last executing test programs: 4.876336274s ago: executing program 1 (id=3770): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r5}, 0x14) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x3, 0x1, "132b76", 0x8, 0x8d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="11a803888f98b01af8b78141c11d87c8f973c48b185c06b423e2ab0cb01967b7dff196f81b00f7a8b3ea881c18788d80c605a8", 0x33}], 0x1}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 3.769576951s ago: executing program 1 (id=3777): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) (async) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) (async) 3.347928216s ago: executing program 1 (id=3782): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10058, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x63a42, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x63a42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket(0xa, 0x3, 0x3a) (async) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC_PROXY(r10, 0x29, 0xd3, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000001c0000002000018014000200766c616e31000000000000000000000008000100", @ANYRES32=r3], 0x34}}, 0x0) 2.970045268s ago: executing program 1 (id=3788): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xd7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 2.772121372s ago: executing program 1 (id=3790): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x1000000, 0xb, 0xffffffff, 0x2}, 0x10}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r1, 0x2, {0x1, 0x1, 0x4}}, 0x18, &(0x7f0000000200)={&(0x7f00000000c0)="eabf501030592a9902ba953998d8073cc011deecf2ea8f6fc65a66d6c905b5028c1c5eb3bf08430c7c8bd999d1a3d25854e49a01d4f06283a4a1b34e3f0cbddb56c4cfdc6647d7b3001173f74f7badf749df2b350448faf574f848efc08da41df989d144fff8812dd5ec38587b866118ab3d62b0902003c22384403bd969ab26d5c8fee660e621424116fa3cc53650798b0cd9568671f2e3a94a1b67a26418e90d84e9bdcf02c6669fdb71780bc6ae8008f4f8d01934fa9e0125fc5abc2680c3c2552917d6c98e01ff0a056c564f36edf62933f5a6941bdd4054fad992dfa1e3b913f66f", 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 2.593581496s ago: executing program 1 (id=3795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c"], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4018, r0}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.460637871s ago: executing program 2 (id=3797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'bond0\x00', 0x5}) 2.451340079s ago: executing program 0 (id=3798): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x45, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x9}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e4000000000000000000c7ff528f3b658ee1000000"], 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="070000000000fdbfdf250800001808000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=0xffffffffffffffff], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)={0x220, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ID={0x87, 0x3, "2e6dd4a399e2e8d3a289d327e239d4a3df08c23e7ed3be0961d6515481294c3a73a920dd815d3552bf3ef8f87a56a85a6b29b3bac0f10ab0665adb22b3581c721325a29e7f1980a1d8e3f6b1ff6f1ddc13ab66afae899353b8eb243a6157ecc32e174514742467e2836a297817a83fe0432a8cbb1e5b29eca3f29725660d05ed739a45"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000218}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x20004014) read(r4, &(0x7f0000000000)=""/7, 0x7) socket$l2tp(0x2, 0x2, 0x73) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) bind$netlink(r10, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, r11, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x2000000000000002, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xaf, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800492000a1046800004006907864010102e0000001880f277d4b6b0aac2f581d7c750c3f004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700100069078040100050f31c74458c887e7194ea62d88f3000fe87643d73e3e0ac4911cda87c00402fe0bf98900000000000000020408000303ef220ec74e1794724b319f682bb8e1fe06e2d4c3d90080d1618089b1c3075c84f71679b64f8a7f2fd2290af399d58ddc6be33b49cbdc4f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.24522803s ago: executing program 2 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000fcff00"/25], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24060400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000feff07000800000000000000", @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f00000000c0)=""/76}, 0x67) socket$inet(0x2, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, r4) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) sendfile(r4, r3, 0x0, 0xf03a0005) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x82710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) pwrite64(r1, 0x0, 0x0, 0x7fffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000780)="8c0591ce8715a4839e8dba75152da061d4839ea55b5b19446f0dff57001576aa13119bf8693a11f5d3ee862bdf7ade47af40c2f0ddfd17acdf38f6bac83825d38f3e4f7e0108eba7883299714facdecda848eb542943071ab4c7688bf843b8e46ba978429b902145cf82f8eeea5659d0b8f7c8c411af133d50acc6de58f6b6a684b0bb63bf720fe2c9eeca14cf673f2c99bf5ae7834f62d5403b0de34a0ebb7f6d39401d3741f62a2fff85f0edc7085598f8ce50f20cb14ed377c58fbcb273297f454cdc0a05be19b3caf6f42f68e3e661348510d417994887efaabfba5abf", 0xdf}, {&(0x7f0000000480)="008c89505bd8f38efbf9c9330a13fe5e6555f6ad082ee8d05bd40bec62b4cc6718d1fc2e8e1c275460e6fdfc4ba49241700beebc2859afe01953cf07c875a8bca0423ce5dc18d352672bb2600d1e97751f9596020953840aa31a3a780bd31bc6be7a68fd977c7d06b553a4f945006a36bb2b0e3979c2ad05ef057e4d774735b510c65d8bb45dd30a3595297831be8598d695850f53dea4ee346f45c7016e54228d557b16c8b91f4efe1503849589889ec743bd80378dcae986a3207237916d1c81da5141982d304a591dd36275e64f6fca6051bff2be1aa550e1fdf5a71da5301616", 0xe2}, {&(0x7f0000000580)="5831585ffc01b3d92eff50f8a02f108c1061adc3ed80514cc5bc463c5471a72d79cb79c5089d00f1305c2007ebed57d5c036eea9caf300cb8fbc69dc1f554d3d0d8770fbb751415f96aa73dbcf3aacffc41487f516923fbc4f40f3fe961040d02ec3309991157444ff3ea935d33be0eedc9d18a80986f235ab2d9088303bedcadc225cbbda7a0244989a6cc7a8fa5f49a3e2943c56e096d9d106fc044241b2bd174f677b04321fae4ccbd45a6b2276cf236ad26236ab9f2345cf21913fd0970526cc2b1914ea240eb0af17126a5292c3a7", 0xd1}, {&(0x7f0000000180)="c64e285724c7d81cc9", 0x9}, {&(0x7f00000001c0)="bfbf635bd64ffe3fdfd95871aa1d595c4cf598d651608c46e18fc8b265f97305050013933b3756c6", 0x28}], 0x5, &(0x7f0000000680)="27c5158c2105f737b7f3b85a5ddebab3b7133ef255ff2bc29254bf7de585162ebfa3d37d6db4d85d0f17597f5f699d3e3f2ce48105c0bcde9792fb5563878bbace2b079c10844c00b769c46bdfdcf750e5d4f9c5b28f0b7b247e75251d83c603d3ada988571e6eef53ebd559f1e13e36bf2497b8e26a9811723c9105340992e67fdd431bb2ad7e31c6c6dcb710ffb23ec3d7887b70f7427a3a522b3a6b137607f2ff690c6cf769bb4a0cfb9457096b169750fe8ea375d1fe1596b9bebbbaeeb72742d9ea8a306f46538cf5f72a776e917b67ea0f40ada669aec09329c25b82042b02c56bd5c4af68d923c7467595e91fce36d1b6", 0xf4, 0x20040010}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r11, 0x25, 0x11, @val=@perf_event={0x9}}, 0x18) 1.9039305s ago: executing program 3 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1eae8f721276f1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x10, 0x4020011, r2, 0x59b91000) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="270e0000400000000000040702001400020074756e6c3000000000000000000000000900030073797a3100000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6(0xa, 0x6, 0x20005) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a5c000000090a010320000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000000008080007400000002e080006400000000008000f4000000002140000001000010000000000000000000084000a"], 0x84}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001100010100"/20, @ANYRES32=r10, @ANYBLOB="0000020421400040080063dd65470000"], 0x28}}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, 0x0, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 1.90336891s ago: executing program 0 (id=3804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000940)='Q', 0x1}], 0x2}}], 0x1, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x2c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.799033145s ago: executing program 2 (id=3805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) nanosleep(0x0, &(0x7f0000000c00)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x2, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000010c0)={0x2, 'geneve1\x00', {0x4c8a}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rss_stat\x00', r5, 0x0, 0x2000000000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000000540)=""/4088, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = accept4(r2, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000f7", @ANYRES16=0x0, @ANYBLOB="00082ebd7000fedbdf2501000000780008807400008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a0001000000240002000c01d6723668f69627ccc9a8dd62dd3c36bb47fe57577a8d4f992c2a8794ab97200004000a004e240000000300000000000000000000ffff0a010100ffffff7f0800070001010000"], 0x94}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 1.535858528s ago: executing program 2 (id=3806): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0x40000008}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.456068725s ago: executing program 0 (id=3807): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000084) (async) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140), 0x2}, 0x2}], 0x1, 0x10002, 0x0) (rerun: 64) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0500004800e5ffffffffffddf0ffff00a91f38dc75d110c66c5a33763544d99019fc86e847578177ea8e556969463c749a8817df7fa3c5b72203e41eba2e4e7bf37092a4704a9fe777168f3dc373571f7e13718da158bf2b96599b0900000000000000531640613520591c72e91e02ae5cd3248dbf9585fda543db39dfdec5afa0dab183945718b7352370e14709f038dcce80e14278fc475195121d30303e00f766d3ba72cd1bf275d8fde35518201b86017ff7da3011c0d05b30cba516dbf0d3d89177e4ce1552fef35bdf19426252cb58d237eca596644a6609ab7cd6bcbd5454e71710ef063d34c2cf741455bce86b68c7246408a636671a81d549a5199907dc1aa879f2d57ab1be1c458b7ad2ae7616956ad2f0787143f107147e5d3f111fd6732af60c3d5aa8712821bcb0ac5de675fc20d64341c9b57bc896542229c75e4f9d5d97b35b0579bc4b70da872384aea7a44ffd0b26645095aece3e5b13c0bd53c027ca68ef2645acf9d85dcb082c484b9fcaee781d2c443d78fb60e5bd107db98050ceaf884f1f4e7c8926430b1979a2e96e4e33577b55e328b9b17e1032890698b25617a10eb1c1f514e1c3084fe6912aa953788cc73139f4e294d1ff744c86ba6709c5c4f0e55ca1ada44957b70fa9d684fd4d4c0dea7dbc0f84748148ed205c0bd36e270b08aecaf100da268b57827c2e5354e2d5299051", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x6}}, 0x14}}, 0xc00) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) connect$netlink(r3, &(0x7f0000000000)=@unspec, 0xc) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet(0x2, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x20044041) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) bind$unix(r6, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.442515713s ago: executing program 3 (id=3808): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1.404395741s ago: executing program 2 (id=3809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f9ffffff000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018100000", @ANYRES32=0x1, @ANYBLOB="000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000009479180000000002017ffffffffffff180000000900000000000000ffffff7f9500375e3842a982"], &(0x7f0000000200)='GPL\x00', 0x3, 0xca, &(0x7f0000000a40)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000540)=[{0x0, 0x1, 0x10, 0xaef1f809d7b9907}, {0x4, 0x5, 0x4, 0xb}, {0x0, 0x3, 0xa, 0xb}], 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000580)={{}, [@null, @bcast, @remote, @bcast, @rose, @netrom, @netrom, @bcast]}, &(0x7f00000006c0)=0x48, 0x800) accept$netrom(r6, &(0x7f0000000c80)={{0x3, @rose}, [@netrom, @default, @remote, @null, @default, @rose, @default, @null]}, &(0x7f0000000c00)=0xffffff49) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000940)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000001180)={{r9}, r10, 0x0, @unused=[0x6, 0x7, 0x9, 0x3], @name="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"}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000c80), 0x8000, r11}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.32779993s ago: executing program 0 (id=3810): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000200000000b702000014000000b7030000530000008500000005000000bca90000300000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.327514363s ago: executing program 3 (id=3811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e000100000100006f0000ae9e51"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) 1.277467485s ago: executing program 0 (id=3813): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001", @ANYBLOB="955cdc4eedbc5325f737f3bbea9a9a3d20893a32a2a391b240c5164faf05a3b45d4cb6ff9a60b667079e7a439b005216222082433bef28467f512743516ec3d516a34d99fdb3cf76e217bcf9a44cba9f8949ef874558d52adf3bd5baed6c12a45f15b67f4925ba55ad19421b2ae1ed0de6827324e7858a99c1b8ee3fd03998aa8979faeae37edaa4a7e37e1f0203e9a8a7765edd8351b89304ff9c58eca4659da8d9639f2aa259358e0f5e6aecfcd9ad4de68e15b8acfc4709b358b6b2e608c3af0b66ca50fd355521f88d10c9896c80d0782ed0f8d8370916049945e6893b43b95f8e43fe62f5aaeda821e6d0f5b36d9d0db1e7fb7fc3d438f5ad7021816ece80290cd764f4cfd1", @ANYRESHEX=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000002c0)="8bd28a6b3ef2f316a95732beb26f22e451bfdd60e38cbf18a838db24cf28c2150f12e242c190aeba7b83c1ec2f31d5e4fe87da5957d70d462282306f4c3e6aa706ba236b5e1b0e8442e7481624936a93904290bffa29f2ce4428f777076373ee7bc9e68ea1bad03ae52cd6053ababd659eba11025363ed8beefa0256bda790a684f15af1e6783e5f3c658b38d59cb84beda10a39b3998da03a3cbfb0764f248943a5e8d8f6011e67448480873a4d59005f81523e7a63548db5a32f91adbaa9748f66fce91ce4b8ce9ea86ddce6", &(0x7f00000003c0)=""/144, &(0x7f0000000480)="7a6742015fc9e9b7edd7422726c050b4f997db7cdd504b73258afd45aad58adeda616296b136b99d39d99500900a65298b50fcd8b4e48286638b80c0ba7a749cbf7e2512ef627efd59a5d7318c992558930c151f9baa57d8dbd6095eb15422eb75ba5aa54c3fa3df153aa981eb75528f9130170aa875973826642f27fcec76d8c9068da2626cca9780656106164c7f5749fad4c4d9c83a458dbc3415a8736a57b16c6f65694bf953424f028702", &(0x7f0000000040)="16318916157a1a2cbb7f3c7820803c8463107ec101609151ca73efc17502440572661e603ca630d1ff2c3b27904fff6da399b116acd647abd357520d41350660f4c927f80ec1594ebe3aaa7944fb2f1114d16a4c07f498a29218acea95fedd50", 0x9, r2}, 0x38) 1.245191319s ago: executing program 4 (id=3814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f0000001440)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fef2e1e2e3bcdf3fe633f09f44363b28eec64030d7269c6024f118efe0eaeda4ce2ffd74748748ea9e1f264a4efc5eb41bc90831fc6d70a3bb367f094dd21b1165959e0a48e43d1e01976a1b9b430e28acd780f7ea7bb157a161644979b927f6c7109538395a73f29cfbc4b79f775dc80ac55ec12ebf839793e3a665921c15820a20298addeb88eddabce5fcef43cc3e81dd4aa8a5f84a0f9f996f3705c0e88146b1e19b21aee9d4143adf57e60a482507714ac4d52d2d2160cdf2809ec84ec9d77d208fd5f432ec3b99343b90e4acc82033da76f34a63a14afae361533e1fcfa6af0a79632c6c794fc1ec142eac90249a1a805b5ed73226f01b33f95f41fbdc2e25e8dc53cc7ac7ba242d904c7899c839d4c5d9d919e67aa15d9ae4f4da9b080bc0b124af94583cecfb08dcebbe5fe70f2a73d727e5c1e7c402e82497e1596c92fecce9b0f83c7e99bafd08c953529186c98acd728b4885c70664b516100cc7dccbb3b2cb72889564dbe9e8bb4df5ec61b60215a8b0093a47f45be324de9ce13e2cdb02e70945d0bb9931061f0c559b4137e04f6b7d94795a11242565485ca654ccdec9dabfd5a344652dfc9a74fd89fd578408671e2745062713d7fc50486abe3c226b139058f2f9c1cdf0301bbcc388a4ac6ed2ad38f54fe1e4d88e316c15ac1039281b1a74ed890174d4c80a28ce29b05a223e07ad8c4a378a2b44ce349bc74ae73af2852130f7ad525c3853e2328fa12ff7b8444c1ec39a46b1c47ed2d7918d09a70b3d3ea39c16d17f397bccd069b62e231c5d251373de33602641d4220da1f3fb62f55989fbe379f35aa578949a3cdcc638befddd2e24d898d25ef9508467ac6d8952cb2fb9b7a5a9eb5238fb8e1cfc8bd967d2ad877ccbcad2a8f1c41b5e2b779df09ba8596ea37ed93a1dba30df412834a89b9510c42dbd697470087dd4c3c8458b177705a9aea6b5c26ac5999290bd63fa10c441cbdeb24f5918522f1cfd512b9627ecd59f275f0c469dc6e3b12e8a5a5a9a13b134ddd31b5a6feef3f6b9df2165291487f9397a95b18c6e800a4c7bd127dbc2c62a8f70368cf43b0d120fbc681fa781fde92df025871dbab0af3104eceb3187b7f7d5d7957047f30b6b03fdf26ede899d807725bd584a7380732f915089d775d45ff2620db6656e3c8efd52d3951b4aa52fddd9355581a6ba83192f93b285b7025bb524106c2633254a41868770cd6c8c539b9a83875a43bc4040ab1f31a4bfa99059b689318f01ee8e36525c5ed85fab4192d68c39f025b6762f0ed0acd647bb04436cd12bcba484baadb4b47c2e629b757943cf753c4cd330878f3bcd217b52ef916af4abaecb7c9ca7386e6c3458b89cae0391ec3b567e0a1ee45b7167e38507a5466b61e1defec4019a07efd4f524d55a431b7701c3bad1c0939ef7096e7ab4f5d4ee933a89c60413d299f96ce2e9da028cc17ef7b278307e224dc011a043cad95e0ce14aa55e5c1e03b224e081689cd064080286f30344941f17675c688b11544030e6277423da966e99fe1522ad5f8b37314113f8f78c152d18881148e97bd174dfd04951490c7aa3e344b8c02ff14cc3c61369825ed3d5155057c3f9ea645d094545179ddcf17ff75e549da3e28a9848b6e7d4432535ed7b04cd8b61933d68cccd8a056b949c16cbcb7b500c302837067face71a411e65950771ca68cfbb60f70d7aa9f81db96413e56fc92aa714452909158dc7f7478e8623a4e59ddce28e3c08726e1e28857f80891c12be40ec3543a384e5b95194c3b78c7f7f987e9a051fb56e0e17285bab975858d41b56c176ccaabdadadc88d51e5d9d126cf5581a9b975ade73f6b2ae6a4a9a72d568de6795e4d3791b64670ebbf78f17ae9bd24b684417be361c48ce9f1bc55a77e6f55689575c0dc4d3dd0c2c4257d5f3fc8e0300f7f76c3fd26e8b19c4ad239c179ee67bca56788412721a2ebead64f24c42ce4bba250b1e9fa84912d60c3d737297cb4e6e0bb1976903efe355dcc902ba0355d2e64018d0320fe6a43fdab880e7ac3d01a52848d6020b9ac83f1fea19a4db6afa7d3eb383ab6dba2edef4b2d0ba97bdb929bcc233951d44396a3e65e5860fa71a30168c0cf59ced3c776495b5ccdeab23a124f2e72629457aa4c2ea0cc6bf4a1b17105205b33956439f3d853af200ed5d24031c1fda9934f564524d571c38e2fe30103764a5bcb1e3d21305031ee5add1b205832eee5b196478688a6f25727ee6832425c6710898c62c13bac4ba951c2ad8eaff59856997a7c2b451bab9242ef610257a9b64fc99141bbd8f590bdeb2ef12020ba8ed784f492e6ef3195df7da08c9d27cf24118c29a571deda94b8e3434b170adbc33e3ab47755d4e7b1ce9716b2fc03687902c7703f888a86b4f38f0d52f477f98590352c82cc0ff4718a4c37b0ea9bd6d66d9b5c8fc7aabfd08c9a7a75bb3d6e970e8bf1f344b344186f078521d7b26a002bd1cba1ea408941e2f943278bd5abe504474ad89501aaee9935b77fc417bbc20e795f22259c3ad0f5a2fb205e581f617a992a6baabe41226b8005e34de92adfb70da635c60f4e7c8509b739f88eca6e91ea5142e107ce2c147c96e68d8e775a7464321f639846e7de8c6a91ed18fcaefbd44118e240d42ae6af70781c9dc71ef30230d3d50061716d080e9a1faf057243a0af6b12e1a76a1267a5a39e085f25b8bd289e3a140d266b46be7c59dbeec32edd1695fc4ba196ebc797b86e6885c6fb6ba04f282b71ccfc535707362c8b73d850a549c48b95bde8ca4f95249e8cc9b7