219232][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.910662][ T9254] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.969619][ T1340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.981229][ T1340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.999901][ T1340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.009449][ T1340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.026926][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 136.036999][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 136.048918][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 136.058543][ T1340] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 136.076035][ T9262] tipc: Enabled bearer , priority 0 [ 136.083334][ T9262] validate_nla: 4 callbacks suppressed [ 136.083352][ T9262] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 136.106208][ T9262] syzkaller0: entered promiscuous mode [ 136.111727][ T9262] syzkaller0: entered allmulticast mode [ 136.121363][ T9262] tipc: Resetting bearer [ 136.123002][ T9264] __nla_validate_parse: 16 callbacks suppressed [ 136.123016][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 136.149688][ T9264] netlink: 'syz.3.885': attribute type 13 has an invalid length. [ 136.195128][ T9261] tipc: Resetting bearer [ 136.215830][ T9261] tipc: Disabling bearer [ 136.276860][ T9272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.889'. [ 136.289776][ T9272] netlink: 'syz.4.889': attribute type 13 has an invalid length. [ 136.299164][ T9272] netlink: 'syz.4.889': attribute type 17 has an invalid length. [ 136.392243][ T9272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.644848][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 136.682222][ T9307] tipc: Can't bind to reserved service type 2 [ 137.038992][ T9314] wg1 speed is unknown, defaulting to 1000 [ 138.290535][ T9319] netlink: 'syz.0.902': attribute type 6 has an invalid length. [ 138.364279][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 138.791465][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 138.791706][ T9347] netlink: 72 bytes leftover after parsing attributes in process `syz.3.911'. [ 139.066740][ T9375] wg1 speed is unknown, defaulting to 1000 [ 139.210393][ T9382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.921'. [ 139.223464][ T9382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.921'. [ 139.406578][ T9397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.420772][ T9397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 139.538537][ T9397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.557681][ T9397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 139.629093][ T9397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.668883][ T9397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 139.727413][ T9397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.744087][ T9397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 139.794670][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 139.826708][ T6465] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 139.837165][ T6465] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 139.871261][ T6465] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 139.886280][ T6465] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 139.894944][ T6465] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 139.903464][ T6465] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 139.914481][ T6465] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 139.923716][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 139.935193][ T6465] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.032241][ T9430] wg1 speed is unknown, defaulting to 1000 [ 140.056716][ T9436] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 140.095123][ T9443] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 140.115127][ T9443] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 140.118919][ T9441] wg1 speed is unknown, defaulting to 1000 [ 140.323019][ T9463] netlink: 'syz.3.939': attribute type 4 has an invalid length. [ 140.333979][ T9463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.580411][ T9474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.661985][ T9479] netlink: 240 bytes leftover after parsing attributes in process `syz.3.946'. [ 140.756498][ T9483] tipc: Enabled bearer , priority 0 [ 140.763735][ T9484] syzkaller0: entered promiscuous mode [ 140.769598][ T9484] syzkaller0: entered allmulticast mode [ 140.781656][ T9483] tipc: Resetting bearer [ 140.798404][ T9482] tipc: Resetting bearer [ 140.814531][ T9482] tipc: Disabling bearer [ 141.087460][ T9506] wg1 speed is unknown, defaulting to 1000 [ 141.133008][ T9515] __nla_validate_parse: 3 callbacks suppressed [ 141.133028][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 141.148523][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 141.157625][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 141.166962][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 141.176100][ T9515] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 141.260668][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 141.323611][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 141.342335][ T9529] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 141.352857][ T9529] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 141.453011][ T9536] syzkaller0: entered promiscuous mode [ 141.459506][ T9536] syzkaller0: entered allmulticast mode [ 141.541434][ T9550] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 141.576265][ T9552] syzkaller1: entered promiscuous mode [ 141.581937][ T9552] syzkaller1: entered allmulticast mode [ 141.596581][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 141.618319][ T9554] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 142.059970][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 142.069137][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 142.092496][ T9577] netlink: 'syz.0.973': attribute type 16 has an invalid length. [ 142.100874][ T9577] netlink: 'syz.0.973': attribute type 17 has an invalid length. [ 142.133186][ T9577] bond0: left allmulticast