751f6d42d2765505d06e5ff208dd1772ddfdf81086476516ce83fc70551cc66d27691c9fb951b71ceb6e9424ee66dcf129fa3f2906296e7b6b2a764027a72818d9cce46f8b47841d1024b16a5009045178dc7cbbfc5121c6378887a449cf0c9793d53c1d861ab7d7c9eb9e4713a0b071237cb3faa44a1c2567af77f6acb9a1b95e243c65b1c88b3c639b17c6b6a936bc01d9efcb0e7e4e0465b1dc7f3edb970d733043600d34f135f0f439bb82b1aade9a70b1435976f8aa7125009dec0f9d96fa613d62ddd09c621396c4ef82c5fbd1f745d64e05ae27e1069ee66bc10e301f95eda0215f0cdd423771e97b1cf634bc93c239caa557b7e7a8e599f7973ee31d8e9f6fdb05466eb278883bc315bfac83464ca462d5b966879bafeb007ea505e797ee8921b6f82540aa876740bc6d26a13065a3d0160e269ecdb905aad6eac3ee330fa9055f66b4f4305fb983931c1e229d6a0210f25756788e9a70e91a3aa5da28e677d84ac3fbe097c322011a050d7b2ea1612d10cbcdfcef38f22369eb531a724e4d7f9b8e8aa6664aa8ba1e378e4d9e626b863d46c9352bfdd0cf467bc1f17f0f534fee341b88d55a53d7a09d34b76eeec96dccb8f332585c753e9fd09ad4bd527e58781f854627f72eb8d6e59e68048c4b8ea4bfd76a8f27125bd51054732c6ca9096e69476dc8e52b51fdae262dcd91c2e23a414cb16d1d2159f33993fbda87c46a9e7b58195916eea891b7dee88fd23f1e461728161d8af0e067b4c80ca8fe0acd010fcdad461708c7ee41d4e2fd2cebd5c34de4edd763f6cfc583689141808ecf42e20b79f6d5ef323649c2b9ebb4ef4d4526767e44c58358105cd394410bacd486475c26e7ee8d79c731ad82d820f7fd20b0daca649334771ee07234e44b401a7fc7e7b86a845ce18946dc7c14b17854a80a0af5d0dc8bd0614650681982d2f6cec264da5add6720d84bcd3acefbca4fa00ffb53105cfe9da7ac34c88dab0b50878390bc1ef6a388df4f41be51714d22a29544edf59feedb71789efd8c40f1fd572ffc3b05a7eec9040ccd554c1b37b888bc6dac1fa4656a2c95bc9a5d10f2d0162b773ca6a6d9a30a9e172e6c8cca1de09626ca3e59b4dbb82f4dd949cc341deee27a0800e17a73a56386c0527f4d0f7c28f1d44b2c83cad51f616ad09e4e4ae2a1901b5fc0de12c5f93ffb547b4b3326f9cab45f8fcc8761196751585a8ff493b3d9ef077f899918bde019e0e66e818dedcff7d6d2ee0b1fcc1845716242adf546f08551cbd4f0e44482a39a871c5729a566b5726f2f33cbf28b47a7d661e2e35cfe3a548a5f1eec8069eed21c92c44e253bf275cbc7825b7e26f52145d415139cf09216335e19a3b4276269eed91c1b557f80f4101a0d733269b40d9ef0e9b12d3baa379e5a0c1300c63c5ff8c72f4420652838d6763544c6fd4c65a06a26eda3454206727c0507614c2a88277ebe880a5ecf981be57873a573d481eae5433d65dc4dc16d118bc057975265945bd9ddc64c0a63be3d5083fad6b22cfc89bc78c395b9ba767d8079fc4c2ffc9280888c2f53fd39801ad24b59f51a8318e5e9af7e1223cb4d385e3e4001f6249878d60cbcc9f67af75ff04de1ca8918eab36f915b9a150fdf99dc4df4af16715d3706fbd934c8e8479a99734dd6c32328565e3a351f5c8a61a2657d8dac76fb9623a6095adb4200d8e3707bc015aaf97ff0190caa4b22e102458fb40901fe161943f4c6ed6654264baa7dfa15e80cadaa0959e4030ee90451f1a35350ae7e6686f399f3bb230b87c36ebb536369e0bf32ee95f1a8fbbf05a0f74e801200cc4730ef0b35e9f6559f051023b23b29dad69477064118c67cc63ca3c4c8b564c446ce0d88d98252d2edb04983045e5424935791b208d90152b15287425c514f23ce64b41178e66fb55e1fe0aa153596a940ee6297b4046cf9a413232570638861a74e36c57fd548517d8028f18e8c194bc259b667b886f875d8f46a0554d3a11c0866fa2f988230e54192a96ffbae5f7fb5c0a71aa88bf59389c75a6093b3482a3f6e5c7d5704e97eec57e8037fe4df05d18b8bb75ae249e2c28a71fb2d5cdaf59168007e07dba122f5cf0d645bcd4e736159c6393bb772b820fb3c8fc17cb88393c90233fe4ab880593384bd96de985655c768d6f6f2f67896e7e15b3cbc513bfc52f63cba2c9b708bcc2252cda70822111c4503a7257c0d89fe1eb3d7d99e93c9b0b0935bc198bb8ce04917f73269716337b7bfb5142d8a7147bd5c84ca9bb41c5a86d5d36efc61d0d787cc085a9db5c3388aa2b4bd287627da24e70b62601fd0beaceba112d305148a8c97cae338094c8d92732b5c220abf8e0ce94826de7fe01e32932d05905c341545eeff2a86cd18912272f32e3cea5cbf13236b48de5b1235483449fb892f14a499a6ba89cdcc4224580bfc6a28b5cc25b6274381da039e4961977423d9c3d9217bbfddf7e5f2e044d892daa1f0b1018fac5a590be3bfd0995fc2126f805b00bb95afdd9740dcacea283c681da742e2fb99014b435593ed796e7230d135f65079575d1b51674bbaec6c02e7064f7c72d05bd65ccfa61e3b55110cf00e7aa359347b19c8c0e54c3ed30995966ad8e186314f5d852cd31ccfaa9d0c7e849d68a6b0cff756d0ab7ad920b44de00310c0edaa5ae60bf0787ece2e07da207608de0926e5e5b344bf8bab13c87b38fdd623353c37b448c5ee03678e9941b84f544c2ea87ed759156bf67e2e0fba081210479c4a71d671d03b6d2f5841aebc57a13f4f4d5432cda29b5962e39a093c69285902f11e4a75cdfd38b5f52e4238c90a0942ea741a79ead7e044bca535f51644b35dcc9d5d54b11a1e6c000000000000000000dc539a783a8e75a1fea31936bb9a09c88d55cf1771a67092228c231f39d79c28d1a9c544ce80546e4b8a5b924b6ef436d97eb77a1c8c300d6d775fdc61f3303b00cff340d8ea575b8136ea5efc84786fb76f3fc61b5ce797cb281aeac5acb5e63a33412ce27c", 0xfeb7}, {&(0x7f0000000080)="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", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0xb, 0x3}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x7}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sendto$inet(r1, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 1.155677949s ago: executing program 0 (id=3815): socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000bc0)=@ethtool_wolinfo={0x5, 0x1ff, 0xfffffffd, "11653a595362"}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@broadcast]}, @ssrr={0x89, 0x13, 0x3e, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @multicast1]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000600)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @random="02a200"}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.155342699s ago: executing program 3 (id=3816): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb305000100"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x844) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x4}, {0x5ef91c3}, 0x12, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="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", 0x1e5, 0x0, &(0x7f0000000300)={0x2, 0xbb, {0x1, 0xc, 0x9c, "c7b08fc97237c9968258ccd8fbc81f34be14fffde008cda9cfd8aa729c0130cccf231080c84763689244b5a51da06e7476ce1354c4bb2ec1c8ad4ccd0e3b790bace7631b7344587a1a114ec7af6044ce6099096fdb021b1bae7e6c9849160929b276c79b42aa8f8785f4e676916bb1d9263d00ffd2e6ca66e097098d0e2b4ba3d5f8f8e10c196db22fa2e6c67d7cc8842ab29f3f587d8bed4512ae2d", 0x12, "fd1d91cbb5a30c909a94919e19c91933c2ec"}, 0x79, "6334628428604b679656409f1578d625c27d6b8d3fb5e236e934ca00c27c005ceb83698fa301cb50efd35123f83eda70d0f909ceda03d066519343b03e328650c0d2d03ad1e48a62dc4352e5999d8759a73d61922ac04c6582d98e7ac88059090db9ccd3f17399c81380f7141b6e3c3958917abb62363c0660"}, 0x140}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff000000080010ba05229b4073699acd8db7ea51c49d2df7966f1373d68b0b4ba21f5e40c0f9dd58a06d2563105e44579f6be8fac1bc5c8cf498c32132e4c8d826483e6e97e6f0cb7d9dd269c839fb1cc6d6f684d4653cf4e952"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.059762096s ago: executing program 4 (id=3817): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x6, 0x800, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="8f237e6863349c3e91d58f8d6fe30df5827a87baf8148373dc924324cb1678973659f528e32a81231260aa38e342c21e45b5e2d036ccf0c81d0c8fa2e32d63c418e4f11401025c45ff180caf227581c3d165066dbd1798df6fbd9fa0fa4a0f60bd120f6cee0b") 1.048840867s ago: executing program 3 (id=3818): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) mmap$xdp(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4, 0x40010, r2, 0x180000000) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x9c5e, 0x6, 0x6, 0x3ff, 0x0, 0xff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x34}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) 452.016574ms ago: executing program 3 (id=3819): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a40)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1b0, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x148, 0x3, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x13c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "c9ebea1c1459b4fab2fb03b27250ac8ffd6d67e7127037c440d5c46840672ddd26da1c9c0aa99d236d5a2996eb4f23c3a85f89623604d830558e43ff31ccf738ae7fa9eecf2106d4e03492"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "514cbbafbdb5d69426e84f8f239894abbc24e3d4592885802df4d31c35159c28abb42af729a37e1b61d686990ad08edbc2d6f5e56dd3c595436322bcda4321cdb81be7bb3b58ab3a1232aad4abee22f4be7d3f7bbf15960d85a02456751ebf71e5940ac5f9342841ac16"}, @NFTA_DATA_VALUE={0x1a, 0x1, "b3df1057aec652614ecf4553448110878640a6c8b7e3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xa7}], 0x6, 0x40002000, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="020b01000700000000000000040000000500050000a000000a004e2100000003200100000000000000000000000000ea084008bf4f3ec2d137e59ea015010008000000000000d414f8462b2ed943f82a8607d37bc53847ddf890c5b106662d3a9caef9083f79ad7e8000f427e9152636c6f62ae036a48196b997a9603219bffa465585c8014db5968e20d0d9312c41e37615e9ddf110d503d92ee40efbc866610e6b1196f9e09b1b79e889f7ddbb60dae0ebebe75cb53f47a77520403c0765dead70eb379055b14577b4284bb38a02b2e44d5e362ee0e18a8b"], 0x38}}, 0x11) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000200)={0x1d, r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002a00)=@newchain={0x24, 0x64, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0x9}, {0x0, 0x7}}}, 0x24}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01004600050008001300", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4802}, 0x8080) 398.124985ms ago: executing program 4 (id=3820): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffff9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x5}, 0x8) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 201.107471ms ago: executing program 4 (id=3821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe1001000071101a00000000950000000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) 147.880337ms ago: executing program 2 (id=3822): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r0, 0xd, 0x10, 0x0, @void, @value=r2}, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) unshare(0x60600) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r4, 0x1) listen(r3, 0x0) (async) unshare(0x2000800) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x39e) 80.560345ms ago: executing program 4 (id=3823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000800000000b702000014000000b7030000530000008500000005000000bca90000300000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=3824): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022abd7001000000250f0000002a000e00", @ANYBLOB="8166d4df29a84d371a7f6c1bbd4ced9df546a4bd77be06636545b53bac1fd6fb80b76c61e917"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e000100000000000000000407000000", @ANYRES32, @ANYBLOB="00000003"], 0x28}}, 0x0) unshare(0x2c020400) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x44000) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f00000003c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000005c0)}], 0x3, &(0x7f0000000640)=""/95, 0x5f}, 0x9}], 0x1, 0x0, &(0x7f0000000700)={0x0, 0x989680}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x360f, 0x0, 0x3, 0x0, 0x8}, 0x20) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) getpeername$unix(r3, &(0x7f00000002c0), &(0x7f0000000040)=0x6e) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x45d9, 0x4d) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0xfffffffffffffd7a, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x400000000000349, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x23, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xfb]}}) pselect6(0x40, &(0x7f0000000000)={0x8daf, 0x80000001, 0x6, 0x10000000000003, 0x7, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 044][T15996] ? nft_hash_privsize+0x2f/0xf0 [ 363.216070][T15996] nf_tables_newset+0x132b/0x2530 [ 363.216113][T15996] ? __pfx_nf_tables_newset+0x10/0x10 [ 363.216175][T15996] ? __nla_parse+0x40/0x60 [ 363.216203][T15996] nfnetlink_rcv+0x1132/0x2520 [ 363.216265][T15996] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 363.216352][T15996] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.216399][T15996] netlink_unicast+0x82f/0x9e0 [ 363.216437][T15996] ? __pfx_netlink_unicast+0x10/0x10 [ 363.216460][T15996] ? netlink_sendmsg+0x642/0xb30 [ 363.216480][T15996] ? skb_put+0x11b/0x210 [ 363.216509][T15996] netlink_sendmsg+0x805/0xb30 [ 363.216543][T15996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.216568][T15996] ? aa_sock_msg_perm+0xf1/0x1d0 [ 363.216589][T15996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.216609][T15996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.216631][T15996] __sock_sendmsg+0x21c/0x270 [ 363.216656][T15996] ____sys_sendmsg+0x505/0x830 [ 363.216688][T15996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.216725][T15996] ? import_iovec+0x74/0xa0 [ 363.216755][T15996] ___sys_sendmsg+0x21f/0x2a0 [ 363.216784][T15996] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.216851][T15996] ? __fget_files+0x2a/0x420 [ 363.216867][T15996] ? __fget_files+0x3a0/0x420 [ 363.216899][T15996] __x64_sys_sendmsg+0x19b/0x260 [ 363.216928][T15996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.216982][T15996] ? rcu_is_watching+0x15/0xb0 [ 363.217008][T15996] ? do_syscall_64+0xbe/0x3b0 [ 363.217036][T15996] do_syscall_64+0xfa/0x3b0 [ 363.217090][T15996] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.217134][T15996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.217157][T15996] ? clear_bhb_loop+0x60/0xb0 [ 363.217181][T15996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.217200][T15996] RIP: 0033:0x7fd7fbd8eec9 [ 363.217218][T15996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.217235][T15996] RSP: 002b:00007fd7fcbc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.217256][T15996] RAX: ffffffffffffffda RBX: 00007fd7fbfe5fa0 RCX: 00007fd7fbd8eec9 [ 363.217270][T15996] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 363.217282][T15996] RBP: 00007fd7fbe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.217293][T15996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.217305][T15996] R13: 00007fd7fbfe6038 R14: 00007fd7fbfe5fa0 R15: 00007ffe922c6338 [ 363.217340][T15996] [ 363.602840][T15996] Mem-Info: [ 363.606191][T15996] active_anon:8702 inactive_anon:0 isolated_anon:0 [ 363.606191][T15996] active_file:3413 inactive_file:40019 isolated_file:0 [ 363.606191][T15996] unevictable:768 dirty:189 writeback:0 [ 363.606191][T15996] slab_reclaimable:13192 slab_unreclaimable:142227 [ 363.606191][T15996] mapped:34079 shmem:2867 pagetables:1031 [ 363.606191][T15996] sec_pagetables:0 bounce:0 [ 363.606191][T15996] kernel_misc_reclaimable:0 [ 363.606191][T15996] free:1263312 free_pcp:24005 free_cma:0 [ 363.687802][T15996] Node 0 active_anon:34508kB inactive_anon:0kB active_file:13652kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122016kB dirty:756kB writeback:0kB shmem:9932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14148kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 363.798753][T15996] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 363.829634][T15996] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.859231][T15996] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 363.865138][T15996] Node 0 DMA32 free:1146396kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34264kB inactive_anon:0kB active_file:13652kB inactive_file:158296kB unevictable:1536kB writepending:756kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:78848kB local_pcp:37348kB free_cma:0kB [ 363.908158][T15996] lowmem_reserve[]: 0 0 1 1 1 [ 363.916727][T15996] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 363.966927][T15996] lowmem_reserve[]: 0 0 0 0 0 [ 363.973631][T15996] Node 1 Normal free:3891480kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17816kB local_pcp:7936kB free_cma:0kB [ 364.012137][T15996] lowmem_reserve[]: 0 0 0 0 0 [ 364.020506][T15996] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 364.034196][T15996] Node 0 DMA32: 3*4kB (UME) 789*8kB (UE) 126*16kB (UME) 306*32kB (UM) 147*64kB (UM) 78*128kB (UM) 31*256kB (UM) 8*512kB (M) 5*1024kB (UME) 11*2048kB (UME) 261*4096kB (UM) = 1146260kB [ 364.087042][T15996] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 364.118187][T15996] Node 1 Normal: 127*4kB (UE) 48*8kB (UME) 41*16kB (UME) 88*32kB (UME) 29*64kB (UME) 6*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891532kB [ 364.143733][T15996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.154077][T15996] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 364.165416][T16014] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 364.207161][T15996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.239886][T15996] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 364.259271][T15996] 44818 total pagecache pages [ 364.289003][T15996] 0 pages in swap cache [ 364.293303][T15996] Free swap = 124996kB [ 364.298609][T15996] Total swap = 124996kB [ 364.309832][T15996] 2097051 pages RAM [ 364.313691][T15996] 0 pages HighMem/MovableOnly [ 364.322801][T15996] 425681 pages reserved [ 364.330867][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 364.335484][T15996] 0 pages cma reserved [ 364.809855][T16048] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2612'. [ 365.162312][T16054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2613'. [ 365.442479][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 365.510904][T16069] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 365.589377][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2617'. [ 365.604504][T16069] bond12: entered promiscuous mode [ 365.610245][T16069] bond12: entered allmulticast mode [ 365.721281][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 365.743414][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2619'. [ 365.763365][T16079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2619'. [ 365.891030][T16084] wg1 speed is unknown, defaulting to 1000 [ 366.904606][T16132] netlink: 'syz.3.2630': attribute type 21 has an invalid length. [ 366.915417][T16132] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 367.339398][T16164] netlink: 'syz.3.2639': attribute type 33 has an invalid length. [ 367.952902][T16201] IPVS: stopping backup sync thread 6387 ... [ 367.972048][T16201] IPVS: Error connecting to the multicast addr [ 367.982422][T16201] __nla_validate_parse: 3 callbacks suppressed [ 367.982454][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2651'. [ 368.100816][T16212] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 368.258317][T16212] wg1 speed is unknown, defaulting to 1000 [ 368.291870][T16218] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2656'. [ 368.651318][T16229] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.2659'. [ 368.669737][T16229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2659'. [ 368.688564][T16229] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 368.775294][T16241] sctp: [Deprecated]: syz.4.2661 (pid 16241) Use of