mode [ 142.139858][ T9577] bond0: left promiscuous mode [ 142.151930][ T6465] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 142.161913][ T6465] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.171535][ T6465] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 142.185352][ T6465] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.195572][ T6465] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 142.204953][ T6465] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.216807][ T6465] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 142.228922][ T6465] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.289309][ T9585] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 142.307296][ T9585] bond3: entered promiscuous mode [ 142.312393][ T9585] bond3: entered allmulticast mode [ 142.318651][ T9585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.332822][ T9585] bridge2: entered promiscuous mode [ 142.339185][ T9585] bridge2: entered allmulticast mode [ 142.345187][ T9585] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 142.981313][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 143.020708][ T9628] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 143.211212][ T9647] syzkaller0: entered promiscuous mode [ 143.221179][ T9647] syzkaller0: entered allmulticast mode [ 143.421797][ T9665] ipvlan2: entered promiscuous mode [ 143.481380][ T9670] wg1 speed is unknown, defaulting to 1000 [ 143.895527][ T9702] netlink: 'syz.4.1006': attribute type 29 has an invalid length. [ 143.904900][ T9702] netlink: 'syz.4.1006': attribute type 29 has an invalid length. [ 144.046562][ T9721] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 144.079502][ T9721] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 144.105019][ T9728] tipc: Enabled bearer , priority 0 [ 144.124353][ T9728] syzkaller0: entered promiscuous mode [ 144.129874][ T9728] syzkaller0: entered allmulticast mode [ 144.246793][ T9727] tipc: Resetting bearer [ 144.290478][ T9727] tipc: Disabling bearer [ 145.155785][ T9768] smc: net device bond0 applied user defined pnetid SYZ2 [ 145.163171][ T9769] smc: net device bond0 erased user defined pnetid SYZ2 [ 145.336026][ T9783] netlink: 'syz.2.1031': attribute type 19 has an invalid length. [ 145.620942][ T9811] netlink: 'syz.2.1040': attribute type 6 has an invalid length. [ 146.441109][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.458344][ T9862] __nla_validate_parse: 24 callbacks suppressed [ 146.458366][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 146.852331][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 146.862598][ T9876] netlink: 704 bytes leftover after parsing attributes in process `syz.4.1058'. [ 146.871338][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1060'. [ 146.872609][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1059'. [ 146.937470][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 147.001476][ T9884] netlink: 'syz.2.1062': attribute type 3 has an invalid length. [ 147.102656][ T9892] macsec1: entered promiscuous mode [ 147.115145][ T9892] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 147.125500][ T9892] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 147.470279][ T9917] tap0: tun_chr_ioctl cmd 1074025677 [ 147.476196][ T9917] tap0: linktype set to 825 [ 147.522631][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 147.533750][ T9917] IPv6: Can't replace route, no match found [ 147.613172][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 147.659995][ T9926] ip6gre1: entered allmulticast mode [ 147.806275][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1076'. [ 148.050459][ T9945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1079'. [ 148.166396][ T9954] netlink: 'syz.2.1084': attribute type 3 has an invalid length. [ 148.753674][ T9986] vxcan2: entered promiscuous mode [ 148.841980][ T9988] wg1 speed is unknown, defaulting to 1000 [ 148.869193][ T9991] netlink: 'syz.1.1096': attribute type 3 has an invalid length. [ 148.943531][ T9999] sit0: entered promiscuous mode [ 148.948961][ T9999] sit0: entered allmulticast mode [ 148.957142][ T9996] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 149.201563][T10016] tipc: Enabled bearer , priority 0 [ 149.209273][T10016] syzkaller0: entered promiscuous mode [ 149.219798][T10016] syzkaller0: entered allmulticast mode [ 149.238115][T10016] tipc: Resetting bearer [ 149.246180][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.262614][T10015] tipc: Resetting bearer [ 149.271975][T10015] tipc: Disabling bearer [ 149.368603][T10026] ip6tnl1: entered promiscuous mode [ 149.376642][T10026] ip6tnl1: entered allmulticast mode [ 149.911014][T10045] Bluetooth: MGMT ver 1.23 [ 150.075934][T10051] wg1 speed is unknown, defaulting to 1000 [ 150.279923][T10062] wg1 speed is unknown, defaulting to 1000 [ 150.804682][T10073] syzkaller0: entered promiscuous mode [ 150.810450][T10073] syzkaller0: entered allmulticast mode [ 151.097291][T10096] FAULT_INJECTION: forcing a failure. [ 151.097291][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.162957][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.4.1124 Not tainted syzkaller #0 PREEMPT(full) [ 151.162986][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.162997][T10096] Call Trace: [ 151.163004][T10096] [ 151.163012][T10096] dump_stack_lvl+0x189/0x250 [ 151.163041][T10096] ? __pfx____ratelimit+0x10/0x10 [ 151.163069][T10096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.163091][T10096] ? __pfx__printk+0x10/0x10 [ 151.163115][T10096] ? __might_fault+0xb0/0x130 [ 151.163144][T10096] ? rcu_is_watching+0x15/0xb0 [ 151.163164][T10096] should_fail_ex+0x414/0x560 [ 151.163190][T10096] _copy_from_user+0x2d/0xb0 [ 151.163212][T10096] do_sock_getsockopt+0x17d/0x450 [ 151.163234][T10096] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 151.163252][T10096] ? rcu_needs_cpu+0xa0/0xb0 [ 151.163269][T10096] ? __fget_files+0x3a0/0x420 [ 151.163285][T10096] ? __fget_files+0x2a/0x420 [ 151.163303][T10096] __x64_sys_getsockopt+0x1a5/0x250 [ 151.163321][T10096] ? rcu_needs_cpu+0xa0/0xb0 [ 151.163339][T10096] ? rcu_needs_cpu+0xa0/0xb0 [ 