int in max_burst socket option. [ 368.775294][T16241] Use struct sctp_assoc_value instead [ 369.262152][T16255] wg1 speed is unknown, defaulting to 1000 [ 369.558892][T16271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2671'. [ 369.653920][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 369.808532][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'. [ 370.003649][T16288] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2676'. [ 370.005226][T16290] syzkaller1: entered promiscuous mode [ 370.027269][T16290] syzkaller1: entered allmulticast mode [ 370.097282][T16297] syzkaller1: entered promiscuous mode [ 370.102995][T16297] syzkaller1: entered allmulticast mode [ 370.480961][T16322] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.575411][T16322] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.636305][T16322] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.705008][T16330] wg1 speed is unknown, defaulting to 1000 [ 370.727419][T16322] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.936233][ T6525] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.956063][ T6525] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.222932][ T6525] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.283641][ T6525] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.652652][T16346] netlink: 'syz.0.2692': attribute type 8 has an invalid length. [ 371.674089][T16340] netlink: 'syz.4.2690': attribute type 21 has an invalid length. [ 371.818643][T16340] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 371.826447][T16340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2690'. [ 372.002650][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2695'. [ 372.022336][T16361] vlan0: entered promiscuous mode [ 372.027678][T16361] erspan0: entered promiscuous mode [ 372.057506][ T30] audit: type=1800 audit(1758652143.018:6): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2693" name="cgroup.controllers" dev="tmpfs" ino=2876 res=0 errno=0 [ 373.067648][T16420] __nla_validate_parse: 1 callbacks suppressed [ 373.067670][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2712'. [ 373.087751][T16420] 8021q: VLANs not supported on ipvlan1 [ 373.104564][T16417] wg1 speed is unknown, defaulting to 1000 [ 373.148943][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 373.422876][T16436] wg1 speed is unknown, defaulting to 1000 [ 374.241650][T16461] macvtap2: entered promiscuous mode [ 374.254931][T16461] veth1_to_hsr: entered promiscuous mode [ 374.261737][T16461] macvtap2: entered allmulticast mode [ 374.268133][T16461] veth1_to_hsr: entered allmulticast mode [ 374.358363][T16463] macvtap3: entered promiscuous mode [ 374.367082][T16463] macvtap3: entered allmulticast mode [ 374.471864][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'. [ 374.734417][T16461] tipc: Enabled bearer , priority 0 [ 374.751547][T16461] tipc: Resetting bearer [ 374.840707][T16460] tipc: Disabling bearer [ 374.894994][T16485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.754420][T16541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2740'. [ 375.821450][T16552] wg1 speed is unknown, defaulting to 1000 [ 375.955633][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2744'. [ 376.134669][T16571] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2746'. [ 376.180853][T16574] IPv6: Can't replace route, no match found [ 376.187375][T16554] wg1 speed is unknown, defaulting to 1000 [ 376.641358][T16600] wg1 speed is unknown, defaulting to 1000 [ 377.128962][T16620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2758'. [ 377.762266][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2766'. [ 377.892023][T16659] wg1 speed is unknown, defaulting to 1000 [ 378.151953][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 378.193023][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 378.209923][T16664] netlink: 'syz.0.2769': attribute type 12 has an invalid length. [ 378.475308][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 378.510471][T16672] netlink: 'syz.2.2772': attribute type 13 has an invalid length. [ 378.520855][T16672] netlink: 'syz.2.2772': attribute type 17 has an invalid length. [ 378.609170][T16672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.783001][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 379.041494][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2774'. [ 379.055786][T16693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.074228][T16693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.444561][T16708] wg1 speed is unknown, defaulting to 1000 [ 379.465368][T16711] netlink: 'syz.2.2780': attribute type 10 has an invalid length. [ 379.492633][T16711] netlink: 'syz.2.2780': attribute type 10 has an invalid length. [ 379.502855][T16711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2780'. [ 379.521657][T16711] batadv0: entered promiscuous mode [ 379.528948][T16711] batadv0: entered allmulticast mode [ 379.534470][T16711] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 379.537304][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 379.563053][T16717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2782'. [ 379.564560][T16719] FAULT_INJECTION: forcing a failure. [ 379.564560][T16719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.587826][T16719] CPU: 1 UID: 0 PID: 16719 Comm: syz.4.2783 Not tainted syzkaller #0 PREEMPT(full) [ 379.587853][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.587863][T16719] Call Trace: [ 379.587870][T16719] [ 379.587877][T16719] dump_stack_lvl+0x189/0x250 [ 379.587903][T16719] ? __pfx____ratelimit+0x10/0x10 [ 379.587922][T16719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.587942][T16719] ? __pfx__printk+0x10/0x10 [ 379.587963][T16719] ? __might_fault+0xb0/0x130 [ 379.588000][T16719] should_fail_ex+0x414/0x560 [ 379.588030][T16719] _copy_from_iter+0x1de/0x1790 [ 379.588058][T16719] ? rcu_is_watching+0x15/0xb0 [ 379.588075][T16719] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 379.588099][T16719] ? __pfx__copy_from_iter+0x10/0x10 [ 379.588121][T16719] ? __build_skb_around+0x257/0x3e0 [ 379.588142][T16719] ? netlink_sendmsg+0x642/0xb30 [ 379.588159][T16719] ? skb_put+0x11b/0x210 [ 379.588185][T16719] netlink_sendmsg+0x6b2/0xb30 [ 379.588215][T16719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.588239][T16719] ? aa_sock_msg_perm+0xf1/0x1d0 [ 379.588258][T16719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.588276][T16719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.588296][T16719] __sock_sendmsg+0x21c/0x270 [ 379.588318][T16719] ____sys_sendmsg+0x505/0x830 [ 379.588348][T16719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.588384][T16719] ? import_iovec+0x74/0xa0 [ 379.588413][T16719] ___sys_sendmsg+0x21f/0x2a0 [ 379.588440][T16719] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.588500][T16719] ? __fget_files+0x2a/0x420 [ 379.588515][T16719] ? __fget_files+0x3a0/0x420 [ 379.588538][T16719] __x64_sys_sendmsg+0x19b/0x260 [ 379.588560][T16719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.588589][T16719] ? __pfx_ksys_write+0x10/0x10 [ 379.588606][T16719] ? rcu_is_watching+0x15/0xb0 [ 379.588626][T16719] ? do_syscall_64+0xbe/0x3b0 [ 379.588646][T16719] do_syscall_64+0xfa/0x3b0 [ 379.588660][T16719] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.588675][T16719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.588689][T16719] ? clear_bhb_loop+0x60/0xb0 [ 379.588707][T16719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.588721][T16719] RIP: 0033:0x7f12be58eec9 [ 379.588736][T16719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.588749][T16719] RSP: 002b:00007f12bf41f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.588774][T16719] RAX: ffffffffffffffda RBX: 00007f12be7e5fa0 RCX: 00007f12be58eec9 [ 379.588785][T16719] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 379.588794][T16719] RBP: 00007f12bf41f090 R08: 0000000000000000 R09: 0000000000000000 [ 379.588803][T16719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.588812][T16719] R13: 00007f12be7e6038 R14: 00007f12be7e5fa0 R15: 00007ffc8a985678 [ 379.588838][T16719] [ 380.213931][T16736] tipc: Enabled bearer , priority 0 [ 380.252280][T16736] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 380.260263][T16736] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 380.268984][T16736] tipc: Resetting bearer [ 380.527082][T16754] netlink: 'syz.0.2793': attribute type 1 has an invalid length. [ 380.538831][T16754] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2793'. [ 380.742882][T16763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.784795][T16763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.937256][T16783] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 380.945981][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2803'. [ 381.054666][T14672] tipc: Resetting bearer [ 381.121714][T16785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.162292][T16785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.179461][T16787] tipc: Enabled bearer , priority 0 [ 381.206491][T16788] syzkaller0: entered promiscuous mode [ 381.251326][T16788] syzkaller0: entered allmulticast mode [ 381.296900][ T6662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 381.539917][T16787] tipc: Resetting bearer [ 381.561784][T16800] tipc: Enabling of bearer rejected, already enabled [ 381.621575][T16796] tipc: Resetting bearer [ 381.685516][T16794] wg1 speed is unknown, defaulting to 1000 [ 382.004450][T16779] tipc: Resetting bearer [ 382.296809][ T6662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 382.306862][ T6662] tipc: Node number set to 4181042663 [ 382.337762][T16779] tipc: Disabling bearer [ 382.518775][T16835] netlink: 'syz.1.2811': attribute type 13 has an invalid length. [ 382.527385][T16835] netlink: 'syz.1.2811': attribute type 17 has an invalid length. [ 382.788610][T16839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.856188][T16839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.923458][T16839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.899346][ T6525] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.939088][T16835] erspan0: left promiscuous mode [ 383.987962][T16835] bond0: left allmulticast mode [ 384.008768][ T6662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.018095][T16835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.062886][T16845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.112685][T16845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.187802][T16836] wg1 speed is unknown, defaulting to 1000 [ 384.384219][T16863] __nla_validate_parse: 1 callbacks suppressed [ 384.384242][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'. [ 384.408134][ T6525] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.424138][ T6525] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.540150][T16869] tc_dump_action: action bad kind [ 384.547766][T16867] wg1 speed is unknown, defaulting to 1000 [ 384.568926][ T5963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.583371][T16869] tipc: Enabling of bearer rejected, already enabled [ 384.603501][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 384.647086][T16875] netlink: 'syz.0.2824': attribute type 2 has an invalid length. [ 384.697202][ T6662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.764835][T16877] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.922795][T16877] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.021950][T16877] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.061402][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2831'. [ 385.077018][T16895] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2833'. [ 385.120319][T16877] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.263498][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.307679][T14671] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.330204][T14671] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.352525][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.384643][T14671] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.404926][T14671] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.520357][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2839'. [ 385.542085][T16920] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 385.645696][T16923] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2842'. [ 385.654396][T16927] FAULT_INJECTION: forcing a failure. [ 385.654396][T16927] name failslab, interval 1, probability 0, space 0, times 0 [ 385.684417][T16927] CPU: 1 UID: 0 PID: 16927 Comm: syz.2.2843 Not tainted syzkaller #0 PREEMPT(full) [ 385.684446][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.684458][T16927] Call Trace: [ 385.684474][T16927] [ 385.684483][T16927] dump_stack_lvl+0x189/0x250 [ 385.684512][T16927] ? __pfx____ratelimit+0x10/0x10 [ 385.684533][T16927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.684556][T16927] ? __pfx__printk+0x10/0x10 [ 385.684579][T16927] ? genl_rcv+0x28/0x40 [ 385.684606][T16927] ? ____sys_sendmsg+0x505/0x830 [ 385.684630][T16927] ? __x64_sys_sendmsg+0x19b/0x260 [ 385.684669][T16927] should_fail_ex+0x414/0x560 [ 385.684704][T16927] should_failslab+0xa8/0x100 [ 385.684733][T16927] kmem_cache_alloc_noprof+0x73/0x3c0 [ 385.684758][T16927] ? skb_clone+0x212/0x3a0 [ 385.684790][T16927] skb_clone+0x212/0x3a0 [ 385.684821][T16927] __netlink_deliver_tap+0x404/0x850 [ 385.684861][T16927] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.684886][T16927] netlink_deliver_tap+0x19c/0x1b0 [ 385.684911][T16927] netlink_sendskb+0x68/0x140 [ 385.684935][T16927] netlink_unicast+0x397/0x9e0 [ 385.684951][T16927] ? __asan_memcpy+0x40/0x70 [ 385.684985][T16927] ? __pfx_netlink_unicast+0x10/0x10 [ 385.685020][T16927] netlink_rcv_skb+0x28c/0x470 [ 385.685040][T16927] ? __lock_acquire+0xab9/0xd20 [ 385.685068][T16927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.685098][T16927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.685146][T16927] ? down_read+0x1ad/0x2e0 [ 385.685173][T16927] genl_rcv+0x28/0x40 [ 385.685199][T16927] netlink_unicast+0x82f/0x9e0 [ 385.685230][T16927] ? __pfx_netlink_unicast+0x10/0x10 [ 385.685254][T16927] ? netlink_sendmsg+0x642/0xb30 [ 385.685274][T16927] ? skb_put+0x11b/0x210 [ 385.685303][T16927] netlink_sendmsg+0x805/0xb30 [ 385.685339][T16927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.685367][T16927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 385.685389][T16927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.685415][T16927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.685439][T16927] __sock_sendmsg+0x21c/0x270 [ 385.685470][T16927] ____sys_sendmsg+0x505/0x830 [ 385.685504][T16927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.685543][T16927] ? import_iovec+0x74/0xa0 [ 385.685573][T16927] ___sys_sendmsg+0x21f/0x2a0 [ 385.685603][T16927] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.685678][T16927] ? __fget_files+0x2a/0x420 [ 385.685694][T16927] ? __fget_files+0x3a0/0x420 [ 385.685725][T16927] __x64_sys_sendmsg+0x19b/0x260 [ 385.685754][T16927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.685798][T16927] ? rcu_is_watching+0x15/0xb0 [ 385.685818][T16927] ? trace_sys_enter+0x25/0x100 [ 385.685855][T16927] do_syscall_64+0xfa/0x3b0 [ 385.685874][T16927] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.685895][T16927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.685914][T16927] ? clear_bhb_loop+0x60/0xb0 [ 385.685939][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.685957][T16927] RIP: 0033:0x7f4e72f8eec9 [ 385.685975][T16927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.685992][T16927] RSP: 002b:00007f4e73e5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.686014][T16927] RAX: ffffffffffffffda RBX: 00007f4e731e5fa0 RCX: 00007f4e72f8eec9 [ 385.686029][T16927] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 385.686041][T16927] RBP: 00007f4e73e5a090 R08: 0000000000000000 R09: 0000000000000000 [ 385.686053][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.686065][T16927] R13: 00007f4e731e6038 R14: 00007f4e731e5fa0 R15: 00007fff9fbddc68 [ 385.686102][T16927] [ 386.362430][T16948] wg1 speed is unknown, defaulting to 1000 [ 386.514009][T16959] netlink: 'syz.0.2854': attribute type 4 has an invalid length. [ 386.580434][T16965] netlink: 'syz.0.2854': attribute type 4 has an invalid length. [ 386.757124][T16957] wg1 speed is unknown, defaulting to 1000 [ 386.979934][T16951] wg1 speed is unknown, defaulting to 1000 [ 387.782448][T16985] FAULT_INJECTION: forcing a failure. [ 387.782448][T16985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.796317][T16985] CPU: 0 UID: 0 PID: 16985 Comm: syz.4.2855 Not tainted syzkaller #0 PREEMPT(full) [ 387.796344][T16985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.796356][T16985] Call Trace: [ 387.796364][T16985] [ 387.796372][T16985] dump_stack_lvl+0x189/0x250 [ 387.796401][T16985] ? __pfx____ratelimit+0x10/0x10 [ 387.796422][T16985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.796445][T16985] ? __pfx__printk+0x10/0x10 [ 387.796471][T16985] ? __might_fault+0xb0/0x130 [ 387.796511][T16985] should_fail_ex+0x414/0x560 [ 387.796549][T16985] _copy_from_user+0x2d/0xb0 [ 387.796575][T16985] kstrtouint_from_user+0xc4/0x170 [ 387.796600][T16985] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 387.796642][T16985] proc_fail_nth_write+0x88/0x200 [ 387.796665][T16985] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 387.796702][T16985] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 387.796726][T16985] vfs_write+0x27e/0xb30 [ 387.796763][T16985] ? __pfx_vfs_write+0x10/0x10 [ 387.796791][T16985] ? __fget_files+0x2a/0x420 [ 387.796813][T16985] ? __fget_files+0x3a0/0x420 [ 387.796829][T16985] ? __fget_files+0x2a/0x420 [ 387.796858][T16985] ksys_write+0x145/0x250 [ 387.796886][T16985] ? __pfx_ksys_write+0x10/0x10 [ 387.796907][T16985] ? rcu_is_watching+0x15/0xb0 [ 387.796934][T16985] ? do_syscall_64+0xbe/0x3b0 [ 387.796960][T16985] do_syscall_64+0xfa/0x3b0 [ 387.796978][T16985] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.796997][T16985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.797015][T16985] ? clear_bhb_loop+0x60/0xb0 [ 387.797037][T16985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.797056][T16985] RIP: 0033:0x7f12be58d97f [ 387.797073][T16985] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 387.797089][T16985] RSP: 002b:00007f12bf41f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 