151.163358][T10096] do_syscall_64+0xfa/0x3b0 [ 151.163376][T10096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.163395][T10096] ? clear_bhb_loop+0x60/0xb0 [ 151.163415][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.163432][T10096] RIP: 0033:0x7fee7718ebe9 [ 151.163449][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.163466][T10096] RSP: 002b:00007fee78035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 151.163488][T10096] RAX: ffffffffffffffda RBX: 00007fee773b6090 RCX: 00007fee7718ebe9 [ 151.163502][T10096] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000005 [ 151.163514][T10096] RBP: 00007fee78035090 R08: 0000200000000040 R09: 0000000000000000 [ 151.163526][T10096] R10: 0000200000002280 R11: 0000000000000246 R12: 0000000000000001 [ 151.163537][T10096] R13: 00007fee773b6128 R14: 00007fee773b6090 R15: 00007ffeb8f0a498 [ 151.163558][T10096] [ 151.456364][T10098] pim6reg: entered allmulticast mode [ 151.600735][T10104] wg1 speed is unknown, defaulting to 1000 [ 151.630490][T10125] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.652679][T10126] netlink: 'syz.4.1132': attribute type 13 has an invalid length. [ 151.663356][T10126] netlink: 'syz.4.1132': attribute type 17 has an invalid length. [ 151.685712][T10106] tipc: Enabled bearer , priority 0 [ 151.711820][T10126] sit0: left promiscuous mode [ 151.722798][T10126] sit0: left allmulticast mode [ 151.732710][T10126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.766518][T10125] __nla_validate_parse: 22 callbacks suppressed [ 151.766538][T10125] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1129'. [ 151.796171][T10129] wg1 speed is unknown, defaulting to 1000 [ 151.839358][T10103] tipc: Disabling bearer [ 151.847565][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.881183][T10135] bond0: entered allmulticast mode [ 151.886705][T10135] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 151.943160][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.004510][ T5182] Bluetooth: hci2: command 0x0401 tx timeout [ 152.010718][ T5865] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 152.031158][T10129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.097778][T10142] wg1 speed is unknown, defaulting to 1000 [ 152.130780][ T7671] hid-generic 0005:16BF:FFF8.0001: unknown main item tag 0x0 [ 152.143443][ T7671] hid-generic 0005:16BF:FFF8.0001: unknown main item tag 0x0 [ 152.152773][ T7671] hid-generic 0005:16BF:FFF8.0001: reserved main item tag 0xd [ 152.164948][ T7671] hid-generic 0005:16BF:FFF8.0001: item fetching failed at offset 13/14 [ 152.177229][ T7671] hid-generic 0005:16BF:FFF8.0001: probe with driver hid-generic failed with error -22 [ 152.281983][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 152.326839][T10152] netlink: 'syz.3.1139': attribute type 4 has an invalid length. [ 152.359794][T10152] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1139'. [ 152.396814][T10152] Ã: renamed from bond0 [ 152.472886][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 152.513857][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 152.597178][T10173] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1143'. [ 152.650699][T10173] wg1 speed is unknown, defaulting to 1000 [ 152.808597][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.863595][T10183] tipc: Enabled bearer , priority 0 [ 152.888654][T10183] syzkaller0: entered promiscuous mode [ 152.901677][T10183] syzkaller0: entered allmulticast mode [ 153.008990][T10183] tipc: Resetting bearer [ 153.031911][T10182] tipc: Resetting bearer [ 153.057411][T10182] tipc: Disabling bearer [ 153.961858][T10215] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 153.972972][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1160'. [ 154.417082][T10238] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1167'. [ 154.652306][T10249] wg1 speed is unknown, defaulting to 1000 [ 154.844065][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 154.862576][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 155.227578][T10281] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 155.354199][T10295] syzkaller1: entered promiscuous mode [ 155.367503][T10295] syzkaller1: entered allmulticast mode [ 155.428026][T10284] openvswitch: netlink: Key type 11023 is out of range max 32 [ 155.549604][T10309] netlink: 'syz.2.1188': attribute type 12 has an invalid length. [ 155.697359][T10320] tipc: Enabled bearer , priority 0 [ 155.702891][T10328] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.713424][T10320] syzkaller0: entered promiscuous mode [ 155.722892][T10320] syzkaller0: entered allmulticast mode [ 155.763628][T10316] tipc: Resetting bearer [ 155.792405][T10316] tipc: Disabling bearer [ 155.890279][T10343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.960252][T10345] bond0 (unregistering): Released all slaves [ 156.061185][T10361] netlink: 'syz.1.1204': attribute type 3 has an invalid length. [ 156.448941][T10396] netlink: 'syz.1.1215': attribute type 21 has an invalid length. [ 156.706176][T10421] FAULT_INJECTION: forcing a failure. [ 156.706176][T10421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.740038][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.1.1221 Not tainted syzkaller #0 PREEMPT(full) [ 156.740067][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.740078][T10421] Call Trace: [ 156.740086][T10421] [ 156.740094][T10421] dump_stack_lvl+0x189/0x250 [ 156.740124][T10421] ? __pfx____ratelimit+0x10/0x10 [ 156.740151][T10421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.740172][T10421] ? __pfx__printk+0x10/0x10 [ 156.740200][T10421] ? rcu_is_watching+0x15/0xb0 [ 156.740219][T10421] should_fail_ex+0x414/0x560 [ 156.740246][T10421] _copy_to_user+0x31/0xb0 [ 156.740269][T10421] simple_read_from_buffer+0xe1/0x170 [ 156.740298][T10421] proc_fail_nth_read+0x1b3/0x220 [ 156.740320][T10421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.740341][T10421] ? rw_verify_area+0x2a6/0x4d0 [ 156.740376][T10421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.740395][T10421] vfs_read+0x1fd/0xa30 [ 156.740417][T10421] ? fdget_pos+0x247/0x320 [ 156.740435][T10421] ? __pfx___mutex_lock+0x10/0x10 [ 156.740462][T10421] ? __pfx_vfs_read+0x10/0x10 [ 156.740488][T10421] ? __fget_files+0x3a0/0x420 [ 156.740504][T10421] ? __fget_files+0x2a/0x420 [ 156.740524][T10421] ksys_read+0x145/0x250 [ 156.740548][T10421] ? __pfx_ksys_read+0x10/0x10 [ 156.740569][T10421] ? fput+0xa0/0xd0 [ 156.740590][T10421] ? rcu_is_watching+0x15/0xb0 [ 156.740608][T10421] do_syscall_64+0xfa/0x3b0 [ 156.740625][T10421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.740642][T10421] ? clear_bhb_loop+0x60/0xb0 [ 156.740662][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.740679][T10421] RIP: 0033:0x7f8f5558d5fc [ 156.740697][T10421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.740712][T10421] RSP: 002b:00007f8f563bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.740734][T10421] RAX: ffffffffffffffda RBX: 00007f8f557b6090 RCX: 00007f8f5558d5fc [ 156.740749][T10421] RDX: 000000000000000f RSI: 00007f8f563bd0a0 RDI: 0000000000000006 [ 156.740762][T10421] RBP: 00007f8f563bd090 R08: 0000000000000000 R09: 0000000000000000 [ 156.740773][T10421] R10: 0000200000002280 R11: 0000000000000246 R12: 0000000000000001 [ 156.740785][T10421] R13: 00007f8f557b6128 R14: 00007f8f557b6090 R15: 00007fff126cf6d8 [ 156.740811][T10421] [ 157.026768][T10433] __nla_validate_parse: 10 callbacks suppressed [ 157.026793][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'. [ 157.055572][T10433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1228'. [ 157.113441][T10432] wg1 speed is unknown, defaulting to 1000 [ 157.579860][T10469] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20000 [ 157.696243][T10475] netlink: 'syz.3.1237': attribute type 12 has an invalid length. [ 157.746934][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'. [ 157.866937][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 158.017154][T10504] wg1 speed is unknown, defaulting to 1000 [ 158.226133][T10523] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 158.255030][T10523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1249'. [ 158.354159][T10529] syzkaller0: entered promiscuous mode [ 158.359683][T10529] syzkaller0: entered allmulticast mode [ 158.475152][T10504] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 158.486679][T10504] macsec1: entered promiscuous mode [ 158.494169][T10504] ip6gretap0: entered promiscuous mode [ 158.511925][T10542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.565871][T10504] ip6gretap0: left promiscuous mode [ 158.678255][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1255'. [ 158.705475][T10554] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 158.713506][T10554] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1255'. [ 158.959113][T10560] wg1 speed is unknown, defaulting to 1000 [ 159.562805][T10578] tipc: Enabled bearer , priority 0 [ 159.582160][T10578] syzkaller0: entered allmulticast mode [ 159.618558][T10578] sch_tbf: peakrate 10513116347307029938 is lower than or equals to rate 12672136337270591158 ! [ 159.646190][T10578] tipc: Resetting bearer [ 159.667924][T10577] tipc: Disabling bearer [ 159.976207][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 159.993080][T10594] wg1 speed is unknown, defaulting to 1000 [ 159.995986][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.009550][T10602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1270'. [ 160.010245][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.036876][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.072564][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.096011][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.118386][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.142063][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.158459][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.168707][T10599] netlink: 'syz.1.1269': attribute type 29 has an invalid length. [ 160.450120][T10626] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1275'. [ 160.478848][T10626] wg1 speed is unknown, defaulting to 1000 [ 160.490785][T10630] ipvlan2: entered promiscuous mode [ 160.642963][T10633] wg1 speed is unknown, defaulting to 1000 [ 160.683174][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 160.703152][T10637] Bluetooth: MGMT ver 1.23 [ 161.172612][T10656] 8021q: VLANs not supported on vxcan0 [ 161.582205][T10681] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 161.610200][T10679] wg1 speed is unknown, defaulting to 1000 [ 161.806105][T10692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.846760][T10692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.857237][T10692] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.874789][T10692] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 161.951486][T10695] veth11: entered promiscuous mode [ 162.099619][T10698] __nla_validate_parse: 2 callbacks suppressed [ 162.099641][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 162.151355][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 162.164145][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 191.444027][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 191.444316][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.450171][ T5863] Bluetooth: hci2: command 0x0401 tx timeout [ 194.485933][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925656][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.408866][T10717] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1300'. [ 278.428344][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 278.454943][T10715] tipc: Enabled bearer , priority 0 [ 278.465664][T10717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1300'. [ 278.473010][T10716] validate_nla: 25 callbacks suppressed [ 278.473033][T10716] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 278.495620][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 278.502892][T10716] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1299'. [ 278.579805][T10715] syzkaller0: entered promiscuous mode [ 278.589730][T10715] syzkaller0: entered allmulticast mode [ 279.068119][T10729] batman_adv: batadv0: Interface deactivated: dummy0 [ 279.192474][T10729] batadv_slave_0: left