387.797110][T16985] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12be58d97f [ 387.797123][T16985] RDX: 0000000000000001 RSI: 00007f12bf41f0a0 RDI: 0000000000000004 [ 387.797134][T16985] RBP: 00007f12bf41f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.797145][T16985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 387.797157][T16985] R13: 00007f12be7e6038 R14: 00007f12be7e5fa0 R15: 00007ffc8a985678 [ 387.797193][T16985] [ 388.096810][T16989] TCP: TCP_TX_DELAY enabled [ 388.205108][T16995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.258033][T16995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.616917][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.805263][T17010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2860'. [ 389.012301][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 389.027766][T17015] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 389.051066][T17015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.353026][T17032] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 389.453357][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 389.559390][T17046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.593530][T17046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.764769][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2874'. [ 389.861801][T17055] syzkaller1: entered promiscuous mode [ 389.875028][T17055] syzkaller1: entered allmulticast mode [ 389.890850][T17047] tipc: Enabling of bearer rejected, failed to enable media [ 389.903265][T17047] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 389.911768][T17047] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2872'. [ 389.926998][T17047] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 390.123487][T17080] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2877'. [ 390.174074][T17082] wg1 speed is unknown, defaulting to 1000 [ 390.373616][T17094] netlink: 'syz.0.2880': attribute type 3 has an invalid length. [ 390.382432][T17094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2880'. [ 390.451735][T17092] wg1 speed is unknown, defaulting to 1000 [ 390.528076][T17088] wg1 speed is unknown, defaulting to 1000 [ 391.151646][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 391.225223][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2886'. [ 391.242330][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 391.417458][ T5862] Bluetooth: hci4: command tx timeout [ 391.584250][ T96] block nbd0: Possible stuck request ffff8880251f0000: control (read@0,1024B). Runtime 270 seconds [ 391.590733][T17140] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2893'. [ 391.605073][ T96] block nbd0: Possible stuck request ffff8880251f01c0: control (read@1024,1024B). Runtime 270 seconds [ 391.616502][ T96] block nbd0: Possible stuck request ffff8880251f0380: control (read@2048,1024B). Runtime 270 seconds [ 391.629326][ T96] block nbd0: Possible stuck request ffff8880251f0540: control (read@3072,1024B). Runtime 270 seconds [ 391.827791][T17148] smc: net device bond0 applied user defined pnetid SYZ2 [ 391.834977][ T1016] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.848661][T17148] smc: net device bond0 erased user defined pnetid SYZ2 [ 391.867318][ T1016] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.889006][ T1016] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.905757][ T1016] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.333105][T17161] wg1 speed is unknown, defaulting to 1000 [ 392.810301][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.821379][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.846251][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.867228][T17170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.879516][T17170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.009798][T17168] wg1 speed is unknown, defaulting to 1000 [ 393.567556][T17182] wg1 speed is unknown, defaulting to 1000 [ 393.773366][T17210] openvswitch: netlink: Key type 38 is out of range max 32 [ 393.920068][T17168] chnl_net:caif_netlink_parms(): no params data found [ 394.456310][T17236] syzkaller1: entered promiscuous mode [ 394.462348][T17236] syzkaller1: entered allmulticast mode [ 394.492525][T17249] tipc: Enabling of bearer rejected, already enabled [ 394.505498][T17249] syzkaller0: mtu less than device minimum [ 394.603728][T17238] wg1 speed is unknown, defaulting to 1000 [ 394.681741][T17168] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.706811][T17168] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.714466][T17168] bridge_slave_0: entered allmulticast mode [ 394.736038][T17168] bridge_slave_0: entered promiscuous mode [ 394.824912][T17168] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.838842][T17168] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.846445][T17168] bridge_slave_1: entered allmulticast mode [ 394.857550][T17168] bridge_slave_1: entered promiscuous mode [ 394.958738][ T5862] Bluetooth: hci5: command tx timeout [ 395.032198][T17168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.095075][T17168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.128904][T17260] veth0_to_bridge: entered promiscuous mode [ 395.313767][T17168] team0: Port device team_slave_0 added [ 395.325333][T17168] team0: Port device team_slave_1 added [ 395.499976][T17168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.516620][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.567547][T17168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.582719][T17168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.591683][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.618788][T17168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.659013][T17296] wg1 speed is unknown, defaulting to 1000 [ 395.732914][T17298] netlink: 'syz.1.2936': attribute type 10 has an invalid length. [ 395.890732][T17168] hsr_slave_0: entered promiscuous mode [ 395.914074][T17168] hsr_slave_1: entered promiscuous mode [ 395.932163][T17168] debugfs: 'hsr0' already exists in 'hsr' [ 395.944797][T17168] Cannot create hsr debugfs directory [ 396.273197][T17323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2941'. [ 396.416219][T17321] dvmrp8: entered allmulticast mode [ 396.696768][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.842434][T17302] dvmrp8: left allmulticast mode [ 396.868070][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.887352][T17345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.901384][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.911249][T17345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.920986][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.931135][T17345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.941345][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.951381][T17345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2946'. [ 396.961302][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 397.018322][ T5862] Bluetooth: hci5: command tx timeout [ 397.534296][T17168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.551257][T17168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.564874][T17168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.579703][T17168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.814072][T17383] ip6gre2: entered allmulticast mode [ 397.980239][T17168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.011995][T17168] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.039864][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.047123][T14673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.090738][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.100952][T14673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.481613][T14671] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 398.716084][T17168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.803418][T17168] veth0_vlan: entered promiscuous mode [ 398.821652][T17168] veth1_vlan: entered promiscuous mode [ 398.878040][T17168] veth0_macvtap: entered promiscuous mode [ 398.894094][T17168] veth1_macvtap: entered promiscuous mode [ 398.925906][T17168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.951295][T17168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.972015][T14673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.996328][T14673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.031342][T14673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.043529][T14673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.097107][T17174] Bluetooth: hci5: command tx timeout [ 399.192596][T17410] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 399.212624][T17411] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 399.387675][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.410672][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.462335][T14673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.471669][T14673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.485768][T17423] netlink: 'syz.1.2961': attribute type 7 has an invalid length. [ 399.486110][T17419] netlink: 'syz.1.2961': attribute type 7 has an invalid length. [ 399.504805][T17424] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 399.521987][T17423] netlink: 'syz.1.2961': attribute type 3 has an invalid length. [ 399.565177][T17419] netlink: 'syz.1.2961': attribute type 3 has an invalid length. [ 399.849511][T17433] wg1 speed is unknown, defaulting to 1000 [ 400.164670][T17453] IPVS: set_ctl: invalid protocol: 50 172.20.20.28:20003 [ 400.629341][T17463] netlink: 'syz.2.2970': attribute type 29 has an invalid length. [ 400.820143][T17174] block nbd1: Receive control failed (result -107) [ 400.877020][T17466] nbd1: detected capacity change from 0 to 32 [ 401.179054][T17174] Bluetooth: hci5: command 0x0419 tx timeout [ 401.295526][T17473] __nla_validate_parse: 134 callbacks suppressed [ 401.295547][T17473] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2975'. [ 401.351440][T17174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.363853][T17174] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.376099][T17174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.388256][T17174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.396812][T17174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.550686][T17476] wg1 speed is unknown, defaulting to 1000 [ 402.074442][T17476] chnl_net:caif_netlink_parms(): no params data found [ 402.350386][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2982'. [ 402.531553][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.542723][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.558549][T17476] bridge_slave_0: entered allmulticast mode [ 402.578980][T17476] bridge_slave_0: entered promiscuous mode [ 402.603450][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.621064][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.643459][T17476] bridge_slave_1: entered allmulticast mode [ 402.654108][T17476] bridge_slave_1: entered promiscuous mode [ 402.734801][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2988'. [ 402.744401][T17516] wg1 speed is unknown, defaulting to 1000 [ 402.782285][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.845363][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.855666][T14671] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.867381][T14671] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.875621][T14671] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.129734][T14671] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.258173][T17174] Bluetooth: hci5: command 0x0419 tx timeout [ 403.288880][T17476] team0: Port device team_slave_0 added [ 403.379616][T17476] team0: Port device team_slave_1 added [ 403.406052][T17530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2989'. [ 403.417817][T17174] Bluetooth: hci0: command tx timeout [ 403.424791][T17540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2991'. [ 403.489921][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.500490][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2991'. [ 403.514014][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.541729][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.659971][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.668544][T17554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2996'. [ 403.671328][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.708545][T17557] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2997'. [ 403.722348][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.786380][T17556] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2995'. [ 403.805776][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 403.930825][T17476] hsr_slave_0: entered promiscuous mode [ 403.939293][T17476] hsr_slave_1: entered promiscuous mode [ 403.945719][T17476] debugfs: 'hsr0' already exists in 'hsr' [ 403.958239][T17476] Cannot create hsr debugfs directory [ 404.251852][T17571] dvmrp8: entered allmulticast mode [ 404.445225][T17571] wg1 speed is unknown, defaulting to 1000 [ 404.847567][T17579] dvmrp8: left allmulticast mode [ 405.111678][T17608] netlink: 'syz.3.3012': attribute type 2 has an invalid length. [ 405.120505][T17608] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 405.389739][T17476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.431376][T17476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.472110][T17476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.498704][T17476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.507443][T17174] Bluetooth: hci0: command tx timeout [ 406.260800][T17655] netlink: 'syz.2.3019': attribute type 1 has an invalid length. [ 406.294680][T17476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.372114][T17476] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.389217][T17658] __nla_validate_parse: 3 callbacks suppressed [ 406.389239][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3019'. [ 406.426262][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.433624][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.438205][T17658] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 406.544002][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.551546][T14673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.873961][T17673] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 406.998628][T17676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3023'. [ 407.072519][T17673] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.321068][T17476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.356907][T17688] tipc: Enabled bearer , priority 0 [ 407.395863][T17688] syzkaller0: entered promiscuous mode [ 407.408770][T17688] syzkaller0: entered allmulticast mode [ 407.416506][T17694] ipvlan1: entered promiscuous mode [ 407.435741][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 407.449946][T17688] tipc: Resetting bearer [ 407.463754][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 407.482199][T17694] ipvlan1 (unregistering): left promiscuous mode [ 407.508805][T17687] tipc: Resetting bearer [ 407.557966][T17687] tipc: Disabling bearer [ 407.577678][T17174] Bluetooth: hci0: command tx timeout [ 407.583578][T17696] wg1 speed is unknown, defaulting to 1000 [ 407.754881][T17703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3031'. [ 407.780821][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3031'. [ 407.811421][T17706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3032'. [ 407.830651][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 407.845975][T17709] tipc: Started in network mode [ 407.869035][T17709] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 407.877463][T17709] tipc: Enabled bearer , priority 18 [ 407.887280][T17703] Àÿ: renamed from team_slave_1 [ 407.917342][T17476] veth0_vlan: entered promiscuous mode [ 408.062645][T17476] veth1_vlan: entered promiscuous mode [ 408.171313][T17729] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 408.189182][T17729] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3035'. [ 408.213810][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3037'. [ 408.398355][T17476] veth0_macvtap: entered promiscuous mode [ 408.434017][T17476] veth1_macvtap: entered promiscuous mode [ 408.493461][T17476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.560274][T17476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.589199][ T6525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.617255][ T6525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.658024][ T6525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.686116][ T6525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.949588][T14673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.982517][T14673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.983452][ T6662] IPVS: starting estimator thread 0... [ 408.997062][ T6670] tipc: Node number set to 10005162 [ 409.036269][T17758] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 409.050361][T17758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.069839][T14673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.094503][T14673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.117478][T17751] IPVS: using max 26 ests per chain, 62400 per kthread [ 409.341613][T17767] wg1 speed is unknown, defaulting to 1000 [ 409.600971][T17779] hsr0: entered promiscuous mode [ 409.628554][T17779] macvtap1: entered allmulticast mode [ 409.659009][T17174] Bluetooth: hci0: command tx timeout [ 409.679014][T17779] hsr0: entered allmulticast mode [ 409.692339][T17779] hsr_slave_0: entered allmulticast mode [ 409.711376][T17779] hsr_slave_1: entered allmulticast mode [ 409.918581][T17795] openvswitch: netlink: IP tunnel dst address not specified [ 409.922960][T17790] warn_alloc: 1 callbacks suppressed [ 409.922981][T17790] syz.1.3052: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 409.996052][T17790] CPU: 1 UID: 0 PID: 17790 Comm: syz.1.3052 Not tainted syzkaller #0 PREEMPT(full) [ 409.996085][T17790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.996096][T17790] Call Trace: [ 409.996105][T17790] [ 409.996114][T17790] dump_stack_lvl+0x189/0x250 [ 409.996158][T17790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.996182][T17790] ? __pfx__printk+0x10/0x10 [ 409.996209][T17790] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 409.996232][T17790] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 409.996257][T17790] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 