promiscuous mode [ 279.216451][T10729] ip6tnl1: left promiscuous mode [ 279.356263][T10709] tipc: Resetting bearer [ 279.499685][T10742] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1307'. [ 279.509083][ T5874] tipc: Node number set to 930191272 [ 279.516817][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 279.596474][T10709] tipc: Disabling bearer [ 279.648367][T10748] wg1 speed is unknown, defaulting to 1000 [ 279.726367][T10753] netlink: 'syz.1.1309': attribute type 11 has an invalid length. [ 279.734818][T10753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1309'. [ 280.050718][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 280.134764][T10763] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1312'. [ 280.145780][T10763] batman_adv: batadv0: Removing interface: dummy0 [ 280.154471][T10763] team0: Port device team_slave_0 removed [ 280.164966][T10763] team0: Port device team_slave_1 removed [ 280.171156][T10763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.191629][T10763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.202729][T10763] batman_adv: batadv0: Removing interface: ipvlan2 [ 280.267152][T10771] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 280.353454][T10776] wg1 speed is unknown, defaulting to 1000 [ 280.403022][T10773] bond0: entered promiscuous mode [ 280.419413][T10773] bond_slave_0: entered promiscuous mode [ 280.430346][T10773] bond_slave_1: entered promiscuous mode [ 280.557667][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 280.945639][T10800] wg1 speed is unknown, defaulting to 1000 [ 281.258077][T10810] syzkaller0: entered promiscuous mode [ 281.268323][T10810] syzkaller0: entered allmulticast mode [ 281.342837][T10813] syzkaller1: entered promiscuous mode [ 281.350017][T10813] syzkaller1: entered allmulticast mode [ 281.362482][T10813] IPVS: Unknown mcast interface: vcan0 [ 281.549240][T10817] tipc: Enabled bearer , priority 0 [ 281.556410][T10826] wg1 speed is unknown, defaulting to 1000 [ 281.704952][T10833] macvlan1: entered promiscuous mode [ 281.729249][T10833] macvlan1: left promiscuous mode [ 281.926772][T10846] lo speed is unknown, defaulting to 1000 [ 281.932834][T10846] lo speed is unknown, defaulting to 1000 [ 281.943513][T10846] lo speed is unknown, defaulting to 1000 [ 281.962258][T10846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 281.993537][T10846] lo speed is unknown, defaulting to 1000 [ 282.001346][T10846] lo speed is unknown, defaulting to 1000 [ 282.010632][T10846] lo speed is unknown, defaulting to 1000 [ 282.020446][T10846] lo speed is unknown, defaulting to 1000 [ 282.029136][T10846] lo speed is unknown, defaulting to 1000 [ 282.057558][T10846] tipc: Enabled bearer , priority 0 [ 282.066083][T10846] syzkaller0: entered promiscuous mode [ 282.071699][T10846] syzkaller0: entered allmulticast mode [ 282.089426][T10845] tipc: Resetting bearer [ 282.098298][T10845] tipc: Disabling bearer [ 282.197857][T10860] lo speed is unknown, defaulting to 1000 [ 282.260547][T10816] tipc: Disabling bearer [ 282.400596][T10869] netlink: 'syz.3.1345': attribute type 13 has an invalid length. [ 282.417646][T10871] netlink: 'syz.2.1346': attribute type 13 has an invalid length. [ 282.858371][T10892] lo speed is unknown, defaulting to 1000 [ 283.224309][T10914] netlink: 'syz.0.1357': attribute type 13 has an invalid length. [ 283.993216][T10948] lo speed is unknown, defaulting to 1000 [ 284.114494][T10954] lo speed is unknown, defaulting to 1000 [ 284.119728][T10956] __nla_validate_parse: 10 callbacks suppressed [ 284.119749][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 284.167523][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 284.186498][T10960] netlink: 'syz.0.1371': attribute type 13 has an invalid length. [ 284.292907][T10966] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 284.304510][T10966] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 284.495516][T10984] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1379'. [ 284.622895][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 284.692597][T10997] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1383'. [ 284.720920][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 284.736804][T11000] macvtap1: entered promiscuous mode [ 284.748386][T11000] bridge0: entered promiscuous mode [ 284.755738][T11000] macvtap1: entered allmulticast mode [ 284.761662][T11000] bridge0: entered allmulticast mode [ 284.773571][T11004] gtp0: entered promiscuous mode [ 284.783686][T11000] netlink: 'syz.4.1384': attribute type 13 has an invalid length. [ 284.791347][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 284.793225][T11004] gtp0: entered allmulticast mode [ 284.828868][T11000] macvtap1: left promiscuous mode [ 284.834092][T11000] bridge0: left promiscuous mode [ 284.839328][T11000] macvtap1: left allmulticast mode [ 284.848230][T11000] bridge0: left allmulticast mode [ 284.858723][T11000] macvtap1: refused to change device tx_queue_len [ 284.868506][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 284.931218][T11005] lo speed is unknown, defaulting to 1000 [ 284.943161][T11012] lo speed is unknown, defaulting to 1000 [ 285.391020][T11043] netlink: 'syz.3.1397': attribute type 13 has an invalid length. [ 285.402786][T11042] ªªªªªª: renamed from wg2 [ 285.421225][T11039] tipc: Enabled bearer , priority 0 [ 285.428584][T11041] delete_channel: no stack [ 285.563534][T11043] gretap0: refused to change device tx_queue_len [ 285.570567][T11043] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.629751][T11039] syzkaller0: entered promiscuous mode [ 285.643860][T11039] syzkaller0: entered allmulticast mode [ 285.675871][T11049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1399'. [ 285.685456][T11049] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1399'. [ 285.879812][T11038] tipc: Resetting bearer [ 285.915298][T11038] tipc: Disabling bearer [ 285.935441][T11062] lo speed is unknown, defaulting to 1000 [ 286.231019][T11091] lo speed is unknown, defaulting to 1000 [ 286.425948][T11104] netlink: 'syz.0.1412': attribute type 13 has an invalid length. [ 286.505931][T11106] lo speed