409.996283][T17790] warn_alloc+0x214/0x310 [ 409.996320][T17790] ? __pfx_warn_alloc+0x10/0x10 [ 409.996360][T17790] ? __get_vm_area_node+0x28f/0x300 [ 409.996387][T17790] ? nf_tables_newset+0x132b/0x2530 [ 409.996419][T17790] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 409.996477][T17790] ? alloc_pages_mpol+0x3cd/0x4a0 [ 409.996507][T17790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.996544][T17790] ? rcu_is_watching+0x15/0xb0 [ 409.996564][T17790] ? nf_tables_newset+0x132b/0x2530 [ 409.996586][T17790] ? nf_tables_newset+0x132b/0x2530 [ 409.996609][T17790] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 409.996637][T17790] ? nf_tables_newset+0x132b/0x2530 [ 409.996663][T17790] ? nft_table_lookup+0x211/0x230 [ 409.996688][T17790] ? nft_set_lookup+0x128/0x150 [ 409.996705][T17790] ? nft_hash_privsize+0x2f/0xf0 [ 409.996732][T17790] nf_tables_newset+0x132b/0x2530 [ 409.996776][T17790] ? __pfx_nf_tables_newset+0x10/0x10 [ 409.996831][T17790] ? __nla_parse+0x40/0x60 [ 409.996858][T17790] nfnetlink_rcv+0x1132/0x2520 [ 409.996919][T17790] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 409.996960][T17790] ? ref_tracker_free+0x63a/0x7d0 [ 409.997015][T17790] ? __netlink_deliver_tap+0x807/0x850 [ 409.997038][T17790] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.997085][T17790] netlink_unicast+0x82f/0x9e0 [ 409.997117][T17790] ? __pfx_netlink_unicast+0x10/0x10 [ 409.997168][T17790] ? netlink_sendmsg+0x642/0xb30 [ 409.997189][T17790] ? skb_put+0x11b/0x210 [ 409.997217][T17790] netlink_sendmsg+0x805/0xb30 [ 409.997253][T17790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.997281][T17790] ? aa_sock_msg_perm+0xf1/0x1d0 [ 409.997304][T17790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.997325][T17790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.997350][T17790] __sock_sendmsg+0x21c/0x270 [ 409.997375][T17790] ____sys_sendmsg+0x505/0x830 [ 409.997406][T17790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.997444][T17790] ? import_iovec+0x74/0xa0 [ 409.997474][T17790] ___sys_sendmsg+0x21f/0x2a0 [ 409.997503][T17790] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.997577][T17790] ? __fget_files+0x2a/0x420 [ 409.997594][T17790] ? __fget_files+0x3a0/0x420 [ 409.997625][T17790] __x64_sys_sendmsg+0x19b/0x260 [ 409.997655][T17790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.997695][T17790] ? rcu_is_watching+0x15/0xb0 [ 409.997722][T17790] ? do_syscall_64+0xbe/0x3b0 [ 409.997750][T17790] do_syscall_64+0xfa/0x3b0 [ 409.997769][T17790] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.997789][T17790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.997808][T17790] ? clear_bhb_loop+0x60/0xb0 [ 409.997833][T17790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.997852][T17790] RIP: 0033:0x7fa1e5b8eec9 [ 409.997870][T17790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.997886][T17790] RSP: 002b:00007fa1e69ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.997908][T17790] RAX: ffffffffffffffda RBX: 00007fa1e5de6090 RCX: 00007fa1e5b8eec9 [ 409.997922][T17790] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 409.997934][T17790] RBP: 00007fa1e5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.997946][T17790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.997957][T17790] R13: 00007fa1e5de6128 R14: 00007fa1e5de6090 R15: 00007ffc11bf05b8 [ 409.997992][T17790] [ 410.416697][T17790] Mem-Info: [ 410.420048][T17790] active_anon:7064 inactive_anon:0 isolated_anon:0 [ 410.420048][T17790] active_file:3413 inactive_file:40042 isolated_file:0 [ 410.420048][T17790] unevictable:768 dirty:170 writeback:0 [ 410.420048][T17790] slab_reclaimable:13386 slab_unreclaimable:155592 [ 410.420048][T17790] mapped:27470 shmem:1368 pagetables:917 [ 410.420048][T17790] sec_pagetables:0 bounce:0 [ 410.420048][T17790] kernel_misc_reclaimable:0 [ 410.420048][T17790] free:1260211 free_pcp:18336 free_cma:0 [ 410.526070][T17790] Node 0 active_anon:28260kB inactive_anon:0kB active_file:13652kB inactive_file:159972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117908kB dirty:684kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14744kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 410.560325][T17790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 410.593210][T17790] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.603611][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.624790][T17790] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 410.637794][T17790] Node 0 DMA32 free:1124892kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28316kB inactive_anon:0kB active_file:13652kB inactive_file:158392kB unevictable:1536kB writepending:680kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:47984kB local_pcp:21880kB free_cma:0kB [ 410.672230][T17790] lowmem_reserve[]: 0 0 1 1 1 [ 410.677593][T17790] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 410.707745][T17790] lowmem_reserve[]: 0 0 0 0 0 [ 410.712609][T17790] Node 1 Normal free:3891060kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18284kB local_pcp:7936kB free_cma:0kB [ 410.716937][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.746275][T17790] lowmem_reserve[]: 0 0 0 0 0 [ 410.758321][T17790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.773200][T17790] Node 0 DMA32: 1191*4kB (UME) 424*8kB (M) [ 410.773272][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.773282][T17790] 18*16kB [ 410.789820][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.792599][T17790] (M) [ 410.795169][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.802272][T17790] 7*32kB (UM) 73*64kB (UME) 124*128kB (UM) 66*256kB (UME) 19*512kB (UM) 8*1024kB (UME) 8*2048kB (UM) 255*4096kB (UM) = 1124892kB [ 410.829545][T17790] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 410.842347][T17790] Node 1 Normal: 1*4kB (E) 16*8kB (UME) 41*16kB (UME) 95*32kB (UME) 30*64kB (UME) 6*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891060kB [ 410.887209][T17790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.898113][T17790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.909012][T17790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.918917][T17790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.930130][T17790] 44821 total pagecache pages [ 410.934953][T17790] 0 pages in swap cache [ 410.943015][T17790] Free swap = 124996kB [ 410.947541][T17790] Total swap = 124996kB [ 410.955097][T17790] 2097051 pages RAM [ 410.959057][T17790] 0 pages HighMem/MovableOnly [ 410.963769][T17790] 425681 pages reserved [ 410.968787][T17790] 0 pages cma reserved [ 411.375991][T17800] wg1 speed is unknown, defaulting to 1000 [ 411.512243][ T6657] IPVS: starting estimator thread 0... [ 411.607089][T17839] IPVS: using max 23 ests per chain, 55200 per kthread [ 411.864212][T17856] netlink: 'syz.2.3067': attribute type 10 has an invalid length. [ 411.945400][T17860] __nla_validate_parse: 8 callbacks suppressed [ 411.945422][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'. [ 411.949966][T17848] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 411.953236][T17860] netlink: 'syz.1.3072': attribute type 5 has an invalid length. [ 411.990316][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3072'. [ 412.005626][T17856] mac80211_hwsim hwsim43 wlan1: left allmulticast mode [ 412.028726][T17856] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 412.047164][T17860] geneve2: entered promiscuous mode [ 412.053585][T17860] geneve2: entered allmulticast mode [ 412.071256][T14671] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 412.096770][T14671] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 412.138927][T14671] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 412.157689][T14671] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 412.205616][T17800] chnl_net:caif_netlink_parms(): no params data found [ 412.205998][T17868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3073'. [ 412.324532][T17872] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3075'. [ 412.334749][T17872] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 412.383990][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 412.572956][T17877] wg1 speed is unknown, defaulting to 1000 [ 412.603974][T17878] wg1 speed is unknown, defaulting to 1000 [ 412.871013][ T5862] Bluetooth: hci3: command tx timeout [ 412.882145][T17800] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.901833][T17800] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.911908][T17800] bridge_slave_0: entered allmulticast mode [ 412.921612][T17800] bridge_slave_0: entered promiscuous mode [ 412.931376][T17800] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.940829][T17800] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.948845][T17800] bridge_slave_1: entered allmulticast mode [ 412.962856][T17800] bridge_slave_1: entered promiscuous mode [ 412.979573][T17895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3080'. [ 413.243086][T17800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.269118][T17902] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3081'. [ 413.289065][T17800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.337601][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.356511][T17909] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3083'. [ 413.408586][T17800] team0: Port device team_slave_0 added [ 413.419658][T17800] team0: Port device team_slave_1 added [ 413.530098][T17919] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3084'. [ 413.533503][T17800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.558766][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.586872][T17800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.627798][T17800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.635318][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.674973][T17800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.192735][T17800] hsr_slave_0: entered promiscuous mode [ 414.219972][T17800] hsr_slave_1: entered promiscuous mode [ 414.256953][T17800] debugfs: 'hsr0' already exists in 'hsr' [ 414.262841][T17800] Cannot create hsr debugfs directory [ 414.393382][T17950] netlink: 'syz.1.3094': attribute type 14 has an invalid length. [ 414.482401][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'. [ 414.570387][T17936] wg1 speed is unknown, defaulting to 1000 [ 414.651597][T17957] netlink: 'syz.1.3096': attribute type 13 has an invalid length. [ 414.680492][T17957] netlink: 'syz.1.3096': attribute type 17 has an invalid length. [ 414.841778][T17955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.874123][T17957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.937496][ T5862] Bluetooth: hci3: command tx timeout [ 415.188575][T17976] veth0_virt_wifi: renamed from ipvlan0 [ 415.271389][T17961] wg1 speed is unknown, defaulting to 1000 [ 415.320328][T17971] wg1 speed is unknown, defaulting to 1000 [ 415.411044][T17800] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.502587][T17800] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.559079][T17800] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.730335][T17800] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.799227][T17983] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 415.999034][T17991] dvmrp8: entered allmulticast mode [ 416.079167][T17985] dvmrp8: left allmulticast mode [ 416.170526][T18000] tipc: Enabled bearer , priority 0 [ 416.339039][T18009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.360562][T18009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.442152][T17800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.488636][T17800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.533218][T17800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.573426][T17800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.603710][T18014] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 416.613411][T18014] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 416.896447][T17800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.009157][T17800] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.017255][ T5862] Bluetooth: hci3: command tx timeout [ 417.051046][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.058483][T14671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.118074][T18042] __nla_validate_parse: 7 callbacks suppressed [ 417.118094][T18042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3117'. [ 417.140388][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.147618][T14671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.307633][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3119'. [ 417.370691][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 417.381123][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 417.623091][T18063] gretap0: Device is already in use. [ 417.700445][T17800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.814784][T18076] netlink: 'syz.0.3126': attribute type 15 has an invalid length. [ 417.833034][T18076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3126'. [ 417.949155][T18075] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3125'. [ 418.140215][T18102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3128'. [ 418.375491][T18110] tipc: Resetting bearer [ 418.470441][T17800] veth0_vlan: entered promiscuous mode [ 418.586437][T17800] veth1_vlan: entered promiscuous mode [ 418.702694][T17800] veth0_macvtap: entered promiscuous mode [ 418.736314][T17800] veth1_macvtap: entered promiscuous mode [ 418.767400][T17800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.791840][T17800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.809857][T14672] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.824299][T14672] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.850663][T14672] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.914309][T14672] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.954503][T18129] wg1 speed is unknown, defaulting to 1000 [ 419.099347][ T5862] Bluetooth: hci3: command tx timeout [ 419.156201][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.166028][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.274171][T18137] tipc: Failed to remove unknown binding: 66,1,1/1406366931:3238171279/3238171281 [ 419.336416][T18143] wg1 speed is unknown, defaulting to 1000 [ 419.390879][T14674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.400471][T14674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.041805][T18136] tipc: Failed to remove unknown binding: 66,1,1/1406366931:3238171279/3238171281 [ 420.119140][T18136] tipc: Failed to remove unknown binding: 66,1,1/1406366931:3238171279/3238171281 [ 420.605392][T18167] tipc: Enabled bearer , priority 0 [ 420.615714][T18171] bridge0: port 3(syz_tun) entered blocking state [ 420.622950][T18171] bridge0: port 3(syz_tun) entered disabled state [ 420.631479][T18171] syz_tun: entered allmulticast mode [ 420.639636][T18171] syz_tun: entered promiscuous mode [ 420.646900][T18171] bridge0: port 3(syz_tun) entered blocking state [ 420.653480][T18171] bridge0: port 3(syz_tun) entered forwarding state [ 420.667375][T18171] rdma_rxe: rxe_newlink: failed to add syz_tun [ 420.697987][T18167] syzkaller0: entered promiscuous mode [ 420.704333][T18167] syzkaller0: entered allmulticast mode [ 420.800158][T18176] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3144'. [ 420.985626][T18167] tipc: Resetting bearer [ 421.003100][T17174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.022167][T17174] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.031833][T17174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.062917][T17174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.073615][T17174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.159410][T18166] tipc: Resetting bearer [ 421.198734][T18166] tipc: Disabling bearer [ 421.280584][T18186] wg1 speed is unknown, defaulting to 1000 [ 421.558021][T18199] tipc: Started in network mode [ 421.562942][T18199] tipc: Node identity , cluster identity 4711 [ 421.581176][T18199] tipc: Failed to obtain node identity [ 421.598023][T18199] tipc: Enabling of bearer rejected, failed to enable media [ 421.659348][ T96] block nbd0: Possible stuck request ffff8880251f0000: control (read@0,1024B). Runtime 300 seconds [ 421.671536][ T96] block nbd0: Possible stuck request ffff8880251f01c0: control (read@1024,1024B). Runtime 300 seconds [ 421.685015][ T96] block nbd0: Possible stuck request ffff8880251f0380: control (read@2048,1024B). Runtime 300 seconds [ 421.696447][ T96] block nbd0: Possible stuck request ffff8880251f0540: control (read@3072,1024B). Runtime 300 seconds [ 421.909639][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.998572][T18223] sock: sock_timestamping_bind_phc: sock not bind to device [ 422.068263][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.109647][T18214] wg1 speed is unknown, defaulting to 1000 [ 422.195570][T18227] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3155'. [ 422.224760][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.265018][T18231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3161'. [ 422.283052][T18186] chnl_net:caif_netlink_parms(): no params data found [ 422.332028][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.396332][T18233] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3161'. [ 422.411783][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3160'. [ 422.605165][T18237] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 422.688764][T18237] bond9: entered promiscuous mode [ 422.695143][T18237] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.704383][T18186] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.713028][T18186] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.720771][T18186] bridge_slave_0: entered allmulticast mode [ 422.729724][T18186] bridge_slave_0: entered promiscuous mode [ 422.739460][T18186] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.747337][T18186] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.754723][T18186] bridge_slave_1: entered allmulticast mode [ 422.763454][T18186] bridge_slave_1: entered promiscuous mode [ 422.805809][T18239] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.813824][T18239] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 422.825015][T18239] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 422.846112][T18239] bond9: (slave wireguard0): making interface the new active one [ 422.854476][T18239] wireguard0: entered promiscuous mode [ 422.866022][T18239] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 422.952268][T18186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.980790][T18186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.039078][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3164'. [ 423.183294][ T5862] Bluetooth: hci2: command tx timeout [ 423.361825][ T36] bond6 (unregistering): (slave geneve4): Releasing active interface [ 423.430036][ T36] team0: Port device geneve0 removed [ 423.832993][ T36] team0: Port device bridge7 removed [ 424.183355][ T36] bond0 (unregistering): Released all slaves [ 424.198601][ T36] bond1 (unregistering): Released all slaves [ 424.351980][ T36] bond2 (unregistering): Released all slaves [ 424.366113][ T36] bond3 (unregistering): Released all slaves [ 424.385661][ T36] bond4 (unregistering): (slave veth9): Releasing active interface [ 424.395828][ T36] bond4 (unregistering): (slave veth11): Releasing active interface [ 424.405702][ T36] bond4 (unregistering): Released all slaves [ 424.420404][ T36] bond5 (unregistering): Released all slaves [ 424.553783][ T36] bond6 (unregistering): Released all slaves [ 424.680066][ T36] bond7 (unregistering): Released all slaves [ 424.738763][T18186] team0: Port device team_slave_0 added [ 424.813333][T18258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.903556][T18262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.903639][T18275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3169'. [ 424.950744][T18186] team0: Port device team_slave_1 added [ 425.076038][T18186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.119698][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.161677][T18186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.204397][T18186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.226821][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.257374][ T5862] Bluetooth: hci2: command tx timeout [ 425.279831][T18186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.444877][T18299] netlink: 'syz.1.3176': attribute type 4 has an invalid length. [ 425.445565][T18186] hsr_slave_0: entered promiscuous mode [ 425.465850][T18186] hsr_slave_1: entered promiscuous mode [ 425.473356][T18186] debugfs: 'hsr0' already exists in 'hsr' [ 425.485541][T18186] Cannot create hsr debugfs directory [ 425.534288][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'. [ 425.789070][T18305] tipc: Started in network mode [ 425.814702][T18305] tipc: Node identity 0e97b7af15c1, cluster identity 4711 [ 425.837521][T18305] tipc: Enabled bearer , priority 0 [ 425.886386][T18310] syzkaller0: entered promiscuous mode [ 425.900788][T18310] syzkaller0: entered allmulticast mode [ 425.966883][T18305] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3180'. [ 425.983889][T18305] tipc: Resetting bearer [ 426.014995][T18311] wg1 speed is unknown, defaulting to 1000 [ 426.033344][T18304] tipc: Resetting bearer [ 426.090100][T18304] tipc: Disabling bearer [ 426.541851][ T36] : left promiscuous mode [ 426.825342][ T36] tipc: Left network mode [ 426.825474][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 426.856494][ T36] IPVS: stopping backup sync thread 6276 ... [ 427.352642][ T5862] Bluetooth: hci2: command tx timeout [ 427.559253][T18186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.593741][T18333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3187'. [ 427.620673][T18333] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3187'. [ 427.657602][T18186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.707885][T18186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.785336][T18186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.852601][ T36] hsr_slave_0: left promiscuous mode [ 427.874430][ T36] hsr_slave_1: left promiscuous mode [ 427.885949][ T36] veth1_to_hsr: left allmulticast mode [ 427.897557][ T36] veth1_to_hsr: left promiscuous mode [ 428.414633][ T36] pimreg (unregistering): left allmulticast mode [ 429.416966][ T5862] Bluetooth: hci2: command tx timeout [ 429.452580][T18365] netlink: 'syz.2.3195': attribute type 10 has an invalid length. [ 429.655691][T18336] tipc: Started in network mode [ 429.661353][T18336] tipc: Node identity ce3fe2f163f1, cluster identity 4711 [ 429.670109][T18336] tipc: Enabled bearer , priority 0 [ 429.677449][T18337] veth0_virt_wifi: entered promiscuous mode [ 429.683591][T18337] veth0_virt_wifi: entered allmulticast mode [ 429.697478][T18358] tipc: Resetting bearer [ 429.752333][T18335] tipc: Disabling bearer [ 429.768822][T18365] bridge0: port 3(macsec0) entered blocking state [ 429.775786][T18365] bridge0: port 3(macsec0) entered disabled state [ 429.785168][T18365] macsec0: entered allmulticast mode [ 429.785515][T18370] netlink: 'syz.0.3196': attribute type 3 has an invalid length. [ 429.794741][T18365] veth1_macvtap: entered allmulticast mode [ 429.809824][T18365] macsec0: entered promiscuous mode [ 429.816201][T18365] bridge0: port 3(macsec0) entered blocking state [ 429.823487][T18365] bridge0: port 3(macsec0) entered forwarding state [ 429.835614][T18345] wg1 speed is unknown, defaulting to 1000 [ 429.844588][T18370] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 430.265934][ T36] IPVS: stop unused estimator thread 0... [ 430.391503][T18186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.433084][T18186] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.460378][T18397] netlink: 'syz.0.3201': attribute type 16 has an invalid length. [ 430.468733][T18397] netlink: 'syz.0.3201': attribute type 17 has an invalid length. [ 431.061635][T18397] tipc: Resetting bearer [ 431.169485][T18420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.377228][T18423] sctp: [Deprecated]: syz.2.3208 (pid 18423) Use of int in max_burst socket option deprecated. [ 431.377228][T18423] Use struct sctp_assoc_value instead [ 431.460818][T18397] gretap0: left allmulticast mode [ 431.493449][T18397] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 431.524060][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 431.579311][T14672] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.586659][T14672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.642470][ T1016] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.687937][T14672] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.695163][T14672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.745344][ T1016] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.756155][ T1016] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.772311][ T1016] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.916103][T18432] tipc: Enabled bearer , priority 0 [ 431.925466][T18432] syzkaller0: entered promiscuous mode [ 431.931512][T18432] syzkaller0: entered allmulticast mode [ 432.086020][T18441] bridge_slave_0: left allmulticast mode [ 432.092201][T18441] bridge_slave_0: left promiscuous mode [ 432.101731][T18441] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.124868][T18441] bridge_slave_1: left allmulticast mode [ 432.137592][T18441] bridge_slave_1: left promiscuous mode [ 432.143726][T18441] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.165959][T18441] bond0: (slave bond_slave_0): Releasing backup interface [ 432.199808][T18449] netlink: 'syz.1.3212': attribute type 10 has an invalid length. [ 432.238711][T18441] bond0: (slave bond_slave_1): Releasing backup interface [ 432.272188][T18441] team0: Port device team_slave_0 removed [ 432.290024][T18441] team0: Port device team_slave_1 removed [ 432.301931][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.310396][T18441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.319981][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.329453][T18441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.340674][T18441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.374069][T18449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.425106][T18449] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 432.501990][T18458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3215'. [ 432.593239][T18186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.669651][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3216'. [ 432.677888][T18186] veth0_vlan: entered promiscuous mode [ 432.685378][T18429] tipc: Resetting bearer [ 432.710849][T18429] tipc: Disabling bearer [ 432.725492][T18186] veth1_vlan: entered promiscuous mode [ 432.751214][T18465] vlan2: entered allmulticast mode [ 432.758088][T18465] bridge0: entered allmulticast mode [ 432.845173][T18186] veth0_macvtap: entered promiscuous mode [ 432.869871][T18186] veth1_macvtap: entered promiscuous mode [ 432.943572][T18186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.984190][T18186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.014420][ T6525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.030495][T18470] netlink: 'syz.4.3218': attribute type 13 has an invalid length. [ 433.049046][ T6525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.063833][ T6525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.077360][ T6525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.164867][T18480] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 433.325440][T18480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.402358][T18478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.442169][T18478] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 433.457280][T18478] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 433.565897][T18484] veth3: entered promiscuous mode [ 433.580802][T18484] bond1: (slave veth3): Enslaving as an active interface with a down link [ 433.776223][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.791789][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.876214][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 433.976941][T17174] Bluetooth: hci2: command 0x0405 tx timeout [ 434.004003][T18508] bridge0: port 3(macsec0) entered disabled state [ 434.010904][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.018889][T18508] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.180275][T18508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.202483][T18508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.263635][T18508] tipc: Resetting bearer [ 434.341672][T18508] veth1_macvtap: left allmulticast mode [ 434.416304][T18508] hsr0: left allmulticast mode [ 434.428975][T18508] hsr_slave_0: left allmulticast mode [ 434.434603][T18508] hsr_slave_1: left allmulticast mode [ 434.489057][ T6525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.506931][ T6525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.607169][T14672] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.634585][T14672] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.681831][T14672] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.700919][T14672] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.725719][T18511] syzkaller1: entered promiscuous mode [ 434.749563][T18511] syzkaller1: entered allmulticast mode [ 434.794384][T18522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3232'. [ 435.081227][T18531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 435.280583][T18541] geneve3: entered promiscuous mode [ 435.300785][T18541] geneve3: entered allmulticast mode [ 435.430261][T18537] wg1 speed is unknown, defaulting to 1000 [ 435.792670][T18556] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3239'. [ 436.031792][T18567] wg1 speed is unknown, defaulting to 1000 [ 436.151302][T18548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 436.169283][T18548] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 436.410313][T18582] netlink: 'syz.2.3244': attribute type 5 has an invalid length. [ 436.449345][T18548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.455483][T18548] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 436.595290][T18548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.610247][T18548] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 436.654029][T18590] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3247'. [ 436.682047][T18548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.689332][T18548] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 436.816207][T17174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.826842][T17174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.844533][T17174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.852853][T17174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.860926][T17174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.867598][T18595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3248'. [ 436.944019][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.955593][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.960197][T18603] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3249'. [ 436.963703][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.977655][T18603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 436.980910][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.997136][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.037432][T18603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3249'. [ 437.046042][T18557] wg1 speed is unknown, defaulting to 1000 [ 437.319383][T18557] chnl_net:caif_netlink_parms(): no params data found [ 437.568429][T18613] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.923324][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3254'. [ 438.115354][T18613] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.165802][T18557] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.174698][T18557] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.182686][T18557] bridge_slave_0: entered allmulticast mode [ 438.192467][T18557] bridge_slave_0: entered promiscuous mode [ 438.202760][T18557] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.210611][T18557] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.218225][T18557] bridge_slave_1: entered allmulticast mode [ 438.226474][T18557] bridge_slave_1: entered promiscuous mode [ 438.277409][T18625] macvlan2: entered promiscuous mode [ 438.283349][T18625] syz_tun: entered promiscuous mode [ 438.312666][T18625] team0: Port device macvlan2 added [ 438.335126][T18631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3256'. [ 438.582072][T18641] netlink: 'syz.3.3259': attribute type 3 has an invalid length. [ 438.597267][T18641] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3259'. [ 438.609598][T18613] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.679393][T18557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.705122][T18557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.721071][T18649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 438.737590][T18650] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 438.823257][T18613] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.934061][T18557] team0: Port device team_slave_0 added [ 438.960276][T18557] team0: Port device team_slave_1 added [ 439.017952][ T5862] Bluetooth: hci4: command tx timeout [ 439.051728][T18657] IPVS: Error connecting to the multicast addr [ 439.068423][T18557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.091809][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.111167][T18662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.124076][T18557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.140576][T18662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.161422][T18557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.169286][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.197208][T18557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.242481][T14671] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.295484][T18664] geneve2: left allmulticast mode [ 439.314447][T14671] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.390334][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 439.403585][T14671] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.425521][ T8784] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.436116][T18668] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 439.455052][T18557] hsr_slave_0: entered promiscuous mode [ 439.463890][T18557] hsr_slave_1: entered promiscuous mode [ 439.475869][T18557] debugfs: 'hsr0' already exists in 'hsr' [ 439.495147][T18557] Cannot create hsr debugfs directory [ 439.532538][T18673] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 439.542976][T18673] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3267'. [ 440.031699][T18692] syzkaller1: entered promiscuous mode [ 440.039547][T18692] syzkaller1: entered allmulticast mode [ 440.380171][T18710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.385627][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3282'. [ 440.417461][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 440.434044][T18710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.483953][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 440.729404][T18732] tipc: Can't bind to reserved service type 1 [ 440.739552][T18732] netlink: 'syz.4.3289': attribute type 39 has an invalid length. [ 440.787837][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 440.799347][T18739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 440.801917][T18557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.810106][T18739] netlink: 'syz.4.3289': attribute type 5 has an invalid length. [ 440.841237][T18557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.890501][T18739] vlan2: entered allmulticast mode [ 440.939095][T18557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.989106][T18557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.040805][T18749] vlan3: entered promiscuous mode [ 441.046081][T18749] bridge0: entered promiscuous mode [ 441.097146][ T5862] Bluetooth: hci4: command tx timeout [ 441.273678][T18557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.315969][T18557] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.383434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.390887][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.433122][T14672] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.440484][T14672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.450593][T18762] wg1 speed is unknown, defaulting to 1000 [ 441.602724][T18773] syzkaller1: entered promiscuous mode [ 441.613264][T18773] syzkaller1: entered allmulticast mode [ 441.958731][T18788] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 442.161283][T18797] lo: entered allmulticast mode [ 442.179423][T18796] lo: left allmulticast mode [ 442.227639][T18800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.276951][T18800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.295207][T18557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.328899][T18806] Bluetooth: MGMT ver 1.23 [ 442.434876][T18557] veth0_vlan: entered promiscuous mode [ 442.456318][T18557] veth1_vlan: entered promiscuous mode [ 442.522493][T18557] veth0_macvtap: entered promiscuous mode [ 442.533671][T18557] veth1_macvtap: entered promiscuous mode [ 442.562420][T18557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.581104][T18557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.611936][ T6525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.635316][ T6525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.654771][ T6525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.665622][ T6525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.829392][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.848486][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.931212][ T8784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.957023][ T8784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.005506][T18822] tipc: Enabled bearer , priority 0 [ 443.026138][T18822] syzkaller0: entered promiscuous mode [ 443.033097][T18822] syzkaller0: entered allmulticast mode [ 443.052142][T18829] : renamed from veth1 (while UP) [ 443.173226][T18822] tipc: Resetting bearer [ 443.179336][ T5862] Bluetooth: hci4: command tx timeout [ 443.223844][T18821] tipc: Resetting bearer [ 443.278890][T18821] tipc: Disabling bearer [ 443.346143][T18840] __nla_validate_parse: 7 callbacks suppressed [ 443.346165][T18840] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3315'. [ 443.509266][T18849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.806446][T18859] netlink: 'syz.4.3321': attribute type 1 has an invalid length. [ 443.898576][T18864] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 443.930521][T18859] bond2: (slave veth7): Enslaving as an active interface with a down link [ 443.953254][T18859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3321'. [ 444.007352][T18859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.129075][T18871] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3325'. [ 444.135160][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3323'. [ 444.724290][T18905] wg1 speed is unknown, defaulting to 1000 [ 444.757265][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 444.767390][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 444.770882][T18911] tipc: New replicast peer: 255.255.255.255 [ 444.785809][T18911] tipc: Enabled bearer , priority 10 [ 444.797765][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 444.856214][T18911] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3337'. [ 445.013809][T18921] tipc: Enabled bearer , priority 0 [ 445.047074][T18921] syzkaller0: entered promiscuous mode [ 445.063070][T18921] syzkaller0: entered allmulticast mode [ 445.095080][T18921] tipc: Resetting bearer [ 445.117815][T18920] tipc: Resetting bearer [ 445.156906][T18920] tipc: Disabling bearer [ 445.257179][ T5862] Bluetooth: hci4: command tx timeout [ 445.338585][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.445224][T18944] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 445.467467][T18944] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3348'. [ 445.590097][T18946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3349'. [ 445.712789][T18954] netlink: 'syz.4.3350': attribute type 5 has an invalid length. [ 446.224608][T18969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.243228][T18969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.356046][T18969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.369395][T18969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.554751][T18969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.570791][T18969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.687947][T18969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.712485][T18969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.870766][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 446.879716][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.919471][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 446.953484][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.997757][T18998] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 447.013848][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 447.033285][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.084799][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 447.103674][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.137625][T19002] wg1 speed is unknown, defaulting to 1000 [ 448.243859][T19038] wg1 speed is unknown, defaulting to 1000 [ 448.250098][T19044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 448.330282][T19047] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 448.452162][T19056] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 448.460667][T19056] netlink: 'syz.1.3385': attribute type 1 has an invalid length. [ 448.547250][T19050] __nla_validate_parse: 9 callbacks suppressed [ 448.547270][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'. [ 448.883419][T19058] wg1 speed is unknown, defaulting to 1000 [ 448.896441][T19061] bridge1: entered promiscuous mode [ 448.902462][T19061] bridge1: entered allmulticast mode [ 448.997948][T19066] IPVS: Unknown mcast interface: [ 450.315512][T19058] netlink: 'syz.4.3384': attribute type 12 has an invalid length. [ 450.687814][T19118] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 450.715074][T19118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3400'. [ 450.878410][T19122] wg1 speed is unknown, defaulting to 1000 [ 451.038532][T19130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3402'. [ 451.320735][T19143] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 451.357443][T19143] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 451.427400][T19146] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 451.442023][T19146] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 451.740787][ T96] block nbd0: Possible stuck request ffff8880251f0000: control (read@0,1024B). Runtime 330 seconds [ 451.751913][ T96] block nbd0: Possible stuck request ffff8880251f01c0: control (read@1024,1024B). Runtime 330 seconds [ 451.763379][ T96] block nbd0: Possible stuck request ffff8880251f0380: control (read@2048,1024B). Runtime 330 seconds [ 451.775853][ T96] block nbd0: Possible stuck request ffff8880251f0540: control (read@3072,1024B). Runtime 330 seconds [ 452.261881][T19157] wg1 speed is unknown, defaulting to 1000 [ 452.519740][T19182] syzkaller1: entered promiscuous mode [ 452.525362][T19182] syzkaller1: entered allmulticast mode [ 452.983565][T19186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3413'. [ 453.048848][T19186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3413'. [ 453.121197][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3418'. [ 453.167278][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3418'. [ 453.798204][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'. [ 453.974152][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 453.985202][T19243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.104077][T19246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.286317][T19257] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3432'. [ 454.448956][T19264] wg1 speed is unknown, defaulting to 1000 [ 454.505761][T19266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3433'. [ 454.506356][T19273] netlink: 'syz.2.3438': attribute type 3 has an invalid length. [ 454.605987][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 454.847978][T19283] wg1 speed is unknown, defaulting to 1000 [ 454.982189][T19294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3442'. [ 455.039508][T19297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3443'. [ 455.065198][T19298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3443'. [ 455.120215][T19294] nbd: socks must be embedded in a SOCK_ITEM attr [ 455.293350][T19297] team0: No ports can be present during mode change [ 455.940697][T19333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.270636][T19338] ip6tnl1: entered promiscuous mode [ 456.287485][T19338] ip6tnl1: entered allmulticast mode [ 456.340133][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 456.510075][T19351] syzkaller0: entered promiscuous mode [ 456.515602][T19351] syzkaller0: entered allmulticast mode [ 456.854026][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 456.861319][T19365] wg1 speed is unknown, defaulting to 1000 [ 456.902000][ T5963] IPVS: starting estimator thread 0... [ 457.017177][T19374] IPVS: using max 22 ests per chain, 52800 per kthread [ 457.086414][T19372] macvlan3: entered promiscuous mode [ 457.092441][T19372] vlan0: entered promiscuous mode [ 457.136885][T19382] netdevsim0: mtu less than device minimum [ 457.256955][ T5862] Bluetooth: hci4: command tx timeout [ 457.411805][ T8784] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 457.970090][T19428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.038143][T19430] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 458.123200][T19440] veth0_to_team: entered allmulticast mode [ 458.318281][T19454] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 458.352140][ T8784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.373118][ T8784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.504001][T19457] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 458.548551][T19457] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 458.561379][T19457] bond2: (slave vti0): making interface the new active one [ 458.570650][T19457] bond2: (slave vti0): Enslaving as an active interface with an up link [ 458.649325][T19474] netlink: 'syz.1.3485': attribute type 4 has an invalid length. [ 458.774814][T19457] tap0: tun_chr_ioctl cmd 1074025677 [ 458.782613][T19457] tap0: linktype set to 800 [ 458.819965][T19474] wlan1: mtu less than device minimum [ 459.151491][T19499] __nla_validate_parse: 7 callbacks suppressed [ 459.151512][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 459.174407][T19499] netlink: 'syz.0.3494': attribute type 21 has an invalid length. [ 459.194411][T19499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3494'. [ 460.038153][T19528] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 460.046145][T19528] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3500'. [ 460.081719][T19528] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 460.130120][T19528] netlink: 'syz.1.3500': attribute type 2 has an invalid length. [ 460.196962][T19529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3495'. [ 460.507823][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 460.667974][T19574] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3506'. [ 461.065974][T19590] wg1 speed is unknown, defaulting to 1000 [ 461.488870][T19607] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3517'. [ 461.540767][T19610] netlink: 'syz.4.3511': attribute type 6 has an invalid length. [ 462.112335][T19632] netlink: 'syz.0.3523': attribute type 5 has an invalid length. [ 462.240013][T19640] netlink: 'syz.0.3523': attribute type 1 has an invalid length. [ 462.247950][T19640] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3523'. [ 462.311611][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'. [ 462.543153][T19653] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3528'. [ 462.735780][T19659] syz_tun: left allmulticast mode [ 462.746743][T19659] syz_tun: left promiscuous mode [ 462.773924][T19659] bridge0: port 3(syz_tun) entered disabled state [ 462.840401][T19659] bridge_slave_1: left allmulticast mode [ 462.857590][T19659] bridge_slave_1: left promiscuous mode [ 462.863691][T19659] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.885812][T19659] bridge_slave_0: left promiscuous mode [ 462.900396][T19659] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.916308][T19672] sctp: [Deprecated]: syz.3.3534 (pid 19672) Use of int in maxseg socket option. [ 462.916308][T19672] Use struct sctp_assoc_value instead [ 463.689726][T19703] wg1 speed is unknown, defaulting to 1000 [ 464.095360][T19729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.225813][T19737] wg1 speed is unknown, defaulting to 1000 [ 464.372608][T19747] __nla_validate_parse: 6 callbacks suppressed [ 464.372628][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3550'. [ 464.441102][T19747] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 464.483188][T19750] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 464.492096][T19750] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3553'. [ 465.183709][T19765] wg1 speed is unknown, defaulting to 1000 [ 466.430420][T19803] wg1 speed is unknown, defaulting to 1000 [ 466.767655][T19816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.330346][T19836] Unsupported ieee802154 address type: 0 [ 467.362088][T19839] Unsupported ieee802154 address type: 0 [ 467.541685][T19846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3580'. [ 467.578059][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'. [ 467.653291][T19851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.671312][T19851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.723406][T19842] netlink: 'syz.1.3579': attribute type 29 has an invalid length. [ 467.747463][T19849] wg1 speed is unknown, defaulting to 1000 [ 467.767747][T19854] netlink: 'syz.1.3579': attribute type 29 has an invalid length. [ 468.285001][T19872] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3587'. [ 468.360277][T19878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3588'. [ 468.392829][T19881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3590'. [ 468.401423][T19878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.895295][T19903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3597'. [ 469.048116][T19906] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3599'. [ 469.429851][T19935] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 469.438337][T19935] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 469.457660][T19935] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 469.564606][T19941] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3611'. [ 469.616166][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 470.063298][T19961] wg1 speed is unknown, defaulting to 1000 [ 470.239141][T19973] bond0: (slave vlan2): Opening slave failed [ 470.350325][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 470.399846][T19976] batadv0: entered promiscuous mode [ 470.408230][T19976] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 470.420908][T19976] batadv0: left promiscuous mode [ 470.496221][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3625'. [ 470.931641][T20003] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 470.995055][T20003] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 471.035852][T20003] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 471.093575][T20009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3632'. [ 471.156156][T20010] bridge0: entered promiscuous mode [ 471.288683][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 471.553875][T20030] nbd4: detected capacity change from 0 to 63 [ 471.573704][T20031] nbd: nbd4 already in use [ 471.633632][ T5862] block nbd4: Receive control failed (result -32) [ 471.640534][T20033] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 471.914753][T20057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3650'. [ 472.030586][T20064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.073700][T20064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.078025][T20068] netlink: 'syz.0.3652': attribute type 10 has an invalid length. [ 472.119453][T20068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3652'. [ 472.155360][T20068] team0: Port device geneve0 added [ 472.199860][T20065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3649'. [ 472.342669][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3657'. [ 472.385563][T20082] netlink: 'syz.0.3656': attribute type 13 has an invalid length. [ 472.394345][T20082] netlink: 'syz.0.3656': attribute type 17 has an invalid length. [ 472.418587][T20085] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 472.431224][T20085] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 472.507735][T20082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.550234][T20088] ip6gretap0: entered promiscuous mode [ 472.557752][T20088] macsec1: entered allmulticast mode [ 472.563410][T20088] ip6gretap0: entered allmulticast mode [ 472.577377][T20088] ip6gretap0: left allmulticast mode [ 472.583619][T20088] ip6gretap0: left promiscuous mode [ 472.713675][T20083] wg1 speed is unknown, defaulting to 1000 [ 473.093802][T20103] netlink: 'syz.4.3661': attribute type 4 has an invalid length. [ 473.122682][T20106] wg1 speed is unknown, defaulting to 1000 [ 473.161279][T20111] netlink: 'syz.4.3661': attribute type 4 has an invalid length. [ 473.382890][T20115] wg1 speed is unknown, defaulting to 1000 [ 473.389249][T20117] sctp: [Deprecated]: syz.3.3664 (pid 20117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.389249][T20117] Use struct sctp_sack_info instead [ 473.882181][T20130] netlink: 'syz.4.3670': attribute type 10 has an invalid length. [ 473.951096][T20130] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 474.131416][T20136] bridge0: entered promiscuous mode [ 474.203738][T20136] bridge0: entered allmulticast mode [ 474.246056][T20140] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 474.345049][T20130] tipc: Enabling of bearer rejected, failed to enable media [ 474.909659][T20163] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 477.850415][T20215] nbd: illegal input index -1 [ 478.011522][T20223] __nla_validate_parse: 5 callbacks suppressed [ 478.011543][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3688'. [ 478.036695][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3688'. [ 478.220203][T20226] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 478.260174][T20221] team0: Device ipip0 is of different type [ 478.335035][T20223] ip6tnl1: entered promiscuous mode [ 478.340732][T20223] ip6tnl1: entered allmulticast mode [ 478.407981][T20228] veth3: entered promiscuous