is unknown, defaulting to 1000 [ 286.554757][T11111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.603589][T11104] lo speed is unknown, defaulting to 1000 [ 287.279070][T11130] lo speed is unknown, defaulting to 1000 [ 287.840590][T11147] netlink: zone id is out of range [ 288.520567][T11164] lo speed is unknown, defaulting to 1000 [ 288.718630][T11171] lo speed is unknown, defaulting to 1000 [ 288.796802][T11173] lo speed is unknown, defaulting to 1000 [ 289.302219][T11185] tipc: Enabled bearer , priority 0 [ 289.397794][T11185] tipc: Disabling bearer [ 289.915800][T11213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.006745][T11214] __nla_validate_parse: 1 callbacks suppressed [ 290.006767][T11214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1440'. [ 290.231904][T11217] lo speed is unknown, defaulting to 1000 [ 290.688328][T11249] lo speed is unknown, defaulting to 1000 [ 290.938772][T11258] tipc: Enabled bearer , priority 0 [ 290.949648][T11258] syzkaller0: entered promiscuous mode [ 290.975415][T11258] syzkaller0: entered allmulticast mode [ 290.991882][T11258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1450'. [ 291.004061][T11258] tipc: Resetting bearer [ 291.012893][T11256] tipc: Resetting bearer [ 291.029291][T11256] tipc: Disabling bearer [ 291.393286][T11279] lo speed is unknown, defaulting to 1000 [ 291.482821][T11289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1461'. [ 291.764020][ C1] ================================================================== [ 291.772258][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 291.780202][ C1] Read of size 2 at addr ffff888032a8202a by task syz-executor/5856 [ 291.788300][ C1] [ 291.790653][ C1] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 291.790679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.790691][ C1] Call Trace: [ 291.790699][ C1] [ 291.790706][ C1] dump_stack_lvl+0x189/0x250 [ 291.790732][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.790752][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.790771][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.790788][ C1] ? lock_release+0x4b/0x3e0 [ 291.790814][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 291.790836][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 291.790858][ C1] print_report+0xca/0x240 [ 291.790876][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.790898][ C1] kasan_report+0x118/0x150 [ 291.790923][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.790948][ C1] rose_timer_expiry+0x471/0x4b0 [ 291.790973][ C1] call_timer_fn+0x17e/0x5f0 [ 291.790997][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.791020][ C1] ? call_timer_fn+0xbe/0x5f0 [ 291.791044][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 291.791070][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.791087][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.791111][ C1] __run_timer_base+0x61a/0x860 [ 291.791133][ C1] ? ktime_get+0x3e/0x1f0 [ 291.791158][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 291.791179][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 291.791207][ C1] run_timer_softirq+0xb7/0x180 [ 291.791230][ C1] handle_softirqs+0x283/0x870 [ 291.791249][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 291.791269][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 291.791288][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 291.791311][ C1] __irq_exit_rcu+0xca/0x1f0 [ 291.791327][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 291.791349][ C1] irq_exit_rcu+0x9/0x30 [ 291.791365][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 291.791390][ C1] [ 291.791397][ C1] [ 291.791404][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.791423][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 291.791444][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b b3 b6 f5 cc [ 291.791460][ C1] RSP: 0018:ffffc900041ef280 EFLAGS: 00000286 [ 291.791479][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4fe2e12a090e3800 [ 291.791491][ C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 291.791512][ C1] RBP: ffffffff822e4fad R08: 0000000000000000 R09: 0000000000000000 [ 291.791524][ C1] R10: dffffc0000000000 R11: fffff940002f5f61 R12: 0000000000000002 [ 291.791536][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000 [ 291.791549][ C1] ? page_table_check_set+0x18d/0x730 [ 291.791578][ C1] rcu_is_watching+0x15/0xb0 [ 291.791595][ C1] lock_acquire+0x5f/0x360 [ 291.791619][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.791636][ C1] ? pfn_valid+0xba/0x490 [ 291.791657][ C1] ? pfn_valid+0xba/0x490 [ 291.791678][ C1] ? page_table_check_set+0x18d/0x730 [ 291.791701][ C1] page_table_check_set+0x1aa/0x730 [ 291.791723][ C1] ? page_table_check_set+0x18d/0x730 [ 291.791748][ C1] copy_pmd_range+0x4439/0x71d0 [ 291.791782][ C1] ? stack_depot_save_flags+0x40/0x860 [ 291.791810][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 291.791832][ C1] ? kasan_save_track+0x4f/0x80 [ 291.791852][ C1] ? kasan_save_track+0x3e/0x80 [ 291.791872][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 291.791893][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 291.791915][ C1] ? vm_area_dup+0x2b/0x680 [ 291.791939][ C1] ? copy_mm+0x13c/0x4b0 [ 291.791958][ C1] ? mas_wr_walk_descend+0x543/0x880 [ 291.791988][ C1] copy_page_range+0xc14/0x1270 [ 291.792016][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 291.792037][ C1] ? up_write+0x1c4/0x420 [ 291.792055][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 291.792076][ C1] dup_mmap+0xf57/0x1ac0 [ 291.792109][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 291.792137][ C1] ? mm_init+0xcc3/0xef0 [ 291.792159][ C1] copy_mm+0x13c/0x4b0 [ 291.792180][ C1] copy_process+0x1706/0x3c00 [ 291.792208][ C1] ? copy_process+0x97f/0x3c00 [ 291.792231][ C1] ? __pfx_copy_process+0x10/0x10 [ 291.792249][ C1] ? ___pte_offset_map+0x45/0x250 [ 291.792276][ C1] kernel_clone+0x21e/0x840 [ 291.792298][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 291.792315][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 291.792338][ C1] ? count_memcg_event_mm+0x21/0x260 [ 291.792363][ C1] __x64_sys_clone+0x18b/0x1e0 [ 291.792386][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 291.792416][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 291.792447][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.792468][ C1] do_syscall_64+0xfa/0x3b0 [ 291.792486][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.792515][ C1] ? clear_bhb_loop+0x60/0xb0 [ 291.792536][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.792556][ C1] RIP: 0033:0x7fad96385453 [ 291.792574][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 291.792590][ C1] RSP: 002b:00007ffc6176b238 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 291.792611][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad96385453 [ 291.792624][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 291.792637][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 291.792649][ C1] R10: 000055557c0077d0 R11: 0000000000000246 R12: 0000000000000000 [ 291.792662][ C1] R13: 00000000000927c0 R14: 000000000004735b R15: 00007ffc6176b3d0 [ 291.792684][ C1] [ 291.792691][ C1] [ 292.355444][ C1] Allocated by task 6465: [ 292.359909][ C1] kasan_save_track+0x3e/0x80 [ 292.364707][ C1] __kasan_kmalloc+0x93/0xb0 [ 292.369671][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 292.375155][ C1] batadv_forw_packet_alloc+0x1e9/0x390 [ 292.380822][ C1] batadv_iv_ogm_queue_add+0x85f/0xd30 [ 292.386432][ C1] batadv_iv_ogm_schedule+0xb48/0xf00 [ 292.392018][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 292.399133][ C1] process_scheduled_works+0xae1/0x17b0 [ 292.404690][ C1] worker_thread+0x8a0/0xda0 [ 292.409536][ C1] kthread+0x70e/0x8a0 [ 292.413625][ C1] ret_from_fork+0x3f9/0x770 [ 292.418216][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.423112][ C1] [ 292.425451][ C1] Freed by task 13: [ 292.429275][ C1] kasan_save_track+0x3e/0x80 [ 292.433980][ C1] kasan_save_free_info+0x46/0x50 [ 292.439113][ C1] __kasan_slab_free+0x5b/0x80 [ 292.444048][ C1] kfree+0x18e/0x440 [ 292.448069][ C1] process_scheduled_works+0xae1/0x17b0 [ 292.453634][ C1] worker_thread+0x8a0/0xda0 [ 292.458256][ C1] kthread+0x70e/0x8a0 [ 292.462367][ C1] ret_from_fork+0x3f9/0x770 [ 292.467077][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.472150][ C1] [ 292.474522][ C1] Last potentially related work creation: [ 292.480356][ C1] kasan_save_stack+0x3e/0x60 [ 292.485331][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 292.490554][ C1] insert_work+0x3d/0x330 [ 292.494915][ C1] __queue_work+0xbaf/0xfb0 [ 292.499536][ C1] call_timer_fn+0x17e/0x5f0 [ 292.504129][ C1] __run_timer_base+0x646/0x860 [ 292.509183][ C1] run_timer_softirq+0xb7/0x180 [ 292.514037][ C1] handle_softirqs+0x283/0x870 [ 292.518803][ C1] __irq_exit_rcu+0xca/0x1f0 [ 292.523430][ C1] irq_exit_rcu+0x9/0x30 [ 292.527744][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 292.533520][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.539552][ C1] [ 292.541990][ C1] The buggy address belongs to the object at ffff888032a82000 [ 292.541990][ C1] which belongs to the cache kmalloc-512 of size 512 [ 292.556580][ C1] The buggy address is located 42 bytes inside of [ 292.556580][ C1] freed 512-byte region [ffff888032a82000, ffff888032a82200) [ 292.571014][ C1] [ 292.573544][ C1] The buggy address belongs to the physical page: [ 292.580060][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32a80 [ 292.588923][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.597517][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 292.605580][ C1] page_type: f5(slab) [ 292.609564][ C1] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 292.618422][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.627072][ C1] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 292.636012][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.644702][ C1] head: 00fff00000000002 ffffea0000caa001 00000000ffffffff 00000000ffffffff [ 292.653404][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 292.662340][ C1] page dumped because: kasan: bad access detected [ 292.668857][ C1] page_owner tracks the page as allocated [ 292.674576][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5869, tgid 5869 (syz-executor), ts 68749434051, free_ts 68673356489 [ 292.695936][ C1] post_alloc_hook+0x240/0x2a0 [ 292.700728][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 292.706608][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 292.712688][ C1] alloc_pages_mpol+0x232/0x4a0 [ 292.717894][ C1] allocate_slab+0x8a/0x370 [ 292.722583][ C1] ___slab_alloc+0xbeb/0x1410 [ 292.727349][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 292.732764][ C1] inetdev_init+0x7d/0x500 [ 292.737187][ C1] inetdev_event+0x301/0x15b0 [ 292.741868][ C1] notifier_call_chain+0x1b3/0x3e0 [ 292.747005][ C1] register_netdevice+0x1608/0x1ae0 [ 292.752256][ C1] veth_newlink+0x42f/0xa50 [ 292.756867][ C1] rtnl_newlink_create+0x30d/0xb00 [ 292.761990][ C1] rtnl_newlink+0x16d6/0x1c70 [ 292.766737][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 292.772036][ C1] netlink_rcv_skb+0x205/0x470 [ 292.776806][ C1] page last free pid 5869 tgid 5869 stack trace: [ 292.783365][ C1] __free_frozen_pages+0xbc4/0xd30 [ 292.788504][ C1] __put_partials+0x156/0x1a0 [ 292.793183][ C1] put_cpu_partial+0x17c/0x250 [ 292.797948][ C1] __slab_free+0x2d5/0x3c0 [ 292.802357][ C1] qlist_free_all+0x97/0x140 [ 292.807220][ C1] kasan_quarantine_reduce+0x148/0x160 [ 292.812790][ C1] __kasan_slab_alloc+0x22/0x80 [ 292.817792][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 292.823845][ C1] __alloc_skb+0x112/0x2d0 [ 292.828466][ C1] netlink_ack+0x146/0xa50 [ 292.833041][ C1] netlink_rcv_skb+0x28c/0x470 [ 292.838081][ C1] netlink_unicast+0x82f/0x9e0 [ 292.843461][ C1] netlink_sendmsg+0x805/0xb30 [ 292.848723][ C1] __sock_sendmsg+0x219/0x270 [ 292.853452][ C1] __sys_sendto+0x3bd/0x520 [ 292.858335][ C1] __x64_sys_sendto+0xde/0x100 [ 292.863214][ C1] [ 292.865561][ C1] Memory state around the buggy address: [ 292.871297][ C1] ffff888032a81f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.879376][ C1] ffff888032a81f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.887432][ C1] >ffff888032a82000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.895500][ C1] ^ [ 292.900900][ C1] ffff888032a82080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.908959][ C1] ffff888032a82100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.917052][ C1] ================================================================== [ 292.925382][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.933025][ C1] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 292.942512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.952568][ C1] Call Trace: [ 292.955942][ C1] [ 292.958834][ C1] dump_stack_lvl+0x99/0x250 [ 292.963443][ C1] ? __asan_memcpy+0x40/0x70 [ 292.968106][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.974498][ C1] ? __pfx__printk+0x10/0x10 [ 292.979328][ C1] vpanic+0x281/0x750 [ 292.983360][ C1] ? __pfx_vpanic+0x10/0x10 [ 292.987979][ C1] ? rcu_is_watching+0x15/0xb0 [ 292.992772][ C1] panic+0xb9/0xc0 [ 292.996541][ C1] ? __pfx_panic+0x10/0x10 [ 293.001064][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 293.007337][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 293.013312][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 293.018595][ C1] check_panic_on_warn+0x89/0xb0 [ 293.023647][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 293.028796][ C1] end_report+0x78/0x160 [ 293.033065][ C1] kasan_report+0x129/0x150 [ 293.038015][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 293.043152][ C1] rose_timer_expiry+0x471/0x4b0 [ 293.048108][ C1] call_timer_fn+0x17e/0x5f0 [ 293.052942][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 293.058673][ C1] ? call_timer_fn+0xbe/0x5f0 [ 293.063547][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 293.068779][ C1] ? rcu_is_watching+0x15/0xb0 [ 293.073540][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 293.078996][ C1] __run_timer_base+0x61a/0x860 [ 293.083846][ C1] ? ktime_get+0x3e/0x1f0 [ 293.088188][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 293.093659][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 293.099914][ C1] run_timer_softirq+0xb7/0x180 [ 293.104772][ C1] handle_softirqs+0x283/0x870 [ 293.109621][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 293.114415][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 293.119823][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 293.125253][ C1] __irq_exit_rcu+0xca/0x1f0 [ 293.129861][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 293.135099][ C1] irq_exit_rcu+0x9/0x30 [ 293.139355][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.145171][ C1] [ 293.148112][ C1] [ 293.151039][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.157032][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 293.162401][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b b3 b6 f5 cc [ 293.182354][ C1] RSP: 0018:ffffc900041ef280 EFLAGS: 00000286 [ 293.188464][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4fe2e12a090e3800 [ 293.196622][ C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 293.204709][ C1] RBP: ffffffff822e4fad R08: 0000000000000000 R09: 0000000000000000 [ 293.212815][ C1] R10: dffffc0000000000 R11: fffff940002f5f61 R12: 0000000000000002 [ 293.220984][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000 [ 293.228974][ C1] ? page_table_check_set+0x18d/0x730 [ 293.234556][ C1] rcu_is_watching+0x15/0xb0 [ 293.239265][ C1] lock_acquire+0x5f/0x360 [ 293.243730][ C1] ? rcu_is_watching+0x15/0xb0 [ 293.248633][ C1] ? pfn_valid+0xba/0x490 [ 293.252984][ C1] ? pfn_valid+0xba/0x490 [ 293.257375][ C1] ? page_table_check_set+0x18d/0x730 [ 293.262861][ C1] page_table_check_set+0x1aa/0x730 [ 293.268069][ C1] ? page_table_check_set+0x18d/0x730 [ 293.273473][ C1] copy_pmd_range+0x4439/0x71d0 [ 293.278349][ C1] ? stack_depot_save_flags+0x40/0x860 [ 293.283836][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 293.289147][ C1] ? kasan_save_track+0x4f/0x80 [ 293.294354][ C1] ? kasan_save_track+0x3e/0x80 [ 293.299207][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 293.304299][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 293.309997][ C1] ? vm_area_dup+0x2b/0x680 [ 293.314515][ C1] ? copy_mm+0x13c/0x4b0 [ 293.318877][ C1] ? mas_wr_walk_descend+0x543/0x880 [ 293.324190][ C1] copy_page_range+0xc14/0x1270 [ 293.329251][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 293.334621][ C1] ? up_write+0x1c4/0x420 [ 293.338970][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 293.345750][ C1] dup_mmap+0xf57/0x1ac0 [ 293.350021][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 293.354713][ C1] ? mm_init+0xcc3/0xef0 [ 293.358964][ C1] copy_mm+0x13c/0x4b0 [ 293.363024][ C1] copy_process+0x1706/0x3c00 [ 293.367870][ C1] ? copy_process+0x97f/0x3c00 [ 293.372635][ C1] ? __pfx_copy_process+0x10/0x10 [ 293.377735][ C1] ? ___pte_offset_map+0x45/0x250 [ 293.383024][ C1] kernel_clone+0x21e/0x840 [ 293.387703][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 293.392983][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 293.398064][ C1] ? count_memcg_event_mm+0x21/0x260 [ 293.403461][ C1] __x64_sys_clone+0x18b/0x1e0 [ 293.408333][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 293.413623][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 293.418907][ C1] ? rcu_is_watching+0x15/0xb0 [ 293.423721][ C1] do_syscall_64+0xfa/0x3b0 [ 293.428230][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.434290][ C1] ? clear_bhb_loop+0x60/0xb0 [ 293.438965][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.444935][ C1] RIP: 0033:0x7fad96385453 [ 293.449345][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 293.469642][ C1] RSP: 002b:00007ffc6176b238 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 293.478149][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad96385453 [ 293.486156][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 293.494324][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 293.502541][ C1] R10: 000055557c0077d0 R11: 0000000000000246 R12: 0000000000000000 [ 293.510626][ C1] R13: 00000000000927c0 R14: 000000000004735b R15: 00007ffc6176b3d0 [ 293.518791][ C1] [ 293.522189][ C1] Kernel Offset: disabled [ 293.526732][ C1] Rebooting in 86400 seconds..