mode [ 478.489634][T20233] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3693'. [ 478.501358][T20226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.552008][T20233] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.560055][T20233] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.675741][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.750253][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.852839][T20245] wg1 speed is unknown, defaulting to 1000 [ 479.147917][T20256] netlink: 'syz.0.3699': attribute type 10 has an invalid length. [ 479.325014][T20262] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3700'. [ 479.728336][T20276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3705'. [ 479.776574][T20277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3705'. [ 479.996722][T20289] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3707'. [ 480.014340][T20289] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 480.026189][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3709'. [ 480.042171][T20295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.102893][T20295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.135591][T20296] wg1 speed is unknown, defaulting to 1000 [ 480.173446][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.234499][T20304] netlink: 'syz.2.3713': attribute type 4 has an invalid length. [ 480.253384][T20304] netlink: 'syz.2.3713': attribute type 4 has an invalid length. [ 480.263604][T20286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.287460][T20304] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 480.308674][T20306] netlink: del zone limit has 4 unknown bytes [ 480.418749][T20296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.530424][T14672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.544107][T14672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.812516][T20333] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3720'. [ 480.819869][T20335] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 481.048569][T20335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.087623][T20338] bond3: (slave geneve2): making interface the new active one [ 481.100636][T20338] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 481.262117][T20352] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3725'. [ 481.275202][T20352] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 481.593994][T20364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.617775][T20364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.819459][ T96] block nbd0: Possible stuck request ffff8880251f0000: control (read@0,1024B). Runtime 360 seconds [ 481.831771][ T96] block nbd0: Possible stuck request ffff8880251f01c0: control (read@1024,1024B). Runtime 360 seconds [ 481.843780][ T96] block nbd0: Possible stuck request ffff8880251f0380: control (read@2048,1024B). Runtime 360 seconds [ 481.855661][ T96] block nbd0: Possible stuck request ffff8880251f0540: control (read@3072,1024B). Runtime 360 seconds [ 481.905658][T20388] netlink: 'syz.2.3738': attribute type 19 has an invalid length. [ 481.930904][T20388] netlink: 'syz.2.3738': attribute type 19 has an invalid length. [ 481.930922][T14672] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.949781][T14672] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.959434][T14672] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.969271][T14672] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.189890][T20400] ip6tnl1: entered promiscuous mode [ 482.197226][T20400] ip6tnl1: entered allmulticast mode [ 482.204204][T20400] team0: Device ip6tnl1 is of different type [ 482.284834][T20397] wg1 speed is unknown, defaulting to 1000 [ 482.583488][T20416] team0: No ports can be present during mode change [ 482.618636][T17174] Bluetooth: hci4: command 0x0405 tx timeout [ 482.624866][T20379] delete_channel: no stack [ 483.159893][T20450] __nla_validate_parse: 9 callbacks suppressed [ 483.159916][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3756'. [ 483.199913][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3756'. [ 483.214370][T20450] netlink: 'syz.3.3756': attribute type 7 has an invalid length. [ 483.255640][T20452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3757'. [ 483.273719][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3756'. [ 483.349756][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3756'. [ 483.391825][T20454] veth1_to_bond: entered allmulticast mode [ 483.399882][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 483.411760][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'. [ 483.434253][T20450] netlink: 'syz.3.3756': attribute type 7 has an invalid length. [ 483.523040][T20454] bond0: (slave bond_slave_1): Releasing backup interface [ 483.640626][T20454] veth1_to_bond (unregistering): left allmulticast mode [ 483.665968][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3757'. [ 483.690794][T20452] netlink: 'syz.4.3757': attribute type 1 has an invalid length. [ 483.693350][T20458] wg1 speed is unknown, defaulting to 1000 [ 483.847193][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'. [ 483.891512][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'. [ 484.448646][T20482] wg1 speed is unknown, defaulting to 1000 [ 485.218748][T20513] wg1 speed is unknown, defaulting to 1000 [ 485.412902][T20523] geneve3: entered promiscuous mode [ 485.604141][T20532] wg1 speed is unknown, defaulting to 1000 [ 487.017334][T20622] bond0: mtu less than device minimum [ 487.124823][T20628] netlink: 'syz.3.3800': attribute type 30 has an invalid length. [ 487.213714][T20631] batadv1: entered promiscuous mode [ 487.223413][T20631] batadv1: entered allmulticast mode [ 487.305540][T20638] netlink: 'syz.3.3800': attribute type 30 has an invalid length. [ 487.319530][T20638] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 487.717628][T20642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.742963][T20642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.754473][T20642] bond0 (unregistering): Released all slaves [ 488.355646][T20683] __nla_validate_parse: 9 callbacks suppressed [ 488.355669][T20683] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3817'. [ 488.357561][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3818'. [ 488.444368][T20687] netlink: 'syz.4.3817': attribute type 8 has an invalid length. [ 488.605900][T20688] wg1 speed is unknown, defaulting to 1000 [ 488.998384][T20701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3819'. [ 489.284092][T20706] wg1 speed is unknown, defaulting to 1000 [ 489.500246][ T31] INFO: task udevd:5910 blocked for more than 143 seconds. [ 489.512365][ T31] Not tainted syzkaller #0 [ 489.520451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.531915][ T31] task:udevd state:D stack:21928 pid:5910 tgid:5910 ppid:1 task_flags:0x400140 flags:0x00004006 [ 489.589786][ T31] Call Trace: [ 489.593137][ T31] [ 489.596103][ T31] __schedule+0x1798/0x4cc0 [ 489.659988][ T31] ? __pfx___schedule+0x10/0x10 [ 489.665030][ T31] ? schedule+0x91/0x360 [ 489.692699][ T31] schedule+0x165/0x360 [ 489.707018][ T31] io_schedule+0x80/0xd0 [ 489.711953][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 489.718010][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 489.723910][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 489.735235][ T31] ? __filemap_get_folio+0x6e0/0xaf0 [ 489.740872][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 489.746207][ T31] do_read_cache_folio+0x1aa/0x590 [ 489.751794][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 489.757801][ T31] read_part_sector+0xb6/0x2b0 [ 489.762716][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 489.768262][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 489.773841][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 489.781026][ T31] bdev_disk_changed+0x75c/0x14b0 [ 489.786120][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 489.791975][ T31] ? wait_on_inode+0xc0/0x230 [ 489.797045][ T31] blkdev_get_whole+0x380/0x510 [ 489.801956][ T31] bdev_open+0x31e/0xd30 [ 489.806227][ T31] blkdev_open+0x457/0x600 [ 489.811145][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 489.816211][ T31] do_dentry_open+0x950/0x13f0 [ 489.821531][ T31] vfs_open+0x3b/0x340 [ 489.825837][ T31] ? path_openat+0x2ecd/0x3830 [ 489.831590][ T31] path_openat+0x2ee5/0x3830 [ 489.836468][ T31] ? arch_stack_walk+0xfc/0x150 [ 489.841842][ T31] ? stack_depot_save_flags+0x40/0x860 [ 489.847957][ T31] ? __pfx_path_openat+0x10/0x10 [ 489.853130][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.859477][ T31] do_filp_open+0x1fa/0x410 [ 489.864105][ T31] ? __lock_acquire+0xab9/0xd20 [ 489.869647][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 489.874798][ T31] ? _raw_spin_unlock+0x28/0x50 [ 489.879886][ T31] ? alloc_fd+0x64c/0x6c0 [ 489.884275][ T31] do_sys_openat2+0x121/0x1c0 [ 489.889420][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 489.894970][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.901221][ T31] ? rcu_is_watching+0x15/0xb0 [ 489.906051][ T31] __x64_sys_openat+0x138/0x170 [ 489.911218][ T31] do_syscall_64+0xfa/0x3b0 [ 489.915848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.922313][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 489.928153][ T31] ? clear_bhb_loop+0x60/0xb0 [ 489.933055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.939520][ T31] RIP: 0033:0x7f11a24a7407 [ 489.944084][ T31] RSP: 002b:00007ffe6ab5a8a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 489.953012][ T31] RAX: ffffffffffffffda RBX: 00007f11a2bd7880 RCX: 00007f11a24a7407 [ 489.961466][ T31] RDX: 00000000000a0800 RSI: 000055c1720cc480 RDI: ffffffffffffff9c [ 489.969836][ T31] RBP: 000055c1720cb910 R08: 0000000000000000 R09: 0000000000000000 [ 489.980207][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c1720ddb20 [ 489.989197][ T31] R13: 000055c1720d9190 R14: 0000000000000000 R15: 000055c1720ddb20 [ 489.997502][ T31] [ 490.000796][ T31] [ 490.000796][ T31] Showing all locks held in the system: [ 490.009134][ T31] 3 locks held by kworker/u8:1/13: [ 490.016925][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 490.037054][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 490.067078][ T31] #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 490.086924][ T31] 1 lock held by khungtaskd/31: [ 490.091850][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 490.116961][ T31] 2 locks held by getty/5619: [ 490.121723][ T31] #0: ffff8880303db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 490.146991][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 490.166970][ T31] 1 lock held by udevd/5910: [ 490.171632][ T31] #0: ffff888025131358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 490.216708][ T31] 2 locks held by kworker/0:10/6661: [ 490.222283][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 490.267031][ T31] #1: ffffc9000b687bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 490.308052][ T31] 3 locks held by kworker/1:13/6669: [ 490.313669][ T31] 1 lock held by syz-executor/18557: [ 490.328239][ T31] 3 locks held by syz.2.3822/20706: [ 490.333603][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 490.366577][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 490.396573][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 490.416578][ T31] 1 lock held by syz.4.3824/20713: [ 490.421757][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 490.483556][ T31] [ 490.486129][ T31] ============================================= [ 490.486129][ T31] [ 490.517040][ T31] NMI backtrace for cpu 0 [ 490.517064][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.517086][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.517097][ T31] Call Trace: [ 490.517105][ T31] [ 490.517114][ T31] dump_stack_lvl+0x189/0x250 [ 490.517147][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.517170][ T31] ? __pfx__printk+0x10/0x10 [ 490.517210][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 490.517242][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 490.517282][ T31] ? __pfx__printk+0x10/0x10 [ 490.517314][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.517347][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 490.517377][ T31] watchdog+0xf93/0xfe0 [ 490.517409][ T31] ? watchdog+0x1de/0xfe0 [ 490.517442][ T31] kthread+0x70e/0x8a0 [ 490.517470][ T31] ? __pfx_watchdog+0x10/0x10 [ 490.517495][ T31] ? __pfx_kthread+0x10/0x10 [ 490.517519][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.517548][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.517565][ T31] ? __pfx_kthread+0x10/0x10 [ 490.517590][ T31] ret_from_fork+0x439/0x7d0 [ 490.517614][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 490.517641][ T31] ? __switch_to_asm+0x39/0x70 [ 490.517664][ T31] ? __switch_to_asm+0x33/0x70 [ 490.517686][ T31] ? __pfx_kthread+0x10/0x10 [ 490.517711][ T31] ret_from_fork_asm+0x1a/0x30 [ 490.517753][ T31] [ 490.517760][ T31] Sending NMI from CPU 0 to CPUs 1: [ 490.666901][ C1] NMI backtrace for cpu 1 [ 490.666920][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 490.666938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.666947][ C1] RIP: 0010:__lock_acquire+0xe/0xd20 [ 490.666974][ C1] Code: 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 <48> 89 fb 65 48 8b 3c 25 08 d0 a0 92 45 31 ff 83 3d 0c 60 06 0e 00 [ 490.666987][ C1] RSP: 0018:ffffc90000a08930 EFLAGS: 00000086 [ 490.667001][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 490.667011][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b8725918 [ 490.667021][ C1] RBP: ffffffff81acf3fe R08: 0000000000000001 R09: 0000000000000001 [ 490.667031][ C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000000 [ 490.667042][ C1] R13: ffff8880b8725918 R14: 0000000000000001 R15: 0000000000000046 [ 490.667059][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 490.667071][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.667081][ C1] CR2: 000020000000d030 CR3: 000000002e99a000 CR4: 00000000003526f0 [ 490.667097][ C1] Call Trace: [ 490.667104][ C1] [ 490.667115][ C1] ? __mod_timer+0x1ae/0xf30 [ 490.667132][ C1] lock_acquire+0x120/0x360 [ 490.667151][ C1] ? __mod_timer+0x1ae/0xf30 [ 490.667167][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 490.667193][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 490.667214][ C1] ? __mod_timer+0x1ae/0xf30 [ 490.667230][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 490.667256][ C1] ? debug_object_assert_init+0x20e/0x380 [ 490.667280][ C1] __mod_timer+0x1ae/0xf30 [ 490.667299][ C1] ? __get_random_u32_below+0x3e/0x90 [ 490.667320][ C1] call_timer_fn+0x17b/0x5f0 [ 490.667339][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 490.667360][ C1] ? call_timer_fn+0xbe/0x5f0 [ 490.667378][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 490.667401][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.667422][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.667437][ C1] ? __pfx_garp_join_timer+0x10/0x10 [ 490.667458][ C1] __run_timer_base+0x61a/0x860 [ 490.667476][ C1] ? ktime_get+0x3e/0x1f0 [ 490.667496][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 490.667513][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 490.667544][ C1] run_timer_softirq+0xb7/0x180 [ 490.667563][ C1] handle_softirqs+0x283/0x870 [ 490.667580][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 490.667596][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 490.667612][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 490.667632][ C1] __irq_exit_rcu+0xca/0x1f0 [ 490.667646][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 490.667664][ C1] irq_exit_rcu+0x9/0x30 [ 490.667677][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 490.667692][ C1] [ 490.667697][ C1] [ 490.667703][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 490.667718][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 490.667734][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 490.667746][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 490.667759][ C1] RAX: fa333299f50c7e00 RBX: ffffffff819683f8 RCX: fa333299f50c7e00 [ 490.667770][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba51c RDI: ffffffff8be33f00 [ 490.667780][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 490.667791][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39030 [ 490.667801][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d7b40 [ 490.667812][ C1] ? do_idle+0x1e8/0x510 [ 490.667831][ C1] default_idle+0x13/0x20 [ 490.667846][ C1] default_idle_call+0x74/0xb0 [ 490.667863][ C1] do_idle+0x1e8/0x510 [ 490.667878][ C1] ? __pfx_do_idle+0x10/0x10 [ 490.667890][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.667912][ C1] cpu_startup_entry+0x44/0x60 [ 490.667926][ C1] start_secondary+0x101/0x110 [ 490.667945][ C1] common_startup_64+0x13e/0x147 [ 490.667971][ C1] [ 490.669190][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 491.084065][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 491.093269][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.103422][ T31] Call Trace: [ 491.106797][ T31] [ 491.109920][ T31] dump_stack_lvl+0x99/0x250 [ 491.114612][ T31] ? __asan_memcpy+0x40/0x70 [ 491.119276][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.124483][ T31] ? __pfx__printk+0x10/0x10 [ 491.129118][ T31] vpanic+0x281/0x750 [ 491.133127][ T31] ? __pfx_vpanic+0x10/0x10 [ 491.137634][ T31] ? preempt_schedule+0xae/0xc0 [ 491.142491][ T31] ? preempt_schedule_common+0x83/0xd0 [ 491.148046][ T31] panic+0xb9/0xc0 [ 491.151857][ T31] ? __pfx_panic+0x10/0x10 [ 491.156457][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 491.161940][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 491.168117][ T31] watchdog+0xfd2/0xfe0 [ 491.172294][ T31] ? watchdog+0x1de/0xfe0 [ 491.176733][ T31] kthread+0x70e/0x8a0 [ 491.180920][ T31] ? __pfx_watchdog+0x10/0x10 [ 491.185693][ T31] ? __pfx_kthread+0x10/0x10 [ 491.190294][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.195519][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.200813][ T31] ? __pfx_kthread+0x10/0x10 [ 491.205414][ T31] ret_from_fork+0x439/0x7d0 [ 491.210017][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 491.215318][ T31] ? __switch_to_asm+0x39/0x70 [ 491.220095][ T31] ? __switch_to_asm+0x33/0x70 [ 491.224869][ T31] ? __pfx_kthread+0x10/0x10 [ 491.229557][ T31] ret_from_fork_asm+0x1a/0x30 [ 491.234520][ T31] [ 491.240384][ T31] Kernel Offset: disabled [ 491.244710][ T31] Rebooting